Operator logs access token

I installed the cert-utils operator from OperatorHub on OpenShift.
In default configuration it logs valid access token to the container log output.
OpenShift Version: 4.12.40
Operator Version: 1.3.11
Source: OperatorHub
This is problematic because a) it bypasses the security of the service account secrets and b) we store logs in a central log store which now contains valid secrets.
Expected behavior:
The operator should not output any secret information, including access token, to the container log stream.
Example log output:
I1124 08:34:29.524403       1 round_trippers.go:443] POST https://<KUBERNETES API>:443/apis/authentication.k8s.io/v1/tokenreviews 201 Created in 2 milliseconds
I1124 08:34:29.524460       1 round_trippers.go:449] Response Headers:
I1124 08:34:29.524465       1 round_trippers.go:452]     Date: Fri, 24 Nov 2023 08:34:29 GMT
I1124 08:34:29.524469       1 round_trippers.go:452]     Audit-Id: 6be7eb43-f0cb-4fff-b870-af4a18f2edb7
I1124 08:34:29.524472       1 round_trippers.go:452]     Cache-Control: no-cache, private
I1124 08:34:29.524475       1 round_trippers.go:452]     Content-Type: application/json
I1124 08:34:29.524479       1 round_trippers.go:452]     Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
I1124 08:34:29.524482       1 round_trippers.go:452]     X-Kubernetes-Pf-Flowschema-Uid: ccae85e0-c2c6-4c72-93e5-edb0879cf529
I1124 08:34:29.524486       1 round_trippers.go:452]     X-Kubernetes-Pf-Prioritylevel-Uid: 93718d61-0ceb-4eac-9ce5-4dacad0cded8
I1124 08:34:29.524489       1 round_trippers.go:452]     Content-Length: 2144
I1124 08:34:29.524542       1 request.go:1097] Response Body: {"kind":"TokenReview","apiVersion":"authentication.k8s.io/v1","metadata":{"creationTimestamp":null,"managedFields":[{"manager":"kube-rbac-proxy","operation":"Update","apiVersion":"authentication.k8s.io/v1","time":"2023-11-24T08:34:29Z","fieldsType":"FieldsV1","fieldsV1":{"f:spec":{"f:token":{}}}}]},"spec":{"token":"eyJhbGciOiJSUzI1NiIsImtpZCI6InNiVFlkT2pqNF9PZ3pLZ0J5Um0tejRhWDl3SG1BUjNkQUlTc0NaNDFxaWMifQ<REST OF TOKEN>"},"status":{"authenticated":true,"user":{"username":"system:serviceaccount:openshift-monitoring:prometheus-k8s","uid":"743aa7b0-6d8e-47f7-ba0e-517041d56f2b","groups":["system:serviceaccounts","system:serviceaccounts:openshift-monitoring","system:authenticated"],"extra":{"authentication.kubernetes.io/pod-name":["prometheus-k8s-1"],"authentication.kubernetes.io/pod-uid":["f9519d8e-5f3f-461d-b96e-cc2107d2dfdc"]}},"audiences":["https://kubernetes.default.svc"]}}
I1124 08:35:53.240019       1 request.go:1097] Request Body: {"kind":"TokenReview","apiVersion":"authentication.k8s.io/v1","metadata":{"creationTimestamp":null},"spec":{"token":"eyJhbGciOiJSUzI1NiIsImtpZCI6InNiVFlkT2pqNF9PZ3pLZ0J5Um0tejRhWDl3SG1BUjNkQUlTc0NaNDFxaWMifQ.<REST OF TOKEN>"},"status":{"user":{}}}
I1124 08:35:53.240208       1 round_trippers.go:423] curl -k -v -XPOST  -H "Accept: application/json, */*" -H "Content-Type: application/json" -H "User-Agent: kube-rbac-proxy/v0.0.0 (linux/amd64) kubernetes/$Format" -H "Authorization: Bearer eyJhbGciOiJSUzI1NiIsImtpZCI6InNiVFlkT2pqNF9PZ3pLZ0J5Um0tejRhWDl3SG1BUjNkQUlTc0NaNDFxaWMifQ.<REST OF TOKEN>" 'https://<IP_ADDRESS>:443/apis/authentication.k8s.io/v1/tokenreviews'
I1124 08:35:53.243705       1 round_trippers.go:443] POST https://<KUBERNETES API>:443/apis/authentication.k8s.io/v1/tokenreviews 201 Created in 3 milliseconds

Test Login with access token
oc login --token="eyJhbGciOiJSUzI1NiIsImtpZCI6InNiVFlkT2pqNF9PZ3pLZ0J5Um0tejRhWDl3SG1BUjNkQUlTc0NaNDFxaWMifQ.<REST OF TOKEN>" --server=https://api.<CLUSTERNAME>:6443

Logged into "https://api.<CLUSTERNAME>:6443" as "system:serviceaccount:cert-utils-operator:controller-manager" using the token provided.

You have access to XXX projects, the list has been suppressed. You can list all projects with 'oc projects'

Using project "".

Hi, thank you for reporting this I will be working on this today and hope to get a fix shortly.

Hi @lukeelten , can you provide any details on what features you are using, route certificate, truststore creation, etc?  I am trying to duplicate the issue so that I can confirm a fix.

We use the operator mainly to copy certificates from secrets to routes.
I think some users use it to create java keystores or to inject CA bundles.

I guess I missed an important detail: The log output comes from the kube-rbac-proxy sidecar container.
So on a default installation of the operator the sidecar is deployed with -v=10 verbose mode, which logs all HTTP requests including the access token.

Hi @lukeelten,
I am still struggling to duplicate the issue, could you provide the image of the sidecar proxy?  Mine is currently using the following to try to duplicate
quay.io/redhat-cop/cert-utils-operator@sha256:57567c570c6d2c3b0f5cf2eef7526e302396f313503735fee2c5eb1c3a21ba8d
quay.io/redhat-cop/kube-rbac-proxy@sha256:c68135620167c41e3d9f6c1d2ca1eb8fa24312b86186d09b8010656b9d25fb47

This is the deployment a brand new installation of the operator creates.
The images are:

quay.io/redhat-cop/cert-utils-operator@sha256:57567c570c6d2c3b0f5cf2eef7526e302396f313503735fee2c5eb1c3a21ba8d
quay.io/redhat-cop/kube-rbac-proxy@sha256:c68135620167c41e3d9f6c1d2ca1eb8fa24312b86186d09b8010656b9d25fb47

The problematic line appears to be --v=10 on the kube-rbac-proxy sidecar which automatically logs all incoming HTTP requests including all headers.
kind: Deployment
apiVersion: apps/v1
metadata:
  name: cert-utils-operator-controller-manager
  namespace: cert-utils-operator
  ownerReferences:
    - apiVersion: operators.coreos.com/v1alpha1
      kind: ClusterServiceVersion
      name: cert-utils-operator.v1.3.11
      uid: dc59b5e8-6ce4-406b-b9e4-2bd97784d783
      controller: false
      blockOwnerDeletion: false
  labels:
    olm.deployment-spec-hash: 7cbf8f97bf
    olm.owner: cert-utils-operator.v1.3.11
    olm.owner.kind: ClusterServiceVersion
    olm.owner.namespace: cert-utils-operator
    operators.coreos.com/cert-utils-operator.cert-utils-operator: ''
spec:
  replicas: 1
  selector:
    matchLabels:
      control-plane: cert-utils-operator
  template:
    metadata:
      creationTimestamp: null
      labels:
        control-plane: cert-utils-operator
      annotations:
        operators.operatorframework.io/builder: operator-sdk-v1.8.0+git
        operators.operatorframework.io/project_layout: go.kubebuilder.io/v3
        certified: 'false'
        olm.targetNamespaces: ''
        operatorframework.io/properties: >-
          {"properties":[{"type":"olm.package","value":{"packageName":"cert-utils-operator","version":"1.3.11"}}]}
        repository: 'https://github.com/redhat-cop/cert-utils-operator'
        support: Best Effort
        operatorframework.io/cluster-monitoring: 'true'
        operators.openshift.io/infrastructure-features: '["Disconnected"]'
        alm-examples: '[]'
        capabilities: Deep Insights
        olm.operatorNamespace: cert-utils-operator
        containerImage: >-
          quay.io/redhat-cop/cert-utils-operator@sha256:57567c570c6d2c3b0f5cf2eef7526e302396f313503735fee2c5eb1c3a21ba8d
        createdAt: '2023-04-26T16:55:05Z'
        categories: Security
        operatorframework.io/suggested-namespace: cert-utils-operator
        description: Set of utilities for TLS certificates
        olm.operatorGroup: cert-utils-operator
    spec:
      restartPolicy: Always
      serviceAccountName: controller-manager
      schedulerName: default-scheduler
      terminationGracePeriodSeconds: 10
      securityContext: {}
      containers:
        - resources: {}
          terminationMessagePath: /dev/termination-log
          name: kube-rbac-proxy
          env:
            - name: OPERATOR_CONDITION_NAME
              value: cert-utils-operator.v1.3.11
          ports:
            - name: https
              containerPort: 8443
              protocol: TCP
          imagePullPolicy: IfNotPresent
          volumeMounts:
            - name: tls-cert
              mountPath: /etc/certs/tls
          terminationMessagePolicy: File
          image: >-
            quay.io/redhat-cop/kube-rbac-proxy@sha256:c68135620167c41e3d9f6c1d2ca1eb8fa24312b86186d09b8010656b9d25fb47
          args:
            - '--secure-listen-address=<IP_ADDRESS>:8443'
            - '--upstream=http://<IP_ADDRESS>:8080/'
            - '--logtostderr=true'
            - '--v=10'
            - '--tls-cert-file=/etc/certs/tls/tls.crt'
            - '--tls-private-key-file=/etc/certs/tls/tls.key'
        - resources:
            requests:
              cpu: 100m
              memory: 20Mi
          readinessProbe:
            httpGet:
              path: /readyz
              port: 8081
              scheme: HTTP
            initialDelaySeconds: 5
            timeoutSeconds: 1
            periodSeconds: 10
            successThreshold: 1
            failureThreshold: 3
          terminationMessagePath: /dev/termination-log
          name: manager
          command:
            - /manager
          livenessProbe:
            httpGet:
              path: /healthz
              port: 8081
              scheme: HTTP
            initialDelaySeconds: 15
            timeoutSeconds: 1
            periodSeconds: 20
            successThreshold: 1
            failureThreshold: 3
          env:
            - name: OPERATOR_CONDITION_NAME
              value: cert-utils-operator.v1.3.11
          securityContext:
            allowPrivilegeEscalation: false
          imagePullPolicy: IfNotPresent
          terminationMessagePolicy: File
          image: >-
            quay.io/redhat-cop/cert-utils-operator@sha256:57567c570c6d2c3b0f5cf2eef7526e302396f313503735fee2c5eb1c3a21ba8d
          args:
            - '--health-probe-bind-address=:8081'
            - '--metrics-bind-address=<IP_ADDRESS>:8080'
            - '--leader-elect'
      serviceAccount: controller-manager
      volumes:
        - name: tls-cert
          secret:
            secretName: cert-utils-operator-certs
            defaultMode: 420
      dnsPolicy: ClusterFirst
  strategy:
    type: RollingUpdate
    rollingUpdate:
      maxUnavailable: 25%
      maxSurge: 25%
  revisionHistoryLimit: 1
  progressDeadlineSeconds: 600


Using gulp to set the value of Rt106_SERVER_URL from environment vari…

…able Rt106_SERVER_HOST.  This eliminates the need to rebuild the Docker image to run on a different machine and not have the browser on localhost.

