ReadPermission on a record in a table

Hi,
How to figure out ReadPermission on given record in a table?
Regards

Please read the tutorials.
https://volkanceylan.gitbooks.io/serenity-guide/content/howto/how_to_register_permissions_in_serene.html


Different Color Tags for Different Skills

Problem: To display skills tags with different colors instead of a single color.

You can make changes to the following

For applicant skills tags : applicant.jsx
For job description skills tags : job_desc.jsx

You can define a specific color for a specific set of skill such that the same skill sould appear in other cards with the same color as well.

Here's a pic for reference :)

I installed the dependencies using npm i and then started the development server, but this error is popping up, @JayeshPadhiar  can you help me regarding where I'm going wrong.


Set forward compatible hint to allow running on latest macOS

#29

Thank you, I am sure I overlooked this in the other example project too :P
I am (slowly) getting this project updated as time permits, free time has been at a premium lately...

Thanks for pulling my change in! I'm working on a hobby project that leans on this pretty heavily, so I'll submit any additional patches I find useful and add any examples that seem illuminating :)

The project will likely be migrating to .NET Core soon, which will allow a little cleaner approach to handling library loading automatically. I have not quite 100% decided fully on which direction is best, as .NET Standard may be more universal, but has some drawbacks in this particular area.
Essentially the difference in naming conventions between Windows and *nix systems causes more headache than it should, preventing the built-in library resolving from working ideally as I would like.


Adding workflow library.

To manage long running workflows within Vitess.
It contains a sample Sleep workflow.
Wiring up the UI using WebSockets.
Also adding vtctl commands.

@michael-berlin you'll notice there is no unit tests, and a few FIXMEs left in the code. Please review the overall structure, then I will add unit tests before merge. Let me know also which FIXMEs you want addressed as part of this PR.
One overall note: the support for node children is very basic, and probably doesn't work. That I want to fix in a separate PR.

Ah also I haven't rebuilt the web app. Will do it before merge. For now, I'm using the 'dist' output, not the 'app' output, and it's exposed in the vtctld_test.py test. I will need to add webdriver tests too.

@michael-berlin I addressed all comments, and added unit tests. PTAL at the second commit, I'll squash before merge.

LGTM got hangout approval from Michael.


Added Enabled View to Extension Viewlet

Addresses #22866
Added Enabled action to extensions viewlet
Added "Extensions: Show Enabled Extensions" action to workbench
Set showing enabled in extensions to default view when opening extensions viewlet

@gonzofish,
Thanks for your contribution.
To ensure that the project team has proper rights to use your work, please complete the Contribution License Agreement at https://cla.microsoft.com.
It will cover your contributions to all Microsoft-managed open source projects.
Thanks,
Microsoft Pull Request Bot

@gonzofish, thanks for signing the contribution license agreement. We will now validate the agreement and then the pull request.
Thanks, Microsoft Pull Request Bot

You know, I thought that too but followed the feature request...I'll change
it
On Fri, May 5, 2017 at 6:39 AM João Moreno<EMAIL_ADDRESS>wrote:

@joaomoreno requested changes on this pull request.
I like that the user can filter out the disabled extensions. But I don't
think that should be the default behaviour. I would keep the @installed
view as the default behaviour.
—
You are receiving this because you were mentioned.
Reply to this email directly, view it on GitHub
https://github.com/Microsoft/vscode/pull/25974#pullrequestreview-36477483,
or mute the thread
https://github.com/notifications/unsubscribe-auth/AAYjrpxshyiNdh-antPuY3t5F7n9HsyYks5r2vx5gaJpZM4NRdXb
.

I was wondering if this feature is ready to be merged.
I'm happy to give some help.
Thanks

Yeah me too. I updated it as requested but never heard anything after.

@gonzofish Sorry for not looking into this.. I will take a look.. But may I know is it possible to resolve the conflicts?

@sandy081 no worries! I hadn't noticed the conflicts. I can definitely fix them today.

Hi @gonzofish, I don't want to be "push", so I was wondering If you could give me access to this branch, so I can help fixing the conflicts, in case you're being busy.
Thanks

@sandy081 this is https://github.com/Microsoft/vscode/pull/30367 on top of @gonzofish's which only fixes the merge conflicts.

@BugraC Thanks. Will take a look.

@BugraC thanks for updating in my absence
I had some things come up and was away from Internet access for the last week, sorry for the radio silence

@gonzofish Merged the PR from @BugraC.


Missing getters in ResponseWrapper

Not sure if I'm just getting confused, but it looks like the setters on ResponseWrapper just delegate to the delegate Response object.  But most of the corresponding getters aren't overridden and so just get their values from the response field rather than the delegate field.  And as the response field is null this makes the getters such as response.status() and response.type() fall over.  So is the response field inside the wrapper instances supposed to be non-null?  And if it can be null, shouldn't the class override all the getters to use the delegate?

((ResponseWrapper) response).status().. throws a NullPointerException 💣
however
((ResponseWrapper) response).getDelegate().status() .. returns an int  😄

Should be fixed.


stat not display my stream

I push my stream in nginx
but stat not display

try to restart nginx, not reload


Fix svm examples (Bug #4096)

@dhood, thanks for the patch! I'd suggest to use a bit different solution though. The performance increase when using a single compressed support vector is so dramatic that I would always use it. What we can do is to add another field in SVMImpl, "Mat compressed_sv", which is computed and used for prediction when we train/load linear SVM. In other words, optimize_linear can be done not in-place. With your patch, however, user needs to make this principal decision, whether he/she wants a fast prediction or wants to get the real support vectors.
Also, I'm not sure if your patch handles "load svm from file" case correctly. At least, I do not see where useCompressedSV is written or read.

@vpisarev, I agree - I originally had implemented it as you propose and added a parameter to getSupportVectors so that the user could get the raw SVs or the compressed one, but when I saw your comment on https://github.com/Itseez/opencv/pull/3881 I changed approach. I will change it back to as you suggest, and will just simply not pass any option to getSupportVectors.
If your comment does not apply at this point in time, I will add an option to retrieve the compressed vector (or an additional method)

Bump

@dhood, sorry for delay. As I see, uncompressed_sv's are not stored in XML, which probably means that after save & load the function getSupportVectors(false) will not work as expected

now I apologise for the delay! went overseas, which is the only reason I was 'bump'ing earlier.
not sure if you have any suggestions around the ABI compliance error. just wait till the next release? thanks for the advice

see https://github.com/Itseez/opencv/pull/5783


Misleading doc, missing key information

It turns out that the document is missing the keyword "blobs" needed to filter the folder path, so the example and explanation are wrong as it relates to blob path. It took the EventGrid engineer (Brandon) a day to figure this out. Correct docs could have saved many people time and wasted effort, see this ICM for details: https://portal.microsofticm.com/imp/v3/incidents/details/280375286/home

Document Details
⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

ID: 1b572f63-312f-4567-5f06-d09bcccf303e
Version Independent ID: df817c5f-24e4-bdc7-511c-141d07a53d15
Content: Event filtering for Azure Event Grid - Azure Event Grid
Content Source: articles/event-grid/event-filtering.md
Service: event-grid
GitHub Login: @spelluru
Microsoft Alias: spelluru

@avneraa Thanks for catching that and apologies for the experience! We have worked up a PR to address this, which once merged should reflect in a couple of hours.
Do note that the snippets here are primarily to highlight how filtering is achieved in general and it is always best to check the event schemas for each service for reference.


multi-GPU

Hi, how to set multi-GPU to train?

https://pytorch.org/tutorials/beginner/blitz/data_parallel_tutorial.html
Try wrapping it with data parallel!


can we get IUrlHelper in Startup.ConfigureServices ?

I need to set context.DisplayMetadata.AdditionalValues with a value generated by IUrlHelper, so I think I need something like this:
public void ConfigureServices(IServiceCollection services)
{
    var urlhelper = GetUrlHeper(); // pseudo code
    var provider = new MyDisplayMetadataProvider(urlhelper); // IDisplayMetadataProvider

    services.AddMvc(o =>
    {
        o.ModelMetadataDetailsProviders.Add(provider);
    });
    ...
}

is this possible now ?

@rynowak any thoughts/tips/tricks on this?

@omuleanu LGTM. Did you file this issue because you hit a problem?

Oh, wait. Get the IUrlHelperFactory and grab the IUrlHelper per-request.

@omuleanu You need to register an IConfigureOptions<MvcOptions> to get access to services when building up options:
public class MyConfigureMvcOptions : IConfigureOptions<MvcOptions>
{
    private readonly IUrlHelperFactory _urlHelperFactory;
    public MyConfigureMvcOptions(IUrlHelperFactory urlHelperFactory)
    {
        _urlHelperFactory = urlHelperFactory;
    }

    public void Configure(MvcOptions options)
    {
        var provider = new MyDisplayMetadataProvider(_urlHelperFactory); // IDisplayMetadataProvider
        options.ModelMetadataDetailsProviders.Add(provider);
    }
}

@davidfowl how do I register MyConfigureMvcOptions ?
I presume should be something like services.AddMvc().AddOption<My ... ?

I updated my sample showing how

Thank You,
would it also be possible to get the urlHelper in the Startup.ConfigureServices
something like this;
public void ConfigureServices(IServiceCollection services)
{
    var urlhelper = GetUrlHeper(); // pseudo code
    var provider = new MyDisplayMetadataProvider();
    provider.Add("key1", url.Action(... // adds the value to a static field
    provider.Add("key2", url.Action(...
    provider.Add("key3", url.Action(...

basically this would let me calculate all the needed urls in advance at startup

The URL helper requires an HttpContext, that's not available at Startup

I'm trying to set DisplayMetadata.AdditionalValues with values returned by urlhelper, and it seems to me that this isn't possible,
I can pass the IUrlHelperFactory to the MyDisplayMetadataProvider via constructor, but in
public void CreateDisplayMetadata(DisplayMetadataProviderContext context)
{
      var url = urlHelperFactory.GetUrlHelper

I don't have the ActionContext to pass to the urlHelperFactory.GetUrlHelper

AdditionalValues is not appropriate for values which are created for a specific request. For example you could generate URLs containing localhost and use them responding to a request from another machine.
More generally ModelMetadata contains only static information about a specific Type.
Recommend creating a new service implementing an interface with methods that accept a ViewContext, ActionContext or HttpContext (whichever you need). This service could be instantiated with an IUrlHelperFactory if necessary.

in mvc5 I was using url.Action in an IMetadataAware attribute, so I was trying to do same thing here,
but I can get around the limitation by passing the parameters (controller, action), and letting the html helper in the view call url.Action


Feature Request: New FSI Command: Send Last Selection

Hi,
thanks for this great plugin, to begin with.
This feature would be very useful to me in highly interactive (tm) f# development, because:
When I'm working on some function, either I like to have some code in another window which reloads the file, opens and calls the function with some value. (Or calls a specific fuchu testcase).
With such functionality I can stay in the implementation file, and call my function with one keystroke to FSI: Send Last Selection.
Without the feature I have to

change editor window
select code
FSI: Send selection
switch Editor window back back.

Just want to ask if you would accecpt a merge request on that feature ?

Sounds good for me.


Function argument type inference in recursively modified types

Bug Report
Whenever we use a recursive generic to alter an array of functions, then use this type as a function's arguments, parameter arrow functions do not have their arguments inferred by TypeScript.
I've been trying to get this properly working to implement a pipe typings (related https://github.com/microsoft/TypeScript/issues/30370, https://github.com/microsoft/TypeScript/issues/25660). Which lead me to investigate why the arguments in the suggested solution are not inferred. I nailed this down to recursion type modification and made a minimal reproduction (see the code below).
If this is solved the mentioned above issues would also resolve (and probably more).
🔎 Search Terms
recursion, flow, pipe, chain, inference
🕗 Version & Regression Information

The issue is present since version 4.1.5 (playground) when circular references were introduced that made possible to implement recursions. And still preset until 4.8.0-beta (playground).

💻 Code
Playground link with relevant code
/** Recursively replaces all items in array T with U */
type RecursiveReplace<T, U> =
    T extends [any, ...infer Tail]
    ? [U, ...RecursiveReplace<Tail, U>]
    : T;

/** Example of recursive replacement */
type Example = RecursiveReplace<[1,2,3], 3>
//   ^? type Example = [3, 3, 3]

/** This should transform any function signatures passed to it to `(_: number) => void` */
function test<T extends any[]>(..._: RecursiveReplace<T, (_: number) => void>) {}

/** This works fine */
test(
    (_: number) => {}
)

/** TypeScript complains about the wrong signature. This is OK too */
test(
    (_: string) => {} // ERROR: Type 'number' is not assignable to type 'string'
)

/** ------------------------------------------ ↓ THE BUG ↓ ------------------------------------------- */
/** TypeScript complains about an implicit `any`. However the argument should be inferred as `number`! */
test(
    (_) => {},
//   ^? (parameter) _: any
);
/** -------------------------------------------------------------------------------------------------- */

🙁 Actual behavior
Recursive modification of type signatures breaks argument inference in functions.
🙂 Expected behavior
Function parameters should be properly inferred even after type signature was recursively modified.

If you make the example need generics in the first place, it quickly becomes apparent that you need an unbounded number of inference rounds to type these things properly -- see #30134


Package Requested

[X] I would like someone else to build the manifest.
[ ] I would like help so I can submit the manifest.
[X] I have performed a search and couldn't find this package.
[ ] I have checked that the installer for this package is not contained in a .zip file
[ ] I think there is a new version available and I have provided the URL.

Please provide the following information
Publisher: AutoIt Team
Publisher Url: https://www.autoitscript.com/site/autoit-script-editor/downloads/
Package Name:SciTE4AutoIt
Description: Special edition of SciTE customized by AutoIt community for AutoIt scripting language.
Package Version: 21.316.1639.0
Installer URL: https://www.autoitscript.com/cgi-bin/getfile.pl?../autoit3/scite/download/SciTE4AutoIt3.exe
Current Package Identifier (for new versions):

Hello!
This seems difficult due to the server configuration at autoitscript.com:
The download-url you provided replies with "403 - Forbidden" when used for creating a winget-manifest.
It points to https://www.autoitscript.com/autoit3/scite/download/SciTE4AutoIt3.exe whicht shows the same behaviour.
Both URLs work perfectly normal when used in a webbrowser, i.e. they start the download.
I was unable to find any other (direct) download-url on major download portals, they all only provide links to the publisher url you provided where the download has to be initiated manually (by clicking on the link).
tl;dr
autoitscript.com seems to accept downloads only from "real" browsers not from download-tools. I have no idea how to create a manifest for this unless either you find another (trustworthy) download-url or autoitscript.com changes the download policy or winget can mimic Firefox or Edge or ... .

Hello! This seems difficult due to the server configuration at autoitscript.com: The download-url you provided replies with "403 - Forbidden" when used for creating a winget-manifest. It points to https://www.autoitscript.com/autoit3/scite/download/SciTE4AutoIt3.exe whicht shows the same behaviour. Both URLs work perfectly normal when used in a webbrowser, i.e. they start the download. I was unable to find any other (direct) download-url on major download portals, they all only provide links to the publisher url you provided where the download has to be initiated manually (by clicking on the link). tl;dr autoitscript.com seems to accept downloads only from "real" browsers not from download-tools. I have no idea how to create a manifest for this unless either you find another (trustworthy) download-url or autoitscript.com changes the download policy or winget can mimic Firefox or Edge or ... .

Anyway, thank you very much for your efforts!
I was surprised because we could find and download AutoIt with winget, but we couldn't download its dedicated editor. Although this is not the only option for editing AutoIt script files, it seems that other editors (such as VS Code) need to rely on some of its files (AutoIt3Wrapper. au3) to work properly.
I tried to use the search engine to find other trusted download links of SciTE4AutoIt, but I got nothing useful:  ( I will mention this in the AutoIt forum, and hope we can solve this problem.

If you find a solution for the download problem I can try to assist by builing the manifest.

Hello!
Just a short answer: the link used by Trenly in PR #72385 is https://www.autoitscript.com/files/autoit3/autoit-v3-setup.exe while yours pointed to https://www.autoitscript.com/autoit3/scite/download/SciTE4AutoIt3.exe for me. You should notice the different directories.
I am quiet busy "with real life" for the rest of the week, but unless the AutoIt-Forum provides a better solution at the weekend I can try it with "Trenlys link" modified for ScITe.

Another short report: trying to modify Tenlys https://www.autoitscript.com/files/autoit3/SciTE4AutoIt3.exe , https://www.autoitscript.com/files/scite/SciTE4AutoIt3.exe or https://www.autoitscript.com/files/autoit3/scite/SciTE4AutoIt3.exe does not work. 404 - Not found.

Meanwhile I was able to solve the download problem. For some reason the URL does not work when used in wingetcreate, but can be used in YamlCreate without problems.
Unfortunately after downloading another major obstacle occurs: SciTE4AutoIt requires a working installation of AutoIt3 to be installable.Unless package dependencies are implemented by winget (see here: microsoft/winget-cli#163 ) the manifest can't be added.
I have already prepared manifest files that should meet the (future) requirements and will append them here for reference (txt needs to be changed to yaml to get them working). But unless package dependencies are implemented we should add something like "Blocking-Issue" here.
[AutoIt.SciTE4AutoIt.installer.txt](https://github.com/microsoft/winget-pkgs/files/10098235/AutoIt.SciTE4AutoIt.installer.txt)
[AutoIt.SciTE4AutoIt.locale.en-US.txt](https://github.com/microsoft/winget-pkgs/files/10098236/AutoIt.SciTE4AutoIt.locale.en-US.txt)
[AutoIt.SciTE4AutoIt.txt](https://github.com/microsoft/winget-pkgs/files/10098238/AutoIt.SciTE4AutoIt.txt)

@MSFTbot Blocking-Issue

@MSFTbot Dependencies

@stephengillie , @denelon , @mdanish-kh  : As a normal user I don't have the right to add labels to this request. If you agree with my analysis could one of you do so please?

@msftbot Dependencies

@msftbot Blocking-Issue

Meanwhile I was able to solve the download problem. For some reason the URL does not work when used in wingetcreate, but can be used in YamlCreate without problems. Unfortunately after downloading another major obstacle occurs: SciTE4AutoIt requires a working installation of AutoIt3 to be installable.Unless package dependencies are implemented by winget (see here: microsoft/winget-cli#163 ) the manifest can't be added. I have already prepared manifest files that should meet the (future) requirements and will append them here for reference (txt needs to be changed to yaml to get them working). But unless package dependencies are implemented we should add something like "Blocking-Issue" here or close the issue.
[AutoIt.SciTE4AutoIt.installer.txt](https://github.com/microsoft/winget-pkgs/files/10098235/AutoIt.SciTE4AutoIt.installer.txt)
[AutoIt.SciTE4AutoIt.locale.en-US.txt](https://github.com/microsoft/winget-pkgs/files/10098236/AutoIt.SciTE4AutoIt.locale.en-US.txt)
[AutoIt.SciTE4AutoIt.txt](https://github.com/microsoft/winget-pkgs/files/10098238/AutoIt.SciTE4AutoIt.txt)

Thank you for keeping track of this issue.
Yes, SciTE4AutoIt is an editor specially designed for AutoIt3. Under normal conditions, after installing AutoIt3, it contains a cut down version of SciTE4AutoIt. After that, for better editing experience, we will install the full version of SciTE4AutoIt. The full version of SciTE4AutoIt will be automatically installed to the installation location of AutoIt3, and the original cut down version will be overwritten. Perhaps during the installation of SciTE4AutoIt, it will read the registry to the installation location of AutoIt3. If this location does not exist, the installation of SciTE4AutoIt will be interrupted.
 The developers of SciTE4AutoIt have personally tried to add SciTE4AutoIt to Winget, reproducing the "403" problem you encountered. He has informed the website administrator of AutoIt3 about this situation, and soon the administrator will deal with the problem that SciTE4AutoIt.exe is difficult to download.

