CI: use --illegal-access=deny when possible

Closes #88

.circleci/config.yml

@@ -10,24 +10,39 @@ version: 2.1
 
 defaults: &defaults
   working_directory: ~/repo
-  environment:
-    LEIN_ROOT: "true"   # we intended to run lein as root
-    JVM_OPTS: -Xmx3200m # limit the maximum heap size to prevent out of memory errors
+
+env_defaults: &env_defaults
+  LEIN_ROOT: "true"   # we intended to run lein as root
+
+jdk8_env_defaults: &jdk8_env_defaults
+  JVM_OPTS: -Xmx3200m
+
+newer_jdk_env_defaults: &newer_jdk_env_defaults
+  JVM_OPTS: -Xmx3200m --illegal-access=deny
 
 # Runners for OpenJDK 8 and 11
 
 executors:
   openjdk8:
     docker:
       - image: circleci/clojure:openjdk-8-lein-2.9.1
+    environment:
+      <<: *env_defaults
+      <<: *jdk8_env_defaults
     <<: *defaults
   openjdk11:
     docker:
       - image: circleci/clojure:openjdk-11-lein-2.9.1
+    environment:
+      <<: *env_defaults
+      <<: *newer_jdk_env_defaults
     <<: *defaults
   openjdk16:
     docker:
       - image: circleci/clojure:openjdk-16-lein-2.9.5-buster
+    environment:
+      <<: *env_defaults
+      <<: *newer_jdk_env_defaults
     <<: *defaults
 
 # Runs a given set of steps, with some standard pre- and post-

project.clj

@@ -130,7 +130,7 @@
              :clj-kondo [:test
                          {:dependencies [[clj-kondo "2021.03.31"]]}]
 
-             :eastwood  {:plugins  [[jonase/eastwood "0.9.1"]]
+             :eastwood  {:plugins  [[jonase/eastwood "0.9.6"]]
                          :eastwood {:exclude-namespaces [~(if jdk8?
                                                             'orchard.java.parser
                                                             'orchard.java.legacy-parser)]}}})