Merge pull request #21 from OpenVoxProject/move_dep_pins

Move version pins

Author: nmburgan

project.clj

@@ -1,22 +1,29 @@
 (defproject org.openvoxproject/ring-middleware "2.1.3-SNAPSHOT"
 
-  ;; These are to enforce consistent versions across dependencies of dependencies,
-  ;; and to avoid having to define versions in multiple places. If a component
-  ;; defined under :dependencies ends up causing an error due to :pedantic? :abort,
-  ;; because it is a dep of a dep with a different version, move it here.
+  ;; Generally, try to keep version pins in :managed-dependencies and the libraries
+  ;; this project actually uses in :dependencies, inheriting the version from
+  ;; :managed-dependencies. This prevents endless version conflicts due to deps of deps.
+  ;; Renovate should keep the versions largely in sync between projects.
   :managed-dependencies [[org.clojure/clojure "1.12.4"]
                          [org.clojure/tools.logging "1.3.1"]
                          [org.clojure/tools.macro "0.2.2"]
-                         [ring/ring-codec "1.3.0"]
+
+                         [cheshire "5.13.0"]
                          [commons-codec "1.20.0"]
+                         [compojure "1.7.2"]
+                         [org.bouncycastle/bcpkix-jdk18on "1.83"]
+                         [org.openvoxproject/http-client "2.2.2"]
+                         [org.openvoxproject/kitchensink "3.5.5" :classifier "test" :scope "test"]
+                         [org.openvoxproject/trapperkeeper "4.3.2" :classifier "test" :scope "test"]
+                         [org.openvoxproject/trapperkeeper-webserver-jetty10 "1.1.2"]
                          [org.slf4j/slf4j-api "2.0.17"]
-                         [cheshire "5.13.0"]
+                         [ring/ring-codec "1.3.0"]
                          [ring/ring-core "1.15.3"]]
 
   :dependencies [[cheshire]
-                 [org.openvoxproject/http-client "2.2.2"]]
+                 [org.openvoxproject/http-client]]
 
-  :min-lein-version "2.7.1"
+  :min-lein-version "2.9.1"
 
   :license {:name "Apache-2.0"
             :url "https://www.apache.org/licenses/LICENSE-2.0.txt"}
@@ -33,8 +40,8 @@
                                      :password :env/CLOJARS_PASSWORD
                                      :sign-releases false}]]
 
-  :profiles {:dev {:dependencies [[org.openvoxproject/trapperkeeper-webserver-jetty10 "1.1.2"]
-                                  [org.bouncycastle/bcpkix-jdk18on "1.83"]
-                                  [org.openvoxproject/kitchensink "3.5.5" :classifier "test" :scope "test"]
-                                  [org.openvoxproject/trapperkeeper "4.3.2" :classifier "test" :scope "test"]
-                                  [compojure "1.7.2"]]}})
+  :profiles {:dev {:dependencies [[compojure]
+                                  [org.bouncycastle/bcpkix-jdk18on]
+                                  [org.openvoxproject/kitchensink :classifier "test" :scope "test"]
+                                  [org.openvoxproject/trapperkeeper :classifier "test" :scope "test"]
+                                  [org.openvoxproject/trapperkeeper-webserver-jetty10]]}})