Re: Migrating nREPL out of Clojure Contrib

2017-07-18 Thread Phil Hagelberg
Thanks for continuing to maintain this lib, Chas; I'm glad to see this move to make it more accessible to potential contributors. I believe the original choice of the EPL was made specifically to support this kind of scenario. Personally I see a reboot as being a lot of effort for little gain,

[ANN] Leiningen 2.5.1 released

2015-01-09 Thread Phil Hagelberg
-visible changes: * No longer skip certificate checking when upgrading on Windows. (Phil Hagelberg) * Fix password prompt for Cygwin users. (Carsten Behring) * Fix a bug where `lein pom` did not add the project's SCM URL to pom.xml. (Fredrick Giasson) * `lein clean` now cleans up all profile

Clojars and poodlebleed

2014-10-15 Thread Phil Hagelberg
Greetings Clojure users. In order to defend against the PoodleBleed SSL attack[1], I've disabled SSL v3 on Clojars's nginx server. This will break compatibility at least with IE6, and possibly some other clients. If anyone discovers important clients that require SSL v3 enabled, let us know at

Re: [PSA] Clojars scp disabled until further notice

2014-09-27 Thread Phil Hagelberg
Lee Spector lspec...@hampshire.edu writes: I just want to chime in to note that not everyone who works in Clojure, and for whom Clojars is the obvious (only?) reasonable way to share libraries, is a professional developer. Some of us are, for example, researchers or students in a range of

Re: [PSA] Clojars scp disabled until further notice

2014-09-25 Thread Phil Hagelberg
Carlos Fontes ccfon...@gmail.com writes: Some immemorial time ago I tried `lein deploy clojars` which lead me to read complex security stuff. I really tried to make it work, I did.. but it didn't just work, it didn't work with some work and even with more work, so now I just use `lein

[PSA] Clojars scp disabled until further notice

2014-09-24 Thread Phil Hagelberg
Greetings, Clojure hackers. Due to the recent vulnerability in Bash[1], the scp-based deploy services on clojars.org has been disabled for the time being. If you have been using this (as opposed to the HTTPS deploy used by `lein deploy clojars` and `maven deploy`), we'd be interested in hearing

Re: [PSA] Clojars scp disabled until further notice

2014-09-24 Thread Phil Hagelberg
Phil Hagelberg p...@hagelb.org writes: Due to the recent vulnerability in Bash[1], the scp-based deploy services on clojars.org has been disabled for the time being. I neglected to mention here that the Clojars's susceptibility to this vulnerability was both discovered and fixed by Nelson

[ANN] Leiningen 2.5.0

2014-09-17 Thread Phil Hagelberg
that require heavy configuration begin to take advantage of these features, it should allow project.clj files to be dramatically simplified. * Allow certain profiles to be `^:leaky` and affect downstream. (Hugo Duncan) * Allow profiles to be loaded out of plugins. (Phil Hagelberg, Hugo Duncan) * Make

[ANN] Leiningen 2.4.3

2014-08-05 Thread Phil Hagelberg
that this only works under Leiningen 2.x; users of Leiningen 1.x should upgrade to get secure access. Here's a full list of user-visible changes: * Allow implicit hooks/middleware to be disabled. (Phil Hagelberg) * Print compilation errors as they occur. (Paul Legato) * Switch Central repository to using

[ANN] Leiningen 2.4.2

2014-06-15 Thread Phil Hagelberg
Greetings. I'm happy to announce the release of Leiningen 2.4.2. Most of the changes are fixes to bugs uncovered in the 2.4.0 release. However, a couple tiny features snuck in. The main one is that the file `pom.properties` originally only got included in jars and uberjars, but now it's

[ANN] Leiningen 2.4.0

2014-06-09 Thread Phil Hagelberg
to make useful uberjars even when not AOTing a -main function. A full list of significant changes: * Allow aliases to splice in values from the project map. (Phil Hagelberg) * Allow plugins to override built-in tasks. (Phil Hagelberg) * Add `release` task for automating common release steps. (Wayne

Re: Proposing a new Clojure documentation system (in Clojure)

2014-04-29 Thread Phil Hagelberg
On Saturday, April 26, 2014 9:21:26 PM UTC-7, Mars0i wrote: I like the general idea of the Valentin's proposal, but I don't understand every bit of it. It sounds complicated. Personally, I'd rather see something that's relatively simple, and good enough, than something that's perfect but

Re: Proposing a new Clojure documentation system (in Clojure)

2014-04-29 Thread Phil Hagelberg
On Tuesday, April 29, 2014 8:47:58 PM UTC-7, da...@axiom-developer.org wrote: Can I ask, quite seriously and not intending any sarcasm, what you mean by detracts from what's important? What's important is writing clear explanatory prose. This is really hard to do for a lot of reasons, but

Re: Proposing a new Clojure documentation system (in Clojure)

2014-04-29 Thread Phil Hagelberg
On Tuesday, April 29, 2014 9:08:48 PM UTC-7, Mars0i wrote: Oh, sorry--you also asked what I meant by detracts from what's important. If a documentation formatting/organizing/coding system required learning a lot, figuring out a lot, adding information that is unlikely to be helpful

Re: dependencies from github

2014-03-27 Thread Phil Hagelberg
On Thursday, March 27, 2014 7:16:36 AM UTC-7, Aaron Cohen wrote: If version doesn't end in -SNAPSHOT, then lein (deferring to the way maven works) will retrieve that dependency to your local $HOME/.m2/repository/not-really-trusted-package/version directory, and never update it again (because

Leiningen Survey

2014-03-26 Thread Phil Hagelberg
Hello folks. Every year we run a survey of Leiningen users to get a better understanding of usage patterns and where we should focus development. I just opened this year's: https://lein-survey-2014.herokuapp.com It would be great if you could take a minute or two to fill it out. Thanks!

Re: Leiningen Survey

2014-03-26 Thread Phil Hagelberg
On Wednesday, March 26, 2014 11:34:27 AM UTC-7, Hoàng Minh Thắng wrote: What do you mean unmanaged jars in the question What annoys you about Leiningen? Some people are stuck using random jar files they downloaded manually from various places on the web rather than dependencies from a proper

Re: Granularity in Leiningen profile loading

2014-01-14 Thread Phil Hagelberg
Can you be more specific about what you did and what you would expect to happen in that case? -Phil -- -- You received this message because you are subscribed to the Google Groups Clojure group. To post to this group, send email to clojure@googlegroups.com Note that posts from new members are

Re: Granularity in Leiningen profile loading

2014-01-14 Thread Phil Hagelberg
gvim writes: ... but after `lein deps :tree` the cljs profile still isn't loaded. That's normal; you would need to run `lein with-profile cljs deps :tree` to activate a profile. But if you have dependencies that are needed for your project to compile, it's a very bad idea to omit them from

Re: library development

2013-12-20 Thread Phil Hagelberg
On Friday, December 20, 2013 9:16:59 AM UTC-8, John Gabriele wrote: If I can just `lein install` my libs (or other people's libs) and then use them in all my projects (just like the libs found at clojars), what extra functionality does lein-localrepo provide beyond that? It used to be

Re: Am I missing something?

2013-12-03 Thread Phil Hagelberg
On Tuesday, December 3, 2013 3:26:53 PM UTC-8, James Laver wrote: So, am I missing something? Are there any libraries people can recommend that will make my life easier? Am I just looking at this in completely the wrong way? It sounds like half of your problems are arising from DB migrations.

Re: [ANN] fsrun : file change notifier high order lein task

2013-11-26 Thread Phil Hagelberg
Cool; this looks really handy. Could you add it to the list of plugins on the Leiningen wiki? https://github.com/technomancy/leiningen/wiki/Plugins -Phil -- -- You received this message because you are subscribed to the Google Groups Clojure group. To post to this group, send email to

[ANN] Leiningen 2.3.4 released

2013-11-19 Thread Phil Hagelberg
Hello folks. I'm happy to announce the release of Leiningen 2.3.4. This one is primarily a bugfix release; though there are a few minor enhancements. ## 2.3.4 / 2013-11-18 * Suggest `:exclusions` to possibly confusing `:pedantic?` dependencies. (Nelson Morris, Phil Hagelberg) * Optionally

Re: uberjar problem with Leiningen 2.3.3 (works with 2.3.2)

2013-10-19 Thread Phil Hagelberg
xavi writes: Does this mean that the problem was not completely solved in Ring 1.2? Argh! I'll try to take a look to Ring's code and see if I can find the problem and fix it. I took another look, and it looks like it was fixed by the commit I linked to previously, but then broken again a

Re: uberjar problem with Leiningen 2.3.3 (works with 2.3.2)

2013-10-18 Thread Phil Hagelberg
I think this is due to a bug in older versions of Ring's wrap-resource middleware: https://github.com/ring-clojure/ring/commit/89033af49dfe3d6e6fcdebb3f5455f6de0979034 In versions of Ring older than 1.2.0, directory entries will be served out of jar files as zero-length HTTP responses.