Hello @jiaojiaodubai !
This is good news indeed. As I have also filed an issue-report for winget-create here https://github.com/microsoft/winget-create/issues/326 because the download-url is working in YamlCreate.ps1 and browsers but not in winget-create it would be good if the AutoIt admins (or you) could give a short report (under the above issue-repot) what caused the problem when they have fixed it.
Background: if they fix it without reporting, the devs of winget-create won't be able to reproduce the bug and will close the issue without being able to fix it.


Defender MacOS proxy configuration not included

Defender on MacOS can be configured to use a proxy using the same command mdatp config proxy as on Linux. However this is not documented anywhere. Similarly, when applying the proxy by including it into a plist file as below, the proxy configuration is applied successfully. Can this be reflected in the documentation here?
mdatp config proxy set --value http://address:port works as intended
adding the following in the configuration profile as part of the cloudservice dict as shown here:
works as well

<key>cloudService</key>
<dict>
    <key>enabled</key>
    <true/>
    <key>proxy</key>
    <string>http://address:port</string>
</dict>

deploying it via Intune applies the configuration successfully.

Document Details
⚠ Do not edit this section. It is required for learn.microsoft.com ➟ GitHub issue linking.

ID: 2dc758cd-0668-546f-5132-c3b5d2bf2b8e
Version Independent ID: afa7ca04-3825-e73a-bd6e-4cf55010bd60
Content: Set preferences for Microsoft Defender for Endpoint on Mac
Content Source: microsoft-365/security/defender-endpoint/mac-preferences.md
Service: microsoft-365-security
Sub-service: mde
GitHub Login: @Dansimp
Microsoft Alias: dansimp

@Dansimp Please help us in resolving this issue. Thanks


Form not moving to next step.

I am using django 3.1.4 with crispy forms 1.12 and formtools 2.3 and the initial page loads but the next button doesn't do anything. However,the next button does validate the page when crispy forms are replaced with {{ form.as_p }}. It seems the library is incompatible with crispy forms.
forms:
class IncomeTaxServiceForm1(forms.ModelForm):
    class Meta:
        model = IncomeTaxService
        labels ={
            'director_assessee':"Name of Assessee (Director)",
            "father_name":"Father's Name",

        }
        fields =("director_assessee","father_name","company_name","pan_number","gender","marital_status",
                 "date_of_birth_for_director","adhar_number","mobile_number","email",
                 "director_identification_number","bank_name",
                 "bank_account_number",
                 "ifsc_code","account_type","address","city","state","pincode")

    def __init__(self, *args, **kwargs):
        super(IncomeTaxServiceForm1, self).__init__(*args, **kwargs)
        self.helper = FormHelper()
        self.helper.form_id = 'income_tax_form'
        self.helper.form_class = 'input1'
        self.helper.form_method = 'post'

class IncomeTaxServiceForm2(forms.ModelForm):
    class Meta:
        model = IncomeTaxService
        labels = {
            ' director_in_any_company': "Are You a Director in Any Company? (Listed and/or Unlisted)",
            'partner_in_any_partnership_firm': "Are You a Partner in Any Partnership Firm?",
            'equity_shares_of_unlisted_company': "Any Equity Shares of Unlisted Company Held as on 1st April, 2019?",
            'equity_shares_of_unlisted_company_purchased': "Any Equity Shares of Unlisted Company Purchased During 1st April, 2019 to 31st March, 2020?",
            'equity_shares_of_unlisted_company_sold': "Any Equity Shares of Unlisted Company Sold During 1st April, 2019 to 31st March, 2020?"

        }
        fields =("director_in_any_company",
                "partner_in_any_partnership_firm",
                "equity_shares_of_unlisted_company",
                "equity_shares_of_unlisted_company_purchased",
                "equity_shares_of_unlisted_company_sold")

    def __init__(self, *args, **kwargs):
        super(IncomeTaxServiceForm2, self).__init__(*args, **kwargs)
        self.helper = FormHelper()
        self.helper.form_id = 'income_tax_form2'
        self.helper.form_class = 'input1'
        self.helper.form_method = 'post'
        self.helper.form_action = 'submit_form'

html:

Step {{ wizard.steps.step1 }} of {{ wizard.steps.count }}

        <form  method="post">

            {{ wizard.management_form }}

            {{ form.non_field_errors }}

            {{ form.field_errors }}

                  {% load crispy_forms_tags %}

                  {% crispy wizard.form %}

                  {% if wizard.steps.prev %}
                  <button name="wizard_goto_step" type="submit" style="background-color:#ef3d5b" value="{{ wizard.steps.first }}">"first step"</button>
                  <button name="wizard_goto_step" type="submit" style="background-color:#ef3d5b" value="{{ wizard.steps.prev }}">Previous </button>
                  {% endif %}

             <input type="submit" value="Next" style="background-color:#ef3d5b" />

                     </form>

views.py
class IncomeTaxWizard(SessionWizardView):
    template_name = "service_forms/income_tax.html"
    def done(self, form_list, **kwargs):
        pass

urls.py
 path('income_tax_form',IncomeTaxWizard.as_view([IncomeTaxServiceForm1, IncomeTaxServiceForm2]), name="income_tax_form"),`

@BismeetSingh I confirm, I'm observing similar behaviour with django-crispy-forms = "1.14.0" and django-formtools = "2.3". Have you managed to solve the issue?

any updates here? I have the same issue

I solved this using formnovalidate on these buttons to explicitly tell the browser to skip validation:
{% if wizard.steps.prev %}
    <button type="submit" name="wizard_goto_step" value="{{ wizard.steps.first }}" formnovalidate>
    {% translate "first step" %}
    </button>
    <button type="submit" name="wizard_goto_step" value="{{ wizard.steps.prev }}" formnovalidate>
    {% translate "prev step" %}
    </button>
{% endif %}


feat: mark multiple items for deletion

Pull Request Test Coverage Report for Build<PHONE_NUMBER>

151 of 158 (95.57%)  changed or added relevant lines in 6 files are covered.
No unchanged relevant lines lost coverage.
Overall coverage increased (+0.5%) to 95.687%

Changes Missing Coverage
Covered Lines
Changed/Added Lines
%

tui/marked.go
100
107
93.46%

Totals

Change from base Build<PHONE_NUMBER>:
0.5%

Covered Lines:
2618

Relevant Lines:
2736

💛  - Coveralls

Pull Request Test Coverage Report for Build<PHONE_NUMBER>
Warning: This coverage report may be inaccurate.
This pull request's base commit is no longer the HEAD commit of its target branch. This means it includes changes from outside the original pull request, including, potentially, unrelated coverage changes.

For more information on this, see Tracking coverage changes with pull request builds.
To avoid this issue with future PRs, see these Recommended CI Configurations.
For a quick fix, rebase this PR at GitHub. Your next report should be accurate.

Details

162 of 170 (95.29%)  changed or added relevant lines in 7 files are covered.
1 unchanged line in 1 file lost coverage.
Overall coverage increased (+1.4%) to 96.518%

Changes Missing Coverage
Covered Lines
Changed/Added Lines
%

cmd/gdu/app/app.go
1
2
50.0%

tui/marked.go
101
108
93.52%

Files with Coverage Reduction
New Missed Lines
%

cmd/gdu/app/app.go
1
95.6%

Totals

Change from base Build<PHONE_NUMBER>:
1.4%

Covered Lines:
2439

Relevant Lines:
2527

💛  - Coveralls


[incubator/zookeeper]: fix a typo

When i debug run script:
+ echo zookeeper.log.threshold=INFO
run: line 70: $LOGGER_PROPERS_FILE: ambiguous redirect

Then i find LOG4J_PROPERTIES val is not defined:
incubator/zookeeper$ git grep LOGGER_PROPERS_FILE
templates/config-script.yaml:91:      echo "zookeeper.log.threshold=$ZK_LOG_LEVEL" >> $LOGGER_PROPERS_FILE

Signed-off-by: Xiang Dai<EMAIL_ADDRESS>

@tadas-subonis  @kow3ns mind have a look?

@tadas-subonis @kow3ns mind have a look?

@tadas-subonis @kow3ns mind have a look?

Hi, @lachie83 @kow3ns mind have a look?

/assign @lachie83

/ok-to-test

@lachie83 hi, test pass!

@kow3ns
Please take a look. Thanks.

@daixiang0
Another conflicting file need to resolve:
incubator/zookeeper/Chart.yaml

@zanhsieh  done.

/retest

@zanhsieh @lachie83 test pass.

@daixiang0
Hey, 'File changed 0' ? Does the master branch catch up what your change before?


Improve checkout performance; include product collections when calculating variant price

removed database queries responsible for getting channel listing for each product variant when checkout lines are serialized
included product collections when calculating base price for each checkout line

Impact

[ ] New migrations
[ ] New/Updated API fields or mutations
[ ] Deprecated API fields or mutations
[ ] Removed API types, fields, or mutations
[ ] Documentation needs to be updated

Pull Request Checklist

[ ] Privileged queries and mutations are guarded by proper permission checks
[ ] Database queries are optimized and the number of queries is constant
[ ] Database migration files are up to date
[ ] The changes are tested
[ ] GraphQL schema and type definitions are up to date
[ ] Changes are mentioned in the changelog

Please update the changelog.

Please update the changelog.

