Fork me on GitHub
#tools-deps
<
2021-04-09
>
seancorfield18:04:54

I’m wondering: how many folks are using :override-deps (or :default-deps — but more specifically :override-deps)?

tvaughan18:04:40

We have small-ish monorepo with some libraries, and fulcro front and back ends. 0 uses of override-deps

seancorfield18:04:58

Thanks. Yes, I should have mentioned that “Folks using a monorepo setup and not using :override-deps is also a very useful data point for me”.

nnichols18:04:35

I only use it in my personal deps.edn, and mostly for quickly testing version compatibility. I have yet to see it in a project edps.edn file

favila18:04:04

Using both in a monorepo setup, or at least trying to. We keep encountering odd rough edges where the version replacement doesn’t seem to happen correctly

favila18:04:11

we use :default-deps to synchronize direct dependencies among monorepo modules. none of them are supposed to use version coordinates, but inherit from default-deps, which is in an alias that must always be active

favila18:04:35

we use :override-deps to address version-pinning problems for transient deps, e.g. to address CVEs on things we don’t depend on directly

seancorfield19:04:22

@U09R86PA4 I’m curious how you specify the lib deps where :default-deps plays a role? some/lib nil?

seancorfield19:04:08

We use some/lib {} with :override-deps. I seem to recall some tooling having a hard time with nil but maybe that’s just in the past. I’m just wondering how much value it is really adding to our setup, since it forces every invocation to specify an alias to pick those overrides up.

seancorfield19:04:41

If we were using it solely to address transitive deps/CVEs, I wouldn’t be so averse to just duplicating the lib specs — I think Jackson is about the only thing where we have to force an older version due to incompatibilities with some other lib we use…

seancorfield18:04:49

(background: we use it heavily at work but I’ve been looking at Polylith a lot recently and there doesn’t appear to be anywhere to “hang” a single alias with all of the “pinned” deps for a project — and I know our heavy use of :override-deps is somewhat core to our struggles to “fit” the CLI/`deps.edn` world — so I’m thinking that :override-deps is very rarely used in the wild)

seancorfield18:04:58

Thanks. Yes, I should have mentioned that “Folks using a monorepo setup and not using :override-deps is also a very useful data point for me”.