dependabot-core
dependabot-core copied to clipboard
dependabot
Add support for C++ projects
C++ is a popular language nowadays. It offers great performance and many other features( blah blah blah). I am working on a project hosted on Github which is written in C++ (I mean, my project). I learned about Dependabot in Github Marketplace, and I thought that I should use it on my project. But I learned that it doesn't support C++. There are several package managers available for C++, such as vcpkg, conan, buckaroo and I supose that they can be used as a "base" (maybe along with CMake and other tools/projects) for Dependabot to manage C++ project dependencies. I hope my request will be taken in consideration by your team. Best wishes, Terens Tare.
I agree! Dependabot seems like an awesome tool. @greysteil any plans to support C/C++ in the near future?
Would love to but I don't work on Dependabot anymore (a far more capable team does!)
I do know that adding new languages is hard and takes time, though, and takes expertise from that language community. @feelepxyz is generally the point person for Dependabot issues so may be able to share more plans and how folks can help.
@greysteil thanks a lot for the feedback! @feelepxyz any plans for C/C++ support?
I guess that with the upcoming C++20 modules, dependency management could be easier than before.
Support Cmake will be amazing, save lots of work like https://github.com/cjihrig/uvwasi/blob/d3fe61d596873e6b81098ef91a2c881ca9773a4d/CMakeLists.txt#L33
Any update on this?? vcpkg now supports json based manifest now. Does that make things easier for dependabot??
Still waiting. Seems like who ever wants it will have to do it themselves
Hei, sorry for the lack of updates.
Unfortunately we don't have the capacity right now to implement support for new ecosystems like this one, specially when we lack expertise for the requested ecosystems. We also paused accepting community contributed ecosystems a while ago, although we hope to get to the point where we can unpause that soon.
We hope to be able to allocate time for highly requested ecosystems like C++ at some point in the future though, and we'll make sure to update this issue when that happens.
It would be great if Dependantbot can update the URLs in the FetchContent calls in CMake. Currently, that requires manual updates.
+1
@deivid-rodriguez vcpkg is also a MS product and has broad support across multiple platforms/os's, including existing integrations with GitHub and Actions (i.e. GitHub Actions Cache/GitHub Packages binary caching) so it seems like it would be a great choice of an ecosystem to add support for.
It would be great if Dependantbot can update the URLs in the FetchContent calls in
CMake. Currently, that requires manual updates.
In addition to that, it would be awesome to see CMake.CPM supported.
