taoensso / faraday

Amazon DynamoDB client for Clojure
https://www.taoensso.com/faraday
Eclipse Public License 1.0
238 stars 84 forks source link

Upgrade and fix confusing dependencies #155

Closed kipz closed 3 years ago

kipz commented 3 years ago

Thought I'd take a quick look at the projects dependencies with a view to keeping things patched for security reasons, and I stumbled on this:

https://github.com/ptaoussanis/nippy/issues/130

This PR upgrades nippy to a version that fixes the vulnerability.

I wouldn't have thought this change will break uses of Faraday.

PR also changes the default dev profile to use Clojure 1.10.x - which seems reasonable I think?