Bump org.clojure:clojure from 1.10.3 to 1.11.2 in the maven group across 1 directory#4
Bump org.clojure:clojure from 1.10.3 to 1.11.2 in the maven group across 1 directory#4dependabot[bot] wants to merge 1 commit intomainfrom
Conversation
Bumps the maven group with 1 update in the / directory: [org.clojure:clojure](https://github.com/clojure/clojure). Updates `org.clojure:clojure` from 1.10.3 to 1.11.2 - [Changelog](https://github.com/clojure/clojure/blob/master/changes.md) - [Commits](clojure/clojure@clojure-1.10.3...clojure-1.11.2) --- updated-dependencies: - dependency-name: org.clojure:clojure dependency-version: 1.11.2 dependency-type: direct:production dependency-group: maven ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
bot
added
dependencies
![chatgpt-codex-connector[bot]](https://avatars.githubusercontent.com/in/1144995?s=60&v=4){kind=small}
There was a problem hiding this comment.
💡 Codex Review
Here are some automated review suggestions for this pull request.
Reviewed commit: 9a14024a49
ℹ️ About Codex in GitHub
Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you
- Open a pull request for review
- Mark a draft as ready
- Comment "@codex review".
If Codex has suggestions, it will comment; otherwise it will react with 👍.
When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".
| <groupId>org.clojure</groupId> | ||
| <artifactId>clojure</artifactId> | ||
| <version>1.10.3</version> | ||
| <version>1.11.2</version> |
There was a problem hiding this comment.
Changing only pom.xml to 1.11.2 leaves the actively used Clojure coordinates in deps.edn (deps.edn:2) and the generated template (resources/clj/new/clj_lambda/deps.edn:2) pinned to 1.10.3, so local clojure -X/-T workflows and generated projects continue running the old runtime. This makes the security/version bump incomplete and can produce inconsistent behavior depending on whether tooling reads Maven POM vs deps.edn.
Useful? React with 👍 / 👎.
Bumps the maven group with 1 update in the / directory: org.clojure:clojure.
Updates
org.clojure:clojurefrom 1.10.3 to 1.11.2Changelog
Sourced from org.clojure:clojure's changelog.
... (truncated)
Commits
218054f[maven-release-plugin] prepare release clojure-1.11.263474dbupdate pom to snapshot version5366a0eadd github actions to clojure-1.11-dev branch777456fCLJ-2839 Infinite seq class hashCode() is infinite loopce55092[maven-release-plugin] prepare release clojure-1.11.1cef38ab[maven-release-plugin] prepare for next development iteration3f1c36d[maven-release-plugin] prepare release clojure-1.11.1-rc1e917dccUpdate changelog for 1.11.11da6b07CLJ-2701 Set serialVersionUIDs for Keyword and ArraySeq to retain 1.10.3 values48818bd[maven-release-plugin] prepare for next development iterationDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditionsYou can disable automated security fix PRs for this repo from the Security Alerts page.