support Kubernetes versions  1.22

In IKS with Kubernetes versions  1.22, the ibmcis pod failed to start with error:
webhook.go:196] Failed to make webhook authorizer request: the server could not find the requested resource

In this pr:

support Kubernetes versions  1.22 with new rbac permission
upgrade cert manger api to /v1
fix ibmcloud session expired after the webhook service initiated.

@jb-dk I'm from ibmcloud cis team, please help to review the pr, as this webhook is introduced in cert-manager: https://cert-manager.io/next-docs/configuration/acme/dns01/#webhook.  we want to extend it to our cis customer for certificates management.

@hughhuangzh I'm not sure if autor of this repository is still active since his last github activity was 1.5 year ago.
Since IBM will be using cert-manager officially, maybe it is a good idea to fork these changes to official IBM repository https://github.com/IBM/cert-manager-webhook-ibmcis which was created long time ago but it is empty?
Does this PR fixes the issue below?
I0413 16:03:10.873138 1 log.go:172] Authentication failed. Trying token refresh
time="2022-04-13T16:03:11Z" level=error msg="While doing Cleanup() and trying to use CRN 'crn:v1:bluemix:public:internet-svcs:global:a/HIDDEN' an error occured : failed to list paginated dns records: Request failed with status code: 401, ServerErrorResponse: {\"trace\": \"b9ab4409-cfcb-4201-b036-ea95b0cf621b\", \"errors\": [{\"code\": 401, \"message\": \"Action is not authorized.\"}]}"

We use IBM Cloud and cert-manager and we regularly encountered an issue like this in our Kubernetes clusters. As a workaround, we introduced CronJob which deletes cert-manager-webhook-ibmcis pod once a day which helped to mitigate this issue. But after a few months this stops working and the only solution I found is to replace a worker node completely with a new one. We done such thing a few times already. It occurs once a few months, I suspect that this occurs on worker nodes which are running for very long time (months). I'm not sure but maybe this issue is deeper than just that plugin.

@jowko yes, fix the token refresh issue in new pr.  I will create one new pr in the repo you suggested.


§ to escape on macbook pro not working after update

Hello,
I have a macbook pro with touch bar. I changed my § key to function as the escape button some time ago. Unfortunately it stopped working after apple updated my system last night. I can't seem to make it work again and have no experience with coding/scripting. Does someone know the solution for my problem?
Thanks in advance.

@otisoke Try updating to the latest beta version of Karabiner. I had a similar issue where it stopped working after the latest Mojave supplemental update but using the Karabiner in app updated (under the Misc tab) and having it update to the latest beta version (12.6.6 for me) fixed a similar issue I had.

@mmzyk Thanks a lot, this worked for me!


It is an Indian language known as telugu

@pavansrinivasmamidala Thank you very much for translation!
Could you please also translate the weather condition names,
located here:
https://github.com/chubin/wttr.in/tree/master/share/translations

other question:
what terminal program are you using usually?
do you use (read, write, etc.) Telugu in console too?
Is it displayed correctly?


Fix for: DefaultCommandProxy does not pass domain to CommandAdapters.cre...

...ateAdapter
This was breaking certain command invocations for multi-context applications. The adapter
was always looking in the root ApplicationDomain and unable to find commands bundled
with modules. Now it uses the domain associated with the command lifecycle.
I submitted a JIRA ticket for this: (http://opensource.powerflasher.com/jira/browse/COM-26)
See the commit notes. Thanks!

Closing as this repo is not active. Please create a fork for any further maintenance.


Add API for retrieving physical device information

Vulkan API offers a way to detect all compatible physical devices, but it can't really be directly used from Python. Therefore a C++ code which retrieves this intomation and Python interface for it have to be created.

I have created API for retrieving Vulkan physical device information, including memory heap information. We will still need API for checking current device local memory occupancy.


Rewrite computational inner loops in step_detect in optional C++ module

Rewrite computational inner loops in step_detect in optional C++ module. This gives ~5x speedup.
The optional binary module is handled in setup.py similarly as what simplejson does.
   before     after       ratio
  [e3aa6a68] [02c19e0b]
-  477.61ms    63.87ms      0.13  step_detect.Simple.time_detect_regressions
-  167.15ms     9.33ms      0.06  step_detect.Simple.time_solve_potts_approx

Coverage increased (+0.01%) to 70.942% when pulling 2fb6ccec0a3c00d72a20b5b1dc8963c879ae0ff2 on pv:cdist2 into e3aa6a68a6beafaa2939d60460cb457fe549feef on spacetelescope:master.

Coverage increased (+0.04%) to 70.976% when pulling 44a5920bc58af0ddcb587fd8ef799e6427353b1e on pv:cdist2 into e3aa6a68a6beafaa2939d60460cb457fe549feef on spacetelescope:master.

Coverage increased (+0.01%) to 70.942% when pulling bea9d1a2c539d278d337e204106b3dcafc94a178 on pv:cdist2 into e3aa6a68a6beafaa2939d60460cb457fe549feef on spacetelescope:master.

Coverage increased (+0.01%) to 70.942% when pulling bea9d1a2c539d278d337e204106b3dcafc94a178 on pv:cdist2 into e3aa6a68a6beafaa2939d60460cb457fe549feef on spacetelescope:master.

Coverage increased (+0.01%) to 70.942% when pulling bea9d1a2c539d278d337e204106b3dcafc94a178 on pv:cdist2 into e3aa6a68a6beafaa2939d60460cb457fe549feef on spacetelescope:master.

Coverage increased (+0.01%) to 71.047% when pulling 718d381b62363a9b48ce817598ed12c99dea99ca on pv:cdist2 into 710447a40b4d176079ee82d99b484707c2c7671f on spacetelescope:master.

Coverage increased (+0.009%) to 71.459% when pulling 365a54c15cf8cbaee713f58418cefec5660eac29 on pv:cdist2 into b2eb26483cf5671f264151774511f9f4a94ac683 on spacetelescope:master.

Coverage increased (+0.009%) to 71.459% when pulling 27bb35e824f0d42ead4f3ba947210f499dfcb958 on pv:cdist2 into b2eb26483cf5671f264151774511f9f4a94ac683 on spacetelescope:master.

Merging, appears to be working fine.


CesiumPolygonRasterOverlay clipping doesn't work on most tilesets

Attempting to add a CesiumPolygonRasterOverlay to most tilesets (other than Cesium World Terrain) makes the tileset disappear entirely, even before selecting a polygon. This is apparent in the 08_CesiumClipping level of Cesium for Unreal Samples, where Cesium OSM Buildings is missing entirely. It also happens in a brand new level with Cesium OSM Buildings added via the Cesium panel.
I noticed this while testing v2.9.0, but I don't know if it's a fresh regression in this version or not.

This is not a problem in v2.8.0.

I'm moving this issue into today's release because it's a significant regression.


chore: rename project to Powertools for AWS Lambda (.NET)

Please provide the issue number

Issue number: #281
Summary
Changes

Please provide a summary of what's being changed

Located all references of Powertools/Lambda Powertools etc and updated to the new project name "Powertools for AWS Lambda"
Checklist
Please leave checklist items unchecked if they do not apply to your change.

[X] Meets tenets criteria
[X] I have performed a self-review of this change
[X] Changes have been tested
[X] Changes are documented
[X] PR title follows conventional commit semantics

Is this a breaking change?
RFC issue number:
Checklist:

[ ] Migration process documented
[ ] Implement warnings (if it can live side by side)

Acknowledgment
By submitting this pull request, I confirm that you can use, modify, copy, and redistribute this contribution, under the terms of your choice.
Disclaimer: We value your time and bandwidth. As such, any pull requests created on non-triaged issues might not be successful.

@sthulb we will need to change the dependent repos. for instance Sam cli and aws lambda dotnet here and here

@hjgraca yep, other repos are on my list to change too 😄 Starting with ours, moving on to other AWS repos, ideally everything will be merged at roughly the same time


NetworkInterfaces - Speed in Windows is not displayed correctly

Describe the bug
The documentation describes that the speed is displayed in Mbps.
https://github.com/sebhildebrandt/systeminformation/blob/master/docs/network.html#L186
On Linux: OK

On Windows: Not OK (in Bits/s)

I tried it on a Notebook with Windows 7 and a desktop PC with windows 10.
Current Output
If applicable, add output to help explain your problem.
Expected behavior
Windows should show the speed in Mbps.
Environment (please complete the following information):

systeminformation package version: 4.1.1
OS: Windows
Hardware: PC Windows 10, Laptop Windows 7

Thank you for your investigation. Will fix and test it today

@ldittmar81 : fixed. Version 4.1.4 just published. Thank you for detailed description.

Thx 👍


Print selector when an element is not found

We frequently encounter this error:

Method “simulate” is only meant to be run on a single node

Which is fantastic, that it fails when it can't find anything. However it would be wonderful if the error message included a string name for what element was missing. Something like:

Unable to call “simulate” on "MyForm > button". Selector found no match.

or

Unable to call “simulate” on "MyForm > button". Found more than one match

I'd be happy to dig into this, but I was curious if I missed any prior discussion or if there's some active dev in this area.

That would require the last-used selector to be persisted statefully. There's also .findWhere, .filterWhere, .find(Foo), etc, where there's no string selector at all.
I could imagine an option to the find methods that throws whenever no match is found, but I can't conceive of any other way to do it. Typically you'd assert on the .length of your wrapper before attempting to call any methods on it, so that your tests are robust.

Typically you'd assert on the .length of your wrapper before attempting to call any methods on it, so that your tests are robust.

I don't want to fall too much into the territory of asking for advice, but I want my tests to be robust. I'll admit that I rely on the error raised when a selector isn't found to halt a test for me. It's very convenient.
Do you run an assertion on the length before continuing forward, like:
// Assuming I am using Jest, happy to translate to another assertion method for clarity
let button = wrapper.find('button')

expect(child.length).toBeGreaterThan(0)

button.simulate('click')

// continue test...

Or do you throw a specific exception, like:
// Assuming I am using Jest, happy to translate to another assertion method for clarity
let button = wrapper.find('button')

if (button.length <=0) {
  throw new Error('Unable to find submit button for Login form')
}

button.simulate('click')

// continue test...

In all cases, it would be valuable to me for Enzyme take care of this (or at least try). Particularly when selecting components by their display name. It allows affordances to the test author for giving better feedback when a test fails that doesn't require them to as pedantic.

I could imagine an option to the find methods that throws whenever no match is found

What about passing true as a second argument to be more strict, like:
wrapper.find('button', true)

I write the former.
The reason why it wouldn't make sense for enzyme to throw in those cases is that sometimes, finding zero items is a desired use case - and your assertion might be expect(wrapper).to.have.lengthOf(0).
Passing an additional argument might work, but a boolean arg is an antipattern, and an options arg is a lot of complexity to add just so you don't have to write a more explicit assertion (thereby making your tests more clear and straightforward).

Writing an assertion that way makes sense to me. Thank you for taking the time to explain it.
As for the original issue. It sounds like there isn't much of a desire to add this to Enzyme. If I were to explore making the improvement to the error message, would there be interest in accepting a PR for it?
You mentioned "That would require the last-used selector to be persisted statefully". Would a change like this work against your desired direction for the way Enzyme works?

