loading bar / verbose output after login

Hi,
Thanks for the great work @simprecicchiani
I am just having one issue - when I login / enter my password into OSX, a loading bar is diplayed and a load of verbose output displayed. This seems to delay in desktop loading time slightly. I have not seen this behaviour on other hackintosh's I have so I wonder if there is an issue. I have tried a clean install. Using big sur, but was also happening on previous version.
Any thoughts appreciated.
thanks

Do you have your disk encrypted?

Do you have your disk encrypted?

I do. Is that expected behaviour with encryption?

Also I'll send over a donation as I think your work is great. The only slight issue is I find the trackpad slightly too sensitive if I have tap to click enabled. Can result in some clicks in error. Not sure if my specific hardware or limitation of kext but I get around it by using a mouse.

I do. Is that expected behaviour with encryption?

Yes, it is. Not the verbose output tho. If you have it disabled it shouldn't output anything after the login screen (a parte from the loading bar).

The only slight issue is I find the trackpad slightly too sensitive if I have tap to click enabled.

I can confirm that too, I have tap to click disabled because of it. I've never asked VoodooRMI's maintainers about it to be honest. I'll do that sooner or later.

Super thanks for the reply. I'll try turning off encryption to see if it resolves.
re trackpad - looks like similar issue posted here:
https://github.com/VoodooSMBus/VoodooRMI/issues/89


Add hotel booking dataset

Holding off the merge as there are some issues to be resolved with the dataset first.


HTPP & SOCKS 5 in same time. Support by slither-feeder-bot! :)

I add, support for random proxy ( http + socks5 ) . : ) Try ! :)

Nice :)

@l3mpik can you make a proxy server for this site https://incloak.com/proxy-list/  ????

Ye i make today ...

skype l3mpik

@l3mpik you make a proxy saver for this site https://incloak.com/proxy-list/ ????

Can the proxy saver prioritize one's local country?  I would like proxies ping close to USA


Cleaned up Glossary and added "OCM Coordinates" term

What this PR does / why we need it:
This PR:

adds the term "OCM Coordinates" to the Glossary
cleans up existing content in the Glossary

Which issue(s) this PR fixes:
Fixes #
Special notes for your reviewer:
A link to the topic describing the term "OCM Coordinates" that was sent in the original email  would be appreciated, as it could be linked and provide better context for the term.
Release note:

Added "OCM Coordinates" term to the Glossary

generally speaking, there seem to be a lot of changes to formatting (short lines being merged into longer ones). Is there a reason for doing that?

generally speaking, there seem to be a lot of changes to formatting (short lines being merged into longer ones). Is there a reason for doing that?

The definitions being split in different lines resulted in some cases of unnecessary capitalization. As I fixed those, I standardized the rest of the definitions (1 line instead of 2) in order to prevent this issue from occurring in the future.
Example:
The specification of the technical access path to the physical blob content of
An artifact.

@n-boshnakov : I see. markdown has its quirks. very unfortunate.


Stuck at splash screen

Hi
I have an issue that is not shown in the troubleshooting guide.
Since I updated from 1.8.1 to 1.9.1 in Windows 10, I can't open storage explorer. It is stuck at splash screen and thats all
Regards

Document Details
⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

ID: 06b6cadc-f93d-75de-7611-b1e3d80917e2
Version Independent ID: bcf194d8-3442-b284-576f-407af9ca1067
Content: Azure Storage Explorer troubleshooting guide
Content Source: articles/storage/common/storage-explorer-troubleshooting.md
Service: storage
GitHub Login: @Deland-Han
Microsoft Alias: delhan

@villora I'd recommend posting your question in https://github.com/microsoft/AzureStorageExplorer/issues since it's not directly related to the documentation. We'll follow up there. We will now proceed to close this thread. If there are further questions regarding this matter, please tag me in your reply. We will gladly continue the discussion and we will reopen the issue.


[FLINK-24283][connector/pulsar] Use stick key consumer in Key_Shared subscription.

What is the purpose of the change
Use stick key consumer in Key_Shared subscription. This would make sure Pulsar won't treat the Flink reader as a shared consumer.
This fix https://github.com/apache/pulsar/pull/12035
Brief change log

Change consumer type in PulsarSourceEnumerator

Verifying this change
This change is already covered by existing tests, such as PulsarSourceKeySharedE2ECase in another PR.
Does this pull request potentially affect one of the following parts:

Dependencies (does it add or upgrade a dependency): (yes / no)
The public API, i.e., is any changed class annotated with @Public(Evolving): (yes / no)
The serializers: (yes / no / don't know)
The runtime per-record code paths (performance sensitive): (yes / no / don't know)
Anything that affects deployment or recovery: JobManager (and its components), Checkpointing, Kubernetes/Yarn, ZooKeeper: (yes / no / don't know)
The S3 file system connector: (yes / no / don't know)

Documentation

Does this pull request introduce a new feature? (yes / no)
If yes, how is the feature documented? (not applicable / docs / JavaDocs / not documented)

@fapaul Can you review this issue?

Yes, I will in a bit


Source Code for Red Knight's Shortest Path in Java

Related Issue
Closes: #826
Describe the changes you've made
Adding code for Red Knight's Shortest Path in Java
Describe if there is any unusual behavior of your code(Write NA if there isn't)
NA
Language used for coding
Java
Checklist:

[x] My code follows the style guidelines of this project.
[x] I have performed a self-review of my own code.
[x] I have commented my code, particularly in hard-to-understand areas.
[x] I have documented the code.
[x] New and existing unit tests pass locally with my changes.

@ishikabansal04 No need to add space in import statements.

@ishikabansal04 No need to add space in import statements.

Removed the spaces and updated the file. Please review.

Just one small change here. You have not removed space in first line.

@ishikabansal04 Make changes so that I can review your next pull requests because this commit is common in all your pr.

@ishikabansal04 Make changes so that I can review your next pull requests because this commit is common in all your pr.

I am really sorry for the inconvinience . I have removed that space.


Fuseki backend with multigraphs

Hey,
I ran into issue working on triplestore datasets containing multiple graphs. The script causing the unexpected behavior:
from tripper import Triplestore

ts = Triplestore(
    backend="fuseki",
    # graph = "http://mygraph.com", <- this was added
    triplestore_url = "http://localhost:3030/",
    database = "test"
)

query = f"""
SELECT * WHERE {{
  ?sub ?pred ?obj
}}
"""
r = ts.query(query)
print(r)   # <- prints empty list

In short... What happens is the fuseki backend always inserts graph to the query transforming it into:
SELECT * FROM graph://main WHERE {   ?sub ?pred ?obj }
And this returns an empty list because this graph does not exist. The graph://main seems to be hard-coded.
This is not okay for me because I have to work with multiple graphs. I fixed this by passing the graph name as a variable when instantiating Triplestore. Now I get my query properly defined and am able to retrieve triples from fuseki from a given graph:
SELECT * FROM http://mygraph.com WHERE {   ?sub ?pred ?obj }
I am not sure if this could be done in a way already supported by fuseki backend implementation.
My fuseki runs in docker. The image (v5.2.0): https://hub.docker.com/r/secoresearch/fuseki/tags

Hi,
I created a new branch, feature/set_graph, to allow custom graphs to be specified as parameters when initialising the Triplestore:
ts = Triplestore(
    backend="fuseki",
    triplestore_url = "http://localhost:3030/",
    database = "test",
    graph = "http://mygraph.com"
)

In this case the queries are performed only on the custom graph.
Is it okay for you to use one graph at a time, or do you need to query multiple graphs at once?
Please let us know if it works as expected.

Hi,
Thanks for this.
Yes, good point. I was thinking about the same thing today. Maybe passing custom graph(s) should be done at the level of query/remove/add_triples methods.
I will be able to test it on Monday.


Added ´with´ statement support, fixed compiling warnings

I created the support for the with statement, unfortunately I don't have access to to the hardware I was using to test the code, but I believe it's working.

Let me know if "with" support isn't working for you now.


Release new version with Android Build Tools Bump

I was hoping we could get a release that includes the PR's that were recently merged for the Android Build tools.
Thanks!

Please :)

need this too
thanks in advance

Any updates on this? We also need it to be updated. Please advise.

you can do this in your own project
// Top-level build file where you can add configuration options common to all sub-projects/modules.

buildscript {
    repositories {
        jcenter()
    }
    dependencies {
        classpath 'com.android.tools.build:gradle:2.3.3'
        classpath 'com.google.gms:google-services:3.1.0'

        // NOTE: Do not place your application dependencies here; they belong
        // in the individual module build.gradle files
    }
}

allprojects {
    repositories {
        mavenLocal()
        jcenter()
        maven {
            // All of React Native (JS, Obj-C sources, Android binaries) is installed from npm
            url "$rootDir/../node_modules/react-native/android"
        }
        maven {
            url "https://maven.google.com" // Google's Maven repository
        }
        maven { url "https://jitpack.io" }
    }
}

ext {
    compileSdkVersion = 26
    buildToolsVersion = '26.0.2'
}

subprojects { subproject ->
    afterEvaluate{
        if((subproject.plugins.hasPlugin('android') || subproject.plugins.hasPlugin('android-library'))) {
            android {
                compileSdkVersion rootProject.ext.compileSdkVersion
                buildToolsVersion rootProject.ext.buildToolsVersion
            }
        }
    }
}

use the approach above


Can we have hot reload?

Hi.
First of all, thanks a lot for this template. It's excellent to have it.
Would it be possible to add a hot reload to it? Would be great if its re-build and re-started automatically.
I tried few implementations, but they wouldn't work:
"dev:hot0": "nodemon --watch src --exec \"npm run dev\"",
"dev:hot1": "concurrently \"npm run build\" \"nodemon  --watch src dist/start-bot.js\"",
Both of them stuck after change event triggered. Any ideas what might be wrong?

Hi,
Dependencies:
yarn add -D nodemon ts-node tsc-watch

package.json:
{
  "scripts": {
    "dev": "tsc-watch --onSuccess \"yarn watch\"",
    "dev:manager": "tsc-watch --onSuccess \"yarn watch:manager\"",
    "watch": "nodemon --watch './**/*.{ts}' --exec ts-node src/start-bot.ts",
    "watch:manager": "nodemon --watch './**/*.{ts}' --exec ts-node src/start-bot.ts"
  }
}

tsconfig.json
{
  "compilerOptions": { .... },
  "ts-node": {
    "esm": true
  }
}

Thanks a lot @matheus-caldeira

I like using PM2 so I just added this to the process.json file
"watch": ["dist/"]

Hi,
Dependencies:
yarn add -D nodemon ts-node tsc-watch

package.json:
{
  "scripts": {
    "dev": "tsc-watch --onSuccess \"yarn watch\"",
    "dev:manager": "tsc-watch --onSuccess \"yarn watch:manager\"",
    "watch": "nodemon --watch './**/*.{ts}' --exec ts-node src/start-bot.ts",
    "watch:manager": "nodemon --watch './**/*.{ts}' --exec ts-node src/manager-bot.ts"
  }
}

tsconfig.json
{
  "compilerOptions": { .... },
  "ts-node": {
    "esm": true
  }
}

I'm having this error
8:01:30 PM - Starting compilation in watch mode...

8:01:32 PM - Found 0 errors. Watching for file changes.
Error: spawn yarn ENOENT
    at ChildProcess._handle.onexit (node:internal/child_process:286:19)
    at onErrorNT (node:internal/child_process:484:16)
    at process.processTicksAndRejections (node:internal/process/task_queues:82:21)
 ELIFECYCLE  Command failed with exit code 1.

