leiningen

technomancy 2026-05-15T15:34:54.991099Z

@tcrawley it looks like SSH signatures are being rejected from Clojars: https://p.hagelb.org/clojars-ssh.html

technomancy 2026-05-15T15:39:57.899129Z

you can repro by trying a non-snapshot clojars deploy from lein main

2026-05-15T18:00:15.051989Z

Looking now

technomancy 2026-05-15T18:02:07.098609Z

(also kinda looks like the new aether stuff messes up newlines in output?)

technomancy 2026-05-15T18:02:48.285689Z

is there a different file extension we should use to indicate that it's a signature?

technomancy 2026-05-15T18:05:51.150859Z

ah, it looks like .sig is canonical from ssh-keygen and not something lein controls

2026-05-15T18:06:48.009229Z

.sig is what clojars expects, so I'm still trying to figure out why this is failing, as there are tests that do the same as your deploy. I'll dig a bit more.

2026-05-15T18:07:39.723639Z

Regarding the newlines - I think the newer aether deploys in parallel, so we end up with interleaved output. I suspect we can do something about that, either serialize the uploads, or capture the output, or something. I can take a look.

technomancy 2026-05-15T18:15:42.734309Z

hm; we do manual locking during retrieval in l.c.classpath/get-dependencies* but that's because it's our own code doing the printing in that case.

technomancy 2026-05-15T18:16:35.643989Z

in the deploy case we just set transfer-listener to :stdout which I think makes pomegranate do the printing for us, so it'd have to be fixed there

2026-05-15T19:03:25.157849Z

Oh, I think I found the issue. Clojars doesn't properly handle it if you upload ssh /and/ gpg signatures. Working on a fix now.

2026-05-15T19:03:41.978779Z

I can look at pomegranate also (today, I think)

2026-05-15T19:29:46.180639Z

https://github.com/clojars/clojars-web/pull/948 should fix it. I'll deploy that once CI passes.

2026-05-15T19:36:55.290789Z

Putting up a fix for pomegranate now

2026-05-15T19:57:01.341259Z

.sig deploys should work now. @lee is cutting a pomegranate release to fix the interleaving; I'll put up a PR against lein once that is done to bump the pomegranate version.

technomancy 2026-05-15T22:18:27.757439Z

grand; thank you!

2026-05-15T22:18:40.099619Z

My pleasure!