Third party AMSI dll loaded failure when EnableSvchostMitigationPolicy is set to 1

[Enter feedback here]
This policy: Enable Svchost.exe mitigation policies will cause performance issues on Windows Server 2019 with Third party AV. We got a case reported by Symantec where issue comes in when symAMSI.dll failed to be loaded due to it is not signed by Microsoft, this dll load occurs in many places which consumed CPU cycles.  SymAMSI.dll is probably Symantec’s implementation library talking with our amsi.dll.
Symantec published an public KB saying this GPO needs to be turned off for their products to work.
https://knowledge.broadcom.com/external/article/197096
Apart from Symantec, AV like Sophos also reported the policy not working well with their products.
Can we add some additional statement into this GPO saying it might cause issues with 3rd party AV due to their AMSI implementation is not signed by Microsoft?

Document Details
⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

ID: d4cb845a-e2f6-0bcb-ea4b-7b3ab8365f2a
Version Independent ID: 4d2f43a5-2c93-c4b3-64ff-85e48e92092a
Content: Policy CSP - ServiceControlManager - Windows Client Management
Content Source: windows/client-management/mdm/policy-csp-servicecontrolmanager.md
Product: w10
Technology: windows
GitHub Login: @Heidilohr
Microsoft Alias: dansimp

@crown21. I also read the documensite provided by you. Let Microsoft AMSI analysis will test whether  SYMAMSI.dll will let requirements o AMSI.

Ref. Pull Request #8322 for the addition of an important note regarding this policy.


How to apply Grad-CAM on YOLOv5?

Hi,
I am quite new to XAI. Is it possible to apply Grad-CAM instead of EigenCAM on YOLOv5? I have faced an error when I am trying to use Grad-CAM on YOLOv5.
This is the code:

This is the error:

Hi,
Grad-CAM isn't supported for YOLO5 because the gradient computation isn't exposed there.
Fortunately we can use gradient free methods, and have a tutorial exactly about this for YOLO5:
https://github.com/jacobgil/pytorch-grad-cam/blob/master/tutorials/EigenCAM for YOLO5.ipynb


Percentage discount getting save more than 100 #6554

Issue Reference
#6554
Description
Percentage discount validation added as previously admin was able to added percentage more than 100.

@papnoisanjeev
Not working properly, please find the screenshot Here

@papnoisanjeev
The page should focus on the error and the rest should be as it is. if there is any warning message for the percentage amount.


chore: update dsc and dsc-ui

Must still be tested, new versions:

Dataspace Connector 6.1.0
Dataspace Connector UI 8.3.2

DSC UI has changed its access-URL, works for me when the new URL is accessed.


support for chunk style encoding for streaming out http responses

Currently, we do not support chunk encoding for streaming out responses.

So this one is going to need a little thought.  One issue I ran into is if you're just piping a response from a client connection to a server connection, because the client is auto de-chunking the data, we need to re-chunk it in the server connection.  But this is really inefficient, so it would be far better if we could just pipe the raw data through which already contains the chunk headers.
I think we need to be able to make the explicit decision whether we want the codec to handle chunking/de-chunking transparently or whether we want it to pass data through verbatim.


"protect" specific folders within a repo

As the project grows, it might be good to ‘protect’ specific folders within a repo, the way the GTN protects subfolders and also to give specific powers to specific groups (e.g. @nomadscientist  would like Merge/review powers on specifically the single-cell subdomain folders, but not other folders)

Yep - and Cameron Hyde @neoformit should have permissions on the new subdomains folder


Implement the EKS Update Resource for NodeGroups

What problem are you facing?
Currently I cannot see if a NodegroupUpdate failed and I have no knowledge about previous updates. If an update fails the resource updated goes back to its previous configuration and into the Active state. From the provider point of view nothing changed at AWS and it will try to reconcile the Nodegroup again, triggering a new update and most probably run into the same Problem.
How could Crossplane help solve your problem?
I would like to add an Array of Updates to the NodeGroupObservation. Each of the Updates is supposed to be of type eks.Update. The nodegroup.Controller is responsible for writing the Updates to that array. Like this failing updates and their reason are visible to the user.
I am also open for other ideas on how to make these objects or this information available. If a full list is too long, maybe only the latest Update and it's state can be included in the Observation.

implemented with #1469


help with args

get help about a specific command

Check to make sure that you have not accidentally left any content inside of the todo.json file.
If the todo.json file is for any reason updated, the test.py file must be too for the check to pass.
https://github.com/legit-programming/Todo-App/pull/15/commits/5d2ecab0b8c77da03c1664c701c84a26d2f8fa07


[BUG]: Game crashes on custom skills selected print

Description of the bug/crash
Sometimes when I click on the ready to print - printing pod the game freezes and than crashes after 10 minutes.
Sometimes I can enter the printing menu and select a dupe, so, when editing the skills of a dupe, the game crashes on "print"-confirmation.
Steps To Reproduce

Wait till print is ready
select a dupe
select some skills
print

Player.log
Player-prev.log
mods.json

verstion 5.0.9 has been released, there I added a prevention check for the crash in the log and added explicit compatibility with always3interests


Pkgconfig install

This PR is related to the issue #9

[x] Add CMake config file to generate .pc file for pkg-config
[x] Modify CMakeLists.txt with the config file.

After installing the uvgRTP with pkg-config, uvgRTP can be smoothly used by other projects within their build systems with pkg-config. For the uvgRTP itself, the compile can be done via the below command.
g++ main.cc `pkg-config --libs --cflags uvgrtp`

Hi @jheo4
I quickly tested this and at least on my machine, pkg_search_module(CRYPTOPP libcrypto++) did not find Crypto++. Changing it to pkg_search_module(CRYPTOPP libcryptopp) did find the library but then there seems to be an issue with the linker:
examples >> g++ configuration.cc `pkg-config --libs --cflags uvgrtp`
/usr/bin/ld: error: /usr/local/include: read: Is a directory
collect2: error: ld returned 1 exit status

examples >> pkg-config --libs --cflags uvgrtp
-I/usr/local/include /usr/local/include -L/usr/local/lib -luvgrtp -lpthread -L/usr/local/lib\;-lcryptopp

Am I using pkg-config incorrectly or what could be the issue here?
Unfortunately right now I cannot dedicate more time for this so I'll get back to you next week.

Hi @jheo4! What is the status of this PR? We recently had a big update to our CMake system. Do these changes satisfy you, or do you still have interest to work on this PR?

We have decided to try to get pkg-config working for the next release, since the release is mostly focused on the build system. I will see if this PR could be used.

For me, this branch just works. I will try to merge it and fix issues afterwards.

@jrsnen Hi Joni. Sorry for the quiet. It has been quite blasting for me. I checked your comments (thanks for that!) and tested the latest commit of uvgRTP on the clean-slate containers of Ubuntu 18.04 and 20.04. Then, I faced an issue and also resolved it.
I just described the details in Issue #77. Could you check that?


After/AfterKey dictionary types in  Composite Aggregation/Aggregate

Elastic.Clients.Elasticsearch version: 8.13.10
Elasticsearch version: 8.11
.NET runtime version: 8.0
Operating system version:
Description of the problem including expected versus actual behavior:
CompositeAggregate has an IReadOnlyDictionary<string, FieldValue>? AfterKey property.
CompositeAggregation has an IDictionary<Field, FieldValue>? After property.
Should these dictionaries have the same <string, FieldValue> types instead?
Steps to reproduce:
1.
2.
3.
Expected behavior
A clear and concise description of what you expected to happen.
Provide ConnectionSettings (if relevant):
Provide DebugInformation (if relevant):

Hi @gpetrou,
the generator flattens alias types like Field in responses as that makes usage easier in most cases. This place is special as that prevents us from passing the AfterKey dictionary directly to the After value for pagination.
I'll see what I can do here.


Fix: base url getting mutated

The base URL was getting mutated with +=. Using differentent variables for baseUrl & url.

Glad I could contribute, and thanks for this package :) Can you please publish this update to npm when you have some time?

Happy to know it's of some use. I've published the changes, they should propagate to the public NPM directory within a day.


from future import annotations breaks Parallelizable<>Collect

Me again,
I am parallelizing some stuff and ran some issues with from future import annotations. There was already an issue about this back in 2023: #91 that got fixed, but I found that it still breaks the Parallelizable<>Collect block.
Current behavior
Parallelizable[Dict[str,Any]] outputs the whole list instead of a single entry.
Stack Traces
Using pre-1.0.0 Polars integration -- we will stop supporting this in Hamilton 2.0, so please upgrade your version of polars! Current version: 0.20.0, minimum required version: 1.0.0.

********************************************************************************
> timestamp_2 [__main__.clip_from_clips__PARALLEL()] encountered an error      <
> Node inputs:
{'clip_from_clips': "[{'clip_id': 1000, 'timestamp_1': Timestamp('2024-..."}
********************************************************************************
Traceback (most recent call last):
  File "/home/jfrank/miniconda3/envs/oxedl_data_ingester/lib/python3.10/site-packages/hamilton/execution/graph_functions.py", line 230, in dfs_traverse
    result = node_(**kwargs)
  File "/home/jfrank/miniconda3/envs/oxedl_data_ingester/lib/python3.10/site-packages/hamilton/node.py", line 249, in __call__
    return self.callable(*args, **kwargs)
  File "/home/jfrank/miniconda3/envs/oxedl_data_ingester/lib/python3.10/site-packages/hamilton/function_modifiers/expanders.py", line 836, in extractor_fn
    f"It only produced {list(dt.keys())}"
AttributeError: 'list' object has no attribute 'keys'
timestamp_2
Traceback (most recent call last):
  File "/home/jfrank/miniconda3/envs/oxedl_data_ingester/lib/python3.10/site-packages/hamilton/execution/executors.py", line 116, in base_execute_task
    results = execute_subdag(
  File "/home/jfrank/miniconda3/envs/oxedl_data_ingester/lib/python3.10/site-packages/hamilton/execution/graph_functions.py", line 284, in execute_subdag
    dfs_traverse(final_var_node, dep_type)
  File "/home/jfrank/miniconda3/envs/oxedl_data_ingester/lib/python3.10/site-packages/hamilton/execution/graph_functions.py", line 230, in dfs_traverse
    result = node_(**kwargs)
  File "/home/jfrank/miniconda3/envs/oxedl_data_ingester/lib/python3.10/site-packages/hamilton/node.py", line 249, in __call__
    return self.callable(*args, **kwargs)
  File "/home/jfrank/miniconda3/envs/oxedl_data_ingester/lib/python3.10/site-packages/hamilton/function_modifiers/expanders.py", line 836, in extractor_fn
    f"It only produced {list(dt.keys())}"
AttributeError: 'list' object has no attribute 'keys'
Exception executing task timestamp_2, with nodes: ['timestamp_2']
Traceback (most recent call last):
  File "/home/jfrank/miniconda3/envs/oxedl_data_ingester/lib/python3.10/site-packages/hamilton/execution/executors.py", line 116, in base_execute_task
    results = execute_subdag(
  File "/home/jfrank/miniconda3/envs/oxedl_data_ingester/lib/python3.10/site-packages/hamilton/execution/graph_functions.py", line 284, in execute_subdag
    dfs_traverse(final_var_node, dep_type)
  File "/home/jfrank/miniconda3/envs/oxedl_data_ingester/lib/python3.10/site-packages/hamilton/execution/graph_functions.py", line 230, in dfs_traverse
    result = node_(**kwargs)
  File "/home/jfrank/miniconda3/envs/oxedl_data_ingester/lib/python3.10/site-packages/hamilton/node.py", line 249, in __call__
    return self.callable(*args, **kwargs)
  File "/home/jfrank/miniconda3/envs/oxedl_data_ingester/lib/python3.10/site-packages/hamilton/function_modifiers/expanders.py", line 836, in extractor_fn
    f"It only produced {list(dt.keys())}"
AttributeError: 'list' object has no attribute 'keys'
Exception submitting task timestamp_2, with nodes: ['timestamp_2']
Traceback (most recent call last):
  File "/home/jfrank/miniconda3/envs/oxedl_data_ingester/lib/python3.10/site-packages/hamilton/execution/executors.py", line 381, in run_graph_to_completion
    submitted = task_executor.submit_task(next_task)
  File "/home/jfrank/miniconda3/envs/oxedl_data_ingester/lib/python3.10/site-packages/hamilton/execution/executors.py", line 165, in submit_task
    result = base_execute_task(task)
  File "/home/jfrank/miniconda3/envs/oxedl_data_ingester/lib/python3.10/site-packages/hamilton/execution/executors.py", line 131, in base_execute_task
    raise e
  File "/home/jfrank/miniconda3/envs/oxedl_data_ingester/lib/python3.10/site-packages/hamilton/execution/executors.py", line 116, in base_execute_task
    results = execute_subdag(
  File "/home/jfrank/miniconda3/envs/oxedl_data_ingester/lib/python3.10/site-packages/hamilton/execution/graph_functions.py", line 284, in execute_subdag
    dfs_traverse(final_var_node, dep_type)
  File "/home/jfrank/miniconda3/envs/oxedl_data_ingester/lib/python3.10/site-packages/hamilton/execution/graph_functions.py", line 230, in dfs_traverse
    result = node_(**kwargs)
  File "/home/jfrank/miniconda3/envs/oxedl_data_ingester/lib/python3.10/site-packages/hamilton/node.py", line 249, in __call__
    return self.callable(*args, **kwargs)
  File "/home/jfrank/miniconda3/envs/oxedl_data_ingester/lib/python3.10/site-packages/hamilton/function_modifiers/expanders.py", line 836, in extractor_fn
    f"It only produced {list(dt.keys())}"
AttributeError: 'list' object has no attribute 'keys'
-------------------------------------------------------------------
Oh no an error! Need help with Hamilton?
Join our slack and ask for help! https://join.slack.com/t/hamilton-opensource/shared_invite/zt-2niepkra8-DGKGf_tTYhXuJWBTXtIs4g
-------------------------------------------------------------------