I followed all the steps correctly, can someone help me?


http: use requests to handle redirects

Raw use of httplib does not respect the 3xx status codes which may
result in 200 at the end. Use requests to handle any redirects and loop
detection.

Looking again, it wasn't so much. Addresses #193.

Obsolete, has been resolved without pulling requests.


ls | grep or ls | wc do not work

I'm not sure yet what the general solution to this is... especially versus random vfs impls. but it might be a common enough case for us to specialize for.

The fix in https://github.com/IBM/kui/pull/6985 is specialized for ls... for now. We may want to pull this into the core, to handle grepping and counting of table responses, generally.


[FLINK-7057][blob] move BLOB ref-counting from LibraryCacheManager to BlobCache

Currently, the LibraryCacheManager is doing some ref-counting for JAR files managed by it. Instead, we want the BlobCache to do that itself for all job-related BLOBs. Also, we do not want to operate on a per-BlobKey level but rather per job. Job-unrelated BLOBs should be cleaned manually as done for the Web-UI logs. A future API change will reflect the different use cases in a better way. For now, we need to also adapt the cleanup appropriately.
On the BlobServer, the JAR files should remain locally as well as in the HA store until the job enters a final state. Then they can be deleted.
With this intermediate state, job-unrelated BLOBs will remain in the file system until deleted manually. This is the same as the previous API use when working with a BlobService directly instead of going through the LibraryCacheManager. The aforementioned API extension will include TTL fields for those BLOBs in order to have a proper cleanup, too.
This PR is based upon #4237  and #4245 in a series to implement FLINK-6916.

BlobServerDeleteTest.testJobCleanup seems to fail on some profiles consistently.

I wonder how that slipped through....anyway, should be fixed now

Hi Nico, I'm still waiting for Travis before merging FLINK-7056. Could you rebase this PR in the meantime and maybe also squash all FLINK-7057 commits into one? This helps me to get faster through the review.

Would be good to rebase again @NicoK because otherwise I don't see what Travis thinks about the PR.

ok, rebased again but upon #4558 which adds one small fix that could cause hanging tests. I also addressed the comments you had, thanks.

Thanks for addressing the review comments @NicoK. Travis passed. Will merge this PR.

Thanks, @tedyu
both things should be changed - I'll create a hotfix for that


java.io.IOException: open failed: ENOENT (No such file or directory)

I get an error when the library tries to create new file at DownloadDispatcher.java:
destinationFile.createNewFile();
java.io.IOException: open failed: ENOENT (No such file or directory)
03-18 01:06:26.819 15157-15177/kndl.mp3 W/System.err:     at java.io.File.createNewFile(File.java:939)
03-18 01:06:26.819 15157-15177/kndl.mp3 W/System.err:     at com.thin.downloadmanager.DownloadDispatcher.transferData(DownloadDispatcher.java:213)
03-18 01:06:26.821 15157-15177/kndl.mp3 W/System.err:     at com.thin.downloadmanager.DownloadDispatcher.executeDownload(DownloadDispatcher.java:142)
03-18 01:06:26.821 15157-15177/kndl.p3 W/System.err:     at com.thin.downloadmanager.DownloadDispatcher.run(DownloadDispatcher.java:81)
03-18 01:06:26.821 15157-15177/kndl.mp3 W/System.err: Caused by: android.system.ErrnoException: open failed: ENOENT (No such file or directory)
03-18 01:06:26.821 15157-15157/kndl.mp3 V/ViewRootImpl: Contents drawing finished : kndl.mp3/kndl.mp3.Activities.MainActivity
03-18 01:06:26.822 15157-15177/kndl.mp3 W/System.err:     at libcore.io.Posix.open(Native Method)
03-18 01:06:26.822 15157-15177/kndl.mp3 W/System.err:     at libcore.io.BlockGuardOs.open(BlockGuardOs.java:186)
03-18 01:06:26.822 15157-15177/kndl.mp3 W/System.err:     at java.io.File.createNewFile(File.java:932)
03-18 01:06:26.822 15157-15177/kndl.mp3 W/System.err: 	... 3 more

I think you should check if dir existing, and if it doesn't, than create it using mkdirs:
if (!dir.exists()) {
   Log.i(TAG, "directory " + directoryPath + " doesn´t exists!");
   if (dir.mkdirs()) {  // you will create the directory
        Log.i(TAG, "directory succesfully created!");
  }
}

I haven't tested it but i think that should solve the issue.

If you update to the latest version 1.2.4. If the destination directory is not existing, it will throw DownloadManager.ERROR_FILE_ERROR in the failure callback.  I should get two inputs for downloadrequest if this issue needs to be solved. 1) Destination Directory 2) Destination file name. So that i can create the directory if it doesn't exists and create the file under the directory. For now, please check for the file error code in the callback.


Add TailwindCSS logo

https://tailwindcss.com/docs/what-is-tailwind/

Added in ef7b94458308d3fb8c12e9047180bfbbbe3f9164


Login endpoint returns valid token when invalid password is given.

Response json does not get reset. So if a succesful login takes place a subsequent unsuccesful login will get back token for previous correct login.

Hotfix pushed to remote server. Waiting for merge.


XPackage incorrectly reporting uninstalled software as installed

I am using the xpackage module to ensure that some applications are removed from our image, like shockwave. What happens in some scenarios is that sometimes the uninstall leaves slight remnants, like what is listed below. So in this instance shockwave has been successfully removed and there is a key that exists with the ProductID with only one value under it. It appears that since xpackage sees a key that corresponds to the product id it assumes that the software is installed. It then tries to uninstall shockwave and fails because it can't uninstall a package that is no longer installed.
If the code was updated so that it doesn't just look for the productid but also a value, like UninstallString, this should fix this issue.
    xPackage Shockwave
     {
         Ensure = 'Absent'
         Name = 'Adobe Shockwave Player 12.2'
         ProductId = '5ECE64C9-F5B3-4914-B1F2-23D46548B7E3'
         Path = "$DataSource\Uninstalls\Shockwave.msi"
     }

[HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall{5ECE64C9-F5B3-4914-B1F2-23D46548B7E3}]
"sEstimatedSize2"=dword:0000d190

from https://social.msdn.microsoft.com/Forums/en-US/10cb99f9-c751-4298-8e1f-af135d9aafba/sestimatedsize2-registry-getting-created-in-uninstallproductcode-hive?forum=windbg
"The stack trace in Process Monitor shows that the "sEstimatedSize2" Registry value was created by StorSvc.dll during an incoming RPC. I don't think it is related to Windows Installer. StorSvc.dll implements the "Storage Service" service but I have not tested whether disabling this service would prevent the value from being created."


Settings page

You can find settings icon on Material Design website.
Use 24dp version in SVG, place it into /public/icons. Please, minify it using SVGO removing all fill, width and height properties.

Could you please try to divide fields to a few sections for Organisation and Repository? I might give the page some visual spacing.

You might not remember, we were discussing that because we use different PATCH requests for different inputs, it may be good to have separate 'save' button for each field.

All of these three fields are in one PATCH request

You can find settings icon on Material Design website.
I am going to use one in @oacore/design

Could you please try to divide fields to a few sections for Organisation and Repository? I might give the page some visual spacing.
On it... It's still a draft.

@mcancellieri and I discussed that we should split this PR to 2 parts: updating a data provider information and an organisation data. The API for the first part is ready and we can merge it, the second will be done later.
I will extract part of this to a separate PR today.

I updated the branch and see that preview link get 400 for PATCH. Before doing more work here could you please finish PATCH, @mcancellieri, @valerapro?

Checking.

@valerapro, @mcancellieri current version of the API returns 200 with 500 inside.
Request
I removed authentication and extra headers.
curl 'https://api.core.ac.uk/internal/data-providers/27' \
  -X 'PATCH' \
  -H 'Accept: application/json' \
  -H 'Content-Type: application/json' \
  -H 'Origin: https://dashboard-git-settings.oacore.now.sh' \
  -H 'Referer: https://dashboard-git-settings.oacore.now.sh/data-providers/27/settings' \
  --data-binary<EMAIL_ADDRESS>\
  --compressed

Response
"Status code from POST dataproviders : 500. Info:{\u0022response_headers\u0022:[\u0022HTTP\\\/1.1 500 \u0022,\u0022Date: Tue, 17 Mar 2020 18:51:34 GMT\u0022,\u0022Server: Apache\u0022,\u0022Access-Control-Allow-Origin: *\u0022,\u0022Access-Control-Allow-Headers: Authorization, Content-type, X-Client-Id\u0022,\u0022Access-Control-Allow-Methods: GET,POST,  OPTIONS\u0022,\u0022Access-Control-Expose-Headers: Content-Security-Policy, Location\u0022,\u0022Access-Control-Max-Age: 600\u0022,\u0022X-Frame-Options: SAMEORIGIN\u0022,\u0022Access-Control-Allow-Origin: *\u0022,\u0022Access-Control-Allow-Methods: GET, POST, DELETE, PUT\u0022,\u0022Access-Control-Allow-Headers: Content-Type\u0022,\u0022Content-Type: application\\\/json;charset=UTF-8\u0022,\u0022Content-Length: 0\u0022,\u0022Connection: close\u0022],\u0022http_code\u0022:500,\u0022error\u0022:null,\u0022http_method\u0022:\u0022POST\u0022,\u0022user_data\u0022:null,\u0022start_time\u0022:1584471094.881222,\u0022redirect_url\u0022:null,\u0022url\u0022:\u0022https:\\\/\\\/backend.core.ac.uk\\\/dataproviders\\\/\u0022,\u0022content_type\u0022:\u0022application\\\/json;charset=UTF-8\u0022,\u0022header_size\u0022:562,\u0022request_size\u0022:568,\u0022filetime\u0022:-1,\u0022ssl_verify_result\u0022:0,\u0022redirect_count\u0022:0,\u0022total_time\u0022:0.029605,\u0022namelookup_time\u0022:2.2e-5,\u0022connect_time\u0022:2.2e-5,\u0022pretransfer_time\u0022:4.6e-5,\u0022size_upload\u0022:383,\u0022size_download\u0022:0,\u0022speed_download\u0022:0,\u0022speed_upload\u0022:13206,\u0022download_content_length\u0022:0,\u0022upload_content_length\u0022:383,\u0022starttransfer_time\u0022:0.029516,\u0022redirect_time\u0022:0,\u0022primary_ip\u0022:\u0022<IP_ADDRESS>\u0022,\u0022certinfo\u0022:[],\u0022primary_port\u0022:443,\u0022local_ip\u0022:\u0022<IP_ADDRESS>\u0022,\u0022local_port\u0022:48346,\u0022debug\u0022:\u0022* Found bundle for host backend.core.ac.uk: 0x559cf83e7650 [can pipeline]\\n* Could pipeline, but not asked to!\\n* Re-using existing connection! (#0) with host backend.core.ac.uk\\n* Connected to backend.core.ac.uk (<IP_ADDRESS>) port 443 (#0)\\n\u003E POST \\\/dataproviders\\\/ HTTP\\\/1.1\\r\\nHost: backend.core.ac.uk\\r\\nAccept-Encoding: gzip\\r\\nContent-Type: application\\\/json\\r\\nAccept: *\\\/*\\r\\nUser-Agent: Symfony HttpClient\\\/Curl\\r\\nContent-Length: 383\\r\\n\\r\\n* upload completely sent off: 383 out of 383 bytes\\n\u003C HTTP\\\/1.1 500 \\r\\n\u003C Date: Tue, 17 Mar 2020 18:51:34 GMT\\r\\n\u003C Server: Apache\\r\\n\u003C Access-Control-Allow-Origin: *\\r\\n\u003C Access-Control-Allow-Headers: Authorization, Content-type, X-Client-Id\\r\\n\u003C Access-Control-Allow-Methods: GET,POST,  OPTIONS\\r\\n\u003C Access-Control-Expose-Headers: Content-Security-Policy, Location\\r\\n\u003C Access-Control-Max-Age: 600\\r\\n\u003C X-Frame-Options: SAMEORIGIN\\r\\n\u003C Access-Control-Allow-Origin: *\\r\\n\u003C Access-Control-Allow-Methods: GET, POST, DELETE, PUT\\r\\n\u003C Access-Control-Allow-Headers: Content-Type\\r\\n\u003C Content-Type: application\\\/json;charset=UTF-8\\r\\n\u003C Content-Length: 0\\r\\n\u003C Connection: close\\r\\n\u003C \\r\\n* Closing connection 0\\n\u0022}"

@mcancellieri do you have any update about this?

