forked from pool/leiningen
jubalh
2463b4a31d
* Verify pom signatures in addition to jars for GPG/SSH.
* Emit correct exit code when dependency signature verification fails.
* Verify SSH signatures with lein deps :verify allowed-signers.
* Avoid native access warnings on Windows.
* Ensure synthetic jar entries have timestamps matching project.clj file.
* Support SOURCE_DATE_EPOCH environment variable.
* Sign with SSH keys when deploying; :signing {:ssh-key nil} to disable.
* Update Maven Resolver API dependency, improving behavior when rate limited.