Traceback (most recent call last):
  File "/home/jfrank/code/oxedl_data_ingester/TODO/bug_future_anntoations.py", line 88, in <module>
    result = dr_serial.execute(inputs=inputs, final_vars=outputs)["collect_parallel"]
  File "/home/jfrank/miniconda3/envs/oxedl_data_ingester/lib/python3.10/site-packages/hamilton/driver.py", line 596, in execute
    raise e
  File "/home/jfrank/miniconda3/envs/oxedl_data_ingester/lib/python3.10/site-packages/hamilton/driver.py", line 586, in execute
    outputs = self.raw_execute(_final_vars, overrides, display_graph, inputs=inputs)
  File "/home/jfrank/miniconda3/envs/oxedl_data_ingester/lib/python3.10/site-packages/hamilton/driver.py", line 715, in raw_execute
    raise e
  File "/home/jfrank/miniconda3/envs/oxedl_data_ingester/lib/python3.10/site-packages/hamilton/driver.py", line 704, in raw_execute
    results = self.graph_executor.execute(
  File "/home/jfrank/miniconda3/envs/oxedl_data_ingester/lib/python3.10/site-packages/hamilton/driver.py", line 234, in execute
    executors.run_graph_to_completion(execution_state, self.execution_manager)
  File "/home/jfrank/miniconda3/envs/oxedl_data_ingester/lib/python3.10/site-packages/hamilton/execution/executors.py", line 387, in run_graph_to_completion
    raise e
  File "/home/jfrank/miniconda3/envs/oxedl_data_ingester/lib/python3.10/site-packages/hamilton/execution/executors.py", line 381, in run_graph_to_completion
    submitted = task_executor.submit_task(next_task)
  File "/home/jfrank/miniconda3/envs/oxedl_data_ingester/lib/python3.10/site-packages/hamilton/execution/executors.py", line 165, in submit_task
    result = base_execute_task(task)
  File "/home/jfrank/miniconda3/envs/oxedl_data_ingester/lib/python3.10/site-packages/hamilton/execution/executors.py", line 131, in base_execute_task
    raise e
  File "/home/jfrank/miniconda3/envs/oxedl_data_ingester/lib/python3.10/site-packages/hamilton/execution/executors.py", line 116, in base_execute_task
    results = execute_subdag(
  File "/home/jfrank/miniconda3/envs/oxedl_data_ingester/lib/python3.10/site-packages/hamilton/execution/graph_functions.py", line 284, in execute_subdag
    dfs_traverse(final_var_node, dep_type)
  File "/home/jfrank/miniconda3/envs/oxedl_data_ingester/lib/python3.10/site-packages/hamilton/execution/graph_functions.py", line 230, in dfs_traverse
    result = node_(**kwargs)
  File "/home/jfrank/miniconda3/envs/oxedl_data_ingester/lib/python3.10/site-packages/hamilton/node.py", line 249, in __call__
    return self.callable(*args, **kwargs)
  File "/home/jfrank/miniconda3/envs/oxedl_data_ingester/lib/python3.10/site-packages/hamilton/function_modifiers/expanders.py", line 836, in extractor_fn
    f"It only produced {list(dt.keys())}"
AttributeError: 'list' object has no attribute 'keys'

Steps to replicate behavior
from __future__ import annotations

from beartype.typing import Any, Dict, List
from hamilton.htypes import Parallelizable, Collect
from hamilton.function_modifiers import config, extract_fields
import pandas as pd

@config.when(get_annotations="parallel")
def parallelize_clips__PARALLEL(clips: pd.DataFrame) -> Parallelizable[Dict[str,Any]]:
    _clips_stack = []
    for _,row in clips.iterrows():
        _clips_stack.append(row.to_dict())

    for _clip in _clips_stack:
        yield _clip

@extract_fields(
    {
        "timestamp_1": pd.Timestamp,
        "timestamp_2": pd.Timestamp,
    }
)
@config.when(get_annotations="parallel")
def clip_from_clips__PARALLEL(
     parallelize_clips: Dict[str,Any]
) -> Dict[str, Any]:
    return parallelize_clips

def something(timestamp_1:pd.Timestamp, timestamp_2:pd.Timestamp)->pd.Timestamp:
    return timestamp_2 - timestamp_1

@config.when(get_annotations="parallel")
def combine_parallel__PARALLEL(clip_from_clips:Dict[str,Any], something:pd.Timestamp)->Dict[str,Any]:
    return {
        "clip":clip_from_clips,
        "time_delta" : something
        }

@config.when(get_annotations="parallel")
def collect_parallel__PARALLEL(combine_parallel:Collect[Dict[str,Any]])->List[Dict[str,Any]]:
    return combine_parallel

if __name__ == "__main__":
    import pandas as pd
    from hamilton import driver
    from hamilton.execution import executors
    import __main__

    df = pd.DataFrame([{'clip_id': 1000,
    'timestamp_1': pd.Timestamp('2024-08-30 07:49:14.962772+0000', tz='UTC'),
    'timestamp_2': pd.Timestamp('2024-08-30 07:49:14.962859+0000', tz='UTC'),
    'path': 'some_path_1',
    'other_data': 'other_data_1'},
    {'clip_id': 2000,
    'timestamp_1': pd.Timestamp('2024-08-30 07:49:14.962864+0000', tz='UTC'),
    'timestamp_2': pd.Timestamp('2024-08-30 07:49:14.962866+0000', tz='UTC'),
    'path': 'some_path_2',
    'other_data': 'other_data_2'},
    {'clip_id': 3000,
    'timestamp_1': pd.Timestamp('2024-08-30 07:49:14.962868+0000', tz='UTC'),
    'timestamp_2': pd.Timestamp('2024-08-30 07:49:14.962869+0000', tz='UTC'),
    'path': 'some_path_3',
    'other_data': 'other_data_3'},])

    inputs = {
        "clips": df,
    }

    dr_serial = (
        driver.Builder()
        .with_modules(__main__)
        .with_config({"get_annotations":"parallel"})
        .enable_dynamic_execution(allow_experimental_mode=True)
        .with_local_executor(executors.SynchronousLocalTaskExecutor())
        # .with_remote_executor(executors.MultiProcessingExecutor(max_tasks=5))
        .build()
    )

    outputs = [
    "collect_parallel"
    ]

    result = dr_serial.execute(inputs=inputs, final_vars=outputs)["collect_parallel"]
    print(len(result))
    print(result[0])

Library & System Information

Linux Ubuntu 20.04
Python 3.10.14
sf-hamilton 1.74.0
sf-hamilton-sdk 0.6.0

Expected behavior
Can used from __future__ import annotations and Parallelizable<>Collect in same module.
Additional context
Also a nice to have, but really low priority thing would be to have something like
extract_fields({"key1": type 1, "key1": type 2,})
def f() -> Parallelizable[Dict[str,Any]]:
    yield  for _list_of_parallel_things_dictionary

Might be worth mentioning your python version.

Sorry, added that in there.

Simpler repro, also python3.10:
from __future__ import annotations

from hamilton.htypes import Parallelizable, Collect

def foo() -> Parallelizable[int]:
    yield 1
    yield 2
    yield 3

def bar(foo: int) -> int:
    return foo + 1

def baz(bar: Collect[int]) -> int:
    return sum(bar)

if __name__ == "__main__":
    from hamilton import driver
    from hamilton.execution import executors
    import __main__

    dr_serial = (
        driver.Builder()
        .with_modules(__main__)
        .enable_dynamic_execution(allow_experimental_mode=True)
        .with_local_executor(executors.SynchronousLocalTaskExecutor())
        .build()
    )

    outputs = [
        "baz"
    ]

    dr_serial.display_all_functions("./future_annotations.png")
    result = dr_serial.execute(final_vars=outputs)[outputs[0]]
    print(result)

will dig in soon

Solved this in #1113!


htmx todo list sample

I was interested in using this for my own htmx project and noticed you had an issue outstanding for adding a sample (#47)
This implementation renders the entire Todo table after every modification. You might want to only render the modified Todo but this would mean client state would get out of sync with the server.

Thank you for taking a look at this. I agree with your comments and I'm happy to address them. Although it's the holiday season and may not get chance until the new year. Happy for you to take the reins if this is something you're eager for.
All the best.


1.0.0-beta.6 compatibility with latest stable Ktor

I tried the 1.0.0-beta.6 (mainly because I need to set maxBitmapDecodeSize) but I am getting a Could not find io.ktor:ktor-client-core:3.0.0-beta-2-eap-939. compile error.
The project is using a stable Ktor version (2.3.12 right now). Does it really make sense for Kamel to use EAP versions of its own dependencies?

