nippy/project.clj

(defproject com.taoensso/nippy "3.2.0"
  :author "Peter Taoussanis <https://www.taoensso.com>"
  :description "High-performance serialization library for Clojure"
  :url "https://github.com/ptaoussanis/nippy"
  :license {:name "Eclipse Public License"
            :url  "http://www.eclipse.org/legal/epl-v10.html"
            :distribution :repo
            :comments "Same as Clojure"}
  :min-lein-version "2.3.3"
  :global-vars
  {*warn-on-reflection* true
   *assert*             true
   *unchecked-math*     false #_:warn-on-boxed}

  :dependencies
  [[org.clojure/tools.reader "1.3.6"]
   [com.taoensso/encore      "3.31.0"]
   [org.iq80.snappy/snappy   "0.4"]
   [org.tukaani/xz           "1.9"]
   [org.lz4/lz4-java         "1.8.0"]]

  :plugins
  [[lein-pprint  "1.3.2"]
   [lein-ancient "0.7.0"]
   [lein-codox   "0.10.8"]]

  :profiles
  {;; :default [:base :system :user :provided :dev]
   :server-jvm {:jvm-opts ^:replace ["-server" "-Xms1024m" "-Xmx2048m"]}
   :provided {:dependencies [[org.clojure/clojure "1.11.1"]]}
   :c1.11    {:dependencies [[org.clojure/clojure "1.11.1"]]}
   :c1.10    {:dependencies [[org.clojure/clojure "1.10.1"]]}
   :c1.9     {:dependencies [[org.clojure/clojure "1.9.0"]]}

   :depr     {:jvm-opts ["-Dtaoensso.elide-deprecated=true"]}
   :dev      [:c1.11 :test :server-jvm :depr]
   :test
   {:jvm-opts
    ["-Xms1024m" "-Xmx2048m"
     "-Dtaoensso.nippy.thaw-serializable-allowlist-base=base.1, base.2"
     "-Dtaoensso.nippy.thaw-serializable-allowlist-add=add.1 , add.2"]
    :dependencies
    [[org.clojure/test.check        "1.1.1"]
     [org.clojure/data.fressian     "1.0.0"]
     [org.xerial.snappy/snappy-java "1.1.8.4"]]}}

  :test-paths ["test" #_"src"]

  :aliases
  {"start-dev"  ["with-profile" "+dev" "repl" ":headless"]
   "deploy-lib" ["do" ["build-once"] ["deploy" "clojars"] ["install"]]

   "test-all"
   ["do" ["clean"]
    "with-profile" "+c1.11:+c1.10:+c1.9" "test"]}

  :repositories
  {"sonatype-oss-public"
   "https://oss.sonatype.org/content/groups/public/"})
v3.2.0 2022-07-18 2022-07-18 07:21:55 +00:00			`(defproject com.taoensso/nippy "3.2.0"`
Update project.clj 2014-02-23 11:45:53 +00:00			`:author "Peter Taoussanis <https://www.taoensso.com>"`
Bump deps 2016-01-23 04:10:17 +00:00			`:description "High-performance serialization library for Clojure"`
Initial structure commit. 2012-07-06 12:53:02 +00:00			`:url "https://github.com/ptaoussanis/nippy"`
Add EPL URL to project.clj 2013-06-03 06:52:45 +00:00			`:license {:name "Eclipse Public License"`
Update project.clj 2014-02-23 11:45:53 +00:00			`:url "http://www.eclipse.org/legal/epl-v10.html"`
			`:distribution :repo`
			`:comments "Same as Clojure"}`
			`:min-lein-version "2.3.3"`
[nop] Update project.clj, build.yml 2022-10-13 16:27:17 +00:00			`:global-vars`
			`{warn-on-reflection true`
			`assert true`
			`unchecked-math false #_:warn-on-boxed}`
Update project.clj template 2014-07-05 07:43:24 +00:00
Update project.clj 2014-02-23 11:45:53 +00:00			`:dependencies`
Bump deps 2022-06-23 08:47:11 +00:00			`[[org.clojure/tools.reader "1.3.6"]`
[nop] Update project.clj, build.yml 2022-10-13 16:27:17 +00:00			`[com.taoensso/encore "3.31.0"]`
Bump deps 2015-08-07 17:13:59 +00:00			`[org.iq80.snappy/snappy "0.4"]`
Bump deps 2022-06-23 08:47:11 +00:00			`[org.tukaani/xz "1.9"]`
			`[org.lz4/lz4-java "1.8.0"]]`
Update project.clj 2014-02-23 11:45:53 +00:00
Update project.clj, bump deps 2020-08-29 12:18:46 +00:00			`:plugins`
			`[[lein-pprint "1.3.2"]`
Bump deps 2022-06-23 08:47:11 +00:00			`[lein-ancient "0.7.0"]`
			`[lein-codox "0.10.8"]]`
Update project.clj, bump deps 2020-08-29 12:18:46 +00:00
Update project.clj 2014-02-23 11:45:53 +00:00			`:profiles`
Fix project.clj to prevent unnecessary downstream deps 2014-02-26 09:35:04 +00:00			`{;; :default [:base :system :user :provided :dev]`
Update project.clj template 2014-07-05 07:43:24 +00:00			`:server-jvm {:jvm-opts ^:replace ["-server" "-Xms1024m" "-Xmx2048m"]}`
[nop] Update project.clj, build.yml 2022-10-13 16:27:17 +00:00			`:provided {:dependencies [[org.clojure/clojure "1.11.1"]]}`
			`:c1.11 {:dependencies [[org.clojure/clojure "1.11.1"]]}`
			`:c1.10 {:dependencies [[org.clojure/clojure "1.10.1"]]}`
			`:c1.9 {:dependencies [[org.clojure/clojure "1.9.0"]]}`