@mcancellieri checked once again, I get 405 in the response. Please, let me knot when the back end gets redeployed.

I am really happy we finished this. Thank all the ream @oacore/dashboard for collaboration.


Uploaded file is displayed twice in media modal v2

Description:
When uploading a file with sw-media-modal-v2, the file preview is displayed twice. The file itself is not duplicated on the server.
Environment: Win11, Firefox 130.0b3/Chrome 127.0.6533.100, SW<IP_ADDRESS>/<IP_ADDRESS>, SVG/PNG file
Steps to reproduce:

go to a shopping experience in admin
add a default image element
open media library in image selection
open upload tab in modal
upload an image

Expected result:
Preview of upload file is shown one time below upload field
Actual result:
Preview of upload file is shown two times below upload field
[Screenshot%2B2024-08-13%2B092232.png|https://sbp-issuetracker-attachments.s3.eu-west-1.amazonaws.com/1723534555_66bb0cdb9a5ec_Screenshot%2B2024-08-13%2B092232.png]

[public] Automated response: This issue is linked to the internal issue https://shopware.atlassian.net/browse/NEXT-37668.
[created from NEXT-37668, comment 484242]


windowsserverdocs/WindowsServerDocs/identity/ad-fs/operations/Access-Control-Policies-in-AD-FS-2.md

windowsserverdocs/WindowsServerDocs/identity/ad-fs/operations/Access-Control-Policies-in-AD-FS-2.md
rules in this article do not work at all. I am using ADFS 2.0 update roll up 3 and it isnt working at all

Page reference information, as provided when a ticket has been created correctly (see below).

Document Details
⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

ID: 7b28154a-89f5-942d-ed5f-a6c0286687de
Version Independent ID: 4fcdb03a-3f62-1eaf-40b0-388c061d3262
Content: Client Access Control policies in Active Directory Federation Services 2.0
Content Source: WindowsServerDocs/identity/ad-fs/operations/Access-Control-Policies-in-AD-FS-2.md
Product: windows-server
Technology: ad-fs
GitHub Login: @billmath
Microsoft Alias: billmath

@montereyharris : I know it has been a long time (2.5 years) since you posted this issue ticket. This repository ticket system is used for documentation improvement suggestions. I can only assume that your original issue has been solved on your side since then.
Are there any specific parts in this document that needs improvement, do you know which parts should be changed or if there are any missing steps or incorrect information we can work on to improve for future use?

@montereyharris : If you have not done so already, I hope you will consider opening a ticket with your local Microsoft Support tenant or use one of the related forums to discuss your issue. If you find any improvements that affects the referred MS Docs documentation page, please open a new ticket to have the page corrected.
For now, I will proceed to close this ticket and ask you to open a new ticket if you still find that the page is in need of improvement changes.

You may want to look elsewhere for answers, unless you have suggestions for improving one or more specific pages in the MS Docs repository.
Disclaimer: I am not affiliated with Microsoft or the Microsoft Docs teams here on GitHub.
The intention of this repository is to improve on the existing documentation by providing the users a way to report factual errors, improvement suggestions and request updates for new versions.
The MS Docs team members might not have time to answer your question, both due to the small size of the team and the big workload.
Try the following resources to get in touch with users who may be able to help you:

TechNet forums: https://social.technet.microsoft.com/Forums/en-US/home
MSDN: https://social.msdn.microsoft.com/Forums/en-US/home
Microsoft Community: https://answers.microsoft.com/

#please-close


[release-2.3] backport header dropdown click change to 2.3

Signed-off-by: Will Kutler<EMAIL_ADDRESS>https://github.com/open-cluster-management/backlog/issues/16647

Btw  https://github.com/open-cluster-management/grc-ui/pull/774#issuecomment-929293572

/lgtm


Can I use STGCN++ to train on own 2D dataset ?

Hello author,
Can I use STGCN++ to train on own 2D dataset ? If not, which kind of model can I use to train the 2D keypoints data ?
Thank you in advance.

same question

Hello, I would like to ask if you succeeded?

Not yet.


Create networkpolicies for the Syn ArgoCD instance

Context
Currently, we don't create any networkpolicies to isolate the Project Syn ArgoCD from the rest of the cluster. We should make sure that we deploy network policies in the syn namespace which isolate the ArgoCD instance from other workloads on the cluster.
Task deliverables

The component deploys network policies that isolate the syn namespace from other workloads on the cluster
The network policies are configured so that the argocd-operator and the cluster's monitoring stack can still access workloads in the syn namespace
The networkpolicies use names that are unlikely to conflict with other networkpolicies that are deployed cluster-wide (e.g. on APPUiO Managed OCP4)

Implemented in v8.5.0


Upload function does not work in v0.20.dev6 and later

🔍 Before submitting the issue

[X] I have searched among the existing issues
[X] I am using a Python virtual environment

🐞 Description of the bug
I'm on Ansys Labs and I try to upload a file before reading it into Fluent:
import ansys.fluent.core as pyfluent
pipe_fluid_session = pyfluent.launch_fluent()
pipe_fluid_mesh_file = "pipe_fluid.msh.h5"
pipe_fluid_session.upload(pipe_fluid_mesh_file)
pipe_fluid_session.file.read(file_type="mesh", file_name=pipe_fluid_mesh_file)

This works fine if I use PyFluent version 0.20.dev5 or earlier. However, in the later release, the read function never comes back. I believe this is because the upload command did not actually upload the file, but I'm not sure.

Can this be fixed?
It would be great if I could get some kind of an indication from the upload function whether it actually uploaded anything. I'm just guessing that it didn't work, but I'm not sure how to confirm that.
It would be great if read function didn't hang. If something went wrong, maybe an exception is appropriate?

📝 Steps to reproduce
Try to execute the above script in a cloud-native context.
💻 Which operating system are you using?
 Also, upload() should definitely not be a no-op on a PyPIM-configured environment such as Ansys Lab. I need to have a look at what has changed here.

Thanks @seanpearsonuk . Good to know that upload is not necessary. I have confirmed that this still does not work (it never returns from the read function):
import ansys.fluent.core as pyfluent
pipe_fluid_session = pyfluent.launch_fluent()
pipe_fluid_mesh_file = "pipe_fluid.msh.h5"
pipe_fluid_session.file.read(file_type="mesh", file_name=pipe_fluid_mesh_file)

@seanpearsonuk @ochernuk
We need to use .upload() and .download() in the Ansys Lab for now. The reason is that working of  upload/download behind the scenes is supported in 24R2 which is not available right now in the Ansys Lab.
Right now 24R1 is the latest Fluent version available in the Ansys Lab therefore we need to use upload before reading and download after writing any file.
Thank you.

@hpohekar 24R2 should be there in the lab because @lxjanoo generally pushes the container image to that registry whenever he does likewise for GitHub. Is this just some current issue?

@hpohekar 24R2 should be there in the lab because @lxjanoo generally pushes the container image to that registry whenever he does likewise for GitHub. Is this just some current issue?

@seanpearsonuk @ochernuk
Yes I verified that 24R2 is available in the Ansys Lab now but it is not default Fluent version. Default Fluent version is 24R1. We need to pass product_version="24.2.0" argument to launch 24R2.
session = pyfluent.launch_fluent() -> launches 24R1
session = pyfluent.launch_fluent(product_version="24.2.0") -> launches 24R2

I also verified that we don't need to use upload before session.file.read().
Another point is that 24R2 sometimes takes too much time to launch after restarting kernel in the Ansys Lab.
Thank you.

Yes, thanks for checking, @hpohekar. I think it was always like that: the latest released version was the default.

@hpohekar. @ochernuk's experience leads me to think that we might want something like this:
>>> solver.upload(case_file)
UserWarning: You have called the session's upload() method directly. Please note, for the version of Fluent you are using, that most API methods that require (a) file(s) to be uploaded and/or downloaded call the upload() and download() methods internally themselves so that you do not need to call those methods explicitly. The only known exceptions are in PMFileManagement where there are some complex file handling interactions, which necessitates that you call the upload() and download() methods for the relevant files.

@hpohekar. @ochernuk's experience leads me to think that we might want something like this:
>>> solver.upload(case_file)
UserWarning: You have called the session's upload() method directly. For the version of Fluent you are using, please note
that most API methods that require (a) file(s) to be uploaded and/or downloaded call the upload() and download() methods
internally themselves so that you do not need to call those methods explicitly. The only known exceptions are in
PMFileManagement where there are some complex file handling interactions, which necessitate that you call the upload() and
download() methods for the relevant files.

@seanpearsonuk
Yes, I agree. This looks good to me.


upgrade from 0.6.4 to 1.0-beta3 breaks because "one-dash" option -config doesn't exist any more

From syslog:
Oct 12 15:07:43 testmachine vip-manager[15756]: unknown shorthand flag: 'c' in -config=/etc/patroni/11-test.vip.yml

This is actually coming from the systemd config file:
# cat<EMAIL_ADDRESS>[...]
ExecStart=/usr/bin/vip-manager -config=/etc/patroni/%i.vip.yml

Other than that the next vip-manager seems to work with the old /etc/patroni/%i.vip.yml config file just fine. :+1: !

Hey @tpo , thanks for checking out the 1.0-beta3 release!
Unfortunately it is not possible to support both - and -- config flags with the viper and pflag library.
This is a breaking change and I have documented how to "migrate" here:
https://github.com/cybertec-postgresql/vip-manager#Migration-for-Service-Files-using-YAML-config-files
I know, breaking changes aren't always appreciated, however I hope that in the long run this will result in code that is easier to extend and maintain. I've spent considerable time optimizing the flag/parameter names to make sure they are as clear as possible and I've spent equally long to make sure that "old" parameter names are still useable, be it in the enviroment variables or within the config file. - vs. -- was the only thing I couldn't carry over.


cranelift-fuzzgen: Consume all trailing fuzz input

But don't keep going once we've consumed it all.
I got tired of having a bunch of copies of the same all-zeros test inputs at the end. This version always produces exactly one all-zeros test input at the end, which I feel okay about. I could remove that by explicitly checking for self.u.is_empty() but, eh, testing an all-zeros input could be useful.
This uses less of the fuzz input too since it doesn't need to come up with a count of how many test inputs to generate.
This changes the input format for this fuzz target, so I figure I'll bundle it together with #4824 and merge both sometime next week.
cc: @afonso360

I did some measurements on this.
When I first applied it roughly doubled the amount of runs that we do which is nice. (See the "Applying jameysharp recent patches" section on this comment)


Classrooms: Cleanup and refactoring

After https://github.com/studentinsights/studentinsights/issues/1696.

[x] refactoring and code cleanup (https://github.com/studentinsights/studentinsights/pull/1718, https://github.com/studentinsights/studentinsights/pull/1769, https://github.com/studentinsights/studentinsights/pull/1770, https://github.com/studentinsights/studentinsights/pull/1772, https://github.com/studentinsights/studentinsights/pull/1773)
[x] edge cases around multi-grade classrooms (https://github.com/studentinsights/studentinsights/issues/1693, done enough for now)
[x] fix layout bug for "expand" on "create your lists" page for small numbers of students (https://github.com/studentinsights/studentinsights/pull/1830)
[x] fix bug report in https://rollbar.com/somerville-teacher-tool/somerville-teacher-tool/items/146/ (https://github.com/studentinsights/studentinsights/pull/1860

Considering this closed out and 🚢 for now.  There's more we could do, but nothing pressing and we've run out of the time box for this.


exp/services/recoverysigner: rename auth.Claims to auth.Auth

PR Checklist
PR Structure

[ ] This PR has reasonably narrow scope (if not, break it down into smaller PRs).
[ ] This PR avoids mixing refactoring changes with feature changes (split into two PRs
otherwise).
[ ] This PR's title starts with name of package that is most changed in the PR, ex.
services/friendbot, or all or doc if the changes are broad or impact many
packages.

Thoroughness

[ ] This PR adds tests for the most critical parts of the new functionality or fixes.
[ ] I've updated any docs (developer docs, .md
files, etc... affected by this change). Take a look in the docs folder for a given service,
like this one.

Release planning

[ ] I've updated the relevant CHANGELOG (here for Horizon) if
needed with deprecations, added features, breaking changes, and DB schema changes.
[ ] I've decided if this PR requires a new major/minor version according to
semver, or if it's mainly a patch change. The PR is targeted at the next
release branch if it's not a patch change.

What
Rename auth.Claims to auth.Auth.
Why
The term claims is inherited from JWTs, but the code using the Claims
type is not concerned with JWTs, its concerned with do we have an
authenticated user and who are they. I renamed the type to more
generally refer to that concept. It also helps keep the number of
concepts that the package exposes to a minimum and makes it clear that
the package operates around this central Auth type and going from
external forms of authentication to that type. As a bonus it also means
functions like auth.NewContext and auth.FromContext are clearer to
understand. All the functions in this package operate around getting to
an Auth.
Merging
This change is based on #2276 and should be merged to master after it.
Known limitations
N/A

👀 👍


Update authorization.md

Сorrects a typo

@devdammit Thanks for fixing this 😉
Next time please align your PR with contribution guidelines.


400 error with http challenge let's encrypt

1. What version of Caddy are you using (caddy -version)?
Caddy 0.10.12 (unofficial) (from https://github.com/abiosoft/caddy-docker)
2. What are you trying to do?
Serve multiple subdomains with automatic https (let's encrypt)
3. What is your entire Caddyfile?
https://domain1.mydomain.com {
    gzip
    tls<EMAIL_ADDRESS>{
        max_certs 10
    }
    proxy / container:3000 {
        transparent
    }
}

https://domain2.mydomain.com {
    gzip
    tls<EMAIL_ADDRESS>{
        max_certs 10
    }
    proxy / container:80 {
        transparent
        websocket
    }
}

https://domain3.mydomain.com {
    gzip
    tls<EMAIL_ADDRESS>{
        max_certs 10
    }
    proxy / container:2368 {
        transparent
        websocket
    }
}

https://domain4.mydomain.com {
    gzip
    tls<EMAIL_ADDRESS>{
        max_certs 10
    }
    proxy / container:80 {
        transparent
    }
}

https://domain5.mydomain.com {
    gzip
    timeouts none

    tls<EMAIL_ADDRESS>{
        max_certs 10
    }
}

https://domain6.mydomain.com {
    gzip
    tls<EMAIL_ADDRESS>{
        max_certs 10
    }

    proxy / container:80 {
        transparent
    }
}

4.
Launched Docker image via docker-compose (the full command is /usr/bin/caddy --conf /etc/Caddyfile --log stdout)
5. Please paste any relevant HTTP request(s) here.
a GET on any of my domains
6. What did you expect to see?
Proper proxy to my containers
7. What did you see instead (give full error messages and/or log)?
In browser : ERR_SSL_PROTOCOL_ERROR
In logs :
2018/03/27 14:29:19 [INFO] Obtaining new certificate for domain2.mydomain.com
2018/03/27 14:29:19 [INFO] acme: Registering account for<EMAIL_ADDRESS>2018/03/27 14:29:20 http: TLS handshake error from xxx.xxx.xxx.xxx:yyyy: registration error: acme: Error 400 - urn:ietf:params:acme:error:malformed - must agree to terms of service
2018/03/27 14:29:20 http: TLS handshake error from xxx.xxx.xxx.xxx:yyyy: domain2.mydomain.com: throttled; refusing to issue cert since last attempt on 2018-03-27 14:29:20.30311559 +0000 UTC m=+48.499206522 failed

Hi,
Good news, this is not a bug; you simply have to agree to the Let's Encrypt terms like the log message says: must agree to terms of service. So use the -agree flag or run Caddy manually on the container first.

Thank you for your quick answer ! I'll try to submit a patch to the Docker image to prevent this issue.
Sorry to have wasted your time instead of having read manual...


Update README.md

PR-Codex overview
This PR updates the version of the oop-cop artifact from 0.2.7 to 0.2.8.
Detailed summary

Updated the version of the oop-cop artifact from 0.2.7 to 0.2.8.

✨ Ask PR-Codex anything about this PR by commenting with /codex {your question}

@l3r8yJ thank you for your Pull Request. I'll assign someone to review it soon.
If this PR solves a todo from the code, please don't forget to remove it.

Codecov Report
All modified and coverable lines are covered by tests :white_check_mark:

Comparison is base (44c0a2d) 81.41% compared to head (f6d34f3) 81.41%.

:exclamation: Your organization needs to install the Codecov GitHub app to enable full functionality.
Additional details and impacted files
@@            Coverage Diff            @@
##             master     #146   +/-   ##
=========================================
  Coverage     81.41%   81.41%
  Complexity       94       94
=========================================
  Files            25       25
  Lines           269      269
  Branches         10       10
=========================================
  Hits            219      219
  Misses           44       44
  Partials          6        6

:umbrella: View full report in Codecov by Sentry.
:loudspeaker: Have feedback on the report? Share it here.

@rultor merge

@l3r8yJ I couldn't find any assignee for this task. This is either because there are no contributors with role REV available or because the project does not have enough funds.
Please, make sure there is at least one available contributor with the required role and the project can afford to pay them.

@rultor merge

@l3r8yj OK, I'll try to merge now. You can check the progress of the merge here

@rultor merge

@l3r8yj Done! FYI, the full log is here (took me 2min)


enh(main): add an option to automatically create users

Hi,
This PR adds a new configuration option : CreateUser.
If set to yes, Authy users will automatically be created if they do not exist in the Authy account yet.
So, when a user first tries to authenticate through the Radius server, his Authy account will automatically be created, so that he'll be able to flawlessy / successfully authenticate.
It's then no more needed for the administrator of the authentication solution to manually add every new user...
Here's one of the situation where this is really useful :
Think about a Radius server newly connected to an existing enterprise directory containing thousands of users.
The Radius server runs this authy-freeradius plugin to double-authenticate the users.
The Radius configuration even enforces it, so that users must succeed with 2FA, thus increasing authentication security of the company's employees.
As a result, a user can't login to the VPN of the company if he does not succeed with 2FA.
The administrator of this authentication solution will then find really helpful for the users to automatically be added into the enterprise Authy account when they authenticate for the first time, instead of having to add each one of them manually.
There's no reason to go with a manual process here, which would furthermore be painful with large user directories...
This is exactly why this CreateUser option has been added.
Thank you 👍
Note that the 2 PDF documentations (Release Notes and Installation Guide) could perhaps be updated accordingly.
Contributing to Twilio

All third-party contributors acknowledge that any contributions they provide will be made under the same open-source license that the open-source project is provided under.

[x] I acknowledge that all my contributions will be made under the project's license.

Note that I use this PR since months, without any problem 👍


Add s_user_attributes to pdf-documents

1. Why is this change necessary?
Currently there are no s_user_attributes available on the pdf-documents
2. What does this change do, exactly?
adds the user_attributes to pdf-documents
3. Describe each step to reproduce the issue or behaviour.
Create a new document/index.tpl in your own theme and try to use the user_attributes:
    {$User.attributes.attributeName}
4. Please link to the relevant issues (if any).
https://github.com/shopware/shopware/pull/1457
I edited my PR to use the data_loader.
5. Which documentation changes (if any) need to be made because of this PR?
6. Checklist

[ ] I have written tests and verified that they fail without my change
[ ] I have squashed any insignificant commits
[ ] This change has comments for package types, values, functions, and non-obvious lines of code
[ ] I have read the contribution requirements and fulfil them.

Thanks @mnaczenski! 💙


Retrieving text inside layouts.

Hi, thank you very much for your brilliant work.
I have successfully installed and run the parserlayout package on my win10.
However, as I come from a non-computing/ data science background,  I've currently been stuck on how to retrieve the text inside layouts and restore them into a dataframe for further analysis.
Would you be able to provide any keywords or links about how to do the tasks? Any word will be very much appreciated.
Thank you a lot.

https://github.com/Layout-Parser/layout-parser/blob/master/examples/Deep Layout Parsing.ipynb

Sure no problem! And thanks @lotfiabdelghafour  for the pointer. I assume you are dealing with some image scans, so you might want to perform OCR after running the layout detection models. In this example, https://github.com/Layout-Parser/layout-parser/blob/master/examples/Deep Layout Parsing.ipynb you might find the some OCR examples at the very end. You could try with that first and and see it that's helpful.
Speaking of exporting, in the v0.2 release, we've just built the function to export a layout to dataframe: layout.to_dataframe(), see detail here.


block in Batch[2150]

Environment info
Operating System: ubuntu14.04
Package used (Python/R/Scala/Julia): Python2.7
MXNet version:0.7.0
Error Message:
i  run the train_imagenet.py in the example, and i modified some code.
it seems blocked as follows:

i attached the preocess in gdb ,and excute bt , the result is as follows:

Minimum reproducible example
my code of line 619 in optimizer.py is as follows:

I edit adam class ,and it seems some problems in SyncCopyToCpu, as #3724
This not happens always,but i think it's a bug.
I don't know if it's fixed in nnvm branch, so if it's need to be fixed yet, i can try by best to provide more infomation.

i meet the same problem, when the nd array asnumpy() in rcnn detector. i run the code in cpu.

some time,i run  the code in the different device like run in gpu, the code maybe fine.

This issue is closed due to lack of activity in the last 90 days. Feel free to reopen if this is still an active issue. Thanks!


