As with the last release, there’s very little exciting to report. The focus this time has been closing PRs:
- A couple of dependabot updates of no particular interest to anyone. Since I did this, there’s already two more dependabot PRs. The fight against CVEs is never-ending.
- Speaking of dependency updates, the project now uses antq as a replacement for lein ancient and almost everything has been updated. This replicates an AI PR by BuddhiLW. It’s slightly unfortunate but I was already in the middle of a patch for this.
- dfrese wrote a patch to try harder to avoid the code generating a bare js/require.
AI generated PRs are a whole topic for pretty much every open source project and I was hoping to not have to deal with that, but I’ve now received three of them (not advertised as such, but also not disguised). I still think all PRs have to have human oversight , not least because supply chain attacks are getting more and more frequent. But if the PR contributes to the progress of the project, I’m not going to block it. However, the usual caveats about my slowness apply.
A couple of PRs didn’t get merged because they don’t take the project where I want it to go. In particular, the next beta should retire apache httpx and replace it with the Java HTTP library. This will have a knock-on effect of moving the minimum version to Java 11. I don’t really anticipate anyone having a problem with that. I’m also hoping to develop a new default cljs HTTP adapter using fetch. It was only patchily supported when I last worked on the project but now it feels ubiquitous and I now have integration testing infrastructure to properly guarantee its behaviour.
One final note: this post was not written using AI. I’ll apologise in advance for it being a bad read, it’s certainly a dull, technical one, but I find AI has a certain voice that not only isn’t mine but also that I kind of hate reading. So I’m afraid this blog remains the best I can do, for better or worse.
Colour Coding 