Fork me on GitHub
#announcements
<
2024-03-08
>
Alex Miller (Clojure team)15:03:02

Clojure 1.11.2 and 1.12.0-alpha9 are now available. These releases include a fix for CVE https://nvd.nist.gov/vuln/detail/CVE-2024-22871 detailed in https://github.com/advisories/GHSA-vr64-r9qj-h27f: • https://clojure.atlassian.net/browse/CLJ-2839 - iterate, cycle, repeat - infinite seqs have infinite hashCode()

❤️ 29
🎉 7
🔒 1
🙏 2
clojure-spin 3
Alex Miller (Clojure team)15:03:24

I will do a Clojure CLI release to fix 1.11.2 up as the default later today

seancorfield21:03:37

We have 1.12 Alpha 9 on staging and I've updated most of my OSS projects to test against 1.11.2 and 1.12.0-alpha9 (and everything still passes).

seancorfield21:03:01

(oh, and we have the 1.11.2.1441 CLI vendored into our repo now)

Alex Miller (Clojure team)21:03:54

I have intentionally not announced that CLI release, was really just testing the new branch, will have another that actually defaults to 1.11.2 soon

seancorfield21:03:25

antq spotted it as available -- I didn't realize it wasn't "stable" yet...

Alex Miller (Clojure team)21:03:49

it is stable (nothing wrong with it), just doesn't default to 1.11.2 yet

1
akiel07:03:10

Hi Alex, why is v1.11.2 not mentioned in the https://github.com/clojure/clojure/blob/master/changes.md ?

Alex Miller (Clojure team)14:03:51

Haven’t added it yet

👍 1
seancorfield21:04:02

FYI: we just deployed 1.12.0-alpha9 to production (it was previously running 1.12.0-alpha8).

🎉 1
Alex Miller (Clojure team)23:03:22

Clojure CLI 1.11.2.1446 is now available • Update default Clojure version to 1.11.2 • Clojure -X:deps programs that create a basis now take a :dir option for the directory context to use • Updated tools.deps, tools.deps.cli to latest

🎉 17
👍 1