K8s versions were referring to old setup

K8s version for upgrades were still reflecting the old lab (1.20 to 1.21)
Issue #, if available:
Description of changes:
By submitting this pull request, I confirm that you can use, modify, copy, and redistribute this contribution, under the terms of your choice.

Thanks for this contribution!


Remove duplicate zid_to_str() methods

See https://github.com/ros2/rmw_zenoh/pull/92#discussion_r1458306970

Removed in #135


Allow installation from other repository

By the way, this change is in my other PR also, not sure if it is worth doing it in a separate pull request...

By the way, this change is in my other PR also, not sure if it is worth doing it in a separate pull request...

I think landing it separately and rebasing your PR is the best approach.

I think landing it separately and rebasing your PR is the best approach.

Ok

Ok

I just found something weird.
I made a mistake in install.sh:
NVM_GITHUB_REPO="${NVM_INSTALL_GITHUB_REPO:-nvm-sh}"
It should be
NVM_GITHUB_REPO="${NVM_INSTALL_GITHUB_REPO:-nvm-sh/nvm}"
But the unit test still works.
I dont get it....

I just found something weird.
I made a mistake in install.sh:
NVM_GITHUB_REPO="${NVM_INSTALL_GITHUB_REPO:-nvm-sh}"
It should be
NVM_GITHUB_REPO="${NVM_INSTALL_GITHUB_REPO:-nvm-sh/nvm}"
But the unit test still works.
I dont get it....

Whatever I do in the install_script test suite, even 'exit 1', the tests still pass...

Whatever I do in the install_script test suite, even 'exit 1', the tests still pass...

I finally found out what was the problem. In test/install_script, nvm_install_with_aliased_dot and nvm_install_with_node_version were installing nvm using the travis build directory (due to NVM_DIR="${TRAVIS_BUILD_DIR}" in .travis.yml), so it was updating the git repository to the latest version of nvm, loosing all the changes from all the PR done after last release.

I finally found out what was the problem. In test/install_script, nvm_install_with_aliased_dot and nvm_install_with_node_version were installing nvm using the travis build directory (due to NVM_DIR="${TRAVIS_BUILD_DIR}" in .travis.yml), so it was updating the git repository to the latest version of nvm, loosing all the changes from all the PR done after last release.


Improvement: ConfigEditor should be clearer about workspace loading

Currently, when you create a new TwinMaker datasource, the workspace field is somewhat confusing. As a user, you fill in the Authentication, Assume Role, and Workspace Id fields, and after saving it, the Workspace ID field swaps from a text field to a select and says that the Workspace ID isn't found:

If you save again, it will load in the workspaces and remove the (not found) part of the message, but this could be confusing for users.
Instead, it should work like the Cloudwatch Logs Config Editor, which tells the user to save the datasource first, and then they can select from the loaded values.

AWS agreed this would be a valuable improvement.


the test command must show all possible judges

@rultor release, tag is 0.2.0

@rultor release, tag is 0.2.0

@yegor256 Done! FYI, the full log is here (took me 8min)


--lazy mode only works after refreshing the page

Bug report
Version
master branch
Steps to reproduce

Run Saber website locally
Open http://localhost:3000 you will get a blank page
Refresh and it gives you proper contents.

This only happens after we enabled SSR in dev mode.

IssueHunt Summary

Backers (Total: $60.00)

 issuehunt ($60.00)

Become a backer now!
Or submit a pull request to get the deposits!
Tips

Checkout the Issuehunt explorer to discover more funded issues.
Need some help from other developers? Add your repositories on IssueHunt to raise funds.

IssueHunt has been backed by the following sponsors. Become a sponsor

Caused by #404 , I will submit a fix soon. 😅


Fix for calendar not showing when calendarWeeks: true

Starting 4.3.0 the calendar popup is not showing when calendarWeeks: true
After a diff of<EMAIL_ADDRESS>and<EMAIL_ADDRESS>I found that .flatpickr-calendar is set to display: none; After removing this, the calendar opens just fine again. All other changes in 4.3.0 seem to have no affect on this.
Example for the code working with 4.2.0: https://jsfiddle.net/5Lkc5w5o/
Example for the code failing with 4.3.0: https://jsfiddle.net/5Lkc5w5o/1/
(Also failing on the examples page: https://chmln.github.io/flatpickr/examples/ )
My assumption of this one line change (remove display none) is that this will lead to the flatpickr.min.css also losing the display:none; line (as I do not know the [assumed] stylus syntax)

Opened issue as well: #1252


Better flow annotations.

Summary
Because of how lerna hooks up node modules (previously with one index file and now with a symlink), Flow was unable to follow the modules properly. This diff adds a module mapper in the flowconfig and fixes up all the invalid Flow annotations that we accumulated over time.
Test plan
flow + jest
cc @hzoo this might be interesting to you.

Current coverage is 87.72% (diff: 62.50%)

No coverage report found for master at ad9c57c.

Powered by Codecov. Last update ad9c57c...d7c3c5f

Also decided to fix the snapshot printing issue in this diff because the Flow improvements pointed out that we were trying to print "null".


Improve questionnaire tour robustness

The questionnaire tour it not very repeatable - the ONS quick start disappears when a questionnaire exists and there is no handling of duplicate ONS questionnaires if it didn't.
Ideally the ONS quick start should be there until the user dismisses the onboarding UI. If an ONS questionnaire exists already, don't let them create it again, just explain and take them to the record tour.

 Onboarding 3.0 + ease of use


Remove numba test workarounds when it supports Python 3.11

https://github.com/holoviz/hvplot/pull/1015 added Python 3.11 to the test matrix but had to set in places some workaround not to include numba in the dependencies on Python 3.11 as not yet available. These should all be removed when numba adds support to Python 3.11.

This is no longer in place.


Persist NOC and ICA after async retrieval

Problem
The CHIP device controller is not persisting the credentials (NOC and ICA) upon async retrieval from OperationalCredentialsDelegate. Currently, AdminPairingTable::Store(adminId) is called after root certificate has been retrieved while request for NOC is pending.
Expected Behavior
All credentials should be persisted, and loaded into runtime credentials for controller after they are available. Any subsequent operations requiring these credentials (such as Pairing) should also be delayed until the credentials are loaded.
Actual Behavior
Only root certificate is persisted, whereas NOC and ICA are not. Also, these are only set in adminPairingInfo and not loaded into controller's runtime credentials upon OnLocalNOCGenerated callback.
Steps to Reproduce

Clear any persistent storage
Initialize controller, it should request NOC through operational credentials delegate (upon not finding them in storage)
Return OnLocalNOCGenerated callback with some delay assuming NOC was generated through a service.
Re-initialize controller, it would only have retained root cert, but since NOC and ICA weren't persisted in storage, they will be requested again.

Proposed Solution
Store and load credentials after successful retrieval (and setting in adminPairingInfo object) in OnLocalNOCGenerated callback using following operations here
SuccessOrExit(controller->mAdmins.Store(controller->mAdminId));
SuccessOrExit(admin->GetCredentials(controller->mCredentials, controller->mCertificates, controller->mRootKeyId));

Any attempts to operations requiring these credentials should also be either delayed or returned with error.

Combining the certificates in a single NOC chain also solves this issue. This was fixed by certificates sequence PR #8550.


Broken link on Use Cilium for NetworkPolicy

This is a Bug Report

Problem:
The 'Introduction to Cilium' link in this page leads to a 404 error.
Proposed Solution:
Fix the link to point to correct page.
Page to Update:
https://kubernetes.io/docs/tasks/administer-cluster/network-policy-provider/cilium-network-policy/

/assign

Fixes have been merged as part of PR #39607


hotfix - missing function call brackets

This is an hotfix that affects https://github.com/x-team/auto/issues/1293.
I was trying to render my custom component inside ApplicantBadge and it was not working because of the missing brackets.
before:

after:

Included npm run build output with 2da011b

Well it actually is a function if you check the props. I only added
paranthesis as it was not working properly without that. What could be
possibly broken?
On 17 Jul 2018 Tue at 23:05 Nick S. Plekhanov<EMAIL_ADDRESS>wrote:

@nicksp requested changes on this pull request.
@keremgocen https://github.com/keremgocen Have you checked the
component with npm start? This fails for me:
[image: image]
https://user-images.githubusercontent.com/579331/42845343-485f0eb2-8a1e-11e8-8f92-c91f8b48606f.png
—
You are receiving this because you were mentioned.
Reply to this email directly, view it on GitHub
https://github.com/x-team/auto-ui/pull/170#pullrequestreview-138018521,
or mute the thread
https://github.com/notifications/unsubscribe-auth/AAHSQgw-QAEkrySNVllK7yZdey4EgWO1ks5uHlGlgaJpZM4VTQtL
.

--
Kerem Gocen

From how it's used this isn't a function actually. Have you successfully run http://localhost:6060/ ?
Please check ApplicantBadge.md for example of how we use that.
cc/ @bernardodiasc

http://localhost:6060/ seems ok now thanks @bernardodiasc


Change reusable test steps to reusable test step fragments

Is your feature request related to a problem? Please describe.
Because of the clever way we wrap a flight planning attempt in "before" and "after" checks of the DSS to see if an operational intent was added, our test reports have the extremely odd characteristic of putting the planning query in step X while the "before" DSS query, which occurs chronologically before the planning query, is put in step X+1 (validation step).  I would previously have expected to be confident that the earliest event (query, check, note) in step X+1 should always occur after the latest event in step X.
Describe the solution you'd like
I believe the reason this occurs is that we really want to compose multiple reusable fragments into a single test step, but we can't currently do that because a test step can only link to a single "reusable test step" by linking that reusable test step in the heading title of the test step.  To support composition of multiple reusable fragments into a single test step (e.g., "Check 'before' operational intents", "Plan flight", "Check 'after' operational intents"), I think we could:

Conceptually rename all current "reusable test steps" to "reusable test step fragments"
Remove all links from test step titles, and replace them with text in the body of the test step linking to the same Markdown file (now describing the fragment)
Coalesce test steps that really should be a single test step, putting links to all relevant fragments within the body of that coalesced step
Generally extract begin_test_step and end_test_step into the calling scenario out of the reusable portion

I'm open to ideas for how to signal that we're linking to a reusable test step fragment; the best solution will make what is happening obvious to a reader unfamiliar with the technical backing, yet still be unambiguous and not burdensome to test designers.  My tentative thought is to require each fragment link to be another one-level-deeper heading under the test step heading.  I know this will put us even deeper into heading levels (we're already pretty deep), but I think it makes the most intuitive sense, and we can add non-linked content under same-level headings.
Describe alternatives you've considered
I'm open to alternative suggestions for how to make sequential test steps actually be sequential chronologically (or an argument that this is not a problem).
Additional context
See the time stamps for the queries in "Plan" and "Validate" sequential steps e.g., here -- note that the first of the two queries in the "Validate" step is initiated before the query in the (previous) "Plan" step.