Sorry. It's just too much work for me to maintain a separate build with and without wasm at least on the beta. If you want to make a fork with wasm removed and on stable ktor, just make a pr and I can publish it for you. I'm keeping the pre 1.0.0 releases on stable ktor. I also didn't expect 3.0.0 beta 2 to take this long to be released. They were saying two months ago it would be out soon. 1.0.0 is basically being held up by ktor

@harry248 looks like next week the next ktor release should be published. https://kotlinlang.slack.com/archives/C0A974TJ9/p1719388699260549
I'll update it as soon as it's out. But it's not worth the effort if it's coming out next week imo

@harry248 https://github.com/Kamel-Media/Kamel/releases/tag/v1.0.0-beta.7 has 3.0.0 beta 2 from maven central now


Allow for model uuids to be used with resources

Type of change
Changing existing schema
Description
Add uuid as a computed value of the juju_model resource, it's already available for datasource juju_model. Then allow the model attribute to be a uuid or a name in other juju resources. With name being deprecated. This will allow for removing the model uuid cache, facilitate fixing #504 and encouraging best practices with terraform.
Details
diff --git a/internal/provider/resource_model.go b/internal/provider/resource_model.go
@@ -73,6 +74,13 @@ func (r *modelResource) Schema(_ context.Context, _ resource.SchemaRequest, resp
                                        stringplanmodifier.RequiresReplace(),
                                },
                        },
+                       "uuid": schema.StringAttribute{
+                               Description: "The uuid of the model",
+                               Computed:    true,
+                               PlanModifiers: []planmodifier.String{
+                                       stringplanmodifier.UseStateForUnknown(),
+                               },
+                       },

The description of "model" for all other resources having on, would be along the lines of:
@@ -109,8 +109,9 @@ func (r *machineResource) Schema(_ context.Context, req resource.SchemaRequest,
                                },
                        },
                        ModelKey: schema.StringAttribute{
-                               Description: "The Juju model in which to add a new machine.",
-                               Required:    true,
+                               Description: "The uuid of the Juju model in which to add a new machine. Use of the model name is DEPRECATED," +
+                                       " though still allowed. Support for use of model name will be removed at a future date.",
+                               Required: true,
                                PlanModifiers: []planmodifier.String{
                                        stringplanmodifier.RequiresReplace(),
                                },

Example terraform plan
resource "juju_model" "model" {
  name = "testmodel"
}

resource "juju_application" "application" {
  name = "my-application"

  model = juju_model.model.uuid

  charm {
    name     = "ubuntu"
    channel  = "edge"
    revision = 24
  }
}

This looks like a good middleground between using model names vs model UUIDs.
When we implement this change I'd also like us to consider whether we can disambiguate model names by providing the model owner in queries, fully resolving https://github.com/juju/terraform-provider-juju/issues/504 even in cases where a model name is used. E.g. When a model name is detected we could assume the model owner is the user making the Juju connection. Though we should verify that assumption with some existing places where the provider is used. If that assumption is faulty then we can keep the existing behaviour as is.

This change deprecate model names from non model resources, thus it's not worth the effort to do handle combined owner/model names for juju_model resources in #504. Doing so will also encourage behavior we're trying to avoid. We want the resources to be linked with dependencies.
You can add "owner" to the juju_model datasource and update that to find the model uuid based off the model name and owner. You'd want to use the data source in the scenario in #504, you're using a model which has already been create. The juju_model resource assume the current user owns and creates the model.

Approved.


Add buffer alloc health metrics

Task/Issue URL: https://app.asana.com/0/0/1201752109049661/f
Description
In order to monitor the impact of the upcoming memory leak fixes, we are instrumenting the AppTP buffer allocations to be sent in breakage reports.
Steps to test this PR
Feature 1

[ ] Install from this branch
[ ] Enable AppTP
[ ] Go to diagnostics screen
[ ] Force some traffic through the VPN (eg. speed test?)
[ ] Verify the buffer allocations increase
[ ] click on BAD HEALTH
[ ] Wait until bad health happens
[ ] Verify the numberAllocations is included in the badHealthData object of the m_atp_health_monitor_report pixel

Current dependencies on/for this PR:

develop

PR #1726   (this PR)

This comment was auto-generated by Graphite.


Removing MobilePacketCore as service already decommissioned

Choose a PR Template
Switch to "Preview" on this description then select one of the choices below.
Click here to open a PR for a Data Plane API.
Click here to open a PR for a Control Plane (ARM) API.

Hello Reviewers,
MobilePacketCore service is already decommissioned and same has been updated in Manifest. Please provide exception for breakingchanges and approve the changes.

/azp run

@suhasaraos can you please approve this PR for merging to main?


Web module

Package stickyfill as web module, emulating https://github.com/webmodules/stickyfill

This was intended for my fork. Closing


Key Authentication broken in 0.10.3 and 0.11.0

Summary
Providing correct apikey gives HTTP 401 and response
{
"message": "No API key found in request"
}
Steps To Reproduce

http POST localhost:8001/apis name=httpbin uris=/products upstream_url=http://httpbin.org
http POST localhost:8001/apis/httpbin/plugins name=key-auth
http POST localhost:8001/consumers username=tieske
http POST localhost:8001/consumers/tieske/key-auth key=big_secret
http GET http://localhost:8000/products apikey:big_secret throws 401 with "message": "No API key found in request"

Additional Details & Logs

Kong version ($ kong version) - 0.10.3 and 0.11.0
Kong debug-level startup logs ($ kong start --vv)
Kong error logs (<KONG_PREFIX>/logs/error.log)
Kong configuration (registered APIs/Plugins & configuration file)
Operating System - Ubuntu 16.04. Kong running in Docker

Kong has been installed using docker. Using postgres which has been installed using docker.

@prem911 you may want to check the usage of http (the httpie application). By default, credentials are read from the query string, or request headers; you seem to be attempting to send creds via a body k/v pair, but GET requests typically do not send request bodies. May I suggest you try sending the key as a request header, or query string param? Please consult the httpie docs in this case. Thanks!

Thanks @p0pr0ck5
Maybe I was not clear in my steps. Let me explain it and use curl instead of httpie.
Global key-auth plugin
curl -i http://kong:8001/plugins/7ac1001a-1112-45ee-bc85-2f11ead0e2b3

{"created_at":1504879360000,"config":{"hide_credentials":false,"anonymous":"","key_in_body":false,"key_names":["function"]},"id":"7ac1001a-1112-45ee-bc85-2f11ead0e2b3","enabled":true,"api_id":"d75616f5-2f19-425e-8164-7a53d6f1ee80","name":"key-auth"}

Note that key_in_body is false

API
curl -i http://kong:8001/apis/httpbin

{"created_at":1504878764000,"strip_uri":true,"id":"d75616f5-2f19-425e-8164-7a53d6f1ee80","hosts":["example.com"],"name":"httpbin","http_if_terminated":false,"https_only":false,"retries":5,"uris":["\/products"],"preserve_host":false,"upstream_connect_timeout":60000,"upstream_read_timeout":60000,"upstream_send_timeout":60000,"upstream_url":"http:\/\/httpbin.org"}
API and plugin
curl -i http://kong:8001/apis/httpbin/plugins

{"total":1,"data":[{"created_at":1504879360000,"config":{"hide_credentials":false,"anonymous":"","key_in_body":false,"key_names":["function"]},"id":"7ac1001a-1112-45ee-bc85-2f11ead0e2b3","enabled":true,"api_id":"d75616f5-2f19-425e-8164-7a53d6f1ee80","name":"key-auth"}]}
Consumer
curl -i http://kong:8001/consumers/prem

{"created_at":1504879429000,"username":"prem","id":"61a4993d-515d-4cab-a920-b52a7b297026"}
Consumer's key-auth
curl -i http://kong:8001/consumers/prem/key-auth

{"total":1,"data":[{"id":"50f1495e-3e8d-43ce-b360-c6a7941cc7ee","created_at":1504879492000,"key":"key1","consumer_id":"61a4993d-515d-4cab-a920-b52a7b297026"}]}

So, we have the api /products with a key-auth plugin enabled and a consumer with the same plugin.

API TEST
curl -i http://kong:8000/products?apikey=key1

results in
{"message":"No API key found in request"}
I have done all the steps as per the documentation. Let me know if I have missed something.
This is too big an error to be missed out by Kong and that too in 2 releases.

Hi.
I am using Kong 0.11.0 and key-auth plugin work as expected. I am
finding a little bit strange that when you do:
$ curl -i http://kong:8001/plugins/7ac1001a-1112-45ee-bc85-2f11ead0e2b3
You have this "key_names":["function"]} in you return. It seems that the
parameter name that holds the key is missing.
Look at my test in localhost. I have the admin-api configured with
key-auth for access through port 8000.
$ curl --silent -X GET http://localhost:8001/apis/admin-api/plugins | jq '.'
{
  "total": 2,
  "data": [
    {
      "created_at":<PHONE_NUMBER>000,
      "config": {
        "key_in_body": false,
        "anonymous": "",
        "key_names": [
          "apikey"
        ],
        "hide_credentials": true
      },
      "id": "ea194ac0-1533-4c92-86c4-7b7cf8ab5456",
      "enabled": true,
      "api_id": "70e215d3-73a9-4b03-839f-417e4f1ca524",
      "name": "key-auth"
    },
}
Test #1 - Access without key
$ curl -X GET http://localhost:8000/admin-api
{"message":"No API key found in request"}
Test #2 - Access with wrong key
$ curl --silent -X GET http://localhost:8000/admin-api -H "apikey: teste"
{"message": "Invalid authentication credentials"}
Test #3 - Access with key in header
$ curl --silent -X GET http://localhost:8000/admin-api -H "apikey:
teste123" | jq '.'
{
  "version": "0.11.0",
  "plugins": {
    "enabled_in_cluster": [
      "key-auth",
Test #4 - Access with key in URI parameter
$ curl --silent -X GET http://localhost:8000/admin-api?apikey=teste123 |
jq '.'
{
  "version": "0.11.0",
  "plugins": {
Best regards.
Guilherme
On 09/09/2017 03:13 AM, Premananda Mohapatra wrote:

Thanks @p0pr0ck5 https://github.com/p0pr0ck5
Maybe I was not clear in my steps. Let me explain it and use curl
instead of httpie.
Global key-auth plugin
curl -i http://kong:8001/plugins/7ac1001a-1112-45ee-bc85-2f11ead0e2b3
|{"created_at":1504879360000,"config":{"hide_credentials":false,"anonymous":"","key_in_body":false,"key_names":["function"]},"id":"7ac1001a-1112-45ee-bc85-2f11ead0e2b3","enabled":true,"api_id":"d75616f5-2f19-425e-8164-7a53d6f1ee80","name":"key-auth"}|
Note that key_in_body is false

API
curl -i http://kong:8001/apis/httpbin
|{"created_at":1504878764000,"strip_uri":true,"id":"d75616f5-2f19-425e-8164-7a53d6f1ee80","hosts":["example.com"],"name":"httpbin","http_if_terminated":false,"https_only":false,"retries":5,"uris":["/products"],"preserve_host":false,"upstream_connect_timeout":60000,"upstream_read_timeout":60000,"upstream_send_timeout":60000,"upstream_url":"http://httpbin.org"}|
API and plugin
curl -i http://kong:8001/apis/httpbin/plugins
|{"total":1,"data":[{"created_at":1504879360000,"config":{"hide_credentials":false,"anonymous":"","key_in_body":false,"key_names":["function"]},"id":"7ac1001a-1112-45ee-bc85-2f11ead0e2b3","enabled":true,"api_id":"d75616f5-2f19-425e-8164-7a53d6f1ee80","name":"key-auth"}]}|
Consumer
curl -i http://kong:8001/consumers/prem
|{"created_at":1504879429000,"username":"prem","id":"61a4993d-515d-4cab-a920-b52a7b297026"}|
Consumer's key-auth
curl -i http://kong:8001/consumers/prem/key-auth
|{"total":1,"data":[{"id":"50f1495e-3e8d-43ce-b360-c6a7941cc7ee","created_at":1504879492000,"key":"key1","consumer_id":"61a4993d-515d-4cab-a920-b52a7b297026"}]}|
So, we have the api /products with a key-auth plugin enabled and a
consumer with the same plugin.

