Clojars Update for Q1 2026

Clojars Q1 2026 Update: Toby Crawley

This is an update on the work I’ve done maintaining Clojars in January through March 2026 with the ongoing support of Clojurists Together.

Most of my work on Clojars is reactive, based on issues reported through the community or noticed through monitoring. If you have any issues or questions about Clojars, you can find me in the #clojars channel on the Clojurians Slack, or you can file an issue on the main Clojars GitHub repository.

You can see the CHANGELOG for notable changes, and see all commits in the clojars-web and infrastructure repositories for this period. I also track my work over the years for Clojurists Together (and, before that, the Software Freedom Conservancy).

Below are some highlights for work done in January through March:

• I updated Maven index generation to use the database instead of downloading POMs from S3. This reduces the monthly hosting cost by ~100 USD/month, as we had to list the full repository bucket each time we wanted to sync. We have all the data we need in the database to do this, but the indexer takes pom files, so we just generate simple poms from the db.

• I updated Clojars to use a fork of http-kit instead of Jetty. This removes Jetty as a dependency as we don’t need its complexity and it often brings in CVEs. We have to use a fork of http-kit to support custom status messages for validation failures (that’s the currently supported way to report them using the version of maven-resolver currently used by pomegranate).

• I implemented RFC 9457 Problem Details responses on deploy validation failures in addition to status messages. This will be the new way to signal validation failures, once my PR to update pomegranate is merged, and we’re able to update leiningen and [deps-deploy](https://github.com/slipset/deps-deploy** to use that new version.

A note on 11 years of Clojars maintenance

I became the lead maintainer of Clojars a little over 11 years ago. I’ve done quite a bit of work on Clojars during that period, and have thoroughly enjoyed working on it & supporting the community! I greatly appreciate the support I’ve gotten from GitHub sponsors, the Software Freedom Conservancy, and Clojurists Together over the years. After all that, it’s time for a little break! I’m taking a few months away from Clojars (and computers in general) to go backpacking for a few months. I’m handing off lead maintenance to Daniel Compton, and it is in good hands!

Many thanks Toby for all your work - your contributions have made an immense difference to all of us! Have a great adventure - we’re looking forward to hearing all about it when you return.