Microsoft Security Advisory CVE-2018-0785 - ASP.NET Core Templates enable Cross Site Request Forgery

Microsoft Security Advisory CVE-2018-0785
ASP.NET Core Templates enable Cross Site Request Forgery
Executive Summary
Microsoft is releasing this security advisory to provide information about a vulnerability in the public versions of ASP.NET Core  2.0. This advisory also provides guidance on what developers can do to update their applications correctly.
Microsoft is aware of a Cross Site Request Forgery vulnerability in the individual authentication templates for ASP.NET Core 2.0. An attacker who successfully exploited this vulnerability could change the recovery codes associated with the victim's user account without his/her consent. As a result, a victim of this attack may be permanently locked out of his/her account after loosing access to his/her 2FA device, as the initial recovery codes would be no longer valid.
The security update addresses the vulnerability by correcting the ASP.NET Core project templates.
Developers who have generated applications from the vulnerable templates should change their code using the following instructions. They should also change their code to address a further vulnerability,  CVE-2018-0784, which is in the same templates.
You should also install the latest .NET Core SDK, version 2.1.4, from https://www.microsoft.com/net/download/ as will update the templates to correct the issue for any new applications created after its installation. Existing applications must be manually updated using the instructions below.
Original Announcement
The original announcement for this issue can be found at https://github.com/aspnet/Announcements/issues/284
Mitigation Factors
ASP.NET Core applications which are not created using the ASP.NET Core 2.0 Individual Authentication templates are not vulnerable to this issue.
Affected Software
The vulnerabilities affect any Microsoft .NET Core project if it uses any of affected runtime versions listed below and have generated applications using Individual Authentication with usernames and passwords stored within the application. Applications which use Azure Active Directory, or Azure Active Directory B2C are not affected.

Vulnerable .NET SDK Version
Fixed SDK Version

2.0.0, 2.0.2, 2.0.3, 2.1.2, 2.1.3
2.1.4

Advisory FAQ
How do I know if I am affected?
Your application will be affected if you generated it using the ASP.NET 2.0 Web Application template or the ASP.NET 2.0 Web Application (Model/View/Controller) template from a vulnerable SDK version where you have selected individual authentication where user accounts are stored in-app.
To check the runtimes installed on a computer you must view the contents of the runtime folder. By default these are

Operating System
Location

Windows
C:\Program Files\dotnet\sdk\

macOS
/usr/local/share/dotnet/sdk/

Supported Linux platforms
/usr/share/dotnet/sdk/

Each SDK version is installed in its own directory, where the directory name is the version number. If you do not have a directory for 2.1.4 then any applications generated for ASP.NET Core 2.0 using Individual Authentication may be vulnerable.. Downloads for all supported platforms can be acquired from https://www.microsoft.com/net/download/
How do I fix my affected application?
Applications can be fixed by changing the code created during application generation using the following instructions.
For ASP.NET Core 2.0 Web Application (Razor Pages)

Open Pages\Account\Manage\EnableAuthenticator.cshtml.cs find the OnPostAsync() method. The last line of this file should be

return RedirectToPage("./GenerateRecoveryCodes");

Replace this line with the following code
var recoveryCodes = await _userManager.GenerateNewTwoFactorRecoveryCodesAsync(user, 10);
TempData["RecoveryCodes"] = recoveryCodes.ToArray();
return RedirectToPage("./ShowRecoveryCodes");

Open the Pages\Account\Manage\GenerateRecoveryCodes.cshtml and replace its contents with

@page
@model GenerateRecoveryCodesModel
@{
    ViewData["Title"] = "Generate two-factor authentication (2FA) recovery codes";
    ViewData["ActivePage"] = "TwoFactorAuthentication";
}

@ViewData["Title"]

        This action generates new recovery codes.

        If you lose your device and don't have the recovery codes you will lose access to your account.

        Generating new recovery codes does not change the keys used in authenticator apps. If you wish to change the key
        used in an authenticator app you should reset your authenticator keys.

    <form method="post" class="form-group">
        <button class="btn btn-danger" type="submit">Generate Recovery Codes</button>
    </form>

Open the Pages\Account\Manage\GenerateRecoveryCodes.cshtml.cs file. Replace its contents with

using System;
using System.Collections.Generic;
using System.Linq;
using System.Threading.Tasks;
using Microsoft.AspNetCore.Identity;
using Microsoft.AspNetCore.Mvc;
using Microsoft.AspNetCore.Mvc.RazorPages;
using Microsoft.Extensions.Logging;
using Company.WebApplication1.Data;

namespace Company.WebApplication1.Pages.Account.Manage
{
    public class GenerateRecoveryCodesModel : PageModel
    {
        private readonly UserManager<ApplicationUser> _userManager;
        private readonly ILogger<GenerateRecoveryCodesModel> _logger;

        public GenerateRecoveryCodesModel(
            UserManager<ApplicationUser> userManager,
            ILogger<GenerateRecoveryCodesModel> logger)
        {
            _userManager = userManager;
            _logger = logger;
        }

        public async Task<IActionResult> OnGetAsync()
        {
            var user = await _userManager.GetUserAsync(User);
            if (user == null)
            {
                throw new ApplicationException($"Unable to load user with ID '{_userManager.GetUserId(User)}'.");
            }

            if (!user.TwoFactorEnabled)
            {
                throw new ApplicationException($"Cannot generate recovery codes for user with ID '{user.Id}' because they do not have 2FA enabled.");
            }

            return Page();
        }

        public async Task<IActionResult> OnPostAsync()
        {
            var user = await _userManager.GetUserAsync(User);
            if (user == null)
            {
                throw new ApplicationException($"Unable to load user with ID '{_userManager.GetUserId(User)}'.");
            }

            if (!user.TwoFactorEnabled)
            {
                throw new ApplicationException($"Cannot generate recovery codes for user with ID '{user.Id}' as they do not have 2FA enabled.");
            }

            var recoveryCodes = await _userManager.GenerateNewTwoFactorRecoveryCodesAsync(user, 10);
            TempData["RecoveryCodes"] = recoveryCodes.ToArray();

            _logger.LogInformation("User with ID '{UserId}' has generated new 2FA recovery codes.", user.Id);

            return RedirectToPage("./ShowRecoveryCodes");
        }
    }
}

Create a new file, Pages\Account\Manage\ShowRecoveryCodes.cshtml with the following contents

@page
@model ShowRecoveryCodesModel
@{
    ViewData["Title"] = "Recovery codes";
    ViewData["ActivePage"] = "TwoFactorAuthentication";
}

@ViewData["Title"]

        Put these codes in a safe place.

        If you lose your device and don't have the recovery codes you will lose access to your account.

        @for (var row = 0; row < Model.RecoveryCodes.Length; row += 2)
        {
            <EMAIL_ADDRESS>+ 1]

        }

Create a new file Pages\Account\Manage\ShowRecoveryCodes.cshtml.cs with the following contents

using System.Collections.Generic;
using System.Linq;
using System.Threading.Tasks;
using Microsoft.AspNetCore.Mvc;
using Microsoft.AspNetCore.Mvc.RazorPages;

namespace Company.WebApplication1.Pages.Account.Manage
{
    public class ShowRecoveryCodesModel : PageModel
    {
        public string[] RecoveryCodes { get; private set; }

        public IActionResult OnGet()
        {
            RecoveryCodes = (string[])TempData["RecoveryCodes"];
            if (RecoveryCodes == null)
            {
                return RedirectToPage("TwoFactorAuthentication");
            }

            return Page();
        }
    }
}

Recompile your application and test you can generate 2fa recovery codes correctly, then redeploy your application.

For ASP.NET Core 2.0 Web Application (Model/View/Controller)

Open the Controllers\ManageController.cs file and find

private const string AuthenicatorUriFormat = "otpauth://totp/{0}:{1}?secret={2}&issuer={0}&digits=6";

and add a new declaration underneath,
private const string AuthenicatorUriFormat = "otpauth://totp/{0}:{1}?secret={2}&issuer={0}&digits=6";
private const string RecoveryCodesKey = nameof(RecoveryCodesKey);

Still in Controllers\ManageController.cs file and find the EnableAuthenticator(EnableAuthenticatorViewModel model) method. The last line in this method should be

return RedirectToAction(nameof(GenerateRecoveryCodes));

Replace this final line with
var recoveryCodes = await _userManager.GenerateNewTwoFactorRecoveryCodesAsync(user, 10);
TempData[RecoveryCodesKey] = recoveryCodes.ToArray();
return RedirectToAction(nameof(ShowRecoveryCodes));

Create a new method in Controllers\ManageController.cs called ShowRecoveryCodes() with the following code

[HttpGet]
public IActionResult ShowRecoveryCodes()
{
    var recoveryCodes = (string[])TempData[RecoveryCodesKey];
    if (recoveryCodes == null)
    {
        return RedirectToAction(nameof(TwoFactorAuthentication));
    }

    var model = new ShowRecoveryCodesViewModel { RecoveryCodes = recoveryCodes };
    return View(model);
}

Still in Controllers\ManageController.cs Create a new action method in the controller file, GenerateRecoveryCodesWarning() containing the following code

[HttpGet]
public async Task<IActionResult> GenerateRecoveryCodesWarning()
{
    var user = await _userManager.GetUserAsync(User);
    if (user == null)
    {
        throw new ApplicationException($"Unable to load user with ID '{_userManager.GetUserId(User)}'.");
    }

    if (!user.TwoFactorEnabled)
    {
        throw new ApplicationException($"Cannot generate recovery codes for user with ID '{user.Id}' because they do not have 2FA enabled.");
    }

    return View(nameof(GenerateRecoveryCodesWarning));
}

Still in Controllers\ManageController.cs file and find the GenerateRecoveryCodes() method. The code should look as follows

[HttpGet]
public async Task<IActionResult> GenerateRecoveryCodes()
{
    ...
}

Replace the method with the following
[HttpPost]
[ValidateAntiForgeryToken]
public async Task<IActionResult> GenerateRecoveryCodes()
{
    var user = await _userManager.GetUserAsync(User);
    if (user == null)
    {
        throw new ApplicationException($"Unable to load user with ID '{_userManager.GetUserId(User)}'.");
    }

    if (!user.TwoFactorEnabled)
    {
        throw new ApplicationException($"Cannot generate recovery codes for user with ID '{user.Id}' as they do not have 2FA enabled.");
    }

    var recoveryCodes = await _userManager.GenerateNewTwoFactorRecoveryCodesAsync(user, 10);
    _logger.LogInformation("User with ID {UserId} has generated new 2FA recovery codes.", user.Id);

    var model = new ShowRecoveryCodesViewModel { RecoveryCodes = recoveryCodes.ToArray() };

    return View(nameof(ShowRecoveryCodes), model);
}

Create a new View in Views\Manage\ShowRecoveryCodes.cshtml with the following content

@model ShowRecoveryCodesViewModel
@{
    ViewData["Title"] = "Recovery codes";
    ViewData.AddActivePage(ManageNavPages.TwoFactorAuthentication);
}

@ViewData["Title"]

        Put these codes in a safe place.

        If you lose your device and don't have the recovery codes you will lose access to your account.