SR300 reports incorrect values for Auto Range Thresholds

Required Info

Camera Model
SR300

Firmware Version
<IP_ADDRESS>

Operating System & Version
Ubuntu 16.04.1 LTS

Kernel Version (Linux Only)
4.4.0-31-generic

Build System
Makefile

After calling rs_set_device_option for RS_OPTION_SR300_AUTO_RANGE_UPPER_THRESHOLD or RS_OPTION_SR300_AUTO_RANGE_LOWER_THRESHOLD for a value greater than 32k,
Calling rs_get_device_option for the save option returns negative values.
For example, setting RS_OPTION_SR300_AUTO_RANGE_UPPER_THRESHOLD to 40914, returns the value of -24622.
The Binary value for 40914:
1001111111010010
The Binary value for -24622:
1001111111010010
You can see that it is the same value, but one is treated as signed and the other as signed.
The data type for storing the value is an 16-bit unsigned integer which can only store between −32,768 to 32,767. The valid range for those settings is 0 to 65,535 which needs either a 32-bit integer or an unsigned 16-bit integer.

Thank you @mdhorn


Do I follow JavaScript best practices?

DRY: There are some areas of my code where I could avoid repeating myself. For example, I have similar code blocks in index.js and todo.js where I am selecting elements from the DOM and adding event listeners. Instead of repeating this code, I could extract this functionality into a separate function and reuse it across multiple modules.

KISS: My code generally follows the KISS principle. I have kept your code simple and easy to read. I have also avoided over-engineering and premature optimization.

YAGNI: My code seems to follow the YAGNI principle. I have implemented only the necessary functionality to meet the current requirements. I have also avoided implementing extra features that may not be needed.

HTML AND CSS BEST PRACTICES

The HTML file uses semantic elements appropriately, such as header, main, and footer, making the code readable.
The CSS file uses appropriate selectors, which are easy to understand and follow. The naming convention for the classes is also clear and consistent.
No responsiveness :The CSS file could benefit from additional responsiveness features, such as media queries to adjust the layout for different screen sizes.
Overall, HTML and CSS files follow good coding practices and are well-organized and easy to read


Implement SerialNumberExt for macOS

This patch implements the SerialNumberExt trait for macOS. It was successfully tested on a Mac Studio M1 Max.

Thanks for that.


Passing options to ws

Since express-ws is responsible for constructing the ws server, need the ability to pass in the advanced options object to it. Totally optional and doesn't require much change as you can see.
In my case I specifically needed to handle verifyClient in the ws server.

Hi @Nicholi & thanks for the contribution,
I completely agree that this should be possible and your changes look very good. I might change the version number post-merge, but the rest looks perfect. Thanks again!


Do not test python bindings in python/dist directory

This will permit to early catch tests that rely on files not installed in the wheel, i.e. catch if pytest --pyargs mujoco fails in a vanilla environment.
This PR intentionally fails in CI to show the problem discussed in https://github.com/google-deepmind/mujoco/pull/2160 .

Closing as the same test was integrated in https://github.com/google-deepmind/mujoco/pull/2160 .


touchReleaseOnEdges not working since V9

Check that this is really a bug

[X] I confirm

Reproduction link
https://codesandbox.io/p/sandbox/nervous-shtern-rics8g?file=%2Fpages%2Findex.tsx&selection=[{"endColumn"%3A22%2C"endLineNumber"%3A18%2C"startColumn"%3A22%2C"startLineNumber"%3A18}]
Bug description
I Swipe trough all the slides till the last slide. After the last slide the touch-events are not released, there is no chance to escape the Swiper component when it takes the full height & width to see the content below the swiper-component.
Mind the property touchReleaseOnEdges is set to true.
Expected Behavior
Touchevents should be released and being able to escape the swiper component to see the content below.
Actual Behavior
If you scroll to the last slide it wont allow to go further.
Swiper version
9.0.4
Platform/Target and Browser Versions
IOS
Validations

[X] Follow our Code of Conduct
[X] Read the docs.
[X] Check that there isn't already an issue that request the same feature to avoid creating a duplicate.
[X] Make sure this is a Swiper issue and not a framework-specific issue

Would you like to open a PR for this bug?

[ ] I'm willing to open a PR

A workaround to fix it for now was to downgrade the swiper module to v8.4.7 in my project.


Unified Events Mapper

Description

select the unified events and methods via connect version
starts and unified worker that is able the map events types and payloads on the swEventChannel.
attempt to improve tests reliability with debug events

Type of change

[x] Internal refactoring
[ ] Bug fix (bugfix - non-breaking)
[ ] New feature (non-breaking change which adds functionality)
[ ] Breaking change (fix or feature that would cause existing functionality to not work as expected)

Code snippets
In case of new feature or breaking changes, please include code snippets.

Adding a few commits to fix the test cases.

Merging it into the dev branch.
FIXME: Right now the Call Fabric e2e tests with unified eventing are failing due to the missing room.subscribed event from the server.


Fix the wrong version repository path

Codecov Report

Merging #41 (ba784bd) into main (ed13409) will not change coverage.
The diff coverage is n/a.

@@           Coverage Diff           @@
##             main      #41   +/-   ##
=======================================
  Coverage   69.94%   69.94%
=======================================
  Files          36       36
  Lines        1933     1933
=======================================
  Hits         1352     1352
  Misses        514      514
  Partials       67       67

Flag
Coverage Δ

unittests
69.94% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update ed13409...ba784bd. Read the comment docs.


Large Screen Breakpoint

On a very large screen like a 2k monitor, the content should be enlarged somewhat so that it still feels natural. Currently it is visually too small and doesn't have lots of things on the screen so it feels empty.

Improved sizing on max screen


Unresponsive

I've noticed recently the app becomes 100% unresponsive; I can't skip, pause, or even move the player. I relaunched the app, then a clean install, but it still freezes.

Disable desktop notifications 👍  😆


Optimize assets size

Prefer to serve woff2 and woff fonts over ttf. Should save ~150kb
Serve favicons of different size, right now it's a single 500x500 png image. Should save ~0-30kb.

https://github.com/excalidraw/excalidraw-logo/issues

Is that still an issue or we can close it?


Net_regression and masking

For the niftynet net_regression, is there any documentation on how the masking works? Does the network only sample within the mask? and how?

The data passed to the "[REGRESSION] weight" will only act on the loss function (just a pixel wise multiplication of the loss).
To restrict the sampling to the masked area, the same data needs to be passed to "[REGRESSION] sampler", and the sampler has to be set to "window_sampling=weighted". The sampler will then sample from pixel-centered patches with frequency equal to the pixel values in the data assigned to "[REGRESSION] sampler", e.g. if you give it a binary mask, pixels outside of the mask will have a frequency of 0 (no sampling), while pixels inside the mask will have a frequency of 1.
Note that frequencies do not need do be binary. See here: http://niftynet.readthedocs.io/en/dev/_modules/niftynet/engine/sampler_weighted.html?highlight=window_sampling

thank you for the guidance,
I have a ground truth a volume that in the center the intensities are larger and more important than the peripheral part. I provided the volume matrix (weight) to improve the quality of prediction but it did not make the result better at all. what would you suggest?


Fix for generating PDF of a template to download

According to the change, generating PDF worked only for VMs, so this commit changes the model name check.
https://bugzilla.redhat.com/show_bug.cgi?id=1347274

@miq-bot add_label ui,bug

Fix verified.  @h-kataria can you suggest a fix for @jzigmund to add?

@jzigmund you can add a spec test for set_summary_pdf_data method create MiqTemplate record with some devices and verify that set_config method gets called and sets @devices array and check count of devices.

@h-kataria test has been added in new commit

@jzigmund you must have missed something.  There is only 1 file changed in this PR.

@chessbyte thanks for notice .. commit added/pushed


Fix check for missing weights

Uses is rather than == or all(). Addresses #13 without regression for the case of no weights. This is because numpy arrays have custom comparison methods. In particular, == None returns an array. This was addressed by adding .all(). But since get_weight returns a simple None and not a numpy array when there are no weights, there won't be an all method.
import numpy as np
a = np.zeros(3) # now a is array([0., 0., 0.])
a == None # compares elementwise, outputs array([False, False, False]), i.e. not boolean
a is None # compares object to object, outputs False
a.all() == None # compares elementwise, outputs False
b = None
b == None # outputs True
b is None # outputs True
b.all() == None # error

# only `is None` provides the correct behavior in both cases

Thanks for raising this problem. I looked into the problem and we should definitely use is None.
Can you replace your changes to if data.weight is None:. This then is more aligned with the new lightgbm syntax.

Hi, I had to pip install this from 0b05c8d7c909432d651fbb3162ce2eb370474a77 to get stuff to work.  Can you please put in a new tag?  0.2.2?
Thanks

@kevindarby Thanks for your interest in the project.
The problem of the weight is fixed with the recent commits. Please re-install the package in a fresh environment.
The new release is planned for next week.
Thanks.


update to tf version 1.1

Change List:
Updating TF version to v1.1
Updating IBM provider version to 1.40.1
Adding releases based on tags

What will the title of the release be now?

It is going to be tag version.


testing sync

Use Case
A clear and concise description of what the problem you're trying to solve is. Ex. I'm always frustrated when [...]
Describe the Solution You Would Like
A clear and concise description of what you want to happen.
Describe Alternatives You've Considered
A clear and concise description of any alternative solutions or features you've considered.
Additional Context
Add any other context or screenshots about the feature request here.

Hi @binford2k, does this require any action to be taken or was just created for testing purpose only?

Closing this


Kick/Other Platforms support

Hi, first of all, I want to thank you for creating this project, it's truly excellent.
Second, I'd like to know if it's possible to add support for other websites, such as Kick or any .m3u8 stream. It's something I think would be fantastic! Due to my limited knowledge, I'm not sure how to do this properly, which is why I'm suggesting it in case you consider doing it in the future.

Thanks for the kind words!
This project uses streamlink to get livestream CDN URLs which are then passed to ffmpeg/whisper. Streamlink does not currently support Kick and judging by this response, I would say it is unlikely that they add support for Kick.
You can however use the command line flag -direct_url to pass the URL directly to ffmpeg without using streamlink. This should work with any type of media that ffmpeg can read. For Kick you could get the CDN URL as described here using dev tools in your browser. Since this doesn't look too difficult at a first glance, I might give it try to make a Kick plugin for streamlink, but no promises.


Investigate updating how controllers map interactions to APIs

Describe the problem
Most controllers follow the same pattern of iterating through their interactions, switching or ifing on their input types, and calling a specific API for each one. It might be interesting to investigate if this can be streamlined or defined as part of the interaction mapping.
From #5847:

Mouse and Joystick controller switch over Interactions[i].AxisType every frame even though the method called does not change. It would be easier to add them to MixedRealityInteractionMapping directly and just call them one after the other

We appreciate your feedback and thank you for reporting this issue.
Microsoft Mixed Reality Toolkit version 2 (MRTK2) is currently in limited support. This means that Microsoft is only fixing high priority security issues. Unfortunately, this issue does not meet the necessary priority and will be closed. If you strongly feel that this issue deserves more attention, please open a new issue and explain why it is important.
Microsoft recommends that all new HoloLens 2 Unity applications use MRTK3 instead of MRTK2.
Please note that MRTK3 was released in August 2023. It features an all new architecture for developing rich mixed reality experiences and has a minimum requirement of Unity 2021.3 LTS. For more information about MRTK3, please visithttps://www.mixedrealitytoolkit.org.
Thank you for your continued support of the Mixed Reality Toolkit!