Agreed this is an issue, and agreed with the proposed solution. I think that would solve the different issues with no real downside.

we really want to compose multiple reusable fragments into a single test step, but we can't currently do that because a test step can only link to a single "reusable test step" by linking that reusable test step in the heading title of the test step.

Yes, I can confirm that has happened to me several times when implementing tests.

My tentative thought is to require each fragment link to be another one-level-deeper heading under the test step heading.

Not sure if this is what you had in mind, but I think it would be OK for test step fragments and checks not part of the fragment to be under the same level:

## Case 1 test case

### Step 1 test step

#### [Fragment 1 test step fragment](./fragment_1.md)

#### [Fragment 2 test step fragment](./fragment_2.md)

#### Check 1 check

That would allow some welcomed flexibility for development all the while being not too confusing for non-technical readers. And also probably retro-compatible with our current tests.

This is complete with the exception of:

Remove all links from test step titles, and replace them with text in the body of the test step linking to the same Markdown file (now describing the fragment)

Instead, a test step title can still link to a fragment, and this is appropriate if that is the only fragment being used by the test step and no additional explanation is needed in documentation.


Introduce a callback queue on a tap

Fixes #2814, but it feels clumsy as we have two syncronisation mechanisms - locks and queue.
We should probably rewrite a tap to work on one dispatch queue and remove all the locks.

Why don’t we call all the tap callbacks on the main queue?

Hey @wtholliday, I've added a comment on the issue, but copying it here too:
I think we should try to avoid dispatching on the main queue from the framework.
In case of e.g. AmplitudeTap, calculation will be happening on the main queue, which might not be desirable.
If framework does things on the main queue, you have no choice as a consumer. If it doesn’t, and you need it, it is easy to switch to main queue at a call-site.
But, putting that aside, I don’t think this solves it either. You might be doing operations on the tap (stop, start) from another queue (as we do).


Neovim disconnects and exits with error code 1

I'm trying to use this extension on a fresh install of Pop OS! and it just doesn't work. I keep getting these errors. I'm using a neovim nightly appimage which works fine outside of VS Code. The paths are correct and I'm not using any extensions on neovim. VS Code logs doesn't show anything happening apart from loading the extension.

Managed to fix it by installing VS Code from a .deb file and not via flatpak.

@ThiagoLira that is not a fix.
The idea is for it to be able to work from flatpack installation and in fact as flatpak should be (from security and ease of use perspective) the preferable way.
Adding to the situation: the same problem has another message : MainController: spawn /usr/bin/nvim ENOENT
Granting all needed permissions using Flatseal doesn't fix it either.
It will be greatly appreciated if an example of settings.json configuration for the neovim extension is added with the mention of what minimal permissions are needed for the work of the extension with a custome init.vim in the /home/$USER/.config/nvim directory.


Change spacemesh trie inner objects serialization from RLP to XDR

Overview / Motivation
Currently, Transactions are encoded using Ethereums RLP
Spacemesh requires a deterministic function for serialising and deserialising data from persistent data structures. Currently we a re using ethereums RLP method, however it is not defined by any RFC and is subject to change. XDR is a standard for data serialisation which we wish to implement in our node
The Task
We wish to replace the  RLP encoding mechanism with XDR encoding.
*decide whther to use dynamic serialisation of data or use pre defined .x files
Implementation Notes
references:
https://en.wikipedia.org/wiki/External_Data_Representation
https://godoc.org/github.com/davecgh/go-xdr/xdr2
https://www.stellar.org/developers/horizon/reference/xdr.html
Contribution Guidelines
Important: Issue assignment to developers will be by the order of their application and proficiency level according to the tasks complexity. We will not assign tasks to developers who have'nt introduced themselves on our Gitter dev channel

Introduce yourself on go-spacemesh dev chat channel - ask our team any question you may have about this task
Fork branch develop to your own repo and work in your repo
You must document all methods, enums and types with godoc comments
You must write go unit tests for all types and methods when submitting a component, and integration tests if you submit a feature
When ready for code review, submit a PR from your repo back to branch develop
Attach relevant issue to PR

Why not use the same serialization for both p2p & persistency?

Why not use the same serialization both for p2p & persistency?

examples of proprietary serialisation protocols:
https://github.com/lightningnetwork/lnd/blob/master/lnwire/lnwire.go
https://github.com/lightningnetwork/lightning-rfc/blob/master/01-messaging.md

@gitcoinbot Still working!

@gitcoinbot Still working! PR should be done soon.

WIP PR: #841. Once again, DO NOT MERGE #841.


Chore/ddw 249 improve build time

NOTE: PLEASE MERGE #886 before, since this PR is based on it
This PR dramatically reduces the (successive) build time with a proper caching solution.
The first build still takes the same amount of time as before (obviously), but the cache reduces it down to a few seconds for re-builds. However the cache is destroyed and rebuilt (automatically) if anything in the setup changes (e.g: package.json).
This improves the dev experience greatly, as you don't have to wait 40 seconds for each start of the app or running the tests if all you changed is a few lines of code.
Todo:

[x] Test the build on all platforms (caching is disabled for builds)
[x] Double check if there are any issues with the caching during development / testing.

Screenshots:
The build speed improvements in one pic:

Review Checklist:
Basics

[ ] PR is updated to the most recent version of target branch (and there are no conflicts)
[ ] PR has good description that summarizes all changes and shows some screenshots or animated GIFs of important UI changes
[ ] CHANGELOG entry has been added and is linked to the correct PR on GitHub
[ ] Automated tests: All acceptance tests are passing (npm run test)
[ ] Manual tests (minimum tests should cover newly added feature/fix): App works correctly in development build (npm run dev)
[ ] Manual tests (minimum tests should cover newly added feature/fix): App works correctly in production build (npm run package / CI builds)
[ ] There are no flow errors or warnings (npm run flow-test)
[ ] There are no lint errors or warnings (npm run lint)
[ ] Text changes are proofread and approved (Jane Wild)
[ ] There are no missing translations (running npm run manage-translations produces no changes)
[ ] UI changes look good in all themes (Alexander Rukin)
[ ] Storybook works and no stories are broken (npm run storybook)
[ ] In case of npm dependency changes both package-lock.json and yarn.lock files are updated

Code Quality

[ ] Important parts of the code are properly documented and commented
[ ] Code is properly typed with flow
[ ] React components are split-up enough to avoid unnecessary re-rendering
[ ] Any code that only works in Electron is neatly separated from components

Testing

[ ] New feature / change is covered by acceptance tests
[ ] All existing acceptance tests are still up-to-date
[ ] New feature / change is covered by Daedalus Testing scenario
[ ] All existing Daedalus Testing scenarios are still up-to-date

After Review:

[ ] Merge PR
[ ] Delete source branch
[ ] Move ticket to done on the Youtrack board

@nikolaglumac this is ready for review again!
As this greatly improves developer experience and happiness, i would suggest to review and merge sooner than later 😉

@nikolaglumac this PR doesn't change anything related to the translations

Are you sure @DominikGuzei? I used your branch - made a couple of changes and then ran npm run manage-translations and all of the used keys were deleted :(

You can (and should have) see the code changes 😆 nothing at all is related to the translations

@DominikGuzei this is what I am seeing:

delete daedalus/translations/messages/ folder contents
run npm run dev
this should result in source/ folder being added in daedalus/translations/messages/
If I do this on develop branch it works fine but if I do it on your branch nothing get's created :(
I know what is the part that caused this problem and I will direct you to it.

@DominikGuzei this one is ready to be merged as soon as the CI is done. Great work! 🎉


locale file should be a subset of "rails/locales/en.yml"

Hi I am translating device messages to my native language but CI is failing at this point.
rspec ./spec/locale_files_spec.rb[44:2] # a devise-i18n rails/locales/ur.yml locale file should be a subset of "rails/locales/en.yml"

I assume you figured this out.


Get actual file from response not DocumentFile

Hello, how can I get the actual file from response (onFileSelected) ? I need the File type not the DocumentFile. Thanks in advance.

I make it to work by adding:
val fileLocation = file.getAbsolutePath(this)
val file: File = File(fileLocation)

It can be shorter:
val file: File? = documentFile.toRawFile(context)


Question?  WebTorrent player.

Please tell me if it is possible, when clicking on the WebTorrent link in the online player, to add a microphone button so that you can turn it on and off from the player.  Thank you.

It is possible if someone develops it. I don't plan to spend any time on it yet

Thank you


🐞 [Bug]: Revert Descending sort in Node Finder

Is there an existing issue for this?

[X] I have searched the existing issues

which package/s did you face the problem with?
Dashboard
What happened?
Up nodes should be shown first in Node Finder. Hence, sort by "asc".
Steps To Reproduce

which network/s did you face the problem on?
Dev
version
3c8f13a
Twin ID/s
No response
Node ID/s
No response
Farm ID/s
No response
Contract ID/s
No response
Relevant screenshots/screen records

Relevant log output
-

Work completed:
Changed sort order to asc.

the changes to adjust the node sorting will be done in #2354


[DOCFIX] Update Posix API doc

Update POSIX API documentation. Mostly minor stuff.

@LuQQiu PTAL. Thanks!

alluxio-bot, merge this please

@Xenorith Please cherrypick this pr

alluxio-bot, cherry-pick this to branch-2.7 please


Bad ram usage with scenebuilder

Hi,
I created a simple Pane with a JFXProgressBar as child in it. When i added JFXProgressBar, my ram usage suddenly started to increase rapidly.

So in 1 minute it takes approximately 5 GB ram :), As soon as i remove JFXProgressBar my ram usage stopped and in the next GC call it dropped to 4 GB.

I forgot to mention my SceneBuilder version, I'm using Gluon SceneBuilder v8.1.1

I tried what you described and was not able to reproduce it:

You can see that the heap size does not grow over time for me. Also, it does not even come close to the amount of growth you are describing (5 GB in 1 minute).
The green horizontal line is to demonstrate that the heap does not accumulate ("leaks") memory over time.
That's why I kindly ask you to reproduce the issue on your end.
Getting the latest JFoenix build
Maybe the version of JFoenix you still have is outdated or the one offered for download still contains the issue.

Do you have the bleeding edge version of JFoenix? Clone the repo, run ./gradlew jfoenix:jar and pick the jfoenix-0.0.0-SNAPSHOT.jar from subprojects/jfoenix/build/libs/ to import it to SceneBuilder.

To replace already imported jars in SceneBuilder, reveal imported jars in the file explorer:

Close SceneBuilder
Delete the existing JFoenix jar
Move the new freshly built jar there

After that, see if you can still reproduce the memory growth.
Collecting heap snapshots
If you are still experiencing the growth, do this:

Open SceneBuilder, but do not add the JFXProgressBar to the document yet.
Open JVisualVM (it's a binary located where java, javac, javaw, etc... are)
On the left hand side, select the JVM SceneBuilder is running on. It will probably not be possible to tell right away, so just open them one by one and see if the opened tab on the right mentions something related to SceneBuilder.
Now that you are connected to the SceneBuilder JVM, add the JFXProgressBar to the document. Now, wait a moment until you feel like enough memory has been allocated.
Take a heap dump. The button for doing so is located on the Monitor tab.

