YubiHSM2 Provisioning ("tmkms yubihsm init")

This is a tracking issue for building YubiHSM2 provisioning functionality directly into tmkms.
Design
The YubiHSM2 provides the following functionality, which this proposal intends to leverage:

fine-grained "capabilities" (i.e. permissions) which can be scoped to particular principals/authentication keys and objects in the HSM
multiple authentication keys which can each have their own capabilities
key wrapping: export and import HSM objects (i.e. signing keys) encrypted under a "wrap key" (a.k.a. key-encrypting-key or KEK) shared among HSMs
audit logging with hash-based continuity and mandatory consumption (which cannot be disabled)

This proposal seeks to leverage all of the above by creating a number of roles which each have fine-grained capabilities.
The basic workflow:

Authenticate to device as an admin
Invoke the Reset Device command
Authenticate to the device with default credentials
Replace the root admin authentication key with one derived from a randomly generated password
Create a number of role accounts with more restricted permissions

Roles
The following are the suggested "roles" (i.e. access control levels) which will be provisioned in the YubiHSM2. These are loosely based off operational practices for other HSMs.

admin (or "root"?): access to all HSM capabilities, including the ability to generate/import new keywrap / KEKs, or rotate authentication keys
operator: can generate new keys, and export existing keys under keywrap. useful for creating backups of keys and synchronizing keys between HSMs
validator: can generate Ed25519 signatures
auditor: can view and consume the audit log

The specific lists of capabilities are intentionally not enumerated here and are open for debate. I'd be particularly curious to hear people's thoughts on what capabilities operators should have.
Key Derivation
The proposed key derivation scheme follows BIP39, generating a root derivation secret and encoding it using the BIP39 wordlist as a recovery phrase, and deterministically generating the passwords of the other roles from the master phrase.
This proposal suggests using that root phrase for the admin password. Since the admin password confers absolute authority, deriving the passwords to more constrained accounts from it poses little security risk.
Both the YubiHSM2 and BIP39 hash the password using PBKDF2 to derive keys from it. Though PBKDF2 is not a particularly good password-based KDF, the input phrase will be high entropy, therefore obviating the benefits of using a stronger password-hashing algorithm (e.g. Argon2). For parsimony's sake, the suggested approach is to use PBKDF2 for key derivation in compliance with the existing Yubico tooling and BIP39.
Deriving passwords for the other roles can be accomplished using [BIP32] hardened derivation. Alternatively, HKDF could be used, as it is a standard cryptographic primitive for this purpose.
Briefly foregoing the selection of a specific KDF primitive, we can assume the following abstractly:

PBKDF(k): a "saltless" PBKDF taking a high-entropy (i.e. BIP39 password) generated password as input
KDF(ikm, info): key derivation function which takes an additional info domain separation / "personalization" parameter. For the purposes of this description, we'll assume it always outputs 16 random bytes.

Given this, the "raw" passwords for the other roles can be deterministically derived as follows, possibly with an additional version "tweak" to allow subsequent passwords to be generated if the initial one is exposed:
ikm = PBKDF(admin_password)
operator_password_raw = KDF(ikm, "v0 operator password domain separation string")
validator_password_raw = KDF(ikm, "v0 validator password domain separation string")
auditor_password_raw = KDF(ikm, "v0 auditor password domain separation string")

(Note: The v0 above could just as easily be a parameter in a [BIP49] derivation path)
There are a few options for serializing these passwords as text. One is to use the BIP39 method, but this may be overkill to use for each of these passwords. Alternatively they could be serialized as Bech32, which would provide human meaningful prefixes to identify them (e.g. admin-pw-v0, oper-pw-v0, val-pw-v0) and checksums to detect if they are typoed.
Furthermore, we can generate the initial wrap key / KEK using the same method:
wrap_key = KDF(ikm, "v0 wrap key")

This wrap key can be used to backup / export keys from the initial YubiHSM2, and to provision and restore backups on new YubiHSM2s.
In conclusion, I don't have strong opinions about the specifics of the key derivation approach, and would be happy to follow existing precedent. The above is a sketch of how a deterministic derivation scheme could work.
Implementation

Add declarative provisioning to the yubihsm crate, i.e. declare a provisioning profile, call provision function, get success or error response
Add a tmkms yubihsm init command to the KMS to manage the provisioning process with the specific profile to use for validators

Alternatives
The yubihsm-setup utility provides functionality similar to what is described above. The main motivations for building functionality into tmkms are:

Fine-grained control of a "happy path" profile for validator key management. While yubihsm-setup is a full-featured utility, it provides breadth/flexibility of functionality, but not as much depth as what's possible with a custom utility.
BIP39-like derivation scheme which is familiar to existing Cosmos / cryptocurrency users

PR to add yubihsm crate support for low-level provisioning here (WIP):
https://github.com/tendermint/yubihsm-rs/pull/174


Automated Package Upgrade

:tada: This PR is included in version 12.4.69 :tada:
The release is available on:

npm package (@latest dist-tag)
GitHub release

Your semantic-release bot :package::rocket:


Provider produced inconsistent result after apply - dynamo, amplitude, business central connectors

Describe the bug
A clear and concise description of what the bug is.
Been stuck on 0.7.3 because of business central connector not existing.  Now in 1.1.11 it exists, so I attempted to upgrade.  Unsucessful.
To Reproduce
Provide an example .tf configuration
amplitude:
data "aws_secretsmanager_secret" "amplitude_app_secret_by_name" {
  name = "${var.tags.Environment}-amplitude"
}

data "aws_secretsmanager_secret_version" "amplitude_app_secret" {
  secret_id = data.aws_secretsmanager_secret.amplitude_app_secret_by_name.id
}

resource "fivetran_connector" "amplitude_connector" {
  group_id           = data.aws_ssm_parameter.fivetran_group_id_external_id_versioned.value
  service            = "amplitude"
  run_setup_tests    = true
  trust_fingerprints = true
  trust_certificates = true

  destination_schema {
    name = local.amplitude_connector_name
  }

  config {
    project_credentials {
      project    = jsondecode(data.aws_secretsmanager_secret_version.amplitude_app_secret.secret_string)["project_name"]
      api_key    = jsondecode(data.aws_secretsmanager_secret_version.amplitude_app_secret.secret_string)["api_key"]
      secret_key = jsondecode(data.aws_secretsmanager_secret_version.amplitude_app_secret.secret_string)["secret_key"]
    }
  }
}

resource "fivetran_connector_schedule" "amplitude_schedule" {
  connector_id      = fivetran_connector.amplitude_connector.id
  sync_frequency    = var.fivetran_sync_frequency
  daily_sync_time   = var.fivetran_daily_sync_time
  paused            = var.fivetran_paused
  pause_after_trial = var.fivetran_paused
  schedule_type     = var.fivetran_schedule_type
}

business central
resource "fivetran_connector" "business_central_connector" {
  group_id           = data.aws_ssm_parameter.fivetran_group_id_external_id_versioned.value
  service            = "business_central"
  run_setup_tests    = true
  trust_fingerprints = true
  trust_certificates = true

  destination_schema {
    name = local.business_central_connector_name
  }
}

#
# schedule handles timing and state
#  github actions handles pause / resume for connectors
#
resource "fivetran_connector_schedule" "business_central_schedule" {
  connector_id      = fivetran_connector.business_central_connector.id
  sync_frequency    = var.fivetran_sync_frequency
  daily_sync_time   = var.fivetran_daily_sync_time
  paused            = var.fivetran_paused
  pause_after_trial = var.fivetran_paused
  schedule_type     = var.fivetran_schedule_type
}

dynamodb
resource "fivetran_connector" "dynamodb_connector" {
  group_id           = data.aws_ssm_parameter.fivetran_group_id_external_id_versioned.value
  service            = "dynamodb"
  run_setup_tests    = true
  trust_fingerprints = true
  trust_certificates = true

  destination_schema {
    name = local.dynamodb_connector_name
  }

  config {
    aws_region_code = var.app_data_mapping.app_aws_region
    role_arn  = "<arn>"
    sync_mode = "UseUnpackedModeOnly"
  }
}

#
# schedule handles timing and state
#  github actions handles pause / resume for connectors
#
resource "fivetran_connector_schedule" "dynamodb_schedule" {
  connector_id      = fivetran_connector.dynamodb_connector.id
  sync_frequency    = var.fivetran_sync_frequency
  daily_sync_time   = var.fivetran_daily_sync_time
  paused            = var.fivetran_paused
  pause_after_trial = var.fivetran_paused
  schedule_type     = var.fivetran_schedule_type
}

Expected behavior
should return consistent state
Logs & Output
Provide terraform CLI output on plan | apply. If it is possible, please, refer to this guide to enable debug output.
plan
 # fivetran_connector_schedule.amplitude_schedule must be replaced
-/+ resource "fivetran_connector_schedule" "amplitude_schedule" {
      ~ connector_id      = "<id>" # forces replacement -> (known after apply) # forces replacement
      + daily_sync_time   = "12:00"
      ~ id                = "<id>" -> (known after apply)
      ~ paused            = "false" -> "true"
        # (3 unchanged attributes hidden)
    }

  # fivetran_connector_schedule.business_central_schedule must be replaced
-/+ resource "fivetran_connector_schedule" "business_central_schedule" {
      ~ connector_id      = "<id>" # forces replacement -> (known after apply) # forces replacement
      + daily_sync_time   = "12:00"
      ~ id                = "<id>" -> (known after apply)
      ~ paused            = "false" -> "true"
        # (3 unchanged attributes hidden)
    }

  # fivetran_connector_schedule.dynamodb_schedule will be updated in-place
  ~ resource "fivetran_connector_schedule" "dynamodb_schedule" {
      + daily_sync_time   = "12:00"
      ~ id                = "<id>" -> (known after apply)
      ~ paused            = "false" -> "true"
        # (4 unchanged attributes hidden)
    }

Error: Provider produced inconsistent result after apply
│
│ When applying changes to fivetran_connector_schedule.dynamodb_schedule, provider "provider[\"registry.terraform.io/fivetran/fivetran\"]" produced an unexpected new value: .daily_sync_time: was
│ cty.StringVal("12:00"), but now cty.StringVal("").
│
│ This is a bug in the provider, which should be reported in the provider's own issue tracker.
╵
╷
│ Error: Provider produced inconsistent result after apply
│
│ When applying changes to fivetran_connector.amplitude_connector, provider "provider[\"registry.terraform.io/fivetran/fivetran\"]" produced an unexpected new value: .config.project_credentials: planned set element
│ cty.ObjectVal(map[string]cty.Value{"api_key":cty.StringVal("<removed>"), "project":cty.StringVal("<name>"), "secret_key":cty.StringVal("<removed>")})
│ does not correlate with any element in actual.
│
│ This is a bug in the provider, which should be reported in the provider's own issue tracker.
╵
╷
│ Error: Provider produced inconsistent result after apply
│
│ When applying changes to fivetran_connector_schedule.business_central_schedule, provider "provider[\"registry.terraform.io/fivetran/fivetran\"]" produced an unexpected new value: .daily_sync_time: was
│ cty.StringVal("12:00"), but now cty.StringVal("").
│
│ This is a bug in the provider, which should be reported in the provider's own issue tracker.
╵

Plugin version:
0.7.3 > 1.1.11
Additional context
Add any other context about the problem here.

Same issue in
tf plan:
Terraform will perform the following actions:

  # module.fivetran_connector[0].fivetran_connector_schedule.schedule will be created
  + resource "fivetran_connector_schedule" "schedule" {
      + connector_id      = "proponent_inordinate"
      + daily_sync_time   = "07:00"
      + id                = (known after apply)
      + pause_after_trial = "true"
      + paused            = "false"
      + schedule_type     = "auto"
      + sync_frequency    = "180"
    }

Plan: 1 to add, 0 to change, 0 to destroy.

tf apply:
module.fivetran_connector[0].fivetran_connector_schedule.schedule: Creating...
╷
│ Error: Provider produced inconsistent result after apply
│
│ When applying changes to
│ module.fivetran_connector[0].fivetran_connector_schedule.schedule, provider
│ "provider[\"registry.terraform.io/fivetran/fivetran\"]" produced an
│ unexpected new value: .daily_sync_time: was cty.StringVal("07:00"), but now
│ cty.StringVal("").
│
│ This is a bug in the provider, which should be reported in the provider's
│ own issue tracker.
╵

TF version: 1.5.4
provider "registry.terraform.io/fivetran/fivetran"   version: "1.1.11"
No issues in fivetran 1.1.10

Fix in 1.1.12 works for me
module.fivetran_connector[0].fivetran_connector_schedule.schedule: Destroying... [id=proponent_inordinate]
module.fivetran_connector[0].fivetran_connector_schedule.schedule: Destruction complete after 0s
module.fivetran_connector[0].fivetran_connector_schedule.schedule: Creating...
module.fivetran_connector[0].fivetran_connector_schedule.schedule: Creation complete after 0s [id=proponent_inordinate]

Apply complete! Resources: 1 added, 0 changed, 1 destroyed.

fixed 1.1.17!


[Fix-Later] Added Tile Selection

Added Tile Selection Feature
https://github.com/Electr0Gunner/PlantsVSZombiesHaxeEngine/assets/129583269/03f7ae2c-1682-4c8b-93fe-119897b75fdb
A bit of inaccuracy since the tiles are sized differently and the grid is evenly split.

Added planting mechanic
https://github.com/Electr0Gunner/PlantsVSZombiesHaxeEngine/assets/129583269/3935ce6a-9363-4d38-831e-d658f2cc5e35


Electron-308 (Fixes Spectron test cases)

Description
Fixed Spectron test cases on Mac & Windows  JIRA-ticket
Approach
How does this change address the problem?

Problem with the code: Missing library files

Fix:

Added missing library path

Fixed menu item position (Mac OS)

Added some error messages

Open Questions if any and Todos

[X] Automation-Tests
When solved, check the box and explain the answer.

@VishwasShashidhar & @VikasShashidhar Please review. Thanks 😄

@VikasShashidhar & @VishwasShashidhar Updated the PR. Please review. Thanks 😄

@VishwasShashidhar I've updated the error messages please review. Thanks 😄


Fast Binary Serializer is not compact with collections.

Redo the fast binary protocol so collections handle types more compact.
[ktype << 3 | itype] [num] [k] [v] ... [k] [v]
instead of current
[num] [ktype] [k] [vtype] [v] ... [ktype] [k] [vtype] [v].
And pack collection booleans to varint to be type consistent (same as proto).

Fixed.


An error occurred when I used ray tracing to render on the A100, [svulkan2] [error] Failed to denoise OptiX Error: OPTIX_ERROR_INVALID_VALUE

An error occurred when I used ray tracing to render on the A100 .
The error is as follows
[svulkan2] [error]  OptiX Error: OPTIX_ERROR_INVALID_VALUE
[svulkan2] [error] Failed to denoise OptiX Error: OPTIX_ERROR_INVALID_VALUE

Vulkan configuration see https://haosulab.github.io/ManiSkill2/getting_started/installation.html#vulkan,
gpu driver has been upgraded to 535.104.05,

Can you share your environment configuration on the A100, ubuntu, cuda version,gpu driver, etc.,
or do you have any other suggestions，thanks!

@fbxiang any idea?

OptiX is an NVIDIA framework directly built into the driver. These errors sometimes pop up randomly and go away after a restart. In general, something is not quite right with your NVIDIA driver/GPU setup. Unfortunately I do not have a good way to debug such issue.

I found the problem and fixed it.
when I created docker, I did not mount /usr/share/nvidia, so I could not find nvoptix.bin.
Refer to

hi @swearos
I have the same problem. Could you give me more information how you solve it?
python -m mani_skill.examples.demo_random_action -e PickCube-v1 --render-mode="human" --shader="rt-fast"
info {'elapsed_steps': tensor([67], dtype=torch.int32), 'success': tensor([False]), 'is_obj_placed': tensor([False]), 'is_robot_static': tensor([False]), 'is_grasped': tensor([False])}
[2024-12-25 22:47:18.104] [svulkan2] [error] Failed to denoise OptiX Error: OPTIX_ERROR_INVALID_VALUE

@kingchou007 YYou can refer to my last reply, with links to other people's discussions.
Add -e NVIDIA_DRIVER_CAPABILITIES=all when creating a docker image


New version: PhapDieuDuong.ExifGlass version <IP_ADDRESS>

Pull request has been created with komac v2.1.1 :rocket:
Microsoft Reviewers: Open in CodeFlow

Automatic Validation ended with:

Executable C:\Users\validator\AppData\Local\Microsoft\WinGet\Links\ExifGlass.exe returned exit code: -532462766

(Automated response - build 869.)

@wingetbot waivers Add Validation-Executable-Error

For moderators
This account is automated by Github Actions and the source code was created by CoolPlayLin. If you have any questions about any pull request, don't hesitate to ping Exorcism0666.

[!warning]
With the new version of Komac, numerous Pull Requests may contain bugs or unwanted elements. If such issues arise, please tag russellbanks so that these bugs can be addressed in future updates.

[!important]
Please carefully review these Pull Request before merging. If it is a Pull Request for removing incorrect content and the URLs are issue, free upon manual checking, please close this Pull Request directly. (It is best to inform Exorcism0666 of the closure.)

良い一日をお過ごしください！

Hi @Exorcism0666,

This PR's version number <IP_ADDRESS> has 4 parameters (sets of numbers between dots - major, minor, etc), which is greater than the current manifest's version 1.4.1, which has 3 parameters.

Does this PR's version number exactly match the version reported in the Apps & features Settings page? (Feel free to attach a screenshot.)
(Automated response - build 870)

Hi @Exorcism0666,

This PR's version number <IP_ADDRESS> has 4 parameters (sets of numbers between dots - major, minor, etc), which is greater than the current manifest's version 1.4.1, which has 3 parameters.

Does this PR's version number exactly match the version reported in the Apps & features Settings page? (Feel free to attach a screenshot.)
(Automated response - build 870)

@stephengillie


CONDITIONS_MAP is missing key halfbewolkt_regen

Version of the custom_component

1.0.2
Describe the bug
CONDITIONS_MAP is missing halfbewolkt_regen
Debug log

Traceback (most recent call last):
  File "/usr/src/homeassistant/homeassistant/helpers/entity_platform.py", line 383, in async_add_entities
    await asyncio.gather(*tasks)
  File "/usr/src/homeassistant/homeassistant/helpers/entity_platform.py", line 588, in _async_add_entity
    await entity.add_to_platform_finish()
  File "/usr/src/homeassistant/homeassistant/helpers/entity.py", line 615, in add_to_platform_finish
    self.async_write_ha_state()
  File "/usr/src/homeassistant/homeassistant/helpers/entity.py", line 368, in async_write_ha_state
    self._async_write_ha_state()
  File "/usr/src/homeassistant/homeassistant/helpers/entity.py", line 404, in _async_write_ha_state
    attr.update(self.state_attributes or {})
  File "/usr/src/homeassistant/homeassistant/components/weather/__init__.py", line 180, in state_attributes
    if self.forecast is not None:
  File "/config/custom_components/knmi/weather.py", line 93, in forecast
    ATTR_FORECAST_CONDITION: CONDITIONS_MAP[
KeyError: 'halfbewolkt_regen'

Contacted API provider to see if there are more options missing in their docs.


Crash when creating a swapchain with DXGI_SWAP_EFFECT_FLIP_DISCARD

Description

Renderdoc crashs when creating a swapchain with DXGI_SWAP_EFFECT_FLIP_DISCARD.
RDOC 013128: [09:56:33]     dxgi_wrapped.cpp( 515) - Error   - Failed to get swapchain backbuffer 1: HRESULT: DXGI_ERROR_INVALID_CALL
Exception thrown at 0x00007FFBB855B589 (renderdoc.dll) in WorkbenchBR.Windows.exe: 0xC0000005: Access violation reading location 0x0000000000000000.
I'm not quite sure but I think the error came with the update to Renderdoc 1.10 but I dont remember the number of the previous version.
RenderDoc calls IDXGISwapChain::GetBuffer with buffer = 1 but this seems to be invalid for a swapchain that was created with
DXGI_SWAP_EFFECT_FLIP_DISCARD .
MSDN states:
If the swap chain's swap effect is DXGI_SWAP_EFFECT_DISCARD, this method can only access the first buffer; for this situation, set the index to zero.
It seems that this is also true for DXGI_SWAP_EFFECT_FLIP_DISCARD.
Update:
The fix described below is in a pull request: https://github.com/baldurk/renderdoc/pull/2056
I tested it and it seems to work but I'm still not sure if other changes are necessary or if this change has some side effect.
Possible fix:
I have found a possible solution for the crash but I did not test it and I don't know if other changes are necessary.
In dxgi_wrapped.cpp: WrappedIDXGISwapChain4::WrapBuffersAfterResize() the DXGI_SWAP_EFFECT_FLIP_DISCARD case is not handled so this could be added:
void WrappedIDXGISwapChain4::WrapBuffersAfterResize()
{
//...
  if(desc.SwapEffect == DXGI_SWAP_EFFECT_DISCARD)
    bufCount = 1;
//NEW:
if(desc.SwapEffect == DXGI_SWAP_EFFECT_FLIP_DISCARD)
    bufCount = 1;
///...
}

Steps to reproduce

The following code is the smallest C# 9 program to reproduce the error.
Sorry that I do not provide a C++ example but the swapchain construction should be very similar to C++ and show what parameters were used.
using System;
using System.Windows.Forms;
using SharpDX.DXGI;

// create simple windows forms window
Form form = new Form();
form.Show();

// create Direct3D11 device
var device = new SharpDX.Direct3D11.Device(SharpDX.Direct3D.DriverType.Hardware);

// create swapchain with DXGI_SWAP_EFFECT_FLIP_DISCARD
SharpDX.DXGI.SwapChainDescription swapChainDesc;
swapChainDesc.BufferCount = 2; //The buffer count must be at least 2 for flip model
swapChainDesc.Flags = SwapChainFlags.None;
swapChainDesc.IsWindowed = true;
swapChainDesc.OutputHandle = form.Handle;
swapChainDesc.SampleDescription = new SampleDescription(1, 0);
swapChainDesc.ModeDescription = new ModeDescription(
    form.ClientSize.Width,
    form.ClientSize.Height,
    new Rational(0, 1),
    Format.R8G8B8A8_UNorm);
swapChainDesc.Usage = Usage.RenderTargetOutput;

swapChainDesc.SwapEffect = SwapEffect.FlipDiscard;

var dxgiDevice = device.QueryInterface<SharpDX.DXGI.Device1>();
var dxgiAdapter = dxgiDevice.GetParent<SharpDX.DXGI.Adapter>();
var factory = dxgiAdapter.GetParent<SharpDX.DXGI.Factory>();

var DXGISwapChain = new SharpDX.DXGI.SwapChain(factory, device, swapChainDesc);
// crashs here: System.AccessViolationException: Attempted to read or write protected memory. This is often an indication that other memory is corrupt.
// more detailed from another program:
// Exception thrown at 0x00007FFBB855B589 (renderdoc.dll) in WorkbenchBR.Windows.exe: 0xC0000005: Access violation reading location 0x0000000000000000.

while(form.Visible)
{
    DXGISwapChain.Present(0, PresentFlags.None);
    Application.DoEvents();
}

Environment

RenderDoc version: 1.10
Operating System: Windows 10 2004 x64
Graphics API: Direct3D 11
Hardware: GTX 1070
Driver: 452.06

Someone else ran into this yesterday as well and we needed some clarification from MS about exactly what is legal here since the docs are lacking as usual. That commit should fix it by only querying for buffer 0 in D3D11 for DXGI_SWAP_EFFECT_FLIP_DISCARD.

Had same crash on creation of DXGI_SWAP_EFFECT_FLIP_DISCARD swapchain
1.10 is broken, nightly build (https://github.com/baldurk/renderdoc/commit/2ea17af719bfefb96f968175604e9115b90fd446) is ok


Create a pip installable python package 'drone_sim' with whl distribution

Changes made

Added the setup.py file with the available credential using setuptools and made a namespace package
Removed the __ init __.py file from drone_sim folder as it is a namespace package, hence not required
Added the .whl distribution in the dist folder

How to install with pip

Clone the repository in desktop
Open command line in the dist folder of drone_sim (ex. - ...\drone_sim\dist)
then run the following command
python -m pip install <.whl filename>
filename= "Drone_Simulator-0.1.0-py3-none-any.whl"
------------------------------------------------or------------------------------------------------------
Open command line and run the following command
python -m pip install git+<repository link>

@SuhrudhSarathy could you please review this?

Hey!
The setup.py looks good to me. I don't think its necessary to include the build files into the main branch. Could you make a separate branch build which has the build files, egg info etc. and on the main branch just keep the setup.py, requirements.txt without the build and whl file? I think that should be good. Send a PR after you have modified the README.txt in both the branches.

Hey @SuhrudhSarathy
I have made the changes as you said. I had just one suggestion that in the requirements, Could you keep
matplotlib>=3.4.3
numpy>=1.21.2
if the code is compatible for higher versions? that way it won't force the user's updated library to roll-back while installing the drone_sim package.

Great! Looks good to me!


Checkbox without text

Report from Email:
For my current side-project i chose Picnic as CSS framework. I read on hackernews that you always try to improve picnic, so heres something that in most cases its not necessary to have a checkbox without text, but in my case it would make sense (see image):

The checkbox disappears if I don't have a label for it. When I just don't put any text in the label, there still exists some space. I sure find a little hack for it, but this 'problem' still exists.

I don't know the solution but maybe it worth adding some JS workaround for this thing?
Picnic's real nice framework - my thanx too !

This problem comes from #123 , the <td> have a big padding-right (see reasoning in that issue) not from the checkbox itself.


enable user to initialize DWI pipeline from ezBIDS

Currently, the ezBIDS UI has a button at the end of the DICOM -> BIDS transformation process: "SEND TO BRAINLIFE". Clicking this button will trigger brainlife to create a new project with the given session ID. We also want another button "SEND TO BRAINLIFE AND RUN DWI" with the ability to trigger some DWI pipeline in brainlife if the user clicks this button.

merged in


fzf.sh: line 34: bind: warning: line editing not enabled

what
/etc/bash_completion.d/fzf.sh: line 34: bind: warning: line editing not enabled

Closed by #390


feat(llm): add together.xyz as an LLM provider

Description: added together.xyz as an LLM provider,
Issues: fix some linting issues
twitter handle @jilijeanlouis

Please make sure your PR is passing linting and testing before submitting. Run make format, make lint and make test to check this locally.
If you're adding a new integration, please include:

a test for the integration, preferably unit tests that do not rely on network access, ✅
an example notebook showing its use. It lives in docs/extras directory. ❌ => classic LLM provider

this is awesome, thanks @jqueguiner!


to_packet() fails to parse PTR response

I'm trying to request a list of services by performing a PTR _services._dns-sd._udp.local request. Unfortunately, the library code fails to parse all the responses and I don't understand why. Here is a test to reproduce the issue:
#[test]
fn bad_response() {
    let resp: &[u8] = &[
        0x00, 0x00, 0x84, 0x00, 0x00, 0x01, 0x00, 0x01, 0x00, 0x00, 0x00, 0x00, 0x09, 0x5f, 0x73, 0x65,
        0x72, 0x76, 0x69, 0x63, 0x65, 0x73, 0x07, 0x5f, 0x64, 0x6e, 0x73, 0x2d, 0x73, 0x64, 0x04, 0x5f,
        0x75, 0x64, 0x70, 0x05, 0x6c, 0x6f, 0x63, 0x61, 0x6c, 0x00, 0x00, 0x0c, 0x80, 0x01, 0xc0, 0x0c,
        0x00, 0x0c, 0x00, 0x01, 0x00, 0x00, 0x00, 0x0a, 0x00, 0x11, 0x09, 0x5f, 0x73, 0x66, 0x74, 0x70,
        0x2d, 0x73, 0x73, 0x68, 0x04, 0x5f, 0x74, 0x63, 0x70, 0xc0, 0x23
    ];
    let buf: PacketBuf = resp.into();
    let _packet = buf.to_packet().unwrap();
}

Thanks for reporting the bug and sending the content of the packet. I've just published an updated version, the bug should be gone now, please let me know if it works

Now it works, thank you!


Made rayon reference work on emscripten.

I don't specifically know why this is needed, but when building under Emscripten via cargo-web, rayon cannot be found without this change. Works fine via regular builds, so I'm not sure what's different in the emscripten build environment.
These changes fix my problem without breaking regular builds. Would be nice to merge and release a new version so I can get specs working in my wasm project. I can't seem to get this working by overriding the dependency in my own Cargo.toml.
Thanks!

Hello @ndarilek, thank you for the PR!
Using cargo-web 0.3.1 and a freshly installed asmjs-unknown-emscripten, I cannot reproduce any errors. Also, par_seq shouldn't even be built under emscripten, since it's using #[cfg(not(target_os = "emscripten"))].

Ah, hmm, I wonder if the issues are that:
* I'm using cargo-web 0.4.0. Not sure if that makes a difference--I'm
new to all of this.
 * I use cargo web start --target-webasm-emscripten. Maybe the
different platform name doesn't enable the right set of features to
disable par_seq? (I.e. webasm vs. asmjs.)
Thanks.

Uploaded new version, please try again.

Seems to work. Thanks for the quick turnaround! :)


CosmosDB bicep release

API change check
APIView has identified API level changes in this PR and created following API reviews.
Azure.ResourceManager.CosmosDB


Release PR for Grand prix cycliste de québec 3.3.0

This is the minor release pull request for 3.3.0
It includes some test refactoring, code clean up, and the addition of Server Timing headers and a timing API for sending them.

Changes Unknown when pulling 419ba50568eda2922e62f94a2e33bd62567428d5 on Grand-Prix-Cycliste-de-Québec-3.3.x into ** on master**.

Changes Unknown when pulling bb604e3e2a4847c3ce1a33785ea439fa8e073314 on Grand-Prix-Cycliste-de-Québec-3.3.x into ** on master**.

Changes Unknown when pulling a3beb5f066c85d5534dbcd5801d9cf1e0001db3d on Grand-Prix-Cycliste-de-Québec-3.3.x into ** on master**.

Changes Unknown when pulling dba5831cf7f946c09d85909516ff3bb38808f8f7 on Grand-Prix-Cycliste-de-Québec-3.3.x into ** on master**.


Expose mutable arithmetic

Could you expose mutable versions of +, -, *, and /?
# Compute x + y and write the result in x
add!(x, y)

These would avoid the allocations of new intermediate numbers, and allow us to extend some of the capabilities of Arb with much less overhead.

add2! etc in master (both args must be same type, same precision)


Update to 1.3.0 OpenId Connect Server version

Hi,
I have updated the project to support the new version 1.3.0 of OpenId Connect Server.
Best Regards,
Angel.

Fix the startup of OpenId Connect with oracle database

The master branch when i pull and try run the sample/default or sample/sample-ui ends up with error :
Caused by: org.springframework.beans.factory.UnsatisfiedDependencyException: Error creating bean with name 'defaultOAuth2ClientDetailsEntityService': Unsatisfied dependency expressed through field 'clientRepository'; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'jpaOAuth2ClientRepository': Injection of persistence dependencies failed; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'eclipseLinkJpaConfig' defined in URL [jar:file:/home/ravi/workspace/openid-connect-server-spring-boot-master/samples/default/build/libs/samples/default-0.1.4-SNAPSHOT.jar!/BOOT-INF/lib/openid-connect-server-spring-boot-config-0.1.4-SNAPSHOT.jar!/org/mitre/springboot/config/EclipseLinkJpaConfig.class]: Instantiation of bean failed; nested exception is org.springframework.beans.BeanInstantiationException: Failed to instantiate [org.mitre.springboot.config.EclipseLinkJpaConfig$$EnhancerBySpringCGLIB$$118b1b41]: Constructor threw exception; nested exception is java.lang.NoSuchMethodError: org.springframework.boot.autoconfigure.orm.jpa.JpaBaseConfiguration: method ()V not found
at org.springframework.beans.factory.annotation.AutowiredAnnotationBeanPostProcessor$AutowiredFieldElement.inject(AutowiredAnnotationBeanPostProcessor.java:588) ~[spring-beans-4.3.7.RELEASE.jar!/:4.3.7.RELEASE]
Will see if i can check on the issue. But it would be of great help if you have any insights on this issue.
We are trying to use open-id connect in one of our application and this is a great starting point for us :+1:

Hi @ravipetlur,
I have updated some files for compatibility with Mitre 1.3.0.
But your problem is other. You should update the artifacts openid-connect-server-spring-boot-config and openid-connect-server-spring-boot-ui-thymeleaf with the last version 1.4.0-SNAPSHOT in your gradle cache repository.
This exception is because Gradle is not using the versions of the branch but the central repository ones.

Thanks, I'll merge and review, and once all looks good I'll cut a new release. Thanks for contributing!


Downgrade prio and cleanup some dependencies

Downgrade to prio 0.16.3
Move e2e to daphne-server

I thought moving the tests to daphne-server would let us get rid of the getrandom hack, turns out it doesn't. I kept it anyway because I think it still makes sense.
When/if https://github.com/divviup/libprio-rs/pull/1059 gets merged we can finally get rid of the getrandom hack


ClickOnce Publish not working in .NET Core with Native SNI

Originally posted by @tatoadsl in https://github.com/dotnet/SqlClient/issues/441#issuecomment-729501673
Hello,
This seems to be not solved or at least I can't make it work properly even trying the many workaround proposed here.
My project is .NET 5 using EF Core 5.0. The dependency uses is Microsoft.Data.SqlClient 2.0.1 and the files are not deployed with ClickOnce.
The problem is the same, can't find the Microsoft.Data.SqlClient.SNI.dll file as it is not copy to the deploy folder using ClickOnce publish.
Seems it is solved when targeting a .NET Framework project but not when it is with a .NET Core project.
Any expectation of a solution for this. Now that ClickOnce is avaiable for .NET Core projects can't be deploy properly because this issue.
Thanks.
PD: Not sure if this was the right place to comment on this or better to pen a new issue.

@tatoadsl
I've opened a new ticked to investigate this issue, to track well.
Will post here when I have some update!

Thank you so much @cheenamalhotra . I invistigate more to try to find out if it is a package problem or not and I find out that could be maybe a ClickOnce itself problem under .NET Core and .NET 5.0
Find out other dependencies are having issues too when instead of using EF Core for SQL Server I tried EF Core for SQLite and also failed on deploy some dependencies of the package.
So at this point I'm not sure if it is ClickOnce itself or the package, but thanks for looking into it.

Issue also exists for single file .net 5 builds regardless of if click once is used

Related issue: https://github.com/dotnet/runtime/issues/44602

Could not repro by publishing ClickOnce app with latest net6 version of EF Core. Files are deployed in runtimes folder. Closing as no longer repro.


Add apublications method

To get more information about individual occurrences I'd like to be able to get from the occurrence information to publication data.  To do this I would like to be able to pass in a comma separated string of occurrence IDs, or dataset IDs (in the case of Neotoma data), or both, and get back a formatted set of publications.  Preferably in one of two styles:

BibJSON (or Bibtex)
Citation (APA, or whatever) . . .

/pubs?occ_id=1234,12345,2242&dataset_id=143

Currently the options aren't really available from Neotoma, but we can pass something that looks like it. . .
If you could also search for publiations associated with a spatial or temporal domain that would be cool, but I'm not sure what it would do.
Also, would we then have the reverse method for occurrences?  A list of publications could be passed into the occurrence method to return all possible associated occurrences.

I agree that we need one of these.  In order to implement it, I will need to be able to query Neotoma for publications.  I will talk to Mike Anderson about creating such an operation.

In Neotoma the publications are all stored in the publications, but I only see a pubs table in the paleoDB, which has only 267 records (in my MariaDB version that @jpjenk sent me).  It seems to me like we actually have different conceptions of how publications relate to occurrences/datasets.
Does each occurrence have some sort of authority for a published record somewhere else?  If it doesn't, then maybe this is all moot.

PBDB has the same concept, but we use a different name for it.  In PBDB terminology, they are called "references" and are stored in the table named "refs" with key "reference_no".  If you look at the other basic data tables (i.e. collections, occurrences, taxa) you will see that each one includes a "reference_no" column to indicate the publication from which the information was entered.
The "publications" table in PBDB instead stores information about publications that used PBDB data, a much smaller set.


[feature] [docker] Provenance output name

Is your feature request related to a problem? Please describe.
Currently the provenance output is uploaded to a folder called outputs and then the filename is hardcoded as attestation1.intoto.sigstore.
See this workflow as an example https://github.com/slsa-framework/example-package/actions/runs/4159801908
Describe the solution you'd like
I'd like to

Rename the output folder to slsa-outputs
Cleanup the extraneous files
Rename the filename of the provenance.

For the final one, we currently use a workflow option provenance-name to configure the provenance filename. We may include that here too. Using the artifact_path as a default filename is not possible because it may include wildcards.
@rbehjati From a user perspective, what do you think about a default filename? Should we fix it at attestation.intoto.sigstore, and allow the user to configure it with a workflow input?

I think we need to allow the user to specify the name of the provenance. A provenance-name workflow option sounds good to me.
In Oak we generate multiple provenances, and we want to be able to get a separate provenance file for each.


ARROW-13729: [Website] setup datafusion python binding docs

closes https://github.com/apache/arrow-datafusion/issues/837
cc @houqp @alamb @jorgecarleitao and @andygrove

Looks amazing, thanks @Jimexist !
@alamb @jorgecarleitao and @andygrove, do we need to wait for a voted datafusion 5.1.0 release before we can merge this PR?

@houqp  I do not think any official vote is required to release documentation as I wouldn't personally consider it part of the release.

@Jimexist do we need to update https://github.com/apache/arrow/blob/master/docs/source/developers/documentation.rst as well to mention installation of the datafusion package?
I am not familiar with the automated doc build and publish pipeline, @kszucs @pitrou @lidavidm @wesm @fsaintjacques do we need to update automation to build and install the datafusion python package?

I don't think Datafusion is a "supported environment" at the same level as C++, Python, etc. Since this documents the Python Datafusion library, this could go into the "Python" section.
However, since Datafusion is a distinct library from PyArrow (and has its own release schedule), it seems to me it would be better if its documentation lived in a different place altogether. That could be on https://arrow.apache.org, but it could also be hosted on https://readthedocs.org/, for example.
@amol-  What do you think?

I don't think Datafusion is a "supported environment" at the same level as C++, Python, etc. Since this documents the Python Datafusion library, it could go into the existing "Python" section.
However, since Datafusion is a distinct library from PyArrow (and has its own release schedule), it seems to me it would be better if its documentation lived in a different place altogether. That could be on https://arrow.apache.org, but it could also be hosted on https://readthedocs.org/, for example.
@amol- What do you think?

I think I would vote for having datafusion into its own documentation (on readthedocs or anywhere else as you suggested), surely it's not one of the supported environments, but in the end is not even part of libarrow/pyarrow itself so I'd avoid mixing its documentation into the one of pyarrow.

Relevant mailing list discussion: https://lists.apache.org/thread.html/r0ed76cc60cdf651e8cf5c82a21cc64114c1f6d174dc5487434bd32ef%40<dev.arrow.apache.org>

based on the last reply from @kszucs (https://lists.apache.org/thread.html/r5c9341fe5360ae249532724da2bf92bd2ed661d1c58f599212e82107%40<dev.arrow.apache.org>), how about we reuse the current sphinx setup/theme for datafusion, but have a new self-contained website created under /datafusion  folder? From there, we could host not just the python api/user doc, but also datafusion user docs in general.

@pitrou @amol- based on @wesm's suggestion in https://lists.apache.org/thread.html/r9500355019f7e438ed2417bce577e1a76dbcba742c2c7e1008dcffd5%40<dev.arrow.apache.org>, are you all cool with us hosting datafusion related docs in its own website under https://arrow.apache.org/datafusion?

@houqp thanks for migrating this code. maybe now I can close this pull request?

I think so, all of your change in this PR should have been merged into datafusion repo now :)


fix MovieClip texture update issue

That bug appeared in my fork a few month ago, and @GoodBoyDigital made the same mistake with adding texture versions

👍


Memoization records cause problems for parses following empty-string parses

Consider the following simple grammar, where ε represents the empty production:
e ::= A e
    | ε

If a Grammar object is made representing this grammar, it works correctly except under the following condition:

Parse with the empty string (i.e., []).
Parse with a non-empty string (e.g., [(0, "A")])

The second parse will not function correctly. This appears to be caused by an issue with the MemoizationRecords perhaps becoming stale in some way and causing invalid results to be produced.

Recent commit adds this function to the Grammar. The purpose of this is to reset the memoization records prior to each use of the parse function.
I would prefer to find a more principled solution to the problem... preferably one that doesn't require a completely traversal of the expression grammar prior to each parse. However, in the meantime, this will have to do.


HourglassNet Checkpoint

Hi, Will it be possible to provide hourglassnet model python file along with model checkpoint for which you reported the analysis in the first column and Table 3. in the paper here
https://arxiv.org/pdf/1806.09573.pdf
I want to use the checkpoint model to initialize hourglass model and finetune it for another task that involves depth estimation in different settings.
Thanks
Aman Raj

Hi Aman, I have updated code and uploaded the pretrained model.

thank you so much @wfchen-umich  for quick response on this and sharing the model.


Workspace disappears when removing external display

Hi folks
I use 10 workspaces - 1 to 5 on my laptop screen, 6 to 10 on my external monitor.
For some reason, when I disconnect my external monitor, I tend to lose workspace 6.
Is this an issue with Yabai, or is it something to do with the Mac desktops?
Sorry, I'm coming from Debian/i3, so I'm a bit of a Mac novice.

It's a (terrible) MacOS thing. https://github.com/koekeishiya/yabai/discussions/238#discussioncomment-193399

Urgh that's rank :(
On Wed, 7 Apr 2021 at 14:16, John Allen @.***> wrote:

It's a (terrible) MacOS thing. #238 (comment)
https://github.com/koekeishiya/yabai/discussions/238#discussioncomment-193399
—
You are receiving this because you authored the thread.
Reply to this email directly, view it on GitHub
https://github.com/koekeishiya/yabai/issues/880#issuecomment-814906189,
or unsubscribe
https://github.com/notifications/unsubscribe-auth/AAY7VLJCPPPDT5JYCK3253TTHRLLLANCNFSM42QYUE7Q
.

--
Duncan Wraight
www.SeriouslyFish.com


Provide a standalone file

There's currently no way to include this library without browserify or bundling a standlone. It would be nice to have a prebundled version of the library available through git.
And wzrd.in can't be used because snabbdom has multiple entry points (ie snabbdom/h)

I agree. Creating a build with all the default modules would be useful.
I'd highly appreciate a PR. I'm pretty indifferent with regards to build system/bundler.

Sure

Added PR #119


DROP TABLE regression

Some regression happened, all dialects are affected.
CREATE TABLE dog (
  name TEXT NOT NULL,
  breed TEXT NOT NULL,
  is_good INTEGER AS Boolean NOT NULL DEFAULT 1
);

dropTable:
DROP TABLE dog;

No table found with name dog
8    DROP TABLE dog
                ^^^

looks like a sqldelight issue - is it something we should be fixing? is it a requirement that you can drop the table with a deferred query?

Not really. Used it in some tests, I member I wanted to recreate MySQL tables with TRUNCATE but it wasn't supported, so had to use DROP/CREATE. Now switched to DELETE.

alright - safe to close this out then?


Mathematical Improvements

Added more mathematic operations.

I'm not a fan of blindly adding every math function provided by libc; or, in this case, the standard Go runtime. A lot of those functions aren't useful for a shell like elvish and will never be used. Some of them can't even be used without a shim function; e.g., math.Float32frombits().
~/projects/3rd-party/elvish> math:float32frombits 234
Exception: wrong type of 1'th argument: wrong type: need !!uint32, got string
[tty], line 1: math:float32frombits 234

Also, all of the functions which are ultimately included require at least some basic unit tests.
@enty8080 I suggest changing this PR to focus on a small number of math functions that pretty much everyone would agree could be useful and that accept a single float64 argument; e.g., trunc, sin, cos, tan, log and log2. Add those to the dispatch table and also include appropriate tests in the pkg/eval/module_math_test.go file.
Then tackle more complex functions that might be useful. Such as math.Min(). Although that probably requires some discussion since the Go version only takes two values and it might be better if elvish had a wrapper to support an arbitrary, greater than one, number of values so you can write max = (math:max 3  7 5) rather than max = (math:max 3 (math:max 7 5)).

FWIW: As part of adding documentation of the math: module I am also adding support for functions such log (the natural logarithm function).

@enty8080 See https://github.com/elves/elvish/pull/925/commits/73bc68975281eb025146c9c163f06b644a10a633 for an example of how to add new math functions that have appropriate unit tests. That you did not document the functions you added is understandable since the math: namespace you augmented did not have any documentation. However, the lack of unit tests for the math commands you introduced is not acceptable. If you had written unit tests for each math command you added you would have noticed that many of them are not usable.

Rejecting in favor of #937.


Investigate lookup of other TLDs?

Such as .co.nz, .com.au

This, please :)

for something like 'example.com' to see every other TLD

Basically, I'd love to do a search for my brand, "example" (with no extension/TLD), and see what extension/TLDs are taken for it already.

Is this worth looking at again now that this functionality has been added in dnstwist?


Retry issue in case of (multiple RTMP connection - success + failure)

Describe the bug
I have an array of  RTMP clients with a retry count = 2. I use multiple server e.g. FB, Youtube, ebay
Sometime this connection fails for ebay/fb/youtube. I want to retry only for fail connection.
First of all I want to know for which URL it was failed and want to reconnect for failed URL only.
Please help me how can I resolve this.
To Reproduce
Expected behavior
In callbacks I should get URL also when it fails and we should have some property for which I can apply check it is successful or not in retry case.
Screenshots
If applicable, add screenshots to help explain your problem.
Smartphone (please complete the following information):

Library version [e.g. 2.2.2]

Additional context

I tried to use "isStreaming" property but it is always true even connection failed

Hello,
You can know which stream throw the callback using a bit of logic.  I will check it.

This worked fine. @pedroSG94
Thanks for your quick support.


Wrapping angular-cesium components in custom components

I am trying to wrap the ac-map and ac-billboard components inside of their own custom components. I intend to have some logic that determines what graphic to use for the ac-billboard inside of the custom component.
my-map: Component used to wrap ac-map
Template:
<ac-map id="myMap">
    <ng-content></ng-content>
</ac-map>

my-billboard: Component used to wrap ac-billboard. Intended to generate an icon based on some data.
Template:
<ac-billboard></ac-billboard>

These 2 components are part of the same module my-cesium.module:
import { NgModule } from '@angular/core';
import { CommonModule } from '@angular/common';

import { AngularCesiumModule } from 'angular-cesium';

import { MyMapComponent } from './my-map/my-map.component';
import { MyBillboardComponent } from './my-billboard/my-billboard.component';

@NgModule({
  imports: [
    CommonModule,
    AngularCesiumModule.forRoot()
  ],
  declarations: [MyMapComponent, MyBillboardComponent],
  exports: [MyMapComponent,MyBillboardComponent]
})
export class MyCesiumModule { }

I'm using the 2 custom components in my application's app.component.html like so:
<app-my-map>
    <app-my-billboard></app-my-billboard>
</app-my-map>

Intended outcome:
Display an ac-billboard component on the ac-map using custom components that wrap ac-map and ac-billboard.
Actual outcome:
MyBillboardComponent.html:1 ERROR Error: StaticInjectorError(AppModule)[AcBillboardComponent -> BillboardDrawerService]:
  StaticInjectorError(Platform: core)[AcBillboardComponent -> BillboardDrawerService]:
    NullInjectorError: No provider for BillboardDrawerService!
    at _NullInjector.get (core.js:1002)
    at resolveToken (core.js:1300)
    at tryResolveToken (core.js:1242)
    at StaticInjector.get (core.js:1110)
    at resolveToken (core.js:1300)
    at tryResolveToken (core.js:1242)
    at StaticInjector.get (core.js:1110)
    at resolveNgModuleDep (core.js:10854)
    at NgModuleRef_.get (core.js:12087)
    at resolveDep (core.js:12577)

I tried importing the BillboardDrawerService in my-billboard.component.ts, listing it as a provider and as an argument to the constructor. This leads to the same error, but for No provider for CesiumService. When I continue importing and declaring the providers for the errors that come up, it eventually circles back to the same one about BillboardDrawerService.
I noticed in the demo app, you wrap ac-layer in the tracks-layer component and have no issues doing so. Is there something I'm missing for my use case?
How to reproduce the issue:
I have put up a simple project generated from the Angular CLI that shows this issue:
git clone https://github.com/jkabigting3/ui-test.git
cd ui-test
npm install
ng serve

Open browser to localhost:4200
--
Alternatively, you can reproduce the issue with the following:
Create a my-cesium module that imports AngularCesiumModule.
Create 2 components (my-map and my-billboard) using the templates above.
Import MyCesiumModule in your app's root module and use the custom components in your app's template:
<app-my-map>
    <app-my-billboard></app-my-billboard>
</app-my-map>

Version

<EMAIL_ADDRESS>

checkout the docs for more info about getting started: https://docs.angular-cesium.com/core-concepts/the-basics
closing...

Not only did it take over 2 years to respond to this person, but that was the most unhelpful closure I've seen on GitHub. I don't see anything in the documentation about content projection.


replace quay.io/baude to quay.io/libpod

images used for our integration suite have moved from my work account
to a group organization called libpod.
Signed-off-by: baude<EMAIL_ADDRESS>

/approve

Sure, LGTM

LGTM, I believe we have some quay.io/umohnani's sprinkled about that we ought to track down at some time too.

/lgtm


Ensures that the desired language is available.

Fixes #5730
Refs #5727
What's this PR do?
When extracting field datat if a specific language is provided, then we need to make sure that if the data is not available in the language specified, then return NULL and exit out of the function otherwise we will get PHP warnings.
Where should the reviewer start?
With the new conditional added to dosomething_helpers.module
Any background context you want to provide?
We were getting a bunch of PHP Warnings because a language was being passed, but the data was not available in that language and we didn't have a check for that.
What are the relevant tickets?
#5730

@deadlybutter
cc: @angaither

I'm gonna have to modify the preprocess to account for a NULL possibility but this PR is :ok:

@deadlybutter I don't think you will need to, since you already have checks in place:
https://github.com/DoSomething/phoenix/blob/d97bf592f59d917db51277f4543255628dd0d2d4/lib/themes/dosomething/paraneue_dosomething/includes/preprocess.inc#L168
That will result in FALSE and thus not run; which is exactly what happened when I tested :) Should be ok!


Does numba support sympy?

Sympy solves the five-element equations too slowly. Can it be accelerated with numba?

Google translates this to: "Sympy solves the five-element equations too slowly. Can it be accelerated with numba?"
@asmeurer: Thoughts?  I don't know much about the current status of using Numba with Sympy.

It's hard to answer this question without more context of what you are doing. Numba can't speed up SymPy itself, as it doesn't know how to compile the sorts of things that SymPy does. If you want faster symbolic math, you can take a look at SymEngine. Or it's possible that something you are doing is inefficient can be improved.
Numba speeds up numeric calculations. If the slow part of what you are doing is numeric, then SymPy has many ways to speed it up using code generation (like ccode or autowrap). One way is to use lambdify, which converts SymPy expressions into NumPy functions. These can also be wrapped with numba to make them faster, like njit(lambdify(...)).

Closing this issue as no new information has been provided. It is assumed that the above resolved the reported issue, if this is not the case please reopen the issue with new information. Many thanks.


Syncing new items from S3 storage seems to be slow

Is your feature request related to a problem? Please describe.
Syncing seems to be a slow process.
Describe the solution you'd like
When new items are added to the "Source Cloud Storage", the user needs to press "Sync Storage". This re-syncs all items starting at 0, not only the newly added items. There should be an option to import only new tasks that currently do not exist from cloud storage. Perhaps a caching method or, to sync only new items based on timestamp or other metadata. The user could have the option to use the traditional sync vs. the fast sync.
Additional context
Currently have ~22,000 items in source syncing.

@SheldonWBM we're looking into this internally. I believe that open source doesn't have a queue-based approach to syncing, so it indeed does do a complete reload of the source. I've created a product ticket to request this improvement.

Hello @hogepodge , I wanted to follow-up here to see if there has been any progress on this. We sync a growing base of tasks (on Enterprise and Community versions of Label Studio) from S3 and the sync has increased to take over an hour now (and is continually increasing daily). Is there an ETA for adding some sort of queue-based sync? Do you have any work-arounds for this in the meantime? Thank you!

Hi @noahlibby17, I decided to try the sync command today and immediately regretted it.
I do have a workaround (which I should have used).

Upload all your assets to s3.
Create a JSON file that represents the tasks that will be created for the assets uploaded to s3. Note: This was based on the label-studio-converter converting YOLO format to JSON for importing.

[
    {
        "data": {
            "image": "s3://my_path/filename.jpg"
        },
        "annotations": []
    },
    {
        "data": {
            "image": "s3://my_path/filename2.jpg"
        },
        "annotations": []
    }
]

Import in the frontend as if uploading a local image.
Tasks will appear for the files you uploaded, and database entries for the tasks will be created.

The only issue I have encountered, which might have me revert the database to earlier today, is that it might create duplicate tasks when you "sync" with s3 cloud storage. If it creates duplicate tasks, you can revert the database or delete the duplicate task entries in the database.

Thank you so much @SheldonWBM!

@SheldonWBM thanks for your example
I have a different issue but was interested by your reply. In my case I need to annotate text files however these text files are in a different MinIO S3 bucket. Do you know how I can just use this task?:
    {
        "data": {
            "texturl": "s3://my_path/file.txt"
        },
        "annotations": []
    }

Also how will label-studio be able to authenticate to s3? Do you know if there is an env var for setting the s3 endpoint url?

@DrissiReda I have not used label-studio for text file annotations. However, the same principles should apply.

Add the text files to your S3 storage location.
You can add multiple "Source" and "Target" sources.
Select your project, go to Settings -> Cloud Storage -> Add Source Storage -> storage configuration info, including credentials and root S3 endpoint -> Check Connection -> Add Storage.
Do a first initial sync and ensure it is a) completed successfully and b) text files appear.
Authentication and credentials would not be in the task's meta-data (JSON). Since it works, I have not looked into how the storage credentials are stored.

Thanks @SheldonWBM When I enter the path "s3://my_path/file.txt" which source does it attach to? If I have multiple one.
Is there any way to be a little bit more precise?

@DrissiReda Look at the database, the table io_storages_s3Importstorage for how S3 credentials are stored.
Look at io_storages_s3importstoragelink and the column storage_id.
For an If you have two s3 storages, id 1 and id 2, you can see with path (key) is associated with which storage (storage_id)


examples: Add a requestAnimationFrame loop example

+cc @chinedufn @gregtatum
Fixes #976

👍

Thank you for the work on this! This was a very clear example, and I got it working pretty quickly on my end, I now have a green moving box 😬


[BUG] "Paste without newlines" hotkey performs regular paste

Describe the bug
When using a hotkey to the "Paste without newlines" command, the command performs a regular paste, keeping all newlines instead of removing them.
To Reproduce
Steps to reproduce the behavior:

Assign a hotkey to the "Paste without newlines" command.
Use the assigned hotkey to paste copied text with newlines.
Observe that the paste action keeps newlines as in a regular paste.

Text which caused the bug to occur
This is a sample text
that demonstrates the issue.

Desktop (please complete the following information):

OS: Windows 11
Obsidian Version 1.7.5

Was it CTRL+V?

For some reason it is working now.
It was CTRL+ALT+V but I also tried with different keybindings to be sure.


WP - Initiatives Details - Close out autopopulate field

Description

This ticket will cover two things:

auto-populating a disabled field in the close out page
updating ids to be readable + match with the correct parent

Related ticket(s)

MDCT-3026

How to test

Login
Go to the Define Initiatives page and fill out the fields, the necessary field to be filled out is the Projected End Date at the bottom
Go to the Close Out page and confirm that the disabled field has autopopulated correctly

Important updates

Author checklist

[ ] I have performed a self-review of my code
[ ] I have added thorough tests, if necessary
[ ] I have updated relevant documentation, if necessary

convert to a different template: test → val | val → prod

looks good! I don't know the state of MFP but I'm assuming saving, page nav buttons, and hydration are all separate

thanks for reviewing! there's been a bit of back and forth with how we're going about saving, will add the updates in and then request re-review


Create Landing Page for Recalla

Description:
We need to design and implement a landing page for the Recalla web app. The landing page should effectively communicate the app’s purpose, features, and benefits to potential users. It should be visually appealing, user-friendly, and responsive across all devices.
Requirements:

Hero Section: A clear, compelling headline that introduces Recalla. Include a brief description of the app's purpose and a call-to-action (CTA) button (e.g., "Get Started" or "Learn More").
Features Section: Highlight the key features of Recalla, such as spaced repetition, progress tracking, and adaptive learning. Use icons or visuals to make this section engaging.
How It Works Section: A simple, step-by-step explanation of how Recalla works. Include screenshots or diagrams if necessary.
Testimonials Section: Showcase user testimonials or quotes to build credibility.
Call-to-Action Section: A prominent CTA encouraging visitors to download the app, sign up, or learn more. Consider placing this section above the fold and at the bottom of the page.
Footer: Include links to social media, contact information, and any other relevant links (e.g., privacy policy, terms of service).

Design Considerations:

Consistent colour scheme that aligns with Recalla's branding.
Typography that is easy to read and complements the overall design.
Mobile-first design approach to ensure responsiveness on all devices.
Optimize images and assets for fast loading times.

Additional Notes:

If possible, please share mockups before beginning development.
Consider SEO best practices when structuring the landing page content.

Acceptance Criteria:

[x] The landing page is fully implemented and matches the design specifications.
[x] The page is responsive and works well on desktop, tablet, and mobile devices.
[ ] All links, buttons, and interactive elements are functional.
[ ] The page has been reviewed and approved by the team.

Issue resolved by PR #10


Fix #9820 Thumbnail scale

#9820
To reproduce the bug

Set monitor DPI/Scale beyond 100%
Thumbnails of pages out of view (not in the getVisibleElements from ui_utils.js)

Apparently it was not handled and the thumbnails have wrong scale at high DPI.
My guess is in pdf_page_view.js it use:
const outputScale = getOutputScale(ctx);

My guess is in pdf_page_view.js it use:
const outputScale = getOutputScale(ctx);

Not the case for "PDFThumbnailView".

Huh, it's most definitely used there as well; please see
https://github.com/mozilla/pdf.js/blob/59b35600be8c6ac2a00504a1813c52925e85c511/web/pdf_thumbnail_view.js#L245
The question is why it's not working as-is, and looking at that method in detail I've got an idea for the actual underlying bug.

Ok great! Leave to expert then.
Other observation is "this.scale" here was always 1
https://github.com/mozilla/pdf.js/blob/59b35600be8c6ac2a00504a1813c52925e85c511/web/pdf_thumbnail_view.js#L337

Let's close this PR, but keep the issue open so that the proper solution can be discussed. We do want to fix the underlying problem instead of potentially working around the actual bug. Thanks.


ssh_check documentation references the wrong integration name

The ssh_check documentation currently indicates to use ssh as the integration name for containerized configurations, however the correct integration name is ssh_check

https://github.com/DataDog/integrations-core/pull/6859


add release doc blocks

Hey @tanner0101, you just merged a pull request, have a coin!
You now have 830 coins.


Type webhook methods

Description
Add type hints to verify_event. Unfortunately, this lead to a bunch of duplication, comments inline.
Documentation
Does this require changes to the WorkOS Docs? E.g. the API Reference or code snippets need updates.
[ ] Yes

If yes, link a related docs PR and add a docs maintainer as a reviewer. Their approval is required.

The webhooks tests still need fixing. The content of the webhook is incorrect, I need to replace it with a valid body and corresponding valid hash.

@mattgd Updated tests! Ready for review now.


Fixing metrica epts loader

Frame count name is load from xml file instead of use hardcoded value (#158)
Including verification before indexing the sensor value to avoid crash  (#157)

Sorry for the delay. Thanks for the changes! Looking good to me. Can you also run code formatting?

Sorry for the delay. Thanks for the changes! Looking good to me. Can you also run code formatting?

Done! Thanks!!


Lemme touch this up :)


Exported OpenApi uses unexpected type for date.

Context and Description
The OpenApi spec says, that for dates, the field should use {"type":"string", "format": "date-time"}. The inofficial standard format for dates seems to be ISO 8601.
Fields that contain Dates are exported as {"type": "number"} by Kitura.
This is unfortunate because, when generating a client library from that spec, the date field with have a numeric type instead of date. This is not the case when the field uses {"type":"string", "format": "date-time"}.
I attempted to configure the JSON encoder and decoder with dateEncodingStrategy = .iso8601. This changes the typo to string, but still doesn't contain the format, so the generated code will have a field of type String, not Date.
Environment Details
Mac OS 10.15, Xcode 12.0.1, Swift 5.3, Kitura 2.9.1
Steps to Reproduce
Create a struct with a Date field and a route returning that struct, look at the OpenAPI specification.
Expected vs. Actual Behaviour

[ Expected] The date type is {"type":"string", "format": "date-time"}, at least after setting the date encoding strategy to .iso8601.
[ Actual] Date type is number or string without format

@julasamer Thanks for the report. Could you try if the PR #1531 is fixing your issue?


Fix CHProxy section in docker-compose recipes

 Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.Eugene Kozlov seems not to be a GitHub user. You need a GitHub account to be able to sign the CLA. If you have already a GitHub account, please add the email address used for this commit to your account.You have signed the CLA already but the status is still pending? Let us recheck it.


Plugin Generator Root Folder Steal Test Path with System.directories.lib

For the plugin generator, the path to steal on the test page isn't being generated correctly, specifically for the root folder (.) when System.directories.lib is set to "."
For the following SystemJS Config:
"system": {
    "directories": {
        "lib": "."
    }
}

And the generator config:
? Project name can-util
? Project main folder .
? Description Common utilities for CanJS projects
? Project homepage url http://canjs.com
? GitHub username or organization canjs
? Author's Name Bitovi
? Author's Email<EMAIL_ADDRESS>? Author's Homepage http://bitovi.com
? Application keywords Can,JS
? NPM version used 3
Writing package.json v0.9.2

Also the path to .jshint is wrong: "jshint": "jshint src/. --config",

Though I'm not sure what that should be to not include node_modules.

path is also wrong for src/test/test.html


Read the health URL from an environment variable, if one exists

Looking at this:
https://github.com/imgproxy/imgproxy/blob/5d787f936727b16ff47938679c390dde56b4d3c2/server.go#L32
(That's the version we currently use, our calls are not compatible version 3 I'm afraid)
Having the ability to change the health URL to one's environment's standard would be of great help. Common URLs are /healthz and /api/healthz and it would be great to get imgproxy aligned with the automation's standard.

Hey @Nadavpe!
Added IMGPROXY_HEALTH_CHECK_PATH config to v3.3.0

Thanks 🙂


Cut release 0.11.3

Getting release changes ready to make it easy to cut a new version 👍

/triage accepted
/assign @logicalhan

/assign @dgrisonnet

@jaybooth4 do you specifically need a patch version?
I was considering cutting 0.12.0 based on Kubernetes 1.30 since Kubernetes 1.27 that 0.11 is based on is not supported anymore.
I can cut it tomorrow as long as https://github.com/kubernetes-sigs/custom-metrics-apiserver/pull/172 goes in

Hey @dgrisonnet, no that sounds good! Let me know if you'd like any CLs around cutting a new release 👍

Are there any updates here?
@dgrisonnet Since https://github.com/kubernetes-sigs/custom-metrics-apiserver/pull/172 was merged, do you want to review the following change here?

Superseded by https://github.com/kubernetes-sigs/prometheus-adapter/pull/659.
I'll work on the 0.12.0 release now.


Syntax Error

Hi,
I am trying the below commands as per READ ME. It is failing for all files with same syntax error.
>> goseq client/manager.go -o s1.svg
goseq: client/manager.go - client/manager.go:5: syntax error

Please help me with this.

Hi @sasahoo,
It looks like you're trying to parse a Go file.  The goseq command accepts a sequence diagram description file, which usually ends in ".seq" and will look something like the following:
Client->Server: Make request
Server->Database: Make database\nrequest
Database->Server: The result
Server->Client: The response

Can you let me know where in the README you got these instructions so I can correct them?
Thanks,
Leon

Thanks @lmika , Oh Ok. My mistake then. I missed something then. Would you please help me to find the commands doc how to create seq diagrams?

Best place to look for how to create sequence diagrams is within the Language Guide.  Basically the approach is:
Write a text file of the sequence diagram using the DSL and save it as something, like "hello.seq".
Run goseq -o hello.svg hello.seq.  That will convert the text based DSL into an SVG image


<?php tag breaks line numbers

In php code preview line numbers break when I add <?php tag.
Here is example by Gabriel Luethje(we have the same issue):
https://codepen.io/FStop/pen/rCBaJ?editors=1111
When "?" in opening php tag is removed the line number works fine.

Hi, thanks for reporting.
It looks like I was wrong in #998. We do need to store and restore the original code for the line-numbers plugin to work properly.
Doing so, though, creates an issue when used with the remove-initial-line-feed or the normalise-whitespace plugins. This is because those plugins need to run before the before-highlight hook. Moving them to the before-sanity-check hook appears to solve the problem.


Develop community app to handle community functionality

May need to add community list view to the home page.


SizeTransition does not respect reverse duration from AnimationController

Steps to Reproduce
The code:

class AppLoader extends StatefulWidget {
  @override
  _AppLoaderState createState() => _AppLoaderState();
}

class _AppLoaderState extends State<AppLoader>
    with SingleTickerProviderStateMixin {
  AnimationController _controller;

  @override
  void initState() {
    super.initState();
    _controller = AnimationController(
        duration: Duration(seconds: 4),
        reverseDuration: Duration(milliseconds: 200),
        vsync: this)
      ..repeat(
        reverse: true,
        max: 1.0,
        min: 0.2,
      );
  }

  @override
  void dispose() {
    super.dispose();
    _controller.dispose();
  }

  @override
  Widget build(BuildContext context) {
    return Center(
      child: Column(
        crossAxisAlignment: CrossAxisAlignment.center,
        mainAxisAlignment: MainAxisAlignment.center,
        children: [
          SizeTransition(
            sizeFactor: _controller,
            child: Center(child: Image.asset('assets/logo-big.png', fit: BoxFit.contain,)),
          ),
        ],
      ),
    );
  }
}

Expected results:
Forward transition should take 4s and reverse transition should take 200ms
Actual results:
Forward transition took 4 seconds, reverse transition took 4 seconds as well
flutter doctor -v
🙏  <ॐ>
╰─~ flutter doctor -v                                                [13:38:00]
[✓] Flutter (Channel stable, 1.22.6, on macOS 11.2.1 20D74 darwin-x64, locale
    en-GB)
    • Flutter version 1.22.6 at /Users/raveesh/Development/SDKs/flutter
    • Framework revision 9b2d32b605 (4 weeks ago), 2021-01-22 14:36:39 -0800
    • Engine revision 2f0af37152
    • Dart version 2.10.5

[✓] Android toolchain - develop for Android devices (Android SDK version 30.0.2)
    • Android SDK at /Users/raveesh/Library/Android/sdk
    • Platform android-30, build-tools 30.0.2
    • ANDROID_HOME = /Users/raveesh/Library/Android/sdk
    • Java binary at: /Applications/Android
      Studio.app/Contents/jre/jdk/Contents/Home/bin/java
    • Java version OpenJDK Runtime Environment (build
      1.8.0_242-release-1644-b3-6915495)
    • All Android licenses accepted.

[✓] Xcode - develop for iOS and macOS (Xcode 12.3)
    • Xcode at /Applications/Xcode.app/Contents/Developer
    • Xcode 12.3, Build version 12C33
    • CocoaPods version 1.10.1

[!] Android Studio (version 4.1)
    • Android Studio at /Applications/Android Studio.app/Contents
    ✗ Flutter plugin not installed; this adds Flutter specific functionality.
    ✗ Dart plugin not installed; this adds Dart specific functionality.
    • Java version OpenJDK Runtime Environment (build
      1.8.0_242-release-1644-b3-6915495)

[✓] VS Code (version 1.53.2)
    • VS Code at /Applications/Visual Studio Code.app/Contents
    • Flutter extension version 3.19.0

[✓] Connected device (1 available)
    • COR AL00 (mobile) • 58H3Y18831036438 • android-arm64 • Android 9 (API 28)

! Doctor found issues in 1 category.

Noticed same reverse duration as forward running above code sample.
https://user-images.githubusercontent.com/67046386/108493401-474c2700-72cc-11eb-9823-03278aa145a0.mp4
@raveesh-me Would you know if it works as expected with other implicit transition animations or this is specific to SizeTransition ?

Without additional information, we are unfortunately not sure how to resolve this issue.
We are therefore reluctantly going to close this bug for now.
Please don't hesitate to comment on the bug if you have any more information for us; we will reopen it right away!
Thanks for your contribution.
Could everyone who still has this problem please file a new issue with the exact description of what happens, logs, and the output of flutter doctor -v.
All system setups can be slightly different, so it's always better to open new issues and reference related issues.


Do you support multi account login to crawl data?

Do you support multi account login to crawl data? Do you support multi account login to crawl data? I want to use a crawler to implement an interface function to support multiple account login crawling data, different accounts do not interfere with each other. After crawling the data, the crawler does not stop waiting for the new task.

No,
Currently, when you create Auth info, it will login to that site before
starting the actual crawling and keep the cookie, then begin crawling with
that cookie, there is no simple way currently to login as more than one
user to the same site.
As far as I remember.
Chaiavi.
On Thu, Sep 13, 2018 at 9:25 PM chunfytseng<EMAIL_ADDRESS>wrote:

@s17t https://github.com/s17t
—
You are receiving this because you are subscribed to this thread.
Reply to this email directly, view it on GitHub
https://github.com/yasserg/crawler4j/issues/347#issuecomment-421105367,
or mute the thread
https://github.com/notifications/unsubscribe-auth/ABrbW9X_LQ_wArSMw4YssFA6Uk_Xjz8pks5uaqMVgaJpZM4Wi0YT
.

Will later provide multi-user login function?
Is there any train of thought available now?
@Chaiavi


as a user with shipment assigned i can't update status from todo to inprogress

error, can't select choosen goods - not on the list

After the latest changes introduced as part of #4 shipments are assigned immediately in In progress state.


Would love to know can I use Media Source Extensions on some browsers?

Would love to know can I use Media Source Extensions on some browsers?

This issue was imported from Google Moderator
Moderator votes: +16
Issue added by luongnv89 on 2014-08-01
To vote this issue up or down, simply include +1 or -1 in your comment.

This is a duplicate of #986

Yup. Moving half the votes there.


apgdiff: seems to have wrong version (should be 2.7.0, reports 2.4.1-SNAPSHOT)

Describe the bug
The derivation for apgdiff has a version attribute of 2.7.0 as you can see here:
https://github.com/NixOS/nixpkgs/blob/f706330741f27347e20952db55895fb7f9f642b9/pkgs/development/tools/database/apgdiff/default.nix#L8-L12
But when you build it and run apgdiff --version, it prints an older version: 2.4.1-SNAPSHOT.
This seems to be because the derivation downloads a jar file that's directly checked into the apgdiff repo (weird!). This seems to be a mistake of some kind in the apgdiff repo itself.
Steps To Reproduce
> wget https://github.com/fordfrog/apgdiff/raw/release_2.7.0/releases/apgdiff-2.7.0.jar
> java -jar apgdiff-2.7.0.jar --version
Version: 2.4.1-SNAPSHOT

Additional context
I think it would be better to build the package from source, rather than rely on the (possibly suspect) jar file checked into the repo.
Building from source would also make it easier to pick up changes from upstream, as we wouldn't have to rely on the maintainers to provide these jar files. (There are currently some improvements to support PostgreSQL 16, for example.)
Notify maintainers
@Misterio77

Update: I built it from source with Apache Ant. It was easy to build after incorporating the patch from https://github.com/fordfrog/apgdiff/pull/296/files. Indeed, the resulting jar has an old version string baked in for some reason.


lang: Log error strings

Currently just the error code is logged on exit

Dup of https://github.com/project-serum/anchor/issues/798


Setting initial screen resolution

I couldn't find a way to size the terminal container to my needs yet. Is there any option I can pass to the V86Starter to set the screen resolution?

Unfortunately the resolution is set by the OS and the options are very limited (at least for vga). Better terminal emulation for the serial console could help with this (#172).


Bug fix for Medtronic 5/7-series IOB values

See attached Trello card for details.

 Change IOB data from Medtronic from "Active Insulin" to "Unabsorbed Insulin"


Update k8s tooling to 1.22.13

Summary and Scope
Update base packages to 1.22.13 for related image changes.

Fixes:
Requires:
Relates to:

Issue Type

Bugfix Pull Request
Docs Pull Request
RFE Pull Request

Prerequisites

[ ] I have included documentation in my PR (or it is not required)
[x] I tested this on internal system similar to below with Caleb but on redbull
[ ] I tested this on a vagrant system (if yes, please include results or a description of the test)
[x] I tested this on a vshasta system Caleb, built to pit mode and then zypper added repos and updated these rpms manually to test based off 1.4.0 alpha 33 originally.

Risks and Mitigations
Will need to merge this after/around image changes that include k8s 1.22.13 as well.

When ready, please make your changes here:

kubectl: https://github.com/Cray-HPE/metal-provision/blob/main/roles/node-images-ncn-common/vars/packages/suse.yml#L44
kubeadm and kubelet: https://github.com/Cray-HPE/metal-provision/blob/main/roles/node-images-kubernetes/vars/packages/suse.yml#L28-L29


jitter: add a new seed RNG "JITTER"

This entropy source can be used instead of SEED-SRC. Sample openssl.cnf configuration is provided.
Note that rand-instances currently chain from public/private instances to primary, prior to consuming the seed. Thus currently a unique ESV needs to be obtained, and resue of jitterentropy.a certificate is not possible as is. Separately a patch will be sent to allow for unchaining public/private RAND instances for the purpose of reusing ESV.
Also I do wonder if it makes sense to create a fips variant of stock SEED-SRC entropy source, which in addition to using getrandom() also verifies that the kernel is operating in FIPS mode and thus is likely a validated entropy source. As in on Linux, check that /proc/sys/crypto/fips_enabled is set to 1, and similar checks on Windows / MacOS and so on.
Replaces:

https://github.com/openssl/openssl/pull/24057

you can ignore all the errors in the non-c files from the style check ci job, but the format errors in seed_src_jitter.c should likely be addressed.

waiving style to ignore the files that we shouldn't really be checking (build.info, Configure, etc)

@nhorman i have fixed most style issues. Note most of this code was copied from legacy provider & seed-src. Remaining C code formatting issues are:
$ ./util/check-format-commit.sh HEAD
providers/jitterprov.c:118:more than one stmt:#define set_func(c, f) if (c == NULL) c = f; else if (c != f) return 0;
providers/jitterprov.c:118:code before 'else':#define set_func(c, f) if (c == NULL) c = f; else if (c != f) return 0;
providers/jitterprov.c:118:code after (expr):#define set_func(c, f) if (c == NULL) c = f; else if (c != f) return 0;

Which are the same as the ones in legacyprov.c, thus leaving as is.

That's awesome, thank you for taking care of that!

Cool! Nice work! I've not yet reviewed in detail but some immediate observations:

This will require more documentation. In particular I might expect to see a doc/man7/EVP_RAND-JITTER-SEED-SRC.pod file, similar to the EVP_RAND-SEED-SRC.pod file that already exists. Since you are also adding a new provider I'd expect to see a doc/man7/OSSL_PROVIDER-jitter.pod file (similar to doc/man7/OSSL_PROVIDER-default.pod). Also, there are a number of places where we refer to the current OpenSSL supplied providers which might need some updates (e.g. ossl-guide-libraries-introduction.pod) - there are probably other places so we might need to do a quick scan of the docs to identify other locations like this.
This is going to need some kind of tests. At least something simple to confirm that we can load the provider, set the seed src and use it. We might also want to consider if we can test this via CI.

I'm also interested in the design decision to put this in a separate provider. I assume this is because we want to be able to use this in conjunction with the fips provider. Did you consider putting it in the base and default providers?

@paulidale :

I'm not convinced about putting it in a separate provider but I'm not going to resist it.

when I started I thought it was going to be big.... but it is tiny. Thus having it as a separate provider does seem like a gimmick. Many will not choose to build it, but those that will likely will want it in the base-and-default providers. Should I fold it into base-and-default providers like "SEED-SRC" already is?

Should I fold it into base-and-default providers like "SEED-SRC" already is?

This seems sensible to me in the absence of a good reason to have it in its own provider.

I'm also interested in the design decision to put this in a separate provider. I assume this is because we want to be able to use this in conjunction with the fips provider.

Use in conjunction with the fips provider - yes. But also submit for certification separately / ahead of fips provider. As entropy ESV certificate needs to be obtained prior to submission for fips CMVP certificate.

Did you consider putting it in the base and default providers?

I thought new provider would be better, but indeed having implemented all this having "JITTER" in the base and default providers would be less total compiled code and easier to use.

This is going to need some kind of tests. At least something simple to confirm that we can load the provider, set the seed src and use it. We might also want to consider if we can test this via CI.

There is a periodic build added in .github workflow. I think I can improve it by also compiling with rand-seed sources set to null, to make sure failures are detected correctly. Alternatively I have also been locally using systemd-run and making random syscall return an error (not abort, as glibc thread local storage uses getrandom) and then ensuring that rand calls are successful. If you want this as part of every presubmit the workflow job can be moved, but not sure it is that critical to check every time, instead of daily.

@nhorman
In https://github.com/openssl/openssl/pull/24844#issuecomment-2221438898 you mentioned this:

Looks like you've got a minor doc-nit to square up I'll start reviewing in the am

I missed that at the time, and not sure what that means. Were there documentation syntax or style errors somewhere at the time? I have now added more docs, but I don't know if I still have "a minor doc-nit" - can you please recheck and point it out to me, if still not fixed?

@mattcaswell I have now improved testing coverage, but please review if it is acceptable see https://github.com/openssl/openssl/pull/24844/commits/ef131f36afd88a9e49aaf6842805e6e051df5f79

@mattcaswell I believe I have addressed all the raised issues; but please let me know if anything is missing or if further improvements are desired.

Ping @openssl/committers for second review.

Please add a CHANGES entry for this.
Maybe it should state that the jitter library is not distributed with openssl?

There is a changes entry present already.
The install instructions aren't explicit about the library not being included but do hints at it.

Should the CHANGES entry state that the jitter library is not distributed with openssl?

Define distributed :-) as build scripts explicitly statically link it in, but indeed it is expected to be compiled and provided separately.
Note that jitterentropy library has separate strict build instructions, and must be compiled unoptimised. Thus care needs to be taken how it is compiled.

This pull request is ready to merge

Merged, thanks very much for this contribution.

Please see https://github.com/openssl/openssl/actions/runs/10174927934 @xnox will you please create a PR to fix it ASAP?

Please see https://github.com/openssl/openssl/actions/runs/10174927934 @xnox will you please create a PR to fix it ASAP?

Sure will look.


71 - GUI for writing rules and stories

Please Modify the .gitignore to add tim-db

Could you also modify the react-flow screen to make its navigation more easier by adding panOnScroll like its done here https://github.com/buerokratt/Service-Module/pull/144/commits/ec325dc884506d0c0f9026a865acf26316448481 , just for easier navigation

@1AhmedYasser, All the requested modifications have been implemented. Kindly review the PR again.

@1AhmedYasser, All the requested modifications have been implemented. Kindly review the PR again.

LGTM


Add version option to prevent cdn cache

All in code

Mabey you need such a plugin adding hash to the cdn file name like gulp-rev-all.
As Gulp Guidelines mentioned, your plugin should only do one thing, and do it well.

Thank for your mention. :)
Im going to try what you said.


Not works on modal

What steps will reproduce the problem?
there's no 'live' to handle generated code that i want to prettify

What is the expected output?  What do you see instead?
i using modal dialog from jquery ui, code that i want to pretiffy is generated
while button clicked (like fancybox showed when image clicked). code not
perfectly prettified, there is no span L0, L1 etc. could you work on 'live' on
that js?

What version are you using?  On what browser?
latest version. chrome and firefox.

Please provide any additional information below.
i only can attach html file because it's a framework, there's a lot of optional
file if i wanna attach the php file.

Original issue reported on code.google.com by rahendz on 21 Nov 2012 at 7:54
Attachments:

userguide.7z

As mikesamuel suggested, use the prettyPrintOne function to highlight code on demand.
Here is a simplified example: https://jsfiddle.net/amroamroamro/d3xc4nne/1/


Separate Instances of Blog Widget for Each Page

Feature Request:
I would like to request the ability to create separate instances of a blog widget for each page on DevHub. Currently, when using the blog widget, any information  stored is pulled and displayed on every page. However, for better customization, it would be beneficial to have the option to create unique instances of the blog widget for each page.
Reasons:

As a user, I want to have distinct blog content on different pages of my DevHub blog.
Having separate instances of the blog widget for each page would allow me to tailor the content based on the context of each page.

Thanks for filing this @victorchimakanu. I agree that if a user creates multiple instances of the blog widget, the content type that they create within it should be separate. For example, suppose a user wants to use the blog widget to create a Recent Calls tab. And then they want a separate blog widget to track updates specific to one project. Right now any blog posts they create will appear in both.


some fields have no value so only blue rectangle is displayed

I don't know if you figured this out, but your model must return name or override the default template to use your required field. As coded, you can't specify the display field right now unfortunately :(

I noticed that too. Fix this as soon as find time
On Dec 12, 2017 01:07, "Brad"<EMAIL_ADDRESS>wrote:

I don't know if you figured this out, but your model must return name or
override the default template to use your required field. As coded, you
can't specify the display field right now unfortunately :(
—
You are receiving this because you authored the thread.
Reply to this email directly, view it on GitHub
https://github.com/and3rson/django-searchable-select/issues/13#issuecomment-350888563,
or mute the thread
https://github.com/notifications/unsubscribe-auth/AAad5XplltKEsDMeTnVFcXwE_Vyfh_LTks5s_bXAgaJpZM4NI5f7
.