A bit of humble-bragging. Todays release of clj-yaml is exactly the kind of thing I wanted for clj-commons. A CVE is published on a dep of an otherwise done library. A new version of the done library is out within hours, thanks to @tscrowley for submitting the PR!
And when I saw that release, I immediately bumped clj-yaml in bb :)