Using cert-manager acme http01 validation with Ambassador

I am new to Ambassador, so please bear with my ignorance here.
I am attempting to determine how to get ambassador to work with cert-manager using http01 validation. Any documented reference I see to cert-manager and Ambassador together seem to use the dns01 validation mechanism. Is it possible to use the http mechanism also?
If so, generally how is this accomplished? It's easy enough to manually create a service with an ambassador mapping annotation which routes the /.well-known/acme-challenge/ prefix, but I'm not certain what is supposed to actually respond to this.
Edited to add:
I've seen a few examples of how to get cert-manager working with istio ingress that seem to suggest that you'd create an Ingress/Service pair with a service selector based on the certmanager.k8s.io/domain label. That approach seems like it'd work with Ambassador, also (except with a Service mapping annotation instead of an Ingress). However, that label does not appear on the cm-acme-http-solver pods created by cert-manager to validate the http01 requests.  So, I'm not sure if that label is used by cert-manager anymore.

Okay - I think I sorted out what's happening here. For anyone else who happens across this, the reason the certmanager.k8s.io/domain label isn't present is because it was replaced by a hashed domain name to support domains longer than the limits of a label. More info here.
As far as the service, I had to actually look at the source of the cm-acme-http-solver container to see what its problem was. The ambassador map for the service had to retain the hostname and not rewrite the prefix.
So, something like this:
apiVersion: v1
kind: Service
metadata:
  name: {{ template "chartname.secretName" . }}
  annotations:
    getambassador.io/config: |
      ---
      apiVersion: ambassador/v0
      kind:  Mapping
      name:  {{ template "chartname.secretName" . }}
      prefix: /.well-known/acme-challenge/
      rewrite: ""
      host: {{ template "chartname.hostname" . }}
      host_rewrite: {{ template "chartname.hostname" . }}
      service: {{ template "chartname.secretName" . }}
spec:
  ports:
  - port: 80
    targetPort: 8089
  selector:
    certmanager.k8s.io/acme-http-domain: <adler32 hash of chartname.hostname>
---
apiVersion: certmanager.k8s.io/v1alpha1
kind: Certificate
metadata:
  name: {{ template "chartname.secretName" . }}
spec:
  secretName: {{ template "chartname.secretName" . }}
  issuerRef:
    name: {{ .Values.tls.issuer }}
    kind: ClusterIssuer
  commonName: {{ template "chartname.hostname" . }}
  dnsNames:
  - {{ template "chartname.hostname" . }}
  acme:
    config:
    - http01:
        ingressClass: not-there
      domains:
      - {{ template "ichartname.hostname" . }}


World.CreateVehicle not Working

Hi,
I'm using lastest version from github and the following code is not working:
Vehicle v = World.CreateVehicle(VehicleHash.Buffalo2, Game.Player.Character.Position * 2, Game.Player.Character.Heading);
And this is always returning null and not creating the Vehicle. I've also tried:
Vehicle v = World.CreateVehicle(new Model(VehicleHash.Buffalo2), Game.Player.Character.Position * 2, Game.Player.Character.Heading);
with no success.

I think my error was not requesting the vehicle model and waiting for it to load before creating it. Doing so makes it work fine.

World.CreateVehicle does request the model on its own
The only possible reason in my eyes could be the timeout. But I doubt the model won't load within 1 second

Yes, you're right. The problem is other bit I don't know which. Sometimes it works and sometimes not.
I'll reopen the issue if I find more feedback to post, meanwhile if I'm the only one experiencing it, it's probably me using it wrong somehow.


Fixes error generating a map preview for torque layers

This PR adds:

A new method (_getTorqueLayerDefinition) to generate basemaps of vizjsons with one torque layer.
A spec for that case.
Updates the torque example.

@javisantana: can you review it, please?

retest this please

retest this please

:es:


Running on Heroku with one-click deploy

In order to run on Heroku with one-click deploy, I setup a fork https://github.com/Lewiscowles1986/cors-anywhere
If Rob wants it, I'm happy to upstream and I kept each branch alive so I can rebase on their repo. I made some other choices too, such as renaming some bits and enabling CI.
This issue is here as "documentation" of how to setup your own cors anywhere using Heroku.

To minimize backwards-incompatible breakage and confusion, I'm not going to accept the "black"/"white"->"allow"/"block" change.
Documentation for the Heroku one-click deploy feature is at https://devcenter.heroku.com/articles/heroku-button
A completely open proxy is against Heroku's Acceptable Use policy. The current version of your PR makes the proxy open by default. Is it possible to require explicit action from developers, so that whoever that wants to use the button knows that they have to change the configuration?

It's written on the screen and in your docs. I've added to only have localhost in the allowlist and 1 1 in the rate limit. This seemed to block unwanted traffic.

Regarding backwards compatibility for black/block type change, might I suggest supporting "blackList" and "whiteList" as aliases? Eg: If both CORSANYWHERE_BLACKLIST and CORSANYWHERE_BLOCKLIST throw an error, but if only one is defined use that one. Update documentation to point to BLOCKLIST and either do or don't document the alias.

I'm up for that transition. I'll add it to my personal backlog. Please ping if I do nothing within a month.

@Lewiscowles1986, after I 1-click deployed from your repo's, I got an empty repo when I heroku git:clone the created app. I found a work around here, but I think if you included the repository property in app.json, I would not have had to do that.

Hey Bob,
Sorry to hear you've had that difficulty. Could you share some more information about your setup? I Just did the same thing both from my main branch and the branch I linked here, and both are working for me in Chrome, Firefox, Edge and Safari (all latest) across Windows, Linux and OSx. Did you need to login to Heroku first?
I Do know that deploying from app.json does not automatically setup deploy from git commits. I think if I point it at my repository, then there would be more of a problem merging as it would be hosted here, but point to a potentially out-of-date branch, rather than official cors-anywhere.

The deploy worked fine. I clicked the button and got a screen asking for the environment variables. I was able to deploy the app to heroku as "myApp"
After it deployed and was running, I used the heroku cli and did heroku git:clone -a {myApp} and it gave me an empty repo. It's been a while since I deployed a click-to-deploy, but I thought they usually were attached to the original repo in some way for re-deploy and updates.

As mentioned @bobpaul once merged upstream this could be a thing. Right now it would make me an unofficial maintainer of something I only encountered when helping a friend. I saw some problems (for us), and came up with a solution to fix them, and then offered what we had. It sounds like a great suggestion for a next step. I Think if we could get this merged first, then it would be easier to make a tiny patch referencing this comment on this issue. I'll add it to the top as an action item.

I'm planning to prepare a new release soonish (but not urgent), and am considering to accept the requested functionality.
The branch is doing too many unrelated things. Could you split it in separate pull requests so that they can be reviewed and merged independently? Please keep the number of unnecessary changes to a minimum (and have meaningful commits; otherwise I would need to squash them all into one commit). I suggest the following order (the Heroku one-click deploy last because it depends on the renamed variable).

PR to rename "blacklist" to "blocklist" and "whitelist" to "allowlist" - with proper capitalizations (not just a blind search-and-replace like you've done right now). Do not print a deprecation warning, I don't want to force unnecessary warnings on existing users.
PR to add the Heroku one-click deploy button.

I'm not sure what you mean by "suggested improvement. Specify repository, so source code updates can ship to heroku and heroku local-machine git can be used.". Why is that part of your branch? FYI: My heroku demo runs a fork of the master branch (with patches on top to enforce restrictions to comply with the policy). That use case should not be endangered by the proposed changes.

Hi, I have the following code:
const res = await fetch(https://cors-anywhere.herokuapp.com/${url}`);
const data = await res.json();`
how can I fix the 403 (Forbidden) error?

@Lewiscowles1986 I just noticed that you added a commit there, but there is no open pull request to review. If your patches are ready for review, please open a PR.
@pierre1590 Your question is unrelated to this issue, please don't post unrelated comments on random issues. For your specific issue, see the pinned issue for the explanation.


MudText: Typo.subtitle1 and Typo.subtitle2 can no longer be centered using Align.Center

Bug type
Component
Component name
MudText
What happened?
The following text does not get centered:
<MudText Typo="Typo.subtitle1" Align="Align.Center">
    This text should be centered
</MudText>

I'm pretty sure #6061 broke it because span is an inline element while h6 is a block-level element.
Expected behavior
The text should be centered.
Version (bug)
7.0.0-preview.1
Version (working)
6.19.1
What browsers are you seeing the problem on?
Chrome
On which operating systems are you experiencing the issue?
Linux
Pull Request

[ ] I would like to do a Pull Request

Code of Conduct

[X] I agree to follow this project's Code of Conduct

The linked commit doesn't change body1 & body2 but instead updates subtitle1 & subtitle2

Good catch, I somehow got confused and actually meant to say subtitle1

@henon @danielchalmers @tpmccrary @lortimer

I'm not sure why I was tagged. As I said on #6061, it's critical that MudBlazor doesn't use semantic elements incorrectly. As a component library, developers are counting on it to build their apps quickly without introducing accessibility issues. Accessibility issues create legal liability, styling doesn't.
MudBlazor should not go back to using h6 just to make centering work again. That would cause an accessibility issue for the sake of styling. If it needs to be a block element, then the span should have display: block on it. Better yet, MudBlazor should allow developers to easily style it however they need.

The problem is that, as a <span>, it no longer takes up a line so it can't text-align itself; Why can't we make it a <p>?
Or display: block as mentioned above.

the span should have display: block on it

Sounds like an easy fix

The landing page uses subtitle1 heavily.

This makes me think most people use it just to have smaller text so it should be <p>. Not that they should necessarily be using it that way but it's the reality of it. Of course an option to decide this (span vs p etc) within MudText is still possible.

+1 for keeping it a <p> by default.
Why can't we keep the Inline property in addition to the HtmlTag. To me it looks they are orthogonal to each other, meaning you can set display: block on whatever html tag you choose, no matter whether it is necessary or not.
And it is not uncommon that one parameter disables the function of another parameter. We have that in many components. All we need is documentation pointing this out with a box like

[!NOTE]
Parameter Align works only if you set parameter Inline bla bla whatever, I don't know what it should say exactly.