        @for (var row = 0; row < Model.RecoveryCodes.Length; row += 2)
        {
            <EMAIL_ADDRESS>+ 1]

        }

Create a new ShowRecoveryCodesViewModel class in the Models\ManageViewModels folder and create the class as follows

public class ShowRecoveryCodesViewModel
{
    public string[] RecoveryCodes { get; set; }
}

Delete the Models\ManageViewModels\generateRecoveryCodesViewModel.cs file.

Open the Views\Manage\GenerateRecoveryCodes.cshtml file. Replace the contents with

@{
    ViewData["Title"] = "Generate two-factor authentication (2FA) recovery codes";
    ViewData.AddActivePage(ManageNavPages.TwoFactorAuthentication);
}

@ViewData["Title"]

        This action generates new recovery codes.

        If you lose your device and don't have the recovery codes you will lose access to your account.

        Generating new recovery codes does not change the keys used in authenticator apps. If you wish to change the key
        used in an authenticator app you should reset your authenticator keys.

    <form asp-action="GenerateRecoveryCodes" method="post" class="form-group">
        <button class="btn btn-danger" type="submit">Generate Recovery Codes</button>
    </form>

Edit Views\Manage\TwoFactorAuthentication.cshtml to change Reset recovery codes to  Reset recovery codes.

Recompile your application and test you can generate 2fa recovery codes correctly, then redeploy your application.

Other Information
Reporting Security Issues
If you have found a potential security issue in .NET Core, please email details to<EMAIL_ADDRESS>Reports may qualify for the .NET Core Bug Bounty. Details of the .NET Core Bug Bounty including Terms and Conditions are at https://aka.ms/corebounty.
Support
You can ask questions about this issue on GitHub in the .NET Core or ASP.NET Core organizations. These are located at https://github.com/dotnet/ and https://github.com/aspnet/. The Announcements repo for each product (https://github.com/dotnet/Announcements and https://github.com/aspnet/Announcements) will contain this bulletin as an issue and will include a link to a discussion issue where you can ask questions.
Acknowledgments
Thanks to Kévin Chalet for reporting this issue.
External Links
CVE-2018-0785
Revisions
V1.1 (Jan 9, 2018): Updated Razor Pages fix to be correct. Note that new generated applications will have the incorrect link.  Thanks @scottsauber.
V1.0 (Jan 9, 2018): Advisory published.
Version 1.0
Last Updated 2018-01-09

We periodically close 'discussion' issues that have not been updated in a long period of time.
We apologize if this causes any inconvenience. We ask that if you are still encountering an issue, please log a new issue with updated information and we will investigate.


Update license and add contributors

Reference Issues/PRs

Fixes #3 by adding contributor information, generalizes repo license and adds reference to sklearn license.

The other minor tweaks to the project metadata were incorporated into #8. Scope of this has been changed to just cover contributors and license.

Codecov Report

:exclamation: No coverage uploaded for pull request base (main@fb10059). Click here to learn what that means.
The diff coverage is n/a.

@@           Coverage Diff           @@
##             main       #7   +/-   ##
=======================================
  Coverage        ?   50.00%
=======================================
  Files           ?        6
  Lines           ?      538
  Branches        ?        0
=======================================
  Hits            ?      269
  Misses          ?      269
  Partials        ?        0

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update fb10059...a851189. Read the comment docs.


give me wrong reagion

Summary
When I use Display: none to quickly switch between showing and hiding the map, the map gives me back the range below, but my range isn't really there
function :getMapBoundaries
call back values:
northEast: {longitude: 90, latitude: 44.99999999999999}
southWest: {longitude: -90, latitude: -45}
Reproducible sample code
mapRef.current?.getMapBoundaries().then((v) => {})

Steps to reproduce
When I use Display: none to quickly switch between showing and hiding the map,
Expected result
right value
Actual result
northEast: {longitude: 90, latitude: 44.99999999999999}
southWest: {longitude: -90, latitude: -45}
React Native Maps Version
"react-native-maps": "0.29.3",
What platforms are you seeing the problem on?
iOS (Google Maps)
React Native Version
"react-native": "0.67.1",
What version of Expo are you using?
SDK 45
Device(s)
13 promax
Additional information
No response

You seem to be using a deprecated version of react-native-maps. Please try out the latest version and open a new issue if the problem persists. :)


time:Date is not properly captured in OpenAPI schema

Can use this to reproduce the issue.
https://github.com/shafreenAnfar/springboot-and-ballerina/tree/main/ballerina-user-rest-service

Duplicate of https://github.com/ballerina-platform/ballerina-library/issues/5150


Migration suggestions after introducing a .ts file

After I brought #24713 up with @chrisdias, he mentioned his thinking was more about the "I'm going to introduce a .ts file into a JS project" scenario. I think once you have some .ts files around a project, you're going to want to migrate the .js files eventually too, so both scenarios are valid.
But things we could do include

Generating a tsconfig.json
Installing @types dependencies for packages that need them.

@mjbvz @amcasey

We have a similar feature in VS, where adding the first .ts file causes the addition of TypeScript MSBuild targets to the project.


inputNumber supports new apis

What problem does this feature solve?
Reference PRs from Ant Design:
https://github.com/ant-design/ant-design/pull/31432
https://github.com/ant-design/ant-design/pull/31548
What does the proposed API look like?

[nzAddonBefore]
[nzAddonAfter]
[nzPrefix]
[nzControls]
[nzBorderless]

outdated


Improve details in the logs of the exception mapper

Step 3: Describe the problem:
Steps to reproduce:

An error is thrown
The WebApplicationExceptionMapper logs and maps the request to a response
There might be no reference to what service the error was thrown from in the logs making it harder to search and find the logs

Observed Results:
Right now the log starts with
ERROR [qtp992217213-45] com.cerner.beadledom.jaxrs.exceptionmapping.ThrowableExceptionMapper An unhandled exception was thrown.
<STACK TRACE>

And if we have another interceptor that throws an error the stack trace will not reference the service code at all.
Expected Results:
I would like to have be able to have the logged message contain a cnfigurable name value so that the log can always reference the service that created the log
I would like to have an optional injected value to the exception mapper for the service name
or
Inject the @Context so that the log can also reference the url the error is for
Relevant Code:
https://github.com/cerner/beadledom/blob/master/jaxrs/src/main/java/com/cerner/beadledom/jaxrs/exceptionmapping/WebApplicationExceptionMapper.java#L46

Hi Kyle.
You should be able to accomplish what you outline above by configuring your logging implementation (logback, log4j, ...) to include the name of your application. The logging configuration should be configured at runtime, so you could include your application name whereever you would like in the log message.


Coverity reports possible dereferencing of null pointer

Coverity is reporting possible dereferencing of null pointer in _function_called. The variable expected_call is dereferenced although it appears that it may be NULL.
Coverity error reader_ _libs_test_cmocka_cmocka-src_src_cmocka.c.html.zip

I'd recommend to go to the upstream repository for more information.


fixed MarkDuplicates memory allocation bug

If the CGAT_JAVA_OPTS enrivonment variable is not set, Java is given a default of 2G of memory, so when the memory allocation to Picard is increased for big fastq files it was running out of memory.  I only fixed this for MarkDuplicates for now.

Many thanks for this!
Will add comments to the wiki and merge to the master. Current travis issues are non-CGAT related and Jenkins tests should work.


Reduces in-game framerates.

When the script is enabled, unpausing the game makes it lag so much that you can't even click stuff. N

Sorry to hear that, haven't tried it now, EU4 currently not installed.
At least the last time i tried it after the release of golden century everything worked fine, couldn't directly discover any performance differences.
So you start a ironman game session, pause the game, tab to windows, start the application (which version?), tab back to game, unpause, instant lag? The application closes and you don't get any errors in the console output? You could try one of the debug releases, there is more console output which you could also paste in your next comment.

No errors, no crashes. Just low game performance. Didn't try anything.
Gonna try a debug release tomorrow.
steeno<EMAIL_ADDRESS>5 Eyl 2019 Per, 19:38 tarihinde şunu
yazdı:

Sorry to hear that, haven't tried it now, EU4 currently not installed.
At least the last time i tried it after the release of golden century
everything worked fine, couldn't directly discover any performance
differences.
So you start a ironman game session, pause the game, tab to windows, start
the application (which version?), tab back to game, unpause, instant lag?
The application closes and you don't get any errors in the console output?
You could try one of the debug releases, there is more console output which
you could also paste in your next comment.
—
You are receiving this because you authored the thread.
Reply to this email directly, view it on GitHub
https://github.com/steeno/EU4ConsolePatcher/issues/3?email_source=notifications&email_token=ANDGD4BY4V5KGMHZFYCAYGDQIEYXTA5CNFSM4IT5T5C2YY3PNVWWK3TUL52HS4DFVREXG43VMVBW63LNMVXHJKTDN5WW2ZLOORPWSZGOD57Y5VI#issuecomment-528453333,
or mute the thread
https://github.com/notifications/unsubscribe-auth/ANDGD4A3SKB7LLEXJSDBLVTQIEYXTANCNFSM4IT5T5CQ
.

@kuccygang could you check if the new version <IP_ADDRESS> in combination with the 1.29 game update runs better on your system?

Yeah sure I can test it tomorrow.

Sorry for the late reply. I was unable to use it in 1.29 when I tried it today. Just tried the new release and it works fine. Performance drops are gona as far as i can see. Thanks for the release!

Ok the game performance is still dropped by a little bit but it's playable.


Test the Image Recognition Page/Feature for any Possible Bugs or Potential Errors

The image recognition feature has been tested, images upload and display correctly. No errors in dev tools.


feat: Import Font Awesome assets by default

BREAKING CHANGE: Font Awesome assets are now imported by default, breaking previous convention of import when defined.
To prevent importing the Font Awesome assets for whatever reason:
// config/environment.js
var ENV = {
  'ember-cli-notifications': {
    includeFontAwesome: false
  }
}

Fixes #159.

@mansona Will be a major. Building up to a 5.0.0 release: https://github.com/stonecircle/ember-cli-notifications/milestone/1

🎉


docs: fix tasks.md to use input.params

Changes

Minor doc fix
Submitter Checklist
These are the criteria that every PR should meet, please check them off as you
review them:

[x] Includes tests (if functionality changed/added)
[x] Includes docs (if user facing)
[x] Commit messages follow commit message best practices

See the contribution guide for more details.
Double check this list of stuff that's easy to miss:

If you are adding a new binary/image to the cmd dir, please update
the release Task and TaskRun to build and release this image

/lgtm

/ok-to-test


[Cloudflare Adapter] auto generated _routes.json can easily exclude Functions invocation routes limits

By default, @astrojs/cloudflare will generate a _routes.json file that lists all files from your dist/ folder and redirects from the _redirects file in the exclude array. This will enable Cloudflare to serve files and process static redirects without a function invocation. Creating a custom _routes.json will override this automatic optimization and, if not configured manually, cause function invocations that will count against the request limits of your Cloudflare plan.

We should add a note to Cloudflare adapter document since the default auto-generated _route.json file can easily exclude the limits and cause Cloudflare Pages deployment failed.
A example error log
Error: Failed to publish your Function. Got error: Error 8000057: Rules in `_routes.json` are over the 100 rule limit. Refer to https://cfl.re/3FsE4aF.

The limits on Cloudflare Pages Functions doc

Functions invocation routes have the following limits:
You must have at least one include rule.
You may have no more than 100 include/exclude rules combined.
Each rule may have no more than 100 characters.

