chore(deps): update clojure deps.edn

[renovate]

This PR contains the following updates:

Package	Type	Update	Change	OpenSSF
cheshire/cheshire	find-deps	minor	6.1.0 → 6.2.0
cider/cider-nrepl		minor	0.58.0 → 0.62.2
nrepl/nrepl (source)		minor	1.5.2 → 1.7.0
org.clojure/core.async	find-deps	minor	1.8.741 → 1.9.865
refactor-nrepl/refactor-nrepl		minor	3.11.0 → 3.14.0

---

Release Notes

dakrone/cheshire (cheshire/cheshire)

v6.2.0

Compare Source

clojure-emacs/cider-nrepl (cider/cider-nrepl)

v0.62.2

Compare Source

• #​1038: Fix enlighten evaluations being silently ignored on nREPL 1.5+: the debug middleware's eval function shadowed the one the enlighten middleware installs, so code never lit up.
• #​1037: Drop trace and tap subscriptions whose client connection has died; a stale trace subscription used to break every traced evaluation with a SocketException until the server was restarted.

v0.62.1

Compare Source

• #​1016: Fix a debugger crash (Unable to resolve symbol: STATE__) when #dbg is placed on a bare collection literal that closes over a local or a qualified name (e.g. #dbg [x]).
• #​1017: Fix the same STATE__ error for the #light enlighten reader.
• #​1020: Fix a test-reporter crash (no conversion to symbol) when a test is interrupted (or otherwise throws outside both an is assertion and a fixture); the escaped exception is now reported as an error instead.
• #​750: A form too large to instrument for debugging no longer fails with a raw Method code too large! compiler error. It's first retried without local capture (with a warning; breakpoints still work), and if it still won't fit, cider-nrepl reports a clear error and leaves it unevaluated rather than silently evaluating it without instrumentation.
• #​1022: Fix a debugger instrumentation crash (Symbol cannot be cast to Keyword) when a function argument is destructured with more than eight explicit key/val pairs.
• #​764: Fix enlighten (and the debugger) corrupting record literals embedded in the code - e.g. compojure's compiled routes - into plain maps, which broke protocol dispatch on them (No implementation of method ... found for class ... PersistentArrayMap).
• #​1032: Fix enlighten (and the debugger) throwing Unable to resolve symbol: STATE__ on a defrecord/deftype with inline protocol methods: those bodies compile to real class methods that can't close over the debugger's state, so they are now left uninstrumented (reify bodies, which capture their environment, remain instrumentable).

v0.62.0

Compare Source

• Bump orchard to 0.44.0 (inspector: the Datafy section is gone, ARef contents render fully, and wide columns are truncated in table mode).
• #​1018: Abort a debug session via nREPL's interrupt-stop instead of the deprecated Thread.stop, so quitting the debugger keeps working on JDKs where Thread.stop was removed (also fixes a NullPointerException when the session carries no thread).
• Drop value from responses the content-type middleware decorates: the requester opted in to content types and renders the body instead, and clients that naively rendered both slots used to show results twice. Responses the middleware leaves alone (unrecognized types, non-fetchable URI schemes) keep their value as before.
• Harden the rich-content middleware (#​2825 in CIDER): only file:/http:/https: URIs and URLs are annotated as fetchable content (a mailto: URI no longer triggers a slurp attempt), cider/slurp reads at most 4MB (configurable via cider.nrepl.middleware.slurp/*max-content-size*) with buffered IO and connect/read timeouts instead of an unbounded byte-at-a-time loop, and a failed fetch replies with a plain-text explanation instead of crashing the nREPL handler.
• #​1015: Document the response keys several ops actually return but didn't list in their descriptor (cider/info, cider/refresh, the test ops, the stacktrace ops, cider/undef, cider/profile-summary, and others), and fix cider.clj-reload/reload-all documenting the wrong return key. Adds a make descriptor-contract check that keeps the descriptors honest.
• Simplify the deferred middleware-loading machinery to use requiring-resolve (which already serializes the require that the old hand-rolled lock guarded), removing the internal delayed-handlers, require-lock, and run-deferred-handler vars. No change in boot time or behavior.
• #​980: Migrate the build from Leiningen to tools.deps (the source-shading of cljfmt/tools.namespace/tools.reader is now driven by mranderson's Leiningen-free inline-deps entry point).