Re: uberjar problem with Leiningen 2.3.3 (works with 2.3.2)

2013-10-18 Thread Phil Hagelberg
xavi writes: @Phil I'm already using ring 1.2 Hm; it's probably the same problem manifested a different way then. Something is assuming that any entry in a jar file is fair game whether it's a directory or file. -Phil pgpcYIkWpcwtg.pgp Description: PGP signature

Re: Teaching Clojure to students (how ?)

2013-10-08 Thread Phil Hagelberg
On Monday, October 7, 2013 8:12:05 PM UTC-7, John Gabriele wrote: For new users who want to get their feet wet right on the first day, I'd suggest this (after they make sure they've got Java installed): #. Download `lein`, drop it into your ~/bin, and `chmod +x` it if necessary, #.

[ANN] Grenchman, for running Clojure code quickly

2013-10-08 Thread Phil Hagelberg
When we've polled Leiningen users in the past[1], the #1 pain point people always report is its startup time. While there have been a number of strategies suggested to reduce the annoyance of slow JVM startup time and project loading, keeping your JVMs around can lead to awkward workflows in some

[ANN] Leiningen 2.3.3 released

2013-10-05 Thread Phil Hagelberg
I'm happy to announce the release of Leiningen 2.3.3. * Add support for `:uberjar-merge-with`. (Marshall Bockrath-Vandegrift) * Better error message for `-m` arg in `run` task. (Aleksandar Simic) * Support stdin when using `:eval-in :nrepl`. (Phil Hagelberg) * Add directory entries to jar files

Re: Emacs Clojure mode : No syntax highlighting for #_

2013-09-03 Thread Phil Hagelberg
On Wednesday, August 28, 2013 7:06:45 PM UTC-7, Joel Holdbrooks wrote: It might be a bit involved to have *#_* and the subsequent form appear commented through clojure-mode's syntax highlighting. However, it would also incorrectly express the semantics of *#_* which, arguably, is counter to

[ANN] Leiningen 2.3.2 released

2013-08-20 Thread Phil Hagelberg
Hello everybody. I'm happy to announce the release of Leiningen 2.3.2, a minor bugfix release over 2.3.1. Changes include the following: * Write `.nrepl-port` file for better tool interoperability. (Phil Hagelberg) * Support targeted upgrades in `lein.bat`. (Shantanu Kumar) * Warn when projects

Re: Current state of the art in Web deployment?

2013-08-19 Thread Phil Hagelberg
On Saturday, August 17, 2013 4:51:34 PM UTC-7, Mark Mandel wrote: On Sun, Aug 18, 2013 at 6:52 AM, John Jacobsen eigen...@gmail.comjavascript: wrote: After some prototyping and development, we are now getting to the stage where lein run and a Jetty server running from -main aren't going

[ANN] Leiningen 2.3.1 released

2013-08-13 Thread Phil Hagelberg
Hello folks. With some help from Nelson Morris I've pushed out the 2.3.1 release of Leiningen. This fixes the self-install issues as well as the issue around AOT classes not being included in jar files. It also adds a new flag (:monkeypatch-clojure-test false) you can use to disable Leiningen's

Re: [leiningen] [ANN] Leiningen 2.3.1 released

2013-08-13 Thread Phil Hagelberg
Phil Hagelberg writes: With some help from Nelson Morris I've pushed out the 2.3.1 release of Leiningen. This fixes the self-install issues as well as the issue around AOT classes not being included in jar files. It also adds a new flag (:monkeypatch-clojure-test false) you can use

Re: [ANN] Leiningen 2.3.0 released

2013-08-12 Thread Phil Hagelberg
On Monday, August 12, 2013 6:52:55 AM UTC-7, Sean Corfield wrote: On Windows it definitely has been a problem in the past. I'm pretty sure some users have run into problems with the S3 Amazon SSL certificate in the past on non-Windows platforms too, but I'll defer to you regarding the

Re: [ANN] Leiningen 2.3.0 released

2013-08-12 Thread Phil Hagelberg
On Monday, August 12, 2013 9:29:53 AM UTC-7, Greg wrote: I used Homebrew to upgrade. Do you happen to know what the relationship is between your `lein upgrade` command and the `brew upgrade leiningen` command? We include a `bin/lein-pkg` script for downstream packagers like Debian, homebrew,