[ISSUE - 222] Add Margin to Social Links

Description
Add Margin to Social Links in the footer of the landing page.
Category

[x] User Interface

Related Issue

Fixes #222

Checklist

[x] I have gone through the CONTRIBUTING guide
[ ] The name of the resource is spelled correctly (if applicable)
[ ] The link to the resource is working (if applicable)
[ ] The resource is added in the correct format (if applicable)
[x] I have tested changes on my local computer (if applicable)

@Sriparno08 This pull request is ready for review and merge. Additionally, I kindly request you to consider adding the "JWOC" and "Difficulty" labels to this pull request.


adaptor wiring proposal

Looks like a good start, I think we should create an example with an actual asynchronous process (e.g. network stack)


Inline if and unless

Be able to make an if or unless statement in one line, a-la Coffeescript.
For example:
a = 1 if some_expression()
b = 2 unless other_expression()

Like PHP:
some_expression() and $a = 1;

Addressed (in part) in 6d726a414fa3dac6bc2e5de0026402faa0c94781. Should really use branches instead if just dumping random commits :stuck_out_tongue:


Penetration testing

Review the video and list out the processes and tools used
https://youtu.be/xl2Xx5YOKcI

What is Penetration Testing?
A penetration test, colloquially known as a pen test, pentest or ethical hacking, is an authorized simulated cyber attack on a computer system, performed to evaluate the security of the system.
Pentest IS NOT “vulnerability scan”, “compliance audit” or “security assessment”.
The test is performed to identify both weaknesses (also referred to as vulnerabilities), including the potential for unauthorized parties to gain access to the system's features and data, as well as strengths, enabling a full risk assessment to be completed.
A penetration test doesn’t stop at simply uncovering vulnerabilities:  it goes the next step to actively exploit those vulnerabilities in order to prove (or disprove) real-world attack vectors against an organization’s IT assets, data, humans, and/or physical security.
While a penetration test may involve use of automated tools and process frameworks, the focus is ultimately on the individual or team of testers, the experience they bring to the test, and the skills and wherewithal they leverage in the context of an active attack on your organization. This can’t be over-emphasized. Even highly automated, well-resourced, and advanced networks employing sophisticated counter-measure technologies are often vulnerable to the unique nature of the human mind, which can think laterally and outside of the box, can both analyze and synthesize, and is armed with motive and determination.
A penetration test is designed to answer the question: “What is the real-world effectiveness of my existing security controls against an active, human, skilled attacker?” We can contrast this with security or compliance audits that check for the existence of required controls and their correct configurations, by establishing a simple scenario:  Even a 100% compliant organization may still be vulnerable in the real world against a skilled human threat agent.
A penetration test allows for multiple attack vectors to be explored against the same target. Often it is the combination of information or vulnerabilities across different systems that will lead to a successful compromise. While there are examples of penetration testing that limit their scope to only one target via one vector (example, a web application pen test conducted only from the point of view of the Internet browser), their results should always be taken with a grain of salt:  while the test may have provided valuable results, its results are only useful within the same context the test was conducted. Put another way, limiting scope and vector yields limited real-world understanding of security risk.

Who performs pen tests?
It’s best to have a pen test performed by someone with little-to-no prior knowledge of how the system is secured because they may be able to expose blind spots missed by the developers who built the system. For this reason, outside contractors are usually brought in to perform the tests. These contractors are often referred to as ‘ethical hackers’ since they are being hired to hack into a system with permission and for the purpose of increasing security.
Many ethical hackers are experienced developers with advanced degrees and a certification for pen testing. On the other hand, some of the best ethical hackers are self-taught. In fact, some are reformed criminal hackers who now use their expertise to help fix security flaws rather than exploit them. The best candidate to carry out a pen test can vary greatly depending on the target company and what type of pen test they want to initiate.

What are the types of pen tests?
White box pen test - In a white box test, the hacker will be provided with some information ahead of time regarding the target company’s security info.
Black box pen test - Also known as a ‘blind’ test, this is one where the hacker is given no background information besides the name of the target company.
Covert pen test - Also known as a ‘double-blind’ pen test, this is a situation where almost no one in the company is aware that the pen test is happening, including the IT and security professionals who will be responding to the attack. For covert tests, it is especially important for the hacker to have the scope and other details of the test in writing beforehand to avoid any problems with law enforcement.
External pen test - In an external test, the ethical hacker goes up against the company’s external-facing technology, such as their website and external network servers. In some cases, the hacker may not even be allowed to enter the company’s building. This can mean conducting the attack from a remote location or carrying out the test from a truck or van parked nearby.
Internal pen test - In an internal test, the ethical hacker performs the test from the company’s internal network. This kind of test is useful in determining how much damage a disgruntled employee can cause from behind the company’s firewall.

How is a typical pen test carried out?
Pen tests start with a phase of reconnaissance, during which an ethical hacker spends time gathering data and information that they will use to plan their simulated attack. After that, the focus becomes gaining and maintaining access to the target system, which requires a broad set of tools.
Tools for attack include software designed to produce brute-force attacks or SQL injections. There is also hardware specifically designed for pen testing, such as small inconspicuous boxes that can be plugged into a computer on the network to provide the hacker with remote access to that network. In addition, an ethical hacker may use social engineering techniques to find vulnerabilities. For example, sending phishing emails to company employees, or even disguising themselves as delivery people to gain physical access to the building.
The hacker wraps up the test by covering their tracks; this means removing any embedded hardware and doing everything else they can to avoid detection and leave the target system exactly how they found it.

What happens in the aftermath of a pen test?
After completing a pen test, the ethical hacker will share their findings with the target company’s security team. This information can then be used to implement security upgrades to plug up any vulnerabilities discovered during the test. These upgrades can include rate limiting, new WAF rules, and DDoS mitigation, as well as tighter form validations and sanitization.

What Does Penetration Testing Mean to a Business?
Through these tests a business can identify:
Security vulnerabilities before a hacker does
Gaps in information security compliance
The response time of their information security team, i.e. how long it takes the team to realize that there is a breach and mitigate the impact
The potential real-world effect of a data breach or cybersecurity attack
Actionable remediation guidance

OS for Pen testing

Kali Linux
BackBox
Parrot Security OS
Live Hacking OS
DEFT Linux
Samurai Web Testing Framework
Bugtraq
Network Security Toolkit
NodeZero
Pentoo

BLUEPRINT: BUILDING A BETTER PEN TESTER by SANS.pdf


When new reason is added as Draft - what happens when it's parent is published?

Do we let them publish and just drop the draft reasons?
Give them the option to publish recursively? - it will be possible to go in and edit the arguments of published claims.

Drafts are no more!


A new avatar is not properly loaded

The asset is correctly uploaded to CartoDB and stored but the new avatar url is not updated in metadata. The new avatar appears in the account page right after the operation has finished but a refresh will show again the old one.
/cc @xavijam @javitonino

@luisbosque it works for me. Did you press "save" afterwards? Changes are not persisted after setting the new avatar unless you press save.

My bad


26 Oct 2023 - A11y Theme Builder Meeting Minutes

Date
20231026 - time
Zoom info

Meeting link: https://zoom.us/j/91013899295?pwd=Qnh5UVN1aUZ4ak9tODgvMVNLNUg5Zz09
Meeting id: 910 1389 9295
Password: 123225
Call-in: +1<PHONE_NUMBER> US (New York) (Check calendar for more options)

Untracked attendees

Jean-Baptiste Ziadé - Fragmos-Chain
...

Meeting notices

FINOS Project leads are responsible for observing the FINOS guidelines for running project meetings. Project maintainers can find additional resources in the FINOS Maintainers Cheatsheet.

All participants in FINOS project meetings are subject to the LF Antitrust Policy, the FINOS Community Code of Conduct and all other FINOS policies.

FINOS meetings involve participation by industry competitors, and it is the intention of FINOS and the Linux Foundation to conduct all of its activities in accordance with applicable antitrust and competition laws. It is therefore extremely important that attendees adhere to meeting agendas, and be aware of, and not participate in, any activities that are prohibited under applicable US state, federal or foreign antitrust and competition laws. Please contact<EMAIL_ADDRESS>with any questions.

FINOS project meetings may be recorded for use solely by the FINOS team for administration purposes. In very limited instances, and with explicit approval, recordings may be made more widely available.

Agenda

[x] Convene & roll call (5mins)
[x] Display FINOS Antitrust Policy summary slide
[x] Review Meeting Notices (see above)
[x] Approve past meeting minutes

[x] https://github.com/finos/a11y-theme-builder/issues/677

[x] Discuss changing contribution process to committing to dev branch (https://github.com/finos/a11y-theme-builder/issues/679)
[x] Discuss process for prioritizing issues (https://github.com/finos/a11y-theme-builder/issues/689)
[x] Discuss if agendas should be emailed weekly or just opened in GitHub in advance of the meeting?
[x] AOB, Q&A & Adjourn (5mins)

Decisions Made

[x] It was agreed that we would make dev the default commit branch going forward.  All PR's from 10/30 onwards should take this into account.  Work to accomplish this goal will occur on 10/27.
[x] It was agreed that prioritization of issues during triage will be begin with a recommendation by the meeting chair with opportunity for the community to share opinions if they disagree.
[x] It was agreed that meeting agendas will be made available as early as possible, as a GitHub issue with the label "meeting", prior to meeting.  Meeting chair will email agenda to all anticipated attendees as people who do not follow a repository will not get notifications of GitHub issue changes.
[ ] It was agreed that, in the interest of product stability, all dependency version update PRs will be ignored unless associated with a security vulnerability.  The existing PRs, opened by the tool Renovate, will be closed.  New ones will be automatically be created as new updates are available.

Action Items

[ ] Lise and Keith to meet to discuss issues:

[SDK] update the dark mode generating process
[SDK] Charting Colors that enabled color blind mode

[ ] Aaron to submit PRs for moving to dev branch on 10/27.  Once that is complete will submit the PRs for docker publishing and npm publishing for review
[ ] Evan and Lise to work on:

[SDK] Font weights being for the primary font is being passed as 0 for all font-weight-0 through font-weight-4

Hi @aaronreed708, I won't be able to join the call on the 26th due to west coast US travel - I was hoping to get a thumbs up on Issue 682 to confirm that I can remove the redundant repo.  Please feel free to tag me on any issues or in comments. Thanks!

Bryce Curtis - Discover

Jean-Baptiste Ziadé - Fragmos-Chain

Evan K - Discover

Aaron Reed - Discover
Keith Smith - Discover

Approved.  Closing.


Function split_part  not support "-1" index

Enhancement
PostgreSQL

StarRocks

@tomscut hi could you please reply to this issue so I can assign it to you?

Hi @wangsimo0 , please assign this to me. Thank you.

Hi @kateshaowanjou , can you assign this to me？ I will have a try, Thank you.

Hi @lilyzhoupeijie, are you still working on it？ If you have any questions, feel free to join WeChat for discussion:https://ma3you.com/articles_qrcode_show/b12e90J.png?le_time=220907203008013206

hi @kateshaowanjou , can you assign this to me？


[Request] lr-FreeJ2ME

Repository: https://github.com/hex007/freej2me
Requires Apache Ant to compile and Java to run since it uses .jar files.
This theoretically shouldn't be too hard to convert into a shell script, however I was never able to successfully compile from source.  Then again, I haven't tried it since before I upgraded to RetroPie 4.4, so maybe something's changed...