Task linked: SALEOR-1979 Optimize serialize_checkout_lines

Task linked: SALEOR-1979 Optimize serialize_checkout_lines


Add method fot /units/ api endpoint

Adding method for consuming https://github.com/coreos/fleet/blob/master/Documentation/api-v1.md#get-a-unit API endpoint

@obukhov thanks LGTM 👍


Setup Page Becomes Interactive and Causes Errors When Navigating to non root URLs

During the setup process, if a user navigates away from the setup page to a different URL, such as "http://localhost:5000/asd," the setup page will remain displayed but will no longer be in "noninteractive" mode. Consequently, submitting the form in this state will result in an error. To rectify this issue, the user must manually return to "http://localhost:5000/" (simply clicking the back button may not suffice; try typing in the URL or refreshing the page after clicking the back button).

duplicated #1391


Skip creation of offline Debug package even on real devices

Motivation
Anything running in Debug should use the packager anyway; no need to bundle. This saves a huge amount of time during development when testing things like push notifications that require a real device.
The code being modified was originally put here in https://github.com/facebook/react-native/commit/9ae3714f4bebdd2bcab4d7fdbf23acebdc5ed2ba to speed up builds on the simulator, but the change can be applied to real devices, too. Really there should be very little difference in how they're treated.
Test Plan
Run a build in Xcode targeting a physical device before and after this commit.

Everyone has different workflows for this. Can you instead make this script look for an environment variable that can be set by your xcodeproj, e.g. SKIP_BUNDLING?

Thanks for the feedback @javache, I've rebased and added the flag you mentioned. I like this even better now.

Cool! Let's keep the old behaviour too when you don't specify either of these options.

@javache is there a particular reason you want to keep the old behavior? I'm happy to do so, but to me it seems buggy that it would need to bundle every time just for the device. By default (e.g. after using CRNA) there doesn't seem to be any reason why a physical device would need special treatment.
The original commit that caused the code to be like this doesn't seem to care whether it's a simulator or physical device; what's relevant is Debug mode. Curious to hear your thoughts. Thanks!

Because we shouldn't assume that people will see this commit and enable FORCE_BUNDLING. The current version is a good set of defaults: e.g. you want to install a quick debug build on your phone so you can play it when disconnected from your computer, so let's keep them.

@javache updated. That reasoning makes sense.

@cooperka Have you tested the SKIP_BUNDLING flag after a clean of your build folder? I don't think it will work unless you have hard-coded the IP of your development workstation somewhere else.
If running on a physical device, the bundling step is providing an ip.txt file in the bundle which is required in order to figure out what IP address to use to connect to the packager.
If that file isn't found, then it erroneously attempts to connect to localhost, which in this case would be the iOS device.
I think this means that even if you are loading the bundle from the packager, you still need a bundle to be included in your ipa so that it can find the packager's IP address.
I was able to get around this by still running the section of code in react-native-xcode.sh to create the ip.txt even if SKIP_BUNDLING was true. I wanted to run this concept by you before I make a pull request.

@emusgrave thanks for the detailed context. I didn't dig that deep because it seemed to work for me, but if that file is removed during cleaning, I can see how that would cause problems. Feel free to submit a PR 💯

why is this not included by default in the HelloWorld template of the .pbxproj file?
if [ "${CONFIGURATION}" == "Debug" ]; then
  export SKIP_BUNDLING=true
 fi

I mean, why would a new project create the bundle when in dev mode?


[nodejs] Add test cases for RecorderDevice

Impacted tests: new 3, update 0, delete 0
Unit test platform: Ubuntu 16.04
Unit test result summary: pass 3, fail 0, block 0

@tingshao @halton PTAL


Create Release from manifests. Without Chart.

I have been using Helm for some time. It's great. But having many different environments with different configurations can turn into Values nightmare. In fact we end up working much more on Values files than on Helm templates.
I gave Kustomize a try and it fits really well the "multiple environments" use-case.
However, I appreciate the Helm Release : track of history, able to rollback to a specific version, etc...
Something like this would be great :
kubectl kustomize ./dev/. > manifests.yaml
helm upgrade --install <MY_RELEASE> manifests.yaml

When creating a Release, Helm:

generates the manifests by filling placeholders in Chart Templates with Values,
apply generated manifests to Kubernetes
keeps track of the Release (so you can list Releases and versions of Release, perform Rollback, etc...)

I would only need the feature in steps 2 & 3 : being able to create a Release only from raw manifests (a directory of manifests of one file). Without using the Helm Chart/Values rendering phase.
I don't know if its possible yet (Helm command to create Releases are expecting a Chart argument, but maybe i'm missing something).

I have found this exemple : Kustomize is used in a script as the argument of the --post-renderer parameter...
ex : helm upgrade --install --dry-run rabbitmq-per ../../helm-chart-rabbitmq/. --post-renderer ./post-render-kustomize.sh
I just created a Helm Chart were I copied the 'base' manifests of Kustomize in the Helm Chart Templates directory. As it.
Well, it works. But at the end, it's neither a Helm, neither a Kustomize workflow...
For exemple, Kustomize file inside the 'performance' environment overlay would need the 2 last labels :
resources:
  - all.yaml
nameSuffix: -per
namespace: sit-per
commonLabels:
  app: myapp
  name: rabbitmq-per
  tags.datadoghq.com/env: per
  tags.datadoghq.com/service: myapp
  tags.datadoghq.com/version: '1'
  app.kubernetes.io/managed-by: Helm
  meta.helm.sh/release-name: rabbitmq-per

Helm would throw an error if those Labels are not set.
Indeed, Labels app.kubernetes.io/managed-by &  meta.helm.sh/release-name: rabbitmq-per are meant to be automatically added by Helm. But as I overwrite it with Kustomize within the post-render step, those labels would be deleted. So you have to hardcode them ( the first Label is not much of a problem but the second is)....
You also have to point to a all.yaml manifest instead of existing directory of base manifests...
Well, at the end, with this, I don't feel like taking the best of both worlds.
It would definitely be more elegant to just provide raw manifests directly to Helm.

Something like this maybe?
helm template --output-dir $KUSTOMIZE_DIR myrelease mychart
kustomize build $KUSTOMIZE_DIR -o $HELM_INSTALL_DIR/templates
helm install myrelease $HELM_INSTALL_DIR

Where the chart in $HELM_INSTALL_DIR has an empty template directory.

In fact we end up working much more on Values files than on Helm templates.

I've been using https://github.com/helmfile/helmfile/ to manage values for multiple envs.


PP-2688 Add merchant details

WHAT

Add merchant details above privacy info in footer area.
Extract privacy info into a separated template.
Add merchant details to Service object class when available.

Love that you're testing things to the level of class methods. Many of these -> 👍 👍 👍 👍 👍


Striking through of boxes on winning

the xxx boxes should be highlighted differently so as to show the winning combination

Can I work on this ?? @krishnaagrawal74 @iamparas0

the xxx boxes should be highlighted differently so as to show the winning combination

go for it , please put short video before pr.

@iamparas0 what should be the content of the short video?

@iamparas0 what should be the content of the short video?

of your work by the way what a about updates


Remove checking of 'version.txt'

The version checking in version.txt (on multibit.org) is redundant now as it has been replaced by install4j functionality. Remove.
Note that we will have to keep the version.txt file on the server updated to cater for older versions of MultiBit Classic.

Removed AlertManager / checking of version.txt from multibit.org server.
Awaiting review and closing.

Code review looks fine.
Closing.


Add struct ctl_info

Add the struct mentioned in #3045
Not sure if I should add CTLIOCGINFO  because it is wrapped in a macro:
#define CTLIOCGINFO     _IOWR('N', 3, struct ctl_info)  /* get id from name */

The C definition of ctl_info is:
/*!
 *       @defined MAX_KCTL_NAME
 *   @discussion Kernel control names must be no longer than
 *       MAX_KCTL_NAME.
 */
#define MAX_KCTL_NAME   96

/*
 * Controls destined to the Controller Manager.
 */

/*!
 *       @struct ctl_info
 *       @discussion This structure is used with the CTLIOCGINFO ioctl to
 *               translate from a kernel control name to a control id.
 *       @field ctl_id The kernel control id, filled out upon return.
 *       @field ctl_name The kernel control name to find.
 */
struct ctl_info {
	u_int32_t   ctl_id;                             /* Kernel Controller ID  */
	char        ctl_name[MAX_KCTL_NAME];            /* Kernel Controller Name (a C string) */
};

Thanks! @bors r+

:pushpin: Commit 0da767e0b0cf8405c101cbe328921c48267c63d7 has been approved by JohnTitor
It is now in the queue for this repository.

:hourglass: Testing commit 0da767e0b0cf8405c101cbe328921c48267c63d7 with merge 664ba6dc2fd04302e1d059a0ae0229b57aa4c69c...

:broken_heart: Test failed - checks-actions

Could you squash commits into one to clean up the history?

Could you squash commits into one to clean up the history?

Sure, if you have trouble squash merging on your side.

This repo uses bors and the bot only can merge PRs via merge commits. So you have to do that before merging.

Squashed.

👍, @bors r+

:pushpin: Commit 9013963b74a281c915042651b508c11c21656925 has been approved by JohnTitor
It is now in the queue for this repository.

:hourglass: Testing commit 9013963b74a281c915042651b508c11c21656925 with merge 6cf30807379d40db86ae158825a6b3d52a765790...

:broken_heart: Test failed - checks-actions

Hmm, what is wrong again?

Ah, that's because we tried to impl Copy/Clone for non-existing item on the s! macro. Sadly, we cannot apply the attribute for impl, so we have to use cfg_if to completely hide the struct on 1.13.

Thanks. Good to know. Now I've got it updated.

Ah damn, cannot pass style check then. Let try another fix.

Looks like cfg_if! is the only option here. Is there anyway to get around by the style check? Or is there any way I can define the struct out of s!?

One way to pass the style check would be to cut it out into a separate file, like https://github.com/rust-lang/libc/blob/master/src/unix/align.rs. Could you try it?

I'm confused by the new style error. Any idea? @JohnTitor

Ugh, it says mod should be placed at the end of the file.

@bors r+

:pushpin: Commit dfa2165544bb604670955ef4e0a8f18acfc8d6d0 has been approved by JohnTitor
It is now in the queue for this repository.

:hourglass: Testing commit dfa2165544bb604670955ef4e0a8f18acfc8d6d0 with merge 91184726e50293914f6eba816b840590a9f2e39d...

Still not working?