This sounds like a bug to me! Would you be able to share a reproduction in the main Astro repo?
https://github.com/withastro/astro/issues/new/choose

This sounds like a bug to me! Would you be able to share a reproduction in the main Astro repo?
https://github.com/withastro/astro/issues/new/choose

Sorry, forget to mention that I've set export const prerender = true for my src/blog/[...slug].astro to pretender all my blog posts, this caused all my blog posts listed inside the _route.json's exclude list and then exclude the limits of the route and finally cause the Cloudflare Pages deployment failed.
So we may need to add some notice in the doc, like this in Svelte's doc about Cloudflare adapter

You can have up to 100 include and exclude rules combined. Generally you can omit the routes options, but if (for example) your  paths exceed that limit, you may find it helpful to manually create an exclude list that includes '/articles/*' instead of the auto-generated ['/articles/foo', '/articles/bar', '/articles/baz', ...].

If this is a Cloudflare limitation that is true in Astro the way it is in the Svelte documentation you linked, then it sounds like this could be a good addition to the docs. Would you be willing to make a PR to the Cloudflare page with the relevant notice, @twodft  ?

I still think this is an Astro bug if anything. Yes, it’s a Cloudflare limitation, but because we generate _routes.json for users, we’d basically be saying “Don’t have more than 100 routes”. We could provide logging and maybe redesign the adapter to bundle routes better?
I’m not sure needing to document “Don’t have more than 100 pages” is a great path either. (SvelteKit is a bit different because as an SPA you likely rarely have 100 routes, whereas with prerendering in Astro, you can easily hit this with 100 Markdown pages.)

Just chatted with some of the team and we’re tracking this here: https://github.com/withastro/astro/issues/6516
I think the goal will be to handle this better without needing to update documentation, so going to close this issue. Thanks again for drawing our attention to it @twodft!


Not understandable sentence Weekly 6

"The focus on enhancing the assembler, with achievements such as the completion of the Test Plan."
This sentence makes no sense. If you meant this sentence is linked to the previous one ("This week marked significant progress in our project's evolution."), you should have but a comma, and not a point to make a break in the sentence.

Fixed


the input of sketch_rnn

I know the inputand the dataset of sketch_rnn is .npz. Now I have some image of .png,and I want to test them. But I don't know how to convert .png to .npz .Could you help me ?

Hi @yemeijuan
Sketch-RNN only works with vector images, unfortunately png is a raster image format that it doesn't support.


MultiSelectComboBox with material design

Hi!
If you create a new wpf project and add material design and multiselectcombobox via nuget. Then add this code to App.xaml
<Application x:Class="WpfApp1.App"
             xmlns="http://schemas.microsoft.com/winfx/2006/xaml/presentation"
             xmlns:x="http://schemas.microsoft.com/winfx/2006/xaml"
             xmlns:local="clr-namespace:WpfApp1"
             xmlns:materialDesign="http://materialdesigninxaml.net/winfx/xaml/themes"
             StartupUri="MainWindow.xaml">
    <Application.Resources>
        <ResourceDictionary>
            <ResourceDictionary.MergedDictionaries>
                <materialDesign:BundledTheme BaseTheme="Light" PrimaryColor="Green" SecondaryColor="Lime" />

                <ResourceDictionary Source="pack://application:,,,/MaterialDesignThemes.Wpf;component/Themes/MaterialDesign2.Defaults.xaml" />
                <ResourceDictionary Source="/ReactiveValidation.Wpf;component/Themes/Generic.xaml" />
                <ResourceDictionary Source="/Sdl.MultiSelectComboBox;component/Themes/Generic/MultiSelectComboBox.xaml"></ResourceDictionary>
            </ResourceDictionary.MergedDictionaries>
        </ResourceDictionary>
    </Application.Resources>
</Application>

In MainWindow.xaml add MultiSelectComboBox, you get strange behavior.
<Grid>
    <sdl:MultiSelectComboBox ItemsSource="{Binding Colors}"
                             SelectedItems="{Binding SelectedColors}"
                             EnableAutoComplete="False"
                             SelectionMode="Multiple" />
</Grid>

I think the problem is in the styles: toggle button width or textblock width. Have you ever encountered such behavior?

I confirm the issue, and attempted a fix. (By default the MaterialDesign theme was apparently injecting a fixed width for ToggleButton instances, where we wanted an Auto width.)

Thank you a lot!

@sdolhaor can you please tell me when the release will be in nuget?

This should have been automatic, but apparently there is an issue with the pipeline. It was now run manually, the new nuget is published now, version 1.0.101. Apologizes for the delay.


Deploy v3 contracts/subgraphs to xdai

Overview
Deploy current version of baal/factory/singletons to xdai to aid hub development.

[x] baal/loot template
[x] baal summoner
[ ] tribute escrow
[ ] verify
[x] subgraphs
[ ] tribute escrow subgraph

Loot (template): 0x1b94221EB2bC8dc9F16660EA5be9dcd92b0ae862
Baal (template): 0x7ba594f137954cd5f61aace9687e7bdc76ccc77d
BaalSummoner (factory): 0x37A2080f275E26fFEfB6E68F3005826368156C5C
MultiSend: 0xA238CBeb142c10Ef7Ad8442C6D1f9E89e07e7761
TributeEscrow: ``
Poster: 0x000000000000cd17345801aa8147b8d3950260ff
https://github.com/HausDAO/daohaus-monorepo/wiki/Contracts

https://github.com/HausDAO/daohaus-v3-subgraph-sandbox/commit/e273a21f2049e4b8477cd7c480beef5a5cd04f5c

https://thegraph.com/hosted-service/subgraph/hausdao/daohaus-v3-xdai

escrow contract TBD
dao entity now has
dao {
  rageQuits: [Shaman!]
  shaman: [Shaman!]
}


Registry tool: add auth handling

From https://github.com/apigee/registry/issues/625#issuecomment-1172540159:

We also need to handle authentication. gcloud auth login is a pattern that we might follow but involves an OAuth transaction that I would rather leave to gcloud. Among auth subcommands, we might have registry auth gcloud to configure the tool to always get its credentials from running $(gcloud print-access-token), registry auth application-default might configure the tool to use application default credentials, and registry auth token might set a specific token. (Should these auth subcommands be under config? They aren't for gcloud but we might argue that different registries require different authentication when they are hosted in different ways. However, because this is unclear, I would default to following the gcloud precedent of keeping them separate.)

@timburks Can you expand on the requirements and how you see it working? I would interpret your description above to mean something like this straw-man:
Setup
A user would configure a method of authentication and any necessary and related properties as a single command, at which point the method and related properties are stored in the active config file, replacing any existing ones.
CLI:
registry auth token abc123
registry auth gcloud
registry auth application-default

(I expect there is no need for reading or managing individual properties.)
File:
connection:
   address: remote:1234
   insecure: false
   auth:
      method: token
      token: abc123

Usage
The config system would use the stored information to generate a token or expose the stored token to the Config client.
token:
The token is read and used from the active config.
gcloud:
An attempt to exec gcloud print-access-token is made and the result used.
application-default:
An attempt to exec gcloud auth application-default print-access-token is made and the result used.
Notes:

Google tokens and expiration could be directly read from the SQLite3 db ($HOME/.config/gcloud/access_tokens.db.) instead of attempting shell execs, but we'd need an account_id.

Other thoughts
This should be designed as an extensible system for additional methods of token generation. This could be a simple plugin interface of some sort, but even more simply, it might be better to simply exec any shell command to retrieve a token?
Token and shell types:
registry auth token abc123
registry auth shell 'gcloud print-access-token'
registry auth shell 'gcloud auth application-default print-access-token'
registry auth shell 'my-token-script.sh'

Or simplify even more and only have the shell type:
registry auth 'gcloud print-access-token'
registry auth 'gcloud auth application-default print-access-token'
registry auth 'my-token-script.sh'

Google tokens and expiration could be directly read from the SQLite3 db ($HOME/.config/gcloud/access_tokens.db.) instead of attempting shell execs, but we'd need an account_id.

I think it's safe to guess that this would be considered a private (implicit) API and strongly discouraged, but it's an interesting idea.
With shell backquotes, we wouldn't need a shell subcommand. The following would be equivalent to registry auth gcloud:
registry auth token `gcloud print-access-token`

It wouldn't be as convenient, so I prefer having the gcloud and application-default subcommands, but these open the door to other shortcuts to other hosted environments, which may be great or not-great, but that's a future governance question. These commands could themselves be made configurable, but I think it's too soon for that.
I think any of the registry auth subcommands should apply to the current configuration (as you described).

Why doesn't this work?
$ registry config set registry.token 123
Error: Config has no property "registry.token".
Config has no property "registry.token".

I think you misunderstood my suggestion: It wasn't that the token should be taken immediately from the shell, but rather that we'd run a shell from within commands to get the token on demand. One reason I'm shying away from specific commands like token/gcloud/application-default is that they (aside from stored token) require hard-coding and are largely specific to Google. If we instead simply execute another binary or script to get the token, we don't have to code for any of that. The token could be generated, stored in a file, stored in an env var... we don't care - and we don't have to store it ourselves.

As for why those commands don't work, it's because token (or registry.token) won't be a valid part of a configuration until this issue has been implemented.

An  example might be more clear:
This spawns a shell to execute the passed shell command argument (just for validation) and stores that shell command string (not the generated token) in the Config file:
$ registry auth shell "gcloud auth print-access-token<EMAIL_ADDRESS>A0AVA9y1uhiFSGXp_AvDhGSrTxT0ogPMC6XyvZU_dLK-m7C50li8rILxI0Sl4mIVzqP5wjPi7bl_6nmFTQVRBU0ZRRTY1ZHI4SGRVck1EeElNNXRFWFluM2diZnl

Before the list command executes, it spawns a shell on the shell command stored in the Config to generate the token, then it sets the token in the in-memory Config to be used for communication:
$ registry list projects/theganyo-1/locations/global/apis
projects/theganyo-1/locations/global/apis/registry


Create concept for making engine open source

Description
Currently, we have the challenge that large parts of the application are developed open source, but not everything.
This creates efforts in deploying, versioning and testing new feautres.
One reason is that the backend is not developed open source.
In this story a concept is created to be able to develop the application open source.
Many parts of the backend still contain LHM specific code for historical reasons.
This needs to be structured so that an open source approach makes sense and reuse potentials arise.

Tasks

put the whole digiwf-engine backend open source and create the ci pipeline
extract the core functionality into a starter project that can be used in other spring boot camunda distributions

essential listener
taskmanagement
process management

include the starter library in the digiwf-engine-service project
provide a lhm independent setup for the tasklist and digiwf-engine

Nothing. Engine is Open Source :)


[Fixed 1.350] Drag and drop materials to mesh objects

Drag and drop a material to a mesh object doesn't work.

Open new scene
Create a 3D object(box, sphere, cylinder....)
Drag and drop a material to the 3D object

RealtimeCSG 1.309

Hmm, I can't seem to be able to reproduce this ..
Can you try deleting your Assets/Plugins/RealtimeCSG folder while unity is closed, and re-installing RealtimeCSG 1.309?

Also, what unity version are you working with?

I've tried re-installing RealtimeCSG 1.309, but still doesn't work.
I'm using Unity 5.4.2f1

there's any problem in unity 5.3.6f1,work great!

