[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#891136: ITP: tools-deps-alpha-clojure -- functional API for dependency management and classpath creation



Okay, since I got a bug report about this, let's take a look at this
again for the latest tools.deps.alpha release 0.5.422. From deps.edn:

org.clojure/clojure {:mvn/version "1.9.0"}

* Good here: https://tracker.debian.org/pkg/clojure

org.apache.maven.resolver/maven-resolver-api {:mvn/version "1.1.1"}
org.apache.maven.resolver/maven-resolver-spi {:mvn/version "1.1.1"}
org.apache.maven.resolver/maven-resolver-impl {:mvn/version "1.1.1"}
org.apache.maven.resolver/maven-resolver-util {:mvn/version "1.1.1"}
org.apache.maven.resolver/maven-resolver-connector-basic {:mvn/version "1.1.1"}
org.apache.maven.resolver/maven-resolver-transport-file {:mvn/version "1.1.1"}
org.apache.maven.resolver/maven-resolver-transport-http {:mvn/version "1.1.1"}
org.apache.maven.resolver/maven-resolver-transport-wagon {:mvn/version "1.1.1"}

* Good here: https://tracker.debian.org/pkg/maven-resolver

org.apache.maven/maven-resolver-provider {:mvn/version "3.5.2"}
org.apache.maven/maven-core {:mvn/version "3.5.2"}
org.apache.maven/maven-settings-builder {:mvn/version "3.5.2"}

* We have 3.5.3, shouldn't be an issue: https://tracker.debian.org/pkg/maven

org.slf4j/slf4j-nop {:mvn/version "1.6.2"}

* We have 1.7.25, shouldn't be an issue: https://tracker.debian.org/pkg/libslf4j-java

org.clojure/data.xml {:mvn/version "0.2.0-alpha5"}

* This one might be a little hairy. We currently have 0.0.8 in Debian.
  Leiningen (and possibly other libraries) depend on it. If it's fully
  backwards compatible, we can upgrade. But we might wanna try being
  conservative and patch upstream.

s3-wagon-private {:mvn/version "1.3.1" :exclusions [ch.qos.logback/logback-classic]}

* We do not have this one.

org.clojure/tools.gitlibs {:mvn/version "0.2.64"}

* We do not have this one.

org.clojure/tools.cli {:mvn/version "0.3.5"}

* Good here: https://tracker.debian.org/pkg/tools-cli-clojure


Okay, that leaves us with new uploads needed for:

s3-wagon-private {:mvn/version "1.3.1" :exclusions [ch.qos.logback/logback-classic]}
org.clojure/tools.gitlibs {:mvn/version "0.2.64"}

Let's recurse. With the help of lein:

[s3-wagon-private "1.3.1"]
  [com.amazonaws/aws-java-sdk-s3 "1.11.184" :exclusions
  [[com.fasterxml.jackson.core/jackson-core]
  [com.fasterxml.jackson.core/jackson-databind]]]
    [com.amazonaws/aws-java-sdk-core "1.11.184"]
      [com.fasterxml.jackson.dataformat/jackson-dataformat-cbor "2.6.7"]
      [commons-logging "1.1.3"]
      [joda-time "2.8.1"]
      [software.amazon.ion/ion-java "1.0.2"]
    [com.amazonaws/aws-java-sdk-kms "1.11.184"]
    [com.amazonaws/jmespath-java "1.11.184"]
  [com.fasterxml.jackson.core/jackson-core "2.5.5"]
  [com.fasterxml.jackson.core/jackson-databind "2.5.5"]
    [com.fasterxml.jackson.core/jackson-annotations "2.5.0"]
  [org.springframework.build/aws-maven "4.8.0.RELEASE" :exclusions [[com.amazonaws/aws-java-sdk]]]
    [org.slf4j/jcl-over-slf4j "1.7.5"]
    [org.slf4j/slf4j-api "1.7.5"]

Of s3-private-wagon's deps, we're also missing
com.amazonaws/aws-java-sdk-s3 (and its deps
com.amazonaws/aws-java-sdk-core software.amazon.ion/ion-java
com.amazonaws/aws-java-sdk-kms com.amazonaws/jmespath-java) and
org.springframework.build/aws-maven; everything else looks okay.

[org.clojure/tools.gitlibs "0.2.64"]
  [com.jcraft/jsch.agentproxy.connector-factory "0.0.9"]
    [com.jcraft/jsch.agentproxy.core "0.0.9"]
    [com.jcraft/jsch.agentproxy.pageant "0.0.9"]
    [com.jcraft/jsch.agentproxy.sshagent "0.0.9"]
    [com.jcraft/jsch.agentproxy.usocket-jna "0.0.9"]
      [net.java.dev.jna/jna-platform "4.1.0"]
      [net.java.dev.jna/jna "4.1.0"]
    [com.jcraft/jsch.agentproxy.usocket-nc "0.0.9"]
  [com.jcraft/jsch.agentproxy.jsch "0.0.9"]
  [org.eclipse.jgit "4.10.0.201712302008-r"]
    [com.googlecode.javaewah/JavaEWAH "1.1.6"]
    [com.jcraft/jsch "0.1.54"]
    [org.apache.httpcomponents/httpclient "4.5.2"]
      [commons-codec "1.9"]
      [org.apache.httpcomponents/httpcore "4.4.4"]

libjsch-agent-proxy-java is in Debian but needs a version bump from
0.0.8 to 0.0.9. jgit is also in Debian but needs a major version bump
from 3.7.1 to 4.10.0.


In summary...

Needs version bump:
- data-xml-clojure to 0.2.0-alpha5
- libjsch-agent-proxy-java to 0.0.9
- jgit to 4.10.0

Needs new upload:
- s3-wagon-private "1.3.1"
- com.amazonaws/aws-java-sdk-core "1.11.184"
- com.amazonaws/aws-java-sdk-kms "1.11.184"
- com.amazonaws/aws-java-sdk-s3 "1.11.184"
- software.amazon.ion/ion-java "1.0.2"
- com.amazonaws/jmespath-java "1.11.184"
- org.springframework.build/aws-maven "4.8.0.RELEASE"
- org.clojure/tools.gitlibs "0.2.64"

I'm happy to package the two new Clojure dependencies, s3-wagon-private
and tools-gitlibs. Anyone wanna package some AWS Java stuff?

- e

Attachment: signature.asc
Description: Digital signature


Reply to: