This page is not created by, affiliated with, or supported by Slack Technologies, Inc.
2021-12-10
Channels
- # adventofcode (54)
- # announcements (30)
- # asami (13)
- # aws (10)
- # babashka (16)
- # babashka-sci-dev (44)
- # beginners (95)
- # calva (63)
- # clara (10)
- # clj-kondo (3)
- # cljfx (6)
- # cljs-dev (7)
- # cljsrn (1)
- # clojure (68)
- # clojure-europe (59)
- # clojure-nl (7)
- # clojure-norway (12)
- # clojure-spec (6)
- # clojure-uk (6)
- # clojurescript (4)
- # component (4)
- # conjure (5)
- # datomic (3)
- # deps-new (1)
- # events (4)
- # exercism (1)
- # figwheel-main (1)
- # fulcro (33)
- # gratitude (1)
- # improve-getting-started (3)
- # jobs (3)
- # lsp (5)
- # malli (10)
- # membrane (5)
- # music (3)
- # nextjournal (6)
- # off-topic (42)
- # pedestal (2)
- # polylith (14)
- # portal (11)
- # re-frame (42)
- # releases (3)
- # reveal (4)
- # shadow-cljs (62)
- # tools-build (1)
- # tools-deps (3)
- # web-security (1)
- # xtdb (3)
0-day exploit in the popular Java logging library log4j2 was discovered that results in Remote Code Execution (RCE) by logging a certain string. https://www.lunasec.io/docs/blog/log4j-zero-day/
Might even be worth editing the original message to give a summary given how severe this is. People might not click through.
I bumped log4j2 deps in https://github.com/henryw374/clojure.log4j2 ... not sure if anyone apart from me using it 🙂
This post suggests some thinking around our community practices, where some common goals could potentially enjoy new community structures. https://clojureverse.org/t/rethinking-community-scope/ It is shared here under #announcements since it is probably the beginning of a new project. Thoughts and comments would help a lot. 🙏
org.clojure/tools.logging 1.2.1 is now available • tools.logging doesn't actually have a dependency on log4j (you bring your own), but it does use log4j as a test dependency and this bumps all those deps to the new versions
https://github.com/clojure/tools.namespace 1.2.0 is now available • Fix https://clojure.atlassian.net/browse/TNS-51: Support namespaces as strings in require statements for CLJS (thanks @borkdude!) • Fix https://clojure.atlassian.net/browse/TNS-57: Support :require-macros for CLJS namespaces (thanks @borkdude!)

Not a lot of people seem to be aware of this yet, but we also have a #releases channel for minor library updates. Feel free to join if you're interested in receiving those. (cc @seancorfield - perhaps we should mention that channel in the topic of this one?)
Thanks for this! I often have minor bug fixes that get released, but I don’t think it’s worthy of a post to #announcements. Now I know where to announce them
We're pretty much at the limit of the topic length already and it's already truncated for smaller screens at Do not cross po...
maybe a pinned post then?
@U05094X3J In our experience as Admins, very few people seem to read the description, unfortunately (and a lot of people don't even read the topic!).
Generally I think we shouldn’t hesitate too much about updating in this channel, #releases is fine and all, but anyway, if there is an update to stuff people use, it is often worth an announcement, imo.
Before we had the "rule" that one shouldn't post too many updates in a row about the same project and that you should wait until the history didn't show the previous announcement anymore. But now we have all history, so I guess that rule has to be slightly changed. The window was a few weeks. Personally I try to stick to 1 update per month about the same project.
I like the one per month rule. We are big enough that if people start announcing every update it stops being useful.
I'm more like that it is wonderful and beautiful with updates. And that it is more about the update content than the time between them.
@U0ETXRFEW We had some very vocal complaints about "Hey, that library has posted five updates in the last month! It's too noisy!" -- hence #releases
So, yeah, about "once a month" for #announcements unless it's an important, major release (such as a critical security fix, for example).
I think if you have dedicated channels for your projects, it's fine to have every release mentioned in there. Heck, even wire up github
to "announce" every commit/PR/whatever in your own project's channel 🙂
I remember those complaints. One person. And I totally was thinking the opposite. "Five updates this month! Wow, that is awesome!”
A problem is that for every person having an opinion at all (in either direction) there will be 10, or even 100 which opinions we'll never possibly know of :)
Maybe they don't even have a formed opinion, so perhaps one can default to a pessimistic interpretation.
As someone who helps out with the maintenance of multiple high-impact projects, I can say that user feedback can be hard to gather, so treating attention as a scarce resource most likely helps.
(If it doesn't help you, please reflect on the necessities of other projects, and whether a stronger, more diverse community does in fact come out as a result of having a middle ground in place)
Right, which is why we have the "rules" and why #releases exists (and why we're strict about threads in #announcements). Many people do find the "noise" annoying enough to tune out and then the value of those project announcements is just wasted. Information overload is a real problem. As an Admin, I try to stay neutral and will do what I can, with the other Admins, to satisfy the squeakiest wheels without reducing value for others, where we can. As a regular user of Slack, I have #releases muted and check it occasionally but I read everything in #announcements so I want it to have a very high signal-to-noise ratio and seeing repeated announcements from prolific projects is very annoying, even from projects that I use every day (and especially from projects I have zero interest in).