That's going to probably end up being a hell of a lot of dependencies and Java is just hell, but as someone who worked on some of these games... I have an interest. I'll see what I can do.

Added lr-freej2me libretrocore. Working well for me.


.Net: adding "missing" httpclient parameter regarding issue #5065

Motivation and Context
See https://github.com/microsoft/semantic-kernel/issues/5065

Description
adds HttpClient optional parameter to make Service AzureOpenAi & OpenAI methods of the builder homogeneous to those of the kernel.
Contribution Checklist

[X ] The code builds clean without any errors or warnings
[ X] The PR follows the SK Contribution Guidelines and the pre-submission formatting script raises no violations
[ X] All unit tests pass, and I have added new tests where possible
[ X] I didn't break anyone :smile:

Closing the PR for now, as the problem it attempted to solve can be resolved by following the guidelines provided in the https://github.com/microsoft/semantic-kernel/issues/5065 issue. Feel free to reopen if it's not the case.


Add data requirements for NLDAS and GCM GLM modeling

Describe the input data requirements for modeling lakes using GLM, either with NLDAS or GCM drivers. This PR addresses part of #52

Thanks! I don't think we need to specify the state limits because 1) it is not said anywhere in the release that we had data for more than the states we included, and 2) EA-LSTM did the same filter but we didn't list it there and should be consistent.

The first part of that makes sense, but EA-LSTM did include lakes from more states, right? -- there are 21 unique states in the lake metadata based on the figure generated in #25. Though maybe we can cover those spatial extent differences when describing spatial coverage of the met drivers?

^ If the above sounds correct, then I think the text we have currently is sufficient.

😬 - see here and here -- added in this PR

Le sigh. Ok, then forget my suggested edit. We should just add that filtering to states comment you made back in


GnuSocial: No subfolder possible for host

I try to use AndStatus within a subfolder. This is not configurable in the host property if the service is added.

If your Social networking servicer is installed in a subfolder, you should type full url to the service in the "Host" field. See an example here:
https://github.com/andstatus/andstatus/issues/116#issuecomment-54778645
So AndStatus supports instances of Microblogging systems, which are located in a folder of the host (i.e. not in the root of the host). To configure such a system in AndStatus type full address (i.e. URL, including http...) of the system into the "Host" field of the Microblogging system's editor. See Issue #116 with an example of connecting to SDF GNU Social site.
Actually the URL of microblogging system may be like https://username:password@host.org:8080/directory/


Remove link between about pages and publications

Removes logic that republishes Organisation/About pages when certain document types (FOI, Corporate Report and Transparency Data) are published.
Post-merge, we'll need to run the (existing) publishing_api:republish_all_organisations rake task and the (new) publishing_api:republish_all_about_pages rake task.
Tested on Integration
Tested using publishing_api:republish_organisation["government-digital-service"] and publishing_api:republish_about_page["government-digital-service"]
Organisation page
https://www.integration.publishing.service.gov.uk/government/organisations/government-digital-service
Before:

After:

About page
https://www.integration.publishing.service.gov.uk/government/organisations/government-digital-service/about
Before:

After:

Trello card: https://trello.com/c/i90DA1XW/1396-remove-link-between-about-pages-and-publications-in-whitehall

I've read the commit messages, but I can't quite join up what they're saying with the removal of the links I see in the screenshots. What's the motivation behind removing the links?

What's the motivation behind removing the links?

@cbaines the links were problematic because they were not updated dynamically. As Ben's Trello comment states:

Pick an organisation that doesn't have "Corporate reports" or "Transparency data". I chose "Internal Audit Profession".
Publish a new "Corporate report" or "Transparency data" document under that organisation.
Note that the organisation home page does not update.
Manually republish the organisation home page to see the update.

We could try fixing the behaviour to update automatically, but this would actually worsen the situation for documents published in Content Publisher, as we'd then find that publishing a corporate report in Content Publisher has the unexpected side-effect of republishing an Organisation page in Whitehall.
The links we've removed ("Transparency data" and "Corporate reports") are subsets of "Transparency and freedom of information releases", which is a link that is shown automatically anyway. After doing performance analysis and finding the two subset links are rarely used, it was decided to simply drop the links altogether.

What's the motivation behind removing the links?

@cbaines the links were problematic because they were not updated dynamically. As Ben's Trello comment states:

Pick an organisation that doesn't have "Corporate reports" or "Transparency data". I chose "Internal Audit Profession".
Publish a new "Corporate report" or "Transparency data" document under that organisation.
Note that the organisation home page does not update.
Manually republish the organisation home page to see the update.

Thanks for sharing, I don't have access to the Trello card.

We could try fixing the behaviour to update automatically, but this would actually worsen the situation for documents published in Content Publisher, as we'd then find that publishing a corporate report in Content Publisher has the unexpected side-effect of republishing an Organisation page in Whitehall.

My guess is that the best technical way of supporting this behaviour is through link expansion and dependency resolution in the Publishing API, and having the rendering logic on the frontend use that. If this is the case, I think it just hasn't been implemented due to time limitations when the rendering for organisation pages was migrated to the collections app.

The links we've removed ("Transparency data" and "Corporate reports") are subsets of "Transparency and freedom of information releases", which is a link that is shown automatically anyway. After doing performance analysis and finding the two subset links are rarely used, it was decided to simply drop the links altogether.

It's good to know that there's still a way of getting to the data. Removing the links still makes me a bit uncomfortable, as I'm unsure about the impact. Did you consider just including the links for all organisations, regardless of the content they have?

Did you consider just including the links for all organisations, regardless of the content they have?

That would be a confusing user experience. To take the Internal Audit Profession example, a link to "Transparency Data" would look like this:


bitbox: remove fake io mode

What's the purpose of this?
I found that the fake I/O mode was very helpful in writing a tight I/O loop that maximizes io_uring.

Merge activity

Aug 12, 4:06 PM EDT: @rphmeier started a stack merge that includes this pull request via Graphite.


Getting TypeError (ERR_INVALID_ARG_TYPE) when trying to import after obfuscation

This is what my file structure looks like: (see "scripts"/"dev" in package.json to see my obfuscation command)

So I compile my typescript to JS into the dist directory. I then obfuscate all the JS in the dist directory and output is directed to dist-obfu directory. I then publish the dist-obfu directory. This is how the file structure is when i install from npm:

I import the package as follows: (this is how node told me to import)
import pkg from 'windwardclient';
const {WindwardClient} = pkg;
when I try to run the code, I get:
PS C:\Users\Zaid\Desktop\HERE> node .\test.js
internal/modules/run_main.js:54
internalBinding('errors').triggerUncaughtException(
^
TypeError [ERR_INVALID_ARG_TYPE]: The "path" argument must be of type string or an instance of URL. Received undefined
at fileURLToPath (internal/url.js:1347:11)
at Loader.defaultResolve [as _resolve] (internal/modules/esm/resolve.js:751:21)
at Loader.resolve (internal/modules/esm/loader.js:82:40)
at Loader.getModuleJob (internal/modules/esm/loader.js:226:28)
at ModuleWrap. (internal/modules/esm/module_job.js:51:40)
at link (internal/modules/esm/module_job.js:50:36) {
code: 'ERR_INVALID_ARG_TYPE'
}
Am I doing anything wrong? Thanks!

This is my src/index.ts:

And this is my dist/index.js after compiling:

and this is my dist-obfu/index.js after obfuscation:

Im not sure what the source of the problem is, but when i publish un-obfuscated code it works perfectly, but doesnt when i obfuscate and publish. Let me know if you need more info and thanks for the help!

I ended up fixing by fixing some other things in my file structure.


"AKV10000: Request is missing a Bearer or PoP token."

Package Name: azure-keyvault-sercrets
Package Version: 4.4.0
Operating System: Windows 10 / Linux
Python Version: 3.9

Describe the bug
When trying to to retrieve a secret using DefaultAzureCredential() from azure.identity  as credential the argument client = SecretClient(vault_url=key_vault_url, credential=credential) get error {"error":{"code":"Unauthorized","message":"AKV10000: Request is missing a Bearer or PoP token."}}
To Reproduce
Steps to reproduce the behavior:

Follow steps here: https://docs.microsoft.com/en-us/azure/key-vault/certificates/quick-create-python
Attempt to use DefaultAzureCredential(), (Ive tested CLI, Powershell, and SP) with SecretClient to retrieve a secret

Expected behavior
To be able to retrieve a secret from KeyVault / for SecretClient to extract and pass the token from DefaultAzureCredential()
Screenshots

You can see that I'm able to send a message to a message que, but when trying to recieve a secret I get a 401/Unauthorized error

I'm missing .value, this is working as expected.


chore: upgrade to<EMAIL_ADDRESS>

With this upgrade, we can enjoy the latest RN framework and related community resources.

Migrated to babel@7 and jest@24, so that #598 can be solved.
Prepared to fix react-native-navigation issues, i.e. #870, #854.

Tested in both iOS and Android. Most use cases still work well. But there also include some bugs like,

The back button is missing if visiting issue screen from event screen.
Tabs can not response to clicks in Android.
Regressions of #513

This PR will be merged without squashing, and I will try to fix those bugs later. As many of our maintainers are inactive, my future commits may be pushed directly. (cc @gitpoint/maintainers)

Coverage decreased (-0.02%) to 48.671% when pulling d77d06eb9143d51c07150dccb0123f3ad922eb2b on chinesedfan:rn-59 into 642743367d28b6c5d9886cf2c4ea26b8314c243a on gitpoint:master.


Bump navstar.

High Level Description
This patch bumps navstar to include the fix wherein navstar was
crashing on coreOS 1465+
Related Issues

DCOS_OSS- Foo the Bar so it stops Bazzing.
DCOS- Foo the Bar so it stops Bazzing.

Checklist for all PR's

[ ] Included a test which will fail if code is reverted but test is not. If there is no test please explain here:
[ ] Read the DC/OS contributing guidelines
[ ] Followed relevant code rules Rules for Packages and Systemd

Checklist for component/package updates:
If you are changing components or packages in DC/OS (e.g. you are bumping the sha or ref of anything underneath packages), then in addition to the above please also include:

[ ] Change log from the last version integrated (this should be a link to commits for easy verification and review): example
[ ] Test Results: [link to CI job test results for component]
[ ] Code Coverage (if available): [link to code coverage report]

PLEASE FILL IN THE TEMPLATE ABOVE / DO NOT REMOVE ANY SECTIONS ABOVE THIS LINE
Instructions and Review Process
What is the review process and when will my changes land?
All PRs require 2 approvals using github's pull request reviews.
Reviewers should be:

Developers who understand the code being modified.
Developers responsible for code that interacts with or depends on the code being modified.

It is best to proactively ask for 2 reviews by @mentioning the candidate reviewers in the PR comments area. The responsibility is on the developer submitting the PR to follow-up with reviewers and make sure a PR is reviewed in a timely manner. Once a PR has 2 ship-it's, no red reviews, and all tests are green it will be included in the next train.

@GoelDeepak can you fill the PR template above. It will be needed when the final merge takes place.
@drewkerrigan can you review as well?

@urbanserj need your approval as well.

@mesosphere-mergebot bump-ee

@urbanserj @drewkerrigan can you guys review this and approve it. 1.9.5 is blocked on this merge.

Please link the corresponding JIRA ticket(s). Also link to the diff, and a corresponding component CI run.


Package installation should use npm ci instead of npm install

Describe the solution you'd like
React Native builds should use npm ci to install packages instead of npm install.
From the NPM docs:

npm ci
This command is similar to npm-install, except it’s meant to be used in automated environments such as test platforms, continuous integration, and deployment – or any situation where you want to make sure you’re doing a clean install of your dependencies.

The reason is that npm install checks package.json and installs the latest compatible version of the dependant packages, whereas npm ci installs the exact package versions listed in package-lock.json.
In other words, running npm ci will always result in the same set of packages being installed, but npm install may randomly upgrade packages, depending on the version specified.
Additional context
Build logs where npm install is run:
#[section]Starting: yarn/npm install
==============================================================================
Task         : Command Line
Description  : Run a command line with arguments
Version      : 1.1.3
Author       : Microsoft Corporation
Help         : [More Information](https://go.microsoft.com/fwlink/?LinkID=613735)
==============================================================================
[command]/bin/sh -c if [ -f yarn.lock ]; then { yarn install && yarn list --depth=0; } else npm install; fi

Any update on this? npm ci would also speed up the build and avoid installing unnecessary dependencies

This is still a thing that happens in 2022:
[command]/bin/sh -c if [ -f yarn.lock ]; then { yarn install --network-timeout=600000 && yarn list --depth=0; } else npm install; fi
I recently ran into a bug with a dependency because I didn't expect AppCenter to update it under the hood.
I believe this should be configurable at the build-level if maintaining backwards compatibility with the existing behavior is desired.

No updates? Trying a microsoft product after a long time and it's disappointing to see these issues are not actively being fixed.


RT4309: Define PRIu64 for UEFI build

Provide an appropriate definition of PRIu64 for the EDK2 build, since
we don't have <inttypes.h> there.

+1 I will merge once someone else reviews.

Rebasing onto today's HEAD in the hope it clears the spurious CI failures.

@richsalz +1

pushed in d99d0d9 thanks!


chore: add Python SDK tutorial with Flask integration

This PR

Getting started tutorial for Python using Flask

Related Issues

Fixes #537
Notes

Follow-up Tasks

How to test

Thanks @jbovet! I was able to get everything up and running following the tutorial. @federicobond @gruebel could you please take a look and make sure everything is clear? Here's a direct link to the tutorial.


supercharged-dhbw:2.0.2

I am submitting

[ ] a new package
[x] an update for a package

Description:

display plural text in the declaration of authorship if the document has multiple authors

I have read and followed the submission guidelines and, in particular, I

[x] selected a name that isn't the most obvious or canonical name for what the package does
[x] added a typst.toml file with all required keys
[x] added a README.md with documentation for my package
[x] have chosen a license and added a LICENSE file or linked one in my README.md
[x] tested my package locally on my system and it worked
[x] excluded PDFs or README images, if any, but not the LICENSE

[x] ensured that my package is licensed such that users can use and distribute the contents of its template directory without restriction, after modifying them through normal use.

Thanks.


Install Script Failed To Run Process : diskutil apfs resizeContainer

I forgot about the log file sorry!
I will get right when i get home

The message tells you what's wrong, it's mentioned in the FAQ.


Not accurate deocumentation

As i seen by usage example, method used as instance method.
It is confusing as one may think it is like SQL row lock.
Please emphasize in docs that this it is class method. It is relying on locks string only without any relation to class at all... Really, like some kind of helper...
So should not be illusion of row locking emulation....
BTW, you may introduce per instance locking by using lock string like "[User 11]" or so. Then lock_name may be some suffix of this.

Please read the lock types section of the readme.


[KOGITO-8296] - Refactor builder package to encapsulate the underlying build implementation

JIRA: https://issues.redhat.com/browse/KOGITO-8296
I've changed the builder interface to accommodate other build implementations in a singular, ubiquitous way. No more "With..Kaniko" type of methods.
It will allow us to improve the maintainable code. I will send the updates to the operator accordingly. The reason being we need to build the images with different env vars to allow devmode.
Also, the podman and docker tests were excluded from the regular run since they use the docker and podman installations; there are integration tests now.
Not sure how they were running in the CI. I didn't know that the regular Ubuntu runners had podman installed. Nevertheless, the tests weren't working on my machine. @desmax74 do you mind taking a look?
Signed-off-by: Ricardo Zanini<EMAIL_ADDRESS>
Description of the change:
Motivation for the change:
Checklist

[x] Add or Modify a unit test for your change
[x] Have you verified that tall the tests are passing?

I just discovered that the CI was indeed buggy; it won't run the tests whatsoever...

@radtriste @spolti @davidesalerno @desmax74 can we move forward?

@desmax74 I've included the flags to run the IT separately
go test ./... -tags integration_podman and
go test ./... -tags integration_docker
Let's try not to create too many packages, since it's slightly different than Java, please take a look: https://medium.com/rungo/everything-you-need-to-know-about-packages-in-go-b8bac62b74cc


GraphiteReporter for commonj WorkManager

Hi,
are you interested in an implementation of the GraphiteReporter for use in JEE environments (via commonj WorkManager)? I had to build one because we are not allowed to start our own threads in JEE applications but have to rather use the threads provided by the container. The main difference is the way that the start / stop the reporter and unfortunately in the run() method we need to manually sleep for the flush period.
Cheers,
Dimo

You might be better off building a ScheduledExecutorService that runs on top of WorkManager; that way you wouldn't have to rebuild each reporter.

that is a good idea - I will look into that. In the mean time I have refactored the graphite reporter on my end so that the two main aspects are placed in separate classes - mapping metrics to graphite format (the report* methods) and the actual scheduling. This way I can reuse the report* stuff in multiple contexts (using JEE timer service, using JMX timer service, ...).


Test Mode: Deleting a topology source node after a test source node is configured throws exception

Steps to reproduce:

Configure a topology with more than one source
Go to test mode and configure a test case
Go back to edit mode and try to delete any one of the configured sources

Exception was thrown:
"An exception with message [com.mysql.jdbc.exceptions.jdbc4.MySQLIntegrityConstraintViolationException: Cannot delete or update a parent row: a foreign key constraint fails (streamline_db.topology_test_run_case_source, CONSTRAINT topology_test_run_case_source_ibfk_2 FOREIGN KEY (sourceId, versionId) REFERENCES topology_source (id, versionId))] was thrown while processing request."

I missed that we are running topology test with current version of topology, so that any sources, processors, sinks can be removed.
For workaround we should remove foreign key constraints, and maybe in future we need to revisit how topology test feature can play well with topology versioning.

Or maybe we want to also remove associated test source or test sink when topology source or topology sink is removed, since we may want to keep existing test case valid even we remove one of topology source or sink associated to test source or test sink for that test case.

PR available: #909


Adjust the KillService to handle instances instead of tasks

Resolves #4394
Note the renamings:
TaskKillProgressActor -> InstanceKillProgressActor
TaskKillServiceActor -> KillServiceActor
TaskKillServiceDelegate -> KillServiceDelegate
unfortunately GH doesn't recognize them although edit/rename actions are in separate commits.

retest this please

LGTM!


CHW/ANC SubTask - Register an ANC Patient

To register an ANC Patient (mom), we may need to capture the following fields

Patient.language	preferred	CommonLanguages
Max Binding: AllLanguages
Patient.identifier.use	required	IdentifierUse
Patient.identifier.type	extensible	Identifier Type Codes
Patient.name.use	required	NameUse
Patient.telecom.system	required	ContactPointSystem
Patient.telecom.use	required	ContactPointUse
Patient.gender	required	AdministrativeGender
Patient.address.use	required	AddressUse
Patient.address.type	required	AddressType
Patient.maritalStatus	extensible	Marital Status Codes
Patient.contact.relationship	extensible	PatientContactRelationship
Patient.contact.telecom.system	required	ContactPointSystem
Patient.contact.telecom.use	required	ContactPointUse
Patient.contact.gender	required	AdministrativeGender
Patient.communication.language	preferred	CommonLanguagesMax Binding: AllLanguages
Patient.link.type	required	LinkType

1.5 days FTE + 20% buffer

This ticket can be closed once the ticket #429  is DONE

This needs to be done on refactored code branch. Started on it.

Updated mocks and steps

When you select a family member you will be presented with an empty profile page for the 1st time post registering them

Form the profile page you can mark the female member as an ANC Client. NB. We will need to add a validation check so that only members who fit the ANC criteria will be marked as ANC clients e.g. Must be female, Not a child or male etc.

ANC registration questionnaire will be served to add detail of the Pregnacy this will be saved as a Condition resource . NB. Will need to confirm wether to add the risk factors to an Observation resource

Once the enrollment is complete, show the user an alert and present them with the updated profile page that contains

[ ] CarePlan  - This will be updated once the Workflow API is complete. For now, we can have a placeholder
[ ] ANC Overview   - ANC details collected during ANC Enrollment
[ ] Upcoming services  - based the details from the ANC overview whats the next service based on the care plan

CC @maimoonak @RaaziaTarique @syedowaisali90

This ANC enrollment and adding the pregnancy details  triggers the application of the guideline, resulting in the creation of:

Condition

{
  "resourceType" : "Condition",
  "clinicalStatus" : {
    "coding" : [
      {
        "system" : "http://terminology.hl7.org/CodeSystem/condition-clinical",
        "code" : "active"
      }
    ]
  },
  "verificationStatus" : {
    "coding" : [
      {
        "system" : "http://terminology.hl7.org/CodeSystem/condition-ver-status",
        "code" : "confirmed"
      }
    ]
  },
  "category" : [
    {
      "coding" : [
        {
          "system" : "http://terminology.hl7.org/CodeSystem/condition-category",
          "code" : "problem-list-item",
          "display" : "Problem List Item"
        }
      ]
    }
  ],
  "code" : {
    "coding" : [
      {
        "system" : "http://example.org/tbd",
        "code" : "TBD",
        "display" : "Pregnancy"
      }
    ],
    "text" : "Pregnancy"
  },
  "subject" : {
    "reference" : "Patient/XXX"
  },
  "onsetDateTime" : "XXXX-05-22"
}

Episode of Care

{
  "resourceType" : "EpisodeOfCare",
  "status" : "active",
  "type" : [
    {
      "coding" : [
        {
          "system" : "http://terminology.hl7.org/CodeSystem/episodeofcare-type",
          "code" : "hacc",
          "display" : "Home and Community Care"
        }
      ]
    }
  ],
  "diagnosis" : [
    {
      "condition" : {
        "reference" : "Condition/XXXX "
      },
      "role" : {
        "coding" : [
          {
            "system" : "http://terminology.hl7.org/CodeSystem/diagnosis-role",
            "code" : "CC",
            "display" : "Chief complaint"
          }
        ]
      },
      "rank" : 1
    }
  ],
  "patient" : {
    "reference" : "Patient/XXX"
  },
  "period" : {
    "start" : "XXXX-05-22"
  }
}

Encounter

{
  "resourceType" : "Encounter",
  "status" : "in-progress",
  "class" : {
    "system" : "http://terminology.hl7.org/CodeSystem/v3-ActCode",
    "code" : "TBD",
    "display" : "Home Visit"
  },
  "type" : [
    {
      "coding" : [
        {
          "system" : "http://example.org/CodeSystem/encounter-type",
          "code" : "anc-contact",
          "display" : "Antenatal care contact"
        }
      ],
      "text" : "Antenatal care contact"
    }
  ],
  "subject" : {
    "reference" : "Patient/XXX"
  },
  "episodeOfCare" : [
    {
      "reference" : "EpisodeOfCare/XXX"
    }
  ],
  "participant" : [
    {
      "type" : [
        {
          "coding" : [
            {
              "system" : "http://terminology.hl7.org/CodeSystem/v3-ParticipationType",
              "code" : "PPRF",
              "display" : "primary performer"
            }
          ]
        }
      ],
      "individual" : {
        "reference" : "Practitioner/XXX"
      }
    }
  ],
  "period" : {
    "start" : "XXXX-05-24"
  },
  "diagnosis" : [
    {
      "condition" : {
        "reference" : "Condition/XXX"
      },
      "rank" : 1
    }
  ]
}

Goal

{
  "resourceType" : "Goal",
  "lifecycleStatus" : "active",
  "subject" : {
    "reference" : "Patient/XXX",
    "display" : "Name of ANC Client"
  }
}

CarePlan - To Be Discussed

ANC Enrollment Questionnaire - https://fhir.labs.smartregister.org/fhir/Questionnaire/1770

@f-odhiambo in Family member registration we have a question 'is pregnant' if gender is Female. Do we want to use that well in decision making?n Or alternatively remove that. Also when we mark someone as pregnant we also add a Flag/Tag to their 'Patient' resource to allow querying them directly. Do we want to keep that or remove?

@maimoonak I would propose this to be a classic use case for skip logic. If a patient is checked as pregnant then make visible and ask the ANC enrollment questions i.e (EDD, GA, Foetus count and Risks #288 ) and then save the relevant resources. They would appear in the ANC register and also they would have tags and references to the Condition - Pregnancy, Episode of Care and Encounter.

Are we using StructureMaps to create the Condition, EpisodeOfCare, Encounter, and Goal from the QuestionnaireResponse?
For the scope of this issue, I don't think we need to flag/tag, that can be discussed/completed in an issue for functionality that requires it.

https://github.com/opensrp/fhircore/pull/529 Resolved with this PR


[Storage] Retrieve credentials for batch-copy operations when possible

When copying between two storage accounts within the same subscription, we can attempt to retrieve the storage account keys as needed to perform the operation. This would require you to be logged in and have permission to access the storage account keys.

This would be very nice, as currently we have to generate a SAS separately.
e.g. https://github.com/Azure/azure-cli/issues/1527#issuecomment-272280141


thorchain gg20

@omershlo  Hi Omer this is the code that we applied in our environment, please have a review, thanks.

Awesome!

Awesome!

once this pr is accepted, we have another patch that fix the missing  keygen blame in unicast communication ( VSS share check failure blame), we removed the unicast in keygen(unicast make the blame impossilbe as you do not know whether sender or receiver is the lier) and adding the identifying abort in keygen for the VSS check failure.

Hi @froyobin, I wonder whether you team get this PR audited by third party? If not, we would like to kick off a security review procedure

Hi @froyobin, I wonder whether you team get this PR audited by third party? If not, we would like to kick off a security review procedure

Hi cong, we have not get this pr audited by any party. it would be great if
you can have someone to audit the code.
On Sun, Jan 31, 2021 at 10:13 PM cong<EMAIL_ADDRESS>wrote:

Hi @froyobin https://github.com/froyobin, I wonder whether your team
get this PR audited by third party? If not, we would like to kick off a
security review procedure
—
You are receiving this because you were mentioned.
Reply to this email directly, view it on GitHub
https://github.com/binance-chain/tss-lib/pull/127#issuecomment-770365313,
or unsubscribe
https://github.com/notifications/unsubscribe-auth/ABJNCMFJPNFU6L27ZSI5N63S4U3OVANCNFSM4VH4LCOQ
.

--
Regards,
Bin

Hi cong, we have not get this pr audited by any party. it would be great if
you can have someone to audit the code.
On Sun, Jan 31, 2021 at 10:13 PM cong<EMAIL_ADDRESS>wrote:

Hi @froyobin https://github.com/froyobin, I wonder whether your team
get this PR audited by third party? If not, we would like to kick off a
security review procedure
—
You are receiving this because you were mentioned.
Reply to this email directly, view it on GitHub
https://github.com/binance-chain/tss-lib/pull/127#issuecomment-770365313,
or unsubscribe
https://github.com/notifications/unsubscribe-auth/ABJNCMFJPNFU6L27ZSI5N63S4U3OVANCNFSM4VH4LCOQ
.

--
Regards,
Bin

Hi cong, we have not get this pr audited by any party. it would be great if you can have someone to audit the code.

Thanks for your reply. We will!

@froyobin: PR needs rebase.

Instructions for interacting with me using PR comments are available here.  If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

@froyobin: PR needs rebase.

Instructions for interacting with me using PR comments are available here.  If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

@froyobin: PR needs rebase.

Instructions for interacting with me using PR comments are available here.  If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

@froyobin: PR needs rebase.

Instructions for interacting with me using PR comments are available here.  If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

@froyobin: PR needs rebase.

Instructions for interacting with me using PR comments are available here.  If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

@froyobin: PR needs rebase.

Instructions for interacting with me using PR comments are available here.  If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

@froyobin: PR needs rebase.

Instructions for interacting with me using PR comments are available here.  If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

@froyobin: PR needs rebase.

Instructions for interacting with me using PR comments are available here.  If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

@froyobin: PR needs rebase.

Instructions for interacting with me using PR comments are available here.  If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

@froyobin: PR needs rebase.

Instructions for interacting with me using PR comments are available here.  If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

@froyobin: PR needs rebase.

Instructions for interacting with me using PR comments are available here.  If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

@froyobin: PR needs rebase.

Instructions for interacting with me using PR comments are available here.  If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.


increase mysql pool size for mysql-async

Problem
The build is failing a lot lately.
Solution
Increase mysql async pool size
Checklist

[x] Unit test all changes
[x] Update README.md if applicable
[x] Add [WIP] to the pull request title if it's work in progress
[x] Squash commits that aren't meaningful changes
[x] Run sbt scalariformFormat test:scalariformFormat to make sure that the source files are formatted

@getquill/maintainers

I'm merging this as a hot fix.


Fix the syntax in if_else.sh

The test script if_else.sh has incorrect syntax for an if statement:
$ bash if_else.sh
if_else.sh: line 2: syntax error near unexpected token `then'
if_else.sh: line 2: `if [[ $FOO -eq 1 ]] then'

The correct syntax uses ; before then.
Unfortunately this correct syntax does not parse:
Syntax error:   × Failed to parse input
  ╰─▶ Failure to parse at Pos((2, 16))
   ╭────
 1 │ if [[ $FOO -eq 1 ]]; then
   ·                ┬
   ·                ╰── expected TILDE_PREFIX, UNQUOTED_ESCAPE_CHAR, SUB_COMMAND, or EXIT_STATUS
   ╰────
  help: expected TILDE_PREFIX, UNQUOTED_ESCAPE_CHAR, SUB_COMMAND,
        or EXIT_STATUS

Moving to #167


Can O' Spam: Watch gdfskills.com

Can O' Spam requests the watch of the watch_keyword gdfskills\.com. See the MS search here and the Stack Exchange search in text, in URLs, and in code.

gdfskills\.com has been seen in 1 true positive, 0 false positives, and 0 NAAs.

Approved by Jeff Schaller in Charcoal HQ


Add link to table

On this page, the table of TASK/TOPIC should include a link to a "Create Check Constraints" page. It is conspicuous in its absence.

Document Details
⚠ Do not edit this section. It is required for learn.microsoft.com ➟ GitHub issue linking.

ID: 3709c36d-5f11-41b8-0926-e4549bd2b78e
Version Independent ID: cff4179f-03c9-bba8-b87b-a4e13fb3e919
Content: Unique Constraints and Check Constraints - SQL Server
Content Source: docs/relational-databases/tables/unique-constraints-and-check-constraints.md
Service: sql
Sub-service: table-view-index
GitHub Login: @WilliamDAssafMSFT
Microsoft Alias: wiassaf

Thanks @PhilipKelley. We'll add the link in the next few days.


Issue with the VS Code Extension Debugging Tool: Element Values Not Refreshing Even When Parameters Are Overridden at Runtime

Description:
When debugging a Ballerina service using the VS Code tool, we encountered an issue where the values of local variables were not updated, even though they were modified in the source code. We were debugging a SOAP service invocation and, while debugging the createSoap12HttpRequest method in the ballerina/soap library [1], we noticed that the req object's content-type  header parameter did not update as expected during runtime.
Initially, the content-type is set to "application/xml" after setting the XML body to the req object. However, after executing the following code segment, the content-type parameter still displays as "application/xml" instead of the expected value:

} else if (body is xml) {
    req.setHeader(mime: CONTENT_TYPE, mime: TEXT_XML);
} else {

Refer to the below screenshot for details.

To further investigate, we executed the following code segment in the debugger tool's expression evaluator, which correctly showed the req object's content-type as "text/xml" as expected(please refer to the above screenshot).
req.getContentType()

We then used the debugger tool's expression evaluator to check the req object's entity element, which holds all parameters. We observed that the req object parameters were refreshed correctly after this step.
req.getEntity();

Refer to the below screenshot for details.

We need to verify if this is the expected behavior when debugging Ballerina internal components, such as the ballerina/soap library, or if this indicates an issue with the debugger tool that needs to be addressed.
[1] https://central.ballerina.io/ballerina/soap/1.1.0
Steps to reproduce:

Deploy the attached sample Ballerina service (sampleService.bal.txt). We have renamed it to sampleService.bal.txt in order to attach it to the Git issue.
Start the VS Code debugger tool and place a breakpoint at the following line:

xml response = check soapClient->sendReceive(body, null);

Execute the following curl command to trigger the service invocation.

curl -v  -X POST http://localhost:8080/soapService \
 -H "SOAPAction: urn:getDetails" \
 -H "Content-Type: application/xml" \
 -d '<?xml version="1.0" encoding="UTF-8"?>
 <soapenv:Envelope xmlns:soapenv="http://www.w3.org/2003/05/soap-envelope" xmlns:ser="http://example.com/service">
    <soapenv:Header/>
    <soapenv:Body>
       <ser:GetDetailsRequest/>
    </soapenv:Body>
 </soapenv:Envelope>'

Use the "Step Into" option in the debugger tool until you reach the createSoap12HttpRequest method. Then, use the "Step Over" option to navigate through the method.

Affected Versions:
v4.7.6
OS, DB, other environment details and versions:
Mac OS

Closing this since the issue is moved to the ballerina vs code extension repository.


Kernel dies in Anaconda

Good morning
I'm still have the coronavirus in my set-up:
MacPro (older), HighSierra -> Anaconda (the last version) -> select a Python (3,7) code which on other Macs/Anaconda worked -> RUN -> Kernel dies with the first Import command.
I tried as here suggested:

re-istalled NumPy, directly in Anaconda and also with pip, nothing
hided NumPy some cells lower, nothing
installed some libraries here suggested, nothing

I think it must be an Installation issue, but don't know where the problems could be, thanks for help

@istvan1000,
Is this issue related to TensorFlow?
If not please get in touch with Anaconda support team, they will be able to help you in this case. Thanks!

Well TensoFlow is in the list to import, but the notebook stops earlier.
Anyway, is here in Github an Anaconda support group?

@istvan1000,
The Anaconda Community support page points to the conda Github repo. Please raise an issue in that repo, they should be able to help you in this case. Thanks!

Thank you


Add activity Monitoring tool for the GCP

There are two tools suggested by HITS Devops teams

Nagios
UPTimeRoot

Nagios products costs about 3000$
Uptime basic plan is free, but allows only one team member to get an alert.
To increase team members we should upgrade it 7$/month plan.

I have an update from HITS. Nagios can be set up for free. I have given the details of our API to them and waiting for their reply.


[BUG] Cannot install k3d v5.5.1 using Go 1.20 #1243

What did you do
Cannot install k3d via go install command:
> go version
go version go1.20.5 darwin/arm64

> go install<EMAIL_ADDRESS>go<EMAIL_ADDRESS>(in github.com/k3d-io/k3d/v5@v5.5.1):
        The go.mod file for the module providing named packages contains one or
        more replace directives. It must not contain directives that would cause
        it to be interpreted differently than if it were the main module.

I can successfully install version 5.5.0: go install<EMAIL_ADDRESS>The version 5.5.1 cannot be install due to adding this replace directive in that release:
replace github.com/rancher/wharfie => github.com/iwilltry42/wharfie v0.6.2-iwilltry42.0

source: https://github.com/k3d-io/k3d/compare/v5.5.0...v5.5.1#diff-33ef32bf6c23acb95f5902d7097b7a1d5128ca061167ec0716715b0b9eeaa5f6R40
What did you expect to happen
k3d will be installed
Which OS & Architecture
MacOS Ventura 13.4.1 (Apple silicon M2 Max)

Should be fixed with v5.5.2, right?
If not, feel free to reopen.

Yes, now it works correctly with 5.5.2. Thanks!


Features Roadmap

Is there any feature roadmap? e.g. Linked Data Signatures support

Probably best to build Linked Data Signatures support as a separate library that uses this one. The two are connected, but LDS is far more constraining (by design) than JSON-LD is as a syntax (or even API).
It would be good to see a LDS for Go library, though!

@BigBlueHat we have support for LDS (2015 flavour) internally, but haven't exposed it in a public library. For 2 reasons:

we were waiting for the new standard to do it and also add support for the LDS test suite
we use a content-addressable signature scheme (entity id is derived from the normalised form of a signed document, with caveats. This requires a bit of untangling before adding to the library :-)

Anyway, it's a good suggestion. LDS is great.

Thanks for this great lib for JSON-LD. I too am waiting for signature support and was wondering if you have any updates?

@johnptoohey as there is a clear demand for it, I'll try to find time over next few weeks and raise s PR.

@kazarena That would be great. Will that support LD Proofs or the original LD Signatures? Thanks again.

@johnptoohey we will be supporting (roughly) the same functionality as https://github.com/digitalbazaar/jsonld-signatures. I believe it supports both the original style of signatures and LD proofs.
I have the general framework and Ed25519 support implemented. It took a lot longer because we realised LD signatures require JSON-LD 1.1, which we didn't support. Will put up a PR sometime next week.

@johnptoohey a quick update: JSON-LD Signatures development was put on hold because it depends on JSON-LD 1.1 spec, but the Java implementation of JSON-LD doesn't support it. As a result, we can't use it, and it dropped down the priority list (we use Go, Java and JS in our platform and we need an ability to sign and validate signatures on all three architectures). I'll try to release limited support for the JSON-LD Sig spec sometime this spring. Apologies for the unplanned delays.

FYI JSON-LD Signatures in Go (makes use of json-gold): https://github.com/hyperledger/aries-framework-go/tree/master/pkg/doc/signature

@troyronda thank you for the link. It will help us to either rely on the Aries implementation of JSON-LD signatures or build our own.


Error in GraphQL doc

Link for "to create your own adapter" returns als 404 in https://docs.vuestorefront.io/guide/basics/graphql.html

@aimeos Does this mean there's development for an aimeos adapter underway? I tried searching but only came upon this.

@carmanchris31 We well definitively build a GraphQL interface for Aimeos. It's unclear if there will be an adapter for vue-storefront because vue-storefront is implemented extremely tight to the Magento data model. This makes it very difficult to integrate of what Aimeos is capable. Maybe if @pkarw and @filrak would switch to a much more general data model for vue-storefront.


Update meetings frequency and URLs

Looks like this meetup is closed, so it was removed on master, and this PR is no longer applicable.


[Fix #8035] Fix a false positive for Lint/DeprecatedOpenSSLConstant

Fixes #8035.
This PR fixes a false positive for Lint/DeprecatedOpenSSLConstant when argument is a variable, method, or constant.
% cat example.rb
MODE = 'cbc'
OpenSSL::Cipher::AES256.new(MODE)

% bundle exec rubocop --only Lint/DeprecatedOpenSSLConstant -a
(snip)

Offenses:

example.rb:2:1: W: [Corrected] Lint/DeprecatedOpenSSLConstant: Use
OpenSSL::Cipher.new('AES-256-MODE') instead of OpenSSL::Cipher::AES256.new(MODE).
OpenSSL::Cipher::AES256.new(MODE)
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

1 file inspected, 1 offense detected, 1 offense corrected

% cat example.rb
MODE = 'cbc'
OpenSSL::Cipher.new('AES-256-MODE')

RuboCop does not have a tracing feature a value of variable, (method,) and constant yet.
This PR accepts cases where these values are used to prevent auto-correction mistakes.
On the other hand, this change produces false negatives for the deprecated APIs.
If it is difficult to accept false negatives, I will update this PR to warn against these cases and auto-correction will not performed.

Before submitting the PR make sure the following are checked:

[x] Wrote good commit messages.
[x] Commit message starts with [Fix #issue-number] (if the related issue exists).
[x] Feature branch is up-to-date with master (if not - rebase it).
[x] Squashed related commits together.
[x] Added tests.
[x] Added an entry to the Changelog if the new code introduces user-observable changes. See changelog entry format.
[x] The PR relates to only one subject with a clear title and description in grammatically correct, complete sentences.
[x] Run bundle exec rake default. It executes all tests and RuboCop for itself, and generates the documentation.

Thanks!


Fixed deprecation of swift v3 selectors

Added new API reference according to specification.
https://github.com/apple/swift-evolution/blob/master/proposals/0022-objc-selectors.md

Thanks 👍


Chart for kube-consul-register

What this PR does / why we need it:
This PR adds chart for kube-consul-register.
kube-consul-register is a tool to register Kubernetes Pods to Consul.

gentle ping.

/assign @linki

A gentle reminder to check this

Can this be reopened? @mattfarina

I would be happy to rebase with master make a few improvements like changing Replicaset to Deployment.


Splitter handle issue on Slide Over

Splitter handle cannot be used  after is snapped on the right side of iPad screen because of Slide Over.

Thanks for the feedback.
We need to enlarge the draggable area when snapped on a side.


iOS: Crash on opening notifications

I just moved to the TestFlight build and notifications work again. So when I tapped on a couple I had some issues.
The first notification re-opened NewsBlur, which was on a different feed and story. So the app backed out to the feed list and then crashed.
The second notification opened NB and simply didn't open the feed.
I recommend installing the TestFlight build and turning on some chatty feeds so you have plenty of notifications in your notification history to test with. I could fix notifications on Xcode builds by using a different certificate. In fact, I thought I did fix it by setting a user profile flag that uses the other certificate, but it seems to not be working.

It's like every notification for me. I can't get any notifications to load at all, in fact. Often there's a crash after the feed list loads but before the feed is opened. But just as often it sits at the feed list. Every fifth time it opens the story, but the feed is (null).

Issues like this are frustrating, where I don't experience the problem 99% of the time... and the few times I have experienced something, the debugger doesn't stop in a way that helps diagnose it.
I've committed a couple of tweaks that might help, and will keep trying, but I've been through about 50 notifications last night and as many again just now, with a couple of issues last night, and zero just now — every time it correctly loads the feed and story.
It's a lot slower with the debugger attached, which maybe could contribute to it being more reliable... so I tried running without Xcode, and it still worked. Frustrating.
Perhaps you could try running from Xcode and see if you can get it to crash, and provide the backtrace of where. I might be able to add some logic to avoid that, even without reproing it myself.