Re: Feature toggles via Leiningen profiles

2013-08-12 Thread Phil Hagelberg
On Monday, August 12, 2013 1:36:43 PM UTC-7, Karsten Schmidt wrote: Hi Michal, have a look at this gist to see how this can be done: https://gist.github.com/postspectacular/6214886 Rather than shadowing one implementation with another, I'd recommend keeping both implementations in different

Re: [ANN] Leiningen 2.3.0 released

2013-08-10 Thread Phil Hagelberg
On Friday, August 9, 2013 10:07:39 PM UTC-7, Sean Corfield wrote: Can we _please_ get the Leiningen artifacts placed somewhere that doesn't cause all sorts of SSL problems? This has been a repeated problem over the last several releases. Mac and Windows users have been s.o.l. each time

Re: [ANN] Leiningen 2.3.0 released

2013-08-09 Thread Phil Hagelberg
Hey everyone; sorry for the chaos around this release. The upload process is now fully automated[1] to reduce manual error, and I'm going to make sure a few other people have access to the S3 bucket so if something like this happens again it can be fixed when I'm not around. There's been one

Re: [ANN] Leiningen 2.3.0 released

2013-08-09 Thread Phil Hagelberg
On Friday, August 9, 2013 6:32:06 PM UTC-7, John Jacobsen wrote: please advise? Thanks! Hm; looks like self-install is getting invoked too soon. Not sure why it was working for me earlier. Try setting `export HTTP_CLIENT=wget -O` for now. -Phil -- -- You received this message because you

Re: [ANN] Leiningen 2.3.0 released

2013-08-08 Thread Phil Hagelberg
On Thursday, August 8, 2013 8:52:47 PM UTC-7, Frank Hale wrote: Looks like I was way too fast. Upgrading just worked for me. Thank you! I got the ACL wrong on the initial upload but fixed it a few minutes after the email went out. -Phil -- -- You received this message because you are

Re: [ANN] Nightcode, an IDE for Clojure and Java

2013-08-05 Thread Phil Hagelberg
On Friday, August 2, 2013 8:49:06 AM UTC-7, Zach Oakes wrote: As for my choice of public domain, I always do that for my projects. Of course it's your choice, but are you aware there are jurisdictions in which users cannot legally make copies of code released in the public domain? -Phil [1]

Re: [ANN] Nightcode, an IDE for Clojure and Java

2013-08-05 Thread Phil Hagelberg
As for my choice of public domain, I always do that for my projects. I realize that I am going against the grain, but it's a principled issue for me. I wrote about it on my blog, but if you'd like to discuss it further we should do it elsewhere because it can easily derail the thread. Oops;

Re: help actually changing :use to :require :refer :all?

2013-07-28 Thread Phil Hagelberg
On Saturday, July 27, 2013 4:46:06 PM UTC-7, Alex Baranosky wrote: On our work projects at Runa, we have an unwritten code standard of always writing out the full namespace, and not using shortcuts as you suggest. The reason being that it can be very hard to search for usages of a

Re: Can we please deprecate the :use directive ?

2013-07-24 Thread Phil Hagelberg
I can confirm that the point of adding :refer support to :require was to deprecate :use; I suggested this to Rich at the 2011 Conj when he mentioned the ns macro is too complicated, and he agreed it would be a good idea to enhance :require so that it would make :use unnecessary in order to

Re: lein repl and missing yank

2013-06-28 Thread Phil Hagelberg
On Friday, June 28, 2013 7:17:14 PM UTC-7, Jonathan Fischer Friberg wrote: Should pasting be part of jline? Am I the only one that finds that really odd? jLine is a port of readline to the JVM. readline supports a kill ring, so jLine should too. That's different from the terminal performing

Re: lein repl and missing yank

2013-06-26 Thread Phil Hagelberg
On Wednesday, June 26, 2013 3:26:58 PM UTC-7, Manuel Sugawara wrote: Am working on a linux terminal with the REPL (as in lein repl) and the C-y binding does not work (yank-command, or paste). Definitely a bug that it's not working. Can you report it on the reply project?

Re: Heroku Clojure scheduled tasks versus worker threads

2013-06-20 Thread Phil Hagelberg
On Jun 18, 6:22 am, Jonathon McKitrick jmckitr...@gmail.com wrote: So, the question then, is what would be the difference between a heroku scheduled command (which I currently am running, wakes up, does some work, etc) and a 'worker process' type?  Does the latter need a job queue set up?  