A new tab full of information will open. Ignore it for now.
Close SceneBuilder for now.
On the left hand side, right-click the just collected heap dump and select Save As....

Save the resulting file somewhere.
Upload the file somewhere. Some tips:

The heap dump is uncompressed. I highly recommend zipping it. (for me, I was able to reduce a 50 MB heap dump down to 9 MB)
GitHub itself is capable of attaching files up to 10 MB. See the grey bar below the post editor.
Just a tip regarding file hosters: pantsu.cat if the zipped file is below 128 MB and something like ge.tt (you need to register) for things below 2 GB.

Post the download link in this thread, I will then be able to see what causes the high memory usage (hopefully).

First of all thank you for your guideline :)
I tried to test that in my mac book but i can't reproduce it and there is no extra memory usage But on my PC which runs on Fedora23 i can reproduce it every time. (actually 16 GB ram getting full after 5 or 6 minutes )
In both, i use same SceneBuilder version & latest version of JFoenix .
So here is memory usage of SceneBuilder in my fedora after 1 minute

And my heap dump too

heapdump-1457373573126.hprof.zip

Oh wow, I did not expect that. It looks like something is allocating insane amounts of memory outside of the Heap (in native memory) which suggests there is a bug in JavaFX. The memory usage in the graph you have shown is perfectly normal (like expected) but something is rapidly growing outside of the heap (which is where all object allocated inside of java live), which suggests that native JavaFX code is leaking it. The amount of objects allocated inside of Java's heap is 25 MB only.
Now I'm out of direct knowledge and I can only offer things that may or may not help. I'm just guessing what could be the problem.

Have you validated that you have the latest version of Java (preferably the one shipped by Oracle)

Try to launch SceneBuilder with software rendering only:
java -Dprism.order=sw -Dprism.verbose=true -jar "SceneBuilder-8.1.1.jar" 2>&1 | tee scenebuilder.log

Get the executable jar (if you are not already using it) from here.
You might need to re-import the JFoenix jar.
There is no need to make any more heap dumps, since they do not capture the problem. Just report back whether the issue still occurs and attach the scenebuilder.log (maybe verbose prism output yields something useful).

Oh great my problem was solved with your second way, Thank you.
But can you explain what  -Dprism.order=sw -Dprism.verbose=true means ?

Here is log message
Prism pipeline init order: sw
Using java-based Pisces rasterizer
Using dirty region optimizations
Not using texture mask for primitives
Not forcing power of 2 sizes for textures
Using hardware CLAMP_TO_ZERO mode
Opting in for HiDPI pixel scaling
*** Fallback to Prism SW pipeline
Prism pipeline name = com.sun.prism.sw.SWPipeline
(X) Got class = class com.sun.prism.sw.SWPipeline
Initialized prism pipeline: com.sun.prism.sw.SWPipeline
 vsync: true vpipe: false
Mar 07, 2016 10:04:05 PM com.oracle.javafx.scenebuilder.kit.library.user.LibraryFolderWatcher exploreAndUpdateLibrary
INFO: Start exploring JAR /home/saeed/.scenebuilder/Library/jfoenix.jar
Mar 07, 2016 10:04:06 PM com.oracle.javafx.scenebuilder.app.SceneBuilderApp logTimestamp
INFO: JavaFX Scene Builder started

And ram usage

Basically, -Dprism.order=sw disables hardware acceleration (which runs in native code, that's why I suspected) and renders everything using Java code instead.
-Dprism.verbose=true enables verbose logging output by the JavaFX renderer. You can leave that out in the future, I figured it might help in case your problem was not solved by enforcing software rendering.
You should probably file Java bug report regarding this issue or search for JavaFX issues regarding Fedora on the internet. This issue is not directly caused by a fault in JFoenix and has to be fixed from the JavaFX side.

Thank you,
Another weird thing, i have two graphic cards on my fedora (nvidia & intel). By default whole system runs on Intel, so i decided to switch to nVidia and run SceneBuilder with that. Then i saw there is no memory issue anymore

I'm having massive memory usages with this as well. Where am I suppose to enter that code ? is that in the properties of the scenebuilder exe ?


[Upload Build]Revise harbor build version

Coverage decreased (-0.06%) to 60.66% when pulling 3f63f7034f18ad8b7a8f7c6501aacec28956cecd on wy65701436:refine-build-num into 80e39c39d3e36847af8aeabe2d98402b02de69d9 on vmware:master.


URL default ports

Fabruic shouldn't support any default ports, even for https and the like. This is currently limited through the URL parser.
See https://github.com/servo/rust-url/issues/706.

Fixed by https://github.com/servo/rust-url/pull/707.


Font elements in the command line

Whenever I run terminus commands I see font elements with styles appear in the command line.
For example:
Creating new Drupal 8 Beta installation ...
<font style='color:rgb(201, 11, 11)'>
Notice: Undefined property: stdClass::$site_name in phar:///usr/local/bin/terminus/php/commands/sites.php on line 108
</font>New "site"  now building with "UUID" ...

This issue was caused by the old logger. Once #477 is merged, it will be fixed.


Setup difficulties

Hello @lukasroegner,
i have difficulties setting this one up.
My setup looks like that:
{
            "platform": "NukiPlatform",
            "hostNameOrIpAddress": "***",
            "bridgeApiPort": 8080,
            "bridgeIpAddress": "***",
            "bridgeApiToken": "***",
            "bridgeRebootSwitch": false,
            "devices": [
                {}
            ]
        }

should this work as an initial Setup?
After restarting Homebridge i get the following Errors:
[NukiPlatform] Error while communicating with the Nuki Bridge. Error: Error: connect ETIMEDOUT <IPAdress of NukiBridge>:8080
Any ideas? If i do a manual ping from the rpi everything is working correctly no package lost.
If i understood correct, after a restart this plugin should print out all devices in the logs?
When i first tried there was a callback registered at nuki bridge,  i removed it, since then there gets no new no callback registered at nuki bridge. I tried it by ip and hostname.

"hostNameOrIpAddress" should be the IP of the device you're running this plugin on, e.g. I'm using a Raspberry Pi, so I use my Pis IP.

"hostCallbackApiPort" is missing.

I added "hostCallbackApiPort" nothing changed.
After restarting homebridge this came across my homebridge logs:[15/12/2020, 19:51:43] [NukiPlatform] Initializing NukiPlatform platform... [15/12/2020, 19:51:43] [NukiPlatform] Homebridge API available. [15/12/2020, 19:51:43] [NukiPlatform] Cached accessories loaded. Server listening on: http://<ip>:8282 [15/12/2020, 19:56:24] [NukiPlatform] Error while communicating with the Nuki Bridge. Error: Error: connect ETIMEDOUT ***
On line 4 where it says "Server listening on: http://:8282" this is what gets printed in the console, the "" part looks not right to me.
At nuki bridge no callback gets registered.

Is any other device using the API port 8080?
Can you reach all your devices?
Have you installed the latest firmware?
Are all the values correct?

@samydoesit, I'm sure you have either solved it or given up already. But if there might be others in future also struggling, so here is how I solved the same issue.
Make sure that, once you define an API key for the Bridge in the Nuki app, you don't forget to select "Save" and exit the Bridge in order for it to restart.  Also double-checking that the API key is correct helps :)
Anyway, not such a technical solution but in my case this stupid error could have same me a lot of time.


configuration issue

Hi, reading the docs it says that i need to set
CELERY_RESULT_BACKEND = "redis://:password@host:port/db"
Problem is with this setting i get an error that says
Import by filename is not supported.
i got a url from a heroku service called redistogo that looks like
redis://redistogo:RANDOMPASSWORD@somedomain.com:8393/
I'm trying to setup redis as my broker and backend, as i said this configuration
BROKER_URL = 'redis://redistogo:RANDOMPASSWORD@somedomain.com:8393/'
CELERY_RESULT_BACKEND = redis://redistogo:RANDOMPASSWORD@somedomain.com:8393/
Doesnt work, i tried different combinations of configurations including separating each
CELERY_REDIS_PORT = 8393
CELERY_REDIS_PASSWORD = 'RANDOMPASSWORD'
CELERY_REDIS_HOST = somedomain.com
without much success.
I would be happy with a working set of settings.
I'm confused by the different settings published on the celery readthedocs and the github
readthedocs.org/docs/celery-docs/
celery.github.com/celery/configuration.html
They are not conflicting, but they say different things about getting redis to work with celery as a backend and as a broker.
Any help appreciated.

hi ,
i search in addons in heroku for redistogo but nit find any match
can you please specify how we add this in heroku app


Add support for using an OCI image as source

This change defines an OCIRepository CRD that allows a user to specify a given image to use as a source.  The contents of the image (including images with multiple layers) are converted into a TAR and exposed to
consumers following the same conventions as the other source types.
apiVersion: source.toolkit.fluxcd.io/v1beta1
kind: OCIRepository
metadata:
  name: podinfo-deploy
  namespace: flux-system
spec:
  interval: 10m
  url: ghcr.io/stefanprodan/podinfo-deploy
  ref:
    # one of
    tag: "latest"
    digest: "sha256:45b23dee08af5e43a7fea6c4cf9c25ccf269ee113168c19722f87876677c5cb2"
    semver: "1.x"
  auth:
    # one of
    secretRef:
      name: regcred
    serviceAccountName: reg

In addition to the url, interval, timeout, ignore, and suspend keys (all of which behave consistently with the existing source types) this CRD also defines authentication via both an image pull Secret and a service serviceAccountName which provide ways to contribute registry connection credentials for the specified image.
This change also adds a new way to write to the storage archive by streaming data from an incoming TAR without writing it to the filesystem.  A couple of code and test functions were extracted to reuse common functionality for both archive strategies.

Formerly:
This change defines an OCIImage CRD that allows a user to specify a given image to use as source.  The contents of the image (including images with multiple layers) are converted into a TAR and exposed to consumers following the same conventions as the other source types.
apiVersion: source.toolkit.fluxcd.io/v1beta1
kind: OCIImage
metadata:
  name: ociimage-sample
spec:
  image:    index.docker.io/stefanprodan/podinfo:latest
  interval: 1m

In addition to the image, interval, timeout, ignore, and suspend keys (all of which behave consistently with the existing source types) this CRD also defines both imagePullSecrets and serviceAccountName keys which provide ways to contribute registry connection credentials for the specified image.
This change also adds a new way to write to the storage archive by streaming data from an incoming TAR without writing it to the filesystem.  A couple of code and test functions were extracted to reuse common functionality for both archive strategies.