+ cargo +1.13.0 build -vv --no-default-features --target aarch64-apple-ios
warning: unused manifest key: package.categories
warning: unused manifest key: package.categories
warning: unused manifest key: package.categories
    Updating registry `[https://github.com/rust-lang/crates.io-index`](https://github.com/rust-lang/crates.io-index%60)
error: failed to parse registry's information for: serde

Caused by:
  Feature `playground` depends on `serde_derive` which is not an optional dependency.
Consider adding `optional = true` to the dependency

I believe it's unrelated to this PR, let me investigate after my day job.

https://github.com/rust-lang/crates.io/pull/5929 should fix the issue, let's try out, @bors retry

:hourglass: Testing commit dfa2165544bb604670955ef4e0a8f18acfc8d6d0 with merge a552a85d79e408aa392ab47440ba4f1d0f6f7968...

:broken_heart: Test failed - checks-actions

I rebased the commit to the tip.

The failure is valid:
error[E0277]: the trait bound `[i8; 96]: core::fmt::Debug` is not satisfied
   --> src/unix/bsd/apple/long_array.rs:4:9
    |
4   |           pub ctl_name: [::c_char; MAX_KCTL_NAME],
    |           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ `[i8; 96]` cannot be formatted using `:?`; if it is defined in your crate, add `#[derive(Debug)]` or manually implement it
    |
   ::: src/lib.rs
    |
93  | / cfg_if! {
94  | |     if #[cfg(windows)] {
95  | |         mod fixed_width_ints;
96  | |         pub use fixed_width_ints::*;
...   |
156 | |     }
157 | | }
    | |_- in this macro invocation
    |
    = help: the trait `core::fmt::Debug` is not implemented for `[i8; 96]`
    = note: required because of the requirements on the impl of `core::fmt::Debug` for `&[i8; 96]`
    = note: required for the cast to the object type `core::fmt::Debug`

error[E0277]: the trait bound `[i8; 96]: core::cmp::Eq` is not satisfied
   --> src/unix/bsd/apple/long_array.rs:4:9
    |
4   |           pub ctl_name: [::c_char; MAX_KCTL_NAME],
    |           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ the trait `core::cmp::Eq` is not implemented for `[i8; 96]`
    |
   ::: src/lib.rs
    |
93  | / cfg_if! {
94  | |     if #[cfg(windows)] {
95  | |         mod fixed_width_ints;
96  | |         pub use fixed_width_ints::*;
...   |
156 | |     }
157 | | }
    | |_- in this macro invocation
    |
    = help: the following implementations were found:
              <[T; 19] as core::cmp::Eq>
              <[T; 22] as core::cmp::Eq>
              <[T; 10] as core::cmp::Eq>
              <[T; 32] as core::cmp::Eq>
            and 30 others
    = note: required by `core::cmp::AssertParamIsEq`

error[E0277]: the trait bound `[i8; 96]: core::hash::Hash` is not satisfied
   --> src/unix/bsd/apple/long_array.rs:4:9
    |
4   |           pub ctl_name: [::c_char; MAX_KCTL_NAME],
    |           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ the trait `core::hash::Hash` is not implemented for `[i8; 96]`
    |
   ::: src/lib.rs
    |
93  | / cfg_if! {
94  | |     if #[cfg(windows)] {
95  | |         mod fixed_width_ints;
96  | |         pub use fixed_width_ints::*;
...   |
156 | |     }
157 | | }
    | |_- in this macro invocation
    |
    = help: the following implementations were found:
              <[T; 20] as core::hash::Hash>
              <[T] as core::hash::Hash>
              <[T; 23] as core::hash::Hash>
              <[T; 12] as core::hash::Hash>
            and 30 others
    = note: required by `core::hash::Hash::hash`

error[E0369]: binary operation `==` cannot be applied to type `[i8; 96]`
   --> src/unix/bsd/apple/long_array.rs:4:9
    |
4   |           pub ctl_name: [::c_char; MAX_KCTL_NAME],
    |           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
    |
   ::: src/lib.rs
    |
93  | / cfg_if! {
94  | |     if #[cfg(windows)] {
95  | |         mod fixed_width_ints;
96  | |         pub use fixed_width_ints::*;
...   |
156 | |     }
157 | | }
    | |_- in this macro invocation
    |
    = note: an implementation of `std::cmp::PartialEq` might be missing for `[i8; 96]`

error[E0369]: binary operation `!=` cannot be applied to type `[i8; 96]`
   --> src/unix/bsd/apple/long_array.rs:4:9
    |
4   |           pub ctl_name: [::c_char; MAX_KCTL_NAME],
    |           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
    |
   ::: src/lib.rs
    |
93  | / cfg_if! {
94  | |     if #[cfg(windows)] {
95  | |         mod fixed_width_ints;
96  | |         pub use fixed_width_ints::*;
...   |
156 | |     }
157 | | }
    | |_- in this macro invocation
    |
    = note: an implementation of `std::cmp::PartialEq` might be missing for `[i8; 96]`

1.19 cannot impl it and we have to use s_no_extra_traits! and manually impl them, I think.

How about support >= 1.20 only? Updated.

It will require 1.47, but it sounds good to me as I think it's old enough 👍

Sorry, I just saw this. Now I change the version to >= 1.47. Please review.

No worries, thanks! @bors r+

:pushpin: Commit 950827b936c38b1c1a722b6ddc4c9add4407b017 has been approved by JohnTitor
It is now in the queue for this repository.

:hourglass: Testing commit 950827b936c38b1c1a722b6ddc4c9add4407b017 with merge f1bb40aac53a91826a3f86598702a43b7826bde3...

:sunny: Test successful - checks-actions, checks-cirrus-freebsd-12, checks-cirrus-freebsd-13, checks-cirrus-freebsd-14
Approved by: JohnTitor
Pushing f1bb40aac53a91826a3f86598702a43b7826bde3 to master...


Android build with fastlane calls InvalidUserDataException

I run android build with command in root project dir
rvm_sh 'bundle exec fastlane android build_play_store --verbose'
And I have error

Project directory '/private/tmp/jenkins/workspace/Android-Build-GPlay_master/Build/Android/Test Box/fastlane' is not part of the build defined by settings file '/private/tmp/jenkins/workspace/Android-Build-GPlay_master/Build/Android/Test Box/settings.gradle'. If this is an unrelated build, it must have its own settings file

.
In dir Test Box/fastlane/ I have only this files:

Appfile
Fastfile
Gymfile
Matchfile
README.md
report.xml

My settings.gradle contains only this lines

include 'answers'
include 'beta'
include 'crashlytics'
include 'crashlytics-wrapper'
include 'fabric'
include 'fabric-init'

Do you have any idea how resolve this error?

Can you please post the complete command, output and environment you are running/getting? Currently your issue does not have enough information to properly understand and/or debug this.


[Steem-Challenger] - Not showing correct usernames

Expected behavior

When you introduce your username to calculate the total pending payouts, results should show your username to make sure it is you.
Actual behavior

When I introduce my username, jaysermendez, the user "netuoso" appears in the results.
How to reproduce

To reproduce this issue you can do the following steps:

Go to http://omeratagun.tk
In the field with placeholder "Your username", introduce your username
Press enter or the button "Give it to me"
Check the username on the results table

Environment Information

Browser: Google Chrome Version 64.0.3282.140 (Official Build) (64-bit)
Operating system: macOS High Sierra

Recording Of The Bug

Here is a simple GIF reproducing this issue:

Posted on Utopian.io -  Rewarding Open Source Contributors

Hey, jayserdn.
Thank you for to letting me know. Issue happens because of steemit API. If you type my name over there, result will be certain.
Next days, i will be working on to improve design and backend codes.


xworkspaces occupied label

Describe the issue
A clear and concise description of what the bug is.
When launching a application in a wokspace then quit it. The label occupied background color, foreground color, and icon remain there. Event the wokspace is empty. It still show as occupied.
If I moved to a different workspace and open an application there. The label in the already marked occupied goes back to empty. (lets note that this workspace was empty)
Expected behavior:
Workspace should change to any configuration for an empty workspace
A clear and concise description of what you expected to happen.
I have a different icon for empty, occupied, and active. So I will expect it to change.
Actual behavior:
What actually happens
Was it working before?

Did you also experience this bug in an earlier version of polybar?
I cant test this because this was a commit that was recently added to the repo
If no, what was the last version where this worked correctly?

To Reproduce
A minimal but complete config with which the problem occurs:

List any other steps needed to reproduce the issue besides starting polybar with the config you posted above.
Polybar Log
Post everything polybar outputs to the terminal when you run it and the issue occurs below
* Parsing config file: spectrwm.bar
* Enabling xresource manager
* Loaded monitor eDP1 (3840x2160+0+0)
* Found matching X resource "background" (value=#2d2d2d)
* Found matching X resource "foreground" (value=#d3d0c8)
* Bar geometry: 1152x60+38+11; Borders: 0,0,0,0
* Found matching X resource "color6" (value=#66cccc)
* Found matching X resource "background" (value=#2d2d2d)
* Found matching X resource "foreground" (value=#d3d0c8)
* Found matching X resource "background" (value=#2d2d2d)
* Found matching X resource "color14" (value=#d27b53)
* Starting application
* Starting module/spectrwm
* Entering event loop (thread-id=1)
* Eventqueue worker (thread-id=3)
* Configured DPI = 220x220
* Loaded font "Iosevka:size=10" (name=Iosevka, offset=3, file=/home/archietux/.local/share/fonts/Iosevka Nerd Font Complete.ttf)
* Loaded font "Iosevka:size=13" (name=Iosevka, offset=3, file=/home/archietux/.local/share/fonts/Iosevka Nerd Font Complete.ttf)
* Loaded font "siji:pixelsize=10" (name=siji, offset=3, file=/usr/share/fonts/TTF/siji.ttf)
* Bar window: 0x1a00002
* Disabling tray manager (reason: missing `tray-position`)
* module/spectrwm: Rebuilding cache
* Redrawing bar window

Screenshots
If applicable, add screenshots to help explain your problem.
Environment:

WM: spectrwm
Distro: Archlinux
Output of polybar -vvv:
polybar 3.4.0-24-g2b31a3f1

Features: +alsa +curl -i3 -mpd +network(libnl) +pulseaudio +xkeyboard
X extensions: +randr (+monitors) +composite +xkb +xrm +xcursor
Build type: Release
Compiler: /usr/bin/c++
Compiler flags: -march=x86-64 -mtune=generic -O2 -pipe -fno-plt -Wall -Wextra -Wpedantic -O3 -DNDEBUG
Linker flags: -Wl,-O1,--sort-common,--as-needed,-z,relro,-z,now
Additional context
Add any other context that you think is necessary about the problem here.

I'm unable to reproduce this. What version of spectrwm are you using? Could you please also post your xworkspaces config.
Just to make sure I have understood right, what happens is:

You open an application in the current workspace (this itself doesn't change the label since the label is still label-active)
You close this application and now the workspace is empty (the label is still label-active)
You switch to another workspace (the label on the old workspace becomes label-occupied)
You open an application in the new workspace (the label in the old workspace goes to label-empty).

Is this correct?

Closing due to inactivity

Hi. I would like to reopen this issue. I am currently using Spectrwm and Polybar with the xworkspaces module in Arch. I saw that this problem was already reported and an issue was made so I didn't believe creating another one was necessary.
This is what happens

Before going to workspace 1, the label is label-empty
I switch to workspace 1. Label now becomes label-active
I open an application on workspace 1.
I close the application on workspace 1. Now the workspace is empty. Label is still label-active because I am on workspace 1.
I switch to another workspace. Workspace 1 label should now be label-empty, however, it shows as label-occupied.

Here is the module
[module/tags]
type = internal/xworkspaces

enable-click = true
enable-scroll = false

format = <label-state>

icon-0 = 1;
icon-1 = 2;
icon-2 = 3;
icon-3 = 4;ﭮ
icon-4 = 5;
icon-5 = 6;

label-monitor = %name%

label-active = %icon%
label-active-background = ${colors.background-tint-1}
label-active-foreground = ${colors.pink}
label-active-padding = 2

label-occupied = %icon%
label-occupied-foreground = ${colors.pink}
label-occupied-padding = 2

label-urgent = %icon%
label-urgent-foreground = ${colors.red}
label-urgent-padding = 2

label-empty = %icon%
label-empty-foreground = ${colors.foreground}
label-empty-padding = 2

And the bar
[bar/bar]
width = 100%
height = 32

override-redirect = true

background = ${colors.background}
foreground = ${colors.foreground}

font-0 = "Roboto Mono:style=Medium:pixelsize=12;2:antialias=true:autohint=true"
font-1 = "RobotoMono Nerd Font:style=Regular:pixelsize=13;2"

tray-position = right

modules-left = tags title
modules-right = updates cpu filesystem memory volume date

Environment
❯ polybar -vv
polybar 3.4.0-116-gbb15e33

Features: +alsa +curl -i3 +mpd +network(libnl) +pulseaudio +xkeyboard

X extensions: +randr (+monitors) +composite +xkb +xrm +xcursor

Build type: Release
Compiler: /usr/bin/g++
Compiler flags:  -Wall -Wextra -Wpedantic -O3 -DNDEBUG
Linker flags:

❯ spectrwm -v
spectrwm 3.4.1 Build: 3.4.1

If anything else is necessary to debug this, I will provide it.


multiline regex rules with inconsistent behaviour across engines

First report: https://github.com/coreruleset/coreruleset/issues/3266 (reporter: @leveryd)
Describe the bug
Rules with the rx operator matching the "start of line" metacharacter (^) behave differently based on the WAF engine. It depends if the multiline modifier is enabled by default for each regex or not.
It leads to:

Possible false positives
Extra computational time for computing checks not intended by the rule(s) design.

Default Modifiers
Not an expert on all the codebases, but to the best of what I understood:
ModSec2 (v2.9.7) (for Apache)

Comes with PCRE2_DOTALL | PCRE2_DOLLAR_ENDONLY (see here).
Under standalone/regex.c there also is some code that includes PCRE_MULTILINE if cflags comes with AP_REG_NEWLINE. I guess it is at compilation time. But on this file, there is not even mention of PCRE2, which should have been added to 2.9.* 🧐

Libmodsecurity (v.3.0.9) (E.g. Nginx)

Comes with PCRE2_DOTALL|PCRE2_MULTILINE (see here).

Coraza (v3.0.3):

Comes with "(?sm)%s", options.Arguments. Since #732, rx operator has been aligned to Libmodsecurity with both dotall and multiline.
Notably without that PR 942522-7 test New line bypass was failing. That being said, it could be just a matter of DOTALL and not MULTILINE.

Steps to reproduce
Example rule attempting to catch the closing curly bracket at the beginning of the line: SecRule RESPONSE_BODY "@rx ^}" "id:911,phase:4, deny, status:403, capture,log, t:none, msg:'multiline active'"
Request: curl 'localhost:80/anything'
Expected server response:
{
  "args": {},
  "data": "",
  "files": {},
  "form": {},
  "headers": {
    "Accept": "*/*",
    "Connection": "close",
    "Host": "localhost",
    "User-Agent": "curl/7.87.0"
  },
  "json": null,
  "method": "GET",
  "origin": "<IP_ADDRESS>",
  "url": "http://localhost/anything"
}

Results:

ModSec 2.9 on Apache: does not trigger this rule
libModSec 3 on Nginx: triggers the rule, and writes the log, but can not enforce the deny (headers already sent; known and accepted limitation of the platform)
Caddy-Coraza: triggers the rule and denies the request

Possible solutions
The goal is to achieve consistency across WAF Engines that supports CRS bringing their behavior in line with the reference platform (Apache) (see August 2023 Monthly Chat Decisions).
Possible solutions are:

Work with engine devs to align the default modifiers.
Make regexes not dependent on the multiline modifier:

Exploring solutions provided at https://github.com/SpiderLabs/ModSecurity/issues/2921
Using (?-m) (@azurit's proposal).

Very good writeup, thanks (I edited it slightly for even better comprehension).
Question: I see the different behaviors of the engines. What are the reasons the ModSec 2.9 behavior is the preferred behavior (outside of being our standard). Or why is this better than the other variants?

What are the reasons the ModSec 2.9 behavior is the preferred behavior (outside of being our standard). Or why is this better than the other variants?

I think that the key point is to achieve default modifiers consistency across the engines, rather than push necessarily for one behavior or the other.
That being said, what I see in favor of ModSec 2.9 behavior (no multiline enabled by default) is:

From a CRS standpoint, being ModSec 2.9 our standard, I think that rules have been written without the multiline enabled in mind. If we agree that it is actually needed, we have to rethink accordingly the rules to avoid unexpected matches.
Multiline enabled for all the regex comes with some extra computational time, if it is something not broadly needed (It does not seem to be, considering that 2.9 never used it) I think it would be better to just enable it for specific rules that require it.

We do have a couple of rules that match newlines, those have definitely been written under the assumption that the documentation (https://github.com/SpiderLabs/ModSecurity/wiki/Reference-Manual-(v2.x)#rx) is true and the input is a single line. From my perspective, there's no need for multiline, you can match the same thing as in the example with [\r\n]+}. Single line is also helpful in cases where you want to ignore lots of stuff and match something at the end. You normally don't know whether that's going to be on the same line or not, but in this case you can do match1.*match2$, for example. In a multiline setting (not sure whether DOT_ALL would match across multiple lines) you'd have use a chain rule, I think.

Why would you use the + in your example [\r\n]+}?

Oversight :) [\r\n]} does the job.

Thank you.
(I do not want to sound nagging, but I want to be sure I really understand things.)

@M4tteoP to recap, IMO, it makes more sense for engines to compile with DOT_ALL and write rules that assume input on a single line.

it makes more sense for engines to compile with DOT_ALL and write rules that assume input on a single line.

This is the possible solution described as Work with engine devs to align the default modifiers.
To recap the current modifiers are:

Engine
Modifier1
Modifier2

Modsec v2
PCRE2_DOTALL
PCRE2_DOLLAR_ENDONLY

Modsec v3
PCRE2_DOTALL
PCRE2_MULTILINE

Coraza
s (dotall)
m (multiline mode)

The goal would be to align all of them to a single and unified behavior, and the preferred one should be the Modsec v2 behavior (No multiline).
Coraza: we had a discussion about this issue during our last meeting. The change is doable and seems legit. It is still not decided if we want to go for a breaking change for v3.* or make it a configurable option, and by default remove the multiline only from v4.*. Still, being the CRS support pretty important, even the breaking change is not excluded atm.
One note is that Coraza is running RE2, and I did not found a correspondence for PCRE2_DOLLAR_ENDONLY, but some tests are showing that the dollar endonly behavior is the default one for re2 🤔 See here.
ModSecurity: I don't have details ModSecurity-side.

Thank you. I think we need @airween to discuss the approach to get ModSec v3 to adopt the ModSec v2 standard of PCRE2_DOLLAR_ENDONLY: It's is the old standard, it's more performing, few rules use multiline, if anybody needs multiline it can be enabled on a case by case base within the regex.

I reviewed the thread (congrats @M4tteoP for the good explanation), and tried the examples. I also checked the history of regex modifiers in v3, and realized unfortunately the "default" modifier is the MULTIILINE since the beginning.
I can make a PR, it's easily - but (because of the historical reason) I'm afraid that will be hard to accept.

@airween what should we do next? Create issues for modsecurity from this one?
@M4tteoP I think coraza is already aligned, right?

@M4tteoP I think Coraza is already aligned, right?
There is an open PR that should still be ready to go: https://github.com/corazawaf/coraza/pull/876. The idea was to coordinate with ModSec and merge it once we have a single expected behaviour.

Thanks Matteo. @airween ?

Thanks Matteo. @airween ?