Re: lein clojars plugin and latest version of leiningen

2013-06-05 Thread Phil Hagelberg
On Jun 5, 2:54 pm, Mark Engelberg mark.engelb...@gmail.com wrote: So. is this a new change that puts it into the provided subdirectory of target?  If so, what's the easiest way to get lein push working again? Yeah, you can set :target-path in project.clj to just target to get the old behaviour.

[ANN] Leiningen 2.2.0 released

2013-05-29 Thread Phil Hagelberg
Greetings fellow humans. I'm happy to announce the release of Leiningen 2.2.0. Notable new features include support for -javaagent, (used for certain VM-level instrumentation tools) and the ability to deploy arbitrary files from the filesystem rather than just project artifacts. There are a

Re: Leiningen 2.2.0 released

2013-05-29 Thread Phil Hagelberg
On May 29, 11:01 am, Alan Thompson thompson2...@gmail.com wrote: curl: (35) Unknown SSL protocol error in connection to github.com:443 Failed to downloadhttps://github.com/technomancy/leiningen/raw/stable/bin/lein This just means your OS's certificate store doesn't honor the root signing

Re: Getting highlighted clojure code into a presentation

2013-05-17 Thread Phil Hagelberg
I just present from within Emacs itself usually. But when fancier visuals are required I'll present from a browser with HTML produced by htmlize.el. Using a program that doesn't let you store the slide source as plain text (for version control) sounds like a bad idea. Phil -- -- You received

Re: Utility libraries and dependency hygiene

2013-05-15 Thread Phil Hagelberg
Timothy Baldridge writes: Neither of these snarky answers solve the problem. I just spent an entire week updating modules from version of a library that expected a seq of maps to one that expected map of seqs of maps. The very nature of data implies a format. If that format changes you have

Re: [ANN] Clojars policy change

2013-05-14 Thread Phil Hagelberg
Phil Hagelberg writes: I've rolled this back briefly due to a bug surrounding deploying SNAPSHOT versions over scp. The bug is fixed, and the fix is deployed. -Phil pgpRuN5qASLVY.pgp Description: PGP signature

Re: unusual question: how do you get morale?(or moral support)

2013-05-13 Thread Phil Hagelberg
Nelson Morris writes: What helps is direct involvement by someone else. I'll definitely echo this. People are more important than programs. If I'm writing code that I'm going to be the only one using, maybe it'll hold my interest for a few hours. But even in the best cases it's usually only

Re: FTP with Clojure on Heroku

2013-05-13 Thread Phil Hagelberg
Jonathon McKitrick writes: Has anyone had any success accepting FTP uploads in Clojure on Heroku? Unfortunately Heroku apps are only capable of responding to HTTP requests at this point. -Phil pgp4tO21faepT.pgp Description: PGP signature

Re: Utility libraries and dependency hygiene

2013-05-13 Thread Phil Hagelberg
Angel Java Lopez writes: I guess it could be difficult to implement such feature in Java/Clojure It's really not difficult to do if you limit yourself to Clojure since Clojure namespaces are first-class and easy to manipulate at run-time. We implemneted a prototype of this in under two hours

Re: Utility libraries and dependency hygiene

2013-05-13 Thread Phil Hagelberg
Stuart Sierra writes: That's cool, and it will work for the simple case of libraries A and B depending on different versions of C. But it still breaks down in more complex cases: e.g. if I want to share data between A and B using a protocol or type defined in C, and there are 2 incompatible

[ANN] Clojars policy change

2013-05-13 Thread Phil Hagelberg
Hello everyone. In the aftermath of the recent Linode intrusion[1][2], we determined that Clojars' policy of allowing artifacts to be overwritten[3] makes it much more difficult to detect an attack than it would be if artifacts were immutable like they are in most other repositories. While

Re: [ANN] Clojars policy change

2013-05-13 Thread Phil Hagelberg
Phil Hagelberg writes: In the aftermath of the recent Linode intrusion[1][2], we determined that Clojars' policy of allowing artifacts to be overwritten[3] makes it much more difficult to detect an attack than it would be if artifacts were immutable like they are in most other repositories

Re: [ANN] Clojars policy change

2013-05-13 Thread Phil Hagelberg
Zack Maril writes: Is the policy for SNAPSHOT artifacts still that you can overwrite as much and as often as you want? Technically no, but effectively yes. Any version ending in -SNAPSHOT is automatically translated into a timestamped version upon deploy or resolution. So 0.5.0-SNAPSHOT