Update project.clj, bump deps 2020-08-29 12:18:46 +00:00			`:depr {:jvm-opts ["-Dtaoensso.elide-deprecated=true"]}`
[nop] Update project.clj, build.yml 2022-10-13 16:27:17 +00:00			`:dev [:c1.11 :test :server-jvm :depr]`
Update project.clj, bump deps 2020-08-29 12:18:46 +00:00			`:test`
			`{:jvm-opts`
			`["-Xms1024m" "-Xmx2048m"`
[BREAKING][#130] Serializable: split serializable-whitelist into separate freeze/thaw lists Removed 2x vars: - serializable-whitelist - swap-serializable-whitelist! Added 4x vars: - freeze-serializable-allowlist - thaw-serializable-allowlist - swap-freeze-serializable-allowlist! - swap-thaw-serializable-allowlist! Deprecated 2x JVM properties: - taoensso.nippy.serializable-whitelist-base - taoensso.nippy.serializable-whitelist-add Deprecated 2x ENV vars: - TAOENSSO_NIPPY_SERIALIZABLE_WHITELIST_BASE - TAOENSSO_NIPPY_SERIALIZABLE_WHITELIST_ADD API is otherwise identical. MOTIVATION An API break is unfortunate- but the break here is small, and the benefit significant. By separating the freeze/thaw lists, it becomes possible to safely allow any classes to be frozen - and so effectively make the allowlist a purely thaw-time concern in the common case. This has several advantages including: - No risk of Nippy calls unexpectedly throwing where they didn't before. - The ability to adjust or bypass the thaw allowlist after seeing which class objects have been quarantined. In general: this change eases migration to RCE-safe Nippy from RCE-vulnerable versions. This is especially useful in cases where Nippy is being used as an ~implementation detail for another library/application/service. 2020-09-10 16:42:25 +00:00			`"-Dtaoensso.nippy.thaw-serializable-allowlist-base=base.1, base.2"`
			`"-Dtaoensso.nippy.thaw-serializable-allowlist-add=add.1 , add.2"]`
Update project.clj, bump deps 2020-08-29 12:18:46 +00:00			`:dependencies`
Bump deps 2022-06-23 08:47:11 +00:00			`[[org.clojure/test.check "1.1.1"]`
Update project.clj, bump deps 2020-08-29 12:18:46 +00:00			`[org.clojure/data.fressian "1.0.0"]`
[nop] Update project.clj, build.yml 2022-10-13 16:27:17 +00:00			`[org.xerial.snappy/snappy-java "1.1.8.4"]]}}`
Update project.clj template 2014-07-05 07:43:24 +00:00
[nop] Update project.clj, build.yml 2022-10-13 16:27:17 +00:00			`:test-paths ["test" #_"src"]`
Bump deps 2015-12-01 06:00:53 +00:00
Update project.clj 2014-02-23 11:45:53 +00:00			`:aliases`
Update project.clj, bump deps 2020-08-29 12:18:46 +00:00			`{"start-dev" ["with-profile" "+dev" "repl" ":headless"]`
[nop] Update project.clj, build.yml 2022-10-13 16:27:17 +00:00			`"deploy-lib" ["do" ["build-once"] ["deploy" "clojars"] ["install"]]`

			`"test-all"`
			`["do" ["clean"]`
			`"with-profile" "+c1.11:+c1.10:+c1.9" "test"]}`
Update project.clj 2014-02-23 11:45:53 +00:00
Update project.clj, bump deps 2020-08-29 12:18:46 +00:00			`:repositories`
			`{"sonatype-oss-public"`
			`"https://oss.sonatype.org/content/groups/public/"})`