nippy/project.clj

(defproject com.taoensso/nippy "2.15.3"
  :author "Peter Taoussanis <https://www.taoensso.com>"
  :description "High-performance serialization library for Clojure"
  :url "https://github.com/ptaoussanis/nippy"
  :license {:name "Eclipse Public License"
            :url  "http://www.eclipse.org/legal/epl-v10.html"
            :distribution :repo
            :comments "Same as Clojure"}
  :min-lein-version "2.3.3"
  :global-vars {*warn-on-reflection* true
                *assert*             true
                ;; *unchecked-math*  :warn-on-boxed
                }

  :dependencies
  [[org.clojure/tools.reader "1.3.3"]
   [com.taoensso/encore      "3.0.0"]
   [org.iq80.snappy/snappy   "0.4"]
   [org.tukaani/xz           "1.8"]
   [org.lz4/lz4-java         "1.7.1"]]

  :plugins
  [[lein-pprint  "1.3.2"]
   [lein-ancient "0.6.15"]
   [lein-codox   "0.10.7"]]

  :profiles
  {;; :default [:base :system :user :provided :dev]
   :server-jvm {:jvm-opts ^:replace ["-server" "-Xms1024m" "-Xmx2048m"]}
   :provided {:dependencies [[org.clojure/clojure "1.7.0"]]}
   :1.7      {:dependencies [[org.clojure/clojure "1.7.0"]]}
   :1.8      {:dependencies [[org.clojure/clojure "1.8.0"]]}
   :1.9      {:dependencies [[org.clojure/clojure "1.9.0"]]}
   :1.10     {:dependencies [[org.clojure/clojure "1.10.1"]]}
   :depr     {:jvm-opts ["-Dtaoensso.elide-deprecated=true"]}
   :test
   {:jvm-opts
    ["-Xms1024m" "-Xmx2048m"
     "-Dtaoensso.nippy.thaw-serializable-allowlist-base=base.1, base.2"
     "-Dtaoensso.nippy.thaw-serializable-allowlist-add=add.1 , add.2"]
    :dependencies
    [[org.clojure/test.check        "1.1.0"]
     [org.clojure/data.fressian     "1.0.0"]
     [org.xerial.snappy/snappy-java "1.1.7.7"]]}

   :dev [:1.10 :test :server-jvm :depr]}

  :aliases
  {"start-dev"  ["with-profile" "+dev" "repl" ":headless"]
   "deploy-lib" ["do" "deploy" "clojars," "install"]
   "test-all"   ["with-profile" "+1.10:+1.9:+1.8:+1.7" "test"]}

  :repositories
  {"sonatype-oss-public"
   "https://oss.sonatype.org/content/groups/public/"})
v2.15.3 2020-09-10 09:44:47 +00:00			`(defproject com.taoensso/nippy "2.15.3"`
Update project.clj 2014-02-23 11:45:53 +00:00			`:author "Peter Taoussanis <https://www.taoensso.com>"`
Bump deps 2016-01-23 04:10:17 +00:00			`:description "High-performance serialization library for Clojure"`
Initial structure commit. 2012-07-06 12:53:02 +00:00			`:url "https://github.com/ptaoussanis/nippy"`
Add EPL URL to project.clj 2013-06-03 06:52:45 +00:00			`:license {:name "Eclipse Public License"`
Update project.clj 2014-02-23 11:45:53 +00:00			`:url "http://www.eclipse.org/legal/epl-v10.html"`
			`:distribution :repo`
			`:comments "Same as Clojure"}`
			`:min-lein-version "2.3.3"`
			`:global-vars {warn-on-reflection true`
Bump deps 2015-03-20 08:17:15 +00:00			`assert true`
v2.12.0-RC1 2016-06-23 13:10:34 +00:00			`;; unchecked-math :warn-on-boxed`
Bump deps 2015-12-01 06:00:53 +00:00			`}`
Update project.clj template 2014-07-05 07:43:24 +00:00
Update project.clj 2014-02-23 11:45:53 +00:00			`:dependencies`
Update project.clj, bump deps 2020-08-29 12:18:46 +00:00			`[[org.clojure/tools.reader "1.3.3"]`
Bump Encore dep (v3.0.0) 2020-09-10 10:03:33 +00:00			`[com.taoensso/encore "3.0.0"]`
Bump deps 2015-08-07 17:13:59 +00:00			`[org.iq80.snappy/snappy "0.4"]`
Revert v2.14.2 hotfix reset 2020-07-24 17:38:16 +00:00			`[org.tukaani/xz "1.8"]`
			`[org.lz4/lz4-java "1.7.1"]]`
Update project.clj 2014-02-23 11:45:53 +00:00
Update project.clj, bump deps 2020-08-29 12:18:46 +00:00			`:plugins`
			`[[lein-pprint "1.3.2"]`
			`[lein-ancient "0.6.15"]`
			`[lein-codox "0.10.7"]]`