When gulp-ng-constant modifies config.js, it tries to interpret the copyright notice in some way, resulting in garbled stuff in the file.  It was best to remove the copyright notice, because it seems to confuse the processing of gulp-ng-constant.
I used Rt106_SERVER_HOST as the environment variable to specify the hostname only.  Internally to the code the full URL is set to the variable Rt106_SERVER_URL.  These are slightly different.
Gulp is a node.js extension and does run as node.js code.  It could be a standalone utility that does nothing other than the gulp functions or as part of an application.  Let me know if you have a specific alternative organization in mind.

If we are going to add a script runner, we should compare gulp and grunt.
I think the env variable should be the full url. Other we force people to use http and port 80.
Does the config file need to be there at all? Couldn’t gulp/grunt generate the entire file?
Jim Miller
Senior Principal Scientist
GE Research
GE imagination at work
On Feb 13, 2018, at 5:12 PM, Brion Sarachan <notifications<EMAIL_ADDRESS>wrote:
When gulp-ng-constant modifies config.js, it tries to interpret the copyright notice in some way, resulting in garbled stuff in the file. It was best to remove the copyright notice, because it seems to confuse the processing of gulp-ng-constant.
I used Rt106_SERVER_HOST as the environment variable to specify the hostname only. Internally to the code the full URL is set to the variable Rt106_SERVER_URL. These are slightly different.
Gulp is a node.js extension and does run as node.js code. It could be a standalone utility that does nothing other than the gulp functions or as part of an application. Let me know if you have a specific alternative organization in mind.
—
You are receiving this because you commented.
Reply to this email directly, view it on GitHubhttps://github.com/rt106/rt106-frontend/pull/7#issuecomment-365422864, or mute the threadhttps://github.com/notifications/unsubscribe-auth/AATKQpvgH_nzk-xhiMvsNK9ubtXgE9M7ks5tUgjIgaJpZM4SENCB.


fix: networkloop breaks other libraries that use playerloop

Networkloop breaks other libraries that use playerloop (eg UniTask) so it's impossible to use Mirror with them together.

thx


Evi/fix svg inversion

Issue spoted by @Adam-Alj
I've added a test that assets it's working as intended, I'm also closing #48. The fix works but it's not the best fix
Thanks a lot Adam-Alj

Awesome, thanks for the fix

Hey @Adam-Alj,
I've published 0.11.0 on crates.io


Add solution 7

This PR will add the solution to exercise 7

Binder: https://mybinder.org/v2/gh/andersle/chemometrics/add_solution_7?filepath=solutions%2F07_Solution.ipynb


Help with running Leshan 1.4.x

I was hoping to use a stable version of Leshan for testing, so I downloaded Leshan 1.4.2 JARs with dependencies using this link: https://search.maven.org/search?q=g:org.eclipse.leshan AND v:1.4.2 AND !a:leshan
I was trying to figure out what version of Java to use. According to https://github.com/eclipse/leshan/issues/924 it looks like Leshan 2.0.0 uses Java 8, but according to https://ci.eclipse.org/leshan/job/leshan-1.x/ it looks like Leshan 1.4.x uses Java 7...
It looks like Java 7 is pretty much completely EOL (with perhaps the exception of some commercial support from Azul).
That means it's challenging to find a binary distribution of Java 7 - at least on a newer OS.

I installed zulu<IP_ADDRESS>-ca-jdk7.0.352-linux_amd64.deb from https://www.azul.com/downloads/?version=java-7-lts&os=linux but got the following error from the Leshan server demo:
java -jar leshan-server-demo-1.4.2-jar-with-dependencies.jar
Exception in thread "main" java.lang.UnsupportedClassVersionError: org/eclipse/jetty/server/Handler : Unsupported major.minor version 52.0
at java.lang.ClassLoader.defineClass1(Native Method)
at java.lang.ClassLoader.defineClass(ClassLoader.java:808)
at java.security.SecureClassLoader.defineClass(SecureClassLoader.java:142)
at java.net.URLClassLoader.defineClass(URLClassLoader.java:448)
at java.net.URLClassLoader.access$100(URLClassLoader.java:65)
at java.net.URLClassLoader$1.run(URLClassLoader.java:355)
at java.net.URLClassLoader$1.run(URLClassLoader.java:349)
at java.security.AccessController.doPrivileged(Native Method)
at java.net.URLClassLoader.findClass(URLClassLoader.java:348)
at java.lang.ClassLoader.loadClass(ClassLoader.java:430)
at sun.misc.Launcher$AppClassLoader.loadClass(Launcher.java:329)
at java.lang.ClassLoader.loadClass(ClassLoader.java:363)
at java.lang.Class.getDeclaredMethods0(Native Method)
at java.lang.Class.privateGetDeclaredMethods(Class.java:2625)
at java.lang.Class.getMethod0(Class.java:2866)
at java.lang.Class.getMethod(Class.java:1676)
at sun.launcher.LauncherHelper.getMainMethod(LauncherHelper.java:600)
at sun.launcher.LauncherHelper.checkAndLoadMain(LauncherHelper.java:592)

Googling that error suggests that Leshan 1.4.2 was actually built with Java 8... so I'll give that a try next...

Installed OpenJDK 8 using "apt-get install openjdk-8-jdk" then ran "/usr/lib/jvm/java-8-openjdk-amd64/jre/bin/java -jar leshan-server-demo-1.4.2-jar-with-dependencies.jar" and it's working.
Next time I'll just use the "openjdk-8-jre-headless" package but that's good to know.

FYI I'm using Leshan 1.4 and 2.x with Java 17, I don't see any issues, usually JVM are pretty good at backward compatibility

I answer to most of your question at : https://github.com/eclipse/leshan/issues/924#issuecomment-1308489137

@jvermillard That's interesting! What JDK distribution are you using?
@sbernard31 Much appreciated! :)


Unknown Licenses

The output of this action prints actions/dependency-review-action has an unknown license.
https://github.com/hfhbd/routing-compose/actions/runs/2891020667/attempts/2#summary-7922844964

Duplicate of #182

Thanks

The output of this action prints actions/dependency-review-action has an unknown license.
const { Buffer } = require('node:buffer');

// Need to keep around a few small chunks of memory.
const store = [];
socket.on('readable', () => {
let data;
while (null !== (data = readable.read())) {
// Allocate for retained data.
const sb = Buffer.allocUnsafeSlow(10);
// Copy the data into the new allocation.
data.copy(sb, 0, 0, 10);

store.push(sb);

}
})


zvm_readkeys: maximum nested function level reached; increase FUNCNEST?

I'm sometimes randomly getting the warning/error
zvm_readkeys: maximum nested function level reached; increase FUNCNEST?

, any idea why that could be?

Hi @jeffreytse
Thanks for your reporting, I will take attention to the issue. Any idea I will update here.
Thanks and regards

Hi @AckslD
Could you provide me some instructions to reproduce this issue?
Thanks and regards

Hi @AckslD
Ok, when you or someone meet the same issue again, you and they can comment to here. And I will also pay attention to it.
Thanks and regards

@jeffreytse Still not sure why but it just happened now once. I had two kitty terminals open with zsh in one and neovim in the other. While doing some stuff in neovim I got this error in the other terminal, pretty strange since I was not actually doing anything in the terminal that showed the error.
Btw, I'm using kmonad if that has anything to do with it.

Hi @AckslD
I have reproduced this issue and this is a bug actually.

Open the zsh again.
Stroke ^W and stop.
Wait for a while and it will show the error as issue title.

Hi @AckslD
This issue has been addressed and fixed. Please update your plugin to the latest version.
Thanks and regards


Bugfix: BulkLoader_Result class - Deleted Items

The Deleted function, within BulkLoader_Result class, calls mapToArrayList, which tries to find the recently deleted dataobjects.
To correct:

when calling addDeleted, store a map of each dataobject within the $this->deleted array; and,
have the Deleted function return an ArrayList based upon the $this->deleted array.

Thanks, @AntonyThorpe! Any chance you can write a test that covers this issue? Something that would fail without your change and passes with your change.

Tests added as requested.  Unfortunately the Travis CI build failed due to a Behat CMS test (file1.jpg missing in the HTML following inserting from the CMS file store).  Can you please advise the next steps?  Sorry, I am not familiar with Behat tests.  Thank you.

I'll re-execute a couple of builds to see if that failure is related to this PR.

Thanks for this!


Move collection form cancel callback higher in the component tree

Description
This moves the behavior of the "Cancel" button for the collection form higher in the component tree. Since this button will appear in the collection modal in the future (vuln reporting), we need to be able to customize its behavior.
Checklist

[ ] Investigated and inspected CI test results
[ ] Unit test and regression tests added
[ ] Evaluated and added CHANGELOG entry if required
[ ] Determined and documented upgrade steps
[ ] Documented user facing changes (create PR based on openshift/openshift-docs and merge into rhacs-docs)

If any of these don't apply, please comment below.
Testing Performed
TODO(replace-me)
Use this space to explain how you tested your PR, or, if you didn't test it, why
you did not do so. Valid reasons include, for example, "CI is sufficient",
"No testable changes". Feel free to attach JSON snippets, curl commands,
screenshots.
In addition to reviewing your code, reviewers must also review your testing
instructions and make sure they are sufficient.

Current dependencies on/for this PR:

master

PR #4017   👈

This comment was auto-generated by Graphite.


Reads block page reuse for one extra transaction

In the following situation, the pages that tx 1 adds to the freed tree get processed by tx 2, as expected:
tx 1:
    adds page A to the freed tree
    commits durably
tx 2:
    commits durably, freeing page A

And if there's a live read of tx 0, that correctly blocks the pages from being freed, because they're still reachable from tx 0:
read begins (reading tx 0)
tx 1:
    adds page A to the freed tree
    commits durably
tx 2:
    commits durably, can't free page A

But a live read of tx 1 also blocks freeing, which I believe is incorrect:
tx 1:
    adds page A to the freed tree
    commits durably
read begins (reading tx 1)
tx 2:
    commits durably, should free page A but doesn't!

Page A isn't reachable from tx 1 -- that's why tx 1 added it to the freed tree!  The last transaction it was reachable from is tx 0.  So I think it should get freed here, as long as there are no live reads of tx 0 or earlier.
In fact, redb already relies on the fact that it's safe to free page A in this situation.  In the first example above (with no live reads), consider what happens if we crash partway through committing tx 2: we'll have to roll back to the last durable commit, which was tx 1.  So tx 1 needs to remain valid, just as if there were a live read on it!  Effectively, there's always a live read on the last durable commit, since we could crash at any time and need to roll back to it.
In other words, the first example and the last example are equivalent.  So if it's safe to free page A in the former case (which redb already does), it should also be safe to free it in the latter case.
By itself, fixing this won't save a significant amount of disk space, because of #829.  But if we can fix #829 as well, then this'll cut the disk usage of a sequence of large transactions in half, in the common case where there are concurrent reads.
I believe the fix is trivial, and I'm happy to write it up if you want -- let me know if that would be useful!

Nice find, and thanks for the report!

Awesome, thanks for the quick fix!


Even more better Russian parties

All Russian parties that has ever been in State Duma. I think I'm gonna stop now, 'cause there is about 150 parties in modern Russia (mostly microparties), maybe even more.
NOTE: All parties has been given authentic start and end dates, including the Communist party of Russia (not Soviet Union)! It is probably wise to give some parties with earlier start dates the 1836 start date until the Russian Federation will be created as a separate country from the Soviet Union in the game.

It contains problems with policies, I'm working on it

I don't know why, but parties with interventionism and anti_military policies are getting noissue is their policies

The text.csv should be iso8859-15 encoded (Victoria 2 requires this). The latest text.csv in the repo is messed up. Could you please take the text.csv from 0.9.908 release, and add the Russian parties keeping the iso8859-15 encoding. Or if this is difficult move the party_conservative_0_RUS..... entries to a seprate csv file in the localisation folder named;
parties.csv

I runned the game without any problems, I edited and saved it in Excel 2016, the encoding shouldn't have changed. I resaved it in Latin-9 (iso8859-15)

Oh, wait, I took 1.0.0 version

Everything should be allright with text.csv now

Thanks :+1:

What do you mean? Everything works well on my side, plus I did save it in iso8859-15 (though it doesn't make any difference).

I understood now, it's because of github and/or internet browser, it changes encoding when I copy the contents of csv to it. Is there any civilized way to download big files on github?

Just cone (checkout) the nwomod repo. Edit the text.csv (or from now on
nwo_parties.csv) in notepadd++ seting the encoding to ANSI. That is it.
On Sat, Dec 19, 2015 at 6:47 PM, VictorWeikum<EMAIL_ADDRESS>wrote:

I understood now, it's because of github and/or internet browser, it
changes encoding when I copy the contents of csv to it. Is there any
civilized way to download big files on github?
—
Reply to this email directly or view it on GitHub
https://github.com/simsulla/nwomod/pull/18#issuecomment-166009826.


No docs describing on how to deploy contracts with complex library dependencies tree

From the docs, it sounds easy if we deploy a contract A which relies on library B, C, D, but it's not describing on how to deploy a contract:
A
├── B
│   └── D
└── C
    └── E

Original question: https://github.com/matter-labs/hardhat-zksync/issues/302#issuecomment-1591279689

Hi, thank you. I've created a ticket for this. Please keep your eye out for the update.


How to conditionally define rules for elements?

Hi,
Is it possible to define rules based on whether or not a particular element is present in the page? Probably a simple question, but I can't see an answer anywhere.
The page I am designing has some elements that may or may not be present at any given time - how should I write the layout rules to take this into account?
Thanks,
-Jonathan.

Are the elements determined at compile-time or runtime?

The scenario I've got is two boxes in a horizontal layout:
@horizontal |-[#box1]-[#box2]-|
#box2 needs to be able to be hidden, ideally without reloading the page. In this case, #box1 should expand to the full width.

If the elements are of a similar kind and should have equal widths, then you can do things like this:
@h |-(.box)-...-| in(#boxes) gap(40);

If not then there are some other ways to approach this.

Paul's code uses new GSS with splat feature. To make it a bit more closer to the question:
Splat allows you to constrain unknown number of elements. I used 2nd class in the example, so you can switch it to switch alignment for specific button.
@h |-(.box.visible)-...-| in(#boxes);

Another approach that works with old GSS would be multiple grids:
@horizontal |-[#box1]-| in(#boxes) !weak;
@horizontal |-[#box1]-[#box2]-| in(#boxes) !strong;


Cmake build idf v4.0

Hi,
I failed to build the esp32 led sample using Cmake under idf v4.0.
Should this work?

No, use make

I got it working on stock ESP-IDF 4.0 with CMake.
Here's my notes...  worked for me, ymmv...
Installed ESP-IDF per 4.0 getting started guide (Windows)
https://docs.espressif.com/projects/esp-idf/en/latest/get-started/index.html
I was also using the new Eclipse plugin, setup per guide:
https://github.com/espressif/idf-eclipse-plugin/blob/master/README.md
--------------esp-homekit testing-------------------
Cloned esp-homekit-demo to a folder (not associated with any local project)
Created new EspressIf IDF project in Eclipse. named it HomeKit-Testing
Created components folder in my HomeKit-Testing project
Examined required dependencies of in CMakeLists.txt in esp-homekit-demo/components/homekit:
it needs: wolfssl cJSON http-parser mdns
Where to get them? The esp-homekit-demo source has everything not already in ESP-IDF:

esp-homekit-demo/components/common/wolfssl -> has CMakeLists.txt
esp-homekit-demo/components/esp8266-open-rtos/cJson -> no CMakeLists.txt
esp-homekit-demo/esp-idf/http-parser -> has CMakeLists.txt
mdns -> part of esp32

I copied all these from the esp-homekit-demo locations to my project's components folder:
HomeKit-Testing
	/components
		cJson -> doesn't have CMakeLists.txt -> made one.
		homekit
		http-parser
		wolfssl

For the cJson component, I created a CMakeLists.txt file at components/cJSON and put this in it:
idf_component_register(
    SRC_DIRS "cJSON"
    INCLUDE_DIRS "cJSON"
)

For the homekit component, build errors were happening in port.h on the #include "esp_spi_flash.h"
I had to modify the CMakeLists.txt in homekit to add spi_flash as a required dependency (from ESP-IDF).
Once that modification was done, it built with no errors. (Lots of warnings though...)
Used the main/led.c from esp-homekit-demo/examples/esp32 for initial test.  Pasted the contents into main.c in my project.

Commented out #include "wifi.h" - not needed and I don't have arduino-esp32 as a component on this project.
Added #include <stdbool.h> because eclipse was not happy about bools without it.
Modified wifi_config area to use CONFIG_ESP_WIFI_SSID and CONFIG_ESP_WIFI_PASSWORD from the basic Eclipse IDF project

Kconfig.projbuild has an addition for ssid and pass to be set in sdkconfig.

edited homekit_server_config to have setupId per the main esp-homekit github (using gen_qrcode)
also changed the passcode to match the esp-homekit readme.md example.
homekit_server_config_t config = {
    .accessories = accessories,
    .password = "123-45-678",
	.setupId = "1QJ8"
};

idf.py menuconfig
set my ssid and pass in Example Configuration.
idf.py build
built successfully!
To generate QR code per the esp-homekit guidance will need qrcode installed in python.
https://pypi.org/project/qrcode/
python -m pip install qrcode[pil]
it should pull in Pillow as well for image processing. https://pillow.readthedocs.io/en/stable/installation.html
Note that the qrcode generator doesn't like 111-11-111 as the password.  I used 123-45-678 instead like the esp-homekit readme.md says.
From components\homekit\tools>
python gen_qrcode 5 123-45-678 1QJ8 qrcode.png
qrcode.png should now be setup.
Now that we know we can 1) build successfully and 2) generate the qrcode; lets get this flashed.
idf.py -p COM4 erase_flash
idf.py -p COM4 flash
idf.py -p COM4 monitor

No issues visible, all seems fine.
Setup with my phone using qrcode.png, and all is well! I can turn on and off the led on the esp32 just fine from Apple Home.

I followed your manual and it works great. Thanks.


Missing Documentation

Stuff that isn't documented that needs to be:
Guides:

[ ] Guide.xlabel
[ ] Guide.ylabel
[ ] Guide.xticks
[ ] Guide.yticks
[ ] Guide.title
[ ] Guide.colorkey

Scales:

[x] Continuous scales. (Scale.x_continuous, Scale.y_continuous, etc) Predefined transforms (Scale.x_log10, etc). Defining new transforms.
[x] Discrete scales. (Scale.x_discrete, Scale.y_discrete, etc)
[x] Discrete color scales.
[x] Continuous color scales.

Statistics:

[ ] Stat.histogram
[ ] Stat.density
[ ] Stat.histogram2d
[ ] Stat.xticks/Stat.yticks
[ ] Stat.boxplot
[ ] Stat.smooth
[ ] Stat.hexbin
[ ] Stat.step

Miscellaneous

[ ] spy
[ ] Plotting non-number continuous types (e.g. time series). Interface required for a type to be plotable.
[ ] hstack/vstack

A couple of features that I didn't found in the docs:

Fixing aspect ratio: Coord.cartesian(fixed=true)
Reversed domains: plot(sin,1,0)
Default colors (#602)


psutil.AccessDenied

$ ./test3_analyze.sh
[prophyle] 2017-07-03 13:01:56 Running: /Users/karel/github/my/prophyle/prophyle/prophyle_analyze.py ./_index_test _test_analyze.basic - -t otu -l -1
Traceback (most recent call last):
  File "/Library/Frameworks/Python.framework/Versions/3.4/lib/python3.4/site-packages/psutil/_psosx.py", line 196, in wrapper
    return fun(self, *args, **kwargs)
  File "/Library/Frameworks/Python.framework/Versions/3.4/lib/python3.4/site-packages/psutil/_psosx.py", line 266, in memory_info
    rss, vms = cext.proc_memory_info(self.pid)[:2]
PermissionError: [Errno 13] Permission denied

During handling of the above exception, another exception occurred:

Traceback (most recent call last):
  File "./prophyle/prophyle.py", line 1290, in <module>
    main()
  File "./prophyle/prophyle.py", line 1266, in main
    max_lines=args.max_lines
  File "./prophyle/prophyle.py", line 819, in prophyle_analyze
    pro.run_safe(cmd_analyze)
  File "/Users/karel/github/my/prophyle/prophyle/prophylelib.py", line 424, in run_safe
    max_rss = max(max_rss, ps_p.memory_info().rss)
  File "/Library/Frameworks/Python.framework/Versions/3.4/lib/python3.4/site-packages/psutil/__init__.py", line 935, in memory_info
    return self._proc.memory_info()
  File "/Library/Frameworks/Python.framework/Versions/3.4/lib/python3.4/site-packages/psutil/_psosx.py", line 208, in wrapper
    raise AccessDenied(self.pid, self._name)
psutil.AccessDenied: psutil.AccessDenied (pid=59835)

Fixed by https://github.com/karel-brinda/prophyle/commit/38a75d9a08ab621793b8b4d0cedbfd908c39aace


Removed py-jsonapi

I don't maintain the library anymore and there are already (too) many implementations for Python :)

Thanks for helping us keep the list updated!


PineconeVectorStore support loading data from Python and reading from TS

Hey everyone.
I'm using Pinecone as a vector DB for my RAG application. I've loaded some documents into it with python code, and now I'm trying to query the DB with TypeScript. However, the nodes in the query result always contains an empty "text" field, which prevents me from using the texts in my prompt.
Here is how I query the DB:
const embedModel = new OpenAIEmbedding({
  apiKey: process.env.OPENAI_API_KEY as string,
  model: "text-embedding-3-large",
  dimensions: 768,
});
const embedding = await embedModel.getTextEmbedding("my query");
const pcvs = new PineconeVectorStore({
  indexName: "my-index",
});
const result = await pcvs.query({
  queryEmbedding: embedding,
  similarityTopK: 5,
  mode: VectorStoreQueryMode.DEFAULT,
});

console.log(result.nodes); // Contains 5 items with scores but empty text field

Here is how I loaded them into the DB:
pc = Pinecone(api_key=pinecone_api_key)
pc_index = pc.Index(name=organization_id)

vector_store = PineconeVectorStore(pinecone_index=pc_index)
storage_context = StorageContext.from_defaults(vector_store=vector_store)
embed_model = OpenAIEmbedding(
    api_key=openai_api_key,
    model="text-embedding-3-large",
    dimensions=768,
)

VectorStoreIndex.from_documents(
    total_documents,
    vector_store=pc_index,
    show_progress=True,
    embed_model=embed_model,
    storage_context=storage_context,
)

Here is an image during a debugging session:

I think this is related to #552 but I'm not sure.
I'd would love to get some help on this :)

@david1542 we just tested this with the new 0.1.19 release. Please have a try and reopen if necessary


Question: safe to apply two rulesets to same property?