Ok I'll try it again tonight with that Unity version..
You're dragging your material directly onto your brush in the scene, right?
And nothing happens?

Not a brush. Dragging a material directly onto unity's mesh object.

Oh, you mean a completely different mesh?? Ok, I'll look into it. Thanks for reporting this

oh!really!

This issue is fixed in version 1.310 which is available on the update site
( http://prenominal.nl/updates/index.php )
I will close this ticket when it's available on the asset store

Thanks for the updates!!
You can almost fix this issue. Drag and drop materials doesn't work after dragging on brushes.

This issue is fixed in version 1.313 which is available on the update site !
( http://prenominal.nl/updates/index.php )
I will close this ticket when it's available on the asset store

can't  assign material to brush again?
version 1.314

got it !
when there are some mesh on the same position as the brush ,they can't assign brush material.
will you fixed that?

video

@sonygod
Yeah, your right. I did't notice that!
Thanks for the video, but your video is private, and we can't watch it.

In the video it's a canvas, does this only happen for gui elements or also for "meshes"?

This has been fixed in version 1.350. Which can be downloaded from https://prenominal.nl/updates/
This ticket will be closed when this version is available from the asset store

This version is now available from the asset store, so I'm closing this ticket


Remove guard and just always fail if file is gone

Someone else is operating on same file as us in this case and proceeding is dangerous

Right, there is a clear race condition Failed to remove destination file '/home/testuser/buildstream/doc/run-bst-jbglffex/build/workspace-helloi42ufm_9/Makefile': [Errno 2] No such file or directory: '/home/testuser/buildstream/doc/run-bst-jbglffex/build/workspace-helloi42ufm_9/Makefile'


Allow admins to send invoice if any email id is present

Description
Currently, without the client's mail id the owner/admin can't send invoice as the send invoice button is disabled.
Allow the Owner/Admin to send invoices to any email even if the client email is not present.
Sometimes Admin/Owner want to share the invoice with some other mail Id of the client, not with the registered one. With the fix it will become easier.
Environment

What is the expected behaviour?
Allow the Owner/Admin to send invoices to any email even if the registered client email is not present.
Admin/Owner can share the invoice with some other mail Id of the client, not with the registered one.

Once Admin/Owner clicks on the send button, Send Invoice modal will open which will ask Admin/owner to enter the email where the invoice needs to be shared. Once any mail id is present not only the registered mail id, send invoice should be enabled.
What is the current behaviour?

currently send invoice button is disabled if the registered client mail id is not present even if the other mail id is present.

It is already handled on enter button


OSSM-3665 Refactor TestInitContainer (T33)

Jira ref: OSSM-3665
Changes:
TestInitContainer

Updated to use new test framework.
Moved testInitContainerYAML file inline.
Updated container log success message (initContainerGoldString) to help avoid potential false positives.

I forgot to source from a new branch named after the Jira ticket. I will re-create the PR.

No need to recreate it. The branch doesn't matter.

I have updated the PR based on your comments.
Changes:

Renamed to TestInitContainerNotRemovedDuringInjection.
Added logging for test steps.
Changed visibility of constants to function-level (except the YAML constant).


 Reason being, we can't move beyond 95cb2a1a7eae2d74d8211d4930f76e8ccd5e124f because otherwise we start tripping over the mistmatched versions problem described in https://github.com/golang/go/issues/35114
Does this issue reproduce with the latest release?
Yes
What operating system and processor architecture are you using (go env)?
go env Output
$ go env
GO111MODULE="on"
GOARCH="amd64"
GOBIN=""
GOCACHE="/home/myitcv/.cache/go-build"
GOENV="/home/myitcv/.config/go/env"
GOEXE=""
GOFLAGS=""
GOHOSTARCH="amd64"
GOHOSTOS="linux"
GOINSECURE=""
GONOPROXY=""
GONOSUMDB=""
GOOS="linux"
GOPATH="/home/myitcv/gostuff"
GOPRIVATE=""
GOPROXY="https://proxy.golang.org,direct"
GOROOT="/home/myitcv/gos"
GOSUMDB="sum.golang.org"
GOTMPDIR=""
GOTOOLDIR="/home/myitcv/gos/pkg/tool/linux_amd64"
GCCGO="gccgo"
AR="ar"
CC="gcc"
CXX="g++"
CGO_ENABLED="1"
GOMOD="/home/myitcv/gostuff/src/github.com/myitcv/govim/go.mod"
CGO_CFLAGS="-g -O2"
CGO_CPPFLAGS=""
CGO_CXXFLAGS="-g -O2"
CGO_FFLAGS="-g -O2"
CGO_LDFLAGS="-g -O2"
PKG_CONFIG="pkg-config"
GOGCCFLAGS="-fPIC -m64 -pthread -fmessage-length=0 -fdebug-prefix-map=/tmp/go-build751419054=/tmp/go-build -gno-record-gcc-switches"

What did you do?
Started govim from the $HOME. This directory is outside of a module (GOMOD="") and not within my GOPATH.
What did you expect to see?
No activity from gopls
What did you see instead?
gopls running:
go list -e -json -compiled=true -test=true -export=false -deps=true -find=false -- ./...

I suspect (although haven't bisected) this change happened as part of https://go-review.googlesource.com/c/tools/+/204822.
The running of this query should I think at most be limited to either:

having a working directory within GOPATH
being in a module context, i.e. GOMOD != ""

Alternatively the client could be responsible for not loading gopls (or itself for that matter) unless those conditions are met, but that seems to put too much logic in the client. And also precludes the situation where the user then goes on to create a go.mod by hand, thereby creating a module context.

cc @stamblerre @matloob

You're correct in saying that CL 204822 changed the behavior of gopls to load all packages in the workspace at start-up rather than on demand. This allows us to do workspace-local references and rename. gopls can also handle ad-hoc packages, i.e. packages outside of GOPATH and outside of a module. They will not be handled as well as other packages, but most features should still work. What is the reason to treat these scenarios differently?

What is the reason to treat these scenarios differently?

Because otherwise you end up with situations where you run:
go list -e -json -compiled=true -test=true -export=false -deps=true -find=false -- ./...

in a directory which, in my case, is ~60GB and the command takes 10 minutes and counting.
Indeed, if you are outside of a module context or GOPATH (i.e. ad hoc) I'm not sure the concept of a workspace within which references, renames etc is defined beyond the current directory, is it?

I'm running into this as well (also via govim). When I start vim from some random directory (often $HOME) to do non-Go work (perhaps edit a single text file), gopls might run a very expensive go list which takes a few minutes, uses many CPU cores, and afterwards returns an error ("Error loading workspace folders") that govim exposes inside vim.

Does govim always start gopls, even if the user is editing non-Go files? I didn't realize this when we were discussing this on the golang-tools call. I know that other extensions (citing VS Code as an example since it's the one I'm most familiar with), only start gopls if the workspace contains .go files.

Does govim always start gopls, even if the user is editing non-Go files?

Yes.

I would argue that that's probably the larger issue here. I can't immediately think of an argument for why that would be necessary.

Does govim always start gopls, even if the user is editing non-Go files?

Yes.

only start gopls if the workspace contains .go files.

But underneath my $HOME directory there are .go files in sub directories, so wouldn't VSCode start gopls in this case too?
(On a related point, I seem to recall only go get is defined to work outside of GOPATH and a module context, but perhaps @jayconrod or @bcmills can clarify/confirm? Hence this go list query should probably be failing.)
My worry with this sort of logic, "start gopls when X," is that it's incumbent on LSP clients to then get this logic right. Indeed what is X?
My understanding is that we will need gopls when, i.e. X is defined as:

the workspace is (within) a module context
the workspace is within GOPATH
you are in neither the above situations, but doing ad hoc editing of .go files in a (sub) directory of the workspace

(ignoring nested modules for one second, because that's more of a UI/UX problem to my mind)
What about when go.mod and .go files, for example, are subsequently created within the workspace?
Putting this logic in the client also means we close the door on making gopls "smart" as things change. Because if gopls is not running, the user is stuck.
Hence why I'm suggesting to sidestep the problem of clients getting this right and implement it in gopls. i.e. do away with clients needing to know about such language/tooling specific logic X and always start/connect to gopls.

(On a related point, I seem to recall only go get is defined to work outside of GOPATH and a module context, but perhaps @jayconrod or @bcmills can clarify/confirm? Hence this go list query should probably be failing.)

In 1.14, if the go command is run in module mode outside of a module, an error will be reported if there is a need to resolve a package path to a module. For example, go list golang.org/x/net/html would fail. go get is exempt from this.
This probably won't come up much because it requires GO111MODULE explicitly set to on. By default, it's in GOPATH mode if there's no go.mod file.


Deserialization not working for lower camel case

When I configure OData endpoint to use lower camel case naming conventions, I have a problem with Simple.OData.Client: object deserialization does not work.
Strange thing is, that everything except that works flawlessly, i.e. client is building queries with filters, selects and expands as it should be - using lower camel case. Then when mapping response to objects, it does not map any properties. The number of objects returned is correct, but they all have empty props.
I tried to change INameMatchResolver without any luck.

That's weird of course. I will look into it.

I just ran in to this same problem, looks like it's still marked as needs information?

I am getting the same issue. it resolved?

I have reproduce the issue. Will let you know once it's fixed.

I've ran to the same issue )-:

@phatcher I created branch "name-resolver" to work on this issue. I appreciate if you can have a look and suggest how custom name resolution policy can be applied to TypeCache. Here's what I did:

Created failing unit tests for this issue (they overried NameMatchResolver)
Renamed TypeHelper class to TypeCacheResolver (IMHO it better reflects its purpose)
Added INameMatchResolver member variable to TypeCacheResolver.
Temporarily set it to NotStrict

Now tests pass. So what I am trying to figure out is how to propagate NameMatchResolver value from ODataClientSettings (in session object) to TypeCache -> TypeCacheResolver). Do you have any suggestions?

@phatcher I believed the issue is fixed now. I updated type cache to use name resolver from the current session. I also removed global type cache because it was used only in tests.

Finally this bug is fixed and I plan to release version 5.7 within a day or two.

Released version 5.7.


docs: Create contribution guidelines and update docs

[ ] Contributing guidelines
[ ] Relevant issue types (maybe done?)
[ ] Updating "getting started" parts of contributing and docz docs
[ ] Update docs where they are outdated or incomplete

@robinmetral Feature changes to components should not be a part of this docs-focused PR. Would you mind extracting this commit into a separate PR please, so that it can be reviewed independently?

@connor-baer done, here's the separate PR: #428

@connor-baer My bad, I said it was okay to push the button fix with this branch 😄


Update machine-learning-publish-web-service-to-azure-marketplace.md

Nothing changed so just refreshing date.

Hi @LuisCabrer, I'm your friendly neighborhood Azure Pull Request Bot (You can call me AZPRBOT). Thanks for your contribution!

It looks like you're working at Microsoft (luisca). If you're full-time, we DON'T require a contribution license agreement.

If you are a vendor, or work for Microsoft Open Technologies, DO please sign the electronic contribution license agreement. It will take 2 minutes and there's no faxing! https://cla.azure.com.

TTYL, AZPRBOT;


Language End to End Testing for PR

As discussed @jainharsh98 & @krishna-kariya we are moving ahead with this skeleton so merging in the main e2e base branch


aria2: 1.23.0 -> 1.24.0

[x] Tested using sandboxing
(nix.useSandbox on NixOS,
or option build-use-sandbox in nix.conf
on non-NixOS)
Built on platform(s)

[x] NixOS
[ ] OS X
[ ] Linux

[x] Tested compilation of all pkgs that depend on this change using nix-shell -p nox --run "nox-review wip"
[x] Tested execution of all binary files (usually in ./result/bin/)
[x] Fits CONTRIBUTING.md.

autoreconfHook can be in nativeBuildInputs.

thanks @romildo

rebased changes to move autoreconfHook to nativeBuildInputs
also added an upstream patch for fixing the OSX build

@womfoo if possible, fetch the patch instead of adding it to the repository.

@joachifm latest rebase now uses fetchpatch

fixed hash and made the patch osx-only
both build fine on linux and osx locally
[kranium@silverspark:~]$ uname -a
Linux silverspark 4.4.12 #1-NixOS SMP Wed Jun 1 19:16:06 UTC 2016 x86_64 GNU/Linux

[kranium@silverspark:~/git/github.com/womfoo/nixpkgs]$ nox-review pr 16362
=== Reviewing PR 16362 : aria2: 1.23.0 -> 1.24.0
==> We're in a git repo, trying to fetch it
==> Fetching base (master)
==> Fetching PR
==> Fetching extra history for merging
==> Merging PR into base
Building in /tmp/nox-review-48jcr3a8: uget aria
/nix/store/pfbj5zfkns9di6v4b31gbsllf6sv6wx3-uget-2.0.8
/nix/store/iy4rm9avv1cvh2fc6b90fkv9hyvg9lsk-aria2-1.24.0
Result in /tmp/nox-review-48jcr3a8
total 0
lrwxrwxrwx 1 kranium users 54 Jun 21 09:56 result -> /nix/store/pfbj5zfkns9di6v4b31gbsllf6sv6wx3-uget-2.0.8
lrwxrwxrwx 1 kranium users 56 Jun 21 09:56 result-2 -> /nix/store/iy4rm9avv1cvh2fc6b90fkv9hyvg9lsk-aria2-1.24.0

Kraniums-MacBook-Pro:nixpkgs kranium$ uname -a
Darwin Kraniums-MacBook-Pro.local 14.5.0 Darwin Kernel Version 14.5.0: Tue Sep  1 21:23:09 PDT 2015; root:xnu-2782.50.1~1/RELEASE_X86_64 x86_64
Kraniums-MacBook-Pro:nixpkgs kranium$ nox-review pr 16362
=== Reviewing PR 16362 : aria2: 1.23.0 -> 1.24.0
==> Creating nixpkgs repo in /Users/kranium/.nox/nixpkgs
==> We're in a git repo, trying to fetch it
==> Fetching base (master)
==> Fetching PR
==> Fetching extra history for merging
==> Merging PR into base
Building in /var/folders/lk/w3m5lzw94wj0hhtf9kxn45n40000gn/T/nox-review-3irqc935: aria
/nix/store/7gjvnzxmqw7nw76rh5sdsa8x903w1b0z-aria2-1.24.0
Result in /var/folders/lk/w3m5lzw94wj0hhtf9kxn45n40000gn/T/nox-review-3irqc935
total 8
lrwxr-xr-x  1 kranium  staff  56 Jun 21 10:46 result -> /nix/store/7gjvnzxmqw7nw76rh5sdsa8x903w1b0z-aria2-1.24.0

Thank you


proposal: go get: add progress bar for downloading

Currently, go get produces no output on a successful install.  This can lead to confusion for new programmers, as it is not clear that the command is doing anything, especially if you are used to the like of apt, which will give you a massive wall of text whenever you download something. This is made worse if you are downloading a large package, as it might look like the program has frozen.
I'm not sure if this should be the default behavior or not, as changing the default command output could break scripts. Making it a flag would solve this, but could reduce benefit for new devs.

definitely not default, and there is -v for more verbose output/progress

Please no. Let the command continue to run quietly if there's nothing to report.

As Rob said, most go commands are quiet by default, and this is unlikely to change. See #22800, #17959, #18388; in particular https://github.com/golang/go/issues/18388#issuecomment-268315634.
Closing this discussion as a dup of the above.

I looked through the issues, and one thing noone seemed to mention is that -v still doesn't output that much. I think an easy compromise would be a flag to pipe the output of sub-commands (e.g. git clone) to stdout. maybe something like -vv?


Cannot load x86_64 Pulsar pickles on arm64

That's because the numpy type float128 does not exist on arm64. The only places in Pulsar that preserves the extended-precision type are the .dm attribute and the .dmx dictionary, which could be downgraded without loss of precision.

Fixed in #302.


Add [stkeky] to Badges section

What type of PR is this? (check all applicable)

[x] 🚀 Added Name
[ ] ✨ Feature
[x] ✅ Joined Community
[ ] 🌟 ed the repo
[ ] 🐛 Grammatical Error
[ ] 📝 Documentation Update
[ ] 🚩 Other

Description
Added my profile to the Badges section. Hope it's good enough. 😃
Add Link of GitHub Profile
https://github.com/stkeky

@abhisheknaiidu Hey 👋🏻 I just made some adjustments to profile.

@abhisheknaiidu Hey 👋🏻 I just made some adjustments to profile.


Remove getSessions API in favor of getAccounts

Azure folks (the only ones using this proposed API) have not depended on getSessions yet so it's safe to delete.

Can confirm, we are not using this 🤠


Focal point for crop coordinates

Hi,
This looks like a very, very useful addition to Timber.
One thing I've struggling with Timber's images is a way to better control cropping. With standard WordPress images, you can use something like https://wordpress.org/plugins/my-eyes-are-up-here/ which is absolutely brilliant for that. Unfortunately this doesn't work for Timber's arbitrary cropping sizes. Do you have any plans for something similar?

Thanks, Luis!
I totally see your point. We sometimes struggle with this, too. What we have found to be working quite well is assigning multiple images to a post for different purposes: An image to be used as a thumbnail or a post preview, an image to be used as a header image and so on. Or even different images for art direction for different screen sizes. So we don’t just use Post Thumbnails, but create more image fields for a post with Advanced Custom Fields.
Timmy just passes configuration values from the resize option down to Timber’s TimberImageHelper class. In the resize option you use the same options as in Timber’s resize filter. That’s why I think this issue would be more of an issue for Timber than an issue for Timmy. I saw that you have already asked the same question over at https://github.com/jarednova/timber/issues/772.
However, maybe it’s possible to connect image sizes defined through Timmy with WordPress images even more than they currently are. It would be nice if more image plugins would just work with Timber, without having to add every nice functionality to Timber separately. I’ll probably have a look into that soon.

Than you so much for your input here Lukas. I was already suspecting that would be the case, but it is always nice to ear the opinion from someone else, so thanks.
I see that you tagged the issue with enhancement, should I close this?

Yes, I guess it can be closed for now.


Supervisorctl fails immediately on start

The supervisord process stays up with no issue, but when going to the next step in the quickstart "sudo -E supervisorctl -c security_monkey.ini", it fails every time. I am not an expert in Python, so getting a resolution here has been challenging. If you need further information, let me know.
2014-07-14 14:39:26,993 INFO exited: securitymonkey (exit status 1; not expected)
2014-07-14 14:39:26,993 DEBG received SIGCLD indicating a child quit
2014-07-14 14:39:27,994 INFO gave up: securitymonkey entered FATAL state, too many start retries too quickly
2014-07-14 14:39:28,997 INFO spawned: 'securitymonkeyscheduler' with pid 24468
2014-07-14 14:39:29,855 DEBG 'securitymonkeyscheduler' stderr output:
INFO:apscheduler.scheduler:Scheduler has been shut down

We've moved to the system supervisor and the scanning starts immed. after starting up.  There is no longer a 15 minute delay.  Closing this issue.  Any problems can be reopened in a new issue.

i am trying to setup security_monkey using https://github.com/Netflix-Skunkworks/zerotodocker/wiki/Security-Monkey link
but when running the final command
"docker run -i -d --name security_monkey-scheduler --link security_monkey-postgres:postgres -v pwd/boto.cfg:/etc/boto.cfg:ro netflixoss/security_monkey-scheduler:0.2.0"
i am getting error

INFO:apscheduler.scheduler:Scheduler has been shut down

Am i missing somethings here ?

when i am running "/usr/local/src/security_monkey/scripts/scheduler-start.sh" inside the container, below is the logs
2015-12-24 13:04:53,682 INFO: Scheduler started [in build/bdist.linux-x86_64/egg/apscheduler/scheduler.py:574]
2015-12-24 13:04:53,682 DEBUG: Looking for jobs to run [in build/bdist.linux-x86_64/egg/apscheduler/scheduler.py:579]
2015-12-24 13:04:53,683 DEBUG: No jobs left; shutting down scheduler [in build/bdist.linux-x86_64/egg/apscheduler/scheduler.py:595]
2015-12-24 13:04:53,683 INFO: Scheduler has been shut down [in build/bdist.linux-x86_64/egg/apscheduler/scheduler.py:606]


SSH producer test frequently swallows the output

Failed tests:
  SSHIntegrationTest.testSSHProducer:94 expected:<[Hello Kermit
]> but was:<[]>

I can't replicate this outside of the CI environment where it fails frequently. My assumption is that it's a race condition somewhere in the Apache SSHD client or server components. But it's proving really hard to track down.
It's very odd that no content from the SSH command seems to be returned. I've got byteman injecting sysouts into the Camel and Apache SSHD internals at runtime and this also seems to show that the OutputStream coming back from the process is empty.
Perhaps the SSH exec channel is closed prematurely.

I managed to use Byteman to get the stacktrace of a swallowed exception that seems to be the cause of this:
java.io.IOException: Stream closed
	at java.lang.ProcessBuilder$NullOutputStream.write(ProcessBuilder.java:433)
	at java.io.OutputStream.write(OutputStream.java:116)
	at java.io.BufferedOutputStream.flushBuffer(BufferedOutputStream.java:82)
	at java.io.BufferedOutputStream.flush(BufferedOutputStream.java:140)
	at java.io.FilterOutputStream.flush(FilterOutputStream.java:140)
	at org.apache.sshd.server.shell.InvertedShellWrapper.pumpStream(InvertedShellWrapper.java:165)
	at org.apache.sshd.server.shell.InvertedShellWrapper.pumpStreams(InvertedShellWrapper.java:135)
	at org.apache.sshd.server.shell.InvertedShellWrapper$1.run(InvertedShellWrapper.java:116)
	at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142)
	at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617)
	at java.lang.Thread.run(Thread.java:745)

Not sure why this happens yet.

Camel 2.20.x has upgraded to Apache SSHD 1.6.0 so I'm going to mark this as fixed on our 2.20 branch. We can always reopen if it starts failing in the CI environment.


updateVersion problems

updateVersion.sh -c doesn't work

updateVersion.sh has been moved out of the tests directory, but tests/README.md is still the doc for it.