Re: New Relic installation on Heroku

2013-05-08 Thread Phil Hagelberg
Jonathon McKitrick writes: That's a good suggestion. I made that change, and there definitely was a different because the heroku log said New Relic agent was already running because it had been specified in the JVM_OPTS. So I removed it from there, restarted, but no change in the New

Re: emacs - how to wean me off the family of Java IDEs

2013-05-02 Thread Phil Hagelberg
Devin Walters writes: Voicing strong disagreement with using emacs-live as a starting point. One reason: They rebind a bunch of default emacs bindings, which is just fine by me, but C-h to a newcomer is important, and IIRC they rebound it. I think Phil's emacs-starter-kit modules/packages

Re: emacs - how to wean me off the family of Java IDEs

2013-05-01 Thread Phil Hagelberg
Ulises writes: Because it's part of slime is why I was wondering whether it was already there and I had just missed it. IIRC the implementation in swank-clojure is basically just grep that works inside jar files; it gives you lots of false positives when functions have the same name. It

Re: Do functions never get inlined by jvm?

2013-04-25 Thread Phil Hagelberg
Three repetitions is not nearly enough to get a feel for how hotspot optimizes functions when it detects they're in a tight loop. I don't know how javac works, but Clojure doesn't optimize much for cases where hotspot can do a much better job over time. -Phil -- -- You received this message

Re: ANN How To Make Your Open Source Project Awesome (or: Not Suck)

2013-04-20 Thread Phil Hagelberg
Michael Klishin writes: My point was at least try to find a new maintainer. Don't let it rot. I see where you're coming from, but there's definitely a place for phasing out a project gracefully. The majority of projects will have no users outside the original author, and that's fine. There are

Re: ANN How To Make Your Open Source Project Awesome (or: Not Suck)

2013-04-20 Thread Phil Hagelberg
Michael Klishin writes: It wasn't immediately clear to me, but it makes sense, given how short the MIT license is. What licenses does it make sense to recommend? Given that Clojure libraries must be compatible with Clojure's license, the GPL is ruled out. I recommend the EPL; it's what you

Re: [ANN] Linode compromise possibly affecting Clojars

2013-04-17 Thread Phil Hagelberg
Update: thanks to an older backup from Ivan Kozik, we've been able to verify the integrity of all but 45 jars. It's likely these were legitimate redeployments by the maintainers, but I'm going to be reviewing the diffs by hand. I've attached a list of jars which haven't been verified. If your

Re: [ANN] Linode compromise possibly affecting Clojars

2013-04-17 Thread Phil Hagelberg
Update: I've manually reviewed a diff[1] of all changes to jars published since the intrusion. I found nothing suspicious in the diff, but I did see a couple instances of bytecode in it. Two of them were just bytecode being removed, but in one of them the bytecode changed when the new copy was

Re: [ANN] Linode compromise possibly affecting Clojars

2013-04-17 Thread Phil Hagelberg
Andrew Wagner writes: Just wanted to say, awesome job with this. I appreciate your diligence! Thanks! Luckily part of my job at Heroku is to keep an eye out for this kind of thing, so that's why I'm able to spend more cycles on it when issues do arise. But Alex Osborne, Ivan Kozik, and Nelson

Re: [ANN] Linode compromise possibly affecting Clojars

2013-04-17 Thread Phil Hagelberg
For the sake of completeness I've included Alex Osborne's analysis of the situation below. (Alex runs Clojars.) -Phil The really annoying thing about security is it's impossible to conclusively prove at any time anything is

[ANN] Linode compromise possibly affecting Clojars

2013-04-16 Thread Phil Hagelberg
Today Linode announced that their database was attacked[1]. Clojars is hosted on Linode, and while we have no evidence that the attackers used their access to break into the VPS instance which hosts Clojars, we can't rule out the possibility. Other VPS instances[2] have been broken into.

Re: [ANN] Linode compromise possibly affecting Clojars

2013-04-16 Thread Phil Hagelberg
Phil Hagelberg writes: If you run a private proxying internal repository for your company, you can help us verify checksums. I'll be posting a follow-up soon with some code you can use to calculate and publish checksums so we can investigate discrepancies. Update: Hugo Duncan pointed out

Re: Opinions on Equality Semantics

2013-04-08 Thread Phil Hagelberg
JvJ writes: Even though the behaviour of lists and vectors differs under specific functions, they still count as equal, but this statement If a = b, then (f a) = (f b) seems like it would be some sort of rule or axiom about functional programming. What's the FP purists' view on this?