Admin Hours Log Screen Mobile Views

refer to figma: https://www.figma.com/file/wskMFN2vvnJKknNI9wGSEo/iOS-Mid-Fi-Wireframes?node-id=367%3A18244

/cib admin-hours-log-screen-mobile-views

Branch 121-b-admin-hours-log-screen-mobile-views created!


Container build: use npm ci over packages files and fix build cmd

In addition to fixing the issue named below, this PR has the container use the project's specified NPM dependencies, rather than using a separate list, keeping things DRY.

Fixes #48739
Updates Dockerfile to:

Copy the project's package.json package-lock.json files
Run npm ci ... so that Hugo commands from the container use the same NPM packages we do in local development.

Fixes container-build, and changes the command so that it writes to the local public folder, making it easier to debug generated files (without this change, the container build command fails because it can't write to ./public -- which means the only other alternative would be to write to another container-only folder such as /tmp/public, but I think that the solution proposed here is better).

I confirm this corrects the build issue. Thanks @chalin
/approve


Fix dataset split names

we had a bug in the name of a field in dataset-info entry
but I removed all the code related to the dataset-info entry, since it's not necessary.

The docs for this PR live here. All of your documentation changes will be reflected on that endpoint.


Move C++/WinRT Documentation to Win App SDK

I'd love to see the entirety of the C++/WinRT documentation moved from UWP to Windows App SDK.  It's an easy port, right? ;-)  It's not obvious, but this page (https://learn.microsoft.com/en-us/windows/apps/get-started) implies that WinApp SDK is the future, so it would be nice to have as much help as I can get to move in that direction.
Document Details
⚠ Do not edit this section. It is required for learn.microsoft.com ➟ GitHub issue linking.

ID: 69a5ba76-77cf-1233-2903-fd3c34b5044c
Version Independent ID: 163d07f1-7860-cd16-a572-ff429cdf7008
Content: C++/WinRT - UWP applications
Content Source: uwp/cpp-and-winrt-apis/index.md
Product: uwp
Technology: platform
GitHub Login: @stevewhims
Microsoft Alias: stwhi

Thanks, @dr-eck. I've added a work item to my backlog to see about adding WinUI 3 (Windows App SDK) content up to parity with the UWP content currently in the C++/WinRT docs. I don't know exactly when I'll make a start on that, nor when it'll be done (it'll be significant work item). In any case, so as not to track it twice, I'll go ahead and close this issue.
Thanks again! :)
-Steve

Hi Steve,
           Thanks for adding this to your backlog.  How do I “follow” you so I am alerted when you update any of the C++/WinRT documentation?

Steve Eckhardt
From: Steven White @.>
Sent: Thursday, October 26, 2023 2:50 PM
To: MicrosoftDocs/windows-dev-docs @.>
Cc: Steve Eckhardt @.>; Mention @.>
Subject: Re: [MicrosoftDocs/windows-dev-docs] Move C++/WinRT Documentation to Win App SDK (Issue #4699)
Thanks, @dr-eck https://github.com/dr-eck . I've added a work item to my backlog to see about adding WinUI 3 (Windows App SDK) content up to parity with the UWP content currently in the C++/WinRT docs. I don't know exactly when I'll make a start on that, nor when it'll be done (it'll be significant work item). In any case, so as not to track it twice, I'll go ahead and close this issue.
Thanks again! :)
-Steve
—
Reply to this email directly, view it on GitHub https://github.com/MicrosoftDocs/windows-dev-docs/issues/4699#issuecomment-1781800690 , or unsubscribe https://github.com/notifications/unsubscribe-auth/AD6IU2JMDLUDIL7DZ7W4U2LYBK5FXAVCNFSM6AAAAAA6RS2GRGVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMYTOOBRHAYDANRZGA .
You are receiving this because you were mentioned.  https://github.com/notifications/beacon/AD6IU2IHT3PPSYMXQ67UJIDYBK5FXA5CNFSM6AAAAAA6RS2GRGWGG33NNVSW45C7OR4XAZNMJFZXG5LFINXW23LFNZ2KUY3PNVWWK3TUL5UWJTTKGQPPE.gif Message ID: @.*** @.***> >


Route Model Binding on the API Router

Is there any way to use Route binding on the API Router out of the box?
I couldn't really figure out a way to do it and neither an elegant way of extending/replacing the API Router.
What would be the best way to put Route Model Binding into the API Router?

Nevermind, solved.

@DraperStudio  What was your solution? I am at this stage at the moment


localStorageService.bind doesn't work with objects nested property paths

localStorageService.bind($scope, 'app.settings', $scope.app.settings, 'AppController_settings'); fails to persist changes in the settings object.
Cause: localStorageService.bind uses $scope[property] to look up the value, but property is a path.  so it misses sub-key changes.  Fixed by my pull-request.

+1


ART-7623 Let images rebase and build within the scope of mass rebuild lock

Currently, mass-rebuild-serializer lock only protects doozer images:build. Rebase happens earlier, and it's protected only by a version-specific lock (currently github-activity-lock-{version}. This could lead to such a scenario:

4.n and 4.m both need mass rebuilds. Rebase activities for them run in parallel
4.n rebase completes; mass rebuild serializer lock is acquired, 4.n images start being built
4.m rebase completes; mass rebuild serializer lock cannot be acquired; 4.m is put on hold
4.n images build process completes after X hours
4.m mass rebuild starts, but finds content that was produced many hours before

In order to avoid running mass rebuilds on outdated content, doozer images:rebase and doozer images:build should happen in sequence, without long waits in between.

/approve

If https://github.com/openshift-eng/aos-cd-jobs/pull/3925 is merged, please migrate this PR to art-tools, if not urgent.
If urgent, please create a duplicate PR to art-tools.


need to handle connection state changed

If a connection state changes to failed, disconnected, or closed, the room should do something instead of just doing nothing. Currently, it will just keep showing a freeze video.

this has been handled by PR #79, when failed to reconnect and kicked from the room a re-connect prompt modal will appear


Replace some Enum.map calls with for loops

We weren't using the Enum.map/2 results here so for loops are more
appropriate.

Ebert has finished reviewing this Pull Request and has found:

1 fixed issue! 🎉

You can see more details about this review at https://ebertapp.io/github/pinterest/elixir-thrift/pulls/79.


Update commands in ref docs

Especially as this now has synopses

Not sure on the new build process. @lgierth Anything I need to do?

With #127 merged, the procedure should be the same as previously with the blog, except that it's now make ipfs and make ipfsio instead of make publish and make publish-to-dnslink

Oh, and you need to install the python dependencies: https://github.com/ipfs/website#dependencies
I used a virtualenv for that: virtualenv venv/ && . venv/bin/activate && pip install pelican markdown. These steps should be part of the Makefile.


Encoding multiple files (Non GUI)

is there a possible solution to encode more than one files (with EEG data), I noticed encodeButton_Callback is called as an event function for Encode button in GUI. I could call the event repeatedly for each file, however I am not sure if it is possible or if there is a better way to do it.
Any suggestions?

You are encouraged to create your own non-gui version for your specific applications to suit your needs w.r.t. having multichannel data and multiple files. This can be done relatively easily via copy-pasting the needed parts of the gui-version, utilizing the additional functions that are in separate .m files. As a general guideline, I would recommend creating your custom script that encodes a single file correctly and than scaling this up by iterating through a set of files in a directory path while either saving your encoded signals and/or the optimal encoding parameters to a resulting file, or keeping everything in memory if you need that.

Thanks for your detailed answer.


[Dashboard] Adding charts from new samples data in Dashboard edit mode throws unexpected error

Screenshots

Adding the new sample charts from the video_game_sales dataset to a new dashboard in the Edit mode will render the chart with an unexpected error, which seems to come from trying to getting datasource:

The error message says "Cannot find viz object"

Saving the dashboard and refresh the whole page, the charts can correctly render.
How to reproduce the bug

Duplicate a sample dashboard (e.g. "Sales Dashboard" and "FCC New Coder Survey 2018") and check "Also duplicate chart":

Go to dashboard edit mode
Add the chart from the sample dataset

Environment
Latest master
Checklist
Make sure to follow these steps before submitting your issue - thank you!

[ ] I have checked the superset logs for python stacktraces and included it here as text if there are any.
[ ] I have reproduced the issue with at least the latest released version of superset.
[ ] I have checked the issue tracker for the same issue and I haven't found one similar.

Additional context
Add any other context about the problem here.

i would consider this is another 1.0 release blocker

i would consider this is another 1.0 release blocker

@ktmud do you know why the new samples data is not showing in the data table? is it also related?

@ktmud do you know why the new samples data is not showing in the data table? is it also related?

I'm not sure.
However, may I report another cosmetic issue:

Is this drop-shadow intended?

I'm not sure.
However, may I report another cosmetic issue:

Is this drop-shadow intended?

Is this drop-shadow intended?

we didn't have a design for Data table section due to time constraints. we are merely using whatever comes with the component, i believe. it doesn't bother me much, but i agree the entire Explore page still needs a lot of cosmetic improvement. @mihir14

Is this drop-shadow intended?

we didn't have a design for Data table section due to time constraints. we are merely using whatever comes with the component, i believe. it doesn't bother me much, but i agree the entire Explore page still needs a lot of cosmetic improvement. @mihir14


Popover not disappear

I use popover as a popup menu after clicking on my avatar.
Each menu item links to a new page, where my avatar is still there, and the popover does not disappear.

The popover should disappear as soon as your cursor leaves it. Can you reproduce the problem in a codepen / jsfiddle or similar?

@devmount Well, I was using it in a SPA. When I click the menu item, the page updates without refresh. The cursor is still over the menu item. I guess that is why the menu is still there. I do not know how to make a SPA and reproduce it on codepen/jsfiddle.

I see. In that case, the only solution I see is to overwrite Spectres popover :hover rules with a class, e.g. .popover-hover:hover and remove that class per Javascript when clicking the button...
This isn't an issue with Spectre.css I guess.


[Solved] Type Mutation must define one or more fields - compatibility issue with GraphQL 0.12.x

I'm submitting a ...

[x] bug report
[ ] feature request
[ ] question

PostGraphQL version: 4.0.0-alpha2.30

Minimal SQL file that can be loaded into a clean database:

(Tried getting this via the --export-schema-graphql flag but got error Error: EISDIR: illegal operation on a directory, open {dir_path} with any directory I tried. However the postgres database uri I'm happy sharing is postgres://graphql:v26ppCS10u7aS68FJfY5EVqa9p6lVb@<IP_ADDRESS>:5431/core)
Steps to reproduce:

postgraphile -n <IP_ADDRESS> -s public -o -a -j -M --append-plugins /postgraphile-plugin-connection-filter/index.js --connection postgres://graphql:v26ppCS10u7aS68FJfY5EVqa9p6lVb@<IP_ADDRESS>:5431/core

Current behavior:
Using tag -M when I load in the database I get no schema docs and for any query I run I get:
{
  "errors": [
    {
      "message": "Type Mutation must define one or more fields."
    }
  ]
}

Expected behavior:
Get the schema docs just without any ability to run default mutations. Perhaps I misunderstand how the disable default mutations flag works though.