v0.61.0

Compare Source

• #​453: The cider/format-code op now accepts a formatter argument, the fully-qualified name of a formatting function [code options] -> code, so projects can format with zprint (cider.nrepl.middleware.format/zprint) instead of the default cljfmt.
• #​903: Back cider.nrepl.pprint/pprint with orchard.pp instead of clojure.pprint, so pretty-printing a lazy sequence no longer interleaves its realization side effects into the result. The previous clojure.pprint behavior is still available as cider.nrepl.pprint/clojure-pprint.
• #​1010: The tap middleware now works in ClojureScript: a runtime helper buffers values sent to tap> and the JVM side polls and streams them (the same approach the cljs test middleware uses for async tests). Streaming only - cljs tapped values aren't inspectable, since the value lives in the JS runtime.
• #​680: The test ops now honor a namespace's test-ns-hook, so a namespace whose tests run only through the hook (with no standalone deftest vars) is no longer silently skipped.
• #​1007: Don't crash at startup on an older JDK when a Java-21 ClojureScript (recent closure-compiler) is on the classpath: the ClojureScript load probes now catch Throwable, so cider-nrepl falls back to a Clojure-only setup instead of failing to load.
• #​1006: Add a tap middleware: cider/tap-subscribe streams a summary of every value sent to tap> (retaining recent ones, bounded), cider/tap-inspect opens an inspector session on a retained value by index, and cider/tap-unsubscribe stops the stream. Clojure-only for now.
• Bump compliment to 0.8.0 (adds Babashka compatibility).
• #​1003: Resolve the ClojureScript compiler environment through a provider chain instead of piggieback alone, adding a shadow-cljs provider so the static-analysis ops keep working in a shadow REPL that doesn't load piggieback.
• #​994: Error handling: catch Throwable (not just Exception) when handling ops, so an op that hits an Error (e.g. StackOverflowError, AssertionError) returns a proper error response instead of hanging the client without a terminal done. The stacktrace ops, which reply outside the shared error machinery, got the same guarantee.
• #​993: Fix op descriptor metadata: document cider/get-state's return values (previously rendered blank) and correct the cider/log-remove-consumer return key.
• #​992: Bump cljfmt to 0.16.4 (from 0.9.2).
• #​955: The cider/format-code op now applies the project's .cljfmt.edn/.cljfmt.clj configuration automatically, with any options passed in the request taking precedence.
• clojure-emacs/cider#2099: Fix ClojureScript macroexpansion of user-defined macros (e.g. those referred via :refer-macros), which previously echoed back unexpanded because the compiler env was passed to the analyzer instead of a proper analysis environment.
• clojure-emacs/cider#2198: Clojure-only ops (apropos, xref, trace, profile, refresh, reload, undef, spec) now reply with a clojure-only status when a ClojureScript REPL is active, instead of a confusing failure or a JVM-only result.
• #​555: The test ops (cider/test, cider/test-var-query, cider/test-all, cider/retest) now run ClojureScript tests via cljs.test when a ClojureScript REPL is active, returning the same report shape as for Clojure. Asynchronous (cljs.test/async) tests are awaited, bounded by an optional :timeout (default 30s).

v0.60.0

Compare Source

• #​986: Add the cider/type-protocols op (the protocols a type implements) and the cider/protocols-with-method op (the protocols declaring a method of a given name), each returning :name :file :file-url :line :column maps (requires orchard 0.43.0).
• #​985: Add the cider/who-implements op, returning the implementations of a protocol (both extend-style and inline defrecord/deftype, with source locations) or the dispatch values of a multimethod (requires orchard 0.43.0).
• #​984: Enlighten now reports the value of every sub-expression as it runs, not just a definition's return value and locals - so the whole computation lights up, much closer to the Light Table feature it was modeled on.
• #​983: Fix enlighten overlay placement when one evaluation spans several top-level forms (e.g. evaluating a region): each form's values are now reported at that form's own line instead of the line where the evaluation started.
• #​982: Add the cider/trace-subscribe and cider/trace-unsubscribe ops, streaming a structured event for every traced call and return so clients can render trace output in a dedicated buffer instead of the REPL (requires orchard 0.43.0).
• #​981: Add the cider/list-traced op (listing the currently traced vars and namespaces) and the cider/untrace-all op (untracing everything at once).
• #​979: Bump orchard to 0.42.0 and adapt to its removal of the inspector analytics hint (the :display-analytics-hint inspect option is gone; use the cider/inspect-display-analytics op to show analytics on demand).
• #​978: Add the cider/classify-symbols op, classifying the given symbols as macros, inline-expandable functions, special forms or plain functions, for both Clojure and ClojureScript.

v0.59.0

Compare Source

• Bump nrepl to 1.7.0.
• Bump tools.reader to 1.6.0.
• Bump tools.namespace to 1.5.1.
• Bump orchard to 0.41.0.
• #​959: Stop shading Compliment and clj-reload.
• #​710: Make namespaced ops (e.g., cider/complete) the default and keep the old names as deprecated aliases.
• #​965: Stop losing quotes in matcher-combinators test output.
• #​972: Stop relying on tools.reader functions in our code.
• #​971: Middleware: refactor how piggieback dependencies are established.

nrepl/nrepl (nrepl/nrepl)

v1.7.0

Compare Source

Changes

• #​426: (Breaking) Raise minimal supported Clojure version to 1.9.

Bugs fixed

• #​302: Use the actual bind address in the server startup message instead of resolving via .getHostName (which returns localhost and breaks IPv6-only clients).
• #​432: Fix CallbackBufferedOutputStream corrupting multi-byte UTF-8 characters at buffer boundary.

v1.6.0

Compare Source

New features

• #​402: Add ^:concat metadata support for config merging.
• #​415: Gracefully handle missing middleware via the ^:optional metadata.

