From f685bd98781db995d442fa1e9918eefd0f812d81 Mon Sep 17 00:00:00 2001
From: nmburgan <13688219+nmburgan@users.noreply.github.com>
Date: Mon, 12 Jan 2026 12:49:25 -0800
Subject: [PATCH] Move version pins

This moves the version pinning into managed-deps to avoid endless conflicts due to :pedantic? abort.
---
 project.clj | 33 ++++++++++++++++++++-------------
 1 file changed, 20 insertions(+), 13 deletions(-)

diff --git a/project.clj b/project.clj
index b721c4c..97726f8 100644
--- a/project.clj
+++ b/project.clj
@@ -1,22 +1,29 @@
 (defproject org.openvoxproject/ring-middleware "2.1.3-SNAPSHOT"
 
-  ;; These are to enforce consistent versions across dependencies of dependencies,
-  ;; and to avoid having to define versions in multiple places. If a component
-  ;; defined under :dependencies ends up causing an error due to :pedantic? :abort,
-  ;; because it is a dep of a dep with a different version, move it here.
+  ;; Generally, try to keep version pins in :managed-dependencies and the libraries
+  ;; this project actually uses in :dependencies, inheriting the version from
+  ;; :managed-dependencies. This prevents endless version conflicts due to deps of deps.
+  ;; Renovate should keep the versions largely in sync between projects.
   :managed-dependencies [[org.clojure/clojure "1.12.4"]
                          [org.clojure/tools.logging "1.3.1"]
                          [org.clojure/tools.macro "0.2.2"]
-                         [ring/ring-codec "1.3.0"]
+
+                         [cheshire "5.13.0"]
                          [commons-codec "1.20.0"]
+                         [compojure "1.7.2"]
+                         [org.bouncycastle/bcpkix-jdk18on "1.83"]
+                         [org.openvoxproject/http-client "2.2.2"]
+                         [org.openvoxproject/kitchensink "3.5.5" :classifier "test" :scope "test"]
+                         [org.openvoxproject/trapperkeeper "4.3.2" :classifier "test" :scope "test"]
+                         [org.openvoxproject/trapperkeeper-webserver-jetty10 "1.1.2"]
                          [org.slf4j/slf4j-api "2.0.17"]
-                         [cheshire "5.13.0"]
+                         [ring/ring-codec "1.3.0"]
                          [ring/ring-core "1.15.3"]]
 
   :dependencies [[cheshire]
-                 [org.openvoxproject/http-client "2.2.2"]]
+                 [org.openvoxproject/http-client]]
 
-  :min-lein-version "2.7.1"
+  :min-lein-version "2.9.1"
 
   :license {:name "Apache-2.0"
             :url "https://www.apache.org/licenses/LICENSE-2.0.txt"}
@@ -33,8 +40,8 @@
                                      :password :env/CLOJARS_PASSWORD
                                      :sign-releases false}]]
 
-  :profiles {:dev {:dependencies [[org.openvoxproject/trapperkeeper-webserver-jetty10 "1.1.2"]
-                                  [org.bouncycastle/bcpkix-jdk18on "1.83"]
-                                  [org.openvoxproject/kitchensink "3.5.5" :classifier "test" :scope "test"]
-                                  [org.openvoxproject/trapperkeeper "4.3.2" :classifier "test" :scope "test"]
-                                  [compojure "1.7.2"]]}})
+  :profiles {:dev {:dependencies [[compojure]
+                                  [org.bouncycastle/bcpkix-jdk18on]
+                                  [org.openvoxproject/kitchensink :classifier "test" :scope "test"]
+                                  [org.openvoxproject/trapperkeeper :classifier "test" :scope "test"]
+                                  [org.openvoxproject/trapperkeeper-webserver-jetty10]]}})