Clojure support

[greysteil]

Originally suggested in dependabot/feedback#76.

[camdez]

What's the latest here? Just looking for someone to do the work, or is something in flight? Happy to help!

[devn]

Same, I'm new to dependabot, but I am happy to help in any way I can.

[alexisvincent]

What is the process to get support for Clojure?

[gphilipp]

https://github.com/dependabot/dependabot-core/blob/main/CONTRIBUTING.md#contributing-new-ecosystems

[steffan-westcott]

Congratulations to @0tza for getting some funding from Clojurists Together 😀 I hope the situation outlined in the post above improves and community contributions for Clojure support will be accepted in the near future.

[greysteil]

Cc @asciimike @hmarr ☝️

[asciimike]

Congrats on the funding, and thanks to the folks who picked Dependabot as an area of investment. We're glad to see the community invest in security!

As for the above, as stated, the main issue has been that we lack the domain expertise to support the full breadth of contributed ecosystems. We have been working with another popular ecosystem on a closer partnership experience where they can provide that level of support, and would consider a similar relationship with the Clojure community. At a minimum, we are asking for two folks who will commit to being active in this repo if/when Clojure questions come up (we will likely tag you); otherwise, we don't think we can provide an acceptable level of support for devs when they have questions.

[danielcompton]

Hi @asciimike! I’m a recent ex-Hubber, admin for the Clojure community Maven repo Clojars, and the secretary of Clojurists Together which funded @0tza for this work. I’m happy to help on providing a close relationship with GitHub here 😀

[asciimike]

@danielcompton @0tza I see that the project is listed as starting 1 Nov 2021; how firm is that date? We're starting to do quarterly planning and I want to get a rough idea of when we should start talking about this in more depth.

[tobias]

Hello @asciimike. I also am an admin for Clojars, the Clojure community Maven repository. I would be happy to provide a second set of eyes on any Clojure (& Clojure dependency ecosystem) questions.

[danielcompton]

I see that the project is listed as starting 1 Nov 2021; how firm is that date? We're starting to do quarterly planning and I want to get a rough idea of when we should start talking about this in more depth.

What kind of timing works best for you? The paid work was planned to be started in November, but we can also do development/prep work/coordination/etc. before then?

[asciimike]

@danielcompton I think Nov 1 is actually pretty good as we should be wrapping up one of our larger currently-in-flight projects by then and can focus on new ecosystems. I'll set myself a reminder to ping this thread in mid-October to pick this up again.

[RutledgePaulV]

Hey all, is November still in the cards for this? I'm trying to balance timing of this feature versus rolling our own solution(s). Thanks and let us know if there's something we can do to assist.

[0tza]

Hi! Seems like my schedule is clearing out and this is starting 1st Nov as expected. Happy to see all the interest and assist offers, I'll try to include everyone in the conversations.

[gphilipp]

Hi @0tza, sounds like you should have started the work by now 🤞. If there are conversations happening, where can we find them and contribute?

[0tza]

I have started to move all the conversations to https://clojurians.slack.com/archives/C02PZRZPC4R
See you all there 👋🏽

[exvuma]

@0tza if we don't have access to that workspace how should we request access?

[0tza]

@0tza if we don't have access to that workspace how should we request access?

That's a public channel on clojurians slack. it should be open to anyone.

[github-actions]

👋 This issue has been marked as stale because it has been open for 2 years with no activity. You can: comment on the issue or remove the stale label to hold stale off for a while, add the Keep label to hold stale off permanently, or do nothing. If you do nothing, this issue will be closed eventually by the stale bot. Please see CONTRIBUTING.md for more policy details.