I've looked into this in the ancient past for persisting a selector more reliably on jQuery objects.
If you can write a PR that handles all the edge cases of ways to refine the list of wrapped nodes, such that string selectors (which are inferior and unofficially discouraged) aren't given special standing, then I'm always happy to see error messages improved!

Cool. It's good to know that string selection is discouraged. I'll go ahead and close this out, but make a reminder to dig in and see what I'm able to do.
Thanks for your time and thoughts!


No such middleware to insert before: Rails::Rack::Logger (RuntimeError)

The Same issue persist as mentioned in #21
rails 5.0.2

@snehitgajjar can you explain your setup? do you define the middleware in application.rb, an initializer, etc.?

Yes so first I had it in initializers/silencer.rb it worked fine for <IP_ADDRESS> and 5.0.2. But then I moved it to config/environments/production.rb. It works with 'rails', '<IP_ADDRESS>' but not with 5.0.2.

Configuration in config/application.rb or config/environments/*.rb is not currently supported. I haven't had a chance to dig too deep, but I suspect that at that point, the middleware stack is not configured (or something). In the meantime, if you are trying to restrict to a specific environment, i'd suggest using if Rails.env.production? to conditionally setup the logger.

Thanks @stve it worked.


After upgrade from 0.5.6 to 0.5.7 cannot register user to Asterisk

Hello.
I have updated re, rem and baresip. I have not changed any configuration file. And now I cannot register my user from "accounts" file into Asterisk:
uuid: loaded UUID 78f51133-d43a-2c97-cbd0-77941a78ace6 from file /home/vdpusr/.baresip/uuid ua: SIP register failed: Invalid argument ua: sip-stack exit ua exited -- stopping main runloop module account.so: Invalid argument
accounts file:
<sip:domofon:1234@<IP_ADDRESS>;transport=tcp>;audio_codecs=pcmu/8000/1;video_codecs=h264
Any suggestions?
Thank you in advance.

Hi @maci3k90
can you please check if re/baresip compiles without warnings ?

which platform are you using?

do you have any other versions of libre installed ?

can you please share which versions (exactly) of re, rem, baresip you are using?

can you share the full log with baresip running with -v verbose flag ?

Alfred

I have the same problem, get:
ua: SIP register failed: Invalid argument
module account.so: Invalid argument

Environment:
OS: Debian Sid (unstable)
baresip: 0.5.7-1 (installed from Debian official repo)
libre0: 0.5.7-1 (installed from Debian official repo)
librem0: 0.5.2-1 (installed from Debian official repo)
After searching bugs.debian.org, found https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=889522
It seems baresip in Debian Sid did not pass test_ua_register test, not sure what is the root cause.


Fix: HTTPS + dev + API route = http://undefined/ as the request url

Currently, if you use a self-signed cert, HTTPS, and try to use an API route on dev, the request.url looks like http://undefined/.
Example Setup
This is best exemplified in the with-authjs example, whose README I've updated in the first commit. Follow the instructions there, creating a .env file, Discord app, and self-signed cert. (Apologies in advance for how long this may take.) When you click "Sign in with Discord" using that self-signed cert, it will redirect you to http://undefined/api/auth/signin/discord. To demonstrate that this isn't a problem with authjs, go to with-authjs/src/routes/api/auth/[...solidauth].ts and replace export const { GET, POST } = SolidAuth(authOptions); with
import { PageEvent } from "solid-start";

export const POST = (x: PageEvent) =>  {
  console.log(x.request.url)
  return SolidAuth(authOptions).POST(x);
};

export const GET = (x: PageEvent) => {
  console.log(x.request.url)
  return SolidAuth(authOptions).GET(x);
};

If you revisit the login screen, you'll see the following in your console:
GET https://<IP_ADDRESS>:3000/
GET https://<IP_ADDRESS>:3000/api/auth/csrf
http://undefined/api/auth/csrf
POST https://<IP_ADDRESS>:3000/api/auth/signin/discord?
https://localhost:3000/api/auth/signin/discord?
GET https://<IP_ADDRESS>:3000/api/auth/signin?csrf=true
http://undefined/api/auth/signin?csrf=true

The Fix
The fix is implemented in the second commit. (Ignore the multiple force pushes below - I strived for a clean commit history.)
Here's a somewhat relevant section from the spec as to why the host header is missing; emphasis mine:

Clients that generate HTTP/2 requests directly SHOULD use the ":authority" pseudo-header field instead of the Host header field.

Note that this only works for HTTP/2 - I don't think it'll work for HTTP/1.1. From the 1.1 spec:

A client MUST include a Host header field in all HTTP/1.1 request messages

I'm unsure if we can get the correct URL anywhere else in Node. See the comment below for details.
createRequest has 3 callers, packages/start/dev/server.js, packages/start-node/server.js, and packages/start-static/entry.js, so this PR has security implications for production deployments.

Svelte solves this issue here by forcing HTTP/1. Note that this solution uses the fact that Vite "downgrades to TLS only when the server.proxy option is also used". We hardcode http though, so that'll need to be switched to https... somehow. (In my examples/with-authjs reproduction, req.headers.origin is undefined.) I've still no idea how to get the scheme.
FYI this isn't blocking me, so I'm in no rush to merge. I did try to use pnpm patch and it worked great, but then I realized that my "real" code uses Cloudflare Workers... not Node... I switched to Node when attempting to create a minimal reproduction and never looked up. 🤦♂ Cloudflare has its own problem that I discuss (and resolve) here. (I'm a good developer and know exactly what I'm doing 😊)

In setting up for SolidStarts next Beta Phase built on Nitro and Vinxi we are closing all PRs/Issues that will not be merged due to the system changing. If you feel your issue was closed in mistake. Feel free to re-open it after updating/testing against 0.4.x release. Thank you for your patience.

See https://github.com/solidjs/solid-start/pull/1139 for more details.


[17206] Restore participant domainID tag in XML profile

Restore <domainId> tag in documentation
Restore tag in ALL documentation XMLs

Rebased #455
This pull request should be merged right after #455 gets merged

@richiprosima Please test this

@richiprosima please test this


Missing device configuration: Hank Electronics Ltd. HKZW-SO08

Checklist

[X] It is not in the configuration DB

[X] It was not merged recently or has a pending PR

Which device is missing?
Hank Electronics Ltd. HKZW-SO08
Manufacturer ID
0x0208
Product Type
0x0100
Product ID
0x0019
Firmware Version
1.2
Is the device listed on the Z-Wave Alliance website?
https://products.z-wavealliance.org/products/3202
Do you have a manual?
https://products.z-wavealliance.org/ProductManual/File?folder=&filename=MarketCertificationFiles/3202/SmartPlug SO08P SpecificationEngineering.pdf

Let's see if this works...
@zwave-js-bot import config 3202 from zwa

Thx @apella12 !


Incompatible with pandoc >=3.1.7

Trying to run using the makefile, and getting
Error producing PDF.
! Undefined control sequence.
l.403 Software (\citeproc

searching around leads here: https://tex.stackexchange.com/questions/695228/undefined-control-sequence-using-citeproc-to-convert-md-to-pdf-with-a-template
then here: https://github.com/jgm/pandoc/issues/9031#issuecomment-1694744040
which was apparently merged in 3.1.7
will PR in the moment with fix, but ya the dependencies section in the readme needs a little love <3

Fix via #52.


[SPARK-27533][SQL] Date and timestamp CSV benchmarks

What changes were proposed in this pull request?
Added new CSV benchmarks related to date and timestamps operations:

Write date/timestamp to CSV files
to_csv() and from_csv() for dates and timestamps
Read date/timestamps from CSV files, and infer schemas
Parse and infer schemas from Dataset[String]

Also existing CSV benchmarks are ported on NoOp datasource.

@HyukjinKwon Please, take a look at the PR.

Can one of the admins verify this patch?

Merged build finished. Test PASSed.

Test PASSed.
Refer to this link for build results (access rights to CI server needed):
https://amplab.cs.berkeley.edu/jenkins//job/testing-k8s-prb-make-spark-distribution-unified/10094/
Test PASSed.

Test build #104783 has started for PR 24429 at commit 174c11c.

Merged build finished. Test PASSed.

Test PASSed.
Refer to this link for build results (access rights to CI server needed):
https://amplab.cs.berkeley.edu/jenkins//job/testing-k8s-prb-make-spark-distribution-unified/10095/
Test PASSed.

Test build #104784 has started for PR 24429 at commit f9a4912.

Test build #104783 has finished for PR 24429 at commit 174c11c.

This patch passes all tests.
This patch merges cleanly.
This patch adds no public classes.

Merged build finished. Test PASSed.

Test PASSed.
Refer to this link for build results (access rights to CI server needed):
https://amplab.cs.berkeley.edu/jenkins//job/SparkPullRequestBuilder/104783/
Test PASSed.

Test build #104784 has finished for PR 24429 at commit f9a4912.

This patch passes all tests.
This patch merges cleanly.
This patch adds no public classes.

Merged build finished. Test PASSed.

Test PASSed.
Refer to this link for build results (access rights to CI server needed):
https://amplab.cs.berkeley.edu/jenkins//job/SparkPullRequestBuilder/104784/
Test PASSed.

Merged to master.


Add a context property to the DragDropManager.

This will help to eliminate the dependency on 'window' in the HTML5 backend.
see https://github.com/gaearon/react-dnd/issues/241

I'm not a maintainer on this so I can't merge here :(

@gaearon Would it be possible to move dnd-core and the react-dnd libraries to an organization and set up @kesne as the lead maintainer?


TextBox caret has incorrect position at the end of the string

Describe the bug
Caret in the end of the string overlaps letter
To Reproduce
Steps to reproduce the behavior:

Create text box with Inter font and a bit smaller font size (i.e. 11.92)
Write some text and compare caret position relative to letter in the end of the string and in the middle.
  <LayoutTransformControl>      <LayoutTransformControl.LayoutTransform>          <ScaleTransform ScaleX="5" ScaleY="5" />      </LayoutTransformControl.LayoutTransform>      <TextBox FontFamily="avares://Avalonia.Fonts.Inter/Assets#Inter" FontSize="11.92" />  </LayoutTransformControl>

Expected behavior
Caret offset from letter is always the same
Screenshots
I applied x5 scaling to window for better visibility.
here you can see distance between number and caret

and here they overlap

Desktop (please complete the following information):

OS: Any
Version 11

@HermanKirshin we had this #12765 merged recently. Maybe you can test latest master (nightly) in order to check if that PR also fixes your issue. Thx 🙏

@timunie I had tested latest master and unfortunately no, issue still exists in latest master.

https://github.com/AvaloniaUI/Avalonia/blob/master/src/Avalonia.Controls/Presenters/TextPresenter.cs#L410

The issue is most likely that we can't draw outside the bounds of the control so we introduced this hack. We could either make the desired size of the TextPresenter slightly bigger or use the adorner layer to draw the caret.

@Gillibald I guess making it slightly bigger would be the better fix as otherwise one may have the caret sitting on the border

@Gillibald  Thank you, moving this code from GetCaretPoints to MeasureOverride with adding +1 to width solved the problem.