Note: The controller does not yet have any tests although I do plan to contribute them.  I took a look at the gitrepository_controller_test.go. noticed that it made reference to a package in another repo and decided to ask for your advice on testing, first.  Should I make a coordinated separate contribution there, add an internal package here, or something else?

Thank you very much for this initial contribution @nebhale. We are at present in the process of bringing some standardization to the set of controllers, including better tests, and you may want to have a look at the reconcilers-dev branch to see how you can best structure the tests. Cheers!

Hi @nebhale could please take a look at my proposal for the API here: https://github.com/fluxcd/flux2/discussions/1705#discussioncomment-1153761
Here is an example of how I see the API:
apiVersion: source.toolkit.fluxcd.io/v1beta1
kind: OCIRepository
metadata:
  name: podinfo-release-candidates
  namespace: flux-system
spec:
  interval: 10m
  image: ghcr.io/stefanprodan/podinfo-deploy
  secretRef:
    name: regcred
  filterTags:
    pattern: '.*-rc.*'
  policy:
    semver:
      range: '^1.x-0'

@squaremo I'd love to start engaging on the idea of source extensibility.

Aces! @hiddeco Do you have a preferred venue? I think it's worth aiming at producing a design document, ultimately.

I don't think that we currently have the issue that this is trying to address because we treat the the resource as a duck-type (we call it "Latest Source" but now that I've been in the Flux code, "Artifact" is the accurate name).  When it comes time to consume any of the resource types currently exposed by the controller (or the ones that we've written directly), we don't actually deserialize into their concrete Go structs, but rather do a partial deserialization of the resource into our "Duck struct".  The pattern is analogous to Go's consumer-side interfaces.
For our usage, we prefer both creation of the resource and the return of Artifact in the status of that same resource because we consider them intrinsically linked.  Our use-cases don't really gain an advantage by using the "producer resources" as a point of decoupling and if Flux changed to the proposed design, we'd end up using cluster-unique label values to (sub-optimally) replicate the ObjectReference-ability that we currently have today.

I don't think that we currently have the issue that this is trying to address

@nebhale There are two related issues (but you can have one without the other):

the kinds that are allowed in a source reference are hard-coded, meaning you cannot add a new kind of source and expect e.g., a Kustomization resource to be able to refer to it;
the consumer controllers must watch all the known source types to see when something changes, so if you add a new one, the controller won't see it.

You can avoid the first in your own consumer controller because you're in charge of the custom type and you can just use a reference without a constraint on the kind. I don't know how you avoid the second problem.

@squaremo A good example of this is in our implementation of the Service Binding for Kubernetes specification.  In that, there is a ServiceBinding resource type that uses a LocalObjectReference to refer to a resource of any kind.  The only requirement for that resource is that it have a .status.binding.name that points to a Secret (the Provisioned Service duck type).  At no point does the Service Binding controller know anything about the concrete GVK of the workload specified in the type, including as it watches for changes to the resource.  Any user can create any resource and we can work against it without foreknowledge of the type.
I believe (and to be clear I've not looked deeply into this) this same effect can be achieved for the two points that you've raised.  In both cases, the controllers that consume a "Latest Artifact" conformant resource needn't know about any resource type whatsoever.  Instead, they just use a LocalObjectReference to get/watch a resource and when the JSON payload comes in, instead of deserializing into the concrete types (what you've needed to hardcode so far) they deserialize into a (forgive the freehand Go)
struct LatestArtifact {
    Status struct{
        Artifact Artifact `json:"artifact"`
    } `json:"status"`
}

Since this is the contract of the thing you're trying to consume, you can safely ignore every other part of the resource payload and never know about any of it.

If users can install Flux source-extensions with their own unique GVK's that implement a Duck Type:

the consumer-controllers' watches can be built with a label selector on CRD's OR added just-in-time when there are sourceRef's that request a particular GVK.
the consumer-controllers' ServiceAccount RBAC can be extended using ClusterRole Aggregation: https://kubernetes.io/docs/reference/access-authn-authz/rbac/#aggregated-clusterroles

Important to think about whether source-extensions will use their own apiGroup, because that does add another string for a user to specify that has to lookup/ensure-is-correct which can affect usability.
CrossNamespaceSourceReference already includes an optional apiGroup field, but nobody currently needs to use that in-practice, and I'm actually not sure what the behavioral consequence of setting it currently is:
https://fluxcd.io/docs/components/kustomize/api/#kustomize.toolkit.fluxcd.io/v1beta2.CrossNamespaceSourceReference

Revisiting my initial comments:

I would rather see this as a self-contained controller.

I would like to see the source protocol opened up to extension, but it doesn't have to hold this PR hostage. I do buy the argument made by Leigh that if you support buckets as a "core" type, you should probably support OCI artifacts.
Let's move the architectural discussion to another venue -- in fact, I would like to see a more formal (RFC?) process for big design changes, Leigh's design for using impersonation, and opening up the source protocol, are both good candidates for RFCs.

My other concern is that the API here ignores the existing API for specifying image

I have reconciled myself to that ship having sailed for the v1 API 😭 Changing this is going to be a longer process, and certainly making the APIs consistent will have to wait for a v2(alpha1). Of course, once the source protocol is opened up, there's nothing stopping a third party from making their own controllers and APIs.
In sum: I'm persuaded that getting this new kind of source into users' hands takes priority over redesigning APIs.
Re the (second) schema suggestion from Stefan: this looks right to me.
Putting your configs in OCI artifacts is going to be different to using git (because you'll probably have to use some CI to build them, for one thing). Nonetheless, following a tag (yuck, but people do it), or using a specific digest, or following a semver range is a decent set of alternatives to start with. I suspect people will think of config artifacts in much the same way as they think of container images, so I'd expect users to ask for the same flexibility with filtering and ordering that ImagePolicy has. But you have to start somewhere.
I don't think it's necessary to implement verification (or to have it in the API) before making the new kind of source available to people, if that's going to hold things up. The arguments for deferring filters, not reworking the API, etc. etc., can also be directed at verification. (Ultimately, the release schedule is a matter for the source-controller maintainers, though.)

I have prepare a repo for e2e tests and demos at ghcr.io/stefanprodan/podinfo-deploy with latest, 6.0.1 and 6.0.0 tags. After a podinfo release, an immutable tag is created for semver, then the latest moves to that tag.
The image contains the following manifests (which are taken from here):
$ crane export ghcr.io/stefanprodan/podinfo-deploy:latest -| tar -tvf -
-rw-r--r--  0 0      0        1713 Oct 21 11:44 deployment.yaml
-rw-r--r--  0 0      0         419 Oct 21 11:44 hpa.yaml
-rw-r--r--  0 0      0         126 Oct 21 11:44 kustomization.yaml
-rw-r--r--  0 0      0         271 Oct 21 11:44 service.yaml

Using the above image we could swap the podinfo GitRepository with an OCIRepository like so:
apiVersion: source.toolkit.fluxcd.io/v1beta1
kind: OCIRepository
metadata:
  name: podinfo-deploy
  namespace: flux-system
spec:
  interval: 10m
  url: ghcr.io/stefanprodan/podinfo-deploy
  ref:
    tag: "latest"
---
apiVersion: kustomize.toolkit.fluxcd.io/v1beta2
kind: Kustomization
metadata:
  name: podinfo
  namespace: flux-system
spec:
  interval: 5m0s
  path: "./"
  prune: true
  sourceRef:
    kind: GitRepository
    name: podinfo
  targetNamespace: default

Currently I'm using crane to build the OCI atifact but ideally this will be incorporated into flux CLI e.g.
flux bundle -f ./kustomize -t ghcr.io/stefanprodan/podinfo-deploy:6.0.1

Superseded by https://github.com/fluxcd/source-controller/pull/788


Adjust config

Codecov Report
All modified and coverable lines are covered by tests :white_check_mark:

Comparison is base (ccd4668) 31.04% compared to head (3db3e59) 31.04%.

Additional details and impacted files
@@           Coverage Diff           @@
##             main     #796   +/-   ##
=======================================
  Coverage   31.04%   31.04%
=======================================
  Files          41       41
  Lines        5370     5370
=======================================
  Hits         1667     1667
  Misses       3524     3524
  Partials      179      179

:umbrella: View full report in Codecov by Sentry.
:loudspeaker: Have feedback on the report? Share it here.

repo cleanup: no longer needed


Unable to call LithnetRMA from MA executor -  System.TypeInitializationException: The type initializer for 'Lithnet.ResourceManagement.Client.ResourceManagementClient' threw an exception

When I invoke Lithnet Resource Management PS from MA executor, it would fail on
Set-ResourceManagementClient -BaseAddress "http://localhost:5725";
there is error in the application eventlog about System.TypeInitializationException: The type initializer for 'Lithnet.ResourceManagement.Client.ResourceManagementClient' threw an exception.
Seems it is not able to access the configure file when executed from the MA executor.
The code I executed as follow:
function ExecutionComplete
{
	param([Lithnet.Miiserver.Client.RunDetails]$lastRunDetails)

	# If the run was an import an a change was made, create the MACD report
	foreach ($step in $lastRunDetails.StepDetails)
	{
		if ($step.StepDefinition.Type -eq 'FullImport'){
			Set-ResourceManagementClient -BaseAddress "http://localhost:5725";

			$terminatedPortalUsers = Search-Resources -Xpath "/Person[(EmployeeEndDate > op:subtract-dayTimeDuration-from-dateTime(fn:current-dateTime(), xs:dayTimeDuration('P1D'))) and (EmployeeEndDate < fn:current-dateTime())]" -AttributesToGet @("AccountName","EmployeeEndDate","EmployeeID")

			$terminatedPortalUsers | Export-Csv "C:\temp\test1.txt" -notype

			$psons = Get-MVObject -ObjectType person
			$psons | Export-Csv "C:\temp\test2.txt" -notype
		}
	}
}

The error in the eventlog as below:

Ascender SQL MA: ExecutionComplete handler threw an exception
System.ApplicationException: The PowerShell script encountered an error
at ExecutionComplete, : line 20
System.TypeInitializationException: The type initializer for 'Lithnet.ResourceManagement.Client.ResourceManagementClient' threw an exception. ---> System.InvalidCastException: [A]Lithnet.ResourceManagement.Client.ClientConfigurationSection cannot be cast to [B]Lithnet.ResourceManagement.Client.ClientConfigurationSection. Type A originates from 'Lithnet.ResourceManagement.Client, Version=1.0.6297.14599, Culture=neutral, PublicKeyToken=bd0636700c1e2538' in the context 'LoadNeither' in a byte array. Type B originates from 'Lithnet.ResourceManagement.Client, Version=1.0.6435.24336, Culture=neutral, PublicKeyToken=bd0636700c1e2538' in the context 'LoadFrom' at location 'C:\Windows\system32\WindowsPowerShell\v1.0\Modules\LithnetRMA\Lithnet.ResourceManagement.Client.dll'.
at Lithnet.ResourceManagement.Client.ClientConfigurationSection.GetConfiguration()
at Lithnet.ResourceManagement.Client.ResourceManagementClient..cctor()

what is the proper way to execute Lithnet Resource Management PS from MA executor from the Executor MA?
I have tried to wrap around the call inside a script block, it works but the Get-MVObject would fail, it would return

The Synchronization Service Manager service has stopped.

when the Synchronization Service Manager service is actually running.