The generated comment in istio.INSTALL also refers to tests/updateVersion.sh and tests/README.md

PR #209 fixes these problems, and also simplifies the design to remove the files in install/kubernetes/templates and instead just update istio.yaml and istio-auth.yaml in place. This is a necessary simplification IMO, since the current design is very confusing. When you call updateVersion.sh, it not only updates the expected files (istio.VERSION, istio.yaml, and istio-auth.yaml) but it also updates 8 other template files, so the resulting git commit has 10 updated files. The fact that there are 10, instead of just 2 yaml files in the install directory is also confusing. The small benefit of not needing to make the same update to 2 files when there are non-image changes, which is fairly rare, is not worth the complexity.
If, however, we don't want to merge #209 before alpha, the above 3 problems need to be fixed in the current version.

If the problem is with the number of files updateVersion touches, let's change the templates to be template, i.e. to contain a {hub} and {tag}, and do the substitution directly in the generated files.

@andraxylia yes, that would be better. I think that if we stick with templates, they should really be templates, not yaml files that are also updated every time they are used.
Right now, they aren't really templates, but rather yaml fragments that are being composed into larger ones (a yaml !include would be nice). The only reason we need them now is for two composed files (istio.yaml and istio-auth.yaml) that would otherwise have duplication. Isn't the goal is to only have one of these in the future? If so, aren't we adding this complexity to solve a short-term problem?
We also have the option of simply splitting up the yaml files used for install. We could have bash scripts to pull in the right ones for different configurations, if it's too complicated, although it certainly isn't today.
Anyway, if we use templates or simply split up yaml files we should be leveraging the separation better. See my related comment in https://github.com/istio/istio/pull/224.

Let's use the templates, it is easier to do kubectl apply, than to run a bash script (or .bat, or .zsh etc).
Indeed, it would be nice to have a single yaml file. The expectation is auth enabled will become the default option for installation.

OK, I closed #209 and moved the fixes and template improvement to #229.
@andraxylia, @sebastienvas: PTAL

@frankbu I think we can close this right ?


Zen Mode (auto close less used window)

This is something I had in my code editor for a while...I could set a Maximum amount of open windows. As soon as I opened more programs than the threshold it would try and close one of the less frequently used ones (asking to save my work of course).
I'm a real scatterbrain and that helped me stay focused on the task.

I feel like #13035 is a better solution.  Closing windows is dangerous


Add LicenseRef-doubleopen-jsr-356-websocket-spec

@Toniprni What's your view (or others') regarding whether this license includes an obligation to include in notice file? In my view, it does not. The right to distribute the spec document itself is quite difficult to read from there, but it is there - within parenthesis towards the end of section 2. Other than that there is a requirement to not modify the spec, nor the software implementing it. Otherwise ok. I'm classifying it as proprietary free. By the way, this is an example of a repeating license that does not have a scancode naming. And I wonder what is the authoritative source for this license: I used this one, being license version 1.0 https://github.com/apache/cxf/blob/3.4.x-fixes/distribution/src/main/release/samples/jax_rs/search/src/main/resources/JavaWebSocketAPI_1.0_Final.pdf, whereas Oracle has the license version 1.1, https://download.oracle.com/otndocs/jcp/websocket-1_1-mrel-spec/license.html both of which apply to final spec version 1.0. Content-wise for our license classification reasons these are the same.

@willebra  Should the WebSocket Specification license also have the property:patent-clause (see section 4 of the licence)? I agree, no need for include-in-notice-file.


pymilvus.exceptions.SchemaNotReadyException: <SchemaNotReadyException: (code=1, message=Collection 'tool_embedding' not exist, or you can pass in schema to create one.)>

Dear Authors,
Thank you so much for the excellent work. I'm excited to see the benchmark and want to evaluate our model on it.
However, when trying to construct the prompts. I encounter the following error:
Traceback (most recent call last):
  File "/opt/conda/envs/metatool/lib/python3.9/runpy.py", line 197, in _run_module_as_main
    return _run_code(code, main_globals, None,
  File "/opt/conda/envs/metatool/lib/python3.9/runpy.py", line 87, in _run_code
    exec(code, run_globals)
  File "/home/sianchen/MetaTool/src/prompt/prompt_construction.py", line 290, in <module>
    run_task(args.task)
  File "/home/sianchen/MetaTool/src/prompt/prompt_construction.py", line 263, in run_task
    prompt_construction.get_multi_tool_prompt('dataset/data/multi_tool_query_golden.json')
  File "/home/sianchen/MetaTool/src/prompt/prompt_construction.py", line 225, in get_multi_tool_prompt
    collection = Collection(name='tool_embedding', using='default')
  File "/opt/conda/envs/metatool/lib/python3.9/site-packages/pymilvus/orm/collection.py", line 137, in __init__
    raise SchemaNotReadyException(

I've installed and run milvus locally following the guide.
But if I understand correctly, it would just create an empty server so there is no tool_embedding schema inside.
Could you please add more detail in the README regarding how to set up the server, so we can run the evaluation from scratch smoothly?
Thanks.

Hi Sian,
You should first run src/embedding/milvus_database.py to construct a database. Then this error could be addressed.
I have updated the README.md accordingly.

Thanks for your prompt reply. The problem is solved!


Use repo's default branch instead of defaulting to master

Currently, there are several commands that can only modify the master branch (e.g. deploy). This should be changed to the default branch of the repository, which still can be master but also supports e.g. more recent Github repositories with their main branches.

:tada: This issue has been resolved in version 4.3.0 :tada:
The release is available on:

v4.3.0
GitHub release

Your semantic-release bot :package::rocket:


java.lang.reflect.InvocationTargetException; Caused by: java.lang.IndexOutOfBoundsException: readerIndex(10) + length(1) exceeds writerIndex(10): UnpooledHeapByteBuf(ridx: 10, widx: 10, cap: 10)

What version of ViaVersion are you using? Type /ver viaversion
0.6.4-Snapshot
What version of Spigot are you using? Type /ver
1.8.8-R0.1-Snapshot
What plugins are you using? Type /plugins
Plugins: EchoPet, PermissionsEx, Buycraft, ViaVersion, ProtocolLib
Are you using any additional software like BungeeCord? If so, what software and version? (Please list your plugins as well)
Yes, we're using the newest BungeeCord 1.8/1.9, only self made plugins
How does this error happen? login? Using an item?
We don't know. If this error appears, the Exception is thrown multiple hundred times in a second, and the server totally hangs in this time. Sometimes, but only sometimes it stops spamming the exception and the server keeps running, but most of the time the server crashes.
We don't think just catching this error will help, because it is still thrown a lot of times and catching just stops printing the error in the console but still blocks the minecraft server.
Is there an error in the console? Use pastebin.com. Is there a kick message?
http://hastebin.com/alaqucigex.css
In 10 seconds 300 Megabyte Exception Log
Players are mostly kicked with Timeout reason

I've seen the same error with other numbers: http://hastebin.com/alaqucigex.css
Caused by: java.lang.IndexOutOfBoundsException: readerIndex(1) + length(1) exceeds writerIndex(1): UnpooledHeapByteBuf(ridx: 1, widx: 1, cap: 1)
I hope this helps.

I've actually seen another thing which could be related to this error too: it says
[13:57:36] [Server thread/WARN]: Janoschmen was kicked for floating too long!
[13:57:36] [Server thread/INFO]: Janoschmen lost connection: Flying is not enabled on this server
[13:57:36] [Server thread/WARN]: handleDisconnection() called twice
I'm not sure if this warning has anything to do with the error, but often the error starts getting spammed after a player disconnects.

Use 0.6.7, closing issue. Request reopen if still occurs.


Proposed Parallel Processing Interface

this issue is discussing how to expose an interface in larky for parallel processing of data. currently larky is single threaded but many files for batch processing lend themselves to parallelism.
interface for multiprocessing.map would be something like multiprocessing.map(iterator, transformer) where transformer would be a lambda that takes each element along with the ctx and return the output of the transform.
operations:
- Script:
  lang: starlarky
  script: |
    load(@vgs/multiprocessing, 'multiprocessing')
    def process(input, ctx):
      result = '\n'.join(multiprocessing.map(input.split('\n'), lambda x, ctx: vault.put(x[1]))
      return result, ctx

assume input is a stream like object for sftp files or http object for http requests.
multiprocessing.map would be some interface to some execution framework such as spark which would execute the lambda and use the number of processes that customer has provisioned.

here’s an example of a similar interface using Apache beam.

https://docs.dask.org/en/latest/futures.html Here’s an example from Dask


NotImplementedError: Called get_bucket_versions with some of delimiter, encoding_type, key_marker, version_id_marker

Our application is issuing S3 requests like:
<IP_ADDRESS> - - [08/Nov/2017 13:45:44] "GET /bucket?versions&encoding-type=url HTTP/1.1" 500 -

Using debug mode, we get this error:
Error on request:
Traceback (most recent call last):
File "/Users/andrei/.pyenv/versions/2.7.13/envs/localstack/lib/python2.7/site-packages/werkzeug/serving.py", line 209, in run_wsgi
execute(self.server.app)
File "/Users/andrei/.pyenv/versions/2.7.13/envs/localstack/lib/python2.7/site-packages/werkzeug/serving.py", line 197, in execute
application_iter = app(environ, start_response)
File "/Users/andrei/.pyenv/versions/2.7.13/envs/localstack/lib/python2.7/site-packages/moto/server.py", line 93, in __call__
return backend_app(environ, start_response)
File "/Users/andrei/.pyenv/versions/2.7.13/envs/localstack/lib/python2.7/site-packages/flask/app.py", line 1836, in __call__
return self.wsgi_app(environ, start_response)
File "/Users/andrei/.pyenv/versions/2.7.13/envs/localstack/lib/python2.7/site-packages/flask/app.py", line 1820, in wsgi_app
response = self.make_response(self.handle_exception(e))
File "/Users/andrei/.pyenv/versions/2.7.13/envs/localstack/lib/python2.7/site-packages/flask/app.py", line 1403, in handle_exception
reraise(exc_type, exc_value, tb)
File "/Users/andrei/.pyenv/versions/2.7.13/envs/localstack/lib/python2.7/site-packages/flask/app.py", line 1817, in wsgi_app
response = self.full_dispatch_request()
File "/Users/andrei/.pyenv/versions/2.7.13/envs/localstack/lib/python2.7/site-packages/flask/app.py", line 1477, in full_dispatch_request
rv = self.handle_user_exception(e)
File "/Users/andrei/.pyenv/versions/2.7.13/envs/localstack/lib/python2.7/site-packages/flask/app.py", line 1381, in handle_user_exception
reraise(exc_type, exc_value, tb)
File "/Users/andrei/.pyenv/versions/2.7.13/envs/localstack/lib/python2.7/site-packages/flask/app.py", line 1475, in full_dispatch_request
rv = self.dispatch_request()
File "/Users/andrei/.pyenv/versions/2.7.13/envs/localstack/lib/python2.7/site-packages/flask/app.py", line 1461, in dispatch_request
return self.view_functions[rule.endpoint](**req.view_args)
File "/Users/andrei/.pyenv/versions/2.7.13/envs/localstack/lib/python2.7/site-packages/moto/core/utils.py", line 137, in __call__
result = self.callback(request, request.url, {})
File "/Users/andrei/.pyenv/versions/2.7.13/envs/localstack/lib/python2.7/site-packages/moto/s3/responses.py", line 106, in ambiguous_response
return self.bucket_response(request, full_url, headers)
File "/Users/andrei/.pyenv/versions/2.7.13/envs/localstack/lib/python2.7/site-packages/moto/s3/responses.py", line 110, in bucket_response
response = self._bucket_response(request, full_url, headers)
File "/Users/andrei/.pyenv/versions/2.7.13/envs/localstack/lib/python2.7/site-packages/moto/s3/responses.py", line 148, in _bucket_response
return self._bucket_response_get(bucket_name, querystring, headers)
File "/Users/andrei/.pyenv/versions/2.7.13/envs/localstack/lib/python2.7/site-packages/moto/s3/responses.py", line 250, in _bucket_response_get
prefix=prefix
File "/Users/andrei/.pyenv/versions/2.7.13/envs/localstack/lib/python2.7/site-packages/moto/s3/models.py", line 517, in get_bucket_versions
"Called get_bucket_versions with some of delimiter, encoding_type, key_marker, version_id_marker")
NotImplementedError: Called get_bucket_versions with some of delimiter, encoding_type, key_marker, version_id_marker

We use localstack that in turn uses moto. Are you planning on addressing this issue somewhere in the near future? It is very important for us, since the whole local setup relies on this.