Index: src/Avalonia.Controls/Presenters/TextPresenter.cs
IDEA additional info:
Subsystem: com.intellij.openapi.diff.impl.patch.CharsetEP
<+>UTF-8
===================================================================
diff --git a/src/Avalonia.Controls/Presenters/TextPresenter.cs b/src/Avalonia.Controls/Presenters/TextPresenter.cs
--- a/src/Avalonia.Controls/Presenters/TextPresenter.cs	(revision fa8e1985f3e97e9d358130aaa19742834beacb7a)
+++ b/src/Avalonia.Controls/Presenters/TextPresenter.cs	(revision e8e0aa4c625f56d346b91e77813a2f0dc4675969)
@@ -401,15 +401,6 @@
             var y = Math.Floor(_caretBounds.Y) + 0.5;
             var b = Math.Ceiling(_caretBounds.Bottom) - 0.5;

-            var caretIndex = _lastCharacterHit.FirstCharacterIndex + _lastCharacterHit.TrailingLength;
-            var lineIndex = TextLayout.GetLineIndexFromCharacterIndex(caretIndex, _lastCharacterHit.TrailingLength > 0);
-            var textLine = TextLayout.TextLines[lineIndex];
-
-            if (_caretBounds.X > 0 && _caretBounds.X >= textLine.WidthIncludingTrailingWhitespace)
-            {
-                x -= 1;
-            }
-
             return (new Point(x, y), new Point(x, b));
         }

@@ -565,6 +556,15 @@

             var textWidth = TextLayout.OverhangLeading + TextLayout.WidthIncludingTrailingWhitespace + TextLayout.OverhangTrailing;

+            var caretIndex = _lastCharacterHit.FirstCharacterIndex + _lastCharacterHit.TrailingLength;
+            var lineIndex = TextLayout.GetLineIndexFromCharacterIndex(caretIndex, _lastCharacterHit.TrailingLength > 0);
+            var textLine = TextLayout.TextLines[lineIndex];
+
+            if (_caretBounds.X > 0 && _caretBounds.X >= textLine.WidthIncludingTrailingWhitespace)
+            {
+                textWidth += 1;
+            }
+
             return new Size(textWidth, TextLayout.Height);
         }


Add a way to highlight the detected text in text_from_image/main.py

Right now the file OCRs the image but doesn't highlight the captured text. Something like this -

Plus the code isn't very user-friendly and does not follow flake8 linting. I'd like to take this up!

Ohk, do that :)


Fix my opinions

Doc.renderXXX now uses the default configuration for each "output target".
RenderOptions.render() now renders the Doc with configurable colors and styles.
Whenever outputting to a terminal, use AdaptiveCli (by default) or UnixTermStylist (if either color or style is changed), which is guaranteed now by RenderOptions.stylist() and RenderOptions.defaultStylist()
AdaptiveCli is now a standalone Stylist (instead of a StyleFamily)
Stylist can be viewed as the frozen Sig CS ** SF ** OutputTarget, while RenderOptions reads user-configured CS and SF and create the Stylist according to "output target".

bors r+

bors r+


Nanotrasen Block Game seems to be broken.

Description
Nanotrasen Block Game arcade game doesn't load
Reproduction
See screenshot
Screenshots

Additional context
NA

*Nanotrasen Block Game™

duplicate of https://github.com/space-wizards/space-station-14/issues/27347 ?


Convert view values to viewspec.

I don't think we should have to do this. The ViewSpec is supposed to take view class names as Strings. I think we should fix it there.


Proposal: Backend interface

Like every 6 month or so, we redefine how backends are defined :) Here is a new proposal with the following idea:
Instead of abstracting and reusing specific parts of the compilation pipeline, each backend copy & pastes the full pipeline and has full control. This leads to duplication, but also makes it much easier for newcomers to understand the pipeline since it is in one place (and they only work on one backend). Backends would still reuse Frontend and Middleend, but can add arbitrary phases.
// TODO, could be backend specific in the future
//  not all of them need to be supported by each backend
enum Stage {
  case Core
  case Lifted
  case Machine
  case Target
}

case class Compilation[E](outputFiles: Map[String, Document], executable: E)

/**
 * ...
 *
 * Every single method can use the context to report errors or throw
 * exceptions.
 *
 * @tparam Executable information of this compilation run, which is passed to
 *                 the corresponding backend runner (e.g. the name of the main file)
 */
trait Backend[Executable] extends Compiler {

  /**
   * Called after running the frontend from editor services.
   *
   * Can be overridden to implement backend specific checks (exclude certain
   * syntactic constructs, etc.)
   */
  def validate(source: Source, mod: Module)(using Context): Unit = ()

  /**
   * Show the IR of this backend for [[source]] after [[stage]].
   * Backends can return [[None]] if they do not support this.
   *
   * Used to show the IR in VSCode. For the JS Backend, also used for
   * separate compilation in the web.
   */
  def prettyIR(source: Source, stage: Stage)(using Context): Option[Document]

  /**
   * Return the backend specific AST for [[source]] after [[stage]].
   * Backends can return [[None]] if they do not support this.
   *
   * The AST will be pretty printed with a generic [[effekt.util.PrettyPrinter]].
   */
  def treeIR(source: Source, stage: Stage)(using Context): Option[Any]

  /**
   * Should compile [[source]] with this backend. Each backend can
   * choose the representation of the executable.
   */
  def compile(source: Source)(using Context): Compilation[Executable]

  /**
   * Should compile [[source]] with this backend, the compilation result should only include
   * the contents of this file, not its dependencies. Only used by the website and implemented
   * by the JS backend. All other backends can return `None`.
   */
  def compileSeparate(source: Source)(using Context): Option[Document] = None
}

/**
 * Interface used by [[Driver]] and [[EffektTests]] to run a compiled program.
 *
 * @tparam Executable the executable, as produced by [[Backend.compile]].
 */
trait BackendRunner[Executable] {

  /**
   * Should check whether everything is installed for this backend
   * to run. Should return Right(()) if everything is ok and
   * Left(explanation) if something is missing.
   */
  def checkSetup(using Context): Either[String, Unit]

  /**
   * Runs the executable (e.g. the main file).
   */
  def eval(executable: Executable)(using Context): Unit
}

@marzipankaiser it would be valuable to get feedback from you on this design. Did I forget any aspects?

For the JS Backend, also used for separate compilation in the web.

I don't like this aspect very much, but I also don't want to add a hook for separate compilation, since backend might choose not to implement it (most actually will).
Maybe we could add the following method:
  /**
   * Should compile [[source]] with this backend, the compilation result should only include
   * the contents of this file, not its dependencies. Only used by the website and implemented
   * by the JS backend. All other backends can return `None`.
   */
  def compileSeparate(source: Source)(using Context): Option[...]

I like the compileSeparate version more, then you might also want to update the doc comments:
   * Used to show the IR in VSCode. For the JS Backend, also used for
   * separate compilation in the web.

When redesigning the backend anyway (and now having the stdlib feature), we might want to allow a (optional?) parameter args: Seq[String] (or something like that) to eval.
It would be really nice if we could write something like
effekt --backend llvm examples/benchmarks/triples.effekt -- 20 10

(or without the -- 🤔)

There is a few more things we might want to address here:

tests should make use of the new abstraction (to detect whether they can run a backend AND to select the backend and actually run the tests)
includes, stdlib, prelude should be configured in the backends

I have an implemented proposal, but some backends are still missing (also it needs a few more passes, but I'll push before that)

@marzipankaiser @phischu these changes heavily affect you. If you have any questions or need help / assistance in porting, just ask.


JavaScript Object in error

I see this error message sometimes when trying to click view/edit yaml on a deployment. It seems to happen when Rancher is running slow/having trouble connecting to the kubernetes instance.
In this case it is the yaml endpoint, the response we're getting is:
Error: 'x509: certificate is valid for ...
Trying to reach: 'https://some-ip:6443/apis/apps/v1beta2/namespaces/my-namespace/deployments/deployment'

Useful
Info

Versions
Rancher v2.1.3 UI: v2.1.17

Route
containers.index

Please let us know in a comment if you can still reproduce the issue, and we'll reopen it


JSON output incorrect with new analyzer structure

JSON output is putting the results into a crossover list as per example https://pastebin.ca/4018029
If you have two or more records for an indicator eg RSI, in the json we need to include the indicator's index number so you can tell which result is which. Also see the pastebin link above which contains an example of two RSI values for different candle periods.
JSON output would be much more informative if it contained the candle period (would solve the above) and exchange name. Could you kindly add these?
Thanks

merged


ScalaJS cross-compilation

Thanks for creating this PR. The changes look good to me. The build is also passing. Will merge.


Chromium theme?

I see that a Firefox theme is in the works, are there plans for a chromium theme? Once the GTK+ theme is up and running, will using the "Use GTK+ theme" button automatically sync the color of chromium to the colors as set in the GTK+ theme?

Chromium will adapt the colors of the GTK+ theme and if you enable the Use system title bar and borders option it'll also use the GTK+ window styles.
Use can see the awesome Arc on the second screenshot below.


AR mode not working on Safari only

Description
Suddenly, I am no longer able to get this to work on iOS/Safari only. This was working a couple of days ago, and nothing has changed on the client side. It works fine iOS/Chrome and Android/All. I have tried using using older version of model viewer as well as 0.6.2. Other examples work fine in the phones being tested.
<model-viewer alt="Refridgerator"
  src="assets/Fridge.glb"
  ios-src="assets/Fridge.usdz"
  background-color="#fff"
  poster="assets/fridge.jpg"
  reveal="interaction"
  preload
  quick-look-browsers="safari chrome"
  ar>
</model-viewer>

Example of how it is implemented in the HTML, link provided below.
Live Demo
https://nmg-web-ar-demo.firebaseapp.com
Browser Affected

[ ] Chrome
[ ] Edge
[ ] Firefox
[ ] Helios
[ ] IE
[+] Safari

OS

[ ] Android
[+] iOS - 13.0 / 13.1.2
[ ] Linux
[ ] MacOS
[ ] Windows

Versions

model-viewer: v0.6.2 (have downgraded to v0.5.1 as well)
three.js: rXX

It has randomly started working for me again on all devices, with nothing changed.

@DavidKarasek thanks for reporting. Can you give us an update? Does it randomly fail for you, or has it been stable for the last two days or so?


libc 0.2.42 changed definition of bind to use socklen_t on aarch64-linux-android

https://github.com/rust-lang-nursery/net2-rs/pull/74 is also needed to get mio compiling for aarch64-linux-android again

Don't forget to update the libc dependency in Cargo.toml too.

Thanks for the PR. #850 has been merged and addresses the same issue. I will close this now.


Unable to set redis port via environment variable.

PGSync version: 1.1.8
Postgres version: 12.4
Elasticsearch version: 7.9
Redis version: 5.0.9
Python version: 3.7
Problem Description:
Hi @toluaina - I'm attempting to run pgsync in a docker container on Heroku. I'm using Heroku's redis add-on which uses a non-default port, so I must set the port in pgsync via the REDIS_PORT environment variable. While all the other env vars seem to properly set values for pgsync, REDIS_PORT doesn't seem to have an effect.
Here are the environment variables that are configured for my app:

When the app runs, you can see that some variables (like REDIS_HOST, for example) seem to work, while REDIS_PORT does not. Rather than trying to connect to port 8629, pgsync attempts to connect to the default port 6379, and the connection is, of course, refused.

Is it possible that the REDIS_PORT env var is not being passed to the redis client properly?