API TEST
curl -i http://kong:8000/products?apikey=key1
results in
|{"message":"No API key found in request"}|
I have done all the steps as per the documentation. Let me know if I
have missed something.
This is too big an error to be missed out by Kong and that too in 2
releases.
—
You are receiving this because you are subscribed to this thread.
Reply to this email directly, view it on GitHub
https://github.com/Mashape/kong/issues/2874#issuecomment-328257563,
or mute the thread
https://github.com/notifications/unsubscribe-auth/AQ1jGXAKWUak9w-_go00tAR4sCVzIxNkks5sgixygaJpZM4PRReU.

Thanks @macedogm Not sure how "function" was inserted. It may be done by Kong-dashboard.
However on changing it apikey, the apis have started working like charm.
Once again, thanks a lot and have a great day!

@macedogm Thank you for giving your insight and helping on here!

It may be done by Kong-dashboard.

That is very likely indeed.


Figure out standards for attribution

Our attribution is a little all over the place. Let's define certain standards for our own demos with web map

Just map with scarab
Tangram map with search
Tangram map with search and routing
More examples?

This probably needs to take priority, who should we talk @migurski ?

@rmglennon did you have any thoughts on this?

We decided to follow  https://mapzen.com/rights/ , we can change it whenever we feel need.

Dave R, @migurski, and I were doing some work in this area, and we should pick up again. In terms of what exactly goes on the map, @randymeech had suggested that Mapzen be in the map attribution if our web services are being used.
For #162, I'd remove the "Powered by" part of the attribution on a map, though (even though it is listed on the /rights page). Leaflet did this a few years ago (search for "powered by leaflet" for some GitHub issues and Google threads) to simplify.

@rmglennon we can make that the out of the box implementation for mobile too.

closed via 862b7cab9ce0c8250ccdb057426038ceb50b60ee


chore: update CLI docs description

Overview
Update CLI docs description

Summary by CodeRabbit

Documentation

Updated the description of Rollkit across various files to emphasize its new positioning as the first sovereign rollup framework, simplifying the launch of customizable blockchains akin to deploying smart contracts.

looks like you need to run the make command to re-gen the CLI docs.
also update PR title to chore: update CLI docs description

Looks good.
I was thinking that we compare actions: "as easily as deploying a smart contract."

Just making it consistent with the positioning on website. I think we can revisit adding the word deploying in the future though,


Increasing the project data dump link access time in email from an hour to 12 or 24 hours

It took over 30 minutes to create the csv file for Planet Four: Terrains. With the link only being active for an hour in email, especially as the time becomes longer to generate, I think it would help if the data link in email was open for more than hour.
If it 1.5 hours to get the email link, the email link becomes useless because you have to be there within in an hour of receiving it to use the link in the email.  Is there any reason that access timeframe can't be extended? That would make it easier tor request a data dump and then download it at the researcher's convenience

I'm pretty sure the hour timer only starts at the time the email is actually sent, so only once the dump is complete and ready. That said, the timeout seems to be a parameter in the code so increasing it for the dumps shouldn't be hard. Let me look at this tomorrow.

Cool. That would be great. Thanks @marten


added code generation language selector when error

PR Description
prior we were checking if the code generated in code_pane is null or not and returning the error widget without adding the code generator language changing bar . I removed the check in code_pane and added the check in the ViewCodePane(class) which render the error with the code generator language selector and replace the copy and download button with a single button Retry.
Related Issues

Related Issue #275
Closes #275

Checklist

[x] I have gone through the contributing guide
[x] I have run the tests (flutter test) and all tests are passing

Added/updated tests?

[x] Yes for the RetryButton Widget
[ ] No, and this is why: please replace this line with details on why tests have not been included

Closing the PR as the issue has been resolved.
Check issue thread for more details.


feat: add jq support

what is jq: https://stedolan.github.io/jq/manual/
jqlsp: https://github.com/wader/jq-lsp
Syntax checking like below:

change it to jqls would be better.

change it to jqls would be better.

done

Thanks for your contribution :)


Added dynamic resolution to Photo-to-ASCII

Description

I have changed the script so that it now asks for a sample size and then dynamically calculates the output resolution based on the input image resolution.
Along with that, I have cleaned up the script a lot so it follows a consistent style and fixed a bug related to the character sequence choice.
And lastly, I have added docstring for the module and for individual functions.

Fixes #1900

Type of change
Please delete options that are not relevant.

[x] Bug fix (non-breaking change which fixes an issue)
[x] New feature (non-breaking change which adds functionality)
[ ] Breaking change (fix or feature that would cause existing functionality not to work as expected)
[ ] This change requires a documentation update
[x] Documentation Update

Checklist:

[x] My code follows the style guidelines(Clean Code) of this project
[x] I have performed a self-review of my own code
[x] I have commented on my code, particularly in hard-to-understand areas
[ ] I have created a helpful and easy-to-understand README.md
[ ] My documentation follows Template for README.md
[x] I have added the project metadata in the PR template.
[ ] I have created the requirements.txt file if needed.

Project Metadata
If there is no-file/nothing to fill the below fields with, then type none
Example: If no requirements.txt is needed/present, then type none in Requirments.
Category:

[ ] Calculators
[ ] AI/ML
[ ] Scrappers
[ ] Social_Media
[ ] PDF
[x] Image_Processing
[ ] Video_Processing
[ ] Games
[ ] Networking
[ ] OS_Utilities
[ ] Automation
[ ] Cryptography
[ ] Computer_Vision
[ ] Fun
[ ] Others

Title: Photo To Ascii
Folder: Photo To Ascii
Requirements: none
Script: photo_to_ascii.py
Arguments: none
Contributor: @aryanrai2001
Description: Allows users to convert an image into ASCII art.

@avinashkranjan @Yashbhadiyadra Please merge this and consider a level 3 label as this PR not only adds a new feature but fixes bugs and changes the entire code structure to make it more extendable as well as clean to read and understand. You can have a look at the code itself and how much has changed.


Fix broken links

It looks like a recent change, probably #129, broke links in production (argh, etc). It's a bit tricky because production and the surge preview have different behaviour. I've configured gatsby to handle the prefix path, which I didn't do before because it would break surge. I've tried to configure surge to also have the same prefix so we can test behaviour better, although we won't know if that works until post-merge.

Ok, this is broken in preview, which hopefully means it works in prod and post-merge other things also work in preview. It does still work locally.

Live site is now good. We shall see about the preview next PR.


在colab 上安装 openai库失败？

Looking in indexes: https://pypi.org/simple, https://us-python.pkg.dev/colab-wheels/public/simple/
Requirement already satisfied: bs4 in /usr/local/lib/python3.9/dist-packages (from -r requirements.txt (line 1)) (0.0.1)
Collecting openai
Using cached openai-0.27.1.tar.gz (57 kB)
Installing build dependencies ... done
error: subprocess-exited-with-error
× Getting requirements to build wheel did not run successfully.
│ exit code: 1
╰─> See above for output.
note: This error originates from a subprocess, and is likely not a problem with pip.
Getting requirements to build wheel ... error
error: subprocess-exited-with-error
× Getting requirements to build wheel did not run successfully.
│ exit code: 1
╰─> See above for output.
note: This error originates from a subprocess, and is likely not a problem with pip.
在google colab 上运行时，提示安装 openai库失败 ，提示如上，是Openai 的问题？

好像是google colab 上的python 版本的问题，python 3.9 安装库时不能自动安装依赖包
解决思路：
1.升级colab 的python 版本为3.10以上 ，操作有点复杂，当然githup有现成的方案
https://github.com/korakot/kora/
2.个人的笨方法，将openai 的依赖包，手动堆砌上去
%cd bilingual_book_maker/
####  手动堆砌的openai 依赖包
!pip install aiohttp
!pip install tqdm
!pip install requests>=2.20
!pip install certifi>=2017.4.17
!pip install charset-normalizer<3
!pip install urllib3<1.27,>=1.21.
!pip install idna<4,>=2.5
!pip install attrs>=17.3.0
!pip install yarl<2.0,>=1.0
!pip install frozenlist>=1.1.1
!pip install aiosignal>=1.1.2
!pip install async-timeout<5.0,>=
!pip install multidict<7.0,>=4.5
####  手动堆砌的openai 依赖包
!pip install -r requirements.txt
!pip install ipywidgets


develop

chore(package): remove chromatic
feat(components): change Button, change Icon
docs(icon): add README.md

Codecov Report

Merging #147 (0d37d2d) into master (6812b9e) will increase coverage by 0.32%.
The diff coverage is 100.00%.

@@            Coverage Diff             @@
##           master     #147      +/-   ##
==========================================
+ Coverage   90.00%   90.32%   +0.32%
==========================================
  Files          13       13
  Lines         120      124       +4
  Branches       75       79       +4
==========================================
+ Hits          108      112       +4
  Misses         10       10
  Partials        2        2

Impacted Files
Coverage Δ

src/components/Button/Button.tsx
77.77% <100.00%> (+1.77%)
:arrow_up:

src/components/Icon/Icon.tsx
100.00% <100.00%> (ø)

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update 6812b9e...0d37d2d. Read the comment docs.


[Dragon Ball Universe] Sheet addition plus fixes

Changes / Comments
-Added a character sheet for the fan-made game Dragon Ball Universe
-A few fixes are also included in the pull request as well
Roll20 Requests
Comments are very helpful for reviewing the code changes. Please answer the relevant questions below in your comment.

[ Yes] Does the pull request title have the sheet name(s)? Include each sheet name.
[ No] Is this a bug fix?
[ Yes] Does this add functional enhancements (new features or extending existing features) ?
[ Yes] Does this add or change functional aesthetics (such as layout or color scheme) ?
[ N/A] If changing or removing attributes, what steps have you taken, if any, to preserve player data ?
[ Yes] If this is a new sheet, did you follow Building Character Sheets standards ?

If you do not know English. Please leave a comment in your native language.

Character Sheet Info Roll20 Internal Use only.

Character Sheet Info Roll20 Internal Use only.

Hey @Oboe831 ,  in order for us to allow new character sheets to be added to our public sheet repo there needs to be access to the game rules somewhere for players. This means having the rules to play the game available for free or for purchase. Typically on places like Drivethroughrpg, Reddit, a personal website, or something similar. We unfortunately aren't currently equipped to handle an influx of homebrew games and systems. If you could provide us a link to where new players can find a PDF/rules to play Generation, we'll be better able to help get your game listed.

Hey @Oboe831 ,  in order for us to allow new character sheets to be added to our public sheet repo there needs to be access to the game rules somewhere for players. This means having the rules to play the game available for free or for purchase. Typically on places like Drivethroughrpg, Reddit, a personal website, or something similar. We unfortunately aren't currently equipped to handle an influx of homebrew games and systems. If you could provide us a link to where new players can find a PDF/rules to play Generation, we'll be better able to help get your game listed.

Attached link to website in for rules in sheet.json. PDF not yet available, but is being worked on.

Attached link to website in for rules in sheet.json. PDF not yet available, but is being worked on.

I have updated the pull request and added a link to a website with the rules for the game on, do I need to do anything else for this to be accepted?


Not supporting X-Code 11.3

Can we make it available for X-Code 11+ instead of just one specific X-Code version?

Any updates about this

Do we have any working branch to support Xcode 11.3.1?
Is there any plan for new release?

V 5.2.0 has the support.