Re: Signing libraries on clojars

2013-04-05 Thread Phil Hagelberg
I'm not sure Clojars supports sending signatures over scp yet. You might need to do an HTTP deploy with `lein deploy`. The docs around this are a bit scarce; sorry about that. Phil -- -- You received this message because you are subscribed to the Google Groups Clojure group. To post to this

Re: ANN Introducing Clochure: a better Clojure

2013-04-01 Thread Phil Hagelberg
Michael Klishin writes: 2013/4/1 Rostislav Svoboda rostislav.svob...@gmail.com This is a step back. The only way for the future is xml: bracket+ 1 2/bracket This is planned for the next release. In the mean time you can port all your project.clj files to project.xml with this plugin:

[ANN] Leiningen 2.1.2 released

2013-03-28 Thread Phil Hagelberg
Hello folks. I just released version 2.1.2 of Leiningen, fixing a number of bugs: ## 2.1.2 / 2013-02-28 * Allow TieredCompilation to be disabled for old JVMs. (Phil Hagelberg) * Fix a bug merging keywords in profiles. (Jean Niklas L'orange) * Fix a bug where tests wouldn't run under

Re: Clojure libraries on remote machines

2013-03-28 Thread Phil Hagelberg
You would need to run a mirror for Maven Central and Clojars. Once the mirror is set up you can look at lein help sample under :mirrors to see how to configure Leiningen to use it. Phil -- -- You received this message because you are subscribed to the Google Groups Clojure group. To post to

Re: Clojure/West 2013 videos?

2013-03-25 Thread Phil Hagelberg
Cedric Greevey writes: Outfits like InfoQ and Confreaks do a very good job, but they use professional staff (who expect to be paid). And I'm guessing what they're doing is obsolescent, if not already obsolete, in that it can be done about as well for a lot less money. If they're charging

Re: [ANN] Leiningen 2.1.1 released

2013-03-22 Thread Phil Hagelberg
There are just two files, the bin script and the uberjar. Though for project dependencies and the repl you will need to download further jars from a repository. So hopefully you have an internal mirror or something for that. -Phil -- -- You received this message because you are subscribed to

[ANN] Leiningen 2.1.1 released

2013-03-21 Thread Phil Hagelberg
Hello folks. I've just pushed out version 2.1.1 of Leiningen, which contains a handful of bug fixes from 2.1.0. * Add `:test-paths` to directories shared by checkout deps. (Phil Hagelberg) * Allow `run` task to function outside projects. (Phil Hagelberg) * Fix a bug preventing `with-profiles

[ANN] Leiningen 2.1.0 released

2013-03-20 Thread Phil Hagelberg
Greetings, hackers. Last night I pushed out version 2.1.0 of Leiningen! Here are some highlights from the release: • Running `lein deps :tree` will now warn you whenever any of your dependencies declare version ranges. Transitive version ranges have been a common source of confusion[1] for

Leiningen survey

2013-03-15 Thread Phil Hagelberg
Hello folks. If you use Leiningen, I'd appreciate it if you could take a few moments to answer a few questions about your usage patterns so we can get a better idea of where to focus development efforts in the future. https://lein-survey-2013.herokuapp.com/ Thanks a bunch! -Phil -- --

[ANN] Syme: for real-time collaborating over SSH

2013-03-12 Thread Phil Hagelberg
Hello folks. I'd like to announce a side-project I've been working on: https://syme.herokuapp.com From the FAQ: (https://syme.herokuapp.com/faq) # So what does Syme offer? It sets up disposable EC2 nodes for collaborating on GitHub projects via ssh and tmux. * Enter the name of a GitHub

Re: Windows Installation

2013-03-11 Thread Phil Hagelberg
David Powell writes: I've made installers for clojure-based programs using InnoSetup before, and wouldn't mind doing it if people think it is a good idea. If someone contributes a wizard-builder that I can run on my Debian system, I can run it as part of the release process and store the

Re: Windows Installation

2013-03-11 Thread Phil Hagelberg
Martin Jul writes: An alternative to GNU tools is to use the things that ship with Windows PowerShell and are on most developer's machines already, e.g. using the Invoke-RestMethod commandlet as an alternative to wget and curl. So the latest version of bin/lein (which will become 2.1.0)

Re: Improving visibility of clojure-doc.org

2013-03-11 Thread Phil Hagelberg
Devin Walters writes: I assume this has been discussed to death already, but isn't there some way to get clojure-doc and clojuredocs to live under the same umbrella? I believe this is the plan; it's just blocked on not having the manpower to port clojuredocs.org's web UI off Rails and build

Re: Windows Installation

2013-03-09 Thread Phil Hagelberg
James Ashley writes: 2) Download the lein install script as text from the leiningen home page. 3) Copy it over to my cygwin directory 4) Search/replace to replace the HTML entities with the real thing. I think this was a matter of amp; and gt; Can you explain how you downloaded bin/lein

Re: A forum for Clojure...?

