Upgrade Nippy to 3.4.2

See: * GHSA-vw78-267v-588h * https://nvd.nist.gov/vuln/detail/CVE-2024-36114
taoensso · Jun 1, 2024 · 2ea0aa4 · 2ea0aa4
1 parent 74e4427
commit 2ea0aa4
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 3 deletions.
diff --git a/project.clj b/project.clj
@@ -8,8 +8,8 @@
    :url  "https://www.eclipse.org/legal/epl-v10.html"}
 
   :dependencies
-  [[com.taoensso/encore "3.73.0"]
-   [com.taoensso/nippy  "3.3.0"]
+  [[com.taoensso/encore "3.112.0"]
+   [com.taoensso/nippy  "3.4.2"]
    [joda-time           "2.12.5"]
    [commons-logging     "1.2"]
    [com.amazonaws/aws-java-sdk-dynamodb "1.12.693"

diff --git a/test/taoensso/faraday/tests/main.clj b/test/taoensso/faraday/tests/main.clj
@@ -725,7 +725,7 @@
 
 
 (deftest serialization
-  (let [data nippy/stress-data-comparable]
+  (let [data (nippy/stress-data {:comparable? true})]
     (is (= {:id 10 :nippy-data data}
            (do (far/put-item *client-opts* ttable {:id 10 :nippy-data (far/freeze data)})
                (far/get-item *client-opts* ttable {:id 10}))))))