Mathieu Lirzin <[email protected]> writes:

My recommandation is similar to what Kristiyan has done. I am perfectly fine with the usage of maven-3.8-core as input to clojure-tools-deps
package. However as you suggested I am in favour of depending on
maven-resolver-1.8 instead of maven-resolver-1.6 because this is safer to depends on a minor version that matches what is distributed in the
upstream clojure-tools bundle JAR.

Thanks. I'm no expert in analysing JAR files, but upstream clojure-tools does appear to be depending on maven-resolver 1.8. The linux-install.sh fetches https://github.com/clojure/brew-install/releases/download/1.12.4.1602/clojure-tools-1.12.4.1602.tar.gz which installs the included clojure-tools/clojure-tools-1.12.4.1602.jar. That JAR has META-INF/maven/org.apache.maven.resolver/maven-resolver-api/pom.properties, which lists:

   artifactId=maven-resolver-api
   groupId=org.apache.maven.resolver
   version=1.8.2

Same for the include JAR in Guix's very slightly older version 1.12.4.1582.

Regards,
Ben



Reply via email to