Windows python image is break after recent image release

Describe the bug
Windows python image is break
To Reproduce
docker pull mcr.microsoft.com/windows-cssc/python3.7.2nanoserver:ltsc2019
ltsc2019: Pulling from windows-cssc/python3.7.2nanoserver
invalid rootfs in image configuration
Expected behavior
It should pull the image success.
Configuration:

Edition: Windows Server 2022
Base Image being used: Windows Nano Core
Container engine: docker
Container Engine version 20.10.17

Additional context
Add any other context about the problem here.

Hi @xia-xiao , thank you for reporting this, the latest images should be published.
Can you please retry with docker pull mcr.microsoft.com/windows-cssc/python3.7.2nanoserver:ltsc2019?

With the re-publish, you can re-pull the images now:
docker pull mcr.microsoft.com/windows-cssc/python3.7.2nanoserver:ltsc2019
@xia-xiao Can you confirm this works for you, and if it does, you can close this issue.

This is work for me.

Thank you for the verification!


Docker stack. Links in docker-compose are ignored.

Hi.
I tried to use fabricio to deploy my django project to prod.
I used docker and docker-compose before on local so I created docker.Stack service with link to my docker-compose file.
But the problem is that fabricio copies docker-compose.yml to /tmp and looks for all files, linked in docker-compose.yml, in this directory. For example, my docker-compose.yml has line:
env_file:
          - docker/dev.env

And at building container, docker looks for env file in /tmp/docker/dev.env and I get error.
What is worse, dockerfiles are not found too.
I tried:

Create docker.Stack with temp_dir parameter
Subclass Stack and point temp_dir to my project directory (and re-define upload_configuration_file)
Create symlink in tmp to my project directory.
Without any success.
Did I miss something important?

Hi, have you tried to change temp_dir param? Like this:
docker.Stack(
    ...
    temp_dir='path_to_folder_with_env_file',
)

I got error:

maria@home:~/job/$ fab django
[localhost] local: vagrant ssh-config
Added host<EMAIL_ADDRESS>Added host<EMAIL_ADDRESS>Added host<EMAIL_ADDRESS><EMAIL_ADDRESS>Executing task 'upgrade'
<EMAIL_ADDRESS>run: docker info 2>&1 | grep "Is Manager:"
<EMAIL_ADDRESS>put:  -> /home/maria/job/docker-compose-prod.yml

Fatal error: put() encountered an exception while uploading '<_io.BytesIO object at 0x7f9a280a5db0>'

Underlying exception:
No such file

Aborting.
<EMAIL_ADDRESS>run: rm -f docker-compose-prod.yml
Disconnecting from vagrant@<IP_ADDRESS>:2222... done.
Disconnecting from vagrant@<IP_ADDRESS>:2200... done.
Disconnecting from vagrant@<IP_ADDRESS>:2201... done.
Disconnecting from<EMAIL_ADDRESS>done.

But address is correct:

maria@home:~/job$ cat /home/maria/job/docker-compose-prod.yml
version: '3'
services:

db:
# container_name: postgres
image: postgres:latest
...

I tried to change permissions for docker-compose-prod.yml, it did not help.

can you also provide temp_dir value? It should point to the folder on remote server side.

It's full error traceback, just markup break quote on empty lines.

It should point to the folder on remote server side.

Why on remote?
I get temp_dir with os.getcwd() so it's my project folder. Is it wrong?

Why on remote?

because this folder is used as temporary to upload docker-compose.yaml on remote server. By default Fabricio uses /tmp for this purpose.
Most probably your case is slightly different then Fabricio expects to be used in. For instance, Fabricio doesn't expect that docker-compose.yaml depends on other files (e.g. .env or Dockerfile). If you wish so the only way to do it now is placing necessary files in special folder on remote server and providing path to this folder in temp_dir.
BTW, what version of Docker Compose file do you use? Fabricio works well with version 3 and most probably with version 2. I'm not sure if version 1 will work with Fabricio.

For instance, Fabricio doesn't expect that docker-compose.yaml depends on other files (e.g. .env or Dockerfile).
So sad...
Ok, we will look for another way to deploy.
Thank you very much.

You are welcome. There is another way to do with your deploy issue. Because of Fabricio is based on Fabric you can write Fabric task to upload necessary files and run it with Fabricio tasks. This should work for you.


Hide the status bar after 20 requests (about 10 page views)

Also clean up some typing around after_request and teardown_request that was
a bit confused.
Fixes #7534.

OK that worked. A nice clean PR :D

Failing because requests_until_we_hide_intro_box is too long (>30 characters)

Serves me right for not using dev.py release.


⚠ Mobitopup has degraded performance

In e52d22a, Mobitopup (https://napcard.voz.tech) experienced degraded performance:

HTTP code: 200
Response time: 3014 ms

Resolved: Mobitopup performance has improved in f58d3a6.


RND-228 Mongo DB read and write

Includes the Mongo 3 node not yet approved.

Also, moved REST Client http tests out of individual packages to top level "test" folder. Alternative was having them in meadowlark-core but didn't feel quite right.


Tool Tip is Breaking UI

Problem
The info icon, when hovered over, gives a tool tip on the right. Which results in the view port width to become more than 100%, and hence goes beyond current screen capacity.
Fix

Make tool tip point upwards.

@wimpywarlord I would like to contribute to this issue. Thanks!

Sure go ahead,
I will assign it to you.
You can use the following email to signup<EMAIL_ADDRESS>

Let me revert back, work on formatter issues, and resubmit pull requests for both issues. Thanks!


Interface inheritance not working in 5.0.0

Since 5.0.0-rc5 (rc4 is the latest version with a different behavior) inherited properties are not generated in the model any more:
    public interface IX
    {
        string ASD { get; set; }
    }

    public interface IWeatherForecast : IX
    {
        DateTime Date { get; set; }

        int TemperatureC { get; set; }

        int TemperatureF { get; }

        string Summary { get; set; }
    }

    public class WeatherForecast : IWeatherForecast
    {
        public DateTime Date { get; set; }

        public int TemperatureC { get; set; }

        public int TemperatureF => 32 + (int)(TemperatureC / 0.5556);

        public string Summary { get; set; }
        public string ASD { get => throw new NotImplementedException(); set => throw new NotImplementedException(); }
    }

I've taken the default DotNetCore 3.1 WebAPI example and inherited with an extra property "ASD" from an interface. With 5.0.0-rc4 the model has the property, with later versions it is missing. Is this an intended behavior? And if: how to enable inheritance?
Here are the generated models:
5.0.0-rc4:
"IWeatherForecast": {
        "type": "object",
        "properties": {
          "date": {
            "type": "string",
            "format": "date-time"
          },
          "temperatureC": {
            "type": "integer",
            "format": "int32"
          },
          "temperatureF": {
            "type": "integer",
            "format": "int32",
            "readOnly": true
          },
          "summary": {
            "type": "string",
            "nullable": true
          },
          "asd": {
            "type": "string",
            "nullable": true
          }
        },
        "additionalProperties": false
      }

= 5.0.0-rc5

      "IWeatherForecast": {
        "type": "object",
        "properties": {
          "date": {
            "type": "string",
            "format": "date-time"
          },
          "temperatureC": {
            "type": "integer",
            "format": "int32"
          },
          "temperatureF": {
            "type": "integer",
            "format": "int32",
            "readOnly": true
          },
          "summary": {
            "type": "string",
            "nullable": true
          }
        },
        "additionalProperties": false
      }

5.0.0-rc4 generates schemas according to the behavior of the Newtonsoft serializer whereas the official 5.0.0 bases schemas on the behavior of the System.Text.Json (STJ) serializer.
Which serializer are you using? If it’s STJ, have you confirmed it behaves the way you’d expect. That is, independently of Swashbuckle does it spit out the interface inherited properties when you call the op (e.g. via curl, postman etc)?
If the answer to the above is YES, then this is indeed a bug in swagger as it should reflect the serializer behavior exactly

If you’re using Newtonsoft, then you need to explicitly tell Swashbuckle to honor its behavior as described here https://github.com/domaindrivendev/Swashbuckle.AspNetCore/blob/master/README.md#systemtextjson-stj-vs-newtonsoft

Yes, I'm still using Newtonsoft indeed - and this fixed my issue. Thank you very much!


⚠ Bofrost.com has degraded performance

In 362af22, Bofrost.com (https://www.bofrost.com) experienced degraded performance:

HTTP code: 200
Response time: 3471 ms

Resolved: Bofrost.com performance has improved in 10cd99c.


rust

🦀🦀
rust port.
(im new be nice)

Cargo has a cargo add command. I feel like the gpm could benefit from that too.

should update and purge be subcommands instead of flags?

As discussed on stream, the plan is to move this repo to a new organization, gpm/godot-plugin, and have this repo be a mirror of that, and have the rust client be gpm/rust.


Test case for issue #1573

Shows that forbidding net.example.R.dimen also forbids
net.example.R.dimension

This PR currently fails until a fix is implemented that still allows existing wildcard behavior

Updated with a proposed fix.  This may be more generalizable to SplitPattern, but wasn't sure of possible repercussions so did not try to do so.


feat(Feature Tags): Adds PATCH endpoint to update tags on features

Substitute this line for a meaningful title for your changes
Overview
Please write a description. If the PR is hard to understand, provide a quick explanation of the code.
Designs
Link to the related design prototypes (if applicable)
Testing instructions
Please explain how to test the PR: ID of a dataset, steps to reach the feature, etc.
Feature relevant tickets
Link to the related task manager tickets

Checklist before submitting

[ ] Meaningful commits and code rebased on develop.
[ ] If this PR adds feature that should be tested for regressions when
deploying to staging/production, please add brief testing instructions
to the deploy checklist (docs/deployment-checklist.md)
[ ] Update CHANGELOG file

Would it be necessary to check whether the feature on the PATCH call is a custom feature or not, and prevent tagging if non custom?
Custom features are always associated to a project, and the DTO cannot have an empty projectId, so that situation should never be possible, right?

One last question, we had agreed for now not to modify the last_modified_at field of the equivalent tag rows on the same project, right?

Would it be necessary to check whether the feature on the PATCH call is a custom feature or not, and prevent tagging if non custom? Custom features are always associated to a project, and the DTO cannot have an empty projectId, so that situation should never be possible, right?

See my inline notes on this.

One last question, we had agreed for now not to modify the last_modified_at field of the equivalent tag rows on the same project, right?

yep, I think we can avoid this for the time being. My understanding is that we're not implementing MRU/LRU sorting of tags, so this won't really be needed.


Update README.md

What type of PR is this?

[ ] bug
[ ] feature
[ ] enhancement

What problem(s) does this PR solve?
Issue(s) number:
Description:
$ npm run dev-all
npm ERR! Missing script: "dev-all"
npm ERR!
npm ERR! To see a list of scripts, run:
npm ERR!   npm run

How do you solve it?
Special notes for your reviewer, ex. impact of this fix, design document, etc:

 Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.You have signed the CLA already but the status is still pending? Let us recheck it.


Its not working for Windows 10 universal app development.Is there any alternative?

This is error message :
Reference to Type IsolatedStorageFile claims that it it defined in 'microlib' but it could not be found.

You could use this: https://github.com/molinch/FFImageLoading
Sample project: https://github.com/molinch/FFImageLoading/blob/master/samples/Simple.WinPhone.Sample/MainPage.xaml

Feel free to fork JetImageLoader and add support for Windows 10 Universal Apps! I don't work with Windows for about 2 years now…


Kwenta: safe app request

Name/Description

Kwenta
Type

New addition

Compatible Networks

- Mainnet
- Optimistic Mainnet (if this is supported)

Code for review

https://github.com/kwenta/kwenta
IPFS hash/App URL

https://kwenta.io/
Desired date

N/A

[  ] Can add app. manifest.json is present and contain name, description and logo
[  ] App automatically connect the Safe
[  ] Can switch to other wallet and return to the safe for autoconnecting again choosing the "Gnosis Safe wallet"option
[  ] Safe transaction confirmation popup works when trying to trade sUSD with other tokens

Hey @JChiaramonte7 how you doing?
I'm currently testing the kwenta.io integration with the safe. Seems pretty nice but found an issue. Not sure why is not working (Connected to browser wallet works fine)
When trying to make an exchange like this

When pressing the button I'm not able to make the transaction popup appear

There seems to be a severe leak in the application: if you open the portfolio page in less than 15 seconds, the app makes almost 7000 requests to infura. Infura endpoint is provided for apps by gnosis, and I'm not sure if we can add the app in that case because such usage will quickly use all available resources

I was checking the issue with the popup and I can confirm it only happens in Optimism. In mainnet works.
It seems to be related with the gas price estimation as in:
https://github.com/yagopv/kwenta/blob/2fa6edd7f3c8f00fe2e22d816dc1e8cbdf840040/sections/exchange/hooks/useExchange.tsx#L716
gasPrice is null so never really executes the function

i couldn't resist the temptation

There seems to be a severe leak in the application: if you open the portfolio page in less than 15 seconds, the app makes almost 7000 requests to infura. Infura endpoint is provided for apps by gnosis, and I'm not sure if we can add the app in that case because such usage will quickly use all available resources

Hmm this is a problem. Weirdly it only seems to happen with Kwenta in gnosis safe. We'll take a look at it and see if we can come up with a fix.

I was checking the issue with the popup and I can confirm it only happens in Optimism. In mainnet works.
It seems to be related with the gas price estimation as in:
https://github.com/yagopv/kwenta/blob/2fa6edd7f3c8f00fe2e22d816dc1e8cbdf840040/sections/exchange/hooks/useExchange.tsx#L717
gasPrice is null so never really executes the function

Also thank you for diving into this @yagopv, much appreciated 🙏

Hmm this is a problem. Weirdly it only seems to happen with Kwenta in gnosis safe. We'll take a look at it and see if we can come up with a fix.

Yes because with metamask you don't see the requests t
hat easily, but it still happens. This is a screenshot of my console with metamask connected: 2300 errors

I was checking the issue with the popup and I can confirm it only happens in Optimism. In mainnet works.
It seems to be related with the gas price estimation as in:
https://github.com/yagopv/kwenta/blob/2fa6edd7f3c8f00fe2e22d816dc1e8cbdf840040/sections/exchange/hooks/useExchange.tsx#L717
gasPrice is null so never really executes the function

Went diving a little bit deeper into this issue and it looks like is related to eth_gasPrice not being implemented into the provider:

I also took a look at the SafeAppProvider and saw @mikheevm added support for eth_gasPrice last August:
https://github.com/gnosis/safe-apps-sdk/blob/4966a34e1d2bcc6f6caac5e25251510bd7c170cc/packages/safe-apps-provider/src/provider.ts#L176
Not sure why the provider would be throwing an error here, but maybe there's some context I'm missing?

Not sure why the provider would be throwing an error here, but maybe there's some context I'm missing?

are you using the right version?

Changes for eth_gasPrice support were introduced on 0.7.0. As you are using bnc-onboard, the lib should use at least that version of the provider

@JChiaramonte7 we will submit a PR to bnc-onboard for bump safe-apps-provider dependencies

I created the pull request @JChiaramonte7. Seems to solve the problem testing locally
https://github.com/blocknative/onboard/pull/809

Thanks @yagopv! We'll integrate the next bnc-onboard version when it's released

Great!

Hey @JChiaramonte7 seems onboard published the latest changes https://github.com/blocknative/onboard/releases/tag/1.37.3

Hey @JChiaramonte7 seems onboard published the latest changes https://github.com/blocknative/onboard/releases/tag/1.37.3

Thanks! Updated and tested to work with an optimistic Gnosis Safe. Should be in prod shortly!

Seems to work now !

Could you take a look to the high usage for infura requests?

Could you take a look to the high usage for infura requests?

We should have resolved this drastically. Went from around 14k requests to around 200 (there was an upstream dependency change that temporarily stripped out multicall batching). We definitely make quite a few necessary calls to different parts of the Synthetix system (to determine synth statuses and states) so it'd be quite challenging for us to optimize further without stripping out functionality.
But let me know if this is still an issue!

Ok, i'll check. Thanks!

I tested this and the issue seems to be fixed @JChiaramonte7

App is published


Update manifest to include support for Firefox for android

This makes the extension available in add-on store for Firefox for Android

Thank you


Install chef-server-ctl install opscode-manage 12 rc4 behind a proxy AND https transport for ubuntu

I'm having trouble installing the opscode-manage add-on behind a proxy.
tried everything ;-)
/etc/environment
http_proxy=http://172.XX:3128
ftp_proxy=http://172.XX:3128
https_proxy=http://172.XX:3128
HTTP_PROXY=172.XX:3128
HTTPS_PROXY=172.XX:3128

a
pp ENV.to_hash

right before the remote_file resource gives my proxy settings
added them to /etv/chef/solo.rb
added them to /etc/chef/client.rb

so they are there, but somehow do not work
Errno::EHOSTUNREACH
-------------------
No route to host - connect(2)

Resource Declaration:
---------------------
# In /opt/opscode/embedded/cookbooks/apt/providers/repository.rb

 60:     remote_file cached_keyfile do
 61:       source new_resource.key
 62:       mode 00644
 63:       action :create
 64:     end
 65:   else

I've seen lots of issues around proxies and just wanted to let you know that the embedded
chef-server-ctl install opscode-manage
Starting Chef Client, version 11.12.2

does not do the right thing.
https://github.com/opscode/chef/issues/2140
To fix it I commented out the remote_file section and did:
wget https://packagecloud.io/gpg.key
mv gpg.key /opt/opscode/embedded/cookbooks/cache/gpg.key

and yes  wget/curl pick the env settings and work just fine. after that I got a
Mixlib::ShellOut::ShellCommandFailed
------------------------------------
Expected process to exit with [0], but received '100'
---- Begin output of apt-get update ----
STDOUT:
STDERR: E: The method driver /usr/lib/apt/methods/https could not be found.
---- End output of apt-get update ----
Ran apt-get update returned 100

Resource Declaration:
---------------------
# In /opt/opscode/embedded/cookbooks/apt/recipes/default.rb

 40: execute 'apt-get-update' do
 41:   command 'apt-get update'
 42:   ignore_failure true
 43:   only_if { apt_installed? }
 44:   not_if { ::File.exists?('/var/lib/apt/periodic/update-success-stamp') }
 45: end
 46:

which ignores the failure BUT fails to update apt for the packages
Finally
apt-get install apt-transport-https
apt-get update
chef-server-ctl install opscode-manage
opscode-manage-ctl reconfigure

works fine

As part of our work to consolidate the Chef Server code into a single repository, this issue has been moved here:
https://github.com/chef/chef-server/issues/191
Thank you for taking the time to file it.


Bug: Re-Index footnotes error while using link format(e.g., [text](url) )

[x] I have verified that I am on the latest version of the Linter.

Describe the Bug
While using Link in footnotes, the re-index footnotes can't work correctly and mess up all the orders. It caused the key and value of footnotes to be misaligned.
Tips: The Link I mentioned is something like [Google](www.google.com).
How to Reproduce
Settings: To ensure reproducibility, I have created a brand new vault to reproduce the Bug. Specifically,

I use the latest Obsidian(v1.5.3).
I only installed the latest version of Linter(1.22.0) without modifying any other settings or installing any other plugins.
For Linter, I only opened all 3 features associated with Footnotes(Foot after punctuation, Move Footnotes to the buttons, Re-Index Footnotes) as well as Lint on save, keeping other settings as default.
And I make a simple example to reproduce issue. The original content is:

Paragraph 1. [^4]

Paragraph 2. [^1]

Paragraph 3. [^2]

Paragraph 4. [^3]

[^1]: [1111](111)
[^2]: [2222](222)
[^3]: [3333](333)
[^4]: [4444](4444)

After pressing Ctrl + S and linting the file, The result was:
Paragraph 1. [^1]

Paragraph 2. [^2]

Paragraph 3. [^3]

Paragraph 4. [^4]

[^4]: [4444](4444)
[^1]: [1111](111)
[^2]: [2222](222)
[^3]: [3333](333)

Clearly, the keys are not arranged in order after first lint. I can press Ctrl + S again to lint it. Then the result became:
Paragraph 1. [^1]

Paragraph 2. [^2]

Paragraph 3. [^3]

Paragraph 4. [^4]

[^1]: [1111](111)
[^2]: [2222](222)
[^3]: [3333](333)
[^4]: [4444](4444)

Now the key's order is right but the key-value pair mess up. We can see the original text that Paragraph 1's footnote should be [4444](4444) while the result is [1111](111).
As a contrast, the whole ground truth should be:
Paragraph 1. [^1]

Paragraph 2. [^2]

Paragraph 3. [^3]

Paragraph 4. [^4]

[^1]: [4444](4444)
[^2]: [1111](111)
[^3]: [2222](222)
[^4]: [3333](333)

Log
The Log of first lint:
Running linter
rules before regular rules: 0 ms
Running Footnote after Punctuation
footnote-after-punctuation: 0.2999999988824129 ms
Paragraph 1. [^4]

Paragraph 2. [^1]

Paragraph 3. [^2]

Paragraph 4. [^3]

[^1]: [1111](111)
[^2]: [2222](222)
[^3]: [3333](333)
[^4]: [4444](4444)
Running Move Footnotes to the bottom
move-footnotes-to-the-bottom: 0.30000000074505806 ms
Paragraph 1. [^4]

Paragraph 2. [^1]

Paragraph 3. [^2]

Paragraph 4. [^3]

[^4]: [4444](4444)
[^1]: [1111](111)
[^2]: [2222](222)
[^3]: [3333](333)
Running Re-Index Footnotes
re-index-footnotes: 0.09999999962747097 ms
Paragraph 1. [^1]

Paragraph 2. [^2]

Paragraph 3. [^3]

Paragraph 4. [^4]

[^4]: [4444](4444)
[^1]: [1111](111)
[^2]: [2222](222)
[^3]: [3333](333)
Running Custom Regex
custom regex rules: 0 ms
rules after regular rules: 0.19999999925494194 ms
rules running: 1 ms

And the second lint:
Running linter
rules before regular rules: 0 ms
Running Footnote after Punctuation
footnote-after-punctuation: 0.19999999925494194 ms
Paragraph 1. [^1]

Paragraph 2. [^2]

Paragraph 3. [^3]

Paragraph 4. [^4]

[^4]: [4444](4444)
[^1]: [1111](111)
[^2]: [2222](222)
[^3]: [3333](333)
Running Move Footnotes to the bottom
move-footnotes-to-the-bottom: 0 ms
Paragraph 1. [^1]

Paragraph 2. [^2]

Paragraph 3. [^3]

Paragraph 4. [^4]

[^1]: [1111](111)
[^2]: [2222](222)
[^3]: [3333](333)
[^4]: [4444](4444)
Running Re-Index Footnotes
re-index-footnotes: 0.09999999962747097 ms
Paragraph 1. [^1]

Paragraph 2. [^2]

Paragraph 3. [^3]

Paragraph 4. [^4]

[^1]: [1111](111)
[^2]: [2222](222)
[^3]: [3333](333)
[^4]: [4444](4444)
Running Custom Regex
custom regex rules: 0 ms
rules after regular rules: 0.19999999925494194 ms
rules running: 0.8999999985098839 ms

I have merged the change into master that should fix this scenario. Please let us know if master or the next release has an issue with this still.


Changed AuthenticationDomain to enforce applications have exactly one signature

Fixed https://github.com/openid/OpenYOLO-Android/issues/51
PR on top of https://github.com/openid/OpenYOLO-Android/pull/75

Codecov Report

Merging #76 into master will decrease coverage by 0.16%.
The diff coverage is 68.96%.

@@             Coverage Diff              @@
##             master      #76      +/-   ##
============================================
- Coverage     70.94%   70.78%   -0.17%
+ Complexity      436      435       -1
============================================
  Files            58       58
  Lines          2437     2437
  Branches        241      242       +1
============================================
- Hits           1729     1725       -4
- Misses          641      644       +3
- Partials         67       68       +1

Impacted Files
Coverage Δ
Complexity Δ

...enyolo/spi/assetlinks/AssetRelationshipHelper.java
0% <0%> (ø)
0 <0> (ø)
:arrow_down:

...java/org/openyolo/protocol/HintRetrieveResult.java
90.16% <0%> (+1.63%)
9 <0> (ø)
:arrow_down:

.../org/openyolo/spi/BaseCredentialQueryReceiver.java
100% <100%> (ø)
3 <0> (ø)
:arrow_down:

...va/org/openyolo/protocol/AuthenticationDomain.java
93.75% <100%> (-0.37%)
23 <0> (ø)

api/java/org/openyolo/api/KnownProviders.java
93.93% <60%> (-0.35%)
10 <1> (-1)

...rg/openyolo/protocol/CredentialRetrieveResult.java
91.8% <66.66%> (-1.54%)
10 <0> (ø)

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update 315c11f...558bd77. Read the comment docs.


Update reference-connect-adsynctools.md

Adding new Functions: Export-ADSyncToolsAadPublicFolders and Remove-ADSyncToolsAadPublicFolders

@billmath
Can you review the proposed changes?
When the changes are ready for publication, add a #sign-off comment to signal that the PR is ready for the review team to merge.
#label:"aq-pr-triaged"
@MicrosoftDocs/public-repo-pr-review-team


WIP: exploring weakly-dtyped device arrays

This exploration is motivated by a breakage of jit invariance in cases where the working dtype does not match the default dtype. For example:
import jax.numpy as jnp
from jax import jit

x = jnp.arange(4, dtype='float16')

def add(x, y):
  return x + abs(y)

print(add(x, 1.0).dtype)
# float16

print(jit(add)(x, 1.0).dtype)
# float32

This is somewhat related to the issue raised in #3840. It is a corner case that shows up whenever the default dtype differs from the working dtype, which comes up much more frequently in the potentialy re-designed x64 flag behavior (in progress at #3773)
The above issue can be boiled down to a simpler demonstration:
print(jnp.dtype(x + abs(1.0)))
# float16

print(jnp.dtype(x + lax.abs(1.0)))
# float32

JAX type promotion knows to treat python scalars as less important than JAX arrays, so despite the fact that a python float like 1.0 is 64-bit, the result of adding it to a float16 is still a float16.
On the other hand, the result of lax.abs(1.0) is a float32 or float64, depending on the state of the X64 flag, and this type does affect the type promotion of the output.
The proposed solution is to allow device arrays to act more like the former case by extending the weak_dtype concept that is currently used in abstract arrays, which will allow us to maintain jit invariance even in the presence of lax operations that don't have definitive type information.

An example of an issue this sort of treatment would have fixed: #4827


[Nitpick] IsUsingWideScreen() doesn't recognize 8:3 and 21:9 as widescreen

Give an example of what is wrong
The IsUsingWideScreen() lua function only recognizes 16:10 and 16:9 as widescreen, but no other widescreen aspect ratios.
Give an example of what it should look like
8:3 and 21:9 should be recognized as widescreen formats.
I fixed this some time ago for SM 5.1: https://github.com/stepmania/stepmania/commit/6a4551f9589e4dc9e9afcbcf2a8c50e74ea7d427. I think the diff should still apply cleanly as the version in the lastest outfox alpha seems to be the old SM 5.1 version of the function.

Fixed, will be out in the next build.


Multithreading Problem?

Hi there,
I've got a rails application that uses 2 different ooor calls:
Call A returns a String like askdfj-23423-lkj
Call B returns a decimal like 5.2
I now had the scenario that Call B received a response that typically only call A gets and I did not understand why. However, I assume it is because we have 2 instances of this app running (2 passenger servers).
Can anyone tell me if there is a way to prevent this?
Thanks a lot,
Christoph

Can anyone help me please?

sorry for the delay, 2015 was a bad year for me, it's better now. Likely fixed by https://github.com/akretion/ooor/issues/91
Please re-open if not.

@rvalyi thanks a lot! I've sent you an email regarding this issue (as we were incontact before about it) could you maybe have a look?

@solars oh yes sorry, I didn't relate your username with your name. So it's fixed indeed.

@rvalyi there was a problem when I tried it, see reply to your email requesting me to test it "OOOR and HTTPS"

Hi Raphael,
A quick question regarding OOOR - I noticed it is not Rails5 compatible,
and since there were not too many commits in the last year
I kindly wanted to ask if there are plans to upgrade to it? I tried myself
but the project is rather complex,
I'm wondering because we are switching our applications to Rails5 and it
might be easier to switch to OpenERP REST endpoints instead.
Thank you,
Christoph
On Wed, Apr 6, 2016 at 3:05 AM, Raphaël Valyi<EMAIL_ADDRESS>wrote:

@solars https://github.com/solars oh yes sorry, I didn't relate your
username with your name. So it's fixed indeed.
—
You are receiving this because you were mentioned.
Reply to this email directly or view it on GitHub
https://github.com/akretion/ooor/issues/127#issuecomment-206059027

@solars Rails 5 compat will soon be fixed https://github.com/akretion/ooor/pull/153
Also a few more commits and Rails usage documentation coming soon, stay tuned.

@rvalyi great to hear, thank you!

Hi Raphael,
Any news about Rails 5 support?
Thank you,
Christoph
On Wed, Dec 7, 2016 at 1:50 PM, Raphaël Valyi<EMAIL_ADDRESS>wrote:

@solars https://github.com/solars Rails 5 compat will soon be fixed #153
https://github.com/akretion/ooor/pull/153
Also a few more commits and Rails usage documentation coming soon, stay
tuned.
—
You are receiving this because you were mentioned.
Reply to this email directly, view it on GitHub
https://github.com/akretion/ooor/issues/127#issuecomment-265439246, or mute
the thread
https://github.com/notifications/unsubscribe-auth/AAAly9dI90yDrdJ91SDg50OhF8ZtPgPpks5rFqurgaJpZM4FqABc
.


Adding binderorder

Please review and merge

Need to sync with dev and apply changes as per other entities.


Unable to deploy Llama2 70B-chat as AWS Sagemaker endpoint - HF_API_TOKEN parameter does not authenticate

System Info
AWS Sagemaker v.2.163.0
Target Sagemaker endpoint compute configuration settings

instance_type = ml.g5.12xlarge
number_of_gpu = 4

Full AWS Sagemaker notebook setup code included below in "Reproduction" on ml.t2.medium notebook and conda_pytorch_p310.
Information

[ ] Docker
[ ] The CLI directly

Tasks

[ ] An officially supported command
[X] My own modifications

Reproduction
Code run on an AWS Sagemaker notebook where trying to deploy meta-llama/Llama-2-70b-chat-hf to an AWS Sagemaker endpoint using an HuggingFace LLM Inference Container.
Based off Falcon 40B deployment code outlined by @philschmid in this blog post (Note: deployed Falcon 40B successfully using this code where no authentication required).
Access approval from meta and hugging face has already been acquired and linked to same email / account.
# install supported sagemaker SDK
!pip install "sagemaker==2.163.0" --upgrade --quiet

import sagemaker
import boto3
sess = sagemaker.Session()
# sagemaker session bucket -> used for uploading data, models and logs
# sagemaker will automatically create this bucket if it not exists
sagemaker_session_bucket=None
if sagemaker_session_bucket is None and sess is not None:
    # set to default bucket if a bucket name is not given
    sagemaker_session_bucket = sess.default_bucket()

try:
    role = sagemaker.get_execution_role()
except ValueError:
    iam = boto3.client('iam')
    role = iam.get_role(RoleName='sagemaker_execution_role')['Role']['Arn']

sess = sagemaker.Session(default_bucket=sagemaker_session_bucket)

print(f"sagemaker role arn: {role}")
print(f"sagemaker session region: {sess.boto_region_name}")

from sagemaker.huggingface import get_huggingface_llm_image_uri

# retrieve the llm image uri
llm_image = get_huggingface_llm_image_uri(
  "huggingface",
  version="0.8.2"
)

# print ecr image uri
print(f"llm image uri: {llm_image}")

import json
from sagemaker.huggingface import HuggingFaceModel

# sagemaker config
instance_type = "ml.g5.12xlarge"
number_of_gpu = 4
health_check_timeout = 500

#set with read access [include the full token in version that run]
hf_api_token = "hf_xxx"

# TGI config
config = {
  'HF_MODEL_ID': "meta-llama/Llama-2-70b-chat-hf", # model_id from hf.co/models
  'SM_NUM_GPUS': json.dumps(number_of_gpu), # Number of GPU used per replica
  'HF_API_TOKEN': json.dumps(hf_api_token),
}

# create HuggingFaceModel
llm_model = HuggingFaceModel(
  role=role,
  image_uri=llm_image,
  env=config
)

# Deploy model to an endpoint
# https://sagemaker.readthedocs.io/en/stable/api/inference/model.html#sagemaker.model.Model.deploy
llm = llm_model.deploy(
  initial_instance_count=1,
  instance_type=instance_type,
  container_startup_health_check_timeout=health_check_timeout,
)

Error message in CloudWatch logs
Error: DownloadError
huggingface_hub.utils._errors.GatedRepoError: 401 Client Error.
Cannot access gated repo for url https://huggingface.co/api/models/meta-llama/Llama-2-70b-chat-hf.
Repo model meta-llama/Llama-2-70b-chat-hf is gated. You must be authenticated to access it.

Expected behavior
Running the above code on an AWS Sagemaker notebook creates an AWS Sagemaker endpoint which hosts the LLama2 70b-chat model.
Expecting that the 'HF_API_TOKEN' parameter will handle the requirement to authenticate with hugging face to prove LLama2 access (reference here).

Can you try HUGGING_FACE_HUB_TOKEN as suggested here: https://github.com/huggingface/text-generation-inference#using-a-private-or-gated-model ?

70B is not yet supported with 0.8.2 as well. The new version should be available soon.

Thanks @Narsil @philschmid.
So I tried the HUGGING_FACE_HUB_TOKEN parameter and still get the same error for both the 70B and 13B models.
My assumption from your comment @philschmid is that this won't be resolved until 0.8.2 supports Llama2 models? Or is there something else I can try in the meantime as I'm surprised I'd still get the "authentication" specific error?

13B should work can you please share the code you use?

Here you go @philschmid.
Same as above, but with the HUGGING_FACE_HUB_TOKEN parameter change @Narsil suggested and meta-llama/Llama-2-13b-hf as the HF model.
# install supported sagemaker SDK
!pip install "sagemaker==2.163.0" --upgrade --quiet

import sagemaker
import boto3
sess = sagemaker.Session()
# sagemaker session bucket -> used for uploading data, models and logs
# sagemaker will automatically create this bucket if it not exists
sagemaker_session_bucket=None
if sagemaker_session_bucket is None and sess is not None:
    # set to default bucket if a bucket name is not given
    sagemaker_session_bucket = sess.default_bucket()

try:
    role = sagemaker.get_execution_role()
except ValueError:
    iam = boto3.client('iam')
    role = iam.get_role(RoleName='sagemaker_execution_role')['Role']['Arn']

sess = sagemaker.Session(default_bucket=sagemaker_session_bucket)

print(f"sagemaker role arn: {role}")
print(f"sagemaker session region: {sess.boto_region_name}")

from sagemaker.huggingface import get_huggingface_llm_image_uri

# retrieve the llm image uri
llm_image = get_huggingface_llm_image_uri(
  "huggingface",
  version="0.8.2"
)

# print ecr image uri
print(f"llm image uri: {llm_image}")

import json
from sagemaker.huggingface import HuggingFaceModel

# sagemaker config
instance_type = "ml.g5.12xlarge"
number_of_gpu = 4
health_check_timeout = 500

#set with read access [include the full token in version that run]
hf_api_token = "hf_xxx"
hf_model = "meta-llama/Llama-2-13b-hf"

# TGI config
config = {
  'HF_MODEL_ID': hf_model, # model_id from hf.co/models
  'SM_NUM_GPUS': json.dumps(number_of_gpu), # Number of GPU used per replica
  'HUGGING_FACE_HUB_TOKEN': json.dumps(hf_api_token),
}

# create HuggingFaceModel
llm_model = HuggingFaceModel(
  role=role,
  image_uri=llm_image,
  env=config
)

# Deploy model to an endpoint
# https://sagemaker.readthedocs.io/en/stable/api/inference/model.html#sagemaker.model.Model.deploy
llm = llm_model.deploy(
  initial_instance_count=1,
  instance_type=instance_type,
  container_startup_health_check_timeout=health_check_timeout,
)

And the token you provide has access to load the llama models and you accepted the terms on the model card?

yes (see screenshot, same for 13B too)

Yeah just like to second this issue -- have a license for Llama use, have fine tuned Llama multiple times via google colab and other training frameworks, but tried the sagemaker deployment tutorial posted by @philschmid  (https://www.philschmid.de/sagemaker-llama-llm) and ran into the same authentication issue, even after providing my standard HF write token ... what's weirder is mine won't throw an error in the notebook, they'll deploy and then just be failed deployments after like 40mins of waiting around on CloudWatch and Sagemaker dashboard

I have tried w/ 7b, 13b, 70b (all chat-hf) ... can provide a code snippet but my work is identical to the methods outlined in the article above besides the credentials used

Can you share the logs of your deployments?

of course! thanks for the fast reply :)

...may have figured the issue out...testing a new deployment right now -- will report back if I figure it out 🖖

got it! remove the json.dumps() wrapper from the line 'HUGGING_FACE_HUB_TOKEN': json.dumps(hf_api_token) ...
so stupid but that creates the '"string"' effect and makes the token invalid

let me know if that solves it for you @AlexHandy1 ... @philschmid  your article was totally solid, there was no reason to add the json.dumps() line (which I also caught myself doing for consistency's sake, but that actually messes it all up) ... I would print your token or do an assert check like this:
assert config['HUGGING_FACE_HUB_TOKEN'] == "<ur_token>", "Please set your Hugging Face Hub token"

@philschmid yes I think that json.dumps() around the HF token (i.e. doing .dumps(str)) in @AlexHandy1  original code snippet is likely causing the write token to be read incorrectly by the sagemaker deployment … I realized a similar issue in my code and changing the line to be just a string w/o json.dumps() made the deployment work !

This works for me too! Thanks @bcarsley @philschmid


Style.css UI done

I just did the style.css place correctly by using tailwind and simple css

fixes issue #30

This pr is ready to review
Ping @KorryKatti
Changes are always welcome :)

will check and merge

@mahenoorsalat could you provide the vercel or wherever you have deployed this app link ? i would like to preview it


fix: typo in introduction docs

name: :memo: Documentation Fix
about: Fixing a problem in an existing docs page
What docs page needs to be fixed?

Section: Introduction
Page: Why RTK is Redux today

What is the problem?
Simple typo/grammar issue
What changes does this PR make to fix the problem?
Removes a word

Tahnks!


LIST converting to MAP after version upgrade

Hello -
Yesterday I have upgraded my project to 1.1.0 version. After that mu feature file started failing.

From Java I'm passing LIST which is getting converted to MAP. Earlier versions not found this issue.
Since it is MAP I'm not able use Scenario outline with Examples. Earlier I'm passing LIST to the Examples since it is converted to MAP ..it is failing type error. Provided is [Type = MAP, Value : {}]

Attaching my project ..kindly help
Karate LIST converting to Map.zip

@naganjaneyuluyazali just looked at the pom.xml and your project structure and you have not followed the instructions. try again

also to make this simpler for you please note that if you use things like org.json.simple.JSONArray etc. and expect that to be converted to a List or Map etc. that is just not supported by Karate. so please change your code.
and note that the instructions you need to follow are here: https://github.com/karatelabs/karate/wiki/How-to-Submit-an-Issue


Hashcode generation: enum ordinal option?

This is more of a request for discussion than an issue, and if this proposal is interesting I'd be happy to spearhead a PR to implement it. In any case let me start by saying that we love Lombok. We use it almost everywhere we can to drastically simplify the amount of code we have to write. We're huge fans of @EqualsAndHashcode and other annotations that use it such as @Value. However, one place where we struggle with Lombok is enum hashcodes.
This isn't fundamental to Lombok in any way, but more a sad consequence of how enums work under the hood. Enums are assigned a random 32-bit integer as hashcode (aka the identity hash code). Enum hashcodes aren't wrong. In isolation, it makes the most sense as a means by which an individual enum case can be identified safely. However, they're pretty inconvenient when composed as a part of a POJO's hashcode as things like set ordering become inconsistent across runs of your application. For us, this often presents as two servers serving JSON payloads which are semantically equal but not byte equal.
You could argue that you should never rely on set semantics (or hashcode semantics) across JVMs anyways as hashcode generation isn't intended to be stable across JVMs (especially JVM versions), however it's a footgun ready to breed inconsistent behavior. We've found cases where scoring algorithms use sets internally and end up with slightly different behavior across machines.
For the cases where we have POJOs that contain enums, we usually end up hand-defining the hashcode method, and incorporate the enum via its ordinal. e.x.:
    @Override
    public int hashCode() {
        int result = coverage.ordinal();
        result = 31 * result + term.hashCode();
        return result;
    }

I would like to propose adding a hashcode generation option to include enums as their ordinal. There's a few special cases to handle here, such as multiple enums in the same POJO & ensuring that those are represented uniquely, or a POJO having a single field that is that enum. The ordinal alone isn't sufficient, but perhaps the combination of the hashcode of the enum classname + the ordinal would be enough in those cases.
If this is something you'd potentially be willing to accept upstream, I'd be happy to give it a go and start the conversation that way.

I did just run across Improve @Tolerate, so it really works with @EqualsAndHashCode which doesn't give me much hope that this'll be a popular proposal. I do think there's value in deterministic hashcodes as the non-determinism of enums have bitten us more than once. However, it is perhaps more niche than I'd thought.

Right now we just call the hashCode and equals method on all reference type variable. This is something we can determine compile time. We do that by excluding all built-in types and arrays, and what remains is an Object. Unfortunately, we are currently unable to use resolution to inspect the concrete type of a reference field. So we don't know if it is an enum.
We could determine it in the generated code at runtime, but that would impact the performance of all hashCode implementations.
Also, if you have a collection's hashCode method or Array.deepHashCode, those will still use the enum's built-in hashCode.
I think this is something for the JDK to solve.

Fair enough. Thanks for the time! :)


Security attestation?

[X] I agree to follow the Code of Conduct that this project adheres to.
[X] I have searched the issue tracker for a feature request that matches the one I want to file, without success.

I wasn't sure where else to ask this question. I would like my organization to use your software (desktop), and, due to compliance policies, we need to obtain answers to a "third party questionnaire" pertaining to software security. Is this something the drawio community or jgraph can support?

If the questions and the answers can be posted publicly, we'll take a look. As a private task that's not something we'd do.

Checking with the powers that be...

Third_Party_CIS_Questionnaire_V1.2.xlsx

Has anyone been able to take a look at this questionnaire?

Checking back on this. Just need to know whether it's something that can/will be reviewed, so that I can get back to my CISO's office and IT. @davidjgraph

If someone gets time it will be looked at.

Does your organization have a dedicated IT Security team?

No

If you deliver a web-based service to CIS, do you confirmed that it is delivered on HTTPS? Please provide the URL and define the encryption method/protocol.

No, this is specific to the desktop version.

Do you have a set of policies for information security that are for all employees and relevant external parties?

Yes, we're in the process of moving those to https://github.com/jgraph/security-privacy-legal. If there's a specific policy required, add an issue requesting it.

Are information security responsibilities defined and allocated/assigned?

Yes.

Is there a documented mobility and teleworking/remote access policy governing the use of company provided and/or personal mobility devices and teleworking and remote access ?

N/A. We have no offices, our whole security setup is predicated on everyone being remote.

Is the organization's approach to managing information security and its implementation reviewed independently at planned intervals or when significant changes occur?

Yes, it's reviewed annually by an external entity.

Are you a CIS SecureSuite Member?

No

Do you have a current ISO 27001 accreditation scoped to each service/technology/product you are offering to CIS? If NO do you follow another accreditation, please describe?

No, we are not formally accredited.

Are appropriate, ethical and proportional background verification checks carried out on all candidates for employment?

Yes.

Are employees and contractors made aware of their information security   responsibilities?

Yes.

Are all organizational information assets and information processing assets documented and protected appropriately?

Yes

Are procedures in place for the management of removable media in accordance with the classification scheme in use?

Yes

Is access to information and information processing facilities restricted?

Yes

Is a policy in place for the use of encryption for the protection of information?

Yes

Which  Data Protection regulation does your organization comply with?
Does your organization intend to comply with GDPR?

JGraph complies with the data protection regulations in the UK. JGraph is compliant with current GDPR regulations.

Does your organization operate a policy to ensure compliance with any Data Protection regulation when processing, managing and handling Personal/Sensitive data?
Does your organization intend to operate a policy to ensure compliance with  GDPR?

Yes.  Yes.

Has your organization's processing of Personal/Sensitive data ever been the subject of any complaints or had to report the loss or suspected loss, destruction or suspected destruction, compromise or suspected compromise, breach or suspected breach of personal data to the Information Commissioner, or any other regulator?

No.

No.

Has your organization ever processed any Personal/Sensitive data outside the European Union as part of the provision of services for its customers?

No.

Are regular independent reviews of data protection and security assessments (including vulnerability assessments and penetration tests) carried out to identify privacy and security risks for the required service or solution? If YES, please define the scope and frequency .

The security processes for JGraph are reviewed annually. We no longer perform security assessments at specific intervals. Instead we have a constantly ongoing bug bounty program running using the Bugcrowd platform. This has proved significantly more effective at finding vulnerabilities.

Is a formal provision / revocation process in place to enable assignment of access rights?

Yes.

Are users made accountable for safeguarding their authentication information?

Yes, though we've provisioned tools to enforce good security practices.

Is access to information and application system functions restricted in accordance with the access control policy?

Yes.

Are Physical security perimeters defined and used to protect areas that contain sensitive or critical information or information processing facilities?

In the data centres we use, yes.

Are controls in place to prevent loss, damage, theft or compromise of assets?

Yes.

Are operating procedures in place to ensure correct and secure operations of information processing facilities?

In the data centers we use, yes.

Do you have a security architecture approach? If yes, on which model/framework is it based?

It's a mix of 2, but I'll have to come back with their names.

Are controls to detect, prevent and recover from issues caused by malware in place?

Yes

Are backup copies of information, software and system images taken and tested regularly in accordance with an agreed backup policy?

Yes.

Are event logs recording user activities. exceptions, faults and information security events produced, kept and regularly reviewed?

Yes.

Are procedures implemented to control the installation of software on operational systems?

Yes.

Are vulnerabilities evaluated and appropriate measures taken to address the associated risk in a secure and  timely manner?

Yes.

Are audit requirements and activities involving verification of operational systems carefully planned and agreed to minimize disruptions to business processes activities?

No.

Are system hardening standards/procedures documented and implemented? (Please explain in comments how consistent secure build is achieved)?

Not sure we could say yes to that. It's an ongoing process of reviewing current best practises and implementing.

Are networks managed and controlled to protect and secure information in systems and applications for on premise and off-premise including Cloud?

Yes

Are formal transfer policies, procedures and controls in place to protect and secure the transfer of information through the use of all types of communication facilities?

Yes.

Does your organization have a dedicated IT Security team?

No

If you deliver a web-based service to CIS, do you confirmed that it is delivered on HTTPS? Please provide the URL and define the encryption method/protocol.

No, this is specific to the desktop version.

Do you have a set of policies for information security that are for all employees and relevant external parties?

Yes, we're in the process of moving those to https://github.com/jgraph/security-privacy-legal. If there's a specific policy required, add an issue requesting it.

Are information security responsibilities defined and allocated/assigned?

Yes.

Is there a documented mobility and teleworking/remote access policy governing the use of company provided and/or personal mobility devices and teleworking and remote access ?

N/A. We have no offices, our whole security setup is predicated on everyone being remote.

Is the organization's approach to managing information security and its implementation reviewed independently at planned intervals or when significant changes occur?

Yes, it's reviewed annually by an external entity.

Are you a CIS SecureSuite Member?

No

Do you have a current ISO 27001 accreditation scoped to each service/technology/product you are offering to CIS? If NO do you follow another accreditation, please describe?

No, we are not formally accredited.

Are appropriate, ethical and proportional background verification checks carried out on all candidates for employment?

Yes.

Are employees and contractors made aware of their information security   responsibilities?

Yes.

Are all organizational information assets and information processing assets documented and protected appropriately?

Yes

Are procedures in place for the management of removable media in accordance with the classification scheme in use?

Yes

Is access to information and information processing facilities restricted?

Yes

Is a policy in place for the use of encryption for the protection of information?

Yes

Which  Data Protection regulation does your organization comply with?
Does your organization intend to comply with GDPR?

JGraph complies with the data protection regulations in the UK. JGraph is compliant with current GDPR regulations.

Does your organization operate a policy to ensure compliance with any Data Protection regulation when processing, managing and handling Personal/Sensitive data?
Does your organization intend to operate a policy to ensure compliance with  GDPR?

Yes.  Yes.

Has your organization's processing of Personal/Sensitive data ever been the subject of any complaints or had to report the loss or suspected loss, destruction or suspected destruction, compromise or suspected compromise, breach or suspected breach of personal data to the Information Commissioner, or any other regulator?

No.

No.

Has your organization ever processed any Personal/Sensitive data outside the European Union as part of the provision of services for its customers?

No.

Are regular independent reviews of data protection and security assessments (including vulnerability assessments and penetration tests) carried out to identify privacy and security risks for the required service or solution? If YES, please define the scope and frequency .

The security processes for JGraph are reviewed annually. We no longer perform security assessments at specific intervals. Instead we have a constantly ongoing bug bounty program running using the Bugcrowd platform. This has proved significantly more effective at finding vulnerabilities.

Is a formal provision / revocation process in place to enable assignment of access rights?

Yes.

Are users made accountable for safeguarding their authentication information?

Yes, though we've provisioned tools to enforce good security practices.

Is access to information and application system functions restricted in accordance with the access control policy?

Yes.

Are Physical security perimeters defined and used to protect areas that contain sensitive or critical information or information processing facilities?

In the data centres we use, yes.

Are controls in place to prevent loss, damage, theft or compromise of assets?

Yes.

Are operating procedures in place to ensure correct and secure operations of information processing facilities?

In the data centers we use, yes.

Do you have a security architecture approach? If yes, on which model/framework is it based?

It's a mix of 2, but I'll have to come back with their names.

Are controls to detect, prevent and recover from issues caused by malware in place?

Yes

Are backup copies of information, software and system images taken and tested regularly in accordance with an agreed backup policy?

Yes.

Are event logs recording user activities. exceptions, faults and information security events produced, kept and regularly reviewed?

Yes.

Are procedures implemented to control the installation of software on operational systems?

Yes.

Are vulnerabilities evaluated and appropriate measures taken to address the associated risk in a secure and  timely manner?

Yes.

Are audit requirements and activities involving verification of operational systems carefully planned and agreed to minimize disruptions to business processes activities?

No.

Are system hardening standards/procedures documented and implemented? (Please explain in comments how consistent secure build is achieved)?

Not sure we could say yes to that. It's an ongoing process of reviewing current best practises and implementing.

Are networks managed and controlled to protect and secure information in systems and applications for on premise and off-premise including Cloud?

Yes

Are formal transfer policies, procedures and controls in place to protect and secure the transfer of information through the use of all types of communication facilities?

Yes.


Usage of su -c instead of sudo

Some users might not have sudo installed on their systems, so it's better to use su -c on the script in order to run tasks as superuser.

good idea


Add University

Hello, I am Samandar(Sam). I am currently studying at PDP University. It is located in Tashkent, Uzbekistan. PDP University is a university fully adapted to the IT field. So, I added my university above the repo and hope you accept it.

Hello, Dear Jetbrains team. I tried to add my university but it was not approved. university.pdp.uz

@samandareo Thank you for your request! I found enough evidence of eligibility of pdp.uz domain, but not pdp.university domain.
Please provide us with a proof, which shows that the school recognizes the domain pdp.university as an official email domain for the students.
You can provide us with any of the following:

A copy of instruction (a hard-copy or electronic one) given to you by the school that tells you to use an email address in this email domain
An URL of a page at the official school website that says that students use this email domain
A reference to a recognized journal where an article was published by someone from the school, with explicit affiliation to the school, and e-mail address from the email domain
A WHOIS data that link the email domain to the school somehow
A copy of official letter from the school representative saying that the school provides e-mail addresses in this domain to the students
Anything else that can prove this fact in similar way, i.e. can be verified independently.

@samandareo You might miss my previous comment. Please react.

@philipto Hello, I saw your response. University has a website university.pdp.uz. If you enter pdp.university, will redirect to university.pdp.uz

@samandareo Thank you for replying. Regrettably, this does not prove anything:

If you enter pdp.university, will redirect to university.pdp.uz

Anybody can setup a redirect from any URL to any other URL. Please provide us with a proof, which shows that the school recognizes the domain you are submitting as an official email domain for the students.
You can provide us with any of the following:

A copy of instruction (a hard-copy or electronic one) given to you by the school that tells you to use an email address in this email domain
An URL of a page at the official school website that says that students use this email domain
A reference to a recognized journal where an article was published by someone from the school, with explicit affiliation to the school, and e-mail address from the email domain
A WHOIS data that link the email domain to the school somehow
A copy of official letter from the school representative saying that the school provides e-mail addresses in this domain to the students
Anything else that can prove this fact in similar way, i.e. can be verified independently.

@samandareo I am sorry, this request remains unanswered for a while. I have to close it without merging. Please reopen and comment if you have an update regarding the aforementioned issue. Thank you for your understanding!


Unable to record from default capture device with baresip

Hi Arthur. I'm very impressed with baresip - easily the cleanest SIP client I've found yet in terms of dependencies and build process.
I am puzzled, but accept this is probably a quirk of my system/setup and not likely a bug, but I haven't found a clue in the mailing list archive, previous issues or the Wiki to straighten me out.
I'm running baresip 0.5.8, libre and librem downloaded and compiled today, on a Raspbian Stretch OS on a Raspberry Pi 3. The compilation was completely clean.
I have a GPIO/I2S module with an onboard MEMS microphone and amplifier. Both work fine, I can record and playback using the default ALSA devices (although U8 / 8kHz / Mono sounds pretty crappy, as they prefer at least S16_LE / 16kHz for the amplifier and S24_LE / 8kHz for the microphone. (See the alsa_configspace_0_[0|1]_0.out files for details)
Default recording:
arecord -v -d 5 -t wav test_U8_8000_1.wav
Better recording:
arecord -v -f S16_LE -d 5 -t wav test_U16_8000_1.wav
When I fire up baresip, I can answer an incoming call and the speaker plays "The phone is ringing" just fine. I see:
<EMAIL_ADDRESS>Incoming call from: 1002 - SIP@5160 <EMAIL_ADDRESS>- (press 'a' to accept)
alsa: reset: srate=8000, ch=1, num_frames=320, pcmfmt=S16_LE

...which makes me hope. But then:
audio: Set audio encoder: PCMU 8000Hz 1ch
ALSA lib pcm_direct.c:931:(snd1_pcm_direct_initialize_slave) snd_pcm_hw_params_any failed
ALSA lib pcm_dsnoop.c:629:(snd_pcm_dsnoop_open) unable to initialize slave
alsa: could not open ausrc device 'default' (Invalid argument)
audio: start_source failed (alsa.default): Unknown error -22

...despair.
I've tried changing the audio_source in the config file to see if I can force it to use any of the virtual devices directly but with no success so far.
 When I start messing with those I rapidly end up with call failures, e.g.:
call: no common audio codecs - rejected
I've attached some files to illustrate the config - please shout if you need to see anything else, but if this is bleeding obvious please be gentle...?
Cheers
Mike
alsa_i2s_default_capture_fail.tar.gz

If I try forcing (in ~/.baresip/config):
ausrc_srate 16000
ausrc_channels 2
ausrc_format s16

I get the same failure as above, and when I strace baresip, I see it seems to be trying to opening the right capture device.
mmap2 returns -1 ENXIO "No such device or address", but I see that same message when opening the playback device to get the "phone is ringing" alert  (which does work, I can hear it).
So can/should I ignore that mmap2 call?
If so, what is that HW_REFINE doing in the capture case, and what can I try, to encourage it away from that failing code path?
open("/dev/snd/pcmC0D0p", O_RDWR|O_NONBLOCK|O_CLOEXEC) = 15
fcntl64(15, F_SETFD, FD_CLOEXEC)        = 0
ioctl(15, SNDRV_PCM_IOCTL_INFO, 0x7eef9c84) = 0
close(14)                               = 0
ioctl(15, SNDRV_PCM_IOCTL_INFO, 0x7eef9b14) = 0
fcntl64(15, F_GETFL)                    = 0x802 (flags O_RDWR|O_NONBLOCK)
ioctl(15, AGPIOC_INFO or SNDRV_PCM_IOCTL_PVERSION, 0x7eef9a7c) = 0
ioctl(15, AGPIOC_SETUP or SNDRV_PCM_IOCTL_TTSTAMP, 0x7eef9a84) = 0
mmap2(NULL, 4096, PROT_READ, MAP_SHARED, 15, 0x80000000) = -1 ENXIO (No such device or address)
ioctl(15, SNDRV_PCM_IOCTL_SYNC_PTR, 0x7eef9a90) = 0
ioctl(15, SNDRV_PCM_IOCTL_HW_REFINE, 0x7eef9cf0) = 0
ioctl(15, SNDRV_PCM_IOCTL_HW_REFINE, 0x7eef9cf0) = 0
ioctl(15, SNDRV_PCM_IOCTL_HW_REFINE, 0x7eef9cf0) = 0
ioctl(15, SNDRV_PCM_IOCTL_HW_REFINE, 0x7eef9cf0) = 0
ioctl(15, SNDRV_PCM_IOCTL_HW_REFINE, 0x7eef9cf0) = 0
ioctl(15, SNDRV_PCM_IOCTL_HW_REFINE, 0x7eef9cf0) = 0
ioctl(15, SNDRV_PCM_IOCTL_HW_REFINE, 0x7eef9cf0) = 0
ioctl(15, SNDRV_PCM_IOCTL_HW_REFINE, 0x7eef9cf0) = 0
ioctl(15, SNDRV_PCM_IOCTL_HW_PARAMS, 0x7eef9cf0) = 0
ioctl(15, SNDRV_PCM_IOCTL_SYNC_PTR, 0x134c5b0) = 0
ioctl(15, SNDRV_PCM_IOCTL_SW_PARAMS, 0x7eef9bcc) = 0
ioctl(15, SNDRV_PCM_IOCTL_CHANNEL_INFO, 0x7eef9b4c) = 0
ioctl(15, SNDRV_PCM_IOCTL_CHANNEL_INFO, 0x7eef9b4c) = 0
mmap2(NULL, 73728, PROT_READ|PROT_WRITE, MAP_SHARED, 15, 0) = 0x743a9000
ioctl(15, SNDRV_PCM_IOCTL_PREPARE, 0x60be5c00) = 0
ioctl(15, SNDRV_PCM_IOCTL_SYNC_PTR, 0x134c5b0) = 0
ioctl(15, SNDRV_PCM_IOCTL_SW_PARAMS, 0x7eef9c88) = 0
ioctl(15, SNDRV_PCM_IOCTL_SYNC_PTR, 0x134c5b0) = 0
ioctl(15, SNDRV_PCM_IOCTL_START, 0x134c5b0) = 0
ioctl(15, AGPIOC_INFO or SNDRV_PCM_IOCTL_PVERSION, 0x7eef9c7c) = 0
shmget(0x1e568b, 144000, IPC_CREAT|0600) = 4751361
shmctl(4751361, IPC_64|IPC_STAT, {shm_perm={uid=1000, gid=1000, mode=0600, key=1988235, cuid=1000, cgid=1000}, shm_segsz=144000, shm_cpid=14130, shm_lpid=0, shm_nattch=0, shm_atime=0, shm_dtime=0, shm_ctime=1520447863}) = 0
shmat(4751361, NULL, 0)                 = 0x74385000
mlock(0x74385000, 144000)               = 0
ioctl(15, SNDRV_PCM_IOCTL_INFO, 0x7eef9dac) = 0

...snip...

open("/dev/snd/pcmC0D1c", O_RDWR|O_NONBLOCK|O_CLOEXEC) = 18
fcntl64(18, F_SETFD, FD_CLOEXEC)        = 0
ioctl(18, SNDRV_PCM_IOCTL_INFO, 0x7eefa2f4) = 0
close(17)                               = 0
ioctl(18, SNDRV_PCM_IOCTL_INFO, 0x7eefa184) = 0
fcntl64(18, F_GETFL)                    = 0x802 (flags O_RDWR|O_NONBLOCK)
ioctl(18, AGPIOC_INFO or SNDRV_PCM_IOCTL_PVERSION, 0x7eefa0ec) = 0
ioctl(18, AGPIOC_SETUP or SNDRV_PCM_IOCTL_TTSTAMP, 0x7eefa0f4) = 0
mmap2(NULL, 4096, PROT_READ, MAP_SHARED, 18, 0x80000000) = -1 ENXIO (No such device or address)
ioctl(18, SNDRV_PCM_IOCTL_SYNC_PTR, 0x7eefa100) = 0
ioctl(18, SNDRV_PCM_IOCTL_HW_REFINE, 0x7eefa360) = -1 EINVAL (Invalid argument)
write(2, "ALSA lib pcm_direct.c:931:(snd1_"..., 61ALSA lib pcm_direct.c:931:(snd1_pcm_direct_initialize_slave) ) = 61
write(2, "snd_pcm_hw_params_any failed", 28snd_pcm_hw_params_any failed) = 28
write(2, "\n", 1
)                       = 1
write(2, "ALSA lib pcm_dsnoop.c:629:(snd_p"..., 48ALSA lib pcm_dsnoop.c:629:(snd_pcm_dsnoop_open) ) = 48
write(2, "unable to initialize slave", 26unable to initialize slave) = 26
write(2, "\n", 1
)                       = 1
close(18)                               = 0
shmdt(0x76f2c000)                       = 0
shmctl(4849666, IPC_64|IPC_STAT, {shm_perm={uid=1000, gid=1000, mode=0600, key=3492593, cuid=1000, cgid=1000}, shm_segsz=488, shm_cpid=14130, shm_lpid=14130, shm_nattch=0, shm_atime=1520447864, shm_dtime=1520447864, shm_ctime=1520447864}) = 0
shmctl(4849666, IPC_64|IPC_RMID, NULL)  = 0
semctl(3112961, 0, IPC_64|IPC_RMID, 0)  = 0
write(1, "\33[31malsa: could not open ausrc "..., 68alsa: could not open ausrc device 'default' (Invalid argument)
) = 68
write(1, "\33[;m\33[31maudio: start_source fai"..., 70audio: start_source failed (alsa.default): Unknown error -22
) = 70
write(1, "\33[;mvideo stream is disabled..\n", 31video stream is disabled..
) = 31
write(1, "video: stopping video source ..\n", 32video: stopping video source ..
) = 32
)                       = 1

Assuming that baresip is not using the default ALSA device (which is a plug and therefore capable of its own resampling and reformatting to what's requested) I tried:
ausrc_srate 24000
ausrc_channels 2
ausrc_format s24_3le

But even matching the capabilities advertised by the hw:1,0 capture device results in the same error. So I clearly have no clue what I'm doing and need to rely on the generosity of strangers once again!

@michthom
Instead of using the default alsa device or hw1,0 device , try using the one that states plughw...
Use arecord -L to find the correct plughw name
plughw says it is the --- Hardware device with all software conversions

Hi there. I can record from the command line with:
arecord -D plughw:0,1 -r 24000 -f S24_3LE -t wav -d 5 test.wav
The recording is unfortunately nearly silent, since I need the softvol plugin from ALSA to add the 21dB boost to bring the values up to something I can hear.
However if I set up baresip with config of:
audio_source		alsa,plughw:0,1
ausrc_srate		24000
ausrc_channels		2
ausrc_format		s24_3le

(which should emulate the same source?) I see:
<EMAIL_ADDRESS>Incoming call from: 1002 - SIP@5160 <EMAIL_ADDRESS>- (press 'a' to accept)
alsa: reset: srate=8000, ch=1, num_frames=320, pcmfmt=S16_LE
alsa: playback started (default)
<EMAIL_ADDRESS>Answering incoming call
alsa: stopping playback thread (default)
answering call from<EMAIL_ADDRESS>with 200
call: update media
audio: Set audio decoder: PCMU 8000Hz 1ch
alsa: reset: srate=8000, ch=1, num_frames=160, pcmfmt=S16_LE
alsa: playback started (default)
audio: player started with sample format S16LE
audio: Set audio encoder: PCMU 8000Hz 1ch
audio: enable ausrc resampler: 8000Hz/1ch <-- 24000Hz/2ch
alsa: reset: srate=24000, ch=2, num_frames=480, pcmfmt=S24_3LE
ALSA lib pcm_params.c:2162:(snd1_pcm_hw_refine_slave) Slave PCM not usable
alsa: cannot initialize hw params (Invalid argument)
alsa: init failed: err=-22
alsa: could not reset source 'plughw:0,1' (Invalid argument)
audio: start_source failed (alsa.plughw:0,1): Unknown error -22
video stream is disabled..
video: stopping video source ..
Quit


sysmon 11 schema 4.3 configuration read problem with rulegroup and "wrong" order of filter tags

I thought the order of filter tags won't matter, but within RuleGroup it seemingly does.
Taken the example from sysmon -c config output:

  <!-- Capture all hashes -->
  <HashAlgorithms>*</HashAlgorithms>
  <EventFiltering>
    <!-- Log all drivers except if the signature -->
    <!-- contains Microsoft or Windows -->
    <DriverLoad onmatch="exclude">
      <Signature condition="contains">microsoft</Signature>
      <Signature condition="contains">windows</Signature>
    </DriverLoad>
    <!-- Do not log process termination -->
    <ProcessTerminate onmatch="include" />
    <!-- Log network connection if the destination port equal 443 -->
    <!-- or 80, and process isn't InternetExplorer -->
    <NetworkConnect onmatch="include">
      <DestinationPort>443</DestinationPort>
      <DestinationPort>80</DestinationPort>
    </NetworkConnect>
    <NetworkConnect onmatch="exclude">
      <Image condition="end with">iexplore.exe</Image>
    </NetworkConnect>
  </EventFiltering>
</Sysmon>

This works, sysmon -c output shows:
Rule configuration (version 4.30):
 - DriverLoad                         onmatch: exclude   combine rules using 'And'
        Signature                      filter: contains     value: 'microsoft'
        Signature                      filter: contains     value: 'windows'
 - ProcessTerminate                   onmatch: include   combine rules using 'And'
 - NetworkConnect                     onmatch: include   combine rules using 'And'
        DestinationPort                filter: is           value: '443'
        DestinationPort                filter: is           value: '80'
 - NetworkConnect                     onmatch: exclude   combine rules using 'And'
        Image                          filter: end with     value: 'iexplore.exe'

Now with a grouping tag:
<Sysmon schemaversion="4.30">
  <!-- Capture all hashes -->
  <HashAlgorithms>*</HashAlgorithms>
  <EventFiltering>
	<RuleGroup groupRelation="and">
		<!-- Log all drivers except if the signature -->
		<!-- contains Microsoft or Windows -->
		<DriverLoad onmatch="exclude">
		  <Signature condition="contains">microsoft</Signature>
		  <Signature condition="contains">windows</Signature>
		</DriverLoad>
		<!-- Do not log process termination -->
		<ProcessTerminate onmatch="include" />
		<!-- Log network connection if the destination port equal 443 -->
		<!-- or 80, and process isn't InternetExplorer -->
		<NetworkConnect onmatch="include">
		  <DestinationPort>443</DestinationPort>
		  <DestinationPort>80</DestinationPort>
		</NetworkConnect>
		<NetworkConnect onmatch="exclude">
		  <Image condition="end with">iexplore.exe</Image>
		</NetworkConnect>
	</RuleGroup>
  </EventFiltering>
</Sysmon>

Sysmon -c shows that the config broke after driverload:
Rule configuration (version 4.30):
 - DriverLoad                         onmatch: exclude   combine rules using 'And'
        Signature                      filter: contains     value: 'microsoft'
        Signature                      filter: contains     value: 'windows'

There are 2 causes for this:
One is the use of comments insider RuleGroup, see Issue #282
The other the order of the filter tags.
DriverLoad has id 6 while ProcessTerminate has id 5.
After bringing them into the "right" order (numerical by id), the config works again.
<Sysmon schemaversion="4.30">
  <!-- Capture all hashes -->
  <HashAlgorithms>*</HashAlgorithms>
  <EventFiltering>
	<RuleGroup groupRelation="and">
		<!-- Log all drivers except if the signature -->
		<!-- contains Microsoft or Windows -->
		<NetworkConnect onmatch="include">
		  <DestinationPort>443</DestinationPort>
		  <DestinationPort>80</DestinationPort>
		</NetworkConnect>
		<NetworkConnect onmatch="exclude">
		  <Image condition="end with">iexplore.exe</Image>
		</NetworkConnect>
		<ProcessTerminate onmatch="include" />
		<DriverLoad onmatch="exclude">
		  <Signature condition="contains">microsoft</Signature>
		  <Signature condition="contains">windows</Signature>
		</DriverLoad>
	</RuleGroup>
  </EventFiltering>
</Sysmon>

sysmon -c shows:
Rule configuration (version 4.30):
 - NetworkConnect                     onmatch: include   combine rules using 'And'
        DestinationPort                filter: is           value: '443'
        DestinationPort                filter: is           value: '80'
 - NetworkConnect                     onmatch: exclude   combine rules using 'And'
        Image                          filter: end with     value: 'iexplore.exe'
 - ProcessTerminate                   onmatch: include   combine rules using 'And'
 - DriverLoad                         onmatch: exclude   combine rules using 'And'
        Signature                      filter: contains     value: 'microsoft'
        Signature                      filter: contains     value: 'windows'

Thanks for reporting. Have added to the backlog and will let you know once this has been resolved.


all the extentions are taking too much performace of the computer around 100% cpu

a week ago or so and the computer lags every time and I can not run any code on the browser or on the extensions, is it because I have too many Extensions? I have about 30-50 extensions, is that too many extensions downloaded? or is it a problem with one of my extensions. I know that the extensions are taking the most power BTW.

Disable all extensions by Disable all installed extensions command and check the CPU load. If the issue resolved, disable extensions one by one and check the CPU load.

how to disable one by one?

You can disable the extension from the extensions view.

I think I figured it out and it seems to be working well now


Feature: Add Bulk Pin/Unpin Functionality for Archived Notes

Description

Implemented the ability to pin and unpin multiple archived notes simultaneously.

Added bulk selection for archived notes, allowing users to manage pinned status in one action.

Updated UI elements to indicate pinned status for archived notes clearly and to provide feedback upon pinning/unpinning actions.

Ensured smooth updates in the notes list to reflect changes immediately.

Fixes #333

Type of change
-feature request
Please delete options that are not relevant.

[x] New feature (non-breaking change which adds functionality)

Checklist

[x] My code follows the style guidelines of this project
[x] I have performed a self-review of my own code
[x] I have commented my code, particularly in hard-to-understand areas
[x] My changes generate no new warnings
[x] New and existing unit tests pass locally with my changes
[x] I have maintained a clean commit history by using the necessary Git commands
[x] I have checked that my code does not cause any merge conflicts

Screenshots (if applicable)
Screencast from 2024-10-29 15-04-40.webm

resolve conflicts

resolve conflicts

@yashmandi , Done

@yashmandi , can you add level2 label on this pull request instead of level1 .


20221122 lsp wasm rollup

This is the synthesis of various things that have come up during the course of developing the chialisp lsp:

It should be free to evolve faster than clvm_tools_rs
Changes here are lower risk than ones in clvm_tools_rs
The wasm lsp module can be published from here if desired as a separate wasm package.
PRs neither in here nor in clvm_tools_rs could capture whole changes to the LSP.
It's be long requested that these inter-module dependencies could be based on published versions

@prozacchiwawa This patch is very large, which makes it hard to review. I think it would be easier to keep a high pace with more smaller patches.


Exposure & Color Temperature control on LIP-VA1

The "Imager" tab doesn't allow changing Exposure and doesn't give any options for Color Temperature. I know this isn't a bug per-say, but is there a work around that can be documented for editing this in a config or manually in some way?

Found suitable process for overriding and configuring most settings and getting generally improved results as baseline.
List all devices:
v4l2-ctl --list-devices
Set device to configure:
v4l2-ctl -d /dev/video0
List all available user controls, defaults and current values:
v4l2-ctl -l
Turn off automatic white balance:
v4l2-ctl -c white_balance_automatic=0
Set white balance close to cold white LED illuminator:
v4l2-ctl -c white_balance_temperature=6500
Set brightness:
v4l2-ctl -c brightness=-42
Set exposure to manual:
v4l2-ctl -c auto_exposure=1
Set esposure:
v4l2-ctl -c exposure_time_absolute=1
Some tips for getting started:
https://medium.com/@deepeshdeepakdd2/v4l-a-complete-practical-tutorial-c520f097b590

I'll answer in a bit more detail later, but these settings were intentionally disabled due to various issues. You can re-activate them using pyuscope dev mode though if you want to play with them from the GUI itself.


indented languages : automatically add closing unindent lexemes

For indented languages, if INDENT/UINDENT are used as block delimiters (as python does) then if a source is ending without closing opening INDENT, parse fails.
Add the possibility to automatically add  UINDENT tokens to close left opened INDENTs.
This feature must be an optim as not all indented language use indentation as blocks.

fixed with #449


Namespaces > error handling

this PR addresses AAP-29167
most error handlers were already covered, this PR is just fixing some typos

/assign @ZitaNemeckova


"wow" command not detected with Powershell

Hi - I'm using powershell, but the error message from PS isn't picked up:
wow : The term 'wow' is not recognized as the name of a cmdlet, function, script file, or operable program. Check the spelling of the name, or if a path was included, verify that the path is correct and try again.
Teh weird thing is, https://github.com/zeit/hyperpower/blob/master/index.js#L48 looks like it should pick this up?

Do #35 and #36 fix this?

#35 fixes this, but #35 has not been merged yet. #36 is text change on description

we have a fix ready, but it is not released yet.
https://github.com/zeit/hyperpower/compare/0.2.3...master
https://github.com/zeit/hyperpower/commit/dcd648d3825301ca3de7ddda224740d8e1dbebc0

I'm completely out of the loop with node. If I add the fix to my index.js, how do I get the change to push. It looks like the old version is running with I look at sources in the inspector. Basically, saving the file isn't pushing the changes.

answer to my question is you have to run npm update wherever your package.json file is after making the change. sorry for noob.


WSL2 path mapping does not resolve symbolic links

The WSL2 mechanism for accessing Linux paths from Windows does not follow symbolic directory links on the Linux side. You can reproduce it as follows:

Run the following commands from a WSL2 terminal (replace testuser with your Linux user name):

cd /home/testuser
mkdir dir1
echo test > dir1/file.txt
ln -s dir1 dir2

It will create a /home/testuser/dir1 directory containing file.txt and /home/testuser/dir2 symlink pointing to dir1.

Try opening the following paths from the "Run" dialog on Windows (replace Ubuntu-20.04 with the disto name and testuser with user name):

\\wsl$\Ubuntu-20.04\home\testuser\dir1\file.txt
\\wsl$\Ubuntu-20.04\home\testuser\dir2\file.txt

The first path will open as expected. The second one will not work, because the dir2 symlink is not resolved when accessing via the \\wsl$ syntax.

/dupe #5118


change the open Recent shortcut to not trigger when in terminal.

When you press ctrl-r the open recent window opens. For people who use the reverse search functionality in terminals (bash, powershell etc) this is really annoying.
It is easily solved by changing the when clause to !terminalFocus
Is it a good idea to set this as default?

Have you customized your keybindings and settings? The default behavior shouldn't do this. Also what version of vscode are you on? If it's insiders we had a regression that could have caused this recently but is fixed already.

Ah nice, that was it then. I am indeed using insiders.
I did change the keybinding, to not trigger when in terminal, but if it's not going to go to the normal vscode, this is a non-issue.
Thanks for the update!


[rshapes] Optimize CheckCollisionCircles

Avoid unnecessary square root calculation in CheckCollisionCircles
Tested in this branch:
https://github.com/kai-z99/raylib/blob/circlecollisionopt/examples/shapes/shapes_collision_area.c

@kai-z99 Thanks for the review!


feat: add sync 1.1.3 release

update sync with release 1.1.3

:tada: This PR is included in version 1.153.0 :tada:
The release is available on GitHub release
Your semantic-release bot :package::rocket:


[Feat] - Add Skip Editing option to CropImageContractOptions

I've been using the original library and recently discovered this one. Since I required a feature in the original library I've added it to my project and modified the source code.
This is the feature I had added to the original library. I had an option to skip editing the image entirely because I don't require users to edit the images everywhere in my app. I basically want to skip the editing step. So if I pass an option like setSkipEditing(true) the CropImageActivity should directly return the entire image (after any processing) without any user interaction.
I'll try and submit a PR

Looks nice @Devenom1
But in the case the user do not need to crop the image, why we don't just retrieve it directly without the library usage?

Hi @Canato, I had thought the same before but this is why adding this option became very useful.

In our app we need users to pick images in multiple places. It's only in some places that we in the app we don't need the images edited. Adding this option lets us keep the UI consistent.
The library provides the automatic editing feature that proves to be very useful. Like we can set the quality of the image, aspect ratio of the image, etc and the library takes care of this for us. In some places we may just not need the manual editing option like cropping, flipping or rotating but we still need other features used in this library like setting image quality, resolution, aspect ratio etc.

Nice, let's merge when the PR is ready


Improvements

Some improvements:

Improved centering
Fixed searching (I have some use cases with very large trees where search was not finding the intervals)
Added rubygems structure to be able to be pushed as a gem

Feel free to add more stuff to the gemspec file to add your details

I apologize that I did not reply sooner. Please give me several days to check your contribution.

That's fine, no worries. Please let me know your thoughts.

I AM SO SORRY. Please wait for 1 more week.... This week has a dead line for a research grant application...

No worries :) Good luck with your deadline!!

Hi @misshie, how are you doing? Any update about this?

Thank you very much for your patience. I have merged your contribution.I also updated README.md with your comments.

Perfect, now this should be ready to be deployed as a gem to rubygems server, so that people don't need to link github and we can see how many downloads etc we have. Do you want me do to push it for you? Just give link me to your Rubygems account or update the gemspec file in order for you to appear as author as well.

If possible, please send me an update for the gemspec file? I will register it on RubyGems.org. A gem named "interval-tree" is already used ( https://rubygems.org/gems/interval-tree ). We should use another name such as "augmented-interval-tree".


Achieve "feature completeness" by adding the remaining fields

This library is a great starting point, but many fields are currently missing - this should serve as an umbrella ticket for the remaining work.
For the dart side there is a package which already implements the remaining fields, though it's missing a license and it is based of the names from google contacts: https://github.com/Marco87Developer/contacts/tree/main
Going forward a few questions come to mind:
a) do we want to stick with empty strings for empty values or switch to nullable fields?
b) Which names do we want to use? Google contacts, Apples CNContact?
Google has a new "people" api, so it might be a good idea to investigate the fields they support https://developers.google.com/people/api/rest/v1/people#Person
Let's use this ticket to start a discussion or get guidance from @s0nerik about the direction he would like continue in.

Sorry for a late response, but better late than never, I guess :)
Initially, this plugin was built to fetch some basic contact info for all contacts quickly. There has never been an intention to cover as much as possible info for any given contact. This is probably one of the reasons why this plugin works fast, along with the way contact info is fetched on Android.
I don't have any plans on implementing the "feature complete" contacts in this package. That being said, I'd be super happy to review a PR implementing the rest of the contact info in a way that won't negatively affect performance much, for example by disabling extra fields by default.
Regarding the

Going forward a few questions come to mind:
a) do we want to stick with empty strings for empty values or switch to nullable fields?
b) Which names do we want to use? Google contacts, Apples CNContact?

a) I'd rather keep the empty strings convention as-is just to not introduce breaking changes.
b) I don't care about the specific names as long as they are descriptive and existing names are untouched.
As to this,

For the dart side there is a package which already implements the remaining fields, though it's missing a license and it is based of the names from google contacts: https://github.com/Marco87Developer/contacts/tree/main

Google has a new "people" api, so it might be a good idea to investigate the fields they support https://developers.google.com/people/api/rest/v1/people#Person

I don't see a with problem modeling the remaining contact data after any of these.


tBTC dApp redeem transaction - testnet BTC tx is not available

Description:
Encountered this issue while trying to redeem tBTC for testnet BTC. When trying to see transaction details it's non-existent.
While transaction itself is happening.
Steps to reproduce the behavior:

Go to 'https://dapp.test.tbtc.network/redeem'
Pass steps 1-4
Click on "Follow along in block explorer"
See that there's no transaction to follow along.

Expected behavior:
Displaying transaction
Environment details:
OS: macOS Mojave 10.14.6 (18G5033)
Web Browser: Google Chrome, 83.0.4103.106 (Official Build) (64-bit)
Wallet: Metamask (Chrome extension), Version 8.0.4
Screenshots

I believe this is fixed as of #225, which was deployed recently. Going to close the issue, but let me know if that's not the case.
Also---please include the dApp URL if you do run into it again. That'll help us track it down. Thanks!


Wrong response in ListCertificates.json (Microsoft.Web)

https://github.com/Azure/azure-rest-api-specs/blob/41038700e0b39554265f2a1c1ae699eb484500a1/specification/web/resource-manager/Microsoft.Web/stable/2016-03-01/examples/ListCertificates.json#L10
According to this file, the response should start with { "value": [ ... ] } but the real response (taken from Fiddler) starts immediately with the array: [{"id":"/subscriptions/[subscriptionId]/resourceGroups/[customerName]/providers/Microsoft.Web/certificates/DE6...
This results in the Azure SDK and JSON.NET not being able to deserialize the response: https://github.com/Azure/azure-libraries-for-net/issues/51

Triaged and removing my assignment.

@SteveVaneeckhout, Thank you for raising this issue up. We were able to reproduce the issue and have brought this to the attention of the Azure App Services product group to see if this is something they can fix.
I have posted an alternative workaround to unblock the scenario at below MSDN Link.
https://social.msdn.microsoft.com/Forums/en-US/a01f6487-0164-4d52-b3cc-110055090d2b/fluent-management-api-appservicesappservicecertificateslist-always-throws-an-error?forum=windowsazurewebsitespreview
We will now proceed to close this thread. If there are further questions regarding this matter, please tag me in your reply. We will gladly continue the discussion and we will reopen the issue.


Allow users to list/unlist replays

Adds a new flag for each replay, which can be set by the user, to list or unlist replays. unlisted replays are hidden on the main page and the game leaderboards, but still shown on the user profile.
The motivation is that we will soon allow users to claim replays that were imported from royalflare. They might want to hide those replays if they have beaten their pbs. Then unlisting is nicer than deleting, since they can still access their replays, and they are still kept in our database.

we already got a "Category" field but the problem with it is that it makes "Tool-Assisted" and "Unlisted" mutually exclusive. Should we get rid of it?

we already got a "Category" field but the problem with it is that it makes "Tool-Assisted" and "Unlisted" mutually exclusive. Should we get rid of it?

I think the distinction is still good to have. I want to add a wr history page that includes unlisted but not TAS/Unusual replays.


Added wakeup to 2D and 3D body impulse and force functions.

Wake sleeping bodies on apply force and impulse functions.
Bugsquad edit: 3.x version of https://github.com/godotengine/godot/pull/52967.

As a note, I'm also removing the 3.3 cherry-pick. This change is generally safe for 3.x, but since it might introduce minor changes in behavior in specific cases, better go through a slower validation process so we can make sure there's no regression.

Ahh my bad! lots to learn.

Have amended to wakeup on exposed API functions instead.

Also I realised I didn't use the wakeup() functions on the equivalent master branch PR. instead I directly used set_active(). Should I change that to also use wakeup()?

Also I realised I didn't use the wakeup() functions on the equivalent master branch PR. instead I directly used set_active(). Should I change that to also use wakeup()?

Oh, good point, I missed that on the master version. It looks like wakeup() is safer, would be great to change it.

Thanks!


[performance] Virtualise CommandItem when trying to display large lists?

As title says.
I'm personally trying to make it working by integrating TanStack Virtual.
It's not going very well. Extremely janky, but cut initial mount time (around 600 elements, Combobox element from shadcn-svelte) from 2-3s after clicking the Popover.Trigger to perceivably instant. I haven't gotten filtering to work yet.
Has anyone gotten this issue, if so, what solutions helped?

This is going to be improved in the Svelte 5 version for sure 😃
For example, here's a list of 2,000 items running on Svelte 5 version (coming soon):
https://github.com/user-attachments/assets/db3190a8-c6e2-45d0-b060-be7123dd10ae
Something to note about this project that differs from a traditional combobox is that it's actually sorting/ranking the dom elements whereas the combobox simply filters.

@NathanAdhitya I had the same issue. For this, I created an component that wraps the virtua lib (because of shadcn-svelte folder convention, but you can call directly if you want).
src/lib/ui/virtual-list/virtual-list.component.svelte
<script lang="ts" context="module">
  import { VList } from 'virtua/svelte';
  import type { ComponentEvents, ComponentProps } from 'svelte';
</script>

<script lang="ts">
  type T = $$Generic;
  type $$Props = ComponentProps<VList<T>>;
  type $$Events = ComponentEvents<VList<T>>;
  type $$Slots = { default: { item: T; index: number } };

  export let data: $$Props['data'] = [];
</script>

{#key data.length}
  <VList {data} {...$$restProps} let:item let:index>
    <slot {item} {index} />
  </VList>
{/key}

Then, I use it together with the Command component (in my case, I needed to use a derived store for filtered items to display the correct info and debounce the search input):
<!-- ... -->

<Command.Root shouldFilter={false} class="size-auto rounded-none bg-transparent">
  <Command.Input
    placeholder="Search item..."
    value={$searchTerm}
    on:input={debounceSearch.call}
    class="h-10 py-2"
  />
  <Command.List class="h-[20svh] [&>div]:contents">
    <Command.Empty class="py-4">No results</Command.Empty>
    {#if $filtered.length}
      <Command.Group alwaysRender class="h-full p-0 [&>div]:h-full">
        <VirtualList
          data={$filtered}
          getKey={(item) => item.name}
          let:item={option}
          class="overflow-y-auto p-2"
        >
          <Command.Item value={option.name} class="shrink-0 gap-3 !bg-transparent">
            <Checkbox
              id={option.name}
              aria-labelledby={option.name}
              bind:checked={$options[option.name].checked}
              on:click={debounceFilter.call}
            />
            <Label id={option.name} for={option.name} class="w-full">
              {option.name}
            </Label>
          </Command.Item>
        </VirtualList>
      </Command.Group>
    {/if}
  </Command.List>
</Command.Root>


hirt.convolutionreverb~ instance name not recognized on patch loading in Max 9

On updating to Max 9, I'm seeing that in the Max console, the name I've given to my instance of hirt.convolutionreverb~ is not recognized when the patch is loaded.
I'm able to open the hirt.convolutionreverb~ object instance, which shows that Impulse Response Processing is offline. On adding it to a simple patcher, I'm able to hear my signal with reverb applied, though the audio is interrupted with periodic distortion.
I've updated to 2.1.1 via the Max package manager (from 2.1.0), and there's no change in behavior. Is this something you've encountered in your Max 9 testing?

While some of my patches are encountering audio interrupts and glitching in Max 9, I've ruled out the convolution reverb as a cause. The instance name is still not recognized on load, though.


Performances on Oxford and Paris

Hello,
I tried your pretrained model on cnnimageretrieval-pytorch test script, and I got
mAP : 67.90 for oxford (73.9 on your paper)
mAP : 76.64 for paris (82.5 on your paper)
Am i missing something ? (both with and without PCA gave similar performances)

All the testing configs are following those used in SARE and NetVLAD papers. Please try to find more details in their papers, e.g., the image size. Also note that the normalization parameters (mean & std) used in this repo for training the model may not the same as those used in cnnimageretrieval-pytorch. Please double-check.

@aalibey have you solved the problem? When I set the size as (640, 480), I got the same results as yours. When I keep the original size of datasets, the mAP is 71.49 for Oxford and 79.40 for paris, still lower than the value 73.9 and 82.5 in the paper.

@Guan2014 Please follow the setup in https://github.com/Relja/netvlad/blob/master/demoRetrieval.m. For example, use PIL.Image.BICUBIC for resizing.

@yxgeee Thank you! I'll have a try.

@yxgeee I didn't cropped the images with the given bounding box, but used the full image. According to https://github.com/Relja/netvlad/blob/master/demoRetrieval.m, NetVLAD doesn't resize the Oxford/Paris images if using the full image. Could you please tell me the required image size you used for oxford dataset?
In addition, the above results are obtained with feature dimension 4096, and I find a worse mAP with feature dimension 256. There are two mAPs for feature dimensions 4096 and 256 in https://github.com/Relja/netvlad/blob/master/demoRetrieval.m. Could you tell me which dimension you use?
Thanks!

Have you get the 82.5% mPA in Paris6K?


Fix ng-disabled being ignored in stopLoading

Take ng-disabled into account when re-enabling the dropdown in stopLoading - otherwise, the dropdown ends up enabled.

Would you mind compile this fix into chosen.js? Thanks

I merged the PR #117. Does it fix your issue? Thanks


Working with $request and event in UserRegistration

I create a RegisterController and it comes with default code.
protected function create(array $data)     {         return $user;     }
It is missing $request parameter and real code is define here.
Illuminate/Foundation/Auth/RegistersUsers.php -> register function and registered function.
`public function register(Request $request)
{
$this->validator($request->all())->validate();
    event(new Registered($user = $this->create($request->all())));

    $this->guard()->login($user);

    return $this->registered($request, $user)
                    ?: redirect($this->redirectPath());
}`

How can I show success/fail message after user created? in RegisterController without overwriting register function in my HomeController function?
It looks like I have to define listener for
 event(new Registered($user = $this->create($request->all())));
How to define the listener? And looks like this function
  protected function registered(Request $request, $user)     {         //     }
is a listener, should I overwrite this function in my HomeController file or should I define custom event handler which I don't know?

Hi there,
Thanks for reporting but it looks like this is a question which can be asked on a support channel. Please only use this issue tracker for reporting bugs with the library itself. If you have a question on how to use functionality provided by this repo you can try one of the following channels:

Laracasts Forums
Laravel.io Forums
StackOverflow
Discord
Larachat
IRC

However, this issue will not be locked and everyone is still free to discuss solutions to your problem!
Thanks.


compatiable with list of memberOf

In my cas server, it returns a list of memberOf, so the original could not handle this, I make some changes to make it compatiable with list of memberOf.

Thanks for your PR, it fixed my problem!
So bad the project seems stalled (maybe you should fork it?)

Defiantly Stalled. What would be nice is if I had a Docker CAS service. I tried to set it up early but it wasn't working.

Ok I mered it, switched from Travis CI to Github Actions, and pushed the new version to PyPi.