Add support for C++ projects

dependabot / dependabot-core

🤖 Dependabot's core logic for creating update PRs.

https://docs.github.com/en/code-security/dependabot

MIT License

4.71k stars 1.02k forks source link

Add support for C++ projects #2027

Open TerensTare opened 4 years ago

TerensTare commented 4 years ago

C++ is a popular language nowadays. It offers great performance and many other features( blah blah blah). I am working on a project hosted on Github which is written in C++ (I mean, my project). I learned about Dependabot in Github Marketplace, and I thought that I should use it on my project. But I learned that it doesn't support C++. There are several package managers available for C++, such as vcpkg, conan, buckaroo and I supose that they can be used as a "base" (maybe along with CMake and other tools/projects) for Dependabot to manage C++ project dependencies. I hope my request will be taken in consideration by your team. Best wishes, Terens Tare.

ddfagbemi commented 4 years ago

I agree! Dependabot seems like an awesome tool. @greysteil any plans to support C/C++ in the near future?

greysteil commented 4 years ago

Would love to but I don't work on Dependabot anymore (a far more capable team does!)

I do know that adding new languages is hard and takes time, though, and takes expertise from that language community. @feelepxyz is generally the point person for Dependabot issues so may be able to share more plans and how folks can help.

ddfagbemi commented 4 years ago

@greysteil thanks a lot for the feedback! @feelepxyz any plans for C/C++ support?

TerensTare commented 4 years ago

I guess that with the upcoming C++20 modules, dependency management could be easier than before.

gengjiawen commented 4 years ago

Support Cmake will be amazing, save lots of work like https://github.com/cjihrig/uvwasi/blob/d3fe61d596873e6b81098ef91a2c881ca9773a4d/CMakeLists.txt#L33

soumyamahunt commented 3 years ago

Any update on this?? vcpkg now supports json based manifest now. Does that make things easier for dependabot??

malcolmdavey commented 2 years ago

Still waiting. Seems like who ever wants it will have to do it themselves

ConorWilliams commented 2 years ago

also waiting on this feature

ItsSunnyMonster commented 2 years ago

Is this issue being ignored? It's been nearly 3 years...

deivid-rodriguez commented 2 years ago

Hei, sorry for the lack of updates.

Unfortunately we don't have the capacity right now to implement support for new ecosystems like this one, specially when we lack expertise for the requested ecosystems. We also paused accepting community contributed ecosystems a while ago, although we hope to get to the point where we can unpause that soon.

We hope to be able to allocate time for highly requested ecosystems like C++ at some point in the future though, and we'll make sure to update this issue when that happens.

aminya commented 2 years ago

It would be great if Dependantbot can update the URLs in the FetchContent calls in CMake. Currently, that requires manual updates.

nam20485 commented 1 year ago

@deivid-rodriguez vcpkg is also a MS product and has broad support across multiple platforms/os's, including existing integrations with GitHub and Actions (i.e. GitHub Actions Cache/GitHub Packages binary caching) so it seems like it would be a great choice of an ecosystem to add support for.

Laguna1989 commented 7 months ago

It would be great if Dependantbot can update the URLs in the FetchContent calls in CMake. Currently, that requires manual updates.

In addition to that, it would be awesome to see CMake.CPM supported.

nbolton commented 2 months ago

It appears that vcpkg is the most popular in the context of this discussion, so supporting that first would be a good start. Conan and Buckaroo don't seem to have had much discussion so far. CMake FetchContent seems a close second, along with CMake CPM, but I imagine FetchContent is more widely used.