Following up.. to take Heroku completely out of the equation, I tested this locally in a docker container as well, and encountered the same problem. Here's the full output:
root@3ea0a63a444b:/# export ELASTICSEARCH_HOST=https://3cfb8b78dc4f6a3b3e36e1661bf1e4f7.us-east-1.aws.found.io
root@3ea0a63a444b:/# export ELASTICSEARCH_PORT=9243
root@3ea0a63a444b:/# export PG_HOST=ec2-54-157-11-238.compute-1.amazonaws.com
root@3ea0a63a444b:/# export PG_PASSWORD=pe0fc3e9a71c83bf0885667290b44cbe213d7e25ad00165e4ce0eca5f0615d0f0
root@3ea0a63a444b:/# export PG_PORT=5432
root@3ea0a63a444b:/# export PG_USER=u38kmr28qjfo2q
root@3ea0a63a444b:/# export REDIS_AUTH=h:p16ed5f81c737c9957733ceb9d2334b9de169b2dbf6b92cf8b101fd9286ad7747
root@3ea0a63a444b:/# export REDIS_DB=0
root@3ea0a63a444b:/# export REDIS_HOST=ec2-52-87-104-221.compute-1.amazonaws.com
root@3ea0a63a444b:/# export REDIS_PORT=8629
root@3ea0a63a444b:/# pgsync --config schema.json --daemon
2020-08-26 06:11:13.292:ERROR:pgsync.redisqueue: Redis server is not running: Error 111 connecting to ec2-52-87-104-221.compute-1.amazonaws.com:6379. Connection refused.
Traceback (most recent call last):
  File "/usr/local/lib/python3.7/site-packages/redis/connection.py", line 559, in connect
    sock = self._connect()
  File "/usr/local/lib/python3.7/site-packages/redis/connection.py", line 615, in _connect
    raise err
  File "/usr/local/lib/python3.7/site-packages/redis/connection.py", line 603, in _connect
    sock.connect(socket_address)
ConnectionRefusedError: [Errno 111] Connection refused

During handling of the above exception, another exception occurred:

Traceback (most recent call last):
  File "pgsync/redisqueue.py", line 33, in pgsync.redisqueue.RedisQueue.__init__
  File "/usr/local/lib/python3.7/site-packages/redis/client.py", line 1378, in ping
    return self.execute_command('PING')
  File "/usr/local/lib/python3.7/site-packages/redis/client.py", line 898, in execute_command
    conn = self.connection or pool.get_connection(command_name, **options)
  File "/usr/local/lib/python3.7/site-packages/redis/connection.py", line 1192, in get_connection
    connection.connect()
  File "/usr/local/lib/python3.7/site-packages/redis/connection.py", line 563, in connect
    raise ConnectionError(self._error_message(e))
redis.exceptions.ConnectionError: Error 111 connecting to ec2-52-87-104-221.compute-1.amazonaws.com:6379. Connection refused.
Traceback (most recent call last):
  File "/usr/local/lib/python3.7/site-packages/redis/connection.py", line 559, in connect
    sock = self._connect()
  File "/usr/local/lib/python3.7/site-packages/redis/connection.py", line 615, in _connect
    raise err
  File "/usr/local/lib/python3.7/site-packages/redis/connection.py", line 603, in _connect
    sock.connect(socket_address)
ConnectionRefusedError: [Errno 111] Connection refused

During handling of the above exception, another exception occurred:

Traceback (most recent call last):
  File "/usr/local/bin/pgsync", line 7, in <module>
    sync.main()
  File "pgsync/utils.py", line 81, in pgsync.utils.timeit.timed
  File "/usr/local/lib/python3.7/site-packages/click/core.py", line 829, in __call__
    return self.main(*args, **kwargs)
  File "/usr/local/lib/python3.7/site-packages/click/core.py", line 782, in main
    rv = self.invoke(ctx)
  File "/usr/local/lib/python3.7/site-packages/click/core.py", line 1066, in invoke
    return ctx.invoke(self.callback, **ctx.params)
  File "/usr/local/lib/python3.7/site-packages/click/core.py", line 610, in invoke
    return callback(*args, **kwargs)
  File "pgsync/sync.py", line 854, in pgsync.sync.main
  File "pgsync/sync.py", line 61, in pgsync.sync.Sync.__init__
  File "pgsync/redisqueue.py", line 36, in pgsync.redisqueue.RedisQueue.__init__
  File "pgsync/redisqueue.py", line 33, in pgsync.redisqueue.RedisQueue.__init__
  File "/usr/local/lib/python3.7/site-packages/redis/client.py", line 1378, in ping
    return self.execute_command('PING')
  File "/usr/local/lib/python3.7/site-packages/redis/client.py", line 898, in execute_command
    conn = self.connection or pool.get_connection(command_name, **options)
  File "/usr/local/lib/python3.7/site-packages/redis/connection.py", line 1192, in get_connection
    connection.connect()
  File "/usr/local/lib/python3.7/site-packages/redis/connection.py", line 563, in connect
    raise ConnectionError(self._error_message(e))
redis.exceptions.ConnectionError: Error 111 connecting to ec2-52-87-104-221.compute-1.amazonaws.com:6379. Connection refused.

You are totally right the Redis port was being ignored. I have pushed out 1.1.9 to address this.  thanks.

Wow @toluaina thanks for the quick follow up!
I'll give this another try tonight.
Really cool project btw!

Confirmed! I'm able to connect to Redis now. Closing this out. I really appreciate the help @toluaina!

@hellojustin just to follow-up - I know it's been two years now, but to confirm: were you able to get this working on Heroku? With a PG database and ES cluster via Heroku addons? Or was PG deployed in another manner? TIA

@BenjamenMeyer I'm wondering the same thing. Did you get it working using PostgreSQL on Heroku?

Thanks @BenjamenMeyer


DBeaver Connection to Postgres and Redshift Does Not Appear to Accurately Indicate Transaction Time

System information:

Operating system (distribution) and version: Windows 10 1830 17134.1246
DBeaver version: 6.3.4, also appeared in 6.2.3
Additional extensions: None

Connection specification:

Database name and version: Redshift
Driver name: AWS Redshift JDBC Driver
Do you use tunnels or proxies (SSH, SOCKS, etc)? No

Describe the problem you're observing:
The transaction management in DBeaver appears to suddenly be working very differently and I am not sure how this occurred, or what I can do about it.
I have my connection set to manual commit, read uncommitted.

When I first connect, I am able to both commit and rollback without running any other commands. The popup indicates an incredibly long time period, which seems wrong.

Running commands does not increment the counter. However, running the commands BEGIN and ROLLBACK does. In this example, you see BEGIN and ROLLBACK increment the counter, but pg_user does not.

Normally, if you mess something up, you would need to ROLLBACK before opening a new transaction. However, that doesn't seem to be true in my version.

If I look in the log, with show all queries and show previous transactions, I see this:

It looks like it rolled back the failed one (with the appropriate message), and then ran it again for me.
Maybe this is intended behavior, although the 26 million minute transaction makes me think probably not - weirdly, that seems to line up almost like it's using minutes since January 1, 1970. I know this is probably going to be difficult to debug and I am happy to provide additional help as I can. I saw this behavior in both PostgreSQL and Redshift.
Steps to reproduce, if exist:
Connect to a Redshift cluster, and then hit either commit or rollback. No commands are needed. But I haven't seen anyone else able to do this.
Include any warning/errors/backtraces from the logs

Thanks for the bug report

verified


RATIS-1029. NPE at MetricServerInterceptor.interceptCall

What changes were proposed in this pull request?
When identifier is not NULL, metrics variable will not be initialized: https://github.com/apache/incubator-ratis/blob/349c365e81d76b210df7a97704217178e3f7f826/ratis-grpc/src/main/java/org/apache/ratis/grpc/metrics/intercept/server/MetricServerInterceptor.java#L71
What is the link to the Apache JIRA
https://issues.apache.org/jira/browse/RATIS-1029
How was this patch tested?
UT

R: @anshkhannasbu @bshashikant

This PR is related to #159.

@amaliujia, if the identifier is not null then metrics should be set. Since there is no other way to set the identifier. Is there some case where metrics cannot be created?

@anshkhannasbu
I accepted your suggestion and then give another look.  I think it is better to have a separate if (metrics == null) check (see my last commit). WDYT?

@anshkhannasbu
I accepted your suggestion and then give another look. I think it is better to have a separate if (metrics == null) check (see my last commit). WDYT?

@amaliujia sure looks good.


Update: Set line height on Grid

The Grid's height is all over the place due to
inherited base styles otherwise,
we're setting the font-size already so now we set line-height.

Current coverage is 100.00%

Merging #86 into master will not affect coverage as of 80640ce

@@            master     #86   diff @@
======================================
  Files           15      15
  Stmts          130     130
  Branches         0       0
  Methods          0       0
======================================
  Hit            130     130
  Partial          0       0
  Missed           0       0

Review entire Coverage Diff as of 80640ce

Powered by Codecov. Updated on successful CI builds.

Merging...


feat: implement support for removing GFAL remote files

Description
Currently, gfal remote files cannot be deleted/updated:
NotImplementedError: Removal of files is unavailable for this remote

This PR defines one-line remove() method for the gfal RemoteObject.

Thank you as well @johanneskoester! Is there anything else that needs to be done before this is merged?

Nope, sorry, I am just slow with this.


kuma-experimental: 2.6.5 -> 2.7.1

Automatic update generated by nixpkgs-update tools. This update was made based on information from https://github.com/kumahq/kuma/releases.
meta.description for kuma-experimental is: Service mesh controller
meta.homepage for kuma-experimental is: https://kuma.io/
meta.changelog for kuma-experimental is: https://github.com/kumahq/kuma/blob/2.7.0/CHANGELOG.md
Updates performed

Golang update

To inspect upstream changes

Release on GitHub

Compare changes on GitHub

Impact
Checks done

built on NixOS
The tests defined in passthru.tests, if any, passed
found 2.7.0 with grep in /nix/store/z2bm95gv13zrxk0h0c1zw4qw919ki5bg-kuma-experimental-2.7.0
found 2.7.0 in filename of file in /nix/store/z2bm95gv13zrxk0h0c1zw4qw919ki5bg-kuma-experimental-2.7.0

Rebuild report (if merged into master) (click to expand)

5 total rebuild path(s)

5 package rebuild(s)

First fifty rebuilds by attrpath
kuma
kuma-cp
kuma-dp
kuma-experimental
kumactl

Instructions to test this update (click to expand)

Either download from Cachix:
nix-store -r /nix/store/z2bm95gv13zrxk0h0c1zw4qw919ki5bg-kuma-experimental-2.7.0 \
  --option binary-caches 'https://cache.nixos.org/ https://nix-community.cachix.org/' \
  --option trusted-public-keys '
  nix-community.cachix.org-1:mB9FSh9qf2dCimDSUo8Zy7bkq5CX+/rkCWyvRCYg3Fs=
  cache.nixos.org-1:6NCHdD59X431o0gWypbMrAURkbJ16ZPMQFGspcDShjY=
  '

(The Cachix cache is only trusted for this store-path realization.)
For the Cachix download to work, your user must be in the trusted-users list or you can use sudo since root is effectively trusted.
Or, build yourself:
nix-build -A kuma-experimental https://github.com/r-ryantm/nixpkgs/archive/537980d5ff3390150f4ca6e5f85db8c527712e6a.tar.gz

Or:
nix build github:r-ryantm/nixpkgs/537980d5ff3390150f4ca6e5f85db8c527712e6a#kuma-experimental

After you've downloaded or built it, look at the files and if there are any, run the binaries:
ls -la /nix/store/z2bm95gv13zrxk0h0c1zw4qw919ki5bg-kuma-experimental-2.7.0
ls -la /nix/store/z2bm95gv13zrxk0h0c1zw4qw919ki5bg-kuma-experimental-2.7.0/bin

Pre-merge build results
We have automatically built all packages that will get rebuilt due to
this change.
This gives evidence on whether the upgrade will break dependent packages.
Note sometimes packages show up as failed to build independent of the
change, simply because they are already broken on the target branch.
Result of nixpkgs-review --extra-nixpkgs-config '{ allowInsecurePredicate = x: true; }' run on x86_64-linux 1

5 packages built:

kuma
kuma-cp
kuma-dp
kuma-experimental
kumactl

Maintainer pings
cc @zbioe for testing.

Automatic update generated by nixpkgs-update tools. This update was made based on information from https://github.com/kumahq/kuma/releases.
meta.description for kuma-experimental is: Service mesh controller
meta.homepage for kuma-experimental is: https://kuma.io/
meta.changelog for kuma-experimental is: https://github.com/kumahq/kuma/blob/2.7.1/CHANGELOG.md
Updates performed

Golang update

To inspect upstream changes

Release on GitHub

Compare changes on GitHub

Impact
Checks done

built on NixOS
The tests defined in passthru.tests, if any, passed
found 2.7.1 with grep in /nix/store/dbf7xs3q5ngb0b0f6hcqc85kbyj5dh7k-kuma-experimental-2.7.1
found 2.7.1 in filename of file in /nix/store/dbf7xs3q5ngb0b0f6hcqc85kbyj5dh7k-kuma-experimental-2.7.1

Rebuild report (if merged into master) (click to expand)

6 total rebuild path(s)

6 package rebuild(s)

First fifty rebuilds by attrpath

kuma
kuma-cp
kuma-dp
kuma-experimental
kumactl

Instructions to test this update (click to expand)

Either download from Cachix:
nix-store -r /nix/store/dbf7xs3q5ngb0b0f6hcqc85kbyj5dh7k-kuma-experimental-2.7.1 \
  --option binary-caches 'https://cache.nixos.org/ https://nix-community.cachix.org/' \
  --option trusted-public-keys '
  nix-community.cachix.org-1:mB9FSh9qf2dCimDSUo8Zy7bkq5CX+/rkCWyvRCYg3Fs=
  cache.nixos.org-1:6NCHdD59X431o0gWypbMrAURkbJ16ZPMQFGspcDShjY=
  '

(The Cachix cache is only trusted for this store-path realization.)
For the Cachix download to work, your user must be in the trusted-users list or you can use sudo since root is effectively trusted.
Or, build yourself:
nix-build -A kuma-experimental https://github.com/r-ryantm/nixpkgs/archive/ff69bd75105132f2aa8f5064aa06a272ce3567cb.tar.gz

Or:
nix build github:r-ryantm/nixpkgs/ff69bd75105132f2aa8f5064aa06a272ce3567cb#kuma-experimental

After you've downloaded or built it, look at the files and if there are any, run the binaries:
ls -la /nix/store/dbf7xs3q5ngb0b0f6hcqc85kbyj5dh7k-kuma-experimental-2.7.1
ls -la /nix/store/dbf7xs3q5ngb0b0f6hcqc85kbyj5dh7k-kuma-experimental-2.7.1/bin

Pre-merge build results
We have automatically built all packages that will get rebuilt due to
this change.
This gives evidence on whether the upgrade will break dependent packages.
Note sometimes packages show up as failed to build independent of the
change, simply because they are already broken on the target branch.
Result of nixpkgs-review --extra-nixpkgs-config '{ allowInsecurePredicate = x: true; }' run on x86_64-linux 1

5 packages built:

kuma
kuma-cp
kuma-dp
kuma-experimental
kumactl

Maintainer pings
cc @zbioe for testing.


Revert "Adding Przelewy24 to Stripe Payments Demo"

Reverts stripe/stripe-payments-demo#143, missed back-end changes in other languages 😨

@willock-stripe as discussed closing this in favor of a separate PR for the other servers.


Add support for --proxy-cacert or --proxy-insecure

Currently it's impossible to use this unix curl example:
curl -x https://squid.domain.com:443 --proxy-user user:pass https://ifconfig.co --proxy-cacert bundle.crt
Or maybe i can use sщme available functions ?

squid.conf
https_port $SQUID_EXT_IP:443 cert=/path/to/wild.domain.crt  key=/path/to/wild.domain.key

extern crate curl;

use std::io::{stdout, Write};

use curl::easy::Easy;

fn main() {
    let mut easy = Easy::new();
    easy.proxy("https://squid.domain.com").unwrap();
    easy.proxy_port(443).unwrap();
    easy.proxy_username("user").unwrap();
    easy.proxy_password("pass").unwrap();
    easy.url("https://httpbin.org/ip").unwrap();
    easy.write_function(|data| {
        Ok(stdout().write(data).unwrap())
    }).unwrap();
    easy.perform().unwrap();

    println!("{}", easy.response_code().unwrap());
}

Error
thread 'main' panicked at 'called `Result::unwrap()` on an `Err` value: Error { description: "Peer certificate cannot be authenticated with given CA certificates", code: 60, extra: Some("SSL certificate problem: unable to get local issuer certificate") }', src/libcore/result.rs:868

I'd definitely love to have support for these! This would probably just involve binding a constant or two and then adding the appropriate functions to access it.
Would you be interested in sending a PR for this functionality? I could certainly help out if needed!

You may want to try running cargo run inside of the systest folder which will validate the value of CURLOPT_PROXY_CAPATH, and failing that perhaps you're linking against a version of libcurl itself that doesn't have the option?


Coupling animations to TabNavigator's sliding animation

I'm basically trying to achieve is Snapchat's camera capture button behaviour.
So I have the following requirements considering my CameraButton component:

should be visible on most screens (quick-access to the camera screen), but not all. For example it should not be visible in the Settings-StackNavigator nested inside top-level TabNavigator
must trigger different actions depending on the currently active screen - taking a photo in the camera screen vs. navigating to the camera screen if another screen is currently active.
should change its appearance while navigating. It's supposed to be smaller when the camera screen is not active (just like in Snapchat). For this I would like to apply an animation that is in sync with the sliding mechanism of the TabNavigator. So the animation's speed should match that of the sliding tab, i.e. even "pause" when the user slides the tab only halfway in (again, just like in Snapchat).

I'm not quite sure how to achieve such a behaviour bets with react-navigation (neither any other navigation library).
My first attempt was basically
<View>
  <AppNavigator {ref => this.nav = ref.navigation} />  // <-- top-level TabNavigator plus several nested Navigators
  <CameraControl navigation={this.nav} />
</View>

So this way my CameraControl has access to the current active route and can thus decide when it should be visible and what action to trigger if gets pressed.
However I have no idea on how to implement the animation 😕
Thanks for any suggestions! :slightly_smiling_face:
EDIT: I'm wondering if there's a cleaner solution. Deriving the active (nested) route from the bare version of the navigation prop doesn't feel like it was designed to do so (as the nesting depth varies from route to route). Also there is no rerendering happening to my CameraControl when the active route changes as the navigation prop doesn't change. I feel like I'm barking up the wrong tree...

For something similar, I'm currently using the position prop inside the TabNavigation's Header component. It's an AnimatedValue, meaning that you can do things like this.prop.position.interpolate(...).
It's not ideal though, for two reasons:

Sometimes, the other tabs are not initialized until you swipe to their tab (even when lazy loading is disabled), and it makes the animation "jumping" from one position to the other
You have to put your animated component in the header

I'd love to hear about another way that may be better! :)

Pinging OP @asterikx since this issue has not been active for a while, and it's related to an old version of the lib. (moreover it's not really nor an issue nor a feature request)
Please let me know if you want this to remain open; if I get no answer in the next 7 days I will close it.

Can be closed.


Packetloss After running Debloat Script

The script worked flawlessly. However, after running the script, restarting and trying to play a game, I am now experiencing 40% packet loss which was not present before. I have run many debloat scripts in the past without any issue (between OS installs), and used this one in the past as well with no issue. I am not sure why this is occurring, the NIC drivers are still present, everything seems fine, but the packet loss is very noticeable.

I also have this issue, the outgoing packet loss is 40%
I tried reverting the registry but the script just became unresponsive. (10 minutes~)
I'm still running the script incase it is doing something big

(I am unsure if the cause is this script but my computer is fairly new, I got it this week, has been running just fine until today)

i just reconnected my wifi and it seems to have fixed it

earlier (i couldn't upload images):

earlier screenshot, before reconnect (I could not send an image then):


execution stop

windows keeps coming even when correct information is entered. anyway to workaround this?

Hey @moaeddy, can you please share more details? Where did you execute it (WORKGROUP or domain machine)? Do you have a connection to the DC?
Thanks

WORKGROUP

Hi,
Please see https://github.com/Dviros/CredsLeaker/issues/1


Is this project dead?

The pulse for a month shows just one change, a PR was merged to fix a breaking change. Is this project still alive? Is there a fork that is being maintained? supertest-as-promised looks like the way forward, but it doesn't seem to be maintained either.
Anybody have any good alternatives?

We need a maintainer to deal PRs @mikelax

Imo, if it works and there are no better alternative (i think it is the case right now), there is no reason to change it frequently until there are blocking bugs.
Also, having a quick look at issues makes me think there are a lot of invalid ones.
Since i use it heavily, i'm ok to make some issues/PR triage.

I've created assert-request as a new promise-based alternative.

Hi all. I picked up this project as the previous maintainer and original owner had given up interest.
I have been trying to keep on top of critical bugs, push out a few updates and keep parity with superagent updates.
@nfroidure you are correct. A lot of the issues opened are really questions on usage. I have been trying to move those discussions to the superteset tag at stackoverflow
I can continue to do the same, but I would welcome help for trying to think up a larger roadmap for 2.0 release.

I can start a roadmap of things that I think need to be added, upgraded, etc and people can comment and we can use that as a starting point.

@mikelax Could help you a bit with bug triage and stuff

@saintedlama  if you want to help me with with some PR reviews and help get some PRs identified for 1.3 that would be really useful.

@mikelax sorry for my late response - what are your plans for 1.3? I could review PRs and add some "looks fine for 1.3" comment...

New release published, see #474.

@nfroidure @PlasmaPower @mikelax i wrote a ultra-short very readable version of supertest that i call supertest-light. I would love if you could check it out.


docs: Improve Readme structure to be more end-user friendly and structured

[x] For end-users we need an easy way to 1-click download FlightCore (e.g. download buttons in README) --> #87
[x] Have developer docs in docs subfolder and/or in frontend/backend specific folder --> #75
[x] Improve developer docs -->  #88
[x] Cleanup -> #89
[x] ???

Actually, let me split this up a bit into smaller PRs ^^

All changes in this PR have now been added via various PRs.


Fix RSpec warning on raise_error

The raise_error matcher wants to check against a real error message to
avoid false positives. In addition to giving it a parameter, I needed to
fix a false positive (via WebMock) to make this test pass.

👍


Obtaining shadow price(marginal cost) of different commodities in MESSAGE-ix

Dear @khaeru
Hi,
I need to edit objective function of message-ix so that it could maximize social welfare instead of minimizing the total production costs.
I need the marginal cost of each commodity. For instance, in simple westeros example I would like to see the amount of shadow price or marginal cost of light commodity.So, I have the following questions:

Is 𝑃𝑅𝐼𝐶𝐸_𝐶𝑂𝑀𝑀𝑂𝐷𝐼𝑇Y represent the shadow price of a commodity, such as light,in the dual solution?
Probably, it is the shadow price of the commodity balance constraint. But I confuesed bacause I saw we had two constarints for commodity balance, including commodity_Balance_GT and Commodity_balance_LT.
3.I run westeros in python. How can I call shadow price of light in python version of westeros and print its amount?

Regards

These questions can all be answered by reading the documentation, tutorials, and GAMS code.
Please:

For each of the three issues #416, #419, and #423 that you previously opened: if you have resolved them, then mark them as closed.
Do not tag specific message_ix contributors & developers when filing issues. Issues are handled jointly by the development team.

@zsalimian thanks for your questions. I answer with the same order:

Yes, that's true.
In the GAMS formulation, in the file message_ix\model\MESSAGE\message_solve.gms, you can find the calculation of PRICE_COMMODITY. It is based on both the marginals of commodity balance for "greater than" (GT) and "lower than" (LT) equations, divided by discount factor. If the marginal is zero in one of the above equation, the marginal of the other one defines the price of commodity.
You should be able to look into the content of an output variable by calling scenario.var(), after solving the scenario successfully. For example, for this case, you can do: df = scenario.var('PRICE_COMMODITY').
I hope it helps.

Thank you for your kind reply.
I saw message_ix\model\MESSAGE\message_solve.gms and it was helpful alot.
As you mentioned above, I used df = scenario.var('PRICE_COMMODITY') after scenario.solve() and then call print.
It should me the following output
node    commodity      level  year  time          lvl            mrg
0  Westeros  electricity  secondary   700  year  405.643395  0.0
1  Westeros  electricity  secondary   710  year   90.980599  0.0
2  Westeros  electricity  secondary   720  year   90.980599  0.0
3  Westeros  electricity      final        700  year  506.270438  0.0
4  Westeros  electricity      final        710  year  156.645110  0.0
5  Westeros  electricity      final        720  year  156.645110  0.0
6  Westeros        light     useful        700  year  511.270438  0.0
7  Westeros        light     useful        710  year  161.645110  0.0
8  Westeros        light     useful        720  year  161.645110  0.0
I don't need the marginal cost of balance equations seprately. I think I can use the lvl column for the amount of shadow price. So, I think the lvl column shows the marginal price. Isn't it?
But how about mrg. I saw in the docs that ‘mrg’ and ‘lvl’ are valid only for ix_type='equ', and ‘level’ otherwise.It said it is related to level and equations. But I didn't underestand why it is equal to zero.
Regards

Please be specific with your quesitons. Are you asking about lvl of the equations of COMMODITY_BALANCE or variable PRICE_COMMODITY? As mentioned before, PRICE_COMMODITY is a variable calculated by using marginals of the equations of commodity balance. So, in fact, this is done outside optimization, in a potprocessing step. Because of that marginals for PRICE_COMMODITY are not needed, and they are meaningless. Because the value of this variable doesn't have any impact on the model objective function.

Dear Dr.,
Many many thanks for your reply.
Please let me clarify my question.
I mentioned before that I need to edit objective function of message-ix so that it could maximize social welfare instead of minimizing the total production costs. I told that I need the marginal price of the energy commodities for editing the objective function.
### I understood from your answer I can use the PRICE_COMMODITY as marginal cost because it is average of shadow prices of balance equations.
Then you guided me to use df = scenario.var('PRICE_COMMODITY') syntax in python code. I executed the code, and above output was produced. Then I confused whether the reults in the lvl column shows the PRICE_COMMODITY or not?For instance, is the PRICE_COMMODITY of light in the last year equal to 161.645110 or not?(If possible please see the above output)
If your answer is 'yes',then 161.645110 is the PRICE_COMMODITY of light in the last year. So it represents the marginal cost of light in the last year and it must be the average of shadow prices of balance equations.
Moreover, as I mentioned before the marginal cost of commodity is sufficient for editing objective functions in GAMS code, but I didn't know which of them ('lvl' or 'mrg') in the above output represent marginal cost, which is the average shadow price of balance equations.
Many thanks in advance for your kind answer

Thanks for the clarification. The answer to your question in general is "yes". I correct your sentence as "PRICE_COMMODITY levels, given under lvl, represents the marginal cost of meeting demand for commodity light".


Restrict valgrind test runs to most recent gcc/clang verison only

With the proliferation of test cases, CI runs tend to become rather long since we run all tests under valgrind using multiple gcc and Clang versions each. I think we should tests under valgrind only for the most recent gcc and Clang versions covered and run the testsuite without valgrind for older versions.

@ynezz

So this CI job speedup change should only affect CI behavior during pull requests and you would like to keep the current more time consuming testing matrix should be run only when the changes hit the main branch (push event)?

Good question, but I think it makes sense to only speed up PR triggered CI runs and do more thorough runs on main branch merges, yes.


No module named dolfin

Hi Juan,
I keep having problems with the installation of Fenics from Conda.
This is what I did:
conda create --name fenics27 python=2.7
source activate fenics27
conda install fenics --channel juanlu001
```
but then:
```
(fenics27)gamba@policefalo:~$ ipython
Python 2.7.6 (default, Jun 22 2015, 17:58:13)
Type "copyright", "credits" or "license" for more information.

IPython 1.2.1 -- An enhanced Interactive Python.
?         -> Introduction and overview of IPython's features.
%quickref -> Quick reference.
help      -> Python's own help system.
object?   -> Details about 'object', use 'object??' for extra details.

In [1]: from dolfin import *
---------------------------------------------------------------------------
ImportError                               Traceback (most recent call last)
<ipython-input-1-f9fe29351801> in <module>()
----> 1 from dolfin import *

ImportError: No module named dolfin
```
This is my environment:
```
(fenics27)gamba@policefalo:~$ conda info --all
Current conda install:

             platform : linux-64
        conda version : 3.17.0
  conda-build version : 1.2.0
       python version : 2.7.10.final.0
     requests version : 2.7.0
     root environment : /home/gamba/anaconda  (writable)
  default environment : /home/gamba/anaconda/envs/fenics27
     envs directories : /home/gamba/anaconda/envs
        package cache : /home/gamba/anaconda/pkgs
         channel URLs : https://conda.anaconda.org/juanlu001/linux-64/
                        https://conda.anaconda.org/juanlu001/noarch/
                        https://repo.continuum.io/pkgs/free/linux-64/
                        https://repo.continuum.io/pkgs/free/noarch/
                        https://repo.continuum.io/pkgs/pro/linux-64/
                        https://repo.continuum.io/pkgs/pro/noarch/
          config file : /home/gamba/.condarc
    is foreign system : False

# conda environments:
#
fenics27              *  /home/gamba/anaconda/envs/fenics27
root                     /home/gamba/anaconda

sys.version: 2.7.10 |Anaconda 2.3.0 (64-bit)| (defaul...
sys.prefix: /home/gamba/anaconda
sys.executable: /home/gamba/anaconda/bin/python
conda location: /home/gamba/anaconda/lib/python2.7/site-packages/conda
conda-build: /home/gamba/anaconda/bin/conda-build
conda-convert: /home/gamba/anaconda/bin/conda-convert
conda-env: /home/gamba/anaconda/bin/conda-env
conda-index: /home/gamba/anaconda/bin/conda-index
conda-server: /home/gamba/anaconda/bin/conda-server
conda-skeleton: /home/gamba/anaconda/bin/conda-skeleton
user site dirs:

CIO_TEST: <not set>
CONDA_DEFAULT_ENV: fenics27
CONDA_ENVS_PATH: <not set>
LD_LIBRARY_PATH: <not set>
PATH: /home/gamba/anaconda/envs/fenics27/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/usr/games:/usr/local/games
PYTHONHOME: <not set>
PYTHONPATH: <not set>