I tried to find info about this in the wiki but couldn't.
Suppose we have this:
RuleFor(x => x.Id)
  .GreaterThan(0)
  .CheckFoo()
  .CheckBar();

// later on...

RuleFor(x => x.Id)
  .CheckBaz()
  .CheckSomethingElse();

Is that "safe"? Will it respect both calls, or only the second (or first)?

UPDATE
Seems like it works
Just wanted to know whether this is supported behavior, or is it liable to change and am I asking for trouble?

Yep that's all perfectly fine, supported and even recommended in some cases


Metadata API: Remove dependency on dateutil

PR #1710 added a new package dependency (dateutil) to Metadata API: This was likely not intended, and was not caught by the tests because dateutil is a test dependency.
I think we should fix this before releasing 0.20 (#1694).

I think bump_expiration() as a method is not super useful.
Current test code looks like this:
        delta = relativedelta(years=1)
        timestamp.signed.bump_expiration(delta)

Same thing without using the helper function:
        timestamp.signed.expires += relativedelta(years=1)

this is in my opinon works fine without the API depending on dateutil.

This breaks RTD documentation:

WARNING: autodoc: failed to import module 'metadata' from module 'tuf.api'; the following exception was raised:
No module named 'dateutil'

I agree we can remove Signed. bump_expiration().
If we have an agreement I can propose a pr for this one today, so we can move forward with #1723.

we don't need to remove the function to fix the immediate issue.
Let's fix the dependency issue first, then spend the time we need to get the API (and/or docs) right before 1.0 release: as an example I only now realized the test (and the function) are also bad examples: I don't think anyone ever wants to bump based on existing expiry date, real users want to bump based on current time... which leads to a potential issue with microseconds.
I suggest we

modify the tests to use something like my suggestion (even if it's a bit bad example as mentioned)
remove mentions of dateutil from Metadata API
file an issue to improve Metadata expiry API

An issue where we can discuss if we want Signed.bump_expiry() https://github.com/theupdateframework/python-tuf/issues/1727


⚠ Samsung has degraded performance

In 0156d80, Samsung (https://samsung.com) experienced degraded performance:

HTTP code: 200
Response time: 2503 ms

Resolved: Samsung performance has improved in d5e0096.


feat: add WithImports option

Fixes #31.
@meblum does this look reasonable? You'll need to set the WithImports(false) option in your code.

Wow, you're quick :) From a usability perspective, instead of  WithImports(false), perhaps there should be single option that does the equivalent of  WithImports(false) WithHeader("") WithPackageName("") ? I don't see the use case of someone setting WithImports(false) but still want a package declaration.

I mean, for the library, that's not a big deal it can stay the way it is, but for the cli it should probably be combined as a single option.

Good idea. Something like -types-only as in 36cb37aa03b5381fb4fd43e0f45945309525e277?

Yes! Thanks so much!!!

OK, done. Tagged v1.6.0 with these extra options and flags. Thank you very much for your work here!


Issue LSTM for IMDB

Hello Scott,
Thanks a lot for your wonderful package with Shap !
I receive this message when running the LSTM example:
"AssertionError: Minimum is not known to be either linear or a supported non-linearity! Please post this as a GitHub issue so Minimum can potentially be included in the list of supported ops."
Do you have an idea of how I could fix it ?
Best,
Pierre

I also get the same error and I posted it. If you could find the solution, please let me know!
Regards

I think this showed up recently with newer TF versions. I just pushed a fix to github which will go out to pip with v0.23.

Ok thanks Scott !

Can I ask how can I update the current SHAP to the version with fixed error?
I am still getting the 'AssertionError: Minimum is not known to be either linear or a supported non-linearity!' error!

AssertionError: Minimum is not known to be either linear or a supported non-linearity!

@pbcacao @amirjalilifard
You may consider to check out this temporary solution #188

This should be fixed now in 0.23. Let me know if you still have any issues!


DAO Creation Flow Redesign

A redesign on the DAO creation flow
https://www.figma.com/file/cO1nBoNZCmMKCwCCpyTxfx/🦄-Fractal-|-Pages-%26-Flows-Master?node-id=4825%3A32735&t=LWgr6pl8dlUHZfiG-0

@Da-Colon It seems like this one merged already, right?

yup, good to close this out, thanks!


The linter is writing warnings to the standard error stream rather than the standard warning stream.

Bicep version
Bicep CLI version 0.26.170 (e9abaf16a5)
Describe the bug
The linter is writing warnings to the standard error stream rather than the standard warning stream.
It's possible that the issue is limited to only this rule:
Warning no-loc-expr-outside-params: Use a parameter here instead of 'resourceGroup().location'. 'resourceGroup().location' and 'deployment().location' should only be used as a default value for parameters. [https://aka.ms/bicep/linter/no-loc-expr-outside-params]
To Reproduce
Steps to reproduce the behavior:

Write a bicep file that will trigger the above linter warning
Build it via az bicep build
Observe that it is writing to the Error Stream rather than the Warning Stream

Additional context
Add any other context about the problem here.
I have an ADO Pipeline that attempts to build a set of bicep files and verify that it is successful before allowing PRs to be merged. I updated the task to failOnStderr: true as the build sometimes passed even though the az bicep build command created errors. Now my pipeline is failing because of the above linting warning writing to Error Stream.
Example Pipeline Task:
- task: PowerShell@2
  displayName: Build Bicep Files
  inputs:
    failOnStderr: true
    filePath: $(buildBicepScriptPath)
    pwsh: true
    arguments: -SearchPaths $(searchPaths)

Example Powershell Script:
param(
    [Parameter(Mandatory = $true)]
    [string[]]
    $SearchPaths
)

az bicep version

Write-Host `n'Building bicep files...'

foreach ($searchPath in $SearchPaths) {
    Write-Host `n'Looking for resource files in:' $searchPath`n

    $filesToBuild = Get-ChildItem Resources.bicep -Path $searchPath -Recurse -File

    if ($filesToBuild.Length -eq 0) {
        Write-Host 'Did not find any Resources.bicep files.' -ForegroundColor Red
    }

    foreach ($file in $filesToBuild) {
        Write-Host 'Building:' $file.FullName
        az bicep build --file $file.FullName
    }
}

Write-Host `n'Finished building bicep files.'

Example Bicep File with warning:
@description('Additional app settings to be added to the web app')
param additionalAppSettings object = {}

@description('Resource name for the Azure App Config instance this function uses')
param appConfigName string

@description('The Azure App Config labels this app should pull in')
param appConfigLabelFilters string

@description('The key that Azure App Config should watch to trigger its refresh')
param appConfigRefreshSentinelKey string = 'RefreshSentinel'

@description('The label in which the Refresh Sentinel key is stored')
param appConfigRefreshSentinelLabel string

@description('Which app insights resource should telemetry be sent to?')
param appInsightsName string

@description('Denotes the desired name for the app service plan')
param appServicePlanName string

@description('What sku to use for the app service plan?')
param appServicePlanSku string

@description('Resource name for the Azure Key Vault instance this app uses')
param keyVaultName string

@description('Desired set of tags to apply to each created resource')
param resourceTags object = {}

@description('Which location should resources be deployed to?')
param targetLocation string = resourceGroup().location

// Internal variable Location parameter to overwrite when target location not defined in variable group
var targetLocationToDeploy = targetLocation == '' ?  resourceGroup().location : targetLocation

@description('Denotes the desired name for the web app')
param webAppName string

@description('Denotes the desired slot name for the web app')
param webAppSlotName string

@description('Denotes the desired time zone for the web app')
param webAppTimeZone string = 'Pacific Standard Time'

@description('Denotes the desired .net version for the web app')
param netFrameworkVersion string = 'v6.0'

resource appServicePlan 'Microsoft.Web/serverfarms@2021-03-01' = {
  name: appServicePlanName
  location: targetLocationToDeploy
  sku: {
    name: appServicePlanSku
  }
  properties: {
    // Workaround for https://github.com/Azure/bicep/issues/7865
  }
  tags: resourceTags
}

resource appInsights 'Microsoft.Insights/components@2020-02-02' existing = {
  name: appInsightsName
}

resource appConfig 'Microsoft.AppConfiguration/configurationStores@2020-06-01' existing = {
  name: appConfigName
}

var defaultAppSettings = {
  'AppConfigSettings:Endpoint': appConfig.properties.endpoint
  'AppConfigSettings:UnparsedLabelFilters': appConfigLabelFilters
  'AppConfigSettings:RefreshSentinelKey': appConfigRefreshSentinelKey
  'AppConfigSettings:RefreshSentinelLabel': appConfigRefreshSentinelLabel
  APPLICATIONINSIGHTS_CONNECTION_STRING: appInsights.properties.ConnectionString
  WEBSITE_TIME_ZONE: webAppTimeZone
}

var webAppProperties = {
  clientAffinityEnabled: false
  httpsOnly: true
  serverFarmId: appServicePlan.id
  siteConfig: {
    alwaysOn: true
    ftpsState: 'Disabled'
    use32BitWorkerProcess: false
    webSocketsEnabled: false
    netFrameworkVersion: netFrameworkVersion
  }
}

resource webApp 'Microsoft.Web/sites@2021-03-01' = {
  name: webAppName
  location: targetLocationToDeploy
  kind: 'webapp'
  identity: {
    type: 'SystemAssigned'
  }
  properties: webAppProperties
  tags: resourceTags
}

Example Pipeline Log:

As a workaround add a bicepconfig file to the repo or in a root folder on the agent with:
"no-loc-expr-outside-params": {
"level": "off"
}
https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/bicep-config-linter

Please note that "standard warning" is a purely powershell concept - there's no actual standard warning stream that a CLI application can use, so az and bicep CLIs have no choice but to use stderr for diagnostics.
The exit code will tell you precisely whether a particular command has failed - personally I would recommend trying to use this instead to determine success. Here's how I would solve it personally:
param(
    [Parameter(Mandatory = $true)]
    [string[]]
    $SearchPaths
)

$hasErrors = $false
function ExecSafe([scriptblock] $ScriptBlock) {
    & $ScriptBlock
    if ($LASTEXITCODE -ne 0) {
        Write-Error "Failed to execute command: $ScriptBlock"
        $hasErrors = $true
    }
}

ExecSafe { az bicep version }

Write-Host `n'Building bicep files...'

foreach ($searchPath in $SearchPaths) {
    Write-Host `n'Looking for resource files in:' $searchPath`n

    $filesToBuild = Get-ChildItem Resources.bicep -Path $searchPath -Recurse -File

    if ($filesToBuild.Length -eq 0) {
        Write-Host 'Did not find any Resources.bicep files.' -ForegroundColor Red
    }

    foreach ($file in $filesToBuild) {
        Write-Host 'Building:' $file.FullName
        ExecSafe { az bicep build --file $file.FullName }
    }
}

Write-Host `n'Finished building bicep files.'

if ($hasErrors) {
    exit 1
}

@mortenlerudjordet - Yes, but this then turns the warning off everywhere and not just in the one single permitted place. We still want the warning to happen elsewhere.
@anthony-c-martin - Thanks for the additional info. I wasn't aware that powershell's "standard warning" was not a wrapper around an existing cmd one.
I attempted to use your suggested code; however, I ran into the following error:

That said, the real "meat" of the suggestion was to have the script to return a non-zero exit code when $LASTEXITCODE is not 0. This seems to be working as expected without the need of the failOnStderr task param.
Since there is no "standard warning" at the cmd level and the root of my issue has been resolved via your suggestion, I've gone ahead and chosen to close this issue. Thank you 🙂


[FEATURE] Allow specifying --image for all used images

Scope of your request
Use only mirrored container-images for k3d.
Describe the solution you'd like
K3d already provides --image for nodes image. It would be nice to be able to do the same for "the rest" like

rancher/k3d-proxy:v3.0.2
traefik
other images used "by default" or configurable by options.

