Tried to use insecure HTTP repository without TLS

[misterzirillo]

I'm getting this message when adding clj-firmata 2.1.1 to my project dependencies. I'd rather not use the insecure workaround. Any idea what is causing it?

[peterschwarz]

Looks like the serial dependency needs to be updated. It is a deeper dependency issue which only recently moved to the core maven repo.

[joefromct]

You might be able to get away with something like this; worked for me so far:

  :dependencies [[org.clojure/clojure "1.10.1"]
                 ;; Get newer stuff: 
                 [clj-serial "2.0.5"]
                 [org.clojure/core.async "1.3.618"]
                 ;; exclude the old stuff: 
                 [clj-firmata "2.1.1" :exclusions [clj-serial
                                                   org.clojure/core.async]]]