Re: dependencies from github
Ray, David, Aaron, Phil, dgrnbrg: Understood. Thanks for clarifying my misunderstandings! On Thu, Mar 27, 2014 at 10:39 AM, dgrnbrg dsg123456...@gmail.com wrote: Voom is a Lein plugin that lets you depend on a repository and pins you to a specific commit. It also provides tools manage systems spanning multiple repos. You can find it here: https://github.com/LonoCloud/lein-voom and see the video from clojure/west here: https://m.youtube.com/watch?v=axztcYJUN4Ilist=PLZdCLR02grLp__wRg5OTavVj4wefg69hM -- You received this message because you are subscribed to the Google Groups Clojure group. To post to this group, send email to clojure@googlegroups.com Note that posts from new members are moderated - please be patient with your first post. To unsubscribe from this group, send email to clojure+unsubscr...@googlegroups.com For more options, visit this group at http://groups.google.com/group/clojure?hl=en --- You received this message because you are subscribed to the Google Groups Clojure group. To unsubscribe from this group and stop receiving emails from it, send an email to clojure+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout. -- You received this message because you are subscribed to the Google Groups Clojure group. To post to this group, send email to clojure@googlegroups.com Note that posts from new members are moderated - please be patient with your first post. To unsubscribe from this group, send email to clojure+unsubscr...@googlegroups.com For more options, visit this group at http://groups.google.com/group/clojure?hl=en --- You received this message because you are subscribed to the Google Groups Clojure group. To unsubscribe from this group and stop receiving emails from it, send an email to clojure+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
dependencies from github
Hi, ## Context: * I'm using lein. * In my project.clj, I have something like: :dependencies[ [org.clojure/clojure 1.5.1] [org.clojure/clojurescript 0.0.-2173] [not-really-trusted-package version]] Now, I don't like pulling not-really-trusted-package, which can change under me. Instead I'd prefer to: (1) git fork the not-really-trusted package to github/txrev319/not-really-trusted (2) have lein pull from github/txrev319/not-really-trusted ## Question: How do I achieve the above? Thanks! (I still don't trust the package, but atleast I want to use the same untrusted package every time.) -- You received this message because you are subscribed to the Google Groups Clojure group. To post to this group, send email to clojure@googlegroups.com Note that posts from new members are moderated - please be patient with your first post. To unsubscribe from this group, send email to clojure+unsubscr...@googlegroups.com For more options, visit this group at http://groups.google.com/group/clojure?hl=en --- You received this message because you are subscribed to the Google Groups Clojure group. To unsubscribe from this group and stop receiving emails from it, send an email to clojure+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
Re: dependencies from github
Have you considered pushing your build of the package to Clojars under the org.clojars.USERNAME group? Ray. On 27 March 2014 09:16, t x txrev...@gmail.com wrote: Hi, ## Context: * I'm using lein. * In my project.clj, I have something like: :dependencies[ [org.clojure/clojure 1.5.1] [org.clojure/clojurescript 0.0.-2173] [not-really-trusted-package version]] Now, I don't like pulling not-really-trusted-package, which can change under me. Instead I'd prefer to: (1) git fork the not-really-trusted package to github/txrev319/not-really-trusted (2) have lein pull from github/txrev319/not-really-trusted ## Question: How do I achieve the above? Thanks! (I still don't trust the package, but atleast I want to use the same untrusted package every time.) -- You received this message because you are subscribed to the Google Groups Clojure group. To post to this group, send email to clojure@googlegroups.com Note that posts from new members are moderated - please be patient with your first post. To unsubscribe from this group, send email to clojure+unsubscr...@googlegroups.com For more options, visit this group at http://groups.google.com/group/clojure?hl=en --- You received this message because you are subscribed to the Google Groups Clojure group. To unsubscribe from this group and stop receiving emails from it, send an email to clojure+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout. -- You received this message because you are subscribed to the Google Groups Clojure group. To post to this group, send email to clojure@googlegroups.com Note that posts from new members are moderated - please be patient with your first post. To unsubscribe from this group, send email to clojure+unsubscr...@googlegroups.com For more options, visit this group at http://groups.google.com/group/clojure?hl=en --- You received this message because you are subscribed to the Google Groups Clojure group. To unsubscribe from this group and stop receiving emails from it, send an email to clojure+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
Re: dependencies from github
If you checkout the package to checkouts/not-really-trusted-package, then that version will automatically be used instead. https://github.com/technomancy/leiningen/blob/master/doc/TUTORIAL.md#checkout-dependencies -- Dave On Thu, Mar 27, 2014 at 9:16 AM, t x txrev...@gmail.com wrote: Hi, ## Context: * I'm using lein. * In my project.clj, I have something like: :dependencies[ [org.clojure/clojure 1.5.1] [org.clojure/clojurescript 0.0.-2173] [not-really-trusted-package version]] Now, I don't like pulling not-really-trusted-package, which can change under me. Instead I'd prefer to: (1) git fork the not-really-trusted package to github/txrev319/not-really-trusted (2) have lein pull from github/txrev319/not-really-trusted ## Question: How do I achieve the above? Thanks! (I still don't trust the package, but atleast I want to use the same untrusted package every time.) -- You received this message because you are subscribed to the Google Groups Clojure group. To post to this group, send email to clojure@googlegroups.com Note that posts from new members are moderated - please be patient with your first post. To unsubscribe from this group, send email to clojure+unsubscr...@googlegroups.com For more options, visit this group at http://groups.google.com/group/clojure?hl=en --- You received this message because you are subscribed to the Google Groups Clojure group. To unsubscribe from this group and stop receiving emails from it, send an email to clojure+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout. -- You received this message because you are subscribed to the Google Groups Clojure group. To post to this group, send email to clojure@googlegroups.com Note that posts from new members are moderated - please be patient with your first post. To unsubscribe from this group, send email to clojure+unsubscr...@googlegroups.com For more options, visit this group at http://groups.google.com/group/clojure?hl=en --- You received this message because you are subscribed to the Google Groups Clojure group. To unsubscribe from this group and stop receiving emails from it, send an email to clojure+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