I've opened an issue under ModSecurity, see 3295


Need a function to average expression values in each cluster

sapply(1:num_clust, function(x) Matrix::colMeans(A[,cluster==x]))

sorry, it should be rowMeans rather than colMeans
sapply(1:2, function(x) Matrix::rowMeans(A[,cluster==x]))

Implemented as average_clusters().


Question - does Coherence now work on JDK17?

I read somewhere that Coherence only worked with JDK8 - does this still apply or can it now work with more recent ones?

Coherence has required Java 8 since 12.2.1 release in 2015, but it certainly works on newer releases as well. It is officially certified on Java 8 and 11 (we only certify against LTS Java releases), and GraalVM equivalents, but it is regularly tested against the latest Java release, including Java 17 (and its GraalVM equivalent).
That said, Java 17 does require some additional settings to work properly, primarily because of things that used to work with warnings, but now cause access errors.
This is what we use when running tests with Java 17 in order to resolve access issues:
--add-exports=java.base/jdk.internal.ref=ALL-UNNAMED \
--add-exports java.management/sun.management=ALL-UNNAMED \
--add-opens java.base/java.lang=ALL-UNNAMED \
--add-opens=java.base/java.lang.invoke=ALL-UNNAMED \
--add-opens java.base/java.nio=ALL-UNNAMED \
--add-opens java.base/java.util=ALL-UNNAMED

If you use Coherence with the Module System, you may be able to replace ALL-UNNAMED above with com.oracle.coherence, which is automatic module name for coherence.jar.
Unfortunately, as much as we'd like to add proper module support, we can't really do it without jumping through major hoops until we drop support for Java 8, so this is probably the best we can do for the time being.

Thanks a lot for the input Alek - will give it a try!


test assign in JIT

realized we should probably keep the core of the test removed in #4024

actually there is some coverage already in test_assign so this is not necessary


Add support of compiler proxies, such the one in the django-postman app

Supersedes PR 53 and 64.

Coverage decreased (-1.09%) to 89.07% when pulling 4b0b07e69ee58e0e45a46fbf487e4a4b18255fbb on psam44:master into d96ea94c5dfcde517ff8f65d6ba4e435d8a0168c on jmoiron:master.

Coverage decreased (-1.09%) to 89.07% when pulling 4b0b07e69ee58e0e45a46fbf487e4a4b18255fbb on psam44:master into d96ea94c5dfcde517ff8f65d6ba4e435d8a0168c on jmoiron:master.


psys: light emitter particle renderer node

a psys 'renderer' node which really just manipulates pooled lights

point lights now emit lights


Loosening Dill Version

@njusu
Dear Greykite Developers,
How are you today? Thank you for developing this wonderful package! With great accuracy and great flexibility that fits many many real life use cases!
However, greykite seems to be pinning dill>=0.3.3
But if we want greykite to be scalable and used in production at large scale and used in even more use cases, we would like to integrated with apache-beam. For that we need dill==<IP_ADDRESS> (see here)
Which is why In the PR we set dill>=<IP_ADDRESS>
I did a code scrape in greykite repo. It seems the ONLY time where dill is used is in this file greykite/framework/templates/pickle_utils.py
In this file we use:

dill load (defined in this dill package file here)
dill dump (also defined in the same file)
Both function hasn't been updated for 4 years. Doesn't seem there's any changes

I agree with @mahanh's issue here  that we should Loosening dill version.
Please let me know if this PR is okay. It's a one-line PR.
Thank you and have a wonderful day!
All the best,
Kathy

@KathyGCY Hi Kathy, thanks for using Greykite! I tested dill=<IP_ADDRESS> on intel Mac and Linux they both seemed to work fine. I'm okay with this change.

@njusu
Thank you for approving! Could you merge this PR since I don't have write access.
Thank you again and have a wonderful day!
All the best,
Kathy

@njusu
We were wondering if it is possible to merge this change to a release (say 0.5.0) so in my requirement file I can specify greykite==0.5.0?
Thank you!


Warning: unable to save dynamic action

Hi,
I am getting a bunch of warnings as the one hereunder. Does anyone know why ?
mars 08, 2016 6:59:44 PM com.sun.faces.application.view.FaceletPartialStateManagementStrategy saveDynamicActions
AVERTISSEMENT: Unable to save dynamic action with clientId 'j_id29' because the UIComponent cannot be found

Yes. It's an OmniFaces bug (or rather: nuisance) that has been fixed in the meantime. Update to OmniFaces 2.2, and you should get rid of the warning.
BTW, this is the wrong project. Please open your issue in the BootsFaces-OSP project. Thanks!

close


Add training provider and accredited provider filters to the provider show page

Context
This PR does 3 things

adds a training provider filter
adds an accredited provider filter
refactors out most of the logic into a helper

The refactor was necessary as we don't want to expose the training or accrediting provider filter on the candidates application page (it would be 2000 checkboxes or so long 😱)
Changes proposed in this pull request

Adds a training provider filter to the providers applications page which returns the provider who runs the course
Adds a training provider filter to the providers applications page which returns a list of courses for the accrediting provider
Decouples the two filter interfaces with a helper

Guidance to review
Per commit is going to be easiest to follow the thought process
I think one of the queries maybe slightly off. I think the accredited provider is returning a list or providers who accredit one of the training providers courses, rather than ones with applications.
My brain is mush though.
Link to Trello card
https://trello.com/c/LGclXXrY/3827-add-courses-run-by-filter-to-provider-applications-page-on-support-console
https://trello.com/c/oDVIHY4j/3828-add-courses-ratified-by-filter-to-provider-applications-page-on-support-console
Things to check

[x] This code does not rely on migrations in the same Pull Request
[x] If this code includes a migration adding or changing columns, it also backfills existing records for consistency
[x] API release notes have been updated if necessary
[x] Required environment variables have been updated added to the Azure KeyVault

Had a play around with locally and it seem to work well. Only minor suggestion is whether we want to hide the training provider filter if the provider in question is the training provider and hide the accredited providers filter if the provider is the accredited provider 🤷♂

I'll pick this up after we're done with the reporting work


Go operator with sdk fails to start with set in config.json failed: permission denied

Bug Report
What did you do?
Created a clean operator project using the 1.6.1 operator sdk (macOS)
operator-sdk init --domain egeria-project.org --license apache2 --owner 'Contributors to the Egeria project' --project-name 'egeria' --repo 'github.com/odpi/egeria-k8s-operator'
operator-sdk create api --group egeria --version v1alpha1 --kind EgeriaPlatform