I bet this is due to a change in how GraphQL 0.12 works vs 0.11. I suspect if you pin GraphQL to 0.11.x in your lockfile the issue will go away. We've got a complex relationship with GraphQL right now because they broke minification so I had to pin it to 0.11 for the tests/GraphiQL build, but that means we're not testing against GraphQL 0.12 - we're testing against GraphQL 0.11 (hence why this issue wasn't caught).I think they may have fixed this in 0.13 but that's most likely not compatible with other parts of the system (e.g. codemirror-graphql?)...

@benjie So I'm building and running from a Docker so I'm not entirely sure how I'd do that. (I'm a Docker newbie)
FROM node:alpine

RUN apk add --update bash && \
    apk add git && \
    rm -rf /var/cache/apk/* && \
    npm install -g postgraphile && \
    git clone https://github.com/mattbretl/postgraphile-plugin-connection-filter.git

EXPOSE 5000
ENTRYPOINT ["postgraphile", "-n", "<IP_ADDRESS>", "-s", "public", "-o", "-a", "-j", "-M", "--append-plugins", "/postgraphile-plugin-connection-filter/index.js"]

Our current docker image also has to do a pin on a specific version. Check
the Dockerfile in the root of postgraphql github.
Take a look at the sed script line. Based on your use case you will have to
run this after your git clone but it should be similar
On Mon, Feb 12, 2018 at 10:41 AM Tyler van der Hoeven <
<EMAIL_ADDRESS>wrote:

@benjie https://github.com/benjie So I'm building and running from a
Docker so I'm not entirely sure how I'd do that. (I'm a Docker newbie)
FROM node:alpine
RUN apk add --update bash &&
apk add git &&
rm -rf /var/cache/apk/* &&
npm install -g postgraphile &&
git clone https://github.com/mattbretl/postgraphile-plugin-connection-filter.git
EXPOSE 5000
ENTRYPOINT ["postgraphile", "-n", "<IP_ADDRESS>", "-s", "public", "-o", "-a", "-j", "-M", "--append-plugins", "/postgraphile-plugin-connection-filter/index.js"]
—
You are receiving this because you are subscribed to this thread.
Reply to this email directly, view it on GitHub
https://github.com/postgraphql/postgraphql/issues/681#issuecomment-364982314,
or mute the thread
https://github.com/notifications/unsubscribe-auth/ABefi-VwSQgYWnqVaaYUC1Q4OIs8vDZ2ks5tUGnAgaJpZM4SBibV
.

@angelosarto @benjie That seems to have worked! Would love any suggestions on cleaning this Docker up though. Feel free to close the issue however. Thanks for the help!
 Adding a graphql specific version like this fixes it:
  "dependencies": {
    "postgraphile": "^4.0.0-alpha2.30",
    "graphql": "0.11"
  }

Solved by upgrading react-scripts

@benjie could you clarify what you mean by updating react-scripts ?
We're still encountering this issue, and completely roadblocked

Yeah that wasn’t the solution in the end. I did a hack to fix it - look at the last 2 commits for this file:
https://github.com/graphile/postgraphile/commits/master/scripts/build


Cherry-picks for the 3.x branch (future 3.6) - 17th batch

Thirdparty and buildsystem cherry-picks.
The Web/Javascript buildsystem changes will need some testing, ideally we should ensure that we still support the following Emscripten versions:

3.1.39: Currently used for 3.6 standard builds
3.1.14: Currently used for 3.5 standard builds, and not planning to change it
1.39.9: Currently used for Mono builds (both 3.5 and 3.6), limited by upstream Mono support
3.1.58: Latest upstream release, we should aim to support it in 3.6 at least, ideally 3.5 too if we can

But these commits aim to also add support for latest Emscripten versions, which users tend to try to use, and run into all kinds of issues as Emscripten breaks compat in patch releases regularly.
CC @godotengine/web

I'll try and test this out locally once we've solved the closure problem.

The web build issue doesn't seem to be caused by this PR per se, it must be another issue with recent Emscripten that this PR doesn't fix yet. I tested with 3.1.39 (current version we use for 3.6 builds) and there's no regression between 3.x and this PR.


add test run autoсlosing

@apallier thanks for feedback, hope that fixed). New review is needed.

@dubner Does some problem block this request or is there any other unfixed issue?

@Igur007 Please, could you fix the bug with testrun_name in plugin.py line 295?
After that it will be OK from my side.

@apallier @dubner fixed the bug with testrun_name in plugin.py line 295

@Igur007 I'm so sorry but your correction doesn't work with options --tr-run-id or --tr-plan-id because in this case self.testrun_name is None.
I propose to you a simpler solution that works in all cases:
print('[{}] Test run with ID={} was closed'.format(TESTRAIL_PREFIX, self.testrun_id))

Thank you.

@apallier got it. Thanks, forgot that If --tr-run-id or --tr-plan-id provided, option "--tr-testrun-name" will be ignored.

@allankp Don't you want to merge this PR?


schemaspy: 6.1.0-SNAPSHOT -> 6.2.4

Description of changes
https://github.com/schemaspy/schemaspy/releases/tag/v6.2.4
https://github.com/schemaspy/schemaspy/compare/v6.1.0...v6.2.4
Things done

Built on platform(s)

[x] x86_64-linux
[ ] aarch64-linux
[ ] x86_64-darwin
[ ] aarch64-darwin

For non-Linux: Is sandboxing enabled in nix.conf? (See Nix manual)

[ ] sandbox = relaxed
[ ] sandbox = true

[ ] Tested, as applicable:

NixOS test(s) (look inside nixos/tests)
and/or package tests
or, for functions and "core" functionality, tests in lib/tests or pkgs/test
made sure NixOS tests are linked to the relevant packages

[ ] Tested compilation of all packages that depend on this change using nix-shell -p nixpkgs-review --run "nixpkgs-review rev HEAD". Note: all changes have to be committed, also see nixpkgs-review usage
[x] Tested basic functionality of all binary files (usually in ./result/bin/)
24.11 Release Notes (or backporting 23.11 and 24.05 Release notes)

[ ] (Package updates) Added a release notes entry if the change is major or breaking
[ ] (Module updates) Added a release notes entry if the change is significant
[ ] (Module addition) Added a release notes entry if adding a new NixOS module

[x] Fits CONTRIBUTING.md.

Add a :+1: reaction to pull requests you find important.

Result of nixpkgs-review pr 337020 run on x86_64-linux 1

1 package built:

schemaspy


mitmproxy's TLS fingerprint doesn't match typical web browsers

Cloudflare detects MITM via TLS fingerprinting [1][2]. mitmproxy's traffic is flagged as bot traffic, since the TLS fingerprint doesn't match the User-Agent's expected one. Cloudflare's "bot fight mode" [3] responds with a 403 error response, attempts to run JS and show captchas in response to this.
In cases where the request is a cross-site request (AJAX, etc), there's no sane way to work around this (since you don't even see the captcha in the browser). This makes mitmproxy unusable for sites which load content via cross-site AJAX requests to domains with Cloudflare bot detection enabled.
The ideal fix would be to mirror the client's TLS configuration (cipher suites, etc) in the outgoing connections. Another less perfect (but possibly easier) approach would be hardcoding a specific browser's (e.g., Chrome on Windows) TLS settings, and overriding the User-Agent header to match. This would make traffic indistinguishable from a normal browser.
This may also be an issue with AWS WAF's bot detection [4] and other similar services.
[1] https://malcolm.cloudflare.com/
[2] https://github.com/cloudflare/mitmengine
[3] https://blog.cloudflare.com/super-bot-fight-mode/
[4] https://aws.amazon.com/waf/features/bot-control/

Thanks for raising this! The relevant configuration is all in addons/tlsconfig.py. I'd be happy to merge a PR that makes mitmproxy look more like the current client or a hardcoded browser.

Did a little further research, pasting my notes:
This is a helpful website for detecting your current fingerprint:

https://ja3er.com

JSON end-point: https://ja3er.com/json
My fingerprint with Firefox on OSX:

With no proxy: a75de44db3e351bbd8d38b64c41f444e
With MITMproxy: 652c612a3267ed8a6f6e6c42c46ce534

This is another helpful database of fingerprints (and has a cool feature where it can generate uTLS code to match the fingerprint):

https://tlsfingerprint.io/

Most popular fingerprint (modern Chrome): https://tlsfingerprint.io/id/9c673fd64a32c8dc

It shouldn't be too hard to port the uTLS generated code from this into addons/tlsconfig.py, assuming the Python OpenSSL lib allows customizing all the relevant TLS properties

Another less perfect (but possibly easier) approach would be hardcoding a specific browser's (e.g., Chrome on Windows) TLS settings, and overriding the User-Agent header to match

I think this approach is not acceptable to be applied to general mitmproxy traffic. If this would be the route we take then this needs to be an option that is disabled by default (like the anticache option). I don't want mitmproxy to change any semantics of my HTTP requests without my explicit permission. On the contrary, changing/trying different user-agents through a mitmproxy addon is regular penetration testing business (e.g. to trigger a mobile version and to test for different responses based on UA) and we don't want to lose that control.
This also implies that we can't just use the tls settings of the incoming request. We need to take the UA into account after all add-ons are done.
This also conflicts with connection_strategy = eager.
Also what about HTTP2 and multiple user-agents within the same connection? I assume CloudFlare wouldn't like that at all.

I think this approach is not acceptable to be applied to general mitmproxy traffic. If this would be the route we take then this needs to be an option that is disabled by default (like the anticache option). I don't want mitmproxy to change any semantics of my HTTP requests without my explicit permission.

I think I missed the user agent part in the initial post - @Prinzhorn is right here. We can't change HTTP semantics automatically. I don't mind the TLS configuration as much, here we can experiment.

This also implies that we can't just use the tls settings of the incoming request. We need to take the UA into account after all add-ons are done.

I think the strategy should be either 1) mirroring what the client does or 2) unconditionally hardcoding something that resembles a browser on the first look. Let's not add unnecessary complexity here.
Updating the TLS config is the responsibility of your UA-changing script. 😉

This also conflicts with connection_strategy = eager, right?

For the user-agent yes, but see my previous point. We usually have the ClientHello at this stage.

Also what about HTTP2 and multiple user-agents within the same connection? I assume CloudFlare wouldn't like that at all.

How would you have multiple user agents in the same connection? We don't reuse server connections across clients.
(bringing up all these weird edge cases is good anyways, thanks for that!)

Couldn't any malicious interceptor/mitm/bot do the same thing?

Sure, but they actually would need to know what theyare doing. 😋 Of course it's no perfect security mechanism, but you are increasing your adversary's (development) cost. The false-positive ratio is really negligible if you block a Chrome UA with a cURL TLS fingerprint.

I think the strategy should be either 1) mirroring what the client does or 2) unconditionally hardcoding something that resembles a browser on the first look. Let's not add unnecessary complexity here.
Updating the TLS config is the responsibility of your UA-changing script. wink

I agree and 1 sounds good to me. This would work for the 99% of people that don't update the UA and it sounds rather straight forward on mitmproxy's end (if we have control over all needed bits). We also don't need a database of UA/TLS config etc. (that's the direction my comment was going in, because if we had that in place then it would just be a matter of doing things in the right order). If you need that type of thing you can do it in an add-on as you said.

How would you have multiple user agents in the same connection?

Does something keep an add-on from rotating User-Agents for every request()? User-Agents is HTTP data like any other, so sure I can have different User-Agents for each request within the same HTTP/2 connection in the same way I can have different paths. I guess?

all these weird edge cases

They are my bread and race-conditions are my butter.