This way we would be more self-sustaining and ease the pull from docker.io (also regarding the upcoming limits).
regards,
strowi

Hi, thanks for opening this issue :+1:
The only images that k3d itself uses are

rancher/k3s -> specify via --image flag
rancher/k3d-tools
rancher/k3d-proxy
The latter two you currently cannot override completely, but only the tag using the environment variable K3D_HELPER_IMAGE_TAG (unstable, only for development purposes right now).

Traefik, etc. is all managed by k3s itself and can be overridden by bind-mounting custom manifests or pre-loading images or redirecting image pulls using the registries.yaml (if that's possible) or by directly modifying the containerd config.

Thx for the explanation about the other images.
We`re running k3d partly in our gitlab-ci pipelines and would like to reduce the number of docker pulls to the outside. I will have to check the other images running inside the k3s-cluster.

This will land in k3d v5.0.0 via two additional environment variables:

K3D_IMAGE_LOADBALANCER
K3D_IMAGE_TOOLS
With this, one can explicitly specify all 3 images used directly by k3d.
For images inside the k3s cluster, my last comment applies.

v5 to be released soon, closing this to clear the milestone :+1:


Do we really still care about golang 1.6 tests?

Would eliminating 1.6 tests speed up testing?

Tests run in parallel, so I don't think they cost much, but if we're OK dropping support for 1.6 then I'm in favor of eliminating tests on it. I think everything actually runs inside Docker (e.g. make integration does docker build -t ocid_dev:HEAD .) which is FROM golang:1.7 so we're not actually getting better test coverage.
cc @mrunalp @sameo @runcom @cyphar @nalind

Upstream, we probably don't need to care about 1.6.
At the moment, 1.6 is the latest version of golang that we have on RHEL 7, so with my downstream hat on I'm still interested in making sure that we can build using 1.6.

I'm ok keeping 1.6 as long as RHEL builds with 1.6 (and drop it once we rebase to 1.7)

@runcom Hasn't RHEL moved on from GOLANG 1.6?


HTML tags no longer work in the description field

Jenkins and plugins versions report

What Operating System are you using (both controller, and any agents involved in the problem)?
Linux (Controller)
Windows (Agent)
Reproduction steps

Create an "Extended Choice Parameter"
"Name": "Test"
"Basic Parameter Types"->"Parameter Type": "Check Boxes"
"Basic Parameter Types"->"Number of Visible Items": "1"
"Basic Parameter Types"->"Delimiter": ","
"Basic Parameter Types"->"Choose Source for Value"->"Value": "a"
"Basic Parameter Types"->"Choose Source for Default Value"->"Default Value": "a"
"Basic Parameter Types"->"Choose Source for Value Description"->"Description": "Nice Description"

Expected Results
Until 359.v35dcfdd0c20d HTML tags were interpreted.

Actual Results
Since 373.v1a_ecea_fdf2a_a_ it looks like.

@otom2023 , I am interested to solve it. Can you assign me this issue?

@Aditya-PS-05, I'm only the reporter of the issue. I don't have the permission to assign you this issue.


Add more testcases for fluid

Ⅰ. Describe what this PR does
add more testcases for fluid, which include:

get the latest fluid
uninstall old fluid
install latest fluid
create dataload
check dataload running status

Ⅱ. Does this pull request fix one issue?

NONE
Ⅲ. List the added test cases (unit test/integration test) if any, please explain if no tests are needed.
Ⅳ. Describe how to verify it
Ⅴ. Special notes for reviews

Codecov Report

Merging #617 (e69975e) into master (af92733) will not change coverage.
The diff coverage is n/a.

@@           Coverage Diff           @@
##           master     #617   +/-   ##
=======================================
  Coverage   18.04%   18.04%
=======================================
  Files          64       64
  Lines        2727     2727
=======================================
  Hits          492      492
  Misses       2185     2185
  Partials       50       50

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update af92733...e69975e. Read the comment docs.


[Bug Report] Can't change anything about the bot

Whenever I go into notepad or notepad++ and change something, it doesn't work. For example I try to change the alias of play, it doesn't work

There are several reasons why changing the config may not work & I believe it's better that we track down the cause on Discord.
Could you come to jagrosh's server and ping me in the #support channel? (Michaili#0406)

This sounds like a configuration issue, not a bug. Try deleting your config file and then editing the one that the bot generates at startup (it tells you where it creates it).


interface.implements decorator

Hi @ssanderson, congratulations on the package!
We have an in-house of implementation of interfaces which is very similar to yours in philosophy and usage.
One key difference in our implementation is that we use a decorator to signal implementation instead of subclassing. For example:
class MyClass(implements(MyInterface)):

    def method1(self, x):
        return x * 2

    def method2(self, x, y):
        return x + y

In our framework is written as:
@implements(MyInterface)
class MyClass:

    def method1(self, x):
        return x * 2

    def method2(self, x, y):
        return x + y

On advantage is that we don't need to insert any classes in the user's hierarchy, similar to how attr.s works, which is less intrusive.
This is not really an issue but more of a question on what you think about the approach of using a decorator?

hey @nicoddemus.
The main reason I use subclassing here is that it allows me to guarantee that subclasses don't break interfaces. For example, if I write:
class SomeInterface(Interface):
    def method(self, x):
        pass

class MyImpl(implements(SomeInterface)):
    def method(self, x):  # correctly implemented
        pass

class MySubclass(MyImpl):
    def method(self, x, y):  # oops, this one is wrong
        pass

this package will raise an error telling you that MySubclass is failing to implement an interface that its parent promised to implement:
InvalidImplementation:
class MySubclass failed to implement interface MyInterface:

The following methods of MyInterface were implemented with invalid signatures:
  - method(self, a, b) != method(self, a)

To get the same behavior with a decorator-based approach, you'd have to ensure that every subclass re-applies the same decorator. My general feeling is that the purpose of this library is to try to prevent these kinds of accidental mistakes, which I can do more effectively with the subclassing-based API.
The main downside to this strategy, as you note, is that my implementation requires insertion of an extra class, as well as a metaclass, which can cause conflicts if you're using another metaclass. You can generally work around this by making your metaclass a subclass of ImplementsMeta, but that's more metaprogramming than most people like to use for serious work. See https://github.com/ssanderson/interface/issues/12#issuecomment-357319120 for a concrete example of this.
I'd be open to the idea of an alternate decorator-based API that used less type-based magic at the cost of not protecting subclasses.

Hey @ssanderson, thanks for the detailed explanation.
Indeed our implementation requires you to reapply the decorator in cases where subclasses change the method of a superclass. We have a pretty large codebase and did not miss this functionality, but YMMV.
We were planning on releasing our interface implementation as OS, and I found your project while looking for an available name on PyPI, so we are considering contributing to your project instead of releasing yet another "interface" implementation.
I believe we can add the decorator-based API in addition to the subclass-based one without conflict in the same codebase, if you are interested.
Let me know what you think.

I'd be open to a PR that adds a decorator-based API. I think the functionality you want would basically just require extracting the core logic of ImplementsMeta.__new__ into a standalone function. The hardest question should just be bikeshedding over naming choices.
One piece of functionality that might be worth thinking about carefully is our support for defaults. Currently, if you decorate an interface method with @default, we copy the decorated function onto new types that subclass from implements(TheInterface), and we do some validation to ensure that types implementing multiple interfaces don't end up with conflicting default-provided methods. I think that functionality still makes sense for the decorator-based API, but depending on our naming choices I could imagine that being surprising behavior (e.g., if we named the decorator function something like check_implements, I wouldn't expect it to have side-effects).


jsx precompile option isn't mentioned in docs

https://deno.com/blog/v1.38#fastest-jsx-transform
also note the warning in hono's docs https://hono.dev/docs/middleware/builtin/jsx-renderer#userequestcontext

I also just stumbled upon this. The docs should mention what this means, since this is not one of the options in tsconfig.json docs.


Str.concatUtf8 : List U8, Str -> List U8

Str.concatUtf8 : List U8, Str -> List U8

Concats the contents of the string directly into the given list of bytes.
See https://github.com/rtfeldman/roc/pull/3223/files#r899682722 for motivation

Could I pick this up?

Sure, if you have any questions best to jump on Zulip. 😀

This was implemented as List.concatUtf8: List U8, Str -> Str

Awesome, thank you so much @shua! 😃


User friendly output for failed "command".

Hi,
I am not a native speaker, while every time I spend ~10 seconds to understand what I have received here:
> Command: getent passwd superman: exit-status:
> Expected
>     <int>: 0
> to equal
>     <int>: 2

Can it be mode user friendly? Like:
> Command: getent passwd superman: exit-status:
> Received:  <int>: 2
> Expected:  <int>: 0

or
> Command: getent passwd superman: exit-status: <int>: 2
> Expected:  <int>: 0

or
> Command: getent passwd superman
> Exit-status: <int>: 2
> Expected:  <int>: 0

Sure, maybe it is my lonely problems, feel free to resolve the ticket then!

Nah, it's not just you. I often have to double read the test results myself.
So, that output comes from the gomega matchers. To change it I would have to extend them locally in Goss. Which might not be a bad idea, since Goss only uses a subset anyways.
I'll keep this open as an enhancement request.

+1 for this feature request
Am 24.03.2017 1:46 PM schrieb "Ahmed Elsabbahy"<EMAIL_ADDRESS>
Nah, it's not just you. I often have to double read the test results
myself.
So, that output comes from the gomega matchers. To change it I would have
to extend them locally in Goss. Which might not be a bad idea, since Goss
only uses a subset anyways.
I'll keep this open as an enhancement request.
—
You are receiving this because you are subscribed to this thread.
Reply to this email directly, view it on GitHub
https://github.com/aelsabbahy/goss/issues/213#issuecomment-289013461,
or mute the thread
https://github.com/notifications/unsubscribe-auth/AKaxGXj1MLfzn6VYkV2PYD1df7taP7Fjks5ro7s2gaJpZM4MnxIm
.

Closing this for now. There's a gomega issue tracking this, see my comment here:
https://github.com/aelsabbahy/goss/issues/453#issuecomment-564866168


Laravel 9.43.0 Shift

This pull request includes updates for the recent minor version release of Laravel as well as updates to your package dependencies. Feel free to commit any additional changes to the shift-ci-v9.43.0 branch.
Before merging, you need to:

Checkout the shift-ci-v9.43.0 branch
Review all pull request comments for additional changes
Run composer update
Thoroughly test your application (no tests?, no CI?)

:warning: The Shift build servers run PHP 8.1. If you are running a different version of PHP you should run composer update locally to ensure you have the proper versions of your dependencies to reflect your PHP environment.


Dev

Short list of features:

New authentication
Performance mode (toaster-mode: "true" in local storage)
Server Side Rendering
More analytics
Improved embeds for blogs
List of logged in devices


Add also psr/log in version ~2.0||~3.0

It enables installation of monolog/monolog v3 and other PHP>=8.0 logging solutions. Closes #1082 .
Jira: CT-XXX
KBC: XXX
Before asking for review make sure that:
Checklist

[x] New client method(s) has tests
[x] Apiary file is updated

Release

[ ] I gave the PR a proper label:

major (BC break)
minor (new feature)
patch (backwards compatible fix)
no release (just test changes)

@odinuv @pepamartinec @zajca Do you think there could be a problem with this? I don't think so.
The diff between major releases is here: https://github.com/php-fig/log/compare/1.1.4...3.0.0 (generally return types & parameter types).
For 8.1 it installed monolog v3.4 - https://github.com/keboola/storage-api-php-client/actions/runs/5332819512/jobs/9662507021?pr=1088#step:4:77

We can wait with merge until the important stuff is finished mid-July and @VNovotna can use her fork in the meantime.