Bussiness Rules for user

Identify user by token on

create a new post, to set user as author of the post.

edit a post, to let 'member's edit only their posts and 'admin's can edit all posts.

delete a post, to let 'member's delete only their posts and 'admin's can delete all posts.

create a new user, to let only 'admin's create new users.

edit an user, to let 'admin's edit all kind of users, and 'member's can only edit themselves.

delete an user, to let 'admin's delete all kind of users, and 'member's can only delete themselves.

solved


JS & JVM: error importing Nothing

Attempting to import Nothing results in a compiler error on JS & JVM:
import ceylon.language {
    Bottom = Nothing
    // Imported declaration not found: Nothing (did you mean Nothing?)
}

The error I get in JS is imported member should have lowercase alias: 'nothing'

Currently on the JVM we get the same error. Perhaps @gavinking can explain why this is? ANyway, moving to 1.3

Well for some reason the identifier Nothing is resolving to the value nothing instead of the type Nothing. This might have something to do with @FroMage's recent work, or, I suppose, it might be something older.

Interestingly, something slightly different happens when testing this within the pure typechecker:

imported declaration not found: 'Nothing' (did you mean 'Anything'?)

Well, I have fixed this as far as pure-typechecker goes, but the fix doesn't work in the IDEs because SingleSourceUnitPackage overrides Package.getMember() with some logic I don't understand at all. @davidfestal, the rest is up to you, I suppose....

Shouldn't that be reported in the IDE?

@gavinking I assume that's for ceylon-ide-common, then?

I suppose.

Moved to https://github.com/ceylon/ceylon-ide-common/issues/72


Convert ThreadPoolExecutor to ProcessPoolExecutor

Use ProcessPoolExecutor instead of ThreadPoolExecutor to improve concurrency and performance

Hi guys,
what is the ETA on this?
Thanks.


tarmak kubectl fails when using config outside of ~/.tarmak

Hi,
I have created a cluster using tarmak init -c cluster-config and successfully built the cluster. Now if try and run tarmak kubectl -c cluster-config I receive the following error: FATA[0000] unable to find an existing config, run 'tarmak init'.
All other commands at the moment seem to respecting the -c except kubectl.

I can confirm the issue as if I create a soft link ~/.tarmak point at my cluster-config dir it springs into life


Can't run Fly with Babel

Hey there, wanted to check Fly out but have had no luck so far.
I have a file in my root called Flyfile.babel.js with the following task in it:
export async function log() {
    this.log("Yesssss");
}

My package.json has the following packages in it:
{
// ...
  "devDependencies": {
    "babel-eslint": "^3.1.1",
    "babel-plugin-rewire": "^0.1.5",
    "babelify": "^6.1.1",
    "better-console": "^0.2.4",
    "brfs": "^1.4.0",
    "browser-sync": "^2.7.1",
    "browserify": "^9.0.8",
    "browserify-shim": "^3.8.7",
    "chai": "^2.3.0",
    "chai-as-promised": "^5.0.0",
    "connect-history-api-fallback": "^1.1.0",
    "envify": "^3.4.0",
    "eslint": "^0.21.0",
    "eslint-plugin-react": "^2.3.0",
    "fly": "^0.1.11",
    "fly-babel": "^0.1.1",
    "fly-eslint": "^0.1.0",
    "fly-mocha": "^0.1.3",
    "fly-uglify": "^0.1.0",
    "gulp": "^3.8.11",
    "gulp-autoprefixer": "^2.3.0",
    "gulp-if": "^1.2.5",
    "gulp-imagemin": "^2.2.1",
    "gulp-less": "^3.0.2",
    "gulp-minify-css": "^1.0.0",
    "gulp-mocha": "^2.0.1",
    "gulp-nodemon": "^2.0.3",
    "gulp-notify": "^2.2.0",
    "gulp-plumber": "^1.0.0",
    "gulp-rename": "^1.2.2",
    "gulp-sourcemaps": "^1.5.2",
    "gulp-uglify": "^1.2.0",
    "gulp-util": "^3.0.4",
    "jsdom": "^5.4.1",
    "mocha-jsdom": "^0.3.0",
    "mocha-notifier-reporter": "^0.1.1",
    "mocha-sinon": "^1.1.4",
    "react-iscroll": "0.0.4",
    "react-test-tree": "^0.1.6",
    "reactify": "^1.1.1",
    "sinon": "^1.14.1",
    "sinon-as-promised": "^4.0.0",
    "strictify": "^0.2.0",
    "vinyl-buffer": "^1.0.0",
    "vinyl-source-stream": "^1.1.0",
    "vinyl-transform": "^1.0.0",
    "watchify": "^3.1.1",
    "yargs": "^3.9.1"
  },
  "dependencies": {
    "axios": "^0.5.4",
    "babel": "^5.1.13",
    "babel-core": "^5.3.1",
    "body-parser": "^1.13.2",
    "cheerio": "^0.19.0",
    "child-process-promise": "^1.1.0",
    "classnames": "^2.1.1",
    "common-history": "0.0.1",
    "deep-diff": "^0.3.2",
    "eventwheel": "^0.3.1",
    "express": "^4.12.4",
    "flummox": "^4.0.0-alpha",
    "html-entities": "^1.1.2",
    "isomorphic-fetch": "^2.0.2",
    "jquery": "^2.1.4",
    "konami-keyboard": "0.0.1",
    "lodash": "^3.8.0",
    "node-jsx": "^0.13.3",
    "promisify-node": "^0.1.5",
    "query-string": "^2.1.0",
    "quinn": "^3.2.1",
    "react": "0.13.2",
    "react-google-maps": "1.3.1",
    "react-router-component": "^0.24.4",
    "scroll": "git+https://github.com/studionone/scroll.git",
    "serve-favicon": "^2.2.1",
    "swig": "^1.4.2",
    "verge": "^1.9.1"
  },
  "jshintConfig": {
    "esnext": true
  },
  "browserify": {
    "transform": [
      "browserify-shim"
    ]
  },
  "browserify-shim": {
    "google": "global:google"
  }
}

I have also installed Fly (and fly-babel, and babel itself) globally, but it simply won't work. The error I receive is:
✗ fly -f Flyfile7.babel.js
stack:
  - ~/Work/Projects/viewfinder-1.3/code/Flyfile7.babel.js:1
  - (function (exports, require, module, __filename, __dirname) { export async fun
  -                                                               ^^^^^^
  - SyntaxError: Unexpected reserved word
  -     at exports.runInThisContext (vm.js 53:16)
  -     at Module._compile (module.js 414:25)
  -     at Object.Module._extensions..js (module.js 449:10)
  -     at Module.load (module.js 356:32)
  -     at Function.Module._load (module.js 311:12)
  -     at Module.require (module.js 366:17)
  -     at require (module.js 385:17)
  -     at Object.callee$0$0$ (/usr/local/Cellar/nvm/0.25.1/versions/io.js/v2.0.2/lib/node_modules/fly/dist/cli/spawn.js 30:16)
  -     at tryCatch (/usr/local/Cellar/nvm/0.25.1/versions/io.js/v2.0.2/lib/node_modules/fly/node_modules/babel-runtime/regenerator/runtime.js 67:40)
  -     at GeneratorFunctionPrototype.invoke [as _invoke] (/usr/local/Cellar/nvm/0.25.1/versions/io.js/v2.0.2/lib/node_modules/fly/node_modules/babel-runtime/regenerator/runtime.js 315:22)
message:
  """
    ~/Work/Projects/viewfinder-1.3/code/Flyfile7.babel.js:1
    (function (exports, require, module, __filename, __dirname) { export async fun
                                                                  ^^^^^^
    Unexpected reserved word
  """

This is being run on iojs -- would that be causing the issue? What's the go here?

I thought this bug was fixed, mmm.
This is a bug in util.js when we apply the require hook. We need to pass stage:0 to babel, and we are, but maybe I am missing something else.
Will check ASAIC and ping you again. Thanks for reporting this.

Check this out ATM.

Can you try this again?
I just tested this in an isolated environment against the latest distribution and it works. You should have no trouble using export.

@girvo
Check out<EMAIL_ADDRESS>:metal:

Just to check in, it's all working well now! Thanks so much!

:+1: Thanks, stay tuned for @0.4.0


Deployment

I have deployed a server for my Alliance, and currently limited to only my Alliance. I was thinking of opening it up to a private public server, where non alliance/members can use the server, for a small price. Members $1.99/month or alliance $20/100 members/month. With all excess funds from membership after hosting fees and taxes being Donated to the Project. Was seeking permission to do so, or Any Objections to this being Executed? Any Input is welcome

Hello,
there are several public Pathfinder instances free of charge available and also several hosting services which provide private Pathfinder hosting for ISK. Feel free to start your own service. Check the forum https://forums.eveonline.com/c/marketplace/services/61 or search with your favourite search engine for "eve online pathfinder hosting" for existing services. Also hop onto Pathfinder slack for community interaction.
I'll close this issue as its neither a BUG nor a FEATURE regarding Pathfinder itself . :)


Configure HTTPS support

Per email:

The NASA worldwind.earth site you mentioned below, which has NASA information, has security issues specifically - the site is not HTTPS compliant and is vulnerable to cyber-attacks.  In fact, the site fails all key M-15-13 compliancy checks.   Please remediate soon.  Please reach out to me if you need further info on remediation.

Switched to GitHub Pages for hosting. HTTPS enabled.
Deploy to gh-pages branch via NPM: npm run deploy


Not able to manage users in project with project admin role permissions using terraform.

Hi Team,
I am trying to manage users in artifactory project and i have project admin role permissions but not able to apply changes using terraform.
Here is the script :
resource "project" "mypro" {
    block_deployments_on_limit = false
    description                = "My Project"
    display_name               = "dev-test"
    email_notification         = true
    key                        = "dev001"
    max_storage_in_gibibytes   = 1
    lifecycle {
      ignore_changes = [
          repos
      ]
    }
    admin_privileges {
        index_resources  = true
        manage_members   = true
        manage_resources = true
    }
    member {
        name  = "prakash"
        roles = [
            "Project Admin",
        ]
    }
    member {
        name  = "user1"
        roles = [
            "Viewer",
        ]
    }
    member {
        name  = "user2"
        roles = [
            "Viewer",
        ]
    }
}

Here is the error i am getting while performing terraform apply
"project.mypro: Creating...
╷
│ Error:
│ 403 POST https://prakashrd.jfrog.io/access/api/v1/projects
│ {
│   "errors" : [ {
│     "code" : "FORBIDDEN",
│     "message" : "Logged in 'prakash' is not an admin."
│   } ]
│ }
│
│   with project.mypro,
│   on main.tf line 39, in resource "project" "mypro":
│   39: resource "project" "mypro" {
│
╵"

Please help me is there any solution to skip this error and I can't get admin role for entire org if required.
Thanks in advance.

@Prakashreddy134 From the error message, it looks like this is the first time you are creating this project on Artifactory? In order to create a project, it requires a user assigned with the 'Administer the Platform' role. See https://jfrog.com/help/r/jfrog-rest-apis/add-a-new-project

@alexhung  No, I am doing this task for existing project and i imported project terraform import  and performing updates. I don't have Administer the Platform role and I have a project admin role only, is there any solution with out 'Administer the Platform' role.

@chb0github I can do manually through the UI but my requirement is to perform this through terraform with project admin role. is this possible?

@Prakashreddy134 Does the token you are using have admin_privileges.manage_resoures permission (see https://jfrog.com/help/r/jfrog-rest-apis/update-user-in-project)?

Closing due to inactivity.


fix: change constraint alters to non blocking for postgres

SUMMARY
This migration is marked as causing potential downtime, which we did see using a postgres db where it was locking the table while dropping the constraint and deadlocking with production db requests. I’m using two different techniques here to attempt to make this a more performant/non blocking migration so that we can run it without any downtime.

instead of dropping the old constraint and creating a new one, I am renaming the old constraint which is a non-blocking action. Then creating the new constraint with the cascade on delete.
utilizing postgres’ feature to not validate constraint updates. I’m using this on the subsequent drop constraint as again it is a way to drop the column in a non-blocking way. Then we validate the changes which also don’t block.

I have run the benchmark scripts several times up to over 1m rows which is much more than the size of the table that we had issues with. Other than the tests locally, this hasn’t been validated in production yet.
The other callout is that with renaming and then creating a new constraint, there is a period of time when there will be two constraints before the original one is dropped. From what I can tell it should work fine under these conditions but it has only been tested locally.
These changes only affect migrations running on Postgres metadata databases.
for the embedded table:
Results:
Current: 0.40 s
10+: 0.44 s
100+: 0.44 s
1000+: 0.26 s
10000+: 0.26 s
For the dashboard slices table:
Current: 0.30 s
10+: 0.45 s
100+: 0.45 s
1000+: 0.28 s
BEFORE/AFTER SCREENSHOTS OR ANIMATED GIF

TESTING INSTRUCTIONS

ADDITIONAL INFORMATION

[ ] Has associated issue:
[ ] Required feature flags:
[ ] Changes UI
[x] Includes DB Migration (follow approval process in SIP-59)

[x] Migration is atomic, supports rollback & is backwards-compatible
[x] Confirm DB migration upgrade and downgrade tested
[x] Runtime estimates and downtime expectations provided

[ ] Introduces new feature or API
[ ] Removes existing feature or API

@eschutho Thank you for the improvement. I'll run this in our staging environment to test the change. Assuming it works, https://github.com/apache/superset/pull/24939, https://github.com/apache/superset/pull/24938, https://github.com/apache/superset/pull/24628, https://github.com/apache/superset/pull/24488 all add ON DELETE CASCADE constraints. Can you extract the non-blocking logic from the migrations and move it to migrations/shared/constraints.py? Can you also use batch_alter_table like redefine does?

@eschutho There's also a typo in one script name:
__dd_on_delete_cascade_for_embedded_dashboards
I think you meant _add_on_delete_cascade_for_embedded_dashboards

thanks for the review @michael-s-molina. Since this is only improving Postgres, I'm thinking of just closing the Pr and running it locally unless others feel there's a benefit to the codebase for others.


feat(locales): add Polish (pl-PL) translation

https://github.com/iorate/ublacklist#locale

Open src/scripts/dayjs-locales.ts and import the dayjs locale.

@iorate Done


Error in API version 1.2021.12.12 - "Unable to load one or more of the requested types. Retrieve the LoaderExceptions property for more information"

I get this error with the API when I'm generating code with powershell.
If i copy the same version of the files from %appdata%\Roaming\MscrmTools\XrmToolBox\Plugins\DLaB.EarlyBoundGenerator
instead of downloading them from nuget, it works.
I also tried the previous version. Same error.
Am i doing something wrong?
GenerateEarlyBound.ps1.txt

I can now see that the files are not copied correctly. The ps1 script is outdated. What is the correct way? Should i use the files in content or content files?

Wrong gitub. So sorry. Closing this issue.


Fix trust deep link

Seems like you are using some outdated version of Trust wallet deep-link which does not work. So added a quick fix for that.

https://developer.trustwallet.com/deeplinking

Thanks for this @amiromayer 😄


[Questions] Does all the src sub-files have to be TS?

We are visualizing using a webview.
React has several issues (license, package.json etc...), so we made it vanilla js.
js is a script that only works in webview.
It cannot access the main VS Code APIS directly.
Is it okay to add the js file to the src sub-folder?

js is a script that only works in webview.

Is the js you mentioned to be the js file(s) of vanilla js ?

js is a script that only works in webview.
It cannot access the main VS Code APIS directly

You mean, these js files are only used (executed) in webview ?

Is the js you mentioned to be the js file(s) of vanilla js ?

yes, the js file(s) of vanilla js.

You mean, these js files are only used (executed) in webview ?

yes, it's only used in webview.

yes, the js file(s) of vanilla js.
yes, it's only used in webview.

background: I don't know much about vscode extension development. so I don't know it is OK or not, that is I don't know how other extensions manage files.
If these js files are not called used from vscode, then why put them in src folder?
There is draft/PRs that put css files in media folder and in that perspective, can we put these js files in media ?

The location doesn't matter whether it's media or src, but it seemed better to make it under src to manage it. If they use the media folder elsewhere, it's not a problem at all to move it.
Shall we move to the media folder?

, but it seemed better to make it under src to manage it.

Can I ask what kind of management you are thinking?

In my opinion,
I thought it would be better to put all the files that perform the function in one folder.
Our project has many functions in one extension, and I thought it might be difficult to read if it was managed through multiple folders of each function.

i tried to manage static files for webview in media and tried to manage typescript files that directly use vscode extension in src.
i don't know it's great way but it can be one way to manage files.
and i think there is reason for vscode-extension-webview sample choose this way

put all the files that perform the function in one folder.

My thought is different. This depends on the purpose and how the files are used.
As I understand, typescript source files are source for logic of extension itself.
the js files you mention are scripts used to control the view of the extension.
Why I think different is that if we map these to node application (I'm not sure I understand this correctly...)
typescript -> js files work as service side of node.
js files you mention are client side, which runs in the browser.
So in this analogy, purposes are differnent, so management would be better in different.

Thank you for your answer.🙏
Then, we will create a folder under media and manage JS files.

I will close this issue because it has been discussed enough, and i have received the desired answer.


13.4-3

Compared to CLRS2e's 13.4-2, assumes that x.p is red. Is x.p equivalent to y.p during Tree-Delete?


Add Carousel or  Slideshow

Hi!
please!
add Carousel https://mudblazor.com/components/carousel#api
or  Slideshow  https://asuikit.com/v3/slideshow
thanks!

I agree, It would be a great new component

RadzenCarousel Component is available with v5.3.0. See demos at https://blazor.radzen.com/carousel


Why android local notification not shows float on the top screen of the phone?

I have open the "allow Floating notification" in the system setting. But when the notification comes. I only hear the notification sound which I set, I did not see the floating notification on the top screen. When I drag down the status bar, I can see the notification. is there any params to set in the codes to show the floating notification?
@rafaelsetragni

Set the priority to max


Cannot test-drive

$ marathon install johnsundell/testdrive
🏃  Cloning https://github.com/johnsundell/testdrive.git...
   Compiling script...
   Installing binary...
💻  johnsundell/testdrive installed at /usr/local/bin/testdrive
$ testdrive files shellout
🕵♀  Finding pod 'files'...
📦  Cloning https://github.com/johnsundell/files.git...
🚢  Resolving latest version...
📋  Checking out 2.2.1...
🚗  Files is ready for test drive

🕵♀  Finding pod 'shellout'...
📦  Cloning https://github.com/johnsundell/shellout.git...
🚢  Resolving latest version...
📋  Checking out 2.2.0...

💥  Xcode project missing at 'https://github.com/johnsundell/shellout.git'

Ah well


Rm/set endtimes on testdata for tz testing

:nut_and_bolt: Description: What code changed, and why?
Adjusted compliance test data so that it is more sensitive to timezone change testing.
Setting the end_time closer to midnight UTC on just 3 dates now allows us to exercise timezone shift and assert outcomes appropriately where previously, this was very tedious due to the fact that most timestamps were mid-day.. now it's simple to just pick the timezones immediately east or west of GMT to see the effect.

:chains: Related Resources
:+1: Definition of Done
All tests in section below pass and we now are able to setup demos to show the effects of shifting the timezone
:athletic_shoe: How to Build and Test the Change

make sure all test cases pass:
from components/compliance-service run TEST=0[0-8]* make test

all tests should pass

to run from hab studio
run: load_compliance_reports

the trend graphs and summary data on the compliance tab should still have the exact same data.  This validates that the slightly changed times on the test data had not ill effect on the data as it lands in elasticsearch

:white_check_mark: Checklist
All PRs must tick these:

[x] I have read the CONTRIBUTING document.
[x] All commits signed-off for the Developer Certification of Origin.

With occasional exceptions, all PRs from Progress employees must tick these:

[x] Is the code clear? (complicated code or lots of comments--subdivide and use well-named methods, meaningful variable names, etc.)
[x] Consistency checked? (user notifications, user prompts, visual patterns, code patterns, variable names)
[x] Repeated code blocks eliminated? (adapt and reuse existing components, blocks, functions, etc.)
[x] Spelling, grammar, typos checked? (at a minimum use make spell in any component directory)
[x] Code well-formatted? (indents, line breaks, etc. improve rather than hinder readability)

All PRs from Progress employees should tick these if appropriate:

[x] Tests added/updated? (all new code needs new tests)
[x] Docs added/updated? (all customer-facing changes)

Please add a note next to any checkbox above if you are NOT ticking it.
:camera: Screenshots, if applicable

The two elements I don't remember ever seeing in the past are here:
 * Sending "2018-03-05_centos(2)-beta-nginx(f)-apache(f)-failed.json" with updated date of "2021-04-06"
rpc error: code = Internal desc = Ingesting report 'bb93e1b2-36d6-439e-ac70-cccccccccc07' is not possible because profile 'DevSec Nginx Baseline' with id '09adcbb3b9b3233d5de63cd98a5ba3e155b3aaeb66b5abed379f5fb1ff143988' does not have the metadata known to the backend.

 * Sending "2018-03-04_redhat(2)-beta-non-ingestable.json" with updated date of "2021-04-05"
rpc error: code = Internal desc = Ingesting report 'bb93e1b2-36d6-439e-ac70-cccccccccc15' is not possible because profile 'DevSec Apache Baseline' with id '41a027-profile-with-missing-metadata-and-no-match-in-the-backend' does not have the metadata known to the backend.

we put a couple of test reports in that are meant to fail like this.. the second one listed actually has in it's name that fact that it's not ingestible and inside of that we even set the sha to reflect that: sha256": "41a027-profile-with-missing-metadata-and-no-match-in-the-backend"


Remove implementation details of key release policy; instead use opaque blob

Per discussions with @heaths  and @herveyw , we are moving SKR policy's implementation out of the Swagger and instead representing it as an opaque blob.
MSFT employees can try out our new experience at OpenAPI Hub  - one location for using our validation tools and finding your workflow.

Contribution checklist:

[ ] I commit to follow the Breaking Change Policy of “no breaking changes
[ ] I have reviewed the documentation for the workflow.
[ ] Validation tools were run on swagger spec(s) and errors have all been fixed in this PR. How to fix?

If any further question about AME onboarding or validation tools, please view the FAQ.
ARM API Review Checklist

[ ] Ensure to check this box if one of the following scenarios meet updates in the PR, so that label “WaitForARMFeedback” will be added automatically to involve ARM API Review. Failure to comply may result in delays for manifest application. Note this does not apply to data plane APIs, all “removals” and “adding a new property” no more require ARM API review.

Adding new API(s)
Adding a new API version
Adding a new service

[ ] If you are blocked on ARM review and want to get the PR merged with urgency, please get the ARM oncall for reviews (RP Manifest Approvers team under Azure Resource Manager service) from IcM and reach out to them.

Breaking Change Review Checklist
If there are following updates in the PR, ensure to request an approval from API Review Board as defined in the Breaking Change Policy.

[ ] Removing API(s) in stable version
[ ] Removing properties in stable version
[ ] Removing API version(s) in stable version
[ ] Updating API in stable version with Breaking Change Validation errors
[ ] Updating API(s) in preview over 1 year

Please follow the link to find more details on PR review process.

/azp run automation - sdk

/azp run automation - sdk

/azp run automation - sdk

/azp run automation - sdk

/azp run automation - sdk

@lmazuel Just fixed the remaining validation error under my control. The other ones come up on every AKV Swagger PR. Are any other changes necessary before merging?

/azurepipelines run

CI are false positive, and @heaths approved, merging


configure v2: update library and usages

Major version changes to the library.

 This better matches the expectations of other functions like json.Unmarshal() and viper.Unmarshal().
The library no longer maintains an internal copy of the config. The implementer is now required to do so. This allows the library to be more simplistic and is a separation of concerns.
examples directory has been removed in favor of tests. Tests are the preferred way to show off example usage as they both confirm the library works as intended and shows that the examples are not out dated and do work.
go get -u github.com/m-porter/configure/v2 will refer to the main branch. Previous version code can be found under v1 branch.

Close and reopened PR to trigger workflow


Fix Armenian megs

Coverage decreased (-0.002%) to 99.642% when pulling 9c3781b29d8512f65a2accd707146e085b5a33fd on bugfix/armenian into 88d0a0a29f0c1977748590f0f07c93d230aec948 on master.

Coverage decreased (-0.002%) to 99.642% when pulling 9c3781b29d8512f65a2accd707146e085b5a33fd on bugfix/armenian into 88d0a0a29f0c1977748590f0f07c93d230aec948 on master.


Stash CAKeyPair in a Kube Secret

Once the Machines + Cluster have been created, the Cluster object should derive it's caKeyPair values from a kube secret

Hey @mateo1647 ,
It has been a little while, so refreshing on this (and really need to move it over from v1a1 to v1a3, but that is a whole separate issue).
If I remember it correctly, the CA key/cert are not actually part of the cluster-api spec (at least as far as v1a1), but just part of the ProviderSpec. CAPI actually doesn't care about it at all, since CAPI only goes so far as creating the cluster and nodes; how you bootstrap the nodes is a provider-specific implementation.
We use the CA cert (passed in the cluster part of provider spec, or created in the cluster actuator if blank) to pass in the userdata to all of the master nodes, as they will need it as part of bootstrap to launch masters on the cluster (as masters need to sign certs).
I don't object to stashing the CAKeyPair in a k8s secret, but what do we gain? Each master needs it before joining the cluster.
Granted, we could use kubeadm tokens, or fixed tokens, and ca bootstrapping, and that probably would be a good thing. Also much of it has changed with v1a2 and v1a3.
So, yes, no objection, but what is the benefit in v1a1?

Benefit in v1a1? Little to none. I posted the issue while I was working through bootstrapping a cluster using a declarative Gitops model via Argo because I noticed the SSH keys and certs weren't referenced via kube secret. Even though I had to delete the packet nodes I think the old manifests / cluster are still visible in my setup: https://argocd.k8s.halyard.app/applications/packet-cluster?node=cluster.k8s.io%2FCluster%2Fcluster-api-provider-packet-system%2Fpacket-2rjup%2F0
In v2 and v3 it's still debatable as to "what you'd gain" - personally, I think its valuable because many folks (like myself) have used / implemented / are advocates for a non-ephemeral management cluster which controls other bootstrapped clusters declaratively and in that management cluster you don't want access to your other clusters to be readily available. I'd consider this a feature / nice to have vs. any sort of actual issue with the ProviderSpec implemented here.

declarative Gitops model via Argo

Yes, definitely! This is what we call "good stuff" :-)

I think its valuable because many folks (like myself) have used / implemented / are advocates for a non-ephemeral management cluster which controls other bootstrapped clusters declaratively and in that management cluster you don't want access to your other clusters to be readily available.

Now I am confused. I first thought you were suggesting it be a k8s secret in the management cluster (FWIW, gardener and few others do this, although the original CAPI view was, IIRC, that the management cluster is temporary and you pivot off of it).
Even with a persistent management cluster, I still don't understand:

putting it as a k8s secret in the deployed (i.e. non-management) cluster doesn't help much, since, as above, it is needed for new master nodes that have not yet joined the cluster.
putting it as a k8s secret in the management cluster doesn't help much, since it is in the cluster config... oh, wait, it is not, as the config is "", which means, "generate a new one".

Currently the flow is the following (abridged):

Create config files, leave CA in providerSpec blank
Bootstrap cluster (ephemeral or persistent) sees it is blank, generates key/cert; or takes the one provided in the config
Bootstrap cluster adds it to the config in its cluster, and adds it to the userdata for master nodes passed to Packet API
Master node gets the userdata, uses the info to generate certs, etc.
Data lingers inside the bootstrap cluster (as long as it exists) as part of the config for future master nodes deployed

What would the future flow look like?

Apologies for any confusion - what I'm suggesting is using k8s secrets in the management cluster, not in the "workload" cluster.
Usage of k8s secrets in the "workload" or provisioned cluster would be a part of down-stream automation and shouldn't be in scope of this type of provider, IMO.

Apologies for any confusion

None necessary! :-)

is using k8s secrets in the management cluster

Instead of storing it in the updated config? Sure, that makes sense, even as is.

Correct! Instead of storing it in the updated config. Today, in the flow, you create the cluster with empty fields in the cluster and machine specs:
(cluster spec)
    providerSpec:
      value:
        apiVersion: "packetprovider/v1alpha1"
        kind: "PacketClusterProviderSpec"
        projectID:
        caKeyPair:
          cert: ""
          key: ""

(machine spec)
    providerSpec:
      value:
        apiVersion: "packetprovider/v1alpha1"
        kind: "PacketMachineProviderSpec"
        roles:
        - Node
        OS: ubuntu_18_04
        facility:
        - ewr1
        machineType: c1.small.x86
        billingCycle: hourly
        projectID:
        sshKeys:

The cert + key, and sshKeys fields are updated post-creation. If you look at my live manifest (you have to scroll down slightly) the cert + key and sshKeys are visible in plain text in the updated manifests for the created clusters.
It would be great if you simply created a few additional secrets within the provider-components.yaml for both the cert + key, and SSH keys, and then subsequently referenced/updated those throughout the provisioning. It should look close to what you're already doing with the cluster-api-provider-packet-credentials:
apiVersion: v1
kind: Secret
metadata:
  name: cluster-api-provider-packet-credentials
  namespace: cluster-api-provider-packet-system
stringData:
  apiKey:
  projectID:
type: Opaque

EX:(for the cluster spec):
apiVersion: v1
kind: Secret
metadata:
  name: cluster-api-provider-packet-generated-certificates
  namespace: cluster-api-provider-packet-system
stringData:
  cert:
  key:
type: Opaque

Would need to modify the cluster spec here
EX (for the machine spec):
apiVersion: v1
kind: Secret
metadata:
  name: cluster-api-provider-packet-machine-keys
  namespace: cluster-api-provider-packet-system
stringData:
  sshKeys:
type: Opaque

And modify the machine spec here

That is about the path I am going down. It is a bit of a pain, in that you need to actively manage the secrets, so you need to use the k8s api, which is fine. The cluster provider calls pass in the clusterGetter but not a generic client to use to get a secretGetter, but it is doable.

Why ssh keys? These are all public keys anyways.

@mateo1647 please take a look at #12 for the design.

@deitch Hey avi - apologies for the delay in response; I was thinking of using a secret for the SSH keys in case there were multiple. A secret would be useful to store an array of keys. If you can iterate on multiple keys within the spec, that would also work, but might be more difficult to manage.

Multiple keys. That makes sense. I would sooner change the spec, since it is in our control. Open a separate issue for it, "support passing multiple ssh keys to a node", please.
It will have to wait, though; too much is creaking because of v1alpha1; it just is time to move to v1a3.

v1a3 > everything! :)


Pluralization of Role Titles

I've been using this library to pluralize role titles (nurse => nurses) and it works well.
I've just hit a snag with Head of Engineering => Head of Engineerings. Where I believe the correct pluralization should be "Heads of Engineering".
Do we think this is the correct fit for this library?

@jeremy-putt I'd welcome it if we can spec how this would work generally. The major problem is that this module is largely scoped to a single word and not multiple. It's probably better for a wrapper module that does this sort of thing, I've had various phrase pluralization issues in the past and I wouldn't be able to maintain it effectively here.

That pretty much lines up with what I was thinking.
It'd be easy to add a regex like /head\sof\s(something) but I'm fairly certain there are edge cases I haven't thought of and it would probably get out of hand very quickly :)
I'll keep thinking on it.


Open Replace Menu after create shortcut is broken

Describe the Bug
Pressing the CTRL / CMD shortcut allows power users to open the new elements replace menu right after element creation. This seems to be broken since the introduction of multi-element create:

Steps to Reproduce

Open test diagram
Create element from the palette by pressing the CTRL/CMD modifier or copy and paste elements pressing CTRL/CMD modifier
See that the replace menu opens in an odd location

Expected Behavior

Replace menu does not open when multi-element creating (what should be the target element?)
Replace menu opens in the correct location after creation when creating a single element

Environment

OS: Any
Camunda Modeler Version: v3.4.1, v3.5.0

Was able to reproduce it while pasting but via palette creation. However, I'll have a look.

@oguzeroglu @barmac @philippfromme is anybody able to reproduce the first case?

Create element from the palette by pressing the CTRL/CMD

I cannot reproduce it for creation from palette. For Sub Process it activates the Start Event.

I can reproduce it with palette creation on a clean master branch:

What's broken there? The position of the replace menu?

Yes, this is the original position (does not overlap with the intermediate event):

Not sure if this is the mentioned bug though.

The issue that it's overlapping the element is also available in previous versions (e.g. v3.3).

I think it's a general problem with the layouting. This issue was more about the fact the replace menu is rendered in an unusable manner in the upper left corner.


chore: bump kcl version to v0.5.0-alpha.4.

1. Does this PR affect any open issues?(Y/N) and add issue references (e.g. "fix #123", "re #123".):

[x] N
[ ] Y

2. What is the scope of this PR (e.g. component or file name):

chore: bump kcl version to v0.5.0-alpha.4.
3. Provide a description of the PR(e.g. more details, effects, motivations or doc link):

[ ] Affects user behaviors
[ ] Contains syntax changes
[ ] Contains variable changes
[ ] Contains experimental features
[ ] Performance regression: Consumes more CPU
[ ] Performance regression: Consumes more Memory
[x] Other

4. Are there any breaking changes?(Y/N) and describe the breaking changes(e.g. more details, motivations or doc link):

[x] N
[ ] Y

5. Are there test cases for these changes?(Y/N) select and add more details, references or doc links:

[ ] Unit test
[ ] Integration test
[ ] Benchmark (add benchmark stats below)
[ ] Manual test (add detailed scripts or steps below)
[x] Other

6. Release note

Please refer to Release Notes Language Style Guide to write a quality release note.
None

Pull Request Test Coverage Report for Build<PHONE_NUMBER>

0 of 0   changed or added relevant lines in 0 files are covered.
No unchanged relevant lines lost coverage.
Overall coverage remained the same at 58.567%

Totals

Change from base Build<PHONE_NUMBER>:
0.0%

Covered Lines:
1733

Relevant Lines:
2959

💛  - Coveralls


Fixed some preconditions check in TaskExecutor

Task retry executor core thread pool size can be zero.
Signed-off-by: Yinan Li<EMAIL_ADDRESS>

@zliu41 can you review?

LGTM


Sample java code that validates the header

We have a case where a user is working on validating the “content-sha256” header in the webhook request. Currently we can validate the “event-hash” with the calculation of an hmac-sha256 hash using the api-key.
But they would like to get a matching value for “content-sha256” using their code or an online generator like https://www.freeformatter.com/hmac-generator.html

closing this for now since we will check with the user to track his work  - ZD#11674802


add QuCmp

@Roger-luo As we have committed the renaming, could you update the link? I am sure you are preparing a detailed blog post. Looking forward to it!