@johnyukloud this is definitely a bug, but a complex one to solve. I'll look to resolve this in v2. In the mean time, the workaround would be to launch a new instance of PowerShell to run the fim service query such as shown in this example https://stackoverflow.com/questions/23237473/powershell-launch-script-in-new-instance
You seem to be referencing another issue with Get-MVObject. That is from a different PowerShell module. Can you provide more information about the context of the issue you are having there?

@johnyukloud I'm working on the fix for this, but I've got a cleaner workaround you can use in the mean time. Edit the Lithnet.Miiserver.AutoSync.exe.config file and remove the following two lines
<section name="lithnetResourceManagementClient" type="Lithnet.ResourceManagement.Client.ClientConfigurationSection, Lithnet.ResourceManagement.Client"/>

and
<lithnetResourceManagementClient resourceManagementServiceBaseAddress="http://localhost:5725"/>

This will prevent the error you are seeing. These lines are not needed for AutoSync or the PowerShell module to work.

@johnyukloud i'm marking this issue as done. You can apply the workaround above, or install the latest version of LithnetRMA from https://github.com/lithnet/resourcemanagement-powershell/releases/tag/v1.0.6623
If you are still having issues with Get-MVObject, please open a new issue, and we work on that one separately, as it is unrelated to what is going on here.

Great! Thanks Ryan


Updated FIPS 26

Looks good to me, but I'll leave to @pawmmm to review to ensure his changes made it in.


[gltf2] Importing an armature with no mesh attached does not work

Godot version
3.3.4.stable, 3.4.2.stable
System information
Linux Nvidia GLES2/3
Issue description
Importing an armature exported from blender as a GLTF file won't work unless you have a mesh bound to the armature.
See this reddit thread also: https://www.reddit.com/r/godot/comments/p0xxjp/importing_glb_gltf_20_from_blender/hb6ab42/?utm_source=reddit&utm_medium=web2x&context=3
Steps to reproduce
Download an animation (e.g. .dae file from mixamo with no mesh)
Import to blender.
Export as GLTF
All you get is a bunch of spatials. (no errors in the output)

Minimal reproduction project
gltf-armature-no-mesh.zip

@lyuma and I made a special case hack where store all the nodes in the mesh skin. not sure how general purpose the hack is.

@fire's hack is to create an unused "skins" object in the glTF document with all nodes as elements. It's not too hard to do even by hand, but we should make it so you don't need a hack to force nodes to be imported as skeletons.
Such a feature would be really useful for cases like importing an animation downloaded from Mixamo which has no mesh attached.
I'm thinking either a global checkbox to make the whole scene into a skeleton (except the root node); or else a per-node checkbox in the advanced import settings, next to Skip Import, of course inviting questions about what if you want specific leaf nodes to become Bone Attachments instead of bones.
I'd also say that there is a related problem here which Blender conceals. On Blender, if you have at least one Mesh in the skeleton, Blender will add all nodes in the skeleton into the skin object, effectively causing @fire's hack.
However, for users of Maya or other software, it only includes bones which are weight-painted into the skin, which can cause Godot to fail to select all nodes to add to the skeleton... having an import setting to override node/bone conversion may help users of other modeling programs.
Since the current behavior is technically "by design" due to lack of a bone forcing feature, should this be migrated to godot-proposals?
Or maybe we can start with a global checkbox to force the entire model into a single skeleton? That would solve the most common cases perhaps.

Fyi Mixamo .dae imports work fine even if you check 'no skin'.
If this is something that can't be fixed due to the gltf export not containing enough info I feel like it's a documentation issue then? I mostly wanted to have an issue logged in this tracker since that improves visibility of the issue and workarounds.

Happened to me as well, I thought this was expected behaviour.

Fixed in 4.0 via https://github.com/godotengine/godot/pull/60177 but it'll still be a node animation.
Fixed in the gltf blender io exporter via exporting only selected objects https://github.com/KhronosGroup/glTF-Blender-IO/issues/822.

We probably still need to note that importing animations without a mesh become node animations.


change inheritance order for StandardToken and PausableToken

Fixes #278
I've looked at all other contracts, they seem fine to me.

LGTM


Change install location for windows and test files

@jakirkham

Hi! This is the friendly automated conda-forge-linting service.
I just wanted to let you know that I linted all conda-recipes in your PR (recipe) and found it was in an excellent condition.

cc @msarahan

Thanks for doing this @isuruf.

Looks like we still need to copy the headers.

Fixed

ping

Waiting for @msarahan to confirm this is correct.

This is fine, but I think you only have static libraries here.  Is that intentional?  Is there a way to build shared libraries on Windows?  The shared library will have both a .lib and a .dll file associated with it.
Both "import libraries" and static libraries have .lib file extensions on Windows.  I believe you only have the latter here.  Generally, I try to make the shared library have the standard name, and then rename any static library with a _static suffix, like
libname_static.lib

Agreed. What do we need to do to get dynamic libraries here, @isuruf?

working on it

OK.  This should be easy, so ask if you end up confused or struggling much.

Following 4 files are built, mpir.dll, mpir.exp, mpir.lib and mpir.pdb. Where should they go to? %LIBRARY_LIB% ?

lib goes in %LIBRARY_LIB% - but rename your static lib so that it does not conflict.
dll and pdb go in %LIBRARY_BIN%
exp doesn't matter.  Omit it.

DLL libraries are now built

Thanks for getting this straightened out, @isuruf. Also, thanks for helping review @msarahan.


Improved styling and functionality of application cards display

Description
Improved styling and functionality of application cards display
Changes

Introduced a new component called 'ApplicationCards' to manage the display of application cards.
Implemented dynamic card height adjustment based on the tallest card to ensure consistent appearance.
Added functionality to detect the current viewport size (mobile or desktop) and adjust card heights accordingly for better responsiveness and user experience.

Related Issues

https://github.com/threefoldtech/tfgrid-sdk-ts/issues/2907

Screenshots/Video

Checklist

[ ] Tests included
[x] Build pass
[ ] Documentation
[x] Code format and docstrings
[x] Screenshots/Video attached (needed for UI changes)

@Mahmoud-Emad please fix merge conflicts

@Mahmoud-Emad please fix merge conflicts

Done, fixed


Update README.md

I believe that this change will help fix our society for the better, and introduce more equity in open source. Each line of code should have equal rights, so I think this pull request should be accepted immediately.
Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. Ut enim ad minim veniam, quis nostrud exercitation ullamco laboris nisi ut aliquip ex ea commodo consequat. Duis aute irure dolor in reprehenderit in voluptate velit esse cillum dolore eu fugiat nulla pariatur. Excepteur sint occaecat cupidatat non proident, sunt in culpa qui officia deserunt mollit anim id est laborum.

What does it want to be?

What if our README wants to not be README, but readme?

LGTM!

And so, I believe that we have done quite a lot of work to protect the rights of this line of the source code of our project, and we will continue to satisfy its needs.
I think this pull request is a great example of friendship and... Я заебался писать...
LGTM!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

Yay! Thanks for your PR! @anixne

Go kill yourself

The line that changed the way our project lives.


Fix usage example

Hi @alexsteinerde
thanks for this library, I found a small issue in the usage example when trying this.

Thanks for fixing the example.


local variable 'rs' referenced before assignment error

Hope you can help with  the following error (thanks):
(with any financial data source, after I upgraded to v0.16 because yahoo finance was not working 0.14)
$goog=web.DataReader('GOOG', data_source='google', start='3/14/2009', end = '4/14/2014')
anaconda/lib/python2.7/site-packages/pandas/io/data.pyc in _retry_read_url(url, retry_count, pause, name)
175     #Get rid of unicode characters in index name.
176     try:
--> 177         rs.index.name = rs.index.name.decode('unicode_escape').encode('ascii', 'ignore')
178     except AttributeError:
179         #Python 3 string has no decode method.
UnboundLocalError: local variable 'rs' referenced before assignment
In [33]: pd.version
Out[33]: '0.16.0'

This is fixed in pandas-datareader: https://github.com/pydata/pandas-datareader. It should be good in version 0.1.1

After installing pandas_datareader it with pip:
In [1]: import pandas_datareader.data as web
In [2]: import datetime
In [3]: start = datetime.datetime(2010, 1, 1)
In [4]: end = datetime.datetime(2013, 1, 27)
In [5]: f = web.DataReader("F", 'yahoo', start, end)
183
184     raise IOError("after %d tries, %s did not "
--> 185                   "return a 200 for url %r" % (retry_count, name, url))
186
187
IOError: after 3 tries, Yahoo! did not return a 200 for url 'http://ichart.finance.yahoo.com/table.csv?s=F&a=0&b=1&c=2010&d=0&e=27&f=2013&g=d&ignore=.csv'
do I missing something?
Thanks!

This looks like a problem outside of pandas (are you behind a proxy / firewall?). Try this directly:
import urllib2
urllib2.urlopen('http://ichart.finance.yahoo.com/table.csv?s=F&a=0&b=1&c=2010&d=0&e=27&f=201=d&ignore=.csv')

If that doesn't work, then the problem is just that your machine can't connect to yahoo.