We encountered some difficulties while updating to Monolog 3.x due to its change in the internal representation of log record from a plain array to an object. As a result, we had to update the processors accordingly. However, I don't see any apparent issues with updating psr/log.

I am closing this PR since it has been fixed here https://github.com/keboola/storage-api-php-client/pull/1231


Align options with naming convention. Closes #5616

Align options with naming convention. Closes #5616
Renamed the following options:

Command
Current option
Desired option

aad group user list
groupDisplayName
groupName

aad m365group conversation post list
groupDisplayName
groupName

aad m365group recyclebinitem list
groupDisplayName
groupName

outlook message get
userPrincipalName
userName

Awesome, thanks @nanddeepn!

ready to merge 🚀

Merged manually. You Rock 👏🤩


any way to uninstall ruby using rbenv

Didn't find any way on readme to remove ruby installed with rbenv.

Sorry about that. To uninstall a version e.g. "1.2.3", simply use rm -rf `rbenv root`/versions/1.2.3. I'll see if we can work this into the README somehow.

This doesn't works for me and I'm stuck at removing ruby installed with rbenv, need a different version but each time it latched on the latest version, so I was wondering let start from the start and bring my linux just as it was before installing rbenv but failing each time here's the log
pulkitnandan@ubuntu:~$ rm -rf rbenv root/versions/1.2.3^C
pulkitnandan@ubuntu:~$ ruby -v
ruby 2.1.2p95 (2014-05-08) [x86_64-linux-gnu]
pulkitnandan@ubuntu:~$ rm -rf rbenv root/versions/2.1.2p95
pulkitnandan@ubuntu:~$ ruby -v
ruby 2.1.2p95 (2014-05-08) [x86_64-linux-gnu]
Does it mean it needs atleast on ruby installed.

If you type rbenv version, you will get the actual name of the Ruby install. In your case it's probably "2.1.2". So the command would be:
rm -rf `rbenv root`/versions/2.1.2

But if you want to completely uninstall rbenv, all you have to do is remove entire rbenv root directory and remove references to rbenv from your shell initialization files.
I'm not really sure whether you're trying to use another version of Ruby or uninstall rbenv from your system, though. What is your primary goal you were trying to achieve? What's preventing you from doing it?

The documentation for removing individual Ruby versions from rbenv was added in #188.


Add encodeURIComponent for search queries

Basically the same as #63 but rebased. Please publish a new version after this.

And this is a breaking change actually so might need to bump the major.

Because people might already be using encodeURI or encodeURIComponent on their side, which would now double-encode the search term:
encodeURIComponent('&')
"%26"
encodeURIComponent('%26')
"%2526"

gotcha.

Published. We're still under 1.0.0, so no major bump.


flutter compass does not specify a swift version

it is giving me this error " [!] Unable to determine Swift version for the following pods:
- flutter_compass does not specify a Swift version and none of the targets (Runner) integrating it have the SWIFT_VERSION attribute set. Please contact the author or set the SWIFT_VERSION attribute in at least one of the targets that integrate this pod."
I even updated my cocoa pods also did a pod install which gave me the same error .
I also changed the pod file and put the target swift version for flutter compass but still the issue is not resolved . Could you please look into that and help me asap.
ThankYou

Please share steps to reproduce. Does it happen with just creating new
project?
On Tue 12 Mar, 2019, 3:54 AM TeamCommonwealth<EMAIL_ADDRESS>wrote:

it is giving me this error
" [!] Unable to determine Swift version for the following pods: -
flutter_compass does not specify a Swift version and none of the targets
(Runner) integrating it have the SWIFT_VERSION attribute set. Please
contact the author or set the SWIFT_VERSION attribute in at least one of
the targets that integrate this pod."
I even updated my cocoa pods also did a pod install which gave me the same
error .
I also changed the pod file and put the target swift version for flutter
compass but still the issue is not resolved . Could you please look into
that and help me asap.
ThankYou
—
You are receiving this because you are subscribed to this thread.
Reply to this email directly, view it on GitHub
https://github.com/hemanthrajv/flutter_compass/issues/9, or mute the
thread
https://github.com/notifications/unsubscribe-auth/ATepHTnm9lqLiJhUnYphJV0xCz7DyVLdks5vVte3gaJpZM4bpr8B
.

I am attaching all the steps

@hemanthrajv thank you it works fine now


Wrong numbers in the blue summary bar on the front page of the Browser

The number of cells in the blue summary bar on the front page of the Browser does not match the numbers of cells given per organ below it.
Summary bar says there are 81.9k cells in the Atlas in total, while the number for the Bone marrow alone is 283.7k. For the Embryo it shows 0.

If I do an empty search to display everything in the HCA, it returns a different number in estimated cells (and this number seems to match what one would expect the sum of cells from each project to be):

I think this ticket belongs in data-portal..

@theathorn sorry, should I make one there instead of this one?

@zperova No problem - I will take care of this, thanks.

Moved to #data-portal/290.


Verify page button bugs

been unable to verify thru twitter help due to bugs on the verify my account page

the form asks for name phone pin/passcode and the submit button has a button-submit-disable class preventing mouseclicks even with valid form values. am able to submit by keyboard tabbing to the button and pressing return or by removing the class thru the console first
there seems to bee some caching issue because after reaching the success page your support team says i'm still unverified. tried many times over many days. these bugs have caused me a huge amount of time and pain as I imagine they have for other people
the button is missing :focus styles. when a button has :focus it should have some visual difference such as an outline to help keyboard users recognize focus

semantic disabled

the proper way to disable a button is thru the disabled attribute
the proper way to style them is thru the :disabled selector to handle cases where a parent (element) is disabled

Thank you @ryanve - we'll investigate that system with the owners.

cooL Thanxyz @charlietriplett


Error with variable xrange

NameError: name 'xrange' is not defined

Try range() instead of xrange(). xrange() works in python 2; but probably doesn't work in python 3.


Add sandipanpanda as a Kubeflow Member

Contributions:

https://github.com/cncf/clomonitor/pull/1465
https://github.com/kubeflow/training-operator/issues/2145
https://github.com/kubeflow/training-operator/pull/2125
https://github.com/kubeflow/training-operator/pull/2163
https://github.com/kubeflow/training-operator/pull/2165
https://github.com/kubeflow/training-operator/pull/2194
https://github.com/kubeflow/training-operator/pull/2264
https://github.com/kubeflow/website/pull/3877

Sponsors:

@andreyvelich
@tenzen-y

Can you please sponsor my membership? :)

pytest output:
================================================================================ test session starts =================================================================================
platform linux -- Python 3.12.4, pytest-8.3.3, pluggy-1.5.0
rootdir: /home/osuser/kbflow/kubeflow-internal-acls/github-orgs
plugins: jaxtyping-0.2.30, typeguard-2.13.3
collected 1 item

test_org_yaml.py .                                                                                [100%]

================================================================================= 1 passed in 0.30s ==================================================================================

Thank you for your great contributions @sandipanpanda 🎉
/lgtm

+1
Thanks!


Paypal Sync Subscription Payments

Add the ability to purchase year or lifetime subscriptions through PayPal.

Coverage increased (+0.04%) to 57.43% when pulling c487db01e1f99591f5ea4ae3047148a19c1b3af9 on paypal into ba1985d2a9687e9060a8185f13428dad42e8ab97 on master.

Coverage increased (+0.04%) to 57.43% when pulling 27e8ed463c60eaf54c79fc5a50bb1913a3ec6c99 on paypal into ba1985d2a9687e9060a8185f13428dad42e8ab97 on master.

Coverage increased (+0.06%) to 57.443% when pulling 73b4426bc3fa7661c304ef864823497e43426b0f on paypal into ba1985d2a9687e9060a8185f13428dad42e8ab97 on master.

Coverage increased (+0.04%) to 57.43% when pulling 5b176dd4e71bd9c8a2ebd4e0c5b1416cc1a39a20 on paypal into ba1985d2a9687e9060a8185f13428dad42e8ab97 on master.

Coverage increased (+0.04%) to 57.43% when pulling 5b176dd4e71bd9c8a2ebd4e0c5b1416cc1a39a20 on paypal into ba1985d2a9687e9060a8185f13428dad42e8ab97 on master.

Coverage increased (+0.06%) to 57.443% when pulling bd937d8905324b944f910ac15d8162d5664a2265 on paypal into ba1985d2a9687e9060a8185f13428dad42e8ab97 on master.

Coverage increased (+0.04%) to 57.43% when pulling bd937d8905324b944f910ac15d8162d5664a2265 on paypal into ba1985d2a9687e9060a8185f13428dad42e8ab97 on master.

Coverage increased (+0.06%) to 57.443% when pulling 86552d4d8d36bea118c6a72f2523d718afa19b8c on paypal into ba1985d2a9687e9060a8185f13428dad42e8ab97 on master.

Coverage increased (+0.04%) to 57.43% when pulling f391dfb2980d090f79cd381bcbccc3f2996686b6 on paypal into ba1985d2a9687e9060a8185f13428dad42e8ab97 on master.


Move Snapshot Support in-tree

Feature Description

One-line feature description (can be used as a release note): PV snapshot/restore functionality is available as an external add-on. This provides standardized APIs design and adds PV snapshot/restore support for CSI volume drivers.
Primary contact (assignee): @jingxu97 @xing-yang
Responsible SIGs: @kubernetes/sig-storage-feature-requests
Design proposal link (community repo): kubernetes/community#2335
Reviewer(s) - (for LGTM) recommend having 2+ reviewers (at least one from code-area OWNERS file) agreed to review. Reviewers from multiple companies preferred:
@saad-ali
@jsafrane
Approver (likely from SIG/area to which feature belongs):
@thockin
Feature target (which target equals to which milestone):

Alpha release target (x.y): 1.12
Beta release target (x.y): 1.13
Stable release target (x.y): 1.14

We're moving this to 1.11. For this quarter the focus is on coming up with a Restore API and CSI implementation (both out-of-tree)

Do we have any plan for this feature in 1.11? @saad-ali  @jingxu97  @xing-yang

@mlmhl We have agreed to work on this and target for 1.11 Alpha.

Thanks @xing-yang . My team is very looking forward to this feature, and I can help to move along this feature if you needed.

Thanks @mlmhl!  I'll keep that in mind.

@xing-yang @saad-ali @kubernetes/sig-storage-feature-requests can you confirm that this feature is planned for 1.11?
/cc @justaugustus

@idvoretskyi Yes, we are targeting this feature for 1.11.

@xing-yang @jingxu97 please fill out the appropriate line item of the
1.11 feature tracking spreadsheet
and open a placeholder docs PR against the
release-1.11 branch
by 5/25/2018 (tomorrow as I write this) if new docs or docs changes are
needed and a relevant PR has not yet been opened.

@mistyhacks We are delaying this to 1.12.  Thanks.

