Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump org.clojure:clojure from 1.10.0 to 1.11.0 in /dummy #27

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

github-actions[bot]
Copy link

Bumps org.clojure:clojure from 1.10.0 to 1.11.0.

Changelog

Sourced from org.clojure:clojure's changelog.

Changes to Clojure in Version 1.11.0

1 Compatibility

1.1 Security

Because XML external entity (XXE) attacks can be used to disclose local files using file schemes or relative paths in the system identifier, clojure.xml/parse now disables external entity processing by default.

See: https://owasp.org/www-community/vulnerabilities/XML_External_Entity_(XXE)_Processing

This change disables the following SAX parser features:

  • http://apache.org/xml/features/nonvalidating/load-external-dtd
  • http://xml.org/sax/features/external-general-entities
  • http://xml.org/sax/features/external-parameter-entities

If you rely on these features, modify your calls to clojure.xml/parse to explicitly supply startparse-sax function as the final argument: (clojure.xml/parse the-string clojure.xml/startparse-sax) This modification also works on prior Clojure versions.

  • CLJ-2611 clojure.xml now disables XXE processing by default

1.2 Dependencies

Updated dependencies:

  • spec.alpha dependency to 0.3.218 - changes
  • core.specs.alpha dependency to 0.2.62 - changes

2 Features

2.1 Keyword argument functions take a trailing map

Keyword arguments are optional trailing variadic arguments of the form akey aval bkey bval...​. In Clojure 1.11, functions taking keyword arguments can now be passed a map instead of or in addition to and following the key/value pairs. When a lone map is passed, it is used for destructuring, else a trailing map is added to the key/value pair map by conj.

Also see: https://clojure.org/news/2021/03/18/apis-serving-people-and-programs

  • CLJ-2603 Clojure keyword argument functions now also accept a map

2.2 :as-alias in require

Spec (and other libs) rely on qualified keywords as spec names. Namespace aliasing in ns makes long names shorter but required namespaces to be loadable. This change adds :as-alias to require, which is like :as but does not require the namespace to load.

  • CLJ-2123 Add :as-alias option to require like :as but not load

... (truncated)

Commits
  • f376cf6 [maven-release-plugin] prepare release clojure-1.11.0
  • 9af0d1d [maven-release-plugin] prepare for next development iteration
  • 0971ce2 [maven-release-plugin] prepare release clojure-1.11.0-rc1
  • 7b102d8 CLJ-2695: parse-double test does not test out-of range values
  • 3fbdffa Changelog updates for 1.11
  • 8481165 [maven-release-plugin] prepare for next development iteration
  • 16c91f2 [maven-release-plugin] prepare release clojure-1.11.0-beta1
  • 658693f CLJ-1973: sort proxy methods for reproducibility
  • 8957a93 CLJ-1180 Resolve classname for tag metadata on defprotocol
  • fc98f92 CLJ-2620: io-prepl now calls valf on exeception data in the case where an exc...
  • Additional commits viewable in compare view

@github-actions github-actions bot added clojure Pull requests that update Clojure code dependencies Pull requests that update a dependency file labels Mar 23, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
clojure Pull requests that update Clojure code dependencies Pull requests that update a dependency file
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants