'/csrf' 401 and '/' 404 when loading swagger-ui.html

[ ] What version of the library are you using?
It is the latest version.

What kind of issue is this?

[ ] Support needed. @dilipkrish

Additional details:

Browser: Google Chrome
IDE: IntelliJ IDEA: Ultimate 2019.2
Java: 1.8
Spring Boot: Latest - 2.2.1
Spring Boot Stater Security: Latest - 2.2.1
Spring Security Test: Latest - 5.2.1

When I try to load http://localhost:server.port/swagger-ui.html page loads but with inspect I see this two bad requests:

On server side it throws an exception: org.springframework.security.access.AccessDeniedException: Access is denied.

I tried with debug mode and it looks like the problem is in: JwtAuthenticationFilter -> doFilterInternal(...) -> filterChain.doFilter(request, response);.
Also bearerToken is null.
I tried to follow this tutorial: Part1 and Part2 and add Swagger to the project.
I am not sure if this is a normal behavior.
I also checked some similar issues on this channel also on stackoverflow like this with no result.

In #2639 I found a comment of @matthewh86 where he bypassed server side errors by adding .antMatchers("/", "/csrf").permitAll() to HttpSecurity http but how he said if feels like

hacky

Also I still have this two errors in browser:

csrf is disabled for http and I have an AuthWhiteList for
// -- swagger ui
"/swagger-resources/**",
"/swagger-ui.html",
"/v2/api-docs",
"/webjars/**",
"/configuration/ui",
"/configuration/security"

Hi, were you able to solve this? Having a similar issue with 401s for my springfox-swagger ui files regardless of my security config.

@rsteaburdea

Hello @GaganBhat I did that workaround, could't find any other solution.
If you find a fix please add it here to close this issue.

For everyones benefit, outside of the permit all fix for the 401 error, the reason we see the 404 is that the /csrf endpoint doesn't exit. The only reason for its existence is to return a cookie based csrf token that swagger ui uses.


Fix incorrect pluralisation of 'human' - add human/humans to tests

Hi,
I ran into this today.  Human is incorrectly pluralised as 'humen' - I checked and this error also exists in the rails implementation.
The simplest fix seems to be to call irregular after the rule for man/men has been added.

Thanks!


Remove temporary streams when finished

Currently all temporary streams are saved and never removed

This one should be a priority
Thanks in advance!


The "null" ClassLoader is the bootstrap ClassLoader

Motivation:
Class.forName() documents that null will use bootstrap loader:
http://docs.oracle.com/javase/8/docs/api/java/lang/Class.html#forName-java.lang.String-boolean-java.lang.ClassLoader-
But the link between "null" and bootstrap loader is even more explicit
in ClassLoader's documentation:
http://docs.oracle.com/javase/8/docs/api/java/lang/ClassLoader.html#getParent--
The current code is trying to use the bootstrap loader but seems to have
not been aware of the meaning of null.
Modifications:
Use "null" as the class loader when we want to load classes in the
bootstrap loader.
Result:
More reliable ALPN/NPN loading and simpler code.

AUTOMATED MESSAGE for ADMINS:Please verify and accept the pull request.To accept, say @netkins acceptTo build again, say @netkins buildTo whitelist the author, say @netkins whitelist

@netkins whitelist

@ejona86 good work!
Cherry-picked into 4.0 (6668b3c40df19c8b05acdead7dd46587185cf41a), 4.1 (4e70523eddb94bfbcaa3ac12fe43435e90692df3) and master (772482559db96598be0663dde7fa8221b2e69d04)


Query Builder

A static expression builder for MongoDB queries that allows compile-time type and syntax checking.
Note: right now this involves a macro to register members and their names, separate from Cereal's serialize function, which could seem redundant to users. Perhaps we'd be able to make a macro that does both at once?

I need to take one more look at the templates, but looking really good!

I have a question left about the macro that generates serialize, and I want to wait for @hanumantmk to take a look at nvp.hpp, but pending those this looks good!

lgtm % conversation about type trait for IsNvp and sfinae for operators

I'll add the is_nvp type traits stuff to a separate pull request, which includes the nested subfield access code as well, since without nested subfields, I can explicitly specify Nvp<Base, T> in the operator functions. So it's not an issue in this pull request.

LGTM


Reload yabai without restarting it

I noticed that if I attach/detach a monitor from my laptop, yabai is not to moving the windows to their assigned space. The only way to achieve this is to restart yabai after the display change event.
I guess this is because MacOS changes the space indexing after a display event or something like it.
I was wondering if there is a way to tell yabai to "reload" without restarting it. Ideally I would like to do something like this:
yabai -m signal --add event=display_added action="sleep5 && yabai --reload && do_a_bunch_of_other_things"
yabai -m signal --add event=display_removed action="sleep 5 && yabai --reload && do_a_bunch_of_other_things"
Is there a way to achieve something like this already? I have tried to fully restart yabai inside the event action, but that cannot really work as the action is basically interrupted by the yabai restart and do_a_bunch_of_other_things is never executed.
FYI I cannot enable the scripting addition on this system, maybe that already solves this issue.

I have something similar happen whenever my Mac Studio wakes from sleep. It as a Studio display as main and UHD secondary display attached. I don't have a solution, instead have an alias yrs to yabai --restart-service. 😅

Not sure what is meant by reload; which part of yabai logic is it that you are interested in triggering?
I'd personally just write my config as a series of scripts in a way that would let me set up a given state on demand.
You can have general settings, signals and rules defined in separate files, that are all sourced from the main file.
When you want do to a "reload" you can delete existing signals/rules and re-run the proper files etc.

Thanks for the detailed answer. I managed to reach my goal by making the script logic a bit more predictable.

Maybe this?
yabai -m signal --add event=display_added action="sleep 5; killall yabai"


[Feature Request]: Virtual Machine: make extensionDSCConfig secure

Description
The parameter extensionDSCConfig  object in the bicep-module for virtual machine is not secure. Therefore the password in the object under protectedSettings.configurationArguments.RegistrionKey.Password is not secure en will be visible when deploying.
In the module Virtual Machine the protected settings will process to the extension module and in the extension module the protectedSettings parameter is secure. But not in the module Virtual Machine.

Hey @rahalan,
I just migrated this issue over from CARML. Please take a look and triage if still relevant :)


Pr/32075

Database backend for MariaDB Connector/Python.
It will require mariadb 1.0.3 which can be downoaded from PyPi.org

Closing per comment on ticket-32075.


[minor] typo: duplicated space

Removed duplicated space in line 65 before 'Allows'

Can one of the admins verify this patch?

Thanks for keeping an eye out for typos, but I'd rather not spend time fixing these double-space issues. I realize that the PC is not a typewriter but old habits die hard and I think it's going to be an endless game of wackamole to fix these, cluttering up the commit logs without really aiding readability.

Yes, do you mind closing this PR?


Changed button pagination

Change button pagination for more user friendly and use discord-buttons
preview.
https://cdn.discordapp.com/attachments/840619319921737750/870009196173738074/2021-07-28_14-25-11.mp4
usage

 let embed1 = new Discord.MessageEmbed() // the first embed
		.setTitle("1")

		let embed2 = new Discord.MessageEmbed() // the second embed
		.setTitle("2")

		let pages = [embed1, embed2] // putting the embeds into an array to paginate

		await ultrax.ButtonPaginator({
			message: message, // the discord message
			embeds: pages, // Array of embeds
			button1: {
				label: '<<', // the label of the back button
				style: 'gray', // discord button style
			},
			button2: {
				label: '>>',  // the label of the forward button
				style: 'gray', // discord button style
			},
			timeActive: 10, // the time that the buttons are valid, in MS
			setDisabled: true, // should the buttons be setDisbaled after the allocated time
			invalidUser: {
				ephemeralReply: true, // should the reply be ephemeral if the button clicker is not the message author
				message: 'only the message author can use the buttons!', // the message to be send when such event occurs
			}
		});```

a lot of ppl getting err whilst running old pagination so changed it

But why use, the "discord-buttons" package? It is going to be outdated in v13. And there should be our buttons system, with raw api requests.

This PR would fail anyways. You should refrain using discord-buttons

I'll merge it but you don't check if user has package or no, so you're forcing someone to download discord buttons to use ultrax package

I think using external packages to simplify such a small thing is not needed and can be done with raw API.

we don't need another package, it's just useless.


fix(theme): replace style-inject(ion) workaround with @backstage/cli update

Hey, I just made a Pull Request!
Fix a style-inject(ion) issue with the published package that I noticed in https://github.com/janus-idp/backstage-showcase/pull/2033
See build log: https://github.com/janus-idp/backstage-showcase/actions/runs/12196430482/job/34023993902?pr=2033
Solved issue by updating @backstage/cli to a version that includes https://github.com/backstage/backstage/pull/27547
:heavy_check_mark: Checklist

[x] A changeset describing the change and affected packages. (more info)
[ ] Added or Updated documentation
[ ] Tests for new functionality and regression tests for bug fixes
[ ] Screenshots attached (for UI changes)

#202 will address this issue in a much better way.


Incremental dataset updates are not actually incremental

Issuing an incremental update will result in a training set that doubles in size...

I believe this was fixed at some point.


Fix Code Coverage for JSX files

What this PR does / why we need it:
Changed to inline source maps for jest
Which issue(s) this PR fixes:
Fixes #267

 Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.You have signed the CLA already but the status is still pending? Let us recheck it.


Version and linkage foo between crates.io and GitHub

Hi,
thanks for the crate, great work. However I noticed some things:

on crates.io, this is listed as v0.5.0 and it links to another fork of this GitHub repo
said fork is tagged only up to v0.4.0 and depends on defmt v0.1.3 and therefore breaks builds with the current recommended version of defmt, i.e. v0.2.0
this creates dependency hell because docs of defmt, examples, etc all are geared to be compatible with defmt v0.2.0
this GitHub repo here depends on defmt v0.2.0 already, but that is not of importance since crates.io does not link here

Is it fair to assume that this here is the active development crate? If that is the case, may you point crates.io in the right direction, please? While at it, a release for 0.5.0 could be created here as well.
I'm sorry to have to bother you with this, but I don't see how I could fix this myself.
Cheers

Forget what I said, the problem is that stm32f1xx-hal is depending on bxcan-0.4.0.


Apply fixes from StyleCI

This pull request applies code style fixes from an analysis carried out by StyleCI.

For more information, click here.

Codecov Report

Merging #27 into dependabot/composer/phpunit/phpunit-7.5.20 will not change coverage.
The diff coverage is n/a.

@@                              Coverage Diff                              @@
##             dependabot/composer/phpunit/phpunit-7.5.20      #27   +/-   ##
=============================================================================
  Coverage                                         54.83%   54.83%
  Complexity                                           27       27
=============================================================================
  Files                                                 4        4
  Lines                                                62       62
=============================================================================
  Hits                                                 34       34
  Misses                                               28       28

Impacted Files
Coverage Δ
Complexity Δ

src/AbstractEventManager.php
78.57% <ø> (ø)
12 <0> (ø)
:arrow_down:

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update 65cb8f5...a105c3c. Read the comment docs.


Propose an issue template for new metric ideas

Summary
Create an issue template to structure new metric ideas collected here in this GitHub repo.
Background
In today's DEI working group meeting, we discussed managing our backlog of GitHub issues and how best to track new metric ideas. While the CHAOSS spreadsheet of metrics is the canonical, singular source of truth for all metrics, it is not the most inviting for new ideas and encouraging others to share their thoughts. At the same time, our GitHub repo is also not great at this, and usually has old-timers using it to open new metric ideas for discussion.
One way to improve this is to use issue templates to help structure new ideas and set expectations for new contributors. It will also make it easier for us to discuss metric ideas in working group meetings and figure out how to move forward on an idea.
Details
We discussed the issue template covering two main things:

What kinds of things to ask? Metric summary, scope, category, implementation, interest in “owning” the work, etc.
Setting expectations. “We have a lot of great ideas but we are a limited group, please be patient, etc.”

Outcome
Easier triage and management of GitHub issues for collecting new metric ideas.

I'm working on this and hope to have a Pull Request for the working group to look at next week on February 2nd!


Updates to Feature and Destroy pipelines

Context
Improvements to Feature and Destroy pipelines,.
Change proposed in this pull request
Moved Feature release to its own pipeline instead of a child of the Dev Deploy stage.
Changed free-form feature name entry for create/destroy to hard coded set from 11-19. Removed sanitisation logic from previous implementation.
Added beginnings of documentation for deployment architecture.
Disabled KeyVault purge protection for feature branch deployments.
Updated Cosmos and SQL allowed IP ranges in non-production environments.
Guidance to review
Feature and Destroy pipelines may be triggered by choosing this branch as the source, and selecting suitable parameters.
Checklist

[ ] Work items have been linked (use AB#)
[ ] Your code builds clean without any errors or warnings
[ ] You have run all unit/integration tests and they pass
[x] Your branch has been rebased onto main
[ ] You have tested by running locally

LGTM


investigate suspended js-waku in suspended mode

This is a support request
Problem
Investigate how js-waku behaves in following scenarios:

tab with js-waku get's suspended or laptop goes to sleep;
tab with lightPush or filter is kept for some time (10+ minutes);

Once particular problems are found - let's create them as bugs and fix accordingly.
Notes
Part of: https://github.com/waku-org/pm/issues/143

Here's another scenario I tested which seems relevant:

Open light-js in two separate browsers
Subscribe to same topic on both
Send a message from browser A and verify it appears in browser B
In browser B set Network throttling to Offline
Send another message from browser A
Set network throttling off in browser B
Send another message from browser A

When I tried this, browser B does not receive messages from steps 5 and 7.

Running light push and filter for 10+ minutes:

Open light-js in two separate browsers.
Subscribe to same topic on both
In browser A, send a message using light push every 10 seconds

Results:

Browser A sent messages 1-30 correctly to 6 peers each
Messages 31 and 32 reported remote peer fault for some peers
Messages 33-114 sent to a single peer each (only managed to reconnect to a single peer after dropping connections)
Browser A stopped seeing messages in its own filter subscription after message 31
Browser B saw messages 1-30, missed 31, saw 32-63 and then missed messages after

Around message 115 is when my laptop suspended
After waking up:

Browser A reconnected to 4 and then 6 peers and continued sending messages
Browser B received messages 115-179 but stopped after
Browser A received messages 115-146 but stopped after (although it continued to push them successfully)

Closing as investigation was done and we don't have explicit improvement to do for now.


Supplementary Tables: Data for assay design

Produce supplementary data tables as described in sub-section about assay design. Two tables envisaged: (1) table of SNPs with information to help primer design and initial SNP selection; (2) table with all haplotypes and alleles sufficient for building a classifier.

Kirk recommends reporting 250bp flanking sequence for each SNP. Also good idea to use lower case to denote inaccessible bases. And fine to leave out flanking SNPs at low frequency.

That's 250 bp either side of the SNP, so 501bp total sequence for each SNP.


feat(pointpainting_launch): add launcher for pointpainting

Signed-off-by: tzhong518<EMAIL_ADDRESS>PR Type

New Feature

Related Links

Description
Add launcher for pointpainting in camera_lidar_fusion_based_detection
Review Procedure

Remarks

Pre-Review Checklist for the PR Author
PR Author should check the checkboxes below when creating the PR.

[ ] Code follows coding guidelines
[ ] Assign PR to reviewer

Checklist for the PR Reviewer
Reviewers should check the checkboxes below before approval.

[ ] Commits are properly organized and messages are according to the guideline
[ ] Code follows coding guidelines
[ ] (Optional) Unit tests have been written for new behavior
[ ] PR title describes the changes

Post-Review Checklist for the PR Author
PR Author should check the checkboxes below before merging.

[ ] All open points are addressed and tracked via issues or tickets
[ ] Write release notes

CI Checks

Build and test for PR: Required to pass before the merge.
Check spelling: NOT required to pass before the merge. It is up to the reviewer(s). See here if you want to add some words to the spell check dictionary.

Cloud you change pointpainting_launch to perception_launch of the tilte?

This PR requires https://github.com/autowarefoundation/autoware.universe/pull/1655.


Does this extension support other authetication ways such as service principal, or managed identity?

Azure SDK provides several ways for client authentication. https://github.com/Azure/azure-sdk-for-cpp/blob/main/sdk/identity/azure-identity/README.md
Could this extension support to authenticate client with methods other than connection string, such as service principal or managed identity, with settings from environment variables?

An example of Identity + The C++ Storage Client Library can be found here: https://learn.microsoft.com/en-us/azure/storage/blobs/quickstart-blobs-c-plus-plus?tabs=managed-identity%2Croles-azure-portal#sign-in-and-connect-your-app-code-to-azure-using-defaultazurecredential

Thanks for the suggestion @zczc2390, this is definitely something we should look into! 👍  I think this should be pretty straightforward

With PR #16, support was added for providing a credential chain. Its in a bit of an early shape but if you're on duckdb v0.9.1 you can try it out as follows:
Install nightly build of azure extension run from within DuckDB
force install azure from 'http://duckdb-extensions-nightly.s3.us-east-2.amazonaws.com';
load azure;
set azure_account_name='<storage account name>';
set azure_credential_chain='cli';
from 'azure://<container>/path/to/file.ext';

The CLI credentials are tested and work well, but they only take. I think the environment variables should also work but they are not tested yet.
Note that to switch back to the default release of the azure extension, simply:
force install azure;

Will keep this issue open for now until the feature is working and properly tested with CI.

Hi, I tried to use new duckDB feature of authentication to Azure using Service Principal via Jupyter Notebook (Python) and I failed. Thisis the code I run:. Can you advise if I am doing anything wrong or there is a bug?
python import duckdb, os
# Define ENV variables to be used in authentication
os.environ['AZURE_TENANT_ID']='xxxxxxxxxxxxxxxxxxxxxx'
os.environ['AZURE_CLIENT_ID']= 'yyyyyyyyyyyyyyyyyyyyyy'
os.environ['AZURE_CLIENT_SECRET']= 'zzzzzzzzzzzzzzzzzzzzzzzzzz'

con = duckdb.connect()
# install proper version of azure extension
con.execute("force install azure from 'http://nightly-extensions.duckdb.org';")
con.execute("load azure;")
# set config variables - my_account_name is of course replaced by real azure storage account name
set_string="SET azure_account_name = 'my_azure_account_name';"
con.execute(set_string)
# use service principal from ENV variables
set_string = "SET azure_credential_chain='env';"
con.execute(set_string)
# query ADLS gen 2
df = con.execute('''
    select *
    from 'azure://raw/test/troubleshoot/test_file.csv'
    ''')

I  got this error on the below line of code (query execution):
df = con.execute('''
     select *
     from 'azure://raw/test/troubleshoot/test_file.csv'
    ''')
Error: Invalid Error: Failed to get token from ChainedTokenCredential.

I used Python 3.9.15 and the below version of duckdb package:
pip install duckdb==0.9.1

hey @jaroslaw-pawluszka This is currently only available in the nightly build for 0.9.1 so you will need to run force install azure from 'http://nightly-extensions.duckdb.org'; to install it

Yes, Iam aware of that and this is what I used in the code I showed above (this is the line):
con.execute("force install azure from 'http://nightly-extensions.duckdb.org';")

Hi @samansmink  just to confirm that I am using proper nightly build I testes using the "old" azure extension: When I run the same code with default azure extension installation using:
con.execute("force install azure;")

Then I get different error - it does not recognize "azure_account_name" parameter:
CatalogException: Catalog Error: unrecognized configuration parameter "azure_account_name"
Did you mean: "username"

And it pops up on this line:
set_string="SET azure_account_name = 'azuwevelcedls01p'"
---> con.execute(set_string)

So it makes me thing that this is the problem with the new nightly build, or I am not using it properly somehow.

i used above code and also get
duckdb.duckdb.CatalogException: Catalog Error: unrecognized configuration parameter "azure_account_name"

@ehab2012  this is currently deployed as a nightly build, but not yet please try  force install azure from 'http://nightly-extensions.duckdb.org'; in a few hours, I just merged the update and CI is still running which should push the nightly for 0.9.2
@jaroslaw-pawluszka sorry i misread your log. This appears to be a normal error message where the azure sdk could not find your credentials, are you sure the env settings are correct?

D force install azure from 'http://nightly-extensions.duckdb.org'; Error: HTTP Error: Failed to download extension "azure" at URL "http://nightly-extensions.duckdb.org/v0.9.2/linux_amd64_gcc4/azure.duckdb_extension.gz" Extension "azure" is an existing extension.
my ~/.duckdb/extensions/v0.9.2/linux_amd64_gcc4
is empty.

how to over come is an existing extsnsion?

hello @samansmink i have tried to
0.9.2 3c695d7ba9
Enter ".help" for usage hints.
Connected to a transient in-memory database.
Use ".open FILENAME" to reopen on a persistent database.
D force install azure from 'http://nightly-extensions.duckdb.org';
Error: HTTP Error: Failed to download extension "azure" at URL "http://nightly-extensions.duckdb.org/v0.9.2/linux_amd64_gcc4/azure.duckdb_extension.gz"
Extension "azure" is an existing extension.

can you please tell how/what to do so force will actually use the nightly build?

Hi @samansmink ,
Happy New Year! :)
I am using the same credentials to connect to ADLS account using duckb and adlfs and it is working - so they look to be fine.
But as mentioned before, When I defined the env variables using the names as below and nightly build of azure and set_string = "SET azure_credential_chain='env';"
python import duckdb, os
# Define ENV variables to be used in authentication
os.environ['AZURE_TENANT_ID']='xxxxxxxxxxxxxxxxxxxxxx'
os.environ['AZURE_CLIENT_ID']= 'yyyyyyyyyyyyyyyyyyyyyy'
os.environ['AZURE_CLIENT_SECRET']= 'zzzzzzzzzzzzzzzzzzzzzzzzzz'

Then I am getting this error:
duckdb.duckdb.Error: Invalid Error: Failed to get token from ChainedTokenCredential.

And I wanted to see if using the "azure" extension will result with better performance for getting the data from ADLS gen2.

@Pedro-innocv @jaroslaw-pawluszka Sorry we haven't really had time to look into this yet, it's on the todo list though.

@jaroslaw-pawluszka I think you are missing the
SET azure_account_name = '<name of your storage account>';

I try to update the documentation page: https://duckdb.org/docs/extensions/azure.html
Tell me if after setting this property it work or not.
Also for information I'm working on a version where you will be able to define a spn secret directly.
Regards,
Quentin

Hi @quentingodeau,
Actually I included storage account name in the code there - you can check my first message here (quoted below).
Please let me know if you have any updates.
Regards,
Jarek

Hi, I tried to use new duckDB feature of authentication to Azure using Service Principal via Jupyter Notebook (Python) and I failed. Thisis the code I run:. Can you advise if I am doing anything wrong or there is a bug?
python import duckdb, os
# Define ENV variables to be used in authentication
os.environ['AZURE_TENANT_ID']='xxxxxxxxxxxxxxxxxxxxxx'
os.environ['AZURE_CLIENT_ID']= 'yyyyyyyyyyyyyyyyyyyyyy'
os.environ['AZURE_CLIENT_SECRET']= 'zzzzzzzzzzzzzzzzzzzzzzzzzz'

con = duckdb.connect()
# install proper version of azure extension
con.execute("force install azure from 'http://nightly-extensions.duckdb.org';")
con.execute("load azure;")
# set config variables - my_account_name is of course replaced by real azure storage account name
set_string="SET azure_account_name = 'my_azure_account_name';"
con.execute(set_string)
# use service principal from ENV variables
set_string = "SET azure_credential_chain='env';"
con.execute(set_string)
# query ADLS gen 2
df = con.execute('''
    select *
    from 'azure://raw/test/troubleshoot/test_file.csv'
    ''')

I got this error on the below line of code (query execution):
df = con.execute('''
     select *
     from 'azure://raw/test/troubleshoot/test_file.csv'
    ''')
Error: Invalid Error: Failed to get token from ChainedTokenCredential.

I used Python 3.9.15 and the below version of duckdb package:
pip install duckdb==0.9.1

Hi @jaroslaw-pawluszka, @quentingodeau
I have tried setting the environment variables to upper case.
os.environ['AZURE_TENANT_ID'] = os.getenv('xxxxxxx')
os.environ['AZURE_CLIENT_ID'] = os.getenv('xxxxxxx')
os.environ['AZURE_CLIENT_SECRET'] = os.getenv('xxxxxxx')
I think the connection is now working, but I have a new error

seems that the connection is successful, because if I try with a non-existing route I get this other error

Hi @jaroslaw-pawluszka
Oh my bad I miss it!
the exception that you have is from the Azure SDK (here). So let try to enable more logs^^ I see here that you may have the real cause. Can you try to enable the logs to check a bit more azure logs documentation

Hi again I had make some tries at my end get the same issue than you @jaroslaw-pawluszka.
Here the logs i saw:

[2024-02-03T18:51:58.7933982Z] WARN  : HTTP Transport error: Fail to get a new connection for: https://duckdbtest6.blob.core.windows.net. Problem with the SSL CA cert (path? access rights?)
Traceback (most recent call last):
File "", line 1, in
duckdb.duckdb.Error: Invalid Error: Fail to get a new connection for: https://duckdbtest6.blob.core.windows.net. Problem with the SSL CA cert (path? access rights?)

my guess same error than: here
After that it has been working like a charm :)

Hi @Pedro-innocv, In your case I think that you have something different... and it might not be related to the azure extension but more on the parquet one, or to your parquet file.
Are you able to read it with others tools like parquet-cli?
Can you try on a other parquet file? does it work if download it and perform the same operation with the local file system?

Hi @quentingodeau
Tested directly with the parquet file locally and it works correctly.
We also tested with a new adls gen2 and everything works fine.
It seems that our customer has made some modifications to the adls gen2 configuration in production that cause these errors.
Thank you very much for everything

Hi @quentingodeau ,
This one solved the issue! thanks :)

Hi again I had make some tries at my end get the same issue than you @jaroslaw-pawluszka.
Here the logs i saw:

[2024-02-03T18:51:58.7933982Z] WARN  : HTTP Transport error: Fail to get a new connection for: https://duckdbtest6.blob.core.windows.net. Problem with the SSL CA cert (path? access rights?)
Traceback (most recent call last):
File "", line 1, in
duckdb.duckdb.Error: Invalid Error: Fail to get a new connection for: https://duckdbtest6.blob.core.windows.net. Problem with the SSL CA cert (path? access rights?)

my guess same error than: here
After that it has been working like a charm :)

Will close this issue, with v0.10.0 this is supported: https://duckdb.org/docs/extensions/azure#credential_chain-provider
testing can be improved a lot here still, please open a new issue if errors still arise.

Using Duckdb 0.9.2 while connecting to adls gen2 to read parquet, its unable to connect while stmt.executy(query)
Gives 12002 connection timeout on network where proxy needed, if connected to others it works?
Any workaround.
Set proxy in system propety done, not working.
Any way to pass proxy to extension. Thanks.


A plausible problem about how scoop handles hard links and updates

Simplest example that already happened in IRL (explained in steps):

An average user having motherboard based RAID 1 at the office with two drives, decided to change to better RAID solution - a dedicated controller. He made the common sense thing and backed up the RAID data to another machine before going to do some LSI/3ware kung-fu
After an hour everything was installed so it's the time for bringing the data back to the RAID array. Copying/pasting and everything looked normal ...
The next day he was badly surprised by scoop - not a single one app was working. Luckily he has around 20 years of specific sysadmin experience and did the obvious thing - installed a new random app, different from those in not working apps list. Some comparison between a random broken app and this new one shown that there's a missing hard link from the former's dir
After manually recreating all hard links of the installed apps (manual data checking is the main law in his job-specifics) and finding that this was already followed by losing all FF profiles in his coworkers PCs (not all, only on these done the manual backups before upgrading the hard drives), he went to sleep

At the other day questions arrised:
How scoop and similar package managers keeps history of all hard links?
How scoop and similar package managers are checked against the nastiest bug - data loss?
How scoop and similar package managers ... err command line installers ... can be used in business when there's uncertainty about how they behave in standard procedures?
Good night

Simplest example that already happened in IRL (explained in steps):

An average user having motherboard based RAID 1 at the office with two drives, decided to change to better RAID solution - a dedicated controller. He made the common sense thing and backed up the RAID data to another machine before going to do some LSI/3ware kung-fu
After an hour everything was installed so it's the time for bringing the data back to the RAID array. Copying/pasting and everything looked normal ...
The next day he was badly surprised by scoop - not a single one app was working. Luckily he has around 20 years of specific sysadmin experience and did the obvious thing - installed a new random app, different from those in not working apps list. Some comparison between a random broken app and this new one shown that there's a missing hard link from the former's dir
After manually recreating all hard links of the installed apps (manual data checking is the main law in his job-specifics) and finding that this was already followed by losing all FF profiles in his coworkers PCs (not all, only on these done the manual backups before upgrading the hard drives), he went to sleep

At the other day questions arrised:
How scoop and similar package managers keeps history of all hard links?
How scoop and similar package managers are checked against the nastiest bug - data loss?
How scoop and similar package managers ... err command line installers ... can be used in business when there's uncertainty about how they behave in standard procedures?
Good night

Well using scoop reset * recreates all hard links as far as i know.
All app data lies in persist folder which is also re-mapped to the current junction when using scoop reset *
And lastly i dont think scoop is centered around business solutions. Scoop is meant for consumer purpose rather than business, atleast that is what i think, correct me if i am wrong.

Sometimes reset cannot recreate all hard links or restore broken installations like browser profiles no matter that there is persist directory
Anyway I'm pretty over 90% of the scooped apps are used in business

Sometimes reset cannot recreate all hard links or restore broken installations like browser profiles no matter that there is persist directory
Anyway I'm pretty sure over 90% of the scooped apps are used in business

Those are rare cases that can only be fixed when you list app name and app version.
Broken installations like browser profiles: It is not an issue with scoop rather that with the app itself. The manifest must be missing profiles from persist.
And as for business oriented. When an app or software it business oriented, it means that most of the business use those apps / have them pre installed / recommends those apps / etc you get my point. Scoop is a community based package manager that is free and open source, and is meant for end user rather than a business.

Noone said it is an app (but the logic behind main scripts looks like the opposite)

Copying/pasting
this is your mistake, Explorer would not even properly preserve timestamps
for example https://schinagl.priv.at/nt/hardlinkshellext/linkshellextension.html can handle copying links

Almost all of average (power) users are using this mistake ... I think this is a feature, not a mistake. IMHO all package managers should provide a built-in defensive logic against "mistakes" like this


Feature(backend+frontend): Course completions

Changelog:

Feature(backend+frontend): Allow to register as intern.
Feature(backend): Update user course progress with each new test attempt.
Feature(backend): Add pass_percent field to course.
Feature(backend): Create user competence if course progress > pass percent.
Feature(frontend): Rework control panel.
Feature(frontend): Revert subdivisions links in sidebar for intern.
Feature(frontend): Update intern dashboard.
Chore(backend): Refactor tests so they run in a transaction which is rolled back after test ends.

Closes #38
Closes #46

@d4got10 еее, задеплоилось))


 ignores accept attribute

I notice that PR #777 added support for input elements with type "file" (and "color").
However, the accept attribute is ignored.
For example,
<input type="file" accept=".txt">

Will add a "Text Document" option to the list of file types in the Open dialog if you simply run this in a browser.
If you run it under Electron, it does not appear.
Tested only under Windows (8.1).

If you're writing custom Electron code, you should just use the dialog module directly, there's no reason to use the input picker

If that's the case, I wonder why support was added for it in the first place as per #777 ?
I think that while there is support for it, it should work as expected and specifying your own file specs is a very common use case.
Also, in some circumstances, we want to use our html in a standard web browser.
Would be grateful if this could be included in some future release.

bump :-)

@zcbenz bump :-)

@hokein, you are a super hero, thank you for this patch!

@hokein, thanks very much. I can't test it right now as I don't have the necessary compiler but will test it as soon as it's released.

Tested...works...thanks!

On a successful <input type="file" accept=".txt">, I get a path like C:\FakePath\data.txt.
Is that the expected behaviour?

Yes that is expected behaviour. Under this circumstance, you're in the context of a sandboxed browser environment so that file path is a virtual one (read-only) to the real file and your JS code can open and process it as required.
If you want the real file path then as @paulcbetts mentions above, you would use the "dialog module" and you'll get exactly what you want.
The reason I raised this issue is because although our app is an Electron app, it loads standard html pages which make use of this tag and when running them under Electron, they suddenly lost this feature.

thanks a lot for clarifying my understanding @Gregg8. much appreciated.

I use this FileSelector and Electron still seems to ignore the accept parameter.


Allow writing Cargo.toml in project directory.

The project directory was previously deliberately mounted as read-only since “well behaved crates should only ever write to $OUT_DIR and never modify $CARGO_MANIFEST_DIR”.  That however, breaks the --locked flag and is not worth the additional complexity.
Fixes https://github.com/rust-embedded/cross/issues/346.

bors try

Would it be possible to instead mount the Cargo.toml file in docker as rw as an alternative?

No, since it's a file. You can only mount directories as a volume.

if you think it's the only way

I mean there could be another way, but I'm pretty sure it wouldn't be worth the additional complexity for virtually no gain. If this really was a big enough problem, ´cargo` itself should be responsible for preventing self-modifying crates.

No, since it's a file. You can only mount directories as a volume.

I'm pretty certain it's possible in docker.

I'm pretty certain it's possible in docker.

Still, this wouldn't work in the case when Cargo.lock doesn't exist yet.

bors r+


V12 support

Will this module ever recieve an update so it works again in v12?  as of right now its only functional in v11.

I will take a look at it over the next week or so.

I really hope it will be updated at some time in future

Would love to use this in v12!

I have a fix for this, Michael found the issue and its really weird.  You have to plop this into worldscripter module:
No hook or anything, purely just the code below in a script for world scripter module.  This doesn't fix the dep warnings but this modules dep spam isn't bad.
globalThis._templateCache = {};

Line 17 of scripts\lib\fvtt-vue.js has an undefined issue. A simple and straightforward method is to add the code globalThis._templateCache = {}; on the previous line.
Here is a restored file.
[v12]kasper.zip

@kagangtuya-star that worked for me, thank you.
Could you make a PR for it so @mouse0270 can simply press one button and update the module? Cheers!


remove IO.inspect

Contributor checklist

[ ] Bug fixes include regression tests
[ ] Features include unit/acceptance tests

🤦


Install both Wireguard and Openvpn protocols (Issue #968)

    Added --altcommand to the installer.
    Allows two installations at once.
    The installations can be removed or updated independently.
    Example bash install.sh --altcommand wg
      then try 'pivpn_wg help'
    Example bash install.sh --altcommand opv
      then try 'pivpn_opv help'
    or if already installed, can install the other VPN protocol as well
    Example bash install.sh
    Example bash install.sh --altcommand opv
    The --altcommand names are not checked against the vpn type

Tested using RasPIW+.  Because not a major use case this has changed the command  for at least one of the protocols.

Hi Thank you for your MR, however it doesn't follow our contributor guidelines.
Please read: https://github.com/pivpn/pivpn/blob/master/CONTRIBUTING.md
Pull requests should be done to test branch and not master.
Thank you.

Sorry, missed that.  Will try again.


Fix 'describedby' headers for NonRDFSource

"describedBy" was erroneously camel cased.

See: https://www.w3.org/TR/ldp/#h-ldpc-post-createbinlinkmetahdr


1.18.2 Crash (Registry is already frozen)

Forge: 40.0.31
Minecraft: 1.18.2
Mods: Hex Casting, Patchouli, Kotlin for Forge
Latest.log | Crash report
This mod seems really fun but I cannot play it :(

Yep that's a known issue, it's fixed in 0.7.0... sorry! (It'll probably be out in less than a week).
For now, 0.6.0 works on 1.18.1.


null pointer dereference in densify

Issue type
Bug
Have you reproduced the bug with TensorFlow Nightly?
Yes
Source
source
TensorFlow version
tf 2.14.0
Custom code
Yes
OS platform and distribution
Ubuntu 18.04.6
Mobile device
No response
Python version
Python 3.8.3
Bazel version
bazel 5.3.0
GCC/compiler version
gcc 7.5.0
CUDA/cuDNN version
No response
GPU model and memory
No response
Current behavior?
A maliciously constructed densify operator model leads to op_context.input being empty, causing a null pointer dereference in the Prepare function.
// densify.cc
TfLiteStatus Prepare(TfLiteContext* context, TfLiteNode* node) {
  TF_LITE_ENSURE_EQ(context, NumInputs(node), 1);
  TF_LITE_ENSURE_EQ(context, NumOutputs(node), 1);

  OpContext op_context(context, node);

  TF_LITE_ENSURE(context, op_context.input->type != kTfLiteString); // op_context.input is nullptr

densify.zip
Standalone code to reproduce the issue
I use the benchmark tool built according to [this official guide](https://www.tensorflow.org/lite/guide/build_cmake#step_1_install_cmake_tool), as follows:
1. git clone https://github.com/tensorflow/tensorflow.git tensorflow_src
2. mkdir tflite_build && cd tflite_build
3. cmake ../tensorflow_src/tensorflow/lite
4. cmake --build . -j
5. cmake --build . -j -t benchmark_model

The benchmark is in the tools directory

When I use the benchmark tool for PoC validation, it causes the TensorFlow Lite inference process to be subjected to a DOS（coredump).

❯ ./benchmark_model --graph=../poc/densify.tflite
INFO: STARTING!
INFO: Log parameter values verbosely: [0]
INFO: Graph: [../poc/densify.tflite]
INFO: Loaded model ../poc/densify.tflite
ERROR: Invalid tensor index 8193 in inputs. The subgraph has 3 tensors

INFO: Created TensorFlow Lite XNNPACK delegate for CPU.
[1]    30027 segmentation fault (core dumped)  ./benchmark_model --graph=../poc/densify.tflite

Relevant log output
No response

I am able to reproduce:
./benchmark_model --graph=densify.tflite
INFO: STARTING!
WARN: Duplicate flags: num_threads
INFO: Log parameter values verbosely: [0]
INFO: Graph: [densify.tflite]
INFO: Loaded model densify.tflite
INFO: Initialized TensorFlow Lite runtime.
ERROR: Invalid tensor index 8193 in inputs. The subgraph has 3 tensors

INFO: Applying 1 TensorFlow Lite delegate(s) lazily.
INFO: Created TensorFlow Lite XNNPACK delegate for CPU.
Segmentation fault

Hi @alankelly, I'm going to consolidate these to you for efficiency purposes. Can you please take a look? Thanks.

Hi, @SiriusHsh
Thanks for raising this issue. Are you aware of the migration to LiteRT? This transition is aimed at enhancing our project's capabilities and providing improved support and focus for our users. As we believe this issue is still relevant to LiteRT we are moving your issue there. Please follow progress here: https://github.com/google-ai-edge/LiteRT/issues/116
Let us know if you have any questions. Thanks.


(b13) bug with barrier stone

the Picture says it all

@larskr96 :Azanor probably wants you to describe the step on how you produced this bug.

how?
i just placed a fence beside a barrier stone

like in the Picture

So it's just a visual thing, the barrier stone works as expected but it connects to fences when it shouldn't?

Above the barrier is an empty place it's in the game not seen.

This was actually fixed in b15, but all the other bugs with that version hid the fact.


md-tab-content how to take 100% of height

Can someone let me know what the easiest way to make the content of a tab take up 100% of the available height.
Currently its taking the min-height of the md-tab-group which is 248px.
Thank you :smile:

md-tab{
height: 100vh;
}
not working? Or something alike?

I'd rather not have to use the !important flag if possible, I know material is using flex system just wondering if there's a way to do it using hat.

You can use it as seperate style for just a specific component. It will then only be in that component.

This issue was from an earlier version, and should have been resolved already.  I just confirmed that adding md-tab-group { height: 100%; } appears to work.  Please let me know if there are cases where this doesn't work by providing a demo so that I can resolve the issue.

@robertmesserle only adding height 100% was not working
I had to cheat with shadow piercing:
http://plnkr.co/edit/UG6VhKWovNKL4lHX7TxB?p=preview
i.e.
  md-tab-group {
    /deep/ .mat-tab-body-wrapper {
      height: 100%;
    }
  }

This is not that tricky, the 2 things that make it look complex are angular's shadow emulation and flexbox, both are not widely understood yet.
TL;DR
The only thing required:
.mat-tab-body-wrapper {
  flex: 1 1 100%;
}

Because most pages are built under CSS shadow emulation mode (default mode) the above
will not work because .mat-tab-body-wrapper does not exist in the template of the page, it's in the template of mat-tab-group.
2 solutions:
(1) Using shadow dom's ::ng-deep
::ng-deep .mat-tab-body-wrapper {
  flex: 1 1 100%;
}

This will fix the issue but in the long run, it's not recommended because ::ng-deep is deprecated and who knows what will replace it... track  #23636 for more information.
(2) Using global scope (css)
.mat-tab-group.mat-tab-fill-height .mat-tab-body-wrapper {
    flex: 1 1 100%;
 }

This should be put in the global CSS file, it will apply a full height every time the CSS class is used
<mat-tab-group class="mat-tab-fill-height">
  <mat-tab label="First"> Content 1 </mat-tab>
  <mat-tab label="Second"> Content 2 </mat-tab>
  <mat-tab label="Third"> Content 3 </mat-tab>
</mat-tab-group>

Notes:
The structure of a renderer tab component is different from how it is declared, the example above is a simple declaration that will be rendered like this:
<mat-tab-group class="mat-tab-group">
  <mat-tab-header class="mat-tab-header"></mat-tab-header>

    <mat-tab-body class="mat-tab-body" role="tabpanel">

    </mat-tab-body>

</mat-tab-group>

mat-tab-group is a flexbox (display: flex) with column layout, effectivly having 2 columns.
The headers and the body. We need the body to fill the remaining height left, i.e. the height
of the mat-tab-group minus the header's row.
I'm not focusing on the height of mat-tab-group because it's not relevant, it can be controlled from a page template and the dev will set it... either relative (%) or fixed (px)

Of course, there are other solutions, using angular directive to programmatically apply this and any other creative things you might think of.
Personally, I like (2), more specifically I don't even use the special class, I apply it on ALL tabs I use.
I don't see why it shouldn't be the default behavior of the tab component.
If the developer doesn't want it, using a simple wrapper will do.


run problem

I can't run it,What should I do

@Rebornown
I will be adding documentation on how to run the agent soon.


Revert "Update dependencies to support Generics"

Reverts google/wire#360
Build tests are failing
internal/wire/copyast.go:267: undefined: ast.IndexListExpr
They still are using go1.17 so they'll need to first be updated to go1.18.

oof, looks like we'll have to merge #356 first, if we decide to move up to 1.18

@jayzhuang any plans to merge #356 ?

Also curious on the status of getting generic support back into wire


default values for fields that do not exist

It is quite common when the web service instead of assigning some default value to the field just does not include it into the JSON output. In many REST APIs about a half of the fields are like that, that is why I have to put a huge amount of Option to my case classes. It will be very useful to allow to assign custom default values to fields in case classes in case if those fields do not exist in the output without the need to write one's own decoder or wrap half of the case class in Options.

@antonkulaga Does the useDefaults configuration in circe-generic-extras work for you?

Closing for now, please reopen if useDefaults didn't work.


Mounting tmpfs volumes [SOLVED]

I did a conversion of a command to run docker directly in the terminal, I converted to docker-compose and I'm trying to run it in the portainer, but I get an error message saying that it's not possible to run tmpfs in the portainer, so I saw that it is possible to mount tmpfs volume in the portainer, but I don't know the correct way, can someone help me?
Original command:
docker run --restart=always --name x-ui -d -p 54321:54321 -p 8000-8010:8000-8010/tcp -p 8000-8010:8000-8010/udp --tmpfs /tmp --tmpfs /run --tmpfs /run/lock -v /sys/fs/cgroup:/sys/fs/cgroup:ro -v /你的数据存放路径(最好是绝对路径):/etc/x-ui thesadboy/x-ui

This one I created based on the command above to run in the portainer, but it doesn't run, the following error appears...
Deployment error
failed to deploy a stack: services.x-ui Additional property tmpsf is not allowed
version: "3.9"

services:
  x-ui:
    image: thesadboy/x-ui:latest
    container_name: x-ui
    volumes:
      - /home/tales/Docker/X-UI/etc/x-ui:/etc/x-ui
      - /sys/fs/cgroup:/sys/fs/cgroup:ro
    tmpsf:
      - /tmp
      - /run
      - /run/lock
    expose:
      - 54321
    ports:
      - 8000-8010:8000-8010/tcp
      - 8000-8010:8000-8010/udp
    restart: always
    networks:
      t4l35-net:

networks:
  t4l35-net:
      name: t4l35-net

troquei tmpfs ou tmpsf


Debug not working (Serious problem)

Debug  for clang not working.  I have a  simple project, when debug with lldb and some break points, It does not stop at the breakiong point, and the output is the same.

Can you please open an issue directly against https://github.com/microsoft/vscode-cpptools


add optional logging capabilities

I think this is all sorted now?
BTW sorry for the named returns, it was an artifact of some refactor.


SCP-3935: rename verifySignature

This renames the verifySignature builtin to verifyEd25519Signature for clarity now that we have multiple signature verification functions.

The only place this matters is in the protocol parameters and I have no idea what to do there. Presumably the name has to remain verifySignature in the old parameters, but is it safe to update it in the new ones? What should I do here?

I see some occurrences of verifySignature in plutus-apps, so merging this would break that; would we make a separate PR to fix that if/when this gets merged?

@jmchapman I modified quite a lot of stuff in plutus-metatheory just by searching and replacing, but you should probably check that it's OK.

Pre-submit checklist:

Branch

[ ] Tests are provided (if possible)
[ ] Commit sequence broadly makes sense
[ ] Key commits have useful messages
[ ] Relevant tickets are mentioned in commit messages
[ ] Formatting, materialized Nix files, PNG optimization, etc. are updated

PR

[ ] (For external contributions) Corresponding issue exists and is linked in the description
[ ] Self-reviewed the diff
[ ] Useful pull request description
[ ] Reviewer requested

Has conflicts now, sorry.

Based on discussion with Jared, I think this is safe.

It seems that what's important for the ledger is the order of the cost model parameters, not the names.  But the order where exactly?  I've tried to keep the order the same, but in some places automatically-produced output arranges things in alphabetical order (inbuiltinCostModel.json, for example (although I think this used to be output in apparently random order, but changed a while ago)).
At the end of an aphabetical list, we used to have
  unListData
  unMapData
  verifySignature

but with this renaming and the introduction of the SCEP256k1 functions we now have
  unListData
  unMapData
  verifyEcdsaSecp256k1Signature
  verifyEd25519Signature  -- new name for verifySignature
  verifySchnorrSecp256k1Signature

Annoyingly the new name for verifySignature puts it right between the two new functions.
It would be good to make sure that in places where these things need to be in a specific order, they always are in that order.  Maybe we could add a numeric prefix or something.

@kwxm There's a ticket for taming the order-dependence: https://input-output.atlassian.net/browse/SCP-2696
In the case that you pointed out, it only matters for Plutus V2, where the ledger does not (yet) have fixed opinions about the order. And in V1 it doesn't change the order.
That said, it would make it annoying to actually backport these functions to V1... ugh. I think it's fine, though, unless there's a natural name that puts it before the other two.

Has conflicts.

unless there's a natural name that puts it before the other two.

verifyEd25519Signature -> verifyAnEd25519Signature ...

Has conflicts.

That was because of blake2b_256.  It should be fixed now.

Or maybe Hydra is lagging?

Maybe.  It seems to be OK now and I haven't done anything.


[AutoPR resources/resource-manager] Move subscriptionId to global

Created to sync https://github.com/Azure/azure-rest-api-specs/pull/2670

This PR has been merged into https://github.com/Azure/azure-sdk-for-python/pull/2029


Support IMDSv1 for authentication

Describe the feature
When switching from rusoto to aws-sdk-rust for https://github.com/vectordotdev/vector, we realized there wasn't support for IMSDv1 for authentication.
I know IMDSv2 is preferred nowadays but we believe we are likely to still have users running without it.
Would you be open to a PR adding support for IMDSv1?
Use Case
When IMDSv2 is unavailable, we'd like to fallback to trying IMDSv1.
Proposed Solution
No response
Other Information
No response
Acknowledgements

[X] I may be able to implement this feature request
[ ] This feature might incur a breaking change

A note for the community

Community Note

Please vote on this issue by adding a 👍 reaction to the original issue to help the community and maintainers prioritize this request
Please do not leave "+1" or "me too" comments, they generate extra noise for issue followers and do not help prioritize the request
If you are interested in working on this issue, please leave a comment

The plan is to fully remove IMDSv1 support so we actually can't provide support for it in the SDK at this time.
If you have customers currently on hosts that do not support IMDSv2 I'd be interested in hearing more about the cause.
In any case, it is possible to extend credential providers to add support–you can do it in an external crate by wrapping the default chain and adding a fallback to your own ImdsV1 implementation.


Using Shuffle in UITableView/UICollectionView

Describe the bug
TableView and CollectionView don't scroll vertically if the shuffle is in any cell.
To Reproduce
Steps to reproduce the behavior:
Add SwipeCardStack inside TableViewCell/CollectionViewCell and scroll tableView vertically.
Expected behavior
If I chose to move horizontally, Shuffle don't be able to scroll vertically.

Hey @andre991! Thanks for reporting this issue, I will work on publishing a fix. In the meantime, you can try the following: for each SwipeCard, set card.panGestureRecognizer.delegate = yourViewController and conform your view controller to the UIGestureRecognizerDelegate protocol. You can write
func gestureRecognizerShouldBegin(_ gestureRecognizer: UIGestureRecognizer) -> Bool {
    guard let panGestureRecognizer = gestureRecognizer as? UIPanGestureRecognizer else { return true }
    let velocity = panGestureRecognizer.velocity(in: view)
    return abs(velocity.x) > abs(velocity.y) // return true only if pan gesture is more horizontal than vertical
  }

Let me know if that solves your issue for now. I will let you know once the actual fix is out!

Hi @mac-gallagher, thanks for this solution!!! Worked perfectly!
This framework is awesome!!
Congratulations! 👏🏻👏🏻👏🏻👏🏻
Have a nice day.
#StayHome

Hey @andre991 - added support for this in version 0.2.2.
Cheers!
Mac

FYI @andre991, updated the solution a bit here #69 . The previous implementation with delegates was kind of awkward


Improve developer experience when debugging using styled-components

After implementing styled-components into the Fether project in this PR https://github.com/paritytech/fether/pull/357, I found that when I tried went to debug in Dev Tools > Elements, it displays the CSS class name value of HTML elements as a hash of the styled-component name i.e.

, whereas previously it showed the class name.
To solve the issue I installed relevant tooling (see https://www.styled-components.com/docs/tooling) 'babel-plugin-styled-components' plugin that displays the style-component name that we specified instead of just the hash that's meaningless to me i.e.
, where DivContent is the name of the styled-component that we created.
However in this project we are using TypeScript, so we'd need this plugin https://www.styled-components.com/docs/tooling#typescript-plugin

I wish we could use this plugin right now, however, AFAICT, the plugin maintainers currently only have an integration path through webpack, which we can't touch without ejecting our CRA app.
I'd prefer not to eject and wait for them to bring a direct integration option through tsc compiler https://github.com/Microsoft/TypeScript/issues/16607 into production on their end before integrating the plugin with this repo.


Queries for keys that have special characters are not fully supported

Given the following JSON:
[
    {"a!=e": 10},
    {"a!=e": 20}
]

It seems to not be possible to query for say all items with the value of "a!=e" greater than 15.
Things I've tried:

#(a!=e>15)# -> []
#("a!=e">15)# -> []

The workaround I found is to use wildcards (#(a??e>15)#), but wildcards might not allow to solve all possible scenarios.
If this is an intended limitation maybe it should be mentioned in the readme/syntax page.

It probably should be documented, but you need to escape the path.
#(a\!\=e>15)# -> [{"a!=e": 20}]

@tidwall Got it, thanks for the explanation. I was also surprised that escaping other characters has no effects. For example #(\a\!\=e>15)# does work too.

It probably should be documented, but you need to escape the path.
#(a\!\=e>15)# -> [{"a!=e": 20}]

Actually it is documented in (SYNTAX.md). Maybe a short note on escaping should be added to the README.md too

@lammel thanks, I had actually read the paragraph of the documentation that you linked above, but because it's right underneath the Wildcards section and it mentions the same specific characters, I had interpreted it as referring exclusively  to those three characters. But I see now that reading it in isolation it can also be read as a more generic escaping method.
Maybe making that a bit more explicit in the docs could avoid any misinterpretation.


Architecture documentation for contributors

Hello, is there any documentation on the current architecture (diagrams, component lists with explanations and their interactions, etc...)?
I am interesting in contributing in the future but I wan to get the lay of the land first.
Thanks!

Found my answer via Gitter. :) Turns out there is no architecture documentation yet. I'm going to turn this Issue into a request to create this documentation. I'll try to get to it if I get some free time. :)

Will be very interested to see these! Happy to review as I work on improving my own knowledge of the codebase.

Apologies that there hasn't been any work in this regard yet. I have been extremely busy on my Game project, day job, and the holidays. I'm hoping to get around to this asap.


Intra refresh

This isn't really "intra refresh", it's a forced keyframe interval. Also, I'd suggest forcing all frames to be keyframes for now via some mechanism - it's confusing for it to print something else. For example, set default interval to 0.

I'm going to rebase over PR#47


About the recycle dimension

I found that an additional dimension representing the number of iterations was added to the input data. I'm wondering what is the purpose of this dimension? Will all model parameters also increase in dimension during training? I did not see this kind of data processing in the original JAX version of AlphaFold.

Hi, this part follows the AlphaFold2 paper. See 1.10 of Supplementary information of AF2.


Debugpy, vscode and pytest : tests not found is waiting_for_client

Does this issue occur when all extensions are disabled?: Yes/No

VS Code Version: 1.89.1
OS Version: Darwin arm64 23.4.0

Steps to Reproduce:

in conftest.py, add debugpy with debugpy.listen((os.getenv("DEBUG_HOST", "<IP_ADDRESS>"), DEBUG_PORT)) and debugpy.wait_for_client()
in vscode in testing, the tests are not found. pytest --collect-only is blocked to the waiting_for_client

Please file on the repo for the Python extension, thanks


Harley Doesn't Have A Finishing Image

On line 1546 of her behaviour.xml, it says to use 9-finishing.png. This image is not in her folder. So it doesn't have an image for this. To fix this a finishing image can be made or her finished image can be used instead.

I changed it to use 9-heavy instead as a temporary measure until an image can be made.


Offer conditions task list, including references

This is an exploration of how we might move references to being an offer condition, with references given and collected within the service after an offer has been accepted.
➡ Preview
See alternative: #650

Initial sketch, showing offer conditions as a 'Task list', with the '2 references' condition linked to an interface for collecting references (based on the existing one at the application stage):

Here's an update showing current work-in-progress. We've split out the offer conditions into a separate task list from the References themselves, so that we can show the status of each reference request on this page rather than on a separate linked page.
Initial view (no references requested yet)

Subsequent view (2 references requested)

Still lots to do...

 New References prototype for Apply

Closing this, as we've gone with the other approach in #678


Add missing import for Build

It is used in https://github.com/devstepbcn/react-native-android-wifi/blob/master/android/src/main/java/com/devstepbcn/wifi/AndroidWifiModule.java#L132, but never imported in the file headers. This breaks the build (pun no intended).

Not appropriate here. I've submitted a PR to the original project.


Updates text in onboarding token modal

/lgtm

/cherrypick release-4.15

/cherrypick release-4.15-compatibility


HALON-689: Move everything around into new UI.

Created by: Fuuzetsu
As per RFC 020 with small liberties taken to better suit commands added
since it was written.
Drop rpc flag from mero-halon and halonctl while
messing around in cabal file.

Closing as an obsolete


DRILL-8263: upgrade libpam4j due to CVE

Description
CVE in libpam4j
Documentation
(Please describe user-visible changes similar to what should appear in the Drill documentation.)
Testing
(Please describe how this PR has been tested.)

@jnturton Can we get this into Drill 1.20.2?


User/password based auth

Is your feature request related to a problem? Please describe.
I can see why you might prefer not to support basic user/password auth, but it's what we currently use in production, and changing may have some difficulty... we can probably change to OAuth with some support from another team, but being depdendent on them, and on doing oAuth client integration are both some work, and having ability to use same credentials/auth mechanism with this library or with snowflex, out current library, would be a nice-to-have
Describe the solution you'd like
I guess either token would no longer be required for request, or token would gain support for uid and pwd keys?
Describe alternatives you've considered
OAuth, Private key based auth are all I think Avalanche currently supports.
Additional context
Not necessarily looking for you to implement this @forest (though if you want to, it's welcome), but, considering the order of operations of switching to avalanche, between this issue, desire in other issue for streaming support, and thought I'd at least raise the issue to get thoughts before deciding path forward.

@bglusman are you able to use priv_key? It is very similar to password-based auth but easier to rotate since Snowflake supports two keys. This is what we use in production.
To create a key:
openssl genrsa 2048 | openssl pkcs8 -topk8 -inform PEM -out snowflake-key.p8 -nocrypt
openssl rsa -in snowflake-key.p8 -pubout -out snowflake-key.pub

Update your Snowflake user setting the value of rsa_public_key to the contents of the snowflake-key.pub key. You need to remove all the newlines.
Then in avalanche, you set token to something like this:
token:  [
        account: "my-account",
        user: "my-user",
        priv_key: "contents of the snowflake-key.p8 file"
      ]

I would not recommend OAuth for production as tokens expire. Great for local development with short-lived tokens (8 hrs).
priv_key is more secure that passwords and it is possible to rotate without downtime.
If this really won't work for you, I'm open to PRs to add password based auth. I think you can add something like:
token:  [
        user: "my-user",
        password: "pass"
      ]

RIght, if we were doing oAuth we'd probably fetch a new client before every request or something, but no idea if that's practical/clean or not, never done oAuth in the background like that without user interaction that I recall.... anyway, I guess I'll try and look into adding support via token at some point, hopefully not huge effort, just wanted your input first.

haven't forgotten this, but hoping we won't need this and we can get our data ops team to provide private key based auth in CI first, and then in staging/production 🤞 if that works I'll close this I guess since no one else has indicated interest and I don't love it myself.

Ugh, unless I'm badly mistaken, snowflake doesn't support this for the REST API, so... unless that changes, this is a no-go, closing the issue for now

https://docs.snowflake.com/en/developer-guide/sql-api/authenticating


build scripts "leaking" files in /tmp (public_key.gpg)

These are being left around on build machines which prevents other users from running build jobs on the machine as it can't write to that file. We should either ensure they are removed immediately afterwards, or give it a unique name for each run.
Seen while validating the RISC-V builds as part of #1576 as we were validating the work as a different user ID on the build machines

Could an alternative of this be that we store this within the workspace?


Error with React SPA app and POST requests in Aspnet Core 2.1 rc1

Functional impact
Strange error when do post request to react app hosted in aspnet core 2.1 rc1
Minimal repro steps

dotnet new react
dotnet publish
run published version
Post request to localhost

Expected result
Not Found 404
No error on server
Actual result
Bad Request 400
Server Error:
fail: Microsoft.AspNetCore.Diagnostics.ExceptionHandlerMiddleware[1]
      An unhandled exception has occurred while executing the request.
System.InvalidOperationException: The SPA default page middleware could not return the default page '/index.html' because it was not found,
and no other middleware handled the request.
Your application is running in Production mode, so make sure it has been published, or that you have built your SPA manually. Alternatively
you may wish to switch to the Development environment.

   at Microsoft.AspNetCore.SpaServices.SpaDefaultPageMiddleware.<>c__DisplayClass0_0.<Attach>b__1(HttpContext context, Func`1 next)
   at Microsoft.AspNetCore.Builder.UseExtensions.<>c__DisplayClass0_1.<Use>b__1(HttpContext context)
   at Microsoft.AspNetCore.StaticFiles.StaticFileMiddleware.Invoke(HttpContext context)
   at Microsoft.AspNetCore.Builder.RouterMiddleware.Invoke(HttpContext httpContext)
   at Microsoft.AspNetCore.StaticFiles.StaticFileMiddleware.Invoke(HttpContext context)
   at Microsoft.AspNetCore.StaticFiles.StaticFileMiddleware.Invoke(HttpContext context)
   at Microsoft.AspNetCore.Diagnostics.ExceptionHandlerMiddleware.Invoke(HttpContext context)

Further technical details
If run in dev mode (dotnet run) - everything work as expected.
dotnet --version
2.1.300-rc1-008673

When running the app with dotnet are you running it from the Release/netcoreapp2.0 folder?  If so you need to run it from the Release/netcoreapp2.0/publish folder.

Thanks for answering, @ymor. I expect your diagnosis is correct.


ANCM TCP packet loss

I have a setup when multiple sites (asp.net core, asp.net, python) are hosted in IIS together with Shibboleth Service Provider which acts before request reaches the actual site code and passes authenticated user information to applications via request headers. It works fine until one of the headers get bigger (over 16 KB of base64 encoded text). Once it happens leading part of the request seem to do be dropped on transport level.
I've setup a wireshark to watch TCP packets going from IIS to Kestrel. When header values are small enough packets represent valid HTTP requests. When header got bigger the request seems to begin with part of long header value. First request line is missing, most of header definitions are missing. The message begins with truncated value of long header (which I've checked is really part of what should be send in that header) and ends with header value tail and possible other smaller header which might go after.
It seems like some buffer or memory overflow issue inside ANCM because it happens for ASP NET Core sites only. Similar setup works perfectly for ASP.NET and python sites for the same users.
Also, the same setup (ASP.NET Core sites) works perfectly on one machine but behaves as described above on another. Both machines are Windows 10 using same versions of IIS and same netcore hosting bundle (2.1.2).
Is there some setting I am missing ? What could go wrong ?

16kb sounds like you'd be hitting the IIS header size limit (MaxFieldLength), but if that were the case you should see an immidate 400 response without anything being forwarded to Kestrel.
What is MaxFieldLength set to on your system?
Can you test without Shibboleth?

@eger-geger Any new/other findings from your side on this issue?

@eger-geger can you also share a wireshark trace please?

Hi! Sorry for late response. I've left VM running for 2 weeks and cannot reproduce it there any longer. It was the only place where I could reproduce it. I'll try to investigate more and post here if I'll have new findings.

Closing this issue. @eger-geger if you see issues again, please let us know and file another one with a trace attached. Thanks!


Makefile: Use 'command -v selinuxenabled' instead of hard-coded path

The hard-coded path landed in 488216f5 (#154), but there's no need to require that path.  Using command -v (in POSIX) supports anyone who has selinuxenabled in their PATH.

I think this can be merged without running E2E test.
LGTM

Nack, this has broken docker hub CD

https://hub.docker.com/r/runcom/cri-o-system-container/builds/b9nzpqno8k9ypa6ebcmbza/


refactor common package directory structure

Issue:
currently we have components code files on the root directory, and some files that can be sub components on the same levels of there parent component.
Fix:
Refactor the directory structure that makes sense in this contexts
for example a  components | hooks | utils structure?
or some other convention we can follow when we maintain the code?
<component-name>/components/ ?sub components?
<component-name>/hooks/ ?hooks used?
<component-name>/utils/ ?helper/consts?
<component-name>/ComponentName.tsx

@sjd78 @rszwajko @sgratch we need to find a folder structure convention we all like and stick with it, any suggestions?

@sjd78 hi, @rszwajko is actually in a better position to do it, re-assigning to @rszwajko.
p.s.
@sjd78 if you started and want to continue, I opened a slack post to sync on this issue.

fixed in #403


Ensure TCB info version matches

Add a version check to ensure no new fields get added to the JSON output
of TCB info which should be considered in verification.
Symmetrical to the change proposed in #116

Current dependencies on/for this PR:

main

PR #116

PR #117   👈

This comment was auto-generated by Graphite.

@nick-mobilecoin started a stack merge that includes this pull request via Graphite.

@nick-mobilecoin merged this pull request with Graphite.


Members page

The members page at /pages/members.html should contain all the members of DevsCollab organization. Currently, it has the contributors i.e. people who have committed to the devscollab.github.io repository. Instead of that, it should show all the members from the GitHub organization.

Changed the contributors to members but only Public members are visible. For all the members to be visible the GitHub Auth2 Token must be verified or we can tell all the members to change their membership to public if they want others to see them as a member of the organisation on the website.


Group chat - Selected user is highlighted after clicking Add to group

If you haven’t already, check out our contributing guidelines for onboarding and email<EMAIL_ADDRESS>to request to join our Slack channel!

Version Number: 9.0.56-0
Reproducible in staging?: Y
Reproducible in production?: N
If this was caught on HybridApp, is this reproducible on New Expensify Standalone?: N/A
If this was caught during regression testing, add the test name, ID and link from TestRail: N/A
Email or phone of affected tester (no customers<EMAIL_ADDRESS>Issue reported by: Applause - Internal Team
Action Performed:

Go to staging.new.expensify.com
Go to FAB > Start chat
Click Add to group next to user
Click Next

Expected Result:
The selected user will not be highlighted (production behavior)
Actual Result:
The selected user is highlighted
Workaround:
Unknown
Platforms:

Which of our officially supported platforms is this issue occurring on?

[ ] Android: Standalone
[ ] Android: HybridApp
[x] Android: mWeb Chrome
[ ] iOS: Standalone
[ ] iOS: HybridApp
[ ] iOS: mWeb Safari
[x] MacOS: Chrome / Safari
[x] MacOS: Desktop

Screenshots/Videos

Add any screenshot/video evidence

https://github.com/user-attachments/assets/0fca6ff6-2ac2-4b9a-9e72-6457d1989f98
View all open jobs on GitHub

Proposal
Please re-state the problem that we are trying to solve in this issue.
Selected user is highlighted after clicking Add to group
What is the root cause of that problem?
We are adding a background colour to the selected user here
https://github.com/Expensify/App/blob/9400244540e32e0bc40086566f16b4a8c7ae549e/src/components/SelectionList/BaseListItem.tsx#L107
What changes do you think we should make in order to solve the problem?

We should remove StyleUtils.getItemBackgroundColorStyle(!!item.isSelected, !!isFocused, theme.activeComponentBG, theme.hoverComponentBG) from
https://github.com/Expensify/App/blob/9400244540e32e0bc40086566f16b4a8c7ae549e/src/components/SelectionList/BaseListItem.tsx#L107
as we don't need it here.
What alternative solutions did you explore? (Optional)

Offending PR: https://github.com/Expensify/App/pull/51158

Reverted in https://github.com/Expensify/App/pull/51795 & that was checked off by applause, so seems to be fixed!

Fix was submitted in https://github.com/Expensify/App/pull/51937


Footer changes when order starts processing, causing inconsistency

Describe the bug
The footer of the website undergoes changes when an order begins processing, leading to visual inconsistencies and a disrupted user experience.
To Reproduce

Open the website.
Place an order and proceed to the processing stage.
Observe the changes in the footer layout, style, or content during order processing.

Expected behavior
The footer should remain consistent in appearance and functionality throughout the user's journey, including during order processing.
Actual Behaviour
The footer's layout, style, or content changes during order processing, making the website look inconsistent.
Desktop (please complete the following information):

OS: Windows
Browser Chrome

Hi, Can you assign this issue to me? I am new to open source and would like to work on this.


Read CSV from S3 storage

How do I  read CSV from s3 storage.
I tried below code
$s3 = \Storage::disk('s3');
$filePath = '/uploads/' . $filename;
$csv = Reader::createFromPath( $s3->read($filePath ), 'r');
$csv->setHeaderOffset(0);
$stmt = (new Statement()) ->offset(0)->limit(25);

$records = $stmt->process($csv);

It logs the data in the file with the following errors
failed to open stream: No such file or directory at C:\\xampp\\htdocs\\pass_dash\\vendor\\league\\csv\\src\\Stream.php:179)

C:\\xampp\\htdocs\\pass_dash\\vendor\\league\\csv\\src\\Reader.php(69): League\\Csv\\Stream::createFromPath('questions,class...', 'r', NULL)

System informations
(In case of a bug report Please complete the table below)

Information
Description

League\Csv version
9.0

PHP/HHVM version
7.0

OS Platform
Windows 10

It worked with
$csv = Reader::createFromString( $s3->read($filePath ), 'r');

@deepexcel That reads in memory instead of using a stream solution.


Add Calin's test pages to axe test runner

@holloway These are all the pages @CalinDale mentioned. I believe he said there was a couple of copies of each template.
Does this look right?

Those look right. Though a couple of them currently have sub-pages that you could also add. Any with arrows in the cms:

Ah cool, added those now

@holloway Should we fix the issues with these pages before merging this PR? (I am tied up with other projects ATM)


is_empty for array

Hello!
As cast from bool to int64 and int64 to bool does not exist we can't :
len(array) or contains(array, needle)
OR
len(array) or contains(array, needle)
Objective : create query filters objects (in python).
So we need an : is_empty(array) -> bool or permit to cast bool to int64 easily
Could you add it ?
thank you!

What's wrong with len(array) != 0?

Yeah, we considered that before, but since we have a concept of "empty set" adding a function called is_empty() would be confusing. As suggested, len(ar) != 0 should be used.


feat: sudt transfer module

Readme

https://github.com/synapseweb3/crosschain-ckb-contracts/pull/27/files#r1330173718

TODOs
fn verify_channel_input(_args: Args<'_>) -> Result<(), Error> {
    // TODO: check channel type id input.
    Ok(())
}

fn verify_packet_input(_args: Args<'_>) -> Result<(), Error> {
    // TODO: check packet type id input.
    Ok(())
}

not passing CI test is under expectation?

not passing CI test is under expectation?

It's due to rust version used. I'll fix it later.

LGTM

the CI failed because of the rust toolchain in docker imagine, is it good under your native environment ?


Doesn't work

I have deployed the stremio docker container, added the plugin in jellyfin, but the stremio app does not show the jellyfin library, neither at TV, nor in PC, nor in phone.
Here's the log from the docker container:
Successfully connected to Jellyfin server: https://mydomain.com. Happy streaming.
HTTP addon accessible at: http://<IP_ADDRESS>:60421/manifest.json
request for catalogs: movie all
request for catalogs: series all

I also see an active device inside of Jellyfin, that being the jellyfin stremio addon, but nothing shows in the actual stremio app. Empty Library

After several attempts I got it working. I have also built a pi5 image as an arm64 image is not available. Sorry for the noise.


I would like to be able to choose to press the left and right mouse buttons together.

It would be nice to be able to move windows by pressing and dragging the left and right mouse buttons together without pushing key.
Thank you in advance.

Same here. Without simultaneous mouse click it is hard to use all day long. On the website there is a cool feature that supports mouse click. Althogh I cannot find it in my preference.
What am I doing wrong here?

@connect-m for that window to appear you need to toggle "Require mouse click"

but it does not support simultaneous clicks


Important accessibility issue! No alt text

Hi! I see that this has been filed previously (#134 ) - but it's pretty crucial (for me at least) to solve, as I'm being sued for accessibility non-compliance (my site uses Shopify, Shopify's theme uses this plugin).
https://github.com/jackmoore/zoom/blob/master/jquery.zoom.js#L92
Seems like the plugin creates a new image element based off the source. Can we get the plugin to copy over the alt text?

@heaversm Wow, I was just reading up on accessibility lawsuits yesterday. Sorry this is happening and that I may have contributed to that! I wish the party suing you had done their due diligence before flagging this as an accessibility issue, because I think copying over the alt text would go against accessibility guidelines, rather than the other way around.
Zoom's alt behavior is intentional, and a good faith attempt to provide the best accessibility. The zoomed img element is a copy that gets added to the DOM, leaving the original img (which carries it's own alt text) in place. Putting alt text on the copy doesn't provide the disabled user with any new information and lowers the signal to noise ratio.
Since the alt text is provided in an adjacent DOM element, I'm fairly confident this is what accessibility guidelines would categorize as a Decorative Image, or possibly a Group of Images.
The prescription for decorative images (or a group with a single meaning) is to give the redundant image element an empty alt value. Using an empty string (which is what Zoom does), indicates that the alt attribute is intentionally blank, where omitting the alt would indicate that the attribute was overlooked.
I've tried to determine if adding aria-hidden or role='presentation' would be beneficial, but I just haven't seen any evidence to suggest that it would. I believe adding those on top of the empty alt would be superstitious code. The WAI guidelines prescribe that the empty alt attribute is the right solution.


Add Python provider

This PR adds a Python provider for Nixpacks.
I think it works. It was acting a little bit strangely - the Flask server is starting, but not responding correctly - but that's probably just me not knowing Flask and not passing the right flags to Docker.

Make sure to add an integration test.

I'm thinking that I should also add pyproject.toml/setup.py/setup.toml support, as that seems to be the recommended way to set up Python projects at this point.

This should now be ready.

Note that setuptools support currently only extends to projects configured entirely in pyproject.toml.