License directories:
    /home/gamba/.continuum
    /home/gamba/anaconda/licenses
License files (license*.txt):
    /home/gamba/.continuum/license_academic_20150507134328.txt
               Reading license file : 1
                    Signature valid : 1
                       Vendor match : 1
                            product : u'Academic'
                           packages : u'numbapro mkl iopro'
                           end_date : u'2016-05-06'
                               type : None
    /home/gamba/.continuum/license_academic_20140113103854.txt
               Reading license file : 1
                    Signature valid : 1
                       Vendor match : 1
                            product : u'Academic'
                           packages : u'numbapro mkl iopro'
                           end_date : u'2015-01-13'
                               type : None
Package/feature end dates:
    numbapro        : 2016-05-06
    iopro           : 2016-05-06
    mkl             : 2016-05-06
```

Hello @porphyrius, what is happening is that the IPython that you are launching is not part of the conda installation and therefore is not seeing the FEniCS installation. Try again after conda install ipython, and if it still doesn't work please reopen the issue and paste the output of conda list.

Thanks a lot @Juanlu001,
that was exactly what was happening, it's ok now!


Update Reference Models to reflect Brick v1.1 Best Practices

Thanks to the helpful conversion tool, the Brick reference models have been updated to Brick v1.1, but still have some heterogeneity in how they are put together. We need to make sure that they are representative of current best practices for Brick modelling.
A related piece of this effort would be assembling the representative system models, e.g. equipment from the G36 standard figures.

@gtfierro I tried looking up "G36 standard figures" but found nothing relevant 🤔. What is it about?

Sorry! I could have been more descriptive. I was referring to ASHRAE Guideline 36. There are some reference figures in the appendix. If you've got cycles for some development, it would be great to make a better version of https://si-wg-interact.gtf.fyi/ (click on the SVG on the left) for a few of those systems. Shoot me an email!


Delete button

Can there please be a button for deleting the message or disabling the buttons manually? It would be a lifesaver.

There is no button that can do this. However, I can update the apckage to add this option.
Describe to me exactly what the button should do.

Either delete the message with the buttons when clicked, or atleast disable the buttons when clicked

Both options are possible.
So you have to give the choice of either deleting the complet message or just disabling the buttons in the paging system ?

I guess yes.

Okay, I'll see what I can do to update the package

Ok, thank you.

Um theres no delete button in the new update
I have checked the code and found nothing...

Yes, I said I would do it but not all at once. I just did a small package updates.
The button system will be a big one so I'll do that in due course.


Smooth Navigator scrolling?

Hi @whawker, specifically for highstocks, does your library support smooth navigator scrolling, like in this demo: https://www.highcharts.com/stock/demo/basic-line
With the react-jsx-highcharts demos and my own implementations, I've noticed dragging the navbar window jumps the series to that section, rather than scrolling with the window.
Thanks!

I'm not sure what you mean, clicking the Navigator seems to have the same behaviour for me?

I think what @cueas-rickmoore is talking about is 'panning'.

This should clear things up - I made a recording of the current undesired behavior: https://imgur.com/a/LMMJyX9

So turns out this is simpler than I thought to implement. 🤦♂
All you need to do is include the <Scrollbar /> component. Example here

@adamalawrence and @knod does my suggestion above fix things for you?

@adamalawrence will have to field that one. I wasn't having a problem with horizontal panning. It just seemed like you folks may not have been talking about the same thing so I interfered. Sorry about that. It's awesome that it's such an easy fix!


feat: crisp data store

Add some extra info to Crisp (some of it does not seem to work).

:tada: This PR is included in version 1.83.0 :tada:
The release is available on GitHub release
Your semantic-release bot :package::rocket:


Document specific dependency matrix

Currently, users need to peruse the docs to come up with the versions of optional dependencies and dependencies themselves.
Acceptance criteria

[ ] Provide a dependency matrix for our optional and needed dependencies (cert-manager, opentelemetry, jaeger, policyreports crds, policy-reports-ui, UI extension)
[ ] Find a programatic way of storing the versions, to avoid repetition and getting out of sync.
[ ] Consider programatically using the same versions for e2e tests.

The hairy parts on this topic are the monitoring & tracing dependencies. I believe it is easier to specify these downstream where they are consumed. For example via helm chart annotations for rancher.

That sounds good to me, I think it's a good start


Smoke test Kotlin 1.7.21

@bot-gradle test AST

OK, I've already triggered the following builds for you:

AllSmokeTestsPullRequestFeedback build


[move-function] Add initial debug info support to move checker passes.

This PR includes two patches:

The first that adds '[moved]' flags to debug_value and alloc_stack (the two entities that support being moved). This will be used to signal to IRGen that the value needs llvm.dbg.addr instead of llvm.dbg.declares.
The main patch (whose msg I included below). It begins emitting debug_value undef at move points and setting the [moved] flag on debug_value and alloc_stack when move checking runs.

[move-function] Add initial debug info support to move checker passes.
Specifically in this commit we:

Add support to the move checkers for marking alloc_stack that are moved or
the debug_value of values that are moved with the [moved] flag. In a subsequent
PR, I am going to add support in IRGen for emitting llvm.dbg.addr instead of
llvm.dbg.declare for such variables. This will ensure that debug info for values
that aren't moved get the same codegen.

I changed the move checkers to begin emitting debug_value undef at the move
site. This ensures that after that point the moved value will be unavailable in
the debugger.

I also found a small bug that was around terminators that was exposed by some
of my tests.

What is not in this patch:

IRGen part of this patch.
DebugInfoCanonicalization that pushes debug_info into coroutine func lets to
avoid issues with Swift's coroutine splitting at the LLVM level.

rdar://85020571

@swift-ci test

Test failed b/c in SILGen/moveonly_builtin I had tests that are a bit too sensitive. I may loosen them later. For now, just update them.

@swift-ci test


Visualization from the project's visualization folder should be loaded on project load.

This task is automatically imported from the old Task Issue Board and it was originally created by Adam Obuchowicz.
Original issue is here.

More information: https://discord.com/channels/401396655599124480/1049819547257028608

Fixed in GUI2


Version 0.3.1 not working under macOS Big Sur 11.2 beta

Version 0.3.1 does not appear to be working under macOS Big Sur 11.2 beta (20D5029f). As indicated in the OP, the application launches and is visible in the Dock, but does not show any window. Right-clicking on the Dock icon reveals that the application is not responding.
Originally posted by @PaulSherp in https://github.com/Shawn-Shan/fawkes/issues/98#issuecomment-761837433

Is your Fawkes version 0.3.1? We should have fixed compatibility with MacOS 11.1. But we have not tested on 11.2 version.

Is your Fawkes version 0.3.1? We should have fixed compatibility with MacOS 11.1. But we have not tested on 11.2 version.

It's not working on 11.3 beta also.

No debugging or dependency troubleshooting required: https://dev.scrb.ai


[BUG] CSP Adapter includes nodes from the local cluster

Rancher Server Setup

Rancher version: 2.6.7
CSP Adapter version: 1.0.0

Information about the Cluster

Kubernetes version: 1.22
Cluster Type (Local/Downstream): EKS, Local

Describe the bug
The csp adapter includes nodes from the local cluster in the total node counts. So if the local cluster has 2 nodes, a downstream cluster has 19 nodes, and I have 1 entitlement, the adapter considers the setup out of compliance (2 + 19 = 21 > 20). However, this setup should be in compliance, since nodes from the local cluster should not be counted toward totals.
To Reproduce

Deploy a 2 node EKS cluster and Rancher according to the adapter's prerequisites.
Register one entitlement with AWS.
Install the adapter according to the docs.
Deploy a downstream cluster with 19 nodes.

Result
A banner appears, and the csp adapter considers the setup out of compliance.
Expected Result
No banner appears, and the adapter does not consider the setup out of compliance.

Validation Template
v1.0.1-rc1 has been published to dockerhub/ecr with these changes. Since the listing has not been updated, you will need to use the dockerhub version of the adapter when testing (i.e. add the --set global.cattle.systemDefaultRegistry=docker.io line when installing the adapter) as well as specifying a new tag to make it use this version rather than the 1.0.0 in the rancher/charts repo.
Root Cause
The adapter was including node counts from any cluster in the node totals, rather than excluding the counts from the local cluster.
What was fixed, or what change have occurred

New logic has been added to ignore node counts from the local cluster
If we can't verify which cluster a node count comes from, we also do not include it in the node total
A related bug which prevented the adapter from functioning when it needed to check out 0 entitlements has also been fixed

Areas or cases that should be tested

The test case outlined in the issue (i.e. where local + downstream would cause you to go over the current entitled limit) but just downstream doesn't cause you to go over the entitled limit).
Case where no downstream nodes are present (just local cluster). Ensure that there is no error message in the logs/banner, and the adapter's compliance message should state 0 entitlements required and 0 checked out.
Ensure that no earlier version of the adapter can be installed. In an account with access to 1.0.0 of the adapter, attempt to install version 1.0.1-rc1 or version 1.0.0-rc7 (override the image tag). This should fail with an ErrImgPull stating that the account does not have access to the product/image.
Ensure that basic adapter checkin/checkout logic works. For example -> buy 2 entitlements -> deploy 19 nodes -> ensure 1 entitlement is checked out (support config/aws console) -> increase to 21 nodes -> ensure 2 entitlements are checked out -> decrease back to 19 nodes -> ensure 1 entitlement is checked out -> delete the downstream cluster

What areas could experience regressions
Basic check-in/check-out functionality. See test case 4 for a validation to run to ensure that this continues to work.
Are the repro steps accurate/minimal?
Yes - see the original issue.

Reproduction Environment

Component
Version / Type

Rancher version
2.6.7

Installation option
Helm

If Helm Chart k8s cluster
EKS v1.22.11-eks-18ef993

Cert Details
Let's Encrypt

Helm version
v2.16.8-rancher2

Downstream cluster type
RKE1 Linode

Downstream K8s version
v1.24.2-rancher1-1

Logged in user role
Administrator & Standard User

Browser type
Google Chrome

Browser version
104.0.5112.101 (Official Build) (x86_64)

ADDITIONAL SETUP
EKS setup via eksctl
eksctl create cluster \
  --name $NAME_VAR \
  --version 1.22 \
  --region $REGION_VAR \
  --nodegroup-name $NG_NAME_VAR \
  --nodes 3 \
  --nodes-min 1 \
  --nodes-max 4 \
  --managed

Ingress installation
helm repo add ingress-nginx https://kubernetes.github.io/ingress-nginx
helm repo update
helm upgrade --install \
  ingress-nginx ingress-nginx/ingress-nginx \
  --namespace ingress-nginx \
  --set controller.service.type=LoadBalancer \
  --version 4.0.18 \
  --create-namespace

Rancher installation
kubectl create namespace cattle-system

kubectl apply -f https://github.com/cert-manager/cert-manager/releases/download/v1.7.1/cert-manager.crds.yaml

helm install cert-manager jetstack/cert-manager \
  --namespace cert-manager \
  --create-namespace \
  --version v1.7.1

helm install rancher rancher-latest/rancher \
  --namespace cattle-system \
  --set hostname=$URL_VAR \
  --set bootstrapPassword=$PW_VAR \
  --set ingress.tls.source=letsEncrypt \
  --set letsEncrypt.email=$EMAIL_VAR \
  --set letsEncrypt.ingress.class=nginx \
  --set ingress.ingressClassName=nginx \
  --set extraEnv\[0\].name="CATTLE_PROMETHEUS_METRICS" --set-string extraEnv\[0\].value=true

CSP Adapter Installation
helm install rancher-csp-adapter rancher-dev/rancher-csp-adapter --namespace cattle-csp-adapter-system --set aws.enabled=true --set aws.roleName=$ROLE_VAR --set-string aws.accountNumber=$ACCOUNT_VAR --set global.cattle.systemDefaultRegistry=docker.io --create-namespace --set image.tag=v1.0.0

Reproduction steps

Follow instructions for setting up using BYOC (bring your own cluster) docs located at: https://rancher.com/docs/rancher/v2.6/en/installation/cloud-marketplace/aws
The big difference between reproduction and validation is that

reproduction is using this line in the csp adapter: --set image.tag=v1.0.0
validation is using this line in the csp adapter: --set image.tag=v1.0.1

Linked AWS account has 1 associated license for 20 nodes
Create a downstream RKE1 Linode cluster with 19 nodes (the local cluster has 3 nodes)
Check the UI for a compliance banner message
Download the support config and confirm Rancher is still in compliance
The local nodes are counting towards the total entitlements

Additional Info
RESULTS
✅ Expected