2013-03-05 Thread Phil Hagelberg
BJG145 writes: Imagine a swish site with sensible sections for all levels; topics like News, Programming, Leiningen, Light Table, Getting Started, General Chat etc etc (OK so I don't know enough about the subject to know what they should be)...does the idea have any appeal, or is it not

Re: Faster lein

2013-03-04 Thread Phil Hagelberg
Buck Golemon writes: I take this to mean that there's no widely accepted solution. The widely-accepted solution is to leave a single process running. It certainly has limitations, but it's the way most people deal with the problem. Really, I just want `lein run` to be faster. Can someone

Re: printing and reading functions

2013-03-04 Thread Phil Hagelberg
Dave Sann writes: Is there an Jira issue for this? Is it worth raising one? I don't follow Clojure development much these days, but I do recall Rich's Conj keynote a couple years ago mentioning an interest in dynamicity knobs that let you tune space/perf vs feature trade-offs. But that

Re: Faster lein

2013-03-04 Thread Phil Hagelberg
Buck Golemon writes: I'm quite interested in the interactive session option, but none of the mechanics are described. How would I do the equivalent of `lein run` or `line cljs autobuild` in the repl? Did I miss this in the docs somewhere? It's also quite possible that it's an obvious feature

Re: LEIN_FAST_TRAMPOLINE

2013-03-03 Thread Phil Hagelberg
Fast trampoline only affects the startup time of the trampoline higher-order task. I guess that could be clearer in the docs. -Phil -- -- You received this message because you are subscribed to the Google Groups Clojure group. To post to this group, send email to clojure@googlegroups.com Note

Re: printing and reading functions

2013-03-03 Thread Phil Hagelberg
Getting at the var won't work, but you can get fns to print readably with their source using https://github.com/technomancy/serializable-fn Unfortunately you still have the problem that whoever defined it has to opt in. Ohil -- -- You received this message because you are subscribed to the

Re: Windows MSI installer for a msysGit-compatible Clojure?

2013-03-02 Thread Phil Hagelberg
On Mar 1, 2013 6:01 PM, AtKaaZ atk...@gmail.com wrote: yeah looks like both lein and lein.bat fail with 403 curl: (22) The requested URL returned error: 403 Failed to download https://leiningen.s3.amazonaws.com/downloads/leiningen-2.1.0-SNAPSHOT-standalone.jar That error just means you're

Re: does lein2 use repositories defined in ~/.m2/settings.xml?

2013-02-21 Thread Phil Hagelberg
James Xu writes: Thanks! But it sounds odd to me that lein does not use ~/.m2/settings.xml, why this decision? Leiningen never explicitly supported settings.xml; it was checked by accident as an implementation detail due to lein1 using maven-ant-tasks rather than Aether. But the better answer

Re: does lein2 use repositories defined in ~/.m2/settings.xml?

2013-02-21 Thread Phil Hagelberg
David Powell writes: Putting repos in profiles.clj seems to have the advantage that I'll be able to override all accesses to central / clojars / etc to go via the nexus proxy; and I won't have to start hacking at published project.cljs if infrastructure changes mean that the repo server

Re: Faster lein

2013-02-20 Thread Phil Hagelberg
Softaddicts writes: SSD + fastest laptop in your price range ;) lein2 help takes 12 seconds from start to back at command prompt... FWIW the help task is basically the worst case scenario for measuring startup time since it has to load every single task in order to get docstrings for them. If

Re: why did lein just download Clojure 1.5?

2013-02-19 Thread Phil Hagelberg
larry google groups writes: Thanks for the suggestion. I run lein deps :tree but I do not see Clojure 1.5 listed as a dependency anywhere. But if I run: Some unfortunate dependency is declaring a version range dependency on Clojure. If you can figure out which one it is, you should report it

Re: Loading in jars with dependencies at runtime into separate classloaders with independent classpaths

2013-02-19 Thread Phil Hagelberg
Adam Clements writes: I'm working on a web api wrapper around a number of java/clojure libraries. One problem that I have run into is transitive dependency conflicts, especially when some of the projects are older than others. If you are dealing solely with conflicts in Clojure code and

  1   2   3   4   5   6   7   8   9   10   >