I noticed that stories are never found when the app is starting cold. Try force quitting it and then opening a notification.

Also, if you want a high volume feed for testing notifications but don't want something obnoxious, I've found Axios to be a neutral and prolific publisher. Lots of news and becuase its RSS, it never feels goosed, unlike notifications from newspapers.

So I'm not getting a crash but when I opened a notification on today's build, I caught this exception (and nothing happened):
2021-06-02 16:15:41.998678-0400 NewsBlur[17651:2396639] ⚠ showing story pages: split view controller: <NewsBlur.SplitViewController: 0x13bd0b1b0> split nav: (null); split controllers: (
    "<UINavigationController: 0x13c019000>"
); detail controller: <NewsBlur.DetailViewController: 0x13bd11020>; detail nav: <UINavigationController: 0x13c85a600>; detail nav controllers: (
    "<NewsBlur.DetailViewController: 0x13bd11020>"
)
2021-06-02 16:15:41.998792-0400 NewsBlur[17651:2396639] ...shown
2021-06-02 16:15:42.284247-0400 NewsBlur[17651:2396639] WF: _userSettingsForUser mobile: {
    filterBlacklist =     (
    );
    filterWhitelist =     (
    );
    restrictWeb = 1;
    useContentFilter = 0;
    useContentFilterOverrides = 0;
    whitelistEnabled = 0;
}
2021-06-02 16:15:42.284295-0400 NewsBlur[17651:2396639] WF: _WebFilterIsActive returning: NO
2021-06-02 16:15:42.286220-0400 NewsBlur[17651:2396639] WF: _userSettingsForUser mobile: {
    filterBlacklist =     (
    );
    filterWhitelist =     (
    );
    restrictWeb = 1;
    useContentFilter = 0;
    useContentFilterOverrides = 0;
    whitelistEnabled = 0;
}
2021-06-02 16:15:42.286264-0400 NewsBlur[17651:2396639] WF: _WebFilterIsActive returning: NO
2021-06-02 16:15:42.287033-0400 NewsBlur[17651:2396639] WF: _userSettingsForUser mobile: {
    filterBlacklist =     (
    );
    filterWhitelist =     (
    );
    restrictWeb = 1;
    useContentFilter = 0;
    useContentFilterOverrides = 0;
    whitelistEnabled = 0;
}
2021-06-02 16:15:42.287068-0400 NewsBlur[17651:2396639] WF: _WebFilterIsActive returning: NO
2021-06-02 16:15:42.288587-0400 NewsBlur[17651:2396639] WF: _userSettingsForUser mobile: {
    filterBlacklist =     (
    );
    filterWhitelist =     (
    );
    restrictWeb = 1;
    useContentFilter = 0;
    useContentFilterOverrides = 0;
    whitelistEnabled = 0;
}
2021-06-02 16:15:42.288628-0400 NewsBlur[17651:2396639] WF: _WebFilterIsActive returning: NO
2021-06-02 16:15:42.291232-0400 NewsBlur[17651:2396639]  ---> Loading feed url: https://beta.newsblur.com/reader/feed/7500936/?include_hidden=true&page=2&order=newest&read_filter=all
2021-06-02 16:15:42.363357-0400 NewsBlur[17651:2396639] showStoryImage for row 3 of 6
2021-06-02 16:15:42.369554-0400 NewsBlur[17651:2396639] WF: _userSettingsForUser mobile: {
    filterBlacklist =     (
    );
    filterWhitelist =     (
    );
    restrictWeb = 1;
    useContentFilter = 0;
    useContentFilterOverrides = 0;
    whitelistEnabled = 0;
}
2021-06-02 16:15:42.369613-0400 NewsBlur[17651:2396639] WF: _WebFilterIsActive returning: NO
2021-06-02 16:15:42.385376-0400 NewsBlur[17651:2396639] WF: _userSettingsForUser mobile: {
    filterBlacklist =     (
    );
    filterWhitelist =     (
    );
    restrictWeb = 1;
    useContentFilter = 0;
    useContentFilterOverrides = 0;
    whitelistEnabled = 0;
}
2021-06-02 16:15:42.385424-0400 NewsBlur[17651:2396639] WF: _WebFilterIsActive returning: NO
2021-06-02 16:15:42.436795-0400 NewsBlur[17651:2398129] [connection] nw_endpoint_handler_set_adaptive_read_handler [C412.1 <IP_ADDRESS>:443 ready channel-flow (satisfied (Path is satisfied), viable, interface: en0, ipv4, ipv6, dns)] unregister notification for read_timeout failed
2021-06-02 16:15:42.436843-0400 NewsBlur[17651:2398129] [connection] nw_endpoint_handler_set_adaptive_write_handler [C412.1 <IP_ADDRESS>:443 ready channel-flow (satisfied (Path is satisfied), viable, interface: en0, ipv4, ipv6, dns)] unregister notification for write_timeout failed
2021-06-02 16:15:42.439175-0400 NewsBlur[17651:2398129] [connection] nw_endpoint_handler_set_adaptive_read_handler [C413.1 <IP_ADDRESS>:443 ready channel-flow (satisfied (Path is satisfied), viable, interface: en0, ipv4, ipv6, dns)] unregister notification for read_timeout failed
2021-06-02 16:15:42.439217-0400 NewsBlur[17651:2398129] [connection] nw_endpoint_handler_set_adaptive_write_handler [C413.1 <IP_ADDRESS>:443 ready channel-flow (satisfied (Path is satisfied), viable, interface: en0, ipv4, ipv6, dns)] unregister notification for write_timeout failed
2021-06-02 16:15:42.467983-0400 NewsBlur[17651:2396639] *** Terminating app due to uncaught exception 'NSInvalidArgumentException', reason: 'Cannot display a nested UINavigationController with zero viewControllers: <UINavigationController: 0x13c82c800>'
*** First throw call stack:
(0x19b5dd754 0x1b00a47a8 0x19b4d27e0 0x19d7e4708 0x19d7e52f4 0x19d7e4f88 0x19d8d0df4 0x19d8cd3a8 0x19d8cd084 0x19d8e35f8 0x19e500b80 0x19e4d31f8 0x19e4d375c 0x19e4d38c4 0x19e9a98ec 0x10535dde0 0x10536e0a8 0x19b557398 0x19b551270 0x19b550360 0x1b2b8e734 0x19dfcb584 0x19dfd0df4 0x104d4b09c 0x19b20ccf8)
libc++abi: terminating with uncaught exception of type NSException
*** Terminating app due to uncaught exception 'NSInvalidArgumentException', reason: 'Cannot display a nested UINavigationController with zero viewControllers: <UINavigationController: 0x13c82c800>'
terminating with uncaught exception of type NSException

This was on my iPhone SE

I spent some more time on this, without any success reproducing it, or narrowing down where it failing, though it seems to be when showing a split column.
So I added more debug logging to try to trace the issue you found. If you experience an exception like that again, please include the logging.
If you can provide the dSYM file from the TestFlight build archive, that might help too.

I'm really noticing the problem on my iPhone, so split screen shouldn't be a part of it. I do notice that when there's no feeds loaded (on a cold start for instance, which is basically when I don't use the app for an hour), the notification invariably fails to load the story, even when the feeds come in.

Alrighty, after much more testing, tracing logic, and managing to reproduce an issue on my iPhone, I think (hope) I've finally fixed this. I'm going to optimistically close this, but you can of course re-open with more info if you still experience an issue with notifications.


Client refresh on file upload

Hi,
I've a little issue with CollectionFS.
I'm using the FileSystem storage adaptator and it works well ! When I insert a file (client-side) it goes into my folder but after each insertion, the client is refreshed.
Here is some parts of my code if that can help :
//client-side
const field = document.getElementsByName('avatar')[0];

Avatars.insert(field.files[0], function (err, fileObj) {
    if (err) {
        //invalid file
        console.log(err);
    } else {
        console.log(fileObj);
    }
});

//server-side
Avatars = new FS.Collection("avatars", {
    stores: [
        new FS.Store.FileSystem("original", { path: `${Meteor.settings.public.folder}/images/user/avatar/original` })
    ],
    filter: {
        maxSize: 1000000,
        allow: { contentTypes: ['image/*'] }
    }
});

Maybe this is caused by a reactive data source ?

It refreshed because you put it into the meteor app's folder. Any changes in the meteor app's folder trigger a refresh.

Okay, thanks.
Using Meteor, is it a better practice to save the files on a cloud like the S3 ? Saving uploaded files elsewhere than the app/public folder seems weird.

You can think of the meteor app folder as everything your app needs to run. Uploaded content or any data that gets added later, be it files or database entries, should be seen as their own environments. As soon as you run in production you will for example need a mongodb server somewhere. Storing your files in S3 or directly in mongodb (GridFS) you are able to update your app without overwriting any data. You can even run multiple intances of your app at the same time without having to sync files around. As you already going to need a mongodb, GridFS is the quick and easy choice. And if you don't do file transforms you can even deploy on meteor.com and have your data persistent.

Okay, now I get more how Meteor works. Thanks a lot for those clear answers.
I have one last question :

Does storing files in MongoDB with GridFS does mean loosing some performance ?  I'll never store an image into a SQL database or something like that. This is not really clean.

Will using a distant service like the S3 slow down image loading ? (Because the file aren't saved locally, so there is a retrieve time). Is it a good idea to use things like service workers to cache those files client-side and gain some performances ? (But I think that Meteor have this technology in its core to be able to render sites offline)


Use $GITHUB_OUTPUT instead of depecrated set-output

Description
set-output is deprecated and will be removed starting 1st June 2023 (see)
$GITHUB_STATE need to be used instead

Thank you ❤


Restore username route

username route still used by search
https://github.com/stolostron/backlog/issues/27047

/cc @Randy424 @RobDolares


Request funds - reCaptcha

As a user of https://faucet.okp4.network/,
I want to encounter a reCAPTCHA challenge when I click on Send me KNOW button in both Request funds with OKP4 address and Request funds with Keplr sections ,
So that the system can verify that I am a human user and prevent spam or malicious fund request.
Scenario 1: Clicking on Send me KNOW button triggers a reCAPTCHA challenge
Given that I am on https://faucet.okp4.network/ with Send me KNOW buttons that requires user verification,
When I click on the designated button,
Then I should be presented with a reCAPTCHA challenge on the section of the button.
Scenario 2: Successfully completing the reCAPTCHA challenge
Given that I am presented with a reCAPTCHA challenge after clicking Send me KNOW button,
When I interact with the reCAPTCHA challenge, such as selecting images or entering text as instructed,
Then the system should verify my human identity and proceed with fund request.
Scenario 3: Failed attempt to complete the reCAPTCHA challenge
Given that I am presented with a reCAPTCHA challenge after clicking Send me KNOW button,
When I attempt to complete the challenge but fail to pass the verification,
Then I should be notified about the failure and provided with an option to try again.
Scenario 4: Cancelling the reCAPTCHA challenge
Given that I am presented with a reCAPTCHA challenge after clicking Send me KNOW button,
When I choose to cancel or skip the challenge,
Then the system should prevent fund request and maintain the current state without proceeding further.
Scenario 5: Accessibility considerations for reCAPTCHA challenge
Given that I have accessibility needs,
When encountering a reCAPTCHA challenge,
Then the system should provide an alternative mechanism or option to ensure accessibility, such as an audio challenge or an option for alternative verification methods.