I don't have a proxy/firewall that I am aware of, I can download the file directly... and also I tried with another network and I Have the same following 404 error:
In [8]: urllib2.urlopen('http://ichart.finance.yahoo.com/table.csv?s=F&a=0&b=1&c=2010&d=0&e=27&f=201=d&ignore=.csv')
HTTPError                                 Traceback (most recent call last)
 in ()
----> 1 urllib2.urlopen('http://ichart.finance.yahoo.com/table.csv?s=F&a=0&b=1&c=2010&d=0&e=27&f=201=d&ignore=.csv')
/home/german/anaconda/lib/python2.7/urllib2.pyc in urlopen(url, data, timeout, cafile, capath, cadefault, context)
152     else:
153         opener = _opener
--> 154     return opener.open(url, data, timeout)
155
156 def install_opener(opener):
/home/german/anaconda/lib/python2.7/urllib2.pyc in open(self, fullurl, data, timeout)
435         for processor in self.process_response.get(protocol, []):
436             meth = getattr(processor, meth_name)
--> 437             response = meth(req, response)
438
439         return response
/home/german/anaconda/lib/python2.7/urllib2.pyc in http_response(self, request, response)
548         if not (200 <= code < 300):
549             response = self.parent.error(
--> 550                 'http', request, response, code, msg, hdrs)
551
552         return response
/home/german/anaconda/lib/python2.7/urllib2.pyc in error(self, proto, *args)
473         if http_err:
474             args = (dict, 'default', 'http_error_default') + orig_args
--> 475             return self._call_chain(*args)
476
477 # XXX probably also want an abstract factory that knows when it makes
/home/german/anaconda/lib/python2.7/urllib2.pyc in _call_chain(self, chain, kind, meth_name, *args)
407             func = getattr(handler, meth_name)
408
--> 409             result = func(*args)
410             if result is not None:
411                 return result
/home/german/anaconda/lib/python2.7/urllib2.pyc in http_error_default(self, req, fp, code, msg, hdrs)
556 class HTTPDefaultErrorHandler(BaseHandler):
557     def http_error_default(self, req, fp, code, msg, hdrs):
--> 558         raise HTTPError(req.get_full_url(), code, msg, hdrs, fp)
559
560 class HTTPRedirectHandler(BaseHandler):
HTTPError: HTTP Error 404: Not Found

fixed here https://github.com/pydata/pandas-datareader/pull/25


I dont know How to use it

brew install boost
qmake
I have install boost and qt, but I dont have 'qmake' in term ,how to use it...
Can you write it detailedly

Qt from Homebrew is broken it seems and lacks critical components.
Try Qt Offline installer for macOS, whch contains qmake

顺便maintainer都是中国人可以直接中文的哇

都先别用啊。。。我还没搞完，只是不想花钱private repo了。。。。。


Support for multiple projects.

This only works for one project. If it works for multiple project as needed that would be great.

@shaifulcce
Added your requested feature.


Add exports and fix unprotected map

added necessary exports to implement Details and Events Tabs on the Individual Cluster Page in EE
closed https://app.zenhub.com/workspaces/weave-gitops-enterprise-6127680175876a0014fc5657/issues/weaveworks/weave-gitops-enterprise/929 (when no applications/sources are coming back the map was breaking EE)

Sorry for the multiple tags guys, I wasn't sure who's best to ask for a review. I am struggling a bit with CI also and that protoc version, if I check locally I can see I've got 3.17.3 so not sure what's going wrong. Thanks!


Symbols.text_selection_start icon disappearing in release build

Hi Tim,
I hope you’re well and thank you for https://pub.dev/packages/material_symbols_icons!
We are currently trying it out for our app and everything looks fine in development, but noticed that when we use it in production it doesn’t show the icon.
Development:

Production:

Notice the first icon which uses the library has an error. Not sure what’s wrong as it’s a simple Icon(Symbols.text_selected) statement. The missing icon here look like this https://fonts.google.com/icons?selected=Material+Symbols+Outlined:text_select_start. Any ideas?
Thank you,
Rach

Hi Rach,    I have created an official issue to track this here: https://github.com/timmaffett/material_symbols_icons/issues/8
    Sorry for the delay in getting back to you, it was our independence day holiday here in the states.      Now this is a very puzzling problem that you are having - I have not seen any issue with icons disappearing from release builds.   Are all of the icons in the example you showed from the Symbols.XXXX material symbols icons library ?  (I am assuming so).   The first thing that I would try to narrow things down is try using the rounded or sharp variations.   Also in your email you mention it being Symbols.text_selected but it is the Symbols.text_select_start icon.  Was that a typo in the email ?   So perhaps try changing the symbol name to Symbols.text_selection_start_sharp and see what happens, or Symbols.text_selection_start_rounded.
Here is the link to it in the demo web flutter icon previewer app.  This link shows all three variations.
   https://timmaffett.github.io/material_symbols_icons/?query=text_select_start&iconSize=48&fontType=universal&fill=0&weight=400&grade=0&opticalSize=48
BTW, When using this preview app you can click on any icon to have its symbol name copied to the clipboard.
   Any more information you can provide would be helpful.  One possible cause for what you are seeing is that the flutter icon tree shaking is not identifying that you are using the Symbols.text_selection_start icon and then it removes it from the font during tree shaking.  I would suspect that this must be the cause but I have no idea how the flutter tree shaking is not detecting it's use..   If you could report what happens when you change to the rounded or sharp variation of that icon this would be helpful.
(My gut feeling is that they should also appear missing in the --release version, because it must be something is 'hiding' the location of this symbols use from the flutter icon tree shaker, so it shakes the icon from the font).
    What would help the most is if I could see an excerpt of the code where the icons are being used to make that toolbar.
  (You could send code excerpts to my personal email, but other than that it may be useful to care on this conversation in the issue I linked to at the start)
Thanks,   Tim

Hi Rach,    I have created an official issue to track this here: https://github.com/timmaffett/material_symbols_icons/issues/8
    Sorry for the delay in getting back to you, it was our independence day holiday here in the states.      Now this is a very puzzling problem that you are having - I have not seen any issue with icons disappearing from release builds.   Are all of the icons in the example you showed from the Symbols.XXXX material symbols icons library ?  (I am assuming so).   The first thing that I would try to narrow things down is try using the rounded or sharp variations.   Also in your email you mention it being Symbols.text_selected but it is the Symbols.text_select_start icon.  Was that a typo in the email ?   So perhaps try changing the symbol name to Symbols.text_select_start_sharp and see what happens, or Symbols.text_select_start_sharp.
Here is the link to it in the demo web flutter icon previewer app.  This link shows all three variations.

https://timmaffett.github.io/material_symbols_icons/?query=text_select_start&iconSize=48&fontType=universal&fill=0&weight=400&grade=0&opticalSize=48
BTW, When using this preview app you can click on any icon to have its symbol name copied to the clipboard.
   Any more information you can provide would be helpful.  One possible cause for what you are seeing is that the flutter icon tree shaking is not identifying that you are using the Symbols.text_select_start icon and then it removes it from the font during tree shaking.  I would suspect that this must be the cause but I have no idea how the flutter tree shaking is not detecting it's use..   If you could report what happens when you change to the rounded or sharp variation of that icon this would be helpful.
(My gut feeling is that they should also appear missing in the --release version, because it must be something is 'hiding' the location of this symbols use from the flutter icon tree shaker, so it shakes the icon from the font).
    What would help the most is if I could see an excerpt of the code where the icons are being used to make that toolbar.
  (You could send code excerpts to my personal email, but other than that it may be useful to care on this conversation in the issue I linked to at the start)
Thanks,   Tim

... and I just discovered that https://github.com/flutter/engine/pull/42598 has broken the link:
https://timmaffett.github.io/material_symbols_icons/?query=text_select_start&iconSize=48&fontType=universal&fill=0&weight=400&grade=0&opticalSize=48
from working correctly because the engine is stripping the query URL..
I will have to get this fixed.

Hi Tim,
Thanks for getting back to me and no worries, I forgot it was July 4th.
To your questions:
Yes, it was a typo, sorry. I meant to say Symbols.text_select_start. The other symbols below the broken one are from the Icons class. I'm assuming that it might be related to this problem of tree shaking you submitted a fix for a couple of months ago #125704. I've asked my team lead if we could have the next build have the --no-tree-shake-icons parameter and see if that fixes it. I'll also try and see if the other variations will result in having missing icons.
I'm following the fix engine#41592 now as well and hopefully it will be included in a minor version update soon.
Appreciate all the work you're doing, btw!

I tried it on release mode and it renders for me (Symbol.text_select_start). This was with tree shaking as well. Hmm, not sure what's going on now

Hi Rach,
I am confident that turning off tree shaking should resolve the problem,
but there will be around a 18MB increase in build size.
It is possible that #125704 / engine/#41592 is causing the problem, but
that primarily caused problems with font variation features like fill,
weight, grade and optical size.
If you are not using font variations for the icons then I would not expect
this to cause a problem.
Another possible solution is to do the tree shaking on a master branch
build and substitute the resulting material symbols icons fonts into your
stable built release build.  This allows you the space savings of the tree
shaking while still building everything in the stable branch.
Unfortunately without tree shaking the fonts are enormous, so the savings
is something around 18MB down to a few thousand bytes.
---Oh, just saw your new email.   I think perhaps the previous problem was
caused by the tree shaker not seeing that symbol use somehow, or a
corruption of the output font.  I does not surprise me that it is working
now, as that is what I would expect.
Keep me posted if the problem pops up again, always happy to help!
-tim
On Wed, Jul 5, 2023 at 10:17 AM Rach Ilagan @.***>
wrote:

Hi Tim,
Thanks for getting back to me and no worries, I forgot it was July 4th.
To your questions:
Yes, it was a typo, sorry. I meant to say Symbols.text_select_start. The
other symbols below the broken one are from the Icons class. I'm assuming
that it might be related to this problem of tree shaking you submitted a
fix for a couple of months ago #125704
https://github.com/flutter/flutter/issues/125704. I've asked my team
lead if we could have the next build have the --no-tree-shake-icons
parameter and see if that fixes it. I'll also try and see if the other
variations will result in having missing icons.
I'm following the fix engine#41592
https://github.com/flutter/engine/pull/41592 now as well and hopefully
it will be included in a minor version update soon.
Appreciate all the work you're doing, btw!
—
Reply to this email directly, view it on GitHub
https://github.com/timmaffett/material_symbols_icons/issues/8#issuecomment-1622172891,
or unsubscribe
https://github.com/notifications/unsubscribe-auth/AA3YUSJSKCGD4VR22SLKBG3XOWOULANCNFSM6AAAAAAZ7G6HZ4
.
You are receiving this because you authored the thread.Message ID:
@.***>

Hi Tim,
Thank you for the suggestion. Unfortunately, we're unable to do any substitution with our current version control setup -- we use SVN. And turning off tree shaking is out of the question with an 18MB increase for a web app. I think we'll go with manually adding the SVGs as custom fonts for now until the fix arrives.
Thank you again!

Hi Rach,
I would encourage you to try publishing the release version again and see if you can reproduce the problem with the icon disappearing.   Tree shaking should work just fine for you guys if you are not using font variation features of the material symbols icons.
Let me know.
-tim

I am closing this issue - feel free to re-open it if you see the problem again.


Registration implementation

In progress:-
Api implementation for create account . (Success and Failure not handled )
Agreement view implementation .
cc @aleffert

I believe The 3x files like edXVideoLocker/ic_cancel_3x.png should be @3x instead, like<EMAIL_ADDRESS>

There are a bunch of minor style things, but the only structural comment is to factor the error/information logic

@aleffert @jotiram
Please review.

Very close. Just a few little things.

@aleffert please review.

Still a couple minor comments. otherwise good to go


Remove duplicate property

Resolve LGTM error (see snapshot report)

Remove duplicate propertydeleting from ro language object, line 115

@stefanneculai  please review when you get a chance :)

@lisaychuang thanks for sending this PR. This should actually be fixed in the main editor JS and I just committed some code for that.