Changes

• #​408: Refactor stdin middleware.
• #​409: Refactor handler construction and middleware application.
• #​412: Deprecated: automatic inclusion of middleware references by :requires/:expects into the resulting handler. This behavior still works but will produce an error in the future. It is thus recommended to include all necessary middleware into the list passed to nrepl.server/default-handler.
• #​416: Load nrepl.ack conditionally.

Bugs fixed

• #​410: Middleware: deduplicate middleware when constructing a handler.
• #​421: Fix EDN transport with Unix domain sockets.
• #​422: Fix load-file sending nil message for empty/comment-only files.
• Fix err-exit throwing a string instead of an Exception.

clojure/core.async (org.clojure/core.async)

v1.9.865

Compare Source

clojure-emacs/refactor-nrepl (refactor-nrepl/refactor-nrepl)

v3.14.0

Compare Source

• Performance: find-symbol/find-usages no longer build an AST (which requires loading and evaluating the namespace) for files whose source doesn't even mention the symbol. Since only occurrences present before macroexpansion are ever reported, a textual pre-check safely skips the expensive analysis for the vast majority of files, turning "analyze the whole project" into "analyze the few files that reference the symbol". This also improves reliability, as far fewer namespaces get loaded.
• Performance: find-macros skips reader-parsing files that don't textually contain defmacro, and defers building the project-wide namespace tracker until the queried symbol is confirmed to be a project macro (previously the tracker was built on every find-symbol call, even for non-macros).
• Reliability: the AST cache is now bounded (LRU) to avoid OutOfMemoryError on large projects. The limit defaults to 512 namespaces and is tunable via refactor-nrepl.analyzer/ast-cache-limit (reset! it, or set it to nil to disable the bound). Eviction only costs a rebuild on the next access, never correctness.
• Reliability: building the AST for a namespace that does (set! *warn-on-reflection* true) (or *unchecked-math*) at the top level no longer fails with "Can't change/establish root binding ... with set". Those vars are now thread-bound around analysis, which analyze-ns evaluates. Previously this only worked by accident, when the namespace happened to be analyzed and cached by an earlier, unrelated operation.

v3.13.0: refactor-nrepl v3.13.0

Compare Source

What's Changed

• Namespace ops with refactor/ prefix (cider-nrepl convention) by @​bbatsov in #​427
• Wrap referred-syms-by-file&fullname's pmap in with-suppressed-errors by @​bbatsov in #​430
• Bump nrepl to 1.7.0 by @​bbatsov in #​431
• CI: capture test output as artifact by @​bbatsov in #​433
• Bump rewrite-clj to 1.2.54 by @​bbatsov in #​432
• Bump commons-io to 2.22.0 by @​bbatsov in #​434
• Bump eastwood to 1.4.3 by @​bbatsov in #​435
• Bump piggieback to 0.6.1 by @​bbatsov in #​436
• Bump orchard to 0.41.0 by @​bbatsov in #​437
• Bump error_prone_annotations to 2.49.0 by @​bbatsov in #​438
• Bump Clojure 1.12.0 to 1.12.4 by @​bbatsov in #​439
• Bump leiningen-core to 2.12.0 by @​bbatsov in #​440
• Bump actions/checkout to v6 by @​bbatsov in #​441
• Bump cider-nrepl to 0.59.0 by @​bbatsov in #​442
• Bump clj-kondo to 2026.04.15 by @​bbatsov in #​445
• Bump Clojure 1.12.4 to 1.12.5 by @​bbatsov in #​446
• Bump core.async to 1.9.865 by @​bbatsov in #​447

Full Changelog: clojure-emacs/refactor-nrepl@v3.12.0...v3.13.0

v3.12.0: refactor-nrepl v3.12.0

Compare Source

What's Changed

• Stop depending on Compliment by @​alexander-yakushev in #​415
• Update all dependencies by @​bbatsov in #​416
• Drop http-kit in favor of JDK HTTP client by @​bbatsov in #​417
• Replace Clojure master profile with 1.12 in the CI matrix by @​bbatsov in #​418
• Restore hotload-dependency on top of tools.deps by @​bbatsov in #​419
• Modernize CircleCI executors by @​bbatsov in #​420
• Add make lint and shared test-session helper by @​bbatsov in #​421
• Introduce def-op macro and simplify error handling by @​bbatsov in #​422
• [Fix #​408] Don't wrap cljs auto-aliased namespaces in :clj reader conditional by @​bbatsov in #​423
• [Fix #​405] Warm class-search cache in the background on namespace load by @​bbatsov in #​424
• [#​347] Add regression test for namespaces that set! warn-on-reflection by @​bbatsov in #​425
• [Fix #​380] Mark internal helper namespaces with ^:no-doc by @​bbatsov in #​426

Full Changelog: clojure-emacs/refactor-nrepl@v3.11.0...v3.12.0

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • Between 12:00 AM and 03:59 AM, only on Monday (* 0-3 * * 1)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.