Mathieu Lirzin <[email protected]> writes:
My recommandation is similar to what Kristiyan has done. I am
perfectly
fine with the usage of maven-3.8-core as input to
clojure-tools-deps
package. However as you suggested I am in favour of depending on
maven-resolver-1.8 instead of maven-resolver-1.6 because this is
safer
to depends on a minor version that matches what is distributed
in the
upstream clojure-tools bundle JAR.
Thanks. I'm no expert in analysing JAR files, but upstream
clojure-tools does appear to be depending on maven-resolver
1.8. The linux-install.sh fetches
https://github.com/clojure/brew-install/releases/download/1.12.4.1602/clojure-tools-1.12.4.1602.tar.gz
which installs the included
clojure-tools/clojure-tools-1.12.4.1602.jar. That JAR has
META-INF/maven/org.apache.maven.resolver/maven-resolver-api/pom.properties,
which lists:
artifactId=maven-resolver-api
groupId=org.apache.maven.resolver
version=1.8.2
Same for the include JAR in Guix's very slightly older version
1.12.4.1582.
Regards,
Ben