Can you give me a simple testcase with boto3 that will cause this, then I'll go and look at it.

Unfortunately, our client is implemented in Ruby and communicates locally with localstack's S3 (which I guess uses moto underneath). So I'm not sure what I can provide in order to help you. Isn't the URL/stacktrace from localstack insightful enough?

It would of been quicker if I had a test case but I can make do.

Do you happen to have any updates on this? Thanks!


add(plugins): Htmx

Name
Link

Htmx
https://github.com/aniftyco/tailwind-htmx

Add variants for styling htmx events with Tailwind CSS

[x] My item is in the right category
[x] My item is logically grouped below similar items
[x] My item's name and description respects the conventions of the list
[x] My item is awesome
[x] My item is in line with the Tailwind brand usage guidelines
[x] I have read and followed the contribution guidelines

Awesome!


Skip AR callbacks

Is it possible to skip AR callbacks on the creation of a record?

You can use to_create to customize how your factory gets created. See https://github.com/thoughtbot/factory_girl/blob/master/GETTING_STARTED.md#custom-methods-to-persist-objects
If you pair this with http://stackoverflow.com/a/21371833/1489062 you should get what you looking for.
If you don't mind me asking, why are you trying to skip callbacks? If your skipping it in your application it might be worth considering if it really should be a callback.

I got around it without actually needing to skip the callback, but thanks anyway.
I'm going to close this issue.


system32comics - Instagram Bridge failed with error 429

Error message: The requested resource cannot be found! Please make sure your input parameters are correct! cUrl error:  (0)
Query string: action=display&bridge=Instagram&u=system32comics&media_type=picture&format=Atom
Version: git.master.3e45643

Thanks for reporting this issue. This is likely related to #994.

I have a similar problem 👍
Error message: The requested resource cannot be found! Please make sure your input parameters are correct! cUrl error:  (0) PHP error:
Query string: action=display&bridge=Instagram&u=patisseriepetit38&media_type=all&format=Atom
Version: 2019-01-13


endpoint: Use nanoseconds in policy logs

So far policy logs have only logged timestamps on a second accuracy. This makes it hard to correlate endpoint policy logs with the agent and/or Envoy logs. Change endpoint policy logs to also use nanoseconds like the daemon logs already do.

/test


[5.1] Validation test

To prevent #11426 in the future

Thanks. ;)

Ahh, the magic of StyleCI creating a fix PR and merging it all by itself. #11474 :)

Too much magic over there.
You are welcome :)


Sometimes tree view looks broken.

Clicking on the tree view refreshes directory which becomes readable again.

Thanks for the report! This is a duplicate of https://github.com/atom/atom/issues/4924 – please subscribe there for updates.


Error Message when changing category on the board

Hello,
I just upgrade kanboard on the last version.
I still have the same problems since i have installed the version 1.022.
When i want to change category of a task on the board, this error message appears "Internal Error : Controller or method not found for the given url!" and nothing change.
I have to open the task to change the category.
Is there a fix planned to solve this problem ?
Thanks

This problem have already been reported. It's now fixed in the development version et that will be part of the next stable version.

Fix available in 1.0.24

Thanks a lot.
Philippe
Philippe CHAUVIER
Responsable du Service Infrastructures
Direction Numérique et Logistique
<IP_ADDRESS>.99
<IP_ADDRESS>.02

Frédéric<EMAIL_ADDRESS>25/01/2016 >>>

Fix available in 1.0.24
—
Reply to this email directly or view it on GitHub.


[macOS] Update PHP to 8.2

Description
Update PHP to 8.2 version
Related issue:
Check list

[ ] Related issue / work item is attached
[ ] Tests are written (if applicable)
[ ] Documentation is updated (if applicable)
[ ] Changes are tested and related VM images are successfully generated

/azp run macos11,macos12


[enhancement] Add Recording Feature

Hey Al, amazing program and course! (Automate the Boring Stuff w/Python)
I was thinking, it'd be really cool a record feature in PyAutoGUI.
What I mean with a record feature is the ability to let's say, call a method (just like displayMousePosition()) add a delay of X seconds to start recording the movements of the cursor and then start recording those coordinates.
So that will allow users to record what they want to do in a more faster way, instead of checking the coordinates of various points they want to click/drag and then annotate them, they can record the actions they want to do in the program and replicate the behavior. In order to stop the recording, there should be kill-switch like a key combination on the keyboard, just like screen recorders do.
After the recording, PyAutoGUI can save the replicated movements/actions in a file specified by the user at the end of the recording, and use that program to replicate that behavior again.
What do you think? 🙂

Duplicate of #127

Closing since this is a dupe of #127. But thanks for your interest in this feature. It's good to know what users want.


keybase oneshot hangs forever

+ export KEYBASE_ALLOW_ROOT=1
+ KEYBASE_ALLOW_ROOT=1
+ keybase version
Client:  3.1.2-20190312133549+4c383e6a53
+ sleep 1
+ keybase service
Installing autostart file. Manage autostart settings with `keybase ctl autostart`.
2019-04-08T17:58:09.338098Z ▶ [INFO keybase socket_nix.go:72] 001 | net.Listen on unix:/root/.config/keybase/keybased.sock
2019-04-08T17:58:09.342760Z ▶ [WARN keybase gregor.go:256] 002 PushHandler: unable to create push service client: no UID; probably not logged in
+ keybase oneshot --paperkey '...' -u '...'

I'm running keybase in a docker container. The oneshot command is hanging forever. There's no further info in the logs than what I posted above. I'm using https://prerelease.keybase.io/keybase_amd64.deb

we'd need a log to help out at all

keybase service -d

$ keybase service -d
Incorrect Usage.

NAME:
   keybase service -

USAGE:
   keybase service [command options]

OPTIONS:
   --chdir 		Specify where to run as a daemon (via chdir)
   --label 		Specifying a label can help identify services.
   --auto-forked	Specify if this binary was auto-forked from the client
   --watchdog-forked	Specify if this binary was started by the watchdog

If I never call keybase service then keybase oneshot succeeds. 🤔
I'm closing the issue since login is working now. I didn't realize the service command isn't required anymore.


fix: use the ledger to determine the AccountDelete fee instead of hardcoding

High Level Overview of Change
This PR pulls the fee for an AccountDelete transaction from the ledger, instead of using a hardcoded value.
Context of Change
A few months ago, the network voted to move the fee structure from 20/5 to 10/2. The fee for an autofilled AccountDelete transaction in xrpl-py wouldn't change, in that case, because it was hardcoded to 5 XRP.
Type of Change

[x] Bug fix (non-breaking change which fixes an issue)

Before / After

Test Plan
CI passes.

The standalone Docker container is currently still set to a 20/5 fee structure - tests will pass when that's fixed.

The standalone Docker container is currently still set to a 20/5 fee structure - tests will pass when that's fixed.
Turns out defaults are 200/50, and there's no real way to change that. So for now, the tests will account for that

This should probably (carefully!) factor in load/escalation-based adjustments to the transaction cost. Since the cost to get into the open ledger or queue when they're full is based on "fee levels", not raw fee amounts, an AccountDelete paying 1 incremental reserve (e.g. 2 XRP right now) is treated the same as a reference transaction paying 10 drops.

This should probably (carefully!) factor in load/escalation-based adjustments to the transaction cost. Since the cost to get into the open ledger or queue when they're full is based on "fee levels", not raw fee amounts, an AccountDelete paying 1 incremental reserve (e.g. 2 XRP right now) is treated the same as a reference transaction paying 10 drops.

I don't want to touch the AccountDelete load factoring right now - that's a bit too risky IMO. Also, I'm not sure how exactly it should be raised - certainly not the same formula.


Potentially overly slow initial map composition caused by exhaustively setting all possible map configuration options

android-maps-compose 4.3.0
I see an avoidable performance hit in the code for the initial GoogleMap() subcomposition run: the code essentially configures all possible Map configuration options in an exhaustive manner, rather than only the ones that the API consumer cares about.
This includes CameraPositionState, LocationSource, all 9 properties in MapProperties, GoogleMap padding, and all 10 properties in MapUISettings. At least 22 GoogleMap class function calls upon initial composition, many of which may never actually need to be explicitly set.
Another part of the problem is that the MapView is already being rendered while all these options are set, exhaustively reconfiguring the map while it is being displayed.
All this would not be much of a problem if all the GoogleMap class function calls were guaranteed to execute swiftly. I suspect that this is not the case for all of them, e.g. due to synchronization/locking/blocking and inter-process calls.
Just to be clear: this is a potential architectural and performance problem I see in the code, not something I have actually experienced or tested.

This could potentially be addressed by discontinuing reliance on large preconfigured configuration objects to be passed into the GoogleMap() composable. Instead, configuration lambdas/blocks could be used, e.g.:
val propertiesConfig: MapPropertiesScope.() -> Unit = {
    // API consumer might care only about setting a specific map type
    this.mapType = TERRAIN
}

GoogleMap(
    mapPropertiesConfig = propertiesConfig
) {}

These configuration lambdas can be readily executed and observed for changes during composition.

In fact, do to this cleanly, it may be necessary to introduce MapConfigurationState that encapsulates all mentioned configuration options, including camera, location source, inside padding. If a user provides a new MapConfigurationState object then the GoogleMap & MapView would need to be recreated, unless there is a reliable way to reset the map to defaults.
The reason for needing this kind of thing is to keep the Compose API properly declarative. The 2 possible properly declarative approaches I see for this are MapConfigurationState or exhaustively setting all options.
Alternatively the Map could also be configured from inside the subcomposition/content block via side effects. The inherent constraint of this approach is performance: initial composition of the potentially complex subcomposition needs to be complete before configuration actions can be performed. Arguably, initial map loading should already be happening in parallel during this time. So I think the subcomposition needs to stay reserved for only configuring the map contents, not configuring the map itself.


Are there any plans to support something like termux-x11?

For termux there is project called termux-x11. It allows to show gui (for example xfce4) without using VNC etc.
Project is available here: https://github.com/termux/termux-x11
Are there any plans to support something like this on nix-on-droid (or maybe it is already possible)?

Pull requests are welcome; I, personally, don't plan to work on this anytime soon.