Feature to write to an existing Stream from Grasshopper, Dynamo, Rhino, etc

" afaik not an existing feature in any UI but hackable with the API
it’s not a feature currently available. But it can be coded, just have a look at how senders/receivers are re-created when opening a saved file…
it’s also been requested a lot - we’re going to support this “natively” going forward"
it’s more of a convenience component box for grasshopper/dynamo; they’ve already migrated to creating versions (child streams) on each push, so basically it’s not contradicting anything. no changes to existing api & client types needed!
@markc I've been digging an old file that @dimitrie made for a workshop to update an existing stream. Everything is decomposed into 3 steps: (1) create a SpeckleApiClient, (2) save your objects to the database, and (3) add these objects to your stream via StreamUpdateAsync. You can also generate your client via the Accounts GH component. You can probably pack things up in order to execute the definition once and not bother with every single Toggle. Attached is the GH def. Also don't forget to reference in every single C# component your SpeckleCore.dll located in AppData\Roaming\McNeel\Rhinoceros\6.0\Plug-ins\Speckle Rhino Plugin (512d9705-6f92-49ca-a606-d6d5c1ac6aa2)
Also just be aware that whatever object you push, it will be:

added to the stream if it does not exist in the stream.
left as it is in the stream if it does already exist in the stream.

Sounds quite obvious so far... However, any object that exists in the stream, and that is NOT pushed via StreamUpdateAsync, will be deleted from the stream. In other words, if you want to add new objects to the stream without deleting the existing ones, you need to push altogether the original objects as well as the new ones.

https://speckle.systems/docs/clients/rhino/basics

https://miro.com/app/board/o9J_ktBuK_4=/


Issue #1916: fix documentation example

The argument names have to be the same in the generating function and
in each of the implementations, due to the way named arguments are
currently handled.

Do we want a line like:
 * The function definitions use the same names for arguments as in the
    decorated function, this is required to ensure passing arguments by
    name works as expected.

too?

[Current coverage][cc-pull] is 87.35%

Merging [#1930][cc-pull] into [master][cc-base-branch] will not change coverage

@@             master      #1930   diff @@
==========================================
  Files           296        296
  Lines         52744      52744
  Methods           0          0
  Messages          0          0
  Branches       5441       5441
==========================================
  Hits          46076      46076
  Misses         5757       5757
  Partials        911        911

Powered by Codecov. Last updated by [34535d5...58fce0e][cc-compare]
[cc-base-branch]: https://codecov.io/gh/numba/numba/branch/master?src=pr
[cc-compare]: https://codecov.io/gh/numba/numba/compare/34535d5eee12e25c48f3b7c02a646553489a5f59...58fce0ee84c183e1042fefe261be04bf933aacd2
[cc-pull]: https://codecov.io/gh/numba/numba/pull/1930?src=pr

Thanks for the suggestion, @stuartarchibald. I've now added it.

No problem RE the suggestion.
I ran the fixed example via:
print(is_missing(5.0))
print(is_missing(np.nan))

which produced:
False
True

as expected.
Think this is good for merge.


Unneeded secret in openvpn config

opkg reports I have the following package installed: luci-app-openvpn - git-17.315.61305-a9bddc4-1
I have configured my openvpn instance and the service fails to start. This error shows up in the system log:
Mon Nov 13 22:32:23 2017 daemon.err openvpn(pia_client)[13823]: Options error: specify only one of --tls-server, --tls-client, or --secret
Upon closer inspection, I notice the following line in /var/etc/openvn-pia_client.conf
secret shared-secret.key
This line appears to be written to the file despite the fact I never intentionally add it. Removing the line and attempting to start the openvpn service works but the line is written to the file every time I attempt to start the instance from the LUCI interface.

Unable to duplicate.

Thought I couldn't reproduce but it showed up again after reconfiguring from scratch.

Happening to me as well, it adds it every time the router boots.


⚠ Bofrost.lu has degraded performance

In 0db9784, Bofrost.lu (https://www.bofrost.lu) experienced degraded performance:

HTTP code: 200
Response time: 1510 ms

Resolved: Bofrost.lu performance has improved in 7b7b939 after 13 minutes.


Postpone Invoice Creation

We would like to postpone the invoice creation. Currently, the Magento invoice is created directly after the order is created and the Wallee invoice is also sent at the same time. We would like to do this only when the order is shipped.
The Magento invoice seems to be created in \Wallee\Payment\Observer\SubmitQuote::execute. This is also where the transaction is confirmed. I guess this is also the place, where Wallee sends the invoice? Could we just disable that observer and execute pretty much the same code on shipment creation? Is there any issue with not confirming the transaction for a few days? This would e.g. happen if the client orders Friday evening, and we only ship the order on Monday.

Dear sprankhub
According to our developers, the invoice is required for the transaction process:

The invoice is used to track the transaction status. This is why we have created right away.

I hope this answers your question.
Best regards

@theodorspringwallee, thanks for the answer. However, I do not care too much why you implemented it that way. The questions is: Is there any issue on your side if we change it as I described above?

Dear sprankhub
I will ask our developers again.
Would it also be an option to set the payments into the deferred mode (e.g. each Friday), that would mean, that the wallee transaction status does not switch automatically to fulfil.
Would that match with your use case?
Best regards

How does deferred mode work exactly? However, I fear it will not work for us: We want to create the invoice when we ship the order, so we need to be able to trigger that manually.

Dear sprankhub
The deferred mode you can activate on your specific connector (change with the "edit" button the value "immediate" to "deferred"):

That means, the transaction status will only reach the "authorized" state. To reach further transaction states till to the "fulfilled" state, you need then to capture those transactions manually.
For example, if you want, that the customer do not receive a wallee mail on the "authorized" state (when the transaction isn't booked) you can disable the "authorized"-mail within the wallee space settings:

And on the next Monday, you can capture the transactions of Friday.
Does this help you?
Best regards

That could be interesting, indeed. Thanks! I will check if that works for us.

Dear sprankhub
Did not hear from you since a while. I'll close this git issue now.
Feel free to re-ask, when you have additional questions to this topic.
Best regards


Several security vulnerabilities in Python 3 base image

ECR Clair scan of a Lambda docker image based on public.ecr.aws/lambda/python:3 shows the following vulnerabilities, all apparently in base AL2 image:

Name
Package
Severity
Description

ALAS2-2022-1885
expat:2.1.0-15.amzn2.0.1
HIGH
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2022-43680: In libexpat through 2.4.9, there is a use-after free caused by overeager destruction of a shared DTD in XML_ExternalEntityParserCreate in out-of-memory situations.

ALAS2-2022-1882
curl:7.79.1-6.amzn2.0.1
MEDIUM
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2022-42916: A vulnerability was found in curl. The issue occurs because curl's HSTS check can be bypassed to trick it to keep using HTTP. Using its HSTS support, it can instruct curl to use HTTPS directly instead of using an insecure clear-text HTTP step even when HTTP is provided in the URL. This mechanism can be bypassed if the hostname in the given URL uses IDN characters that get replaced with ASCII counterparts as part of the IDN conversion. Like using the character UTF-8 U+3002 (IDEOGRAPHIC FULL STOP) instead of the common ASCII full stop (U+002E) .. CVE-2022-42915: A vulnerability was found in curl. The issue occurs if curl is told to use an HTTP proxy for a transfer with a non-HTTP(S) URL. It sets up the connection to the remote server by issuing a CONNECT request to the proxy and then tunnels the rest of the protocol through. An HTTP proxy might refuse this request (HTTP proxies often only allow outgoing connections to specific port numbers, like 443 for HTTPS) and instead return a non-200 response code to the client. Due to flaws in the error/cleanup handling, this could trigger a double-free issue in curl if using one of the following schemes in the URL for the transfer: dict, gopher, gophers, ldap, ldaps, rtmp, rtmps, telnet. CVE-2022-35260: A vulnerability was found in curl. The issue occurs when curl is told to parse a .netrc file for credentials. If that file ends in a line with consecutive non-white space letters and no newline, curl could read past the end of the stack-based buffer, and if the read works, it can write a zero byte beyond its boundary. This issue, in most cases, causes a segfault or similar problem. A denial of service can occur if a malicious user can provide a custom netrc file to an application or otherwise affect its contents. CVE-2022-32221: A vulnerability was found in curl. The issue occurs when doing HTTP(S) transfers, where curl might erroneously use the read callback (CURLOPT_READFUNCTION) to ask for data to send, even when the CURLOPT_POSTFIELDS option has been set if it previously used the same handle to issue a PUT request which used that callback. This flaw may surprise the application and cause it to misbehave and either send off the wrong data or use memory after free or similar in the subsequent POST request.

ALAS2-2022-1901
libblkid:2.30.2-2.amzn2.0.9
MEDIUM
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2022-0563: A flaw was found in the Linux kernel's util-linux chfn and chsh utilities when compiled with Readline support. The Readline library uses an "INPUTRC" environment variable to get a path to the library config file. When the library cannot parse the specified file, it prints an error message containing data from the file. This flaw allows an unprivileged user to read root-owned files, potentially leading to privilege escalation.

ALAS2-2022-1884
libcom_err:1.42.9-19.amzn2
MEDIUM
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2022-1304: An out-of-bounds read/write vulnerability was found in e2fsprogs. This issue leads to a segmentation fault and possibly arbitrary code execution via a specially crafted filesystem.

ALAS2-2022-1882
libcurl:7.79.1-6.amzn2.0.1
MEDIUM
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2022-42916: A vulnerability was found in curl. The issue occurs because curl's HSTS check can be bypassed to trick it to keep using HTTP. Using its HSTS support, it can instruct curl to use HTTPS directly instead of using an insecure clear-text HTTP step even when HTTP is provided in the URL. This mechanism can be bypassed if the hostname in the given URL uses IDN characters that get replaced with ASCII counterparts as part of the IDN conversion. Like using the character UTF-8 U+3002 (IDEOGRAPHIC FULL STOP) instead of the common ASCII full stop (U+002E) .. CVE-2022-42915: A vulnerability was found in curl. The issue occurs if curl is told to use an HTTP proxy for a transfer with a non-HTTP(S) URL. It sets up the connection to the remote server by issuing a CONNECT request to the proxy and then tunnels the rest of the protocol through. An HTTP proxy might refuse this request (HTTP proxies often only allow outgoing connections to specific port numbers, like 443 for HTTPS) and instead return a non-200 response code to the client. Due to flaws in the error/cleanup handling, this could trigger a double-free issue in curl if using one of the following schemes in the URL for the transfer: dict, gopher, gophers, ldap, ldaps, rtmp, rtmps, telnet. CVE-2022-35260: A vulnerability was found in curl. The issue occurs when curl is told to parse a .netrc file for credentials. If that file ends in a line with consecutive non-white space letters and no newline, curl could read past the end of the stack-based buffer, and if the read works, it can write a zero byte beyond its boundary. This issue, in most cases, causes a segfault or similar problem. A denial of service can occur if a malicious user can provide a custom netrc file to an application or otherwise affect its contents. CVE-2022-32221: A vulnerability was found in curl. The issue occurs when doing HTTP(S) transfers, where curl might erroneously use the read callback (CURLOPT_READFUNCTION) to ask for data to send, even when the CURLOPT_POSTFIELDS option has been set if it previously used the same handle to issue a PUT request which used that callback. This flaw may surprise the application and cause it to misbehave and either send off the wrong data or use memory after free or similar in the subsequent POST request.