For the local nodes not to count against total entitlements
❌ Actual
Local nodes are counting towards total entitlements

Validation Environment

Component
Version / Type

Rancher version
2.6.7

Installation option
Helm

If Helm Chart k8s cluster
EKS v1.22.11-eks-18ef993

Cert Details
Let's Encrypt

Helm version
v2.16.8-rancher2

Downstream cluster type
RKE1 Linode

Downstream K8s version
v1.24.2-rancher1-1

Logged in user role
Administrator & Standard User

Browser type
Google Chrome

Browser version
104.0.5112.101 (Official Build) (x86_64)

ADDITIONAL SETUP
EKS setup via eksctl
eksctl create cluster \
  --name $NAME_VAR \
  --version 1.22 \
  --region $REGION_VAR \
  --nodegroup-name $NG_NAME_VAR \
  --nodes 3 \
  --nodes-min 1 \
  --nodes-max 4 \
  --managed

Ingress installation
helm repo add ingress-nginx https://kubernetes.github.io/ingress-nginx
helm repo update
helm upgrade --install \
  ingress-nginx ingress-nginx/ingress-nginx \
  --namespace ingress-nginx \
  --set controller.service.type=LoadBalancer \
  --version 4.0.18 \
  --create-namespace

Rancher installation
kubectl create namespace cattle-system

kubectl apply -f https://github.com/cert-manager/cert-manager/releases/download/v1.7.1/cert-manager.crds.yaml

helm install cert-manager jetstack/cert-manager \
  --namespace cert-manager \
  --create-namespace \
  --version v1.7.1

helm install rancher rancher-latest/rancher \
  --namespace cattle-system \
  --set hostname=$URL_VAR \
  --set bootstrapPassword=$PW_VAR \
  --set ingress.tls.source=letsEncrypt \
  --set letsEncrypt.email=$EMAIL_VAR \
  --set letsEncrypt.ingress.class=nginx \
  --set ingress.ingressClassName=nginx \
  --set extraEnv\[0\].name="CATTLE_PROMETHEUS_METRICS" --set-string extraEnv\[0\].value=true

CSP Adapter Installation
helm install rancher-csp-adapter rancher-dev/rancher-csp-adapter --namespace cattle-csp-adapter-system --set aws.enabled=true --set aws.roleName=$ROLE_VAR --set-string aws.accountNumber=$ACCOUNT_VAR --set global.cattle.systemDefaultRegistry=docker.io --create-namespace --set image.tag=v1.0.1-rc1

Reproduction steps
Test Case: Local Cluster Nodes Shouldn't Count Against Entitled Limit

Follow instructions for setting up using BYOC (bring your own cluster) docs located at: https://rancher.com/docs/rancher/v2.6/en/installation/cloud-marketplace/aws
Linked AWS account has 1 associated license for 20 nodes
Create a downstream RKE1 Linode cluster with 19 nodes (the local cluster has 3 nodes)
Check the UI for a compliance banner message
Download the support config and confirm Rancher is still in compliance
Check the CSP Adapter logs for any errors
Check the Rancher logs for any errors

Starting from the default Rancher homepage /dashboard/home
Click hamburger menu ==> locl ==> Workload ==> Deployments ==> filtered to cattle-csp-adapter-system
Click rancher-csp-adapter from the list ==> click the ellipsis (three dots) next to the pod ==> click View Logs
No errors in logs

Additional Info
RESULTS
✅ Expected
Expected the local cluster nodes to not count against the total entitlements
✅ Actual
The local cluster nodes were not counted against the total entitlements
Additional Test Cases

Test
Steps
Expected
Actual
Pass/Fail

No downstream nodes are present

Follow instructions for setting up using BYOC (bring your own cluster) docs located at: https://rancher.com/docs/rancher/v2.6/en/installation/cloud-marketplace/aws
Check the csp adapter logs for errors
Download the support config

The adapter's compliance message should state 0 entitlements required and 0 checked out
Rancher server required 0 license(s) and was able to check out 0 license(s)
✅ PASS

Ensure that no earlier version of the adapter can be installed. In an account with access to 1.0.0 of the adapter, attempt to install version 1.0.1-rc1 or version 1.0.0-rc7 (override the image tag). This should fail with an ErrImgPull stating that the account does not have access to the product/image

Follow instructions for setting up using BYOC (bring your own cluster) docs located at: https://rancher.com/docs/rancher/v2.6/en/installation/cloud-marketplace/aws
Remove the following set from the csp adapter helm installation command
"--set global.cattle.systemDefaultRegistry=docker.io"
Attempt to install the adapter with the set in addition to the default
"--set image.tag=v1.0.0"

Expected to not be able to use earlier versions from ECR
You are able to use earlier versions of the adapter from ECR
⚠ Expected to not work per dev team

Ensure that basic adapter checkin/checkout logic works: Exceed entitlement limit

Follow instructions for setting up using BYOC (bring your own cluster) docs located at: https://rancher.com/docs/rancher/v2.6/en/installation/cloud-marketplace/aws
Linked AWS account has 1 associated license for 20 nodes
Create a downstream RKE1 Linode cluster with 19 nodes (the local cluster has 3 nodes)
Rancher is still in compliance because the local nodes are not counting
Create another downstream RKE1 Linode cluster with 5 nodes, this will take the cluster out of compliance
The cluster goes out of compliance
The UI banner appears stating Rancher is out of compliance
The support config shows: "Rancher server required 2 license(s) and was able to check out 1 license(s)"

Expected that going over the entitlement limit with downstream nodes that the Rancher server would warn of being out of compliance
Going over the entitlement with downstream nodes caused the UI compliance warning to appear and the support config correctly reflected this as well
✅ PASS

Increase the SUSE Rancher Premium Support (non-EU and non-UK only) license amount in a Rancher that's out of compliance. Can use the test case above as a starting point

Start with the Rancher server from the test case above that is out of compliance
Login to AWS, go to the AWS marketplace
Navigate to the SUSE Rancher Premium Support (non-EU and non-UK only)
Go to "Launch More Software" then "Subscribe"
In the AWS Marketplace increase the license amount from 1 ==> 2

The CSP adapter should detect the newly available additional license, check it out, and go back into compliance
Rancher came back into compliance within 30 seconds of purchasing the additional licnese from the AWS marketplace
✅ PASS

Deleting a cluster on an out of compliance Rancher should bring it into compliance if it brings to node level to an acceptable level

Follow instructions for setting up using BYOC (bring your own cluster) docs located at: https://rancher.com/docs/rancher/v2.6/en/installation/cloud-marketplace/aws
The AWS account being used has 2 licenses for a total of 40 nodes
Create a RKE1 Linode downstream with 19 nodes
Create a RKE1 Linode downstream with 5 nodes
Create a RKE1 Linode downstream with 18 nodes
The Rancher server goes out of compliance: Rancher server required 3 license(s) and was able to check out 2 license(s)
Delete the 1st Linode downstream cluster with 19 nodes
The cluster came back into compliance after deleting the 19 node downstream cluster

The Rancher server should go back into compliance when deleting a downstream cluster that brought it over the node limit
The compliance banner in the UI went away, and the support config also showed the server to be in compliance
✅ PASS

Different downstream node types (non-local) count towards total entitlements (RKE2)

Follow instructions for setting up using BYOC (bring your own cluster) docs located at: https://rancher.com/docs/rancher/v2.6/en/installation/cloud-marketplace/aws
Import a custom RKE2 cluster
Make sure the nodes count towards total entitlements

Expected imported RKE2 cluster to count towards total entitlements
The imported RKE2 cluster nodes counted towards total entitlements
✅ PASS

Reopening so dev can comment on the second test in the table listed above:

Ensure that no earlier version of the adapter can be installed. In an account with access to 1.0.0 of the adapter, attempt to install version 1.0.1-rc1 or version 1.0.0-rc7 (override the image tag). This should fail with an ErrImgPull stating that the account does not have access to the product/image

The PASS/FAIL status listed in the table is for the 2nd test is: Expected to not work per dev team
Once dev comments on this test, QA is good to sign off/close the issue.

Given the complications with restricting the 1.0.0 release of the adapter, and the fact that this restriction will likely not lead to any code changes on the adapter side, we are going to work on restricting the 1.0.0 release independently of releasing version 1.0.1 of the adapter. I'm ok with considering the restriction as a "separate item to fix" rather than as a part of the 1.0.1 release.

All other QA checks look good for the CSP Adapter. Since the business is aware about this note: https://github.com/rancher/rancher/issues/38712#issuecomment-1231829575
Then QA is okay to sign off on this issue.

Note: This issue was merged prior to the split between 2.6 and 2.7.

I believe that this would be good to release note as part of 2.6.9 so that users know not to use version 1.0.0 of the adapter.
Something like the below would work:
Fixed an issue which caused version 1.0.0 of the csp adapter to incorrectly count nodes. Users should only use version 1.0.1 of the adapter or higher to ensure that node counts are accurate.


Long-running rolling-updates block other releases

Because #311 means we only run one-release at a time per instance, any long-running deploys (e.g. cortex takes > 30 minutes) cause other releases to become bottlenecked.
I expect https://github.com/weaveworks/flux/issues/256 would fix it, but they are still serialized in the platform (or not?)

This also blocks the job queue, so automated services stop working.

Note: I've deautomated the cortex stuff in dev for now, because of this. Should re-automate it when this is fixed.

Jobs now modify files and push a commit, which takes about the same amount of time whatever you're doing.
Synchronising from git tends to take about the amount of time on each occasion, as well, and crucially it uses kubectl apply which won't block on a rollout completing.


Update http4s-circe, http4s-dsl to 1.0.0-M39

Updates

org.http4s:http4s-circe
org.http4s:http4s-dsl

from 1.0.0-M38 to 1.0.0-M39.
GitHub Release Notes - Version Diff
I'll automatically update this PR to resolve conflicts as long as you don't change it yourself.
If you'd like to skip this version, you can just close this PR. If you have any feedback, just mention me in the comments below.
Configure Scala Steward for your repository with a .scala-steward.conf file.
Have a fantastic day writing Scala!

Adjust future updates
Add this to your .scala-steward.conf file to ignore future updates of this dependency:
updates.ignore = [ { groupId = "org.http4s" } ]

Or, add this to slow down future updates of this dependency:
dependencyOverrides = [{
  pullRequests = { frequency = "30 days" },
  dependency = { groupId = "org.http4s" }
}]

labels: library-update, early-semver-pre-release, semver-spec-pre-release, version-scheme:early-semver, commit-count:1

Superseded by #248.


Cannot view the same cloud environment more than once.

Describe the bug
When I wrote AWS twice, it was displayed combined.

Example

    <AWS>
      <ContainerService
        name="exampleA"
      />
    </AWS>
    <AWS>
      <ContainerService
        name="exampleB"
      />
    </AWS>

@all-contributors please add @fealone for bug


Login with existing id_token

I want to use this package as API for our mobile apps. They already have a token, and I just need to get information from social net with that token.
$token = new AccessToken(['access_token' => $form->accessToken]);
$provider->getResourceOwner($token);

All providers works pretty well, with just small hacks.
For example vk:
$this->oauth = new \J4k\OAuth2\Client\Provider\Vkontakte($config);
$response = $this->oauth->usersGet([], $token, ['user_ids' => []]);

But I couldn't work with Google + in that way.
https://github.com/thephpleague/oauth2-google/issues/35
I already ask a question, but nobody answered it 😞

This is specific to Google provider.


Add information to liquidity pool example explaining why contract expects funds already sent

What problem does your feature solve?
I have seen several people ask about why the liquidity pool expects users to send the funds outside of the contract operations. Clearly this is not obvious, so the documentation should explain it to reduce future confusion.
What would you like to see?
Add information explaining the merits of this design.
What alternatives are there?
N/A

Hi, @jonjove!
I think this issue is based on an older version of the example contracts. It seems like in the current releases, the LP example does invoke the token's transfer function for the token in both deposit and swap.
Does that sound right to you?


Facing issue on public app after installation.

I have created a public app from partner account and installed on development store, app installed sucessfully, but when i load my app in firefox it work fine, but when i am loading it on chrome it is showing a broken page with a message "Requests to the server have been blocked by an extension." in chrome console it is showing
Refused to frame 'example.com/ because it violates the following Content Security Policy directive: "frame-src app.myshopify.io *.shopifyapps.com .myshopify.io .myshopify.com https:// shopify-pos://".
I have verified my SSL from site
https://www.sslshopper.com/ssl-checker.html#hostname=example.com
also i have set  $response->headers->set('X-Frame-Options', 'SAMEORIGIN', false); in laravel settings.
I am not able to get this issue. please help me regarding this issue.

Sorry I don't have anything to offer it could be a number of things from an insecure request or SSL issue, try setting the CSP and X frame headers on the server instead of Laravel.

I have this same issue. Did you fix the CSP issue?


Update cloud-events.md

added consi cloud events

I have read the CLA Document and I hereby sign the CLA

recheck