/
project.clj
126 lines (118 loc) · 7.89 KB
/
project.clj
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
(def clojure-version-to-use (or
(System/getenv "CLOJURE_VERSION")
"1.8.0"))
(defproject lambdacd "0.14.8-SNAPSHOT"
:description "A library to create a continous delivery pipeline in code."
:url "http://github.com/flosell/lambdacd"
:license {:name "Apache License, version 2.0"
:url "http://www.apache.org/licenses/LICENSE-2.0.html"}
:min-lein-version "2.5.0"
:deploy-repositories [["clojars" {:creds :gpg}]
["releases" :clojars]]
:source-paths ["src/clj" "src/cljs"]
:test-paths ["test/clj" "example/clj"]
:jar-exclusions [#"logback.xml"]
:dependencies [[org.clojure/clojure ~clojure-version-to-use]
[throttler "1.0.0"]
[hiccup "1.0.5"]
[org.clojure/data.json "0.2.6"]
[me.raynes/conch "0.8.0"]
[me.raynes/fs "1.4.6" :exclusions [; xz and commons-compress contain vulnerabilities and we don't use the compression features where they are needed
org.tukaani/xz
org.apache.commons/commons-compress]]
[org.clojure/core.async "0.4.474"]
[compojure "1.6.1"]
[commons-io "2.7"] ; force transitive dependency to not depend on libraries with known vulnerabilities
[org.clojure/tools.logging "0.3.1"]
[org.slf4j/slf4j-api "1.7.21"]
[ring/ring-json "0.3.1"]
[cheshire "5.4.0"]
[cljsjs/moment "2.22.2-0"]
[clj-time "0.9.0"]
[com.danielflower.apprunner/javasysmon "0.3.5.1"]
[clj-timeframes "0.1.0"]]
; excluding a few transitive dependencies:
; process-tree-killer depends on this for windows only and doesnt provide it...
:exclusions [org.jvnet.winp/winp]
:test-selectors {:default (complement :smoke)
:smoke :smoke
:all (constantly true)}
:plugins [[lein-cljsbuild "1.1.7"]
[lein-doo "0.1.10"]
[lein-environ "1.0.2"]
[lein-kibit "0.1.6-beta1"]
[quickie "0.3.6"]]
:clean-targets ^{:protect false} [:target-path :compile-path "resources/public/js-gen"]
:cljsbuild {:builds {:app {:source-paths ["src/cljs" "env/prod/cljs"]
:compiler {:output-to "resources/public/js-gen/app.js"
:output-dir "resources/public/js-gen/out"
:main "lambdacd.prod"
:asset-path "js-gen/out"
:optimizations :advanced
:pretty-print false}}}}
:profiles {:release {:hooks [leiningen.cljsbuild]
:release-tasks [["vcs" "assert-committed"]
["change" "version" "leiningen.release/bump-version" "release"]
["vcs" "commit"]
["vcs" "tag"]
["deploy"]
["change" "version" "leiningen.release/bump-version"]
["vcs" "commit"]
["vcs" "push"]]}
;; the namespace for all the clojurescript-dependencies,
;; we don't want them as dependencies of the final library as cljs is already compiled then
:provided {:dependencies [[bidi "1.18.7"]
[cljs-ajax "0.7.5"]
[re-frame "0.10.5"]
[reagent "0.8.1"] ; TODO: when bumping reagent, remove fixed transitive dependencies below
[reagent-utils "0.3.1"]
; Manually bump react version to mitigate CVE-2018-6341; remove when increasing reagent version
[cljsjs/react "16.4.2-0"]
[cljsjs/react-dom "16.4.2-0"]
[cljsjs/react-dom-server "16.4.2-0"]
[com.andrewmcveigh/cljs-time "0.5.2"]
[cljsjs/ansiparse "0.0.5-1-0"]
[org.clojure/clojurescript "1.10.439"]
; protobuf is a transitive dependency of clojurescript.
; pinning here since the default is currently a vulnerable version (even though the vulnerability shouldn't affect us)
[com.google.protobuf/protobuf-java "3.5.1"]]}
:dev {:main todopipeline.pipeline
:repl-options {:nrepl-middleware [cemerick.piggieback/wrap-cljs-repl]}
:dependencies [[org.clojure/core.match "0.3.0-alpha4"]
[ring-mock "0.1.5"]
[org.clojars.runa/conjure "2.2.0"]
[prismatic/dommy "1.0.0"]
[com.gearswithingears/shrubbery "0.4.1"]
[http-kit "2.3.0"]
[figwheel "0.5.16"]
[weasel "0.7.0"]
[lein-doo "0.1.4"]
[com.cemerick/piggieback "0.2.1"]
[org.clojure/tools.nrepl "0.2.12"]
[pjstadig/humane-test-output "0.6.0"]
[ch.qos.logback/logback-core "1.2.3"]
[ch.qos.logback/logback-classic "1.2.3"]]
:source-paths ["env/dev/clj"]
:plugins [[lein-figwheel "0.5.16"]
[lein-nvd "1.4.1"]]
:nvd {:suppression-file "suppression.xml"}
:injections [(require 'pjstadig.humane-test-output)
(pjstadig.humane-test-output/activate!)]
:figwheel {:http-server-root "public"
:server-port 3449
:css-dirs ["resources/public/css"]}
:env {:dev? true}
:cljsbuild {:builds {:app {:source-paths ["visual-styleguide/src/cljs" "env/dev/cljs" "src/cljs"]
:compiler {:main "lambdacd.dev"
:output-to "resources/public/js-gen/app.js"
:output-dir "resources/public/js-gen/out"
:asset-path "js-gen/out"
:optimizations :none
:source-map true}}
:test {:source-paths ["src/cljs" "test/cljs"]
:compiler {:main "lambdacd.runner"
:output-to "resources/public/test/test.js"
:output-dir "resources/public/test"
:asset-path "js-gen/out"
:optimizations :none
:pretty-print true}}}}}})