then built...
checked the operator
$ kubectl get deployment -n egeria-system                                             [16:11:17]
NAME                        READY   UP-TO-DATE   AVAILABLE   AGE
egeria-controller-manager   0/1     1            0           2m18s
jonesn:test3/ $ kubectl get pods -n egeria-system                                                   [16:12:08]
NAME                                         READY   STATUS                 RESTARTS   AGE
egeria-controller-manager-55bb64c6c9-pxc4w   1/2     CreateContainerError   0          2m32s
jonesn:test3/ $ kubectl describe pod egeria-controller-manager-55bb64c6c9-pxc4w -n egeria-system    [16:12:23]
Name:         egeria-controller-manager-55bb64c6c9-pxc4w
Namespace:    egeria-system
Priority:     0
Node:         <IP_ADDRESS>/<IP_ADDRESS>
Start Time:   Tue, 20 Apr 2021 16:09:50 +0100
Labels:       control-plane=controller-manager
              pod-template-hash=55bb64c6c9
Annotations:  cni.projectcalico.org/podIP: <IP_ADDRESS>/32
              cni.projectcalico.org/podIPs: <IP_ADDRESS>/32
              k8s.v1.cni.cncf.io/network-status:
                [{
                    "name": "",
                    "ips": [
                        "<IP_ADDRESS>"
                    ],
                    "default": true,
                    "dns": {}
                }]
              k8s.v1.cni.cncf.io/networks-status:
                [{
                    "name": "",
                    "ips": [
                        "<IP_ADDRESS>"
                    ],
                    "default": true,
                    "dns": {}
                }]
              openshift.io/scc: restricted
Status:       Pending
IP:           <IP_ADDRESS>
IPs:
  IP:           <IP_ADDRESS>
Controlled By:  ReplicaSet/egeria-controller-manager-55bb64c6c9
Containers:
  kube-rbac-proxy:
    Container ID:
    Image:         gcr.io/kubebuilder/kube-rbac-proxy:v0.8.0
    Image ID:
    Port:          8443/TCP
    Host Port:     0/TCP
    Args:
      --secure-listen-address=<IP_ADDRESS>:8443
      --upstream=http://<IP_ADDRESS>:8080/
      --logtostderr=true
      --v=10
    State:          Waiting
      Reason:       CreateContainerError
    Ready:          False
    Restart Count:  0
    Environment:    <none>
    Mounts:
      /var/run/secrets/kubernetes.io/serviceaccount from egeria-controller-manager-token-wnzkb (ro)
  manager:
    Container ID:  cri-o://2559d37e22c8cc9e80362e0462c259327e3986ef50ccd5ba15c83d16a9b13778
    Image:         odpi/egeria-k8s-operator:0.1.7
    Image ID:      docker.io/odpi/egeria-k8s-operator@sha256:48da92aacf0ed0be8e5ad64843f1d0c722587d59b1ac76821971d3f41be8ca8a
    Port:          <none>
    Host Port:     <none>
    Command:
      /manager
    Args:
      --health-probe-bind-address=:8081
      --metrics-bind-address=<IP_ADDRESS>:8080
      --leader-elect
    State:          Running
      Started:      Tue, 20 Apr 2021 16:09:57 +0100
    Ready:          True
    Restart Count:  0
    Limits:
      cpu:     100m
      memory:  30Mi
    Requests:
      cpu:        100m
      memory:     20Mi
    Liveness:     http-get http://:8081/healthz delay=15s timeout=1s period=20s #success=1 #failure=3
    Readiness:    http-get http://:8081/readyz delay=5s timeout=1s period=10s #success=1 #failure=3
    Environment:  <none>
    Mounts:
      /var/run/secrets/kubernetes.io/serviceaccount from egeria-controller-manager-token-wnzkb (ro)
Conditions:
  Type              Status
  Initialized       True
  Ready             False
  ContainersReady   False
  PodScheduled      True
Volumes:
  egeria-controller-manager-token-wnzkb:
    Type:        Secret (a volume populated by a Secret)
    SecretName:  egeria-controller-manager-token-wnzkb
    Optional:    false
QoS Class:       Burstable
Node-Selectors:  <none>
Tolerations:     node.kubernetes.io/memory-pressure:NoSchedule op=Exists
                 node.kubernetes.io/not-ready:NoExecute op=Exists for 300s
                 node.kubernetes.io/unreachable:NoExecute op=Exists for 300s
Events:
  Type     Reason          Age                   From               Message
  ----     ------          ----                  ----               -------
  Normal   Scheduled       2m38s                 default-scheduler  Successfully assigned egeria-system/egeria-controller-manager-55bb64c6c9-pxc4w to <IP_ADDRESS>
  Normal   AddedInterface  2m36s                 multus             Add eth0 [<IP_ADDRESS>/32]
  Warning  Failed          2m36s                 kubelet            Error: container create failed: time="2021-04-20T10:09:52-05:00" level=error msg="container_linux.go:366: starting container process caused: chdir to cwd (\"/home/nonroot\") set in config.json failed: permission denied"
  Normal   Pulling         2m36s                 kubelet            Pulling image "odpi/egeria-k8s-operator:0.1.7"
  Normal   Started         2m31s                 kubelet            Started container manager
  Normal   Pulled          2m31s                 kubelet            Successfully pulled image "odpi/egeria-k8s-operator:0.1.7" in 4.935205588s
  Normal   Created         2m31s                 kubelet            Created container manager
  Warning  Failed          2m30s                 kubelet            Error: container create failed: time="2021-04-20T10:09:58-05:00" level=error msg="container_linux.go:366: starting container process caused: chdir to cwd (\"/home/nonroot\") set in config.json failed: permission denied"
  Warning  Failed          2m29s                 kubelet            Error: container create failed: time="2021-04-20T10:09:59-05:00" level=error msg="container_linux.go:366: starting container process caused: chdir to cwd (\"/home/nonroot\") set in config.json failed: permission denied"
  Warning  Failed          2m16s                 kubelet            Error: container create failed: time="2021-04-20T10:10:12-05:00" level=error msg="container_linux.go:366: starting container process caused: chdir to cwd (\"/home/nonroot\") set in config.json failed: permission denied"
  Warning  Failed          2m2s                  kubelet            Error: container create failed: time="2021-04-20T10:10:26-05:00" level=error msg="container_linux.go:366: starting container process caused: chdir to cwd (\"/home/nonroot\") set in config.json failed: permission denied"
  Warning  Failed          109s                  kubelet            Error: container create failed: time="2021-04-20T10:10:39-05:00" level=error msg="container_linux.go:366: starting container process caused: chdir to cwd (\"/home/nonroot\") set in config.json failed: permission denied"
  Warning  Failed          94s                   kubelet            Error: container create failed: time="2021-04-20T10:10:54-05:00" level=error msg="container_linux.go:366: starting container process caused: chdir to cwd (\"/home/nonroot\") set in config.json failed: permission denied"
  Warning  Failed          80s                   kubelet            Error: container create failed: time="2021-04-20T10:11:08-05:00" level=error msg="container_linux.go:366: starting container process caused: chdir to cwd (\"/home/nonroot\") set in config.json failed: permission denied"
  Warning  Failed          68s                   kubelet            Error: container create failed: time="2021-04-20T10:11:20-05:00" level=error msg="container_linux.go:366: starting container process caused: chdir to cwd (\"/home/nonroot\") set in config.json failed: permission denied"
  Warning  Failed          55s                   kubelet            (combined from similar events): Error: container create failed: time="2021-04-20T10:11:33-05:00" level=error msg="container_linux.go:366: starting container process caused: chdir to cwd (\"/home/nonroot\") set in config.json failed: permission denied"
  Normal   Pulled          40s (x11 over 2m36s)  kubelet            Container image "gcr.io/kubebuilder/kube-rbac-proxy:v0.8.0" already present on machine
jonesn:test3/ $

What did you expect to see?
Operator starts up correctly

What did you see instead? Under which circumstances?
The operator pod fails to run, reporting:
  Normal   Scheduled       4m17s                 default-scheduler  Successfully assigned egeria-system/egeria-controller-manager-5676cd584d-zqfw2 to <IP_ADDRESS>
  Normal   AddedInterface  4m15s                 multus             Add eth0 [<IP_ADDRESS>/32]
  Normal   Pulling         4m15s                 kubelet            Pulling image "gcr.io/kubebuilder/kube-rbac-proxy:v0.8.0"
  Warning  Failed          4m10s                 kubelet            Error: container create failed: time="2021-04-20T09:41:02-05:00" level=error msg="container_linux.go:366: starting container process caused: chdir to cwd (\"/home/nonroot\") set in config.json failed: permission denied"
  Normal   Pulling         4m10s                 kubelet            Pulling image "odpi/egeria-k8s-operator:0.1.6"
  Normal   Pulled          4m10s                 kubelet            Successfully pulled image "gcr.io/kubebuilder/kube-rbac-proxy:v0.8.0" in 4.28458144s
  Normal   Pulled          4m5s                  kubelet            Successfully pulled image "odpi/egeria-k8s-operator:0.1.6" in 5.052850106s
  Normal   Created         4m5s                  kubelet            Created container manager
  Normal   Started         4m5s                  kubelet            Started container manager
  Warning  Failed          4m4s                  kubelet            Error: container create failed: time="2021-04-20T09:41:08-05:00" level=error msg="container_linux.go:366: starting container process caused: chdir to cwd (\"/home/nonroot\") set in config.json failed: permission denied"
  Warning  Failed          4m3s                  kubelet            Error: container create failed: time="2021-04-20T09:41:09-05:00" level=error msg="container_linux.go:366: starting container process caused: chdir to cwd (\"/home/nonroot\") set in config.json failed: permission denied"

Environment
Operator type:
< /language go >
Kubernetes cluster type:
OpenShift
ROKS/IBM Cloud
4.6.22
operator-sdk version: "v1.6.1", commit: "e6981d812a759442a583d8ee2fae269507c408d4", kubernetes version: "1.19.4", go version: "go1.15.5", GOOS: "darwin", GOARCH: "amd64"

$ go version (if language is Go)
go version go1.15.11 darwin/amd64
$ kubectl version
$ kubectl version                                                                                [15:57:55]
Client Version: version.Info{Major:"1", Minor:"21", GitVersion:"v1.21.0", GitCommit:"cb303e613a121a29364f75cc67d3d580833a7479", GitTreeState:"clean", BuildDate:"2021-04-08T21:16:14Z", GoVersion:"go1.16.3", Compiler:"gc", Platform:"darwin/amd64"}
Server Version: version.Info{Major:"1", Minor:"19", GitVersion:"v1.19.0+d46d32f", GitCommit:"d46d32fbc3f0c35d2855a4589062aaf6335acd48", GitTreeState:"clean", BuildDate:"2021-03-11T01:16:36Z", GoVersion:"go1.15.5", Compiler:"gc", Platform:"linux/amd64"}
WARNING: version difference between client (1.21) and server (1.19) exceeds the supported minor version skew of +/-1
(aware of skew)
Possible Solution
Some additional security context or kubeproxy changes needed?
Additional context
This is very similar to https://github.com/operator-framework/operator-sdk/issues/4684 - though that related primarily to an ansible based operator (didn't want to confuse the discussion there)
It would appear the operator sdk is not setting up sufficient permissions to work in current openshift versions?

Checking what has been built

manager.yaml :

      securityContext:
       runAsNonRoot: true

        securityContext:
          allowPrivilegeEscalation: false

This might be related -- it's likely the version of OpenShift being used in roks hasn't yet been fixed? https://bugzilla.redhat.com/show_bug.cgi?id=1874057

This is the exact same root cause as #4684. The current recommendation is to use the kube-rbac-proxy image built for OpenShift.
/triage duplicate

Thanks. I wasn't entirely clear, but having updated the image for kube-proxy-rbac I can configure the operator now works. thanks


lm_eval missing

I believe the lm_eval file is missing for zero_shot_benchmark. Could you please update?
Thanks in advance

Hi, you just need to pip install lm-eval


incompatibility

it doesn't works with vue

it's possible that recents in vuejs introduce compatibilities trouble ...
btw it should continue to work with vuejs < 3
(i don't use vuejs anymore ... and I don't know the current version ;-))


Allow creating alerts with multiple notification channels

This way we can send alerts to PD and Slack
Signed-off-by: Priya Wadhwa<EMAIL_ADDRESS>
Summary

Release Note

Documentation

@k4leung4 sorry had a lint error, could you re-approve?? thanks!!


107 fetch docs if no bulk get

What
Check for the /_bulk_get endpoint. If it's missing then fetch document revisions individually.
How
Check the bulk get endpoint exists using a GET /_bulk_get request.

On 405 Method Not Allowed, proceed as normal.
On 404 Object Not Found, fetch documents individually using the GET /db/docid endpoint with a selection of URL parameters to ensure all live and non-live revisions are captured in the backup.

Testing
Includes additional CI test for unsupported /_bulk_get.
Issues
Fixes #107.

I'll submit the checkBulkGetSupport logic under a new PR. Lets revisit the rest of this post-2.0.


PMM-11384 Added newest versions of operators

Test name
Status

api-tests
passed

Good point. I'll add them to the list. The idea was to support the 3 latest releases

Test name
Status

api-tests
passed


Regenerate statics on all maps

SPT Version
3.10-BE
Statics have changed, enable static dumper in modules,
run one of each map,
Push updated data into assets\database\locations (statics.json)

Originally written by chomp

Completed, only labs/woods had changes: https://github.com/sp-tarkov/server/commit/05faafb9b3b2b745531d05c41046ea27da058126

Originally written by chomp