Sure, but they actually would need to know what theyare doing. yum Of course it's no perfect security mechanism, but you are increasing your adversary's (development) cost. The false-positive ratio is really negligible if you block a Chrome UA with a cURL TLS fingerprint.

You're right, it will block the masses of script kiddies and outdated tools that don't implement this type of magic.

This is a helpful website for detecting your current fingerprint:
https://ja3er.com

I would avoid this site for that purpose. That site is known to produce provably false results. For example, I just got this right now:
771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49162-49161-49171-49172-156-157-47-53-10,0-23-65281-10-11-35-16-5-51-43-13-45-28,,

That JA3 lists SSLExtension number 10 (supported_groups) and 11 (ec_point_formats) [1], but then it doesnt provide any EllipticCurve or EllipticCurvePointFormat (the last two arguments). I did find servers that would accept this type of malformed JA3, but in general I think its just an error in whatever was used to create the JA3 string. You either need to omit extensions 10 and 11, or provide values for both.

https://iana.org/assignments/tls-extensiontype-values/tls-extensiontype-values.xhtml

This post suggests that shuffling the order of proposed ciphers can be effective. The hypothesis is that since legitimate clients can change their fingerprint at any time, WAFs need to use an explicit denylist of known bad fingerprints. I'm going to play around a bit and see if this works against Cloudflare. I do wonder if the logic is "deny if known undesirable client" instead of "deny if the fingerprint doesn't make sense for the detected client".

This is also a nice approach because you can actually realize it in Python. Its possible to "parrot" a known browser fingerprint (see utls) but it requires a lower-level interface to TLS than Python can provide.

The hypothesis is that since legitimate clients can change their fingerprint at any time, WAFs need to use an explicit denylist of known bad fingerprints.

This is not true, at least not with all servers. For example, the server android.clients.google.com uses a whilelist [1] consisting of the fingerprints for each Android API, with a range of API 24-32, and likely earlier versions as well.

https://github.com/89z/format/blob/v1.21.1/crypto/parse.go#L12-L32

I was unable to reproduce the issue running the main branch of mitmproxy against a cloudflare-fronted domain that I control. I'm using the "Pro" plan. I tried many combinations of rules but I could only get a javascript challenge when:

Enabling "under attack mode"
Explicitly enabling "javascript detections" in the bot settings

Enabling the setting that blocks "Definitely automated" bots did block cURL. I'm pretty confident this was from TLS fingerprinting because if I added --tls-max 1.1 the request was allowed >:)
When using mitmproxy, I couldn't reproduce any block or javascript challenge. Long shot, but @zeen do you have a reproducer?

@r1b Haven't focused on this issue in while, and the original website configuration changed such that it's not an issue. Another website that I think reproduces (no affiliation) is https://mangahub.io/, which also does a POST to https://api.mghubcdn.com/graphql, and I think both the primary domain and API subdomain had different configurations of Cloudflare bot protection, and used to fail with mitmproxy.
We'd worked around the original issue with the original website by using got-scraping (in a custom proxy script, not with mitmproxy, with a fixed Firefox config as the random browser selector was triggering failing configurations).
Regarding "shuffling the order of proposed ciphers", I'd suggest mimicking whatever real browsers do (do real browsers shuffle the order), since I imagine anything else would be a casualty in the scraping bots vs bot detection arms race. I think Cloudflare learns of new configurations automatically, so new or rarely used User-Agents receive the JS challenge, while common User-Agent configurations have sufficient reputation to bypass the challenge.

I just discovered this issue which is also annoying me. I keep mitmdump in between my browser and the internet, logging as much as possible, and there are some sites that regularly do this browser verification.
I think the approach to 'mirror' the client's client hello is the right one but I think this requires to intercept the client hello before it is sent to the server and do some post-processing on it. This should IMO best be done in a callable object that implements a given strategy. It would be nice to have a stub in place to do further work on this, given the amount of extensions that one may want to clone into the server requests, this will be quite a project. I would like to do some experimenting there.

So is it possible to change mitmproxy tls fingerprint?

When will this be fixed?  Can't even use this with ChatGPT anymore!

In cases where I get some type of server web page indicating the site is not going to fulfill my request, I can add the host or ip address to the ignore_hosts list and the sites will load.  I have a list of 5-6 such sites that I routinely add to the ignore_hosts list.  However today for reddit.com adding reddit.com to the ignore_hosts strategy is not working.  I get the below message.  Am I correct in thinking that the connection is being blocked in a way similar to what others are describing here with the TLS fingerprinting?
I have verified that both wireguard and regular mode are blocked.  I am starting mitmproxy as follows:
mitmdump --set block_global=false --mode 'wireguard:/home/wireguard.conf.60002@<IP_ADDRESS>:60002' --ignore-hosts reddit
mitmdump --set block_global=false  --mode regular@12345 --ignore-hosts reddit

Since WG mode uses the ip address instead of hostname I also tested the following to ensure I was ignoring all traffic by matching domain names and ips.
mitmdump --set block_global=false --mode 'wireguard:/home/wireguard.conf.60002@<IP_ADDRESS>:60002' --ignore-hosts reddit
 --ignore-hosts '.*'

All of these variations produce the same result.  Am I correct in assuming that the strategies discussed here and https://github.com/caido/caido/issues/523 can solve the problem or is this a manifestation of a different issue?
Version:
Mitmproxy: 10.2.1
Python:    3.11.2
OpenSSL:   OpenSSL 3.1.2 1 Aug 2023
Platform:  Linux-6.1.0-15-cloud-arm64-aarch64-with-glibc2.36

whoa there, pardner!
Your request has been blocked due to a network policy.
Try logging in or creating an account here to get back to browsing.
If you're running a script or application, please register or sign in with your developer credentials here. Additionally make sure your User-Agent is not empty and is something unique and descriptive and try again. if you're supplying an alternate User-Agent string, try changing back to default as that can sometimes result in a block.
You can read Reddit's Terms of Service here.
if you think that we've incorrectly blocked you or you would like to discuss easier ways to get the data you want, please file a ticket here.
when contacting us, please include your ip address which is: A.B.C.D and reddit account

I also tested the latest code and get the same result.
mitmdump --set block_global=false --mode 'wireguard:/home/wireguard.conf.60002@<IP_ADDRESS>:60002' --ignore-hosts reddit
 --ignore-hosts '.*'

Mitmproxy: 11.0.0.dev (+2, commit 865e113)
Python:    3.11.2
OpenSSL:   OpenSSL 3.1.2 1 Aug 2023
Platform:  Linux-6.1.0-15-cloud-arm64-aarch64-with-glibc2.36

Update on my earlier post: https://github.com/mitmproxy/mitmproxy/issues/4575#issuecomment-1907038328 :
The web application firewall I am encountering for reddit.com is not specific to mitmproxy.  I have performed the following additional tests:
1a) Launch mate based ec2 instance and accessing https://www.reddit.com from Chromium 117.0.5938.132 (Official Build) Fedora Project (64-bit)
1b) Using mate based ec2 instance access https://www.reddit.com from Chrome 121.0.6167.139 (Official Build) (64-bit)
3) Launch debian based ec2 instance and issuing curl -X GET "https://www.reddit.com"
In all scenarios I get the  "whoa there, pardner!" web page indicating that reddit is likely blocking these requests using some type of ip based filtering, and making it very unlikely that they are blocking the browser using fingerprinting alone.

In my case, making mitmproxy.net.tls._create_ssl_context return the context before calling set_cipher_list fixes the issue. So cloudflare is definitely looking at the cypher list.

Something changed again on cloudflare, now I need to remove the call to context.set_alpn_select_callback

Relevant here: https://github.com/fedosgad/mirror_proxy

Maybe this help when being used as an upstream proxy? Seems to be pretty up to date. https://github.com/daijro/hazetunnel

My testing setup:
hazetunnel run --verbose --port 8081
mitmproxy --mode upstream:http://<IP_ADDRESS>:8081--ssl-insecure
curl -k -x "http://<IP_ADDRESS>:8081" -H "User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/115.0" --url "https://tools.scrapfly.io/api/tls"

Works so far, but gets detected by some tests (with and without mitmproxy, so that might be an hazetunnel issue): https://github.com/daijro/hazetunnel/issues/2


Fix translation from AtomicOrdering to MemorySemantics

Fixes #100
FYI @bjorn3

Going over this, it appears that Unordered should not exist in rustc since it's specifically added to LLVM to support the Java memory model which Rust doesn't support.
Also it looks like Consume is commented out in the rustc backend, so we might want to add a comment here as well to promote it to MakeVisible | Acquire as per the page referenced if it ever becomes available.

Going over this, it appears that Unordered should not exist in rustc since it's specifically added to LLVM to support the Java memory model which Rust doesn't support.

It's definitely still created though, right? We don't care about whether or not it's reasonable for rustc to emit it (perhaps file a rustc bug for that), we only care if rustc emits it.

There are intrinsics for the unordered versions of atomic operations, but they aren't used by Atomic*.

It's definitely still created though, right? We don't care about whether or not it's reasonable for rustc to emit it (perhaps file a rustc bug for that), we only care if rustc emits it.

I started filing a rustc ticket under the assumption Rust followed the C++ memory model, turns out it doesn't, so disregard anything I've said about this :-)


Warnings when rebuilding vignettes on my system

Warning messages:
1: Removed 31 rows containing missing values (geom_text).
2: The vignette title specified in \VignetteIndexEntry{} is different from the title in the YAML metadata. The former is "fortedata: Utilities and Examples", and the latter is "fortedata: Working with the data". If that is intentional, you may set options(rmarkdown.html_vignette.check_title = FALSE) to suppress this check.
3: Removed 65 rows containing missing values (geom_text).

fixed.


Code style

Move to src directory.
Python 2/3 compat for examples.
Apply reorder_python_imports, black, and flake8.
Add pre-commit config and run it during tox and travis testing.
Add editorconfig.

what's the benefit of using the src dir?

Given that our dev process generally encourages pip install -e, this makes that more explicit. It ensures tox tests import the right thing. Personally, I find it a lot more organized to have "docs", "src", and "tests" in every project, although I know that's subjective. I already applied this to ItsDangerous and MarkupSafe a while ago.
Here are some other resources:

https://hynek.me/articles/testing-packaging/
https://blog.ionelmc.ro/2014/05/25/python-packaging/
Pytest recommends it: https://docs.pytest.org/en/latest/goodpractices.html#tests-outside-application-code
Ongoing packaging discussion: https://github.com/pypa/packaging.python.org/issues/320
Other frameworks like Pyramid and Twisted switched.


Master ndkbuild

kindly allow me to pull

The 2 branches are kept separate, please do not merge them. Master-ndkbuild is deprecated: the similar functionality could be found under master branch's other-builds directory.
The shader changes are to the source code, please feel free to add separate PR. Is lowp benefiting the performance on certain hardware for performance?
Thank you again! not to merge this one this time.


Remove ms_full_const_get from MeiliSearch::ClassMethods in order to fix superclass mismatch

Since the ms_full_const_get is almost the same as defined in the rails std lib (active_support - active_support/inflector/methods.rb), there is no value in keeping this copy.
Another problem was related to the implementation is about the system was finding initially, the "meilisearch class", not the app one, because the implementation doesn't ensure the entire ancestors' chain.
Fixes #101

bors merge