Changelog

Bump stale deps, some of which had vulnerabilities (#134) (@lread)

Don’t accept empty but truthy :repositories (#133) (@vemv)

General quality

Upgrade wagon libs from 3.2.2 -> 3.3.4

Bump deps

Add deps.edn (@slipset)

Configure session to download signature checksums by default (#113) (@glts)

Prep for first release from clj-commons (@slipset)

Bad release, replaced by v1.2.0

Upgrade Maven Resolver dependencies (gh-103)

Ensure JDK 9 compatibility via dynapath 1.0.0. A non-trivial breaking change. Change is to avoid JDK 9’s warnings re: reflective calls into non-public methods, etc. This means URLClassLoaders are no longer modifiable by default. (gh-92)

Potentially breaking: Non-TLS HTTP repositories are unsupported; using a "bare" HTTP repository now requires registering a "wagon" for the insecure transport method (gh-83)

Switched/upgraded from Sonatype Aether to Maven-resolver (gh-80)

Upgraded to Maven 3.5.0 (gh-83)

add-dependencies now allows you to specify which ClassLoader to modify (gh-63)

Repository names can now be any Named value (strings, keywords, or symbols) (gh-84)

Some previously-internal functions are now marked as public: merge-versions-from-managed-coords (gh-74), and dependency and make-repository (gh-69)

Add support for "managed" dependencies in resolve-dependencies (gh-72)

Added cemerick.pomegranate.aether/resolve-artifacts, which allows for the resolution of a sequence of artifacts, without doing transitive resolution on their dependencies. (gh-57)

Provide an error if a registered wagon factory fails to instantiate (gh-58)

The URLClasspath protocol has been removed in favor of using dynapath's DynamicClasspath protocol. (gh-43) breaking change

classloader-hierarchy now starts at the current thread context classloader instead of Clojure’s "baseLoader". breaking change

New resources and classloader-resources fns for determining from which classloader(s) a given resource is available (gh-48)

install-artifacts and deploy-artifacts are now generalized to operate over multiple files (vs. the prior assumptions re: an artifact + a POM) (gh-52)

resolve-dependencies* now available that returns the bare Aether results of dependency resolution, sans Clojure-friendly graphification (gh-50)

resolve-dependencies, install-artifacts, and deploy-artifacts now accept an optional :repository-session-fn to potentially modify the Aether RespositorySystemSession prior to its use (gh-56)