@justaugustus @idvoretskyi FYI

@xing-yang @jingxu97 @kubernetes/sig-storage-feature-requests --
This feature was removed from the previous milestone, so we'd like to check in and see if there are any plans for this in Kubernetes 1.12.
If so, please ensure that this issue is up-to-date with ALL of the following information:

One-line feature description (can be used as a release note):
Primary contact (assignee):
Responsible SIGs:
Design proposal link (community repo):
Link to e2e and/or unit tests:
Reviewer(s) - (for LGTM) recommend having 2+ reviewers (at least one from code-area OWNERS file) agreed to review. Reviewers from multiple companies preferred:
Approver (likely from SIG/area to which feature belongs):
Feature target (which target equals to which milestone):

Alpha release target (x.y)
Beta release target (x.y)
Stable release target (x.y)

Set the following:

Description
Assignee(s)
Labels:

stage/{alpha,beta,stable}
sig/*
kind/feature

Please note that the Features Freeze is July 31st, after which any incomplete Feature issues will require an Exception request to be accepted into the milestone.
In addition, please be aware of the following relevant deadlines:

Docs deadline (open placeholder PRs): 8/21
Test case freeze: 8/28

Please make sure all PRs for features have relevant release notes included as well.
Happy shipping!
/cc @justaugustus @kacole2 @robertsandoval @rajendar38

Is this still targeting 1.12, or does moving to CRD slow and put the implementation at risk?

@tpepper @justaugustus  Yes, this is still targeting 1.12.  Thanks.

Thanks for the update!


feat: rpcsrv

Description
Adds in an rpcsrv crate for facilitating remote execution of query plans. Currently this only supports logical plans generated by datafusion, and we send the entire plan always.
The goal here is to get everything ready for us to start getting into the details of splitting plans up, and making our plans serializable (whether that's by implementing our plans as datafusion plans or something else).
Essentially what's happening is we have two sessions running, one locally, and one on the remote service. Query execution will go through the following steps:

Query gets serialized to logical plan
Query wrapped in a RemoteLogicalExec
RemoteLogicalExec gets executed, which sends the plan to the remote service.
The remote service receives this plan and turns it into a physical plan.
The physical plan gets executed, with results being streamed back to the local session.

All communication between local and remote sessions is over grpc, and Arrow batches are serialized to IPC.
Follow up steps include:

Proxy for authenticating and routing
Support our custom plans
Nice interface for connecting through glaredb local and python

This PR is just a start, and I expect a lot of issues to be created out of this.
Running
In a terminal, run:
cargo run --bin glaredb -- -v server --rpc-bind <IP_ADDRESS>:6443

In another terminal, run:
RPC_HOST_URL="http://localhost:6443" cargo run --bin glaredb -- local

Then run a sql command:
> select * from (values (1, 2), (3, 4));
┌─────────┬─────────┐
│ column1 │ column2 │
│ ──      │ ──      │
│ Int64   │ Int64   │
╞═════════╪═════════╡
│ 1       │ 2       │
│ 3       │ 4       │
└─────────┴─────────┘

In the first terminal, you should have seen an "executing" log.
Note that the number of commands supported right now is pretty low since we have a lot of custom stuff that isn't being serialized.

server does not shut down on sigterm (ctrl+C) or sigquit (ctrl+D).

server does not shut down on sigterm (ctrl+C) or sigquit (ctrl+D).

"Expected" right now, remote sessions are never closed, will open issue.

one thing i'd like to see (in a follow up PR) is a more holistic way to set the variables.

In a terminal, run:
cargo run --bin glaredb -- -v server --rpc-bind <IP_ADDRESS>:6443
In another terminal, run:
RPC_HOST_URL="http://localhost:6443" cargo run --bin glaredb -- local

It seems like there is a bit of a mix of env vars & cli args. We can clean this up across the board. IMO, everything that can be set via a cli arg should also be settable via env vars & vice-versa. We could also expose a config file with all of the same arguments.

one thing i'd like to see (in a follow up PR) is a more holistic way to set the variables.

In a terminal, run:
cargo run --bin glaredb -- -v server --rpc-bind <IP_ADDRESS>:6443
In another terminal, run:
RPC_HOST_URL="http://localhost:6443" cargo run --bin glaredb -- local

It seems like there is a bit of a mix of env vars & cli args. We can clean this up across the board. IMO, everything that can be set via a cli arg should also be settable via env vars & vice-versa. We could also expose a config file with all of the same arguments.

For sure, forgot to mention that RPC_HOST_URL is just there to test this out. I plan on that being removed when we have the new \open behavior.


Users and Thoughts GET Routes

Users and Thoughts GET Routes
User Story
AS A social media startup
I WANT an API for my social network that uses a NoSQL database
SO THAT my website can handle large amounts of unstructured data
Acceptance Criteria
GIVEN a social network API
WHEN I open API GET routes in Insomnia for users and thoughts
THEN the data for each of these routes is displayed in a formatted JSON

GET routes for all users and all thoughts have been created.  Both routes return the data required in JSON format.


PDF: math glyphs going out of bounds from table rows (works in HTML and Word)

The font being used is "STIX Two Math" or "Cambria Math" -- both will cause the same out of bounds issue.
Word (works):

HTML (works):

PDF (out of bounds):

Please see this ticket for details:

https://github.com/metanorma/pdfa-iso-32000-2/pull/31

Source document from https://github.com/metanorma/pdfa-iso-32000-2/pull/31

HTML doesn't work ok for:

DOC doesn't work ok too, for instance:

Word doesn't render overflowed glyph, just cuts it.
If manually set 5pt font size, then renders fully:

The table row height in the XSL-FO/PDF is 5mm vs. 6.5mm for DOC.
The table cell vertical alignment in the PDF is 'top' vs. 'bottom' DOC (I didn't find how Word sets/calculate this property).
I've tried to set row height and vertical alignment manually in XSL-FO similar to DOC - PDF renders OK:

But in any case, 'braceleftmid' and 'bracerightmid' don't fit properly, and need to decrease the font-size:

Apache FOP can't increase the table row height automatically, just it doesn't catch the max glyph height (Word too, for braceleftmid and bracerightmid).

@Intelligent2013 I looked into this carefully, and you are absolutely right...
 I've checked "STIX Two Math" below.
HTML:

Word:

In BirdFont (free font glyph viewer), you can see that they extend out of the glyph area:

So... maybe the only way is to shrink their height? Sad but true...
We only have two choices:

only use [css font-family:STIX Two Math;font-size: Npt]
create new syntax that allows [custom-charset: math] with font-size...


Update to 0.6.5

Added ThermoRawFileParser for conversion of .raw to .mzML/.mgf
Added pGlyco 2.2.0, including pParse 2.0 and pGlycoFDR 2.2.0
Added latest version of MSGF+ (version 2019.04.18)
and MSFragger (version 20190222)

Hi,
I am trying to install this pull-request. However, I got this message for msgfplus
Executable for msgfplus_v2019_04_18 is not available on your system
[ -<HTPP>- ] Downloading files from https://www.sas.upenn.edu/~sschulze/ursgal_resources/ursgal/resources/platform_independent/arc_independent/msgfplus_v2019_04_18/msgfplus_v2019_04_18.md ...
[ -<HTPP>- ] Saved file as C:\Users\carlos\Documents\Projects\BMC\ursgal\src\ursgal\resources\platform_independent\arc_independent\msgfplus_v2019_04_18\msgfplus_v2019_04_18.md
Remove tmp file: C:/Users/carlos/Documents/Projects/BMC/ursgal/src/ursgal/resources/platform_independent/arc_independent/msgfplus_v2019_04_18/msgfplus_v2019_04_18.md

        [ WARNING ] md5 of online repository for engine msgfplus_v2019_04_18 differs from
        [ WARNING ] md5 in knowledge base, exiting now!!!
        [  INFO   ] Please contact the Ursgal team!

Hi,
thanks for letting us know.
The md5 error should be solved now.

Regarding the second error, setuptools has no log module.
I introduced this on accident, when switching from distutils to setuptools.
As a quick fix, removing this line should be fine.
@StSchulze Can you substitute this line by a print statement or similar in your pull request or should I open a separate one?

Modified it :)

perfect installation 👍 .  It is time to test it.

looks good :) gj ! 👍

I can't retrigger the AppVeyor build, can someone else do it?
I uploaded a the new pyQms version, it should work now :)

"retriggered" it ;)
Looks good, thanks!

After testing for a couple of days, everything looks good here, including the newest version of msgfplus.


Update virtual-machines-common-classic-agents-and-extensions.md

Thanks for your contribution! Here's a few guidelines to help speed review of your pull request:

File name: Include the file name of the article you are updating in the title of the pull request.

PMs and writers: If you are a core Azure product team PM or a content developer, please use the private repository. You can easily access the private repository from the article links by typing "-pr" after "azure-content" in the GitHub URL for the article. Instructions for requesting perms are posted in the contributor's guide.

Fixed typos.

Hi @alexandair, I'm your friendly neighborhood Azure Pull Request Bot (You can call me AZPRBOT). Thanks for your contribution!
You've already signed the contribution license agreement. Thanks!
We will now validate the agreement and then real humans will evaluate your PR.
TTYL, AZPRBOT;

@tysonn New PR.

@cynthn - Could you please review these updates from @alexandair and let me know if I can merge? Thanks

#sign-off @tysonn these changes look fine :)

@alexandair - I've merged the commits on the private side so I could resolve the merge conflicts, so I'm closing this PR. But the commits have been merged and the changes will go live later today.


automatic sync after time

Currently you always have to remember to back up your configuration, it would be nice if you could set a time that it is backed up e.g. 1 time per day.

It's an interesting idea.

I was thinking about something like this:
crons:
- at: 0 9 * * *
  run: syncSettings.download
- at: 0 17 * * *
  run: syncSettings.upload

But then, it isn't limited to just syncing the settings. It becomes outside the scope of this extension.
So you might use either solution:

https://marketplace.visualstudio.com/items?itemName=mkloubert.vs-cron
https://marketplace.visualstudio.com/items?itemName=egomobile.vscode-powertools

@Tealk Are you using those external extensions? Or are you waiting for an internal solution?

I still do it manually

A solution should come by the end of the month

The new version has the following settings: https://github.com/zokugun/vscode-sync-settings#crons

@Tealk Is it working for you?

yes works great, especially the review function is great


example for asyncio on gevent does not work

I tried to run the example to run "asyncio on gevent" but it does not work for me:
import gevent.monkey
gevent.monkey.patch_all()
import asyncio
import asyncio_gevent
# example in README.md uses:
#   asyncio.set_default_event_loop_policy(asyncio_gevent.EventLoopPolicy)
# however this function does not exist in Python 3.9
asyncio.set_event_loop_policy(asyncio_gevent.EventLoopPolicy())

async def async_function() -> int:
    await asyncio.sleep(1)
    return 42

def main() -> None:
    future = async_function()
    # blocking in ".yield_future()"
    greenlet = asyncio_gevent.yield_future(future)
    greenlet.join()

main()

Initially I noticed that asyncio.set_default_event_loop_policy() does not exist for me (Fedora 34, Python 3.9). I used .set_event_loop_policy() but then execution blocks in yield_future().
I guess got the initialization wrong somehow but I can't figure out what is wrong here...

Hey!
Thanks for filing this issue and sorry for the delay in responding to it.
Yes, you’re completely right, the implementation was partially broken and the docs were wrong.
I think I just fixed all of this is #3 (version 0.2.0). Do you want to give it a try and let me know if it works for you now?
If you run into more issues, please report them. If you’d like to contribute fixes, then PRs are also welcome. Any help is greatly appreciated!

Closing this as I haven't received any further error reports about this.