It's actually possible to use termux-x11 out of the box if you add -listen tcp to your termux-x11 call. It's a bit absurd, but here's the step-by-step:

In regular Termux, run termux-x11 :1 -listen tcp -xstartup "dbus-launch --exit-with-session i3" (replace i3 with whatever you want to use as desktop)
Open nix-on-droid and run a gui app with DISPLAY=<IP_ADDRESS>:1. Exampl: nix-shell -p gedit, DISPLAY=<IP_ADDRESS>:1 gedit
Open the termux-x11 Android app and you should see your GUI from nix.

Still, it'd be cool if we could do termux-x11 without needing vanilla Termux installed at all. The termux-x11 tool appears to be very simple https://github.com/termux/termux-x11/blob/master/termux-x11 - if we can somehow expose /system/bin/app_process in nix-on-droid then it might "just work" :thinking:

I could modify termux-x11 so that it uses com.termux.nix.x11 instead of com.termux.x11 and that might work. Ideally we wouldn't have a duplicate app though.

I could modify termux-x11 so that it uses com.termux.nix.x11 instead of com.termux.x11 and that might work.

With no TermuxApiReceiver to talk with and no ClipboardAPI to process the request it's not gonna work. This code would need to be added to our app somehow, plugin or not.

Ideally we wouldn't have a duplicate app though.

On one hand, there isn't much we've changed: bootstrap URL selection, some broken symlink resolution during login and some of the contact links.
On the other hand, coinstallability with Termux is kinda nice.
Now, if Termux had several "slots" to install different userspaces into from custom URLs...

In regular Termux, run termux-x11 :1 -listen tcp -xstartup "dbus-launch --exit-with-session i3" (replace i3 with whatever you want to use as desktop)

I gave this a shot, but with i3 inside the nix-on-droid boundary:

install + open TermuxX11 APK
in regular Termux: termux-x11 :1 -listen tcp -ac
in NoD:

ensure env has DISPLAY=:1 (i.e. system or shell sessionVariables)
dbus-run-session nixGL i3

I packaged up / forked from NixOS the a small subset of dbus (https://gist.github.com/harryaskham/15b4a13a98b12a469527e92b644589b7) and manually set:

XDG_CONFIG_{DIRS,HOME}=$HOME/.config
XDG_DATA_{DIRS_HOME}=$HOME/.local/share
XDG_RUNTIME_DIR=/tmp/runin bothenvironment.sessionVariablesandzsh.sessionVariables`. Can't be sure all of these are necessary.

Running with scrcpy I can get this nice picture-in-picture mode with my phone NoD streaming wirelessly to my desktop NixOS:

The top level nixGL is enough to get a HW-accelerated picom / alacritty running smoothly. Haven't found a browser that runs out the box yet :)


ap210.org site build still failing

I know this is not a new issue but could find no way to revert a closed issue.

seems to be working.


[SR-3516] NSDataDetector Missing in Foundation

Previous ID
SR-3516

Radar
None

Original Reporter
aamctustwo (JIRA User)

Type
New Feature

Additional Detail from JIRA

Votes
1

Component/s
Foundation

Labels
New Feature

Assignee
None

Priority
Medium

md5: e32a1c3dd4d08633fbbbdc2c6f42a5a3

Issue Description:
`NSDataDetector` currently does not exist in `swift-corelibs-foundation`.
From Apple's API reference: https://developer.apple.com/reference/foundation/nsdatadetector

We don't intend to port this functionality to swift-corelibs-foundation.


MH-12905 TEMPORARY Karaf config assembly workaround (KARAF-5693)

As discussed in last Tues devOps meeting and proposed on list earlier, this is the workaround for missing libs in some of the assembled config.properties after a build.

@lkiesow The CI checks are failing because the static workaround config.properties contains the "$" symbol, as in "${includes}" and " ${jre-${java.specification.version}}". Is there a way to omit this file in that etc dir check?

@karendolan that check is looking for spaces at the end of lines.  Line 390, and 392 both have spaces at the end ;)

@gregorydlogan Thanks! I removed those 2 spaces (and squashed pushed).


fix rescue assignment check on begin block assigned

I got here so far.
As you will notice this make another spec to fail and despite all the tries I had to workaround it I could not make the other one to pass.
I wonder if that spec fail to set how we are supposed to specify the alignment of rescue. And maybe there are 2 kinds of alignments on the spec.
I am a bit afraid of changing existing spec to fix rubocop-hq/rubocop#6771.

closing this one.
I am rebasing it from master and creating another PR against rubocop-hq/rubocop#master


The definite form of length encoding shall be used, encoded in the minimum number of octets.

The definite form of length encoding shall be used, encoded in the minimum number of octets.

SPDM certificates also adhere to the requirements as RFC 5280 defines.
Refer to the paragraph 394 In DSP0274_1.3.0.pdf.

The data that is to be signed is encoded using the ASN.1 distinguished encoding rules (DER).
Refer to the 4.1.  Basic Certificate Fields In RFC 5280

The definite form of length encoding shall be used, encoded in the minimum number of octets.
Refer to the 10.1 Length forms In ITU-T Recommendation X.690

We have created a test case, the length octets using the long form instead of the short form.
https://github.com/DMTF/libspdm/pull/2595
We change the length of version element from 0x03(short form) to 0x81 0x03(long form) in the test case.
due to the definite form of length encoding shall be used, encoded in the minimum number of octets, so the expected return of the 2nd call libspdm_x509_certificate_check( ) is false, but the actual return is true now.

Discussed in SPDM Code TF, 2024/03/04 - It seems not a real issue, because even using long form encoding does not bring any negative impact. The openssl/mbedtls can parse it correctly. Prefer to keep it as is.


Add a refresh button to refresh the catalog stored in excel

On manual table creation the only way to update the catalog in excel is to close excel and restart from scratch.
A refresh button on the Excecute SQL window will be handy.

There is a refresh button under when you click on the Config button in the ribbon. That flushes all lists. Let me know if that works.


Update GitHub app auth flow, migrate docs to website

Updated the GH app auth flow and bumped up the Octokit version.
I've also added some of the important config values to the Heroku manifest so it prompts users for them when they deploy:

This, combined with the updated documentation website (PR for those updates here) should help ease the confusion many new users have around installation.

I need to investigate why this build is failing. The relevant docs changes are up on staticman.net though, so once this change is out hopefully the setup process will be more clear.

❤


Show Description-Attribute of NINA Warnings below Headline

Is your feature request related to a problem? Please describe.
When using the NINA Integration and the Alert contains a Description you have to tap on the Card to show the state of the Entity/Sensor, open the 'Attributes' Drawer and then you can read the Description. This Descriprion can usuallly be between 10 and up to a hundred Words long and is vital Information (contains Evacuation-Radius when a WWII Bomb is found, etc).
Describe the solution you'd like
A Switch in the Card configuration to enable showing the Description below the Headline (in a mutch smaller fontsize). In the best case the Description uses the currently empty space of the Card and expands the card vertically only if necessary.
Additional context
I'll add further screenshots showing what i've described above but the warning that brought me here is already gone.

Displaying any more stuff would be just visual clutter. The design goal is for the card to be as minimalistic as possible. Thanks for your input!


Minimal type checking on TIR schedule

This PR adds mypy type checking for schedule module.
The schedule module is properly typed, so this addition will prevent untyped type defs to be added in the future.
I added type ignores for objects returning through FFI and there were causing  error: Module has no attribute.
I would like to hear some feedback on how to tackle this kind of object.

ignoring types from FFI is fine since we likely will always have a wrapper around FFI calls and we only need to type the wrappers


Windows/Configuration: correct HTML code to XML tags

Description:
The XML code block contains HTML code instead of the expected XML tags.
Changes proposed :
Converting these to proper XML format should at least make it readable.
The intended outcome of using correct XML tags is to make it work as expected.
Also replacing "ps" with "xml" as the correct code block syntax name for code highlighting.
Issue ticket to be closed or referenced:
Ref. #3819 [LOC]"<"needs to be replaced with"<", ">" needs to be replaced with">"
(Should close issue ticket #3819 after migration to docs.microsoft.com/en-us/ and later updated to the Japanese page.)

@dansimp Would you be able to review and merge this PR contributed by the community? The issue is originally passed to localization team for review and PR seems to intend to bring a solution in the meantime. Thank you.


Could I use this to make a browser extension?

I know this runs into the issue that it won't run because of the banner checkbox. I was wondering if I could use it to make a chrome extension so the banner could be clicked by the user then the py program runs. I am just looking for your thoughts if this is possible.

Has been fixed - see update.


Version 0.0.11

@SupaFlav can you test this version? I made some changes to get the EP600 working again. The battery pack polling also doesn't seem to work with the AC300. But that can be fixed in another release

I'll try to take a look early this week.
Polling of packs seems to work fine for AC200M, but I still get plagued by a bluetooth issue every few days that requires me to restart the system (not just HA).  Something deeper down in the drivers/bluetooth layers seems to get messed up.  I have an automation in place to reboot the system after an extended timeout of reporting and then all is well again.

Got the same bug. Logs have no info in it, why this happens

Not sure, it seems to be intermittent and can happen after a day or nothing after a week.  As I mentioned, I have a timeout via automation for the battery reporting that restarts HA and then all is well again.  Interim solution at least.
Been pretty busy this past week and likely for the next, but hope to spend a bit of time on this next week.

Been MIA, life and such, but I noticed the new HA OS 11.0 release with many BlueX & BT updates.  Hopefully this clears up some of these connection issues being experience.  Unable to dedicate time at the moment, but will try it out when I can.

Seems like it no longer disconnected on my installation

Found a new problem: In non persistent connections, the return value of the coordinator seems to be always None

Seems like the non-persistent connections are now fixed. I'll test it for 2 days and if everything works, the new version is ready


⚠ Processors has degraded performance

In 1685e7f, Processors ($STATUS_URL) experienced degraded performance:

HTTP code: 200
Response time: 59 ms

Resolved: Processors performance has improved in 9dd4b6a.


WIP: Support jQuery >= 3.0.0

I need some help here. I tried to mimick when config; when I run npm run test-browser-jquery, I get 3 failures (much better than >100 of them with jQuery 2.1.4 but still):

First of them is in lib/chai-as-promised.js#L308 where args is set to "test it" and should be an array-like.
What's the expected definition of global.waitAll? Test results didn't change when I removed it; is it needed?
I wasn't sure what version you want to include so I used the link to the latest master one as I believe that's what you have for when. I can change it to 3.0.0-alpha1 if you prefer it to be more deterministic.
There are two bugs related to jQuery Deferreds that I linked in the adapter file (they should both be fixed before the final 3.0.0) but they're both with jQuery.when, not thenable.then; the latter should work.

What's the expected definition of global.waitAll? Test results didn't change when I removed it; is it needed?

This is used in configurable-asserter-args.coffee. It should be set to the library's equivalent of Promise.all.
Not really sure about the failures otherwise.

This now passes all the tests with jQuery 3.0.0-beta1. I had to add one more global as jQuery Deferreds have a promise method, not a static property.

Please don't add a new global. Instead, have defer return an object that follows the standard deferred pattern, instead of just aliasing it to jQuery.Deferred.

@domenic Done.

Thanks!

Thanks for landing!
It would be sweet if you could update the header at your popular post at https://blog.domenic.me/youre-missing-the-point-of-promises/; specifically the part "they will forever remain broken" is no longer true.