clojure

respatialized 2026-02-21T19:21:09.577249Z

If a jar is released on GitHub, is there any way to point at a GitHub release artifact using deps.edn-style Maven coordinates?

dpsutton 2026-02-21T19:26:19.038119Z

Have a link to the release?

respatialized 2026-02-21T19:27:42.413009Z

https://github.com/validator/validator/releases

respatialized 2026-02-21T19:28:02.883289Z

frankly, not sure I want to use a library that doesn't let me know which version of the code I'm installing

dpsutton 2026-02-21T19:33:41.425089Z

i think you can use the versions they publish to maven central. they seem to use yy.m.d format. so there’s nu.validator/validator {:mvn/version "26.2.19"} from 2-19-26

dpsutton 2026-02-21T19:34:20.908399Z

❯ clj -Sdeps '{:deps {nu.validator/validator {:mvn/version "26.2.19"}}}'
Downloading: nu/validator/validator/26.2.19/validator-26.2.19.pom from central
...
Clojure 1.12.1
user=>

dpsutton 2026-02-21T19:35:17.597739Z

but back to your original question, seems like you’d have to download the jar manually and then local ref it in clojure clj -Sdeps '{:deps {nu/validator {:local/source "<path to jar>"}}}

respatialized 2026-02-21T19:35:50.700939Z

if the official docs say "only use latest", how exactly do I know that the version on central actually is the official jar?

dpsutton 2026-02-21T19:35:59.673999Z

their readme

dpsutton 2026-02-21T19:36:20.454079Z

then go look at what is hosted on maven, see they have a release from 2 days ago

2026-02-21T20:21:04.888569Z

LATEST is a specific pseudo version in maven, very problematic