Re: dependencies from github
On Thu, Mar 27, 2014 at 10:23 AM, David Powell d...@djpowell.net wrote: If you checkout the package to checkouts/not-really-trusted-package, then that version will automatically be used instead. https://github.com/technomancy/leiningen/blob/master/doc/TUTORIAL.md#checkout-dependencies (Though this is intended more as a local developer convenience rather than something that you would want to use in a public project. A private clojars build as Ray suggested above might be more appropriate) -- Dave -- You received this message because you are subscribed to the Google Groups Clojure group. To post to this group, send email to clojure@googlegroups.com Note that posts from new members are moderated - please be patient with your first post. To unsubscribe from this group, send email to clojure+unsubscr...@googlegroups.com For more options, visit this group at http://groups.google.com/group/clojure?hl=en --- You received this message because you are subscribed to the Google Groups Clojure group. To unsubscribe from this group and stop receiving emails from it, send an email to clojure+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
Re: dependencies from github
I think you have 1 minor misunderstanding about how lein is working here. Lein isn't checking not-really-trusted-package out of github, it's retrieving the corresponding artifact from a maven-style repository. If version doesn't end in -SNAPSHOT, then lein (deferring to the way maven works) will retrieve that dependency to your local $HOME/.m2/repository/not-really-trusted-package/version directory, and never update it again (because it doesn't have a SHAPSHOT suffix). In addition, all of the repositories that lein is configured with by default have a policy of never updating non-SNAPSHOT versions, so it's not really possible for that artifact to change out from under you. That's the whole point of the maven/lein repeatable builds philosophy. --Aaron On Thu, Mar 27, 2014 at 5:16 AM, t x txrev...@gmail.com wrote: Hi, ## Context: * I'm using lein. * In my project.clj, I have something like: :dependencies[ [org.clojure/clojure 1.5.1] [org.clojure/clojurescript 0.0.-2173] [not-really-trusted-package version]] Now, I don't like pulling not-really-trusted-package, which can change under me. Instead I'd prefer to: (1) git fork the not-really-trusted package to github/txrev319/not-really-trusted (2) have lein pull from github/txrev319/not-really-trusted ## Question: How do I achieve the above? Thanks! (I still don't trust the package, but atleast I want to use the same untrusted package every time.) -- You received this message because you are subscribed to the Google Groups Clojure group. To post to this group, send email to clojure@googlegroups.com Note that posts from new members are moderated - please be patient with your first post. To unsubscribe from this group, send email to clojure+unsubscr...@googlegroups.com For more options, visit this group at http://groups.google.com/group/clojure?hl=en --- You received this message because you are subscribed to the Google Groups Clojure group. To unsubscribe from this group and stop receiving emails from it, send an email to clojure+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout. -- You received this message because you are subscribed to the Google Groups Clojure group. To post to this group, send email to clojure@googlegroups.com Note that posts from new members are moderated - please be patient with your first post. To unsubscribe from this group, send email to clojure+unsubscr...@googlegroups.com For more options, visit this group at http://groups.google.com/group/clojure?hl=en --- You received this message because you are subscribed to the Google Groups Clojure group. To unsubscribe from this group and stop receiving emails from it, send an email to clojure+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
Re: dependencies from github
On Thursday, March 27, 2014 7:16:36 AM UTC-7, Aaron Cohen wrote: If version doesn't end in -SNAPSHOT, then lein (deferring to the way maven works) will retrieve that dependency to your local $HOME/.m2/repository/not-really-trusted-package/version directory, and never update it again (because it doesn't have a SHAPSHOT suffix). This is correct; Clojars had a policy change a while back to completely ban re-deploys to the same non-snapshot version. If you pull something down from Clojars and inspect the jar file, you can rely on always getting the same version back in the future, barring a break-in to the server. If that's the threat model you're worried about, you would need to check the signatures on the jar with `lein deps :verify`, but that functionality is somewhat immature at the moment. -Phil -- You received this message because you are subscribed to the Google Groups Clojure group. To post to this group, send email to clojure@googlegroups.com Note that posts from new members are moderated - please be patient with your first post. To unsubscribe from this group, send email to clojure+unsubscr...@googlegroups.com For more options, visit this group at http://groups.google.com/group/clojure?hl=en --- You received this message because you are subscribed to the Google Groups Clojure group. To unsubscribe from this group and stop receiving emails from it, send an email to clojure+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
Re: dependencies from github
Voom is a Lein plugin that lets you depend on a repository and pins you to a specific commit. It also provides tools manage systems spanning multiple repos. You can find it here: https://github.com/LonoCloud/lein-voom and see the video from clojure/west here: https://m.youtube.com/watch?v=axztcYJUN4Ilist=PLZdCLR02grLp__wRg5OTavVj4wefg69hM -- You received this message because you are subscribed to the Google Groups Clojure group. To post to this group, send email to clojure@googlegroups.com Note that posts from new members are moderated - please be patient with your first post. To unsubscribe from this group, send email to clojure+unsubscr...@googlegroups.com For more options, visit this group at http://groups.google.com/group/clojure?hl=en --- You received this message because you are subscribed to the Google Groups Clojure group. To unsubscribe from this group and stop receiving emails from it, send an email to clojure+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