ALAS2-2022-1901
libmount:2.30.2-2.amzn2.0.9
MEDIUM
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2022-0563: A flaw was found in the Linux kernel's util-linux chfn and chsh utilities when compiled with Readline support. The Readline library uses an "INPUTRC" environment variable to get a path to the library config file. When the library cannot parse the specified file, it prints an error message containing data from the file. This flaw allows an unprivileged user to read root-owned files, potentially leading to privilege escalation.

ALAS2-2022-1901
libuuid:2.30.2-2.amzn2.0.9
MEDIUM
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2022-0563: A flaw was found in the Linux kernel's util-linux chfn and chsh utilities when compiled with Readline support. The Readline library uses an "INPUTRC" environment variable to get a path to the library config file. When the library cannot parse the specified file, it prints an error message containing data from the file. This flaw allows an unprivileged user to read root-owned files, potentially leading to privilege escalation.

ALAS2-2022-1893
ncurses:6.0-8.20170212.amzn2.1.3
MEDIUM
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2022-29458: A segmentation fault vulnerability was found in ncurses's convert_strings() function of tinfo/read_entry.c file. This flaw occurs due to corrupted terminfo data, triggering an out-of-bounds read error. CVE-2021-39537: The ncurses package (tic) is susceptible to a heap overflow on crafted input. When the terminfo entry-description compiler processes input, proper bounds checking was not enforced leading to this software flaw. The highest threat from this vulnerability is system availability.

ALAS2-2022-1893
ncurses-base:6.0-8.20170212.amzn2.1.3
MEDIUM
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2022-29458: A segmentation fault vulnerability was found in ncurses's convert_strings() function of tinfo/read_entry.c file. This flaw occurs due to corrupted terminfo data, triggering an out-of-bounds read error. CVE-2021-39537: The ncurses package (tic) is susceptible to a heap overflow on crafted input. When the terminfo entry-description compiler processes input, proper bounds checking was not enforced leading to this software flaw. The highest threat from this vulnerability is system availability.

ALAS2-2022-1893
ncurses-libs:6.0-8.20170212.amzn2.1.3
MEDIUM
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2022-29458: A segmentation fault vulnerability was found in ncurses's convert_strings() function of tinfo/read_entry.c file. This flaw occurs due to corrupted terminfo data, triggering an out-of-bounds read error. CVE-2021-39537: The ncurses package (tic) is susceptible to a heap overflow on crafted input. When the terminfo entry-description compiler processes input, proper bounds checking was not enforced leading to this software flaw. The highest threat from this vulnerability is system availability.

Even internal AWS ECR scan shows the same. This should be fixed ASAP.


Update user guide 1

Add Save command

Coverage remained the same at 74.783% when pulling cdc0df8ccb68785bf29707429d2ad64e485e45ea on Update_UserGuide_1 into 6f87d514c08e721830eaca20906a6f8e05f068c7 on V0.2_MainBranch.


Renew all leases through single statement

Make renew-leases operation a single SQL statement (addresses https://github.com/Azure/azure-functions-sql-extension/pull/226#discussion_r930429371).
Simplify SQL variable names (no need to use hashes of column names).
Add comment for why trigger-binding provider should return null binding in particular case. (addresses https://github.com/Azure/azure-functions-sql-extension/pull/226#discussion_r933613139)

It would be great if you could make separate issues for each of these things you're fixing and then closing them as you fix them, that'll make it much easier to see how many tasks are left and who's working on them.

It would be great if you could make separate issues for each of these things you're fixing and then closing them as you fix them, that'll make it much easier to see how many tasks are left and who's working on them.

I will get individual issues created starting of next week.


use unqualified user and role name to choose resource_groups

What type of PR is this：

[x] bug
[ ] feature
[ ] enhancement
[ ] others

Which issues of this PR fixes ：

Fixes #
Problem Summary(Required) ：
when choose a resource_group for a query, we must use unqualified user and role.

[FE PR Coverage check]
:heart_eyes: pass : 15 / 17 (88.24%)
file detail

path
covered line
new line
coverage

:large_blue_circle:
com/starrocks/catalog/WorkGroupMgr.java
14
16
87.50%

:large_blue_circle:
com/starrocks/qe/Coordinator.java
1
1
100.00%

run starrocks_fe_unittest

[FE PR Coverage check]
:heart_eyes: pass : 23 / 23 (100.00%)
file detail

path
covered line
new line
coverage

:large_blue_circle:
com/starrocks/qe/Coordinator.java
1
1
100.00%

:large_blue_circle:
com/starrocks/catalog/WorkGroupClassifier.java
1
1
100.00%

:large_blue_circle:
com/starrocks/catalog/WorkGroupMgr.java
21
21
100.00%


[Bug]: TypeError: this.listen is not a function Get this error when i am creating the transport!

Impacted Library name
@ledgerhq/hw-transport
Impacted Library version
"^6.31.3"
Describe the bug
TypeError: this.listen is not a function Get this error when i am creating the transport!
Code
import Transport from "@ledgerhq/hw-transport";
const sui = new Sui(await Transport.create());

Expected behavior
It should execute succesfully and create the transport instance
Additional context
No response

Contact the Support page to resolve your error.
Note: You can also initiate a chat with the live agent on the chat button to get more information about your request via Live Chat
@SukiratWarring
Support.
{c}2024


monitorSession 12 seconds delay on logout

Hi, I'm currently experiencing an issue as a result of enabling the monitorSession property.
When I'm logged in on two different apps:

And have them both open in different tabs, and I sign out on of them, the other one directly signs out also.

But when I have only one tab open, and browse to the other app after signing out. It takes around 12 seconds until the iframe event kicks in, and my token gets removed.

Can anyone help me with how I can get rid of the 12 seconds delay?
Manually removing the session tokens is not an option because it has to work on multiple domains.

Is this a recent problem/change, or are you doing new development?

Before the monitorSession was not enabled. It started once we enabled it.

It's hard to say -- you will have to monitor the http traffic, and see where the requests stop or fail.


Browsing a genre doesn't apply the filter

Issue description
Selecting "Browse" (top-left on the screen) to browse through a genre doesn't have any effect on the list of movies/shows. It will add the genre to the filter box, but it will not apply the filter. However if I manually add a filter, then it will correctly filter the list.
Steps to Reproduce

Select "Browse" and choose a genre
Check the list of movies

Expected Behaviour
I would expect that after I start browsing a genre, it will filter my list of movies according to the selected genre.
Actual Behaviour
Browsing a genre doesn't filter my list of movies. (manually adding a filter works however)
Environment Information

Operating System: CentOS 7
Java version: java-1.8.0-openjdk
Streama version: 1.7.1

Closing this issue. See here: https://github.com/streamaserver/streama/issues/845#issuecomment-514068333.


Security: Ensure requested parentCapability is overwritten

The permissions requestor submits an object of requested permissions objects, not an array.
We need to ensure that the object keys match the requested permissions' parentCapability fields, which we use to identify approved methods.

Fixed by checking that Array.isArray(req.params).

Sorry, I was talking about each IPermissionsRequest's parentCapability key needing to match its key in the IRequestedPermissions object, around here

This attack vector was already closed by the actions of the following snippets: here and here.
Essentially, even if there is a parentCapability property on one of the Partial<IOcapLdCapability> objects in the IRequestedPermissions object of a permissions request, we don't do anything with it.
In case we ever want to do something with the parentCapability property of Partial<IOcapLdCapability> objects of IRequestedPermissions, we should probably still prevent the key and parentCapability mismatch at the validation stage of requestPermissionsMiddleware. Currently, we only do anything with the caveats property.

Great, thanks for verifying 😅

Per above, added this as a safeguard and for modularization: https://github.com/MetaMask/json-rpc-capabilities-middleware/blob/master/index.ts#L483-L507


[HTX] Add user define input MDT profile to execute

we have to create a special 'mdt' file on the system ... so we need to change a bit to the code

the process would be:
create mdt (like we did)
cp mdt.bu mdt.kms
(manually modify) mdt.kms - get rid of unwanted exerciser(s)
start mdt.kms (htxcmdline -run -mdt. mdt.kms)
monitor (-mdt mdt.kms)

Code under review

https://gerrit.openbmc-project.xyz/#/c/4196/


nixos/gitolite: copy hooks with force

Motivation for this change
This makes the commonHook option work also for (read-only) Nix store
paths. Currently it fails on the second activation, because the
destination is read-only.)
Things done

[x] Tested using sandboxing (nix.useSandbox on NixOS, or option build-use-sandbox in nix.conf on non-NixOS)
Built on platform(s)

[x] NixOS
[ ] macOS
[ ] other Linux distributions

[ ] Tested via one or more NixOS test(s) if existing and applicable for the change (look inside nixos/tests)
[ ] Tested compilation of all pkgs that depend on this change using nix-shell -p nox --run "nox-review wip"
[ ] Tested execution of all binary files (usually in ./result/bin/)
[x] Fits CONTRIBUTING.md.

Applied to master (7c481aa7c12d7bf75f31d452a9d2d8e13acf3e2f).


Typo in NodeChangeProperty: 'stokeTopWeight' instead of 'strokeTopWeight'

https://github.com/figma/plugin-typings/blob/b74f8207eab4ea94fa36646598e9eaca25756b19/plugin-api.d.ts#L650

Thanks for a report. This is a known issue that we have kept around for backward compatability. See the note here: https://www.figma.com/plugin-docs/api/NodeChangeProperty/


Cilium integration with Flannel

Feature Requests
Hi,
I would like to ask if there's any way to run cilium with flannel as a CNI (similar to how cilium is running with kube-router).
The use case for this would be using cilium in pre-existing clusters that already run with flannel. Upgrading a 100+ node cluster to cilium involves downtime, while adding it as a policy enforcer would be seamless.
I ran the following test:

2 node cluster with flannel
deployed cilium having   tunnel: "disabled"
ran the deployment from https://cilium.readthedocs.io/en/latest/gettingstarted/minikube/ with 4 replicas  (no master taints so that pods can go on both nodes)
added the l3_l4 policy
and the policy worked as expected.

Thank you!

@cristi- But what's the CNI config you are using? Policies probably work as expected, because just Cilium CNI is used and Flannel CNI is not.

@cristi- This will be present in v1.4.0. The final PR is being performed here.