;pkg: stack, cabal: re-test & refine all build plans for aeson 2.3 etc.

Author: simonmichael

cabal.project

@@ -3,21 +3,25 @@ packages: hledger-lib
           hledger-ui
           hledger-web
 
--- workarounds for
+-- workarounds:
 -- https://github.com/haskell/haskeline/issues/130 / hledger #2410, see hledger/package.yaml
 -- https://github.com/jtdaugherty/brick/issues/539
 -- https://github.com/yesodweb/yesod/issues/1917
 -- https://haskell.github.io/security-advisories/advisory/HSEC-2026-0007.html
 
 constraints:
+  attoparsec-aeson >=2.2.2.0,
   brick >= 2.10,
   haskeline >= 0.8.4,
+  persistent >= 2.14.5.2,
   ram < 0,             
   text-iso8601 >= 0.2,
+  vty-windows >= 0.2.0.1,
 
 allow-newer:
   aeson,
   containers,
+  template-haskell,
   text-iso8601,
 
 

stack.yaml

@@ -7,13 +7,20 @@ packages:
 - hledger-ui
 - hledger-web
 
-resolver: nightly-2026-06-01
 compiler: ghc-9.14
 # notify-if-ghc-untested:   false
 # notify-if-cabal-untested: false
 notify-if-no-run-tests:   false
-# for hledger-web and https://haskell.github.io/security-advisories/advisory/HSEC-2026-0007.html
+
+resolver: nightly-2026-06-01
+
 extra-deps:
+# https://haskell.github.io/security-advisories/advisory/HSEC-2026-0007.html
 - aeson-2.3.0.0
 - text-iso8601-0.2.0.0
 allow-newer: true
+allow-newer-deps:
+  - aeson-pretty
+  - http-api-data
+  - persistent
+  - yesod-test

stack910.yaml

@@ -2,7 +2,7 @@
 # https://gitlab.haskell.org/ghc/ghc/-/wikis/migration/9.10
 # https://downloads.haskell.org/ghc/9.10.1/docs/users_guide/9.10.1-notes.html
 
-resolver: lts-24.34
+resolver: lts-24.44
 
 packages:
 - hledger-lib
@@ -11,12 +11,16 @@ packages:
 - hledger-web
 
 extra-deps:
-# for #2410, #2512:
+# #2410, #2512:
 - haskeline-0.8.4.1
-# for hledger-web and https://haskell.github.io/security-advisories/advisory/HSEC-2026-0007.html
+# https://haskell.github.io/security-advisories/advisory/HSEC-2026-0007.html
 - aeson-2.3.0.0
 - text-iso8601-0.2.0.0
 allow-newer: true
+allow-newer-deps:
+  - aeson-pretty
+  - http-api-data
+  - persistent
 
 nix:
   pure: false

stack912.yaml

@@ -13,11 +13,16 @@ packages:
 
 resolver: nightly-2026-06-01
 
-# for hledger-web and https://haskell.github.io/security-advisories/advisory/HSEC-2026-0007.html
 extra-deps:
+# https://haskell.github.io/security-advisories/advisory/HSEC-2026-0007.html
 - aeson-2.3.0.0
 - text-iso8601-0.2.0.0
 allow-newer: true
+allow-newer-deps:
+  - aeson-pretty
+  - http-api-data
+  - persistent
+  - yesod-test
 
 nix:
   pure: false

stack96.yaml

@@ -6,19 +6,25 @@ packages:
 - hledger-lib
 - hledger
 - hledger-ui
-#- hledger-web  # see below
+- hledger-web
 
 extra-deps:
 - encoding-0.10
 - hashtables-1.4.2
-- vty-windows-0.2.0.1
-# for #2410, #2512:
+# #2410, #2512:
 - haskeline-0.8.4.1
-# build plan for hledger-web and https://haskell.github.io/security-advisories/advisory/HSEC-2026-0007.html, needs more work
-# - aeson-2.3.0.0
-# - text-iso8601-0.2.0.0
-# - character-ps-0.1
-# allow-newer: true
+- vty-windows-0.2.0.1
+# https://haskell.github.io/security-advisories/advisory/HSEC-2026-0007.html
+- aeson-2.3.0.0
+- aeson-pretty-0.8.10
+- attoparsec-aeson-2.2.2.0
+- character-ps-0.1
+- text-iso8601-0.2.0.0
+allow-newer: true
+allow-newer-deps:
+- aeson
+- aeson-pretty
+- persistent
 
 nix:
   pure: false

stack98.yaml

@@ -11,12 +11,19 @@ packages:
 extra-deps:
 - encoding-0.10
 - hashtables-1.4.2
-# for #2410, #2512:
+# #2410, #2512:
 - haskeline-0.8.4.1
-# for hledger-web and https://haskell.github.io/security-advisories/advisory/HSEC-2026-0007.html
+# https://haskell.github.io/security-advisories/advisory/HSEC-2026-0007.html
 - aeson-2.3.0.0
+- aeson-pretty-0.8.10
+# use latest revision, not the rev0 in the snapshot:
+- attoparsec-aeson-2.2.2.0
 - text-iso8601-0.2.0.0
 allow-newer: true
+allow-newer-deps:
+  - aeson-pretty
+  - http-api-data
+  - persistent
 
 nix:
   pure: false