When a library specifies a dependency with some {{:exclusions}} those exclusions are applied even if another library specifies the same dependency without {{:exclusions}}.
{:deps
{org.clojure/clojure {:mvn/version "1.10.0"}
thheller/shadow-cljs {:mvn/version "2.8.37"}
io.pedestal/pedestal.service {:mvn/version "0.5.5"}
}}
shadow-cljs in this case depends on {{ring-core}} but excludes {{clj-time}}.
[ring/ring-core "1.7.1"
:exclusions
;; used by cookie middleware which we don't use
[clj-time]]
{{pedestal.service}} also depends on {{ring-core}} and uses the middleware that requires {{clj-time}} but since {{shadow-cljs}} excluded it it is not available.