@Roger-luo When you finish, could you squash the commits? I will be helping on side and merge afterward. Thank you.

squashed @i2000s

It would be nice to write something on the project and call for attentions. I will merge this first.


Refactor SerialParser and update parse algorithm

The telemetry packet has changed so some changes were made to handle
that. A copy of the latest packet definition has been included in the
repository for reference.
Ventilation mode is an absolute value, present in 3 bits of the 29th
byte. This change adds a new constant for ventilation modes and
calculates the correct ventilation mode for the new packet.
There was a lot of repetition and bloat in the logic for updating the
graphs for pressure, volume and flow rate. This logic has been
consolidated into a single method to be re-used and hence improve
readability.
Variables were renamed to be more understandable and in camelCase to
follow JS standards.

Approved by @danishkarim on WhatsApp. Merging.


Copy code from google-cloud-cpp-bigquery

... to google/cloud/bigquery.
We should investigate how to preserve history as well when doing this copy.

Here's a more detailed list of the steps that we'll likely need to do:
Move the code (google/cloud/$project) into -cpp
Think of this as simply copying the files. But ideally, we'll copy the files over and preserve their git history. See https://github.com/googleapis/google-cloud-cpp/pull/3728#issuecomment-611804509 for details about how this was done for the release/ directory. Once the files are in -cpp/google/cloud/$project, we'll need to make further changes, otherwise the -cpp build will break.
Update bazel/googleapis.BUILD
If needed, add build targets to bazel/googleapis.BUILD to build the needed protos. In the case of BigQuery, this should step should not be needed after https://github.com/googleapis/google-cloud-cpp-bigquery/pull/47.
Update top-level CMakeLists.txt
Add an option/flag to make building the new dir optional.
Update google/cloud/$project/version_info.h.in
Make sure the file google/cloud/$project/version_info.h.in contains cmake version macros that look like @GOOGLE_CLOUD_CPP_VERSION_MAJOR@ instead of project-specific versions.
Update files in ci/...
grep in ci/... for places that mention bigtable or storage to see where you might need to add an additional configuration for the new $project being added. In particular, ci/kokoro/docker/build-in-docker-cmake.sh has a list of expected directories that get installed, which will likely need to be updated.
Quick/local tests

Run build.sh asan, which will use bazel to build.
Run build.sh clang-tidy, which will use cmake

In both cases, try creating a build break in the newly imported code to make sure the build fails. Also try creating a runtime test failure, to make sure the test fails.
Also, create a DRAFT PR and see what the presubmit CI builds say.

Note: here's the script I used to move the code preserving history. It should be easy to modify for other cases:
#!/bin/bash
#
# Creates a `NEW_REPO` that contains all code in `google/cloud` from the old
# repo and its git history. Uses the "filter-repo" command from
# https://github.com/newren/git-filter-repo. This could also work with the
# built-in "filter-branch", but the docs for that command say "don't use it;
# use filter-repo instead".

set -eu

readonly OLD_REPO="git@github.com:googleapis/google-cloud-cpp-bigquery.git"
readonly NEW_REPO="git@github.com:devjgm/google-cloud-cpp.git"

readonly TMP_DIR="$(mktemp -d "/tmp/move-repo.XXXXXXXX")"
cd "${TMP_DIR}"
echo "$(date -u): ## In $(pwd)"

git clone "${OLD_REPO}" old
git clone --shallow-since="2020-04-01" "${NEW_REPO}" new

readonly PYTHON_CALLBACK='
  message = re.sub(b"\(#(\d+)\)", b"(googleapis/google-cloud-cpp-bigquery#\\1)", message)
  return re.sub(b"\s#(\d+)", b" googleapis/google-cloud-cpp-bigquery#\\1", message)
'

cd old
git remote remove origin
git filter-repo --path google/cloud --force \
  --message-callback "${PYTHON_CALLBACK}"

cd ../new
git checkout -b move-repo
git remote add old ../old
git fetch old
git merge --no-edit old/master --allow-unrelated-histories

echo "SUCCESS! Check it out"
echo "cd $(pwd)


Check for inconsistencies between suggestions results and search results

check for inconsistencies between suggestions results and search results

Fixed


G2ConfigTool importFromFile gives python errors

The syntax for this line is just wrong.
-687:         self.cfgData = json.load(open(arg), encoding="utf-8")
+687:         self.cfgData = json.load(open(arg, encoding="utf-8"))

From memory this was a breaking change in Python 3.9, the original style was left over from Python2 and removed.


Public Cloud: Can't delete old products because of missing fields in DB

Description:
Users can't delete old Public Cloud products in the Registry because they lack some new fields in DB.
Form validation error

Still a thing when I try to approve deletion of old products. All live products on Prod are old ones, so this problem can occur if users try to delete them:

@funtigr I will try to copy the data from dev to have the same product data as in the screenshot.

661dc42f396b0185137eaff1

Fixed. Worked both for Rejection and Approval.


Training with byte level BPE (AIShell)

This PR tries to use the byte level BPE as modeling uints, the main purpose is to reduce the vocab-size by spliting CJK characters, so as to speed up the training.
To find out how we use byte level BPE, the best way is to read the code in egs/aishell/ASR/local/train_bbpe_model.py

The best results I have gotten are:

Vocab size
Greedy search(dev & test)
Modified beam search(dev & test)
Fast beam search (dev & test)
Fast beam search LG (dev & test)
comments

500
4.31 & 4.59
4.25 & 4.54
4.27 & 4.55
4.07 & 4.38
--epoch 48 --avg 29

1000
4.94 & 5.31
4.73 & 5.11
4.81 & 5.17

--epoch 50 --avg 36

The training command:
export CUDA_VISIBLE_DEVICES="4,5,6,7"

./pruned_transducer_stateless7_bbpe/train.py \
  --world-size 4 \
  --num-epochs 50 \
  --start-epoch 1 \
  --use-fp16 1 \
  --max-duration 800 \
  --bbpe-model data/lang_bbpe_500/bbpe.model \
  --exp-dir pruned_transducer_stateless7_bbpe/exp \
  --lr-epochs 6 \
  --master-port 12535

The decoding command:
for m in greedy_search modified_beam_search fast_beam_search fast_beam_search_LG; do
    ./pruned_transducer_stateless7_bbpe/decode.py \
      --epoch 48 \
      --avg 29 \
      --exp-dir ./pruned_transducer_stateless7_bbpe/exp \
      --max-sym-per-frame 1 \
      --ngram-lm-scale 0.25 \
      --ilme-scale 0.2 \
      --bbpe-model data/lang_bbpe_500/bbpe.model \
      --max-duration 2000 \
      --decoding-method $m
done

A pretrained model is available here: https://huggingface.co/pkufool/icefall_asr_aishell_pruned_transducer_stateless7_bbpe

I am going to merge this PR, so as to be more convenient to create tal_csasr and wenetspeech recipes, if you guys have any suggestions will fix in the seperate PR.

Hi
I'm probably asking a naive question, but here it is. I'm developing a Korean ASR and I'd like to try with the bbpe approach because the number of different characters in the training corpus is quite high, anyway higher than what I'd have in other latin-char based languages, something like 1300 characters
THe thing is in
tokenize_by_CJK_char
we split all the CJK chars while we leave unsplitted the words written in latin characters (like the example in the function code:
Example:
input = "你好世界是 hello world 的中文"
output = "你 好 世 界 是 HELLO WORLD 的 中 文"
)
by doing this, after training the bbpe model with sentencepiece, I have a lexicon like this:
가로지르는 ▁ƑŖġ ▁ƒņŁ ▁Ɠōġ ▁ƒŋ Ś ▁ƒīķ
가로축 ▁ƑŖġ ▁ƒņŁ ▁ƓŜ ĸ
가루 ▁ƑŖġ ▁ƒňŎ
가루를 ▁ƑŖġ ▁ƒňŎ ▁ƒŋŢ
and basically all tokens starting with ▁
because all the Korean words were splitted in single CJK chars, so the word boundary info would be lost for the sentencepiece model (and each word would be tokenized by "word-beginning" tokens)
is that the expected training unit? because then in decoding I'm not sure how words would be reconstructed, or are we supposing to decode isolated chars and evaluate by CER?
otherwise we could simply avoid splitting the CJK, and we could have a lexicon like:
가게를 ▁ƑŖġ ƑŘĭ ƒŋŢ
가게에서 ▁ƑŖġ ƑŘĭ ƓĺıƓĥŁ
가게에선 ▁ƑŖġ ƑŘĭ Ɠĺı ƓĥŅ
가겠 ▁ƑŖġ ƑŘ Ņ
가겠구나 ▁ƑŖġ ƑŘ Ņ ƑśŒ ƒģĻ
and only 142 out of 500 tokens as "word-beginning" tokens
I can see that my understanding of this approach is possibly quite limited, thanks in advance if you can help me a bit in understanding

Actually, we already tried kinds of splitting,  1) splitting by single char 2) splitting by word (for Chinese might be several chars) 3) no splitting.  From our experiments, the performance is  1 > 2 > 3, but difference is minor. We finally choose "splitting by single char" because we don't want one bpe have two bytes that belong to different chars (like English, one bpe won't have two ascii chars that belong to two different words).

I'm not sure how words would be reconstructed, or are we supposing to decode isolated chars and evaluate by CER?

When decoding, the decoded sequence would be convert to byte sequence first, then decode to CJK char words.
Yes, we evaluate by CER on AIshell. but for bilingual model, we evaluate it by MER (WER for english, CER for Chinese).

thanks for the anwser


Handle process stdout and stderr

If the buffer allocated for standard output/error is full,
the started process will wait forever if the buffer's content is never consumed.
On Linux-based systems, the pipe has a buffer size of 65,536 bytes.
We encountered the error in the inspect FFmpegAnalyzer step. It was caused by ffprobe which was complaining on stderr about skipping HLS tags. The m3u8 file contained enough of those tags to fill up the buffer.
[hls @ 0x33c4900] Skip ('#EXT-X-PROGRAM-DATE-TIME:2022-07-05T17:32:43.386+0200')

[ ] have a concise title
[ ] close an accompanying issue if one exists
[ ] be against the correct branch
[ ] include migration scripts and documentation, if appropriate
[ ] pass automated tests
[ ] have a clean commit history
[ ] have proper commit messages (title and body) for all commits

I don't think that it was visible in opencast logs. At least for the FFmpegAnalyze stuff, nothing got logged.

But yeah, it would be nice to have the possibility to see the error log.

The easy way to achieve that is to implement an OutputStream that directly writes each line to the Slf4j debug output.

That's more or less what the composer does.

Never mind, my idea is not working. I thought it was possible to set an OutputStream as a redirect target, but it's only possible to write to a File.


mo.ui.table, allow disable selection for some rows.

Description
I have a table that contains some parameters to be used for the rest of the notebook. Selecting one row, sets up the parameters.
Under some conditions, some combinations of parameters are not valid for the calculations I want to do.
Suggested solution
Allow disabling the selection of some rows, while displaying them.
Maybe in gray to show they are not available?
Alternative
No response
Additional context
No response

@Eloitor you could again use mo.state and track the selection and put up a warning (mo.callout) when there is an invalid selection

The disabled rows would make it more obvious.
Maybe passing a lambda to mo.ui.table that returns true if the row should be enabled, and false if it should be disabled.

@Eloitor How about validating the combinations of parameters before passing them to the table?
Do you need to include these invalid combinations in the table? For instance, you need to compare the differences between valid and invalid combinations, or you want to see some summaries of all combinations?

I want to use the valid combinations as inputs for my notebook.


Serdes as beans in a Kafka Streams binder application

When an application provides a bean of type Serde, then the binder should try to introspect that bean to see if it can be matched for any inbound or outbound serialization.

Addressed as part of this PR.