Handle error Type InternalCompilerError

Handle InternalCompilerError
compiled: "{"errors":[{"component":"general","formattedMessage":"Internal exception in StandardCompiler::compile: /root/project/libsolidity/interface/CompilerStack.cpp(80): Throw in function dev::solidity::CompilerStack::CompilerStack(const ReadCallback::Callback &)\nDynamic exception type: boost::exception_detail::clone_impl<langutil::InternalCompilerError>\nstd::exception::what: You shall not have another CompilerStack aside me.\n[dev::tag_comment*] = You shall not have another CompilerStack aside me.\n","message":"Internal exception in StandardCompiler::compile: /root/project/libsolidity/interface/CompilerStack.cpp(80): Throw in function dev::solidity::CompilerStack::CompilerStack(const ReadCallback::Callback &)\nDynamic exception type: boost::exception_detail::clone_impl<langutil::InternalCompilerError>\nstd::exception::what: You shall not have another CompilerStack aside me.\n[dev::tag_comment*] = You shall not have another CompilerStack aside me.\n","severity":"error","type":"InternalCompilerError"}]}"

Already Fixed. Request to close

Handled #103


Fix : Theme toggle slider alignment fix

Issue #520 : [BUG] Toggle theme slider alignment solved
Type of PR

Add X in the box to specify the improvement type.
[X] Bug fix
[X] Feature enhancement
[X] Documentation update
[ ] Other (specify): ___________

Description
fix the toggle theme slider alignment to look good
Screenshots / Videos (if applicable)
After:

Checklist

Add X in the box to specify.
[X] I have performed a self-review of my code.
[X] I have tested the changes thoroughly before submitting this pull request.
[X] I have provided relevant issue numbers, screenshots, and videos after making the changes.
[X] I have commented my code, particularly in hard-to-understand areas.

Thank you for reviewing my pull request!

Thank you.


GPT-4

On the wait-list for GPT-4 API access.
https://platform.openai.com/docs/models/gpt-4

Very curious to see the api call for image interpretation.

Access Granted, appears to be working as expected 😄


mistake in hindi conversion of  "Crop"

mistake in hindi conversion of  "Crop"
it is showing "Crop" = फसल
it will be   "Crop" = काटे
Please update

Please open a PR with the fix

@Pradeepkuumar
You can click here on the edit button and edit it in the browser directly:
https://github.com/CanHub/Android-Image-Cropper/blob/main/cropper/src/main/res/values-hi/strings.xml

I would like to work on this issue. Pls assign this issue to me. I have resolved the issue.
.
.
Thankyou
Pratyaksh

Can do @pratyaksh1610

@Canato I have made a PR. Pls review.


Add single, superuser SQL for easy Supabase UI installs

It should use SET ROLE to switch between the different superuser/schemamap users.

This is now done via the Rust CLI:
nix run github:schemamap/schemamap -- init --dry-run --dbname postgres | grep -v 'SET role' | pbcopy

postgres is the default Supabase Postgres DB name, feel free to replace it with your installation's.
NOTE: SET role is actually not allowed, will be adjusted in future versions to alter the ownership privileges instead of SDK install to schemamap role.


documentation of len() in string type unclear

https://github.com/golang/go/blob/f58b02a29c395b5ec28bb548b1fd3ca18e2b3a4f/doc/go_spec.html#L833
The documentation on how specifically len() can be used to determine the size of a string type in bytes can be confusing as this would make you expect that len("go") would return 16 (like unsafe.Sizeof("go") would) but actually gives you 2
I would like to ask for a better phrasing of how to use len() on string type in the docs

"go" has two bytes, so len("go") is 2. The docs is very clear on this. Why confused?
unsafe.Sizeof(anyStr) always returns 16, for every string value occupies 16 bytes in memroy on 64-bit arch.

Ah, some misunderstanding here.
The doc is really not very clear here.
(the number of bytes stored in the string) would be better.


Add error_checking.R

Addresses this issue from traits.build:

Includes custom function for checking duplicates that prevent pivoting wider (helps users identify which rows are the problem when the dataset_test pivot_wider test fails)
@ehwenk and I were discussing where would be the appropriate home for this function, but let us know if you have better ideas :)

@dfalster Thanks for the suggestions! Where exactly should I put the function on traits.build?

What about in the file R/setup? It should be exported and part of the general infrastructure.

Yep I will export it. I thought R/setup is more for building and populating the metadata template files + setting up the build process? This function is for after the database/dataset has been built. But I don't really mind!

true, maybe put it at the booth of R/process

Ok great! What do you mean by booth sorry?

Moved back to traits.build, with this PR.


call_deferred() and set_deferred() never raise error messages when invalid (as opposed to call)

Godot version:
3.2.2
OS/device including version:
linux mint
Issue description:
If you call a method using call you get a trappable error and a message. If you use deferred then you get nothing, no stop and not even a debug message telling you the method/property does not exist. This will and can lead to difficult to debug faults. In addition whether you wrap a deferred around a method call or not, they should both have the same result, but they don't.
	call_deferred("blah",true) #no error or debug message
	set_deferred("blah",true) #no error or debug message
	call("blah") #stops code

I appreciate calling deferred is from some asynchronous step, but it should at least send a message to the error/log window.
Steps to reproduce:
Create code as above and run. One is trapped, the other goes silently.

This is strange because there's a merged PR which aimed to solve exactly this issue: #40485.
I confirm on 3.2.2 with the following MRP:
godot_2020_10_10.00_33_46.zip

btw, i did search for this but when you enter call_deferred in the search bar that bug does not appear (mine does though).

This is my version. I'm unsure from that defect whether it's cherry picked for 3.2.3 or in an earlier build (I asked this at the bug just in case this gets closed) :)

This is strange because there's a merged PR which aimed to solve exactly this issue: #40485.

Yes, and it was merged and cherry-picked for 3.2.3.
Duplicate of #40401.


stronger relation between vote events and bill actions

In my experience, these are different aspects of the same thing (at least one direction). A vote event is a bill action, though not every bill action is vote event.
It would be good to explicitly tie this together. Right now there is no direct relation

i'm not quite sure what i was thinking but there is a direct relation.


Dispatch trailers are not present for all operations

Works as intended:
$ zed permission check resource:jirat manage user:cto --log-level=debug
4:20PM DBG set log level new level=debug
4:20PM DBG extracted response dispatch metadata cached=2 dispatch=0
false

Warns because they are not present:
$ zed schema read
4:20PM WRN error reading dispatched operations trailer error="key `io.spicedb.respmeta.dispatchedoperationscount` not found in trailer"
4:20PM WRN error reading cached operations trailer error="key `io.spicedb.respmeta.cachedoperationscount` not found in trailer"
definition user {}

$ zed relationship read resource:jira
4:20PM WRN error reading dispatched operations trailer error="key `io.spicedb.respmeta.dispatchedoperationscount` not found in trailer"
4:20PM WRN error reading cached operations trailer error="key `io.spicedb.respmeta.cachedoperationscount` not found in trailer"
resource:jira manager usergroup:engineering#manager
resource:jira viewer usergroup:engineering#member

I think it's more than just schema operations, I think it's also read, write, and delete, all of which can do one or more downstream requests.

We also need to set them even in the error path.

Having an issue with this as well. Is there a fix yet?
❯ spicedb version
spicedb 1.4.0

❯ spicedb serve --grpc-preshared-key "secret"

❯ zed version
zed 0.3.0

❯ zed schema write sample.zed --insecure --token="secret"
8:58AM WRN error reading dispatched operations trailer error="key `io.spicedb.respmeta.dispatchedoperationscount` not found in trailer"
8:58AM WRN error reading cached operations trailer error="key `io.spicedb.respmeta.cachedoperationscount` not found in trailer"


Tracking Issue : Default behaviour on integer arithmetic adding overflow checks

Problem
When a user does a+b where a and b are u32s. If a+b exceeds the value of a 32 bit integer, the default behaviour is to wrap around and not fail.
There are usecases for not checking integer overflow, and there are usecases for checking integer overflow. This issue is concerned with what the deault behaviour should be.
Solution
Enable overflow checks by default, and if users want to add with overflow, they call a method such as overflow_add
(Describe your suggestion.)
Alternatives considered
Not enable overflow checks and if users want to check for overflow, they call a method named checked_add
Additional context
(If applicable.)

The main argument against this addition is concerns for performance. Although one should note that the compiler is smart enough to evade some overflow checks due to field sizes.
For example:
fn add3(a : u32, b : u32, c : u32) -> u32 {
  a + b + c
}

In the above code, if overflow checks are enabled then the compiler could add a with b with c as a Field, then check if that result is larger than a u32. Instead of checking if a+b = d overflows then checking if d+c

Related to PR #2713

Closed with https://github.com/noir-lang/noir/pull/2713.


Pre-populate the event ID with a UUID

🚀 Feature Request
Make ID field of event required and provided before passing to core data for persistence.
Relevant Package
core data and core contracts
Description
This feature began as an ADR (see https://github.com/edgexfoundry/edgex-docs/pull/227).  Per the discussion, the idea is to
generate a UUID and assign it to the id field before storing the event to the database. If the id field was empty at the time of persistence, then have core data generate a UUID (or just have the ID field as required making clients provide the UUID in the ID).
Per @lenny-intel - this also solves why we used checksum in the first place for CBOR encoded events. Now the ID will be set in the CBOR encoded Event and accessible in App Service once it is un-marshaled. Then we only need to have the MarkAsPushedById API.
Describe alternatives you've considered
addition of a new UUID property to event

Do we want to make the ID required in the Event DTO or simply set it in AddEvent API as soon as the event is received?

Per core WG meeting today, the following was decided:

the field id becomes a required field and must be populated before being sent to core data.  This will make sure the event has a UUID even when/if we get to a point where device services bypass core data and start sending events directly to application services.
the population of the UUID in the id field for event should be part of initialization of the event in contracts.


Update docs to use correct ClientList function

@mapalan : Thanks for your contribution! The author(s) have been notified to review your proposed change.

#sign-off


implement dismissals for show_tracker_popup gregor notifications

This creates a new Dismiss() function as part of the IdentifyUI
protocol, which Electron will need to implement. That RPC will tell
Electron to close existing track windows for a given user.
This PR implements receiving dismissals, but what remains to be done is
sending dismissals. This will require another new RPC, maybe called
DismissWithToken(), as a counterpart to TrackWithToken() in
track.avdl. This will be called by Electron when a track window is
dismissed without tracking. Both of those RPC will be used to send out
gregor dismissals in a subsequent PR.

👍


Implement UnboundLocalError

Resolves #1
Note : There might be some faults in the code. Please review and suggest changes.

The scope checker should be called in the main function inside interpreter.py, not here.
An ast.NodeVisitor will not work because we aren't using Python AST nodes, we have our own AST. To get a visitor, create a Visitor class (in a new visitor.py file) and move the visit() method from Interpreter into that class.
Nodes currently don't have a line and column field.


[SDK-43] Feature/contribution update

SDK-43
Description

update style guide links in contributing.md
added style-guidelines.md to hold all documentation (and links) to the style guide
and ran the auto reformat and cleanup with rider C# code style settings applied

Changes
Added

style-guidelines.md

Updated

style guide links in contributing.md

How to Test

Add steps to locally test these changes

Checklist

[ ] Tests written or updated for the changes.
[ ] Documentation is updated.
[ ] Changelog is updated.
[ ] QA Testing is updated.

QA Testing

Mention any useful test cases for this feature and add to QA Testing documentation.

Details

If more details are necessary to support the description with images and videos add them here.

Tests failing while importing burst, let's take a look at that.