@ChaimaaZaoui @ccamel  To clarify which version do we want to use for the reCAPTCHA? The specifications are in line with v2 where you're confronted with a challenge but I know we've talked about implementing v3.
V3 doesn't require a challenge for verification and instead works on a point system, judging the users behaviour on the whole site and if necessary prevents action from being taken.
https://developers.google.com/recaptcha/docs/versions?hl=en
https://www.thecrazyprogrammer.com/2020/04/recaptcha-v2-vs-v3.html

@ErikssonJoakim we are going to use the recaptcha V2.
here are some faucets that use it as well :

https://www.coinpayu.com/register
https://firefaucet.win/
https://cointiply.com/

Test 20/06
All scenario passed ✅


Note for vuetify

If you want to use Vuetify you should use a-la-carte, and do the following as an example:
import styled from 'vue-styled-components'

import VBtn from 'vuetify/es5/components/VBtn'

const AppBtn = styled(VBtn.options)`background: red`

export default AppBtn

Thank you for reporting.


Use Babel 6 plugin api

cc @mitsuhiko

Most of my changes were based off of: https://github.com/jruchaud/babel-gettext-plugin/commit/a60014d52df8856e019e18f8f8c1360f5b0e862a

Not that I ran it but it seems reasonable.


update packages

:white_check_mark: Build TheIdServer 2.3.1-fix-dependencies1-0074 completed (commit https://github.com/Aguafrommars/TheIdServer/commit/f55e912f86 by @)


Explaination about these example

It is great collection. Beginners do not understand why example gives unexpected result. Can you please give explanation about it for each example?

Look at this issue https://github.com/miguelmota/javascript-idiosyncrasies/issues/9


Insights page - Misc fixes

Fix fonts, padding, margin
Fix structure of the page so it's easy to author
Just try to make all these pages as similar to what we have on the live site

Sample Page :

https://maestro.maark.com/insights/feeding-the-data-hungry
https://maestro.maark.com/insights/maestro-webinar

Fixed with #75


Analytics not showing up

I have succesfully installed Shynet behind a reverse proxy. I have created a new service, added the snippet to my site but I don't see any analytics showing up on the interface.
I do see the snippet being loaded on my site, and I see requests being made every 5000ms (hearthbeat value).

This looks a lot like what was encountered in #11. Could you check if your Celery settings are correct? It could very well be that your settings for Celery should be set to be eager. Take a peek at the end of the thread and see if that solves it.

This looks a lot like what was encountered in #11. Could you check if your Celery settings are correct? It could very well be that your settings for Celery should be set to be eager. Take a peek at the end of the thread and see if that solves it.

The Celery settings are commented out, should I uncomment them?
Redis and queue settings; not necessary for single-instance deployments.
Don't uncomment these unless you know what you are doing!
REDIS_CACHE_LOCATION=redis://redis.default.svc.cluster.local/0
If CELERY_BROKER_URL is set, make sure CELERY_TASK_ALWAYS_EAGER is False and
that you have a separate queue consumer running somewhere via `celeryworker.s$
CELERY_TASK_ALWAYS_EAGER=False
CELERY_BROKER_URL=redis://redis.default.svc.cluster.local/1

Abd you're sure you have the latest docker image?
From my very limited knowledge (I only started using this yesterday) it'd seem to me as if the webinterface triggers a worker as well, but I'm not sure if that's the case.

Abd you're sure you have the latest docker image?
From my very limited knowledge (I only started using this yesterday) it'd seem to me as if the webinterface triggers a worker as well, but I'm not sure if that's the case.

Yup, running 0.3.0

Alright, then I'm officially out of my depth. ;-)

I'm going to add a "Troubleshooting" section to GUIDE.md that will hopefully help in situations like this. If all your cache settings are correct and CELERY_TASK_ALWAYS_EAGER is either unset or set to True, then the only other thing I can think of going wrong is that your browser has Do Not Track enabled and Shynet is ignoring those requests. Do you still experience this issue when you disable DNT support for the service?

@milesmcc
What cache settings do I need to have set?

The defaults are fine if you're running Shynet on a single instance, so the best answer I can give without knowing more details about your setup is "either none of them or all of them" (i.e., if you have nothing in your env file that mentions Celery/cache/redis, that's fine).
When the browser sends the POST requests, do they stay pending or do they resolve?

By the way, I just published a small troubleshooting guide, if that's any help: https://github.com/milesmcc/shynet/blob/master/GUIDE.md#troubleshooting

This is identical to what I saw in #11
If I had two tabs open, one with the site to be tracked + ShyNet, when waiting for the POST request to be filled, ShyNet UI was completely locked up.

If you inspect the webpage, do you see any response to the POST request?
If you double click the OPTION method in the inspector, within xhr.open( does it contain the correct domain name?
I set CELERY_TASK_ALWAYS_EAGER=False, stopped, removed and restarted the latest container, then completed the same sequence with True. This seemed to fix the issue.

What @JXGA describes is a consequence of what happens when Shynet is trying to process a request but is configured to use an external task queue. It tries looking for the task queue (and waits for it to become available), but it never does—and therefore it hangs. Setting CELERY_TASK_ALWAYS_EAGER tells Shynet that there is no external task queue, and to just do everything itself.
Because session ingress also requires caching (in order to link hits across requests), a misconfigured/disconnected cache can also cause this issue.


Using Skaffold and LocalStack to Develop Cloud Applications Locally

Hi Gergely,
thank you for your intro to localstack. What do you think, what is currently the best workflow for developing serverless apps on AWS?
Thanks,
Dimitri

Hi Dimitri,
thanks! For serverless, I'd use the Serverless Framework
I hope that helps!

Hello @gergelyke ,
In your original article you mentioned "Should each developer create a development environment for themselves in the cloud?" and answered that there is a drawback to this method, can you elaborate a bit more ? Is it complicated ? does it cost a lot of money ? What are the main obstacles for a developing firm to this that method ?
Thank you

Hi @efi-mk!
There can be a list of drawbacks for setting up development environments for everybody in the cloud:

it can become costly,
it will be challenging to keep it updated (afaik, there is no off-the-shelf solution for this, you have to build your own)

I hope this answers your question! Please let me know if it did not, and I am happy to provide more details.

Thank you @gergelyke, I completely agree, but I have couple of problems with using only localstack for testing:

It does not pose all the limitations that a native environment has
It's not updated with the latest api changes
What should I do in case I use a service that is not listed there like image recognition or NLP capbilities

For me it looks like testing in the actual native serverless environment is a must before actual deployment. Makes sense ?
Do you think that off-the-shelf solution would make tools like LocalStack obsolete ?

Hi @efi-mk - yeah, that makes sense, I agree with your concerns. As i see, you have to distinguish between local development versus automated testing.
For local development, I'd use LocalStack with Skaffold - for automated testing, I'd provision everything on AWS, and run the functional tests on that infrastructure.
Does that make sense?

Makes sense. @gergelyke is there a way to contact you directly? I have couple of questions regarding your testing methodology.
Thank you for your advice

My DMs are open on twitter: https://twitter.com/nthgergo

Hi @gergelyke. Thank you for a very helpful post. I was able to get the localstack running with skaffold v0.29, but I don't see any logs in the output, even though I set the `DEBUG env var (see below) and I've confirmed that this var is set in the container too. Any idea how to get to the localstack logs? Thank you.
     env:
            - name: SERVICES
              value: 's3:30572,lambda:30574'
            - name: PORT_WEB_UI
              value: '32000'
            - name: DEBUG
              value: '1'

I think I got it going. Looks like in order to for logs to start showing up in skaffold output, the Docker image must be built by skaffold itself, even if the Dockerfile contains just one line:
FROM localstack/localstack

hi @demisx - glad to hear that you liked the post! Since the writing of the article, I've barely used localstack, so I am not sure if I can help, I am sorry

@gergelyke Yeah, I've got the log part going, but it's not a smooth ride switching endpoint from AWS to localstack. And lack of documentation doesn't help either. I see errors popping up left and right and my AWS usage is very light. Did you find a better alternative to the localstack by any chance?

Can Scaffold or the more recent LocalStack get round issue of supporting multi regions these days? If not can anyone suggest a good alternative to these in order to cater for multi regional setups? Thanks


unfreeze akka-http and run tests

queued: https://scala-ci.typesafe.com/view/scala-2.12.x/job/scala-2.12.x-integrate-community-build/4915/

https://scala-ci.typesafe.com/view/scala-2.12.x/job/scala-2.12.x-integrate-community-build/4924/

fyi @patriknw

thanks


Add linters and formatters

Use github actions to lint and format during the PR phase.
Add instructions to CONTRIBUTING.md on how to setup and run locally.

Added in #36


Jetstream Cluster

Hi there,
Seems like Jetstream doesn't have any work towards clustering yet? Would be good to understand and potentially help towards this. Not sure how usable this could be as a single machine, but loving the concept.
I wonder if you could easily setup a cassandra/druid/san data store for example? Cassandra supports tombstoning so might be a great choice. Though SAN/NAS might work right now esp if the stream is append only (apart from cleanup)?
Thanks
Andrew

At present while in Tech Preview we have a single server release, we are focussing on getting the programming model, behaviour and features right, we should ship a single server solution in NATS 2.2.0
That point signals a place where we are happy to say the API and behaviour is stable, at which point we'll turn our efforts to clustering with an eye for wider general GA that will include clustering around Q3

Wonderful thanks, let me know if you guys need a hand or want to share in conversations.

At the moment we would really welcome any feedback on the features, behaviour and usability of the single node preview. Once merged to master fixing weirdness is much harder :)

Interesting approach, I found that InfluxDB was completely unusable as they didn't consider query sizes in the beginning. Hoping and trusting you guys get the replays right. I really like the way the current beta is working (just hope it scales!).

Also would hope you store the resulting data in Arrow. Everything of worth I know is moving to it in the next 6 months. Zero copy amongst clustered apps is going to be the next big thing.

This has been released