!aRKdLCkUeIFjRPZuJT:nixos.org

NixOS JVM

108 Members
23 Servers

Load older messages


SenderMessageTime
23 Nov 2024
@emilazy:matrix.orgemilyideally it'd use an old FFmpeg too04:50:33
@tomodachi94:matrix.orgTomodachi94 (they/them)And maybe vendor Ant04:50:45
@emilazy:matrix.orgemilyand be broken on Darwin because of bad Linux assumptions04:50:47
@tomodachi94:matrix.orgTomodachi94 (they/them)
In reply to@tomodachi94:matrix.org
And maybe vendor Ant
I'm wondering how many packages think they use our Ant package but actually use an Ant JAR that was shoved into VCS
04:51:34
@tomodachi94:matrix.orgTomodachi94 (they/them)nix-index time! :304:51:45
@tomodachi94:matrix.orgTomodachi94 (they/them)Quite a few include Ant in their $out, which is... probably not good if it's just for the build system04:54:53
@tomodachi94:matrix.orgTomodachi94 (they/them) (nix run 'github:nix-community/nix-index-database -- --regex '(lib|share)/.ant(-.|)jar$' | wc -l` says 407 paths) 04:57:49
@tomodachi94:matrix.orgTomodachi94 (they/them) (nix run 'github:nix-community/nix-index-database -- --regex '(lib|share)/.*ant(-.*|)jar$' | wc -l says 407 paths) 04:57:56
@tomodachi94:matrix.orgTomodachi94 (they/them) (nix run 'github:nix-community/nix-index-database -- --regex '(lib|share)/.*ant(-.*|)\.jar$' | wc -l says 444 paths) 04:58:38
@tomodachi94:matrix.orgTomodachi94 (they/them)
In reply to@tomodachi94:matrix.org
I wonder how feasible it would be to make a script that automates most of the process involved with dropping an insecure package
I drop a lot of packages, so I might make something more general at some point. We'll see 🙂)
05:01:26
@tomodachi94:matrix.orgTomodachi94 (they/them)* (I drop a lot of packages, so I might make something more generally for dropping packages at some point. We'll see 🙂)05:01:36
@emilazy:matrix.orgemilyyou might want to look at the Gentoo last rites stuff05:02:27
@emilazy:matrix.orgemilyI think they have automation05:02:29
@emilazy:matrix.orgemilyI feel I've corrupted you into the package-dropping life, though.05:02:48
@tomodachi94:matrix.orgTomodachi94 (they/them)
In reply to@emilazy:matrix.org
I feel I've corrupted you into the package-dropping life, though.
Nope, I have a history of dropping things that goes before I joined this channel: https://github.com/search?q=repo%3ANixOS%2Fnixpkgs+author%3Atomodachi94+drop&type=commits&s=committer-date&o=asc
05:04:48
@tomodachi94:matrix.orgTomodachi94 (they/them)I... did this to myself05:06:31
@tomodachi94:matrix.orgTomodachi94 (they/them)Being a founding member of the Java team certainly didn't help05:06:50
@emilazy:matrix.orgemily:'(05:06:52
@tomodachi94:matrix.orgTomodachi94 (they/them)
In reply to@tomodachi94:matrix.org
(I drop a lot of packages, so I might make something more generally for dropping packages at some point. We'll see 🙂)
I have a prototype for closing issues based on a human feedback loop. I'll post future updates elsewhere
06:26:54
@kamillaova:matrix.orgKamilla 'ova joined the room.13:19:03
@tomodachi94:matrix.orgTomodachi94 (they/them)Does anyone know how this would affect refactoring the Maven build story to use hooks? https://github.com/NixOS/nixpkgs/pull/31315218:13:07
@tomodachi94:matrix.orgTomodachi94 (they/them)I'm also wondering if we should pin the built-in Maven plugins to versions in Nixpkgs and update them one-by-one instead of with the Maven package. Essentially, introducing a patcher that pins plugins to predetermined versions if they are present in pom.xml, updating them after a Maven update is merged18:22:45
@tomodachi94:matrix.orgTomodachi94 (they/them)(Probably would be easiest once the Maven build story uses hooks)18:23:17
@tomodachi94:matrix.orgTomodachi94 (they/them)* I'm also wondering if we should pin the built-in Maven plugins to versions in Nixpkgs and update them one-by-one instead of with the Maven package. Essentially, introducing a patcher that pins plugins to predetermined versions if they are present in pom.xml, updating them one-by-one after a Maven update is merged18:23:37
@tomodachi94:matrix.orgTomodachi94 (they/them)We would absolutely need to script those updates though18:24:41
@tomodachi94:matrix.orgTomodachi94 (they/them)* I'm also wondering if we should pin the built-in Maven plugins to versions in Nixpkgs and update them one-by-one instead of with the Maven package. Essentially, introducing a patcher that pins plugins to predetermined versions if they are present in pom.xml but not pinned, updating them one-by-one after a Maven update is merged18:26:16
@numinit:matrix.orgMorgan (@numinit)I've gotta figure out a way to automatically build gradle.lock with gradle2nix and the sandbox off18:33:24
@numinit:matrix.orgMorgan (@numinit)Since gradle feels the need to resolve dependencies lazily, you basically need to run the build before you can run the build 😩18:34:29
@tomodachi94:matrix.orgTomodachi94 (they/them)(Everything would be so much simpler if these build systems just used proper lockfiles 💔)18:35:14
@numinit:matrix.orgMorgan (@numinit)I tried gradle's lock format and it wasn't proper by any extent, lol. No hashes, no URLs18:35:37

Show newer messages


Back to Room ListRoom Version: 6