Update project.clj 2014-02-23 11:45:53 +00:00			`:profiles`
Fix project.clj to prevent unnecessary downstream deps 2014-02-26 09:35:04 +00:00			`{;; :default [:base :system :user :provided :dev]`
Update project.clj template 2014-07-05 07:43:24 +00:00			`:server-jvm {:jvm-opts ^:replace ["-server" "-Xms1024m" "-Xmx2048m"]}`
[BREAKING] Bump minimum Clojure 1.5->1.7 2020-09-10 10:03:12 +00:00			`:provided {:dependencies [[org.clojure/clojure "1.7.0"]]}`
Update project.clj, bump deps 2020-08-29 12:18:46 +00:00			`:1.7 {:dependencies [[org.clojure/clojure "1.7.0"]]}`
			`:1.8 {:dependencies [[org.clojure/clojure "1.8.0"]]}`
			`:1.9 {:dependencies [[org.clojure/clojure "1.9.0"]]}`
			`:1.10 {:dependencies [[org.clojure/clojure "1.10.1"]]}`
			`:depr {:jvm-opts ["-Dtaoensso.elide-deprecated=true"]}`
			`:test`
			`{:jvm-opts`
			`["-Xms1024m" "-Xmx2048m"`
[BREAKING][#130] Serializable: split serializable-whitelist into separate freeze/thaw lists Removed 2x vars: - serializable-whitelist - swap-serializable-whitelist! Added 4x vars: - freeze-serializable-allowlist - thaw-serializable-allowlist - swap-freeze-serializable-allowlist! - swap-thaw-serializable-allowlist! Deprecated 2x JVM properties: - taoensso.nippy.serializable-whitelist-base - taoensso.nippy.serializable-whitelist-add Deprecated 2x ENV vars: - TAOENSSO_NIPPY_SERIALIZABLE_WHITELIST_BASE - TAOENSSO_NIPPY_SERIALIZABLE_WHITELIST_ADD API is otherwise identical. MOTIVATION An API break is unfortunate- but the break here is small, and the benefit significant. By separating the freeze/thaw lists, it becomes possible to safely allow any classes to be frozen - and so effectively make the allowlist a purely thaw-time concern in the common case. This has several advantages including: - No risk of Nippy calls unexpectedly throwing where they didn't before. - The ability to adjust or bypass the thaw allowlist after seeing which class objects have been quarantined. In general: this change eases migration to RCE-safe Nippy from RCE-vulnerable versions. This is especially useful in cases where Nippy is being used as an ~implementation detail for another library/application/service. 2020-09-10 16:42:25 +00:00			`"-Dtaoensso.nippy.thaw-serializable-allowlist-base=base.1, base.2"`
			`"-Dtaoensso.nippy.thaw-serializable-allowlist-add=add.1 , add.2"]`
Update project.clj, bump deps 2020-08-29 12:18:46 +00:00			`:dependencies`
			`[[org.clojure/test.check "1.1.0"]`
			`[org.clojure/data.fressian "1.0.0"]`
			`[org.xerial.snappy/snappy-java "1.1.7.7"]]}`
Update project.clj template 2014-07-05 07:43:24 +00:00
Update project.clj, bump deps 2020-08-29 12:18:46 +00:00			`:dev [:1.10 :test :server-jvm :depr]}`
Bump deps 2015-12-01 06:00:53 +00:00
Update project.clj 2014-02-23 11:45:53 +00:00			`:aliases`
Update project.clj, bump deps 2020-08-29 12:18:46 +00:00			`{"start-dev" ["with-profile" "+dev" "repl" ":headless"]`
Fix project.clj to prevent unnecessary downstream deps 2014-02-26 09:35:04 +00:00			`"deploy-lib" ["do" "deploy" "clojars," "install"]`
[BREAKING] Bump minimum Clojure 1.5->1.7 2020-09-10 10:03:12 +00:00			`"test-all" ["with-profile" "+1.10:+1.9:+1.8:+1.7" "test"]}`
Update project.clj 2014-02-23 11:45:53 +00:00
Update project.clj, bump deps 2020-08-29 12:18:46 +00:00			`:repositories`
			`{"sonatype-oss-public"`
			`"https://oss.sonatype.org/content/groups/public/"})`