SCardException on Piv.Decrypt touch timeout

Hello, I have a key with pin policy NEVER and touch policy ALWAYS. The following code raises SCardException after 10 seconds :
using Yubico.YubiKey;
using Yubico.YubiKey.Piv;

var device = YubiKeyDevice.FindAll().First();

using (var piv = new PivSession(device))
{
    piv.Decrypt(0x95, new byte[256]);
};

Unhandled exception. Yubico.PlatformInterop.SCardException: Encountered an error while attempting to transmit data to a smart card. Error code: 0x8010002f.
   at Yubico.Core.Devices.SmartCard.DesktopSmartCardConnection.Transmit(CommandApdu commandApdu)
   at Yubico.YubiKey.Pipelines.SmartCardTransform.Invoke(CommandApdu command, Type commandType, Type responseType)
   at Yubico.YubiKey.Pipelines.ResponseChainingTransform.Invoke(CommandApdu command, Type commandType, Type responseType)
   at Yubico.YubiKey.Pipelines.CommandChainingTransform.Invoke(CommandApdu command, Type commandType, Type responseType)
   at Yubico.YubiKey.CcidConnection.SendCommand[TResponse](IYubiKeyCommand`1 yubiKeyCommand)
   at Yubico.YubiKey.Piv.PivSession.PerformPrivateKeyOperation(Byte slotNumber, IYubiKeyCommand`1 command, PivAlgorithm algorithm, String algorithmExceptionMessage)
   at Yubico.YubiKey.Piv.PivSession.Decrypt(Byte slotNumber, ReadOnlyMemory`1 dataToDecrypt)

I believe the correct behavior should be OperationCanceledException.

Hi @forgotPassword
Thanks for the bug report! Now that the team is back from winter holidays, I'll have someone look into this.
The SDK is likely waiting on the YubiKey, which in turn is waiting on the user to touch the key. I'm not sure if there is a reliable way for the SDK to detect when the YubiKey requires touch, but if we can, I think we can try to build some sort of notification mechanism so that you can programmatically inform the user that they need to touch the key.

The bug has been root caused and a fix will be released in the next week or so.
YubiKeys require a brief pause between switching USB interfaces. The SDK talks to multiple USB interfaces while enumerating YubiKeys in order to match the devices into a single "logical" representation of a YubiKey. We cheat and don't wait during enumeration as we want enumeration to be fast. But apparently doing so causes issues with the YubiKey's touch detection routines. So now the SDK will try to track USB interface switching and will add the appropriate wait whenever it is needed.
We'll add more documentation around this behavior when we release as it may result in some calls to take longer than usual.

The fix for this issue has been released in the latest SDK version (1.6.0).
I'm closing this issue, but if you continue to encounter the issue, please feel free to reopen it.


XNLI cache reload is very slow

Reproduce
Using 2.3.3.dev0
from datasets import load_dataset
load_dataset("xnli", "en")
Turn off Internet
load_dataset("xnli", "en")
I cancelled the second load_dataset eventually cuz it took super long. It would be great to have something to specify e.g. only_load_from_cache  and avoid the library trying to download when there is no Internet. If I leave it running it works but takes way longer than when there is Internet. I would expect loading from cache to take the same amount of time regardless of whether there is Internet.
---------------------------------------------------------------------------
gaierror                                  Traceback (most recent call last)
/opt/conda/lib/python3.7/site-packages/urllib3/connection.py in _new_conn(self)
    174             conn = connection.create_connection(
--> 175                 (self._dns_host, self.port), self.timeout, **extra_kw
    176             )

/opt/conda/lib/python3.7/site-packages/urllib3/util/connection.py in create_connection(address, timeout, source_address, socket_options)
     71
---> 72     for res in socket.getaddrinfo(host, port, family, socket.SOCK_STREAM):
     73         af, socktype, proto, canonname, sa = res

/opt/conda/lib/python3.7/socket.py in getaddrinfo(host, port, family, type, proto, flags)
    751     addrlist = []
--> 752     for res in _socket.getaddrinfo(host, port, family, type, proto, flags):
    753         af, socktype, proto, canonname, sa = res

gaierror: [Errno -3] Temporary failure in name resolution

During handling of the above exception, another exception occurred:

KeyboardInterrupt                         Traceback (most recent call last)
/tmp/ipykernel_33/3594208039.py in <module>
----> 1 load_dataset("xnli", "en")

/opt/conda/lib/python3.7/site-packages/datasets/load.py in load_dataset(path, name, data_dir, data_files, split, cache_dir, features, download_config, download_mode, ignore_verifications, keep_in_memory, save_infos, revision, use_auth_token, task, streaming, **config_kwargs)
   1673         revision=revision,
   1674         use_auth_token=use_auth_token,
-> 1675         **config_kwargs,
   1676     )
   1677

/opt/conda/lib/python3.7/site-packages/datasets/load.py in load_dataset_builder(path, name, data_dir, data_files, cache_dir, features, download_config, download_mode, revision, use_auth_token, **config_kwargs)
   1494         download_mode=download_mode,
   1495         data_dir=data_dir,
-> 1496         data_files=data_files,
   1497     )
   1498

/opt/conda/lib/python3.7/site-packages/datasets/load.py in dataset_module_factory(path, revision, download_config, download_mode, force_local_path, dynamic_modules_path, data_dir, data_files, **download_kwargs)
   1182                     download_config=download_config,
   1183                     download_mode=download_mode,
-> 1184                     dynamic_modules_path=dynamic_modules_path,
   1185                 ).get_module()
   1186             elif path.count("/") == 1:  # community dataset on the Hub

/opt/conda/lib/python3.7/site-packages/datasets/load.py in __init__(self, name, revision, download_config, download_mode, dynamic_modules_path)
    506         self.dynamic_modules_path = dynamic_modules_path
    507         assert self.name.count("/") == 0
--> 508         increase_load_count(name, resource_type="dataset")
    509
    510     def download_loading_script(self, revision: Optional[str]) -> str:

/opt/conda/lib/python3.7/site-packages/datasets/load.py in increase_load_count(name, resource_type)
    166     if not config.HF_DATASETS_OFFLINE and config.HF_UPDATE_DOWNLOAD_COUNTS:
    167         try:
--> 168             head_hf_s3(name, filename=name + ".py", dataset=(resource_type == "dataset"))
    169         except Exception:
    170             pass

/opt/conda/lib/python3.7/site-packages/datasets/utils/file_utils.py in head_hf_s3(identifier, filename, use_cdn, dataset, max_retries)
     93     return http_head(
     94         hf_bucket_url(identifier=identifier, filename=filename, use_cdn=use_cdn, dataset=dataset),
---> 95         max_retries=max_retries,
     96     )
     97

/opt/conda/lib/python3.7/site-packages/datasets/utils/file_utils.py in http_head(url, proxies, headers, cookies, allow_redirects, timeout, max_retries)
    445         allow_redirects=allow_redirects,
    446         timeout=timeout,
--> 447         max_retries=max_retries,
    448     )
    449     return response

/opt/conda/lib/python3.7/site-packages/datasets/utils/file_utils.py in _request_with_retry(method, url, max_retries, base_wait_time, max_wait_time, timeout, **params)
    366         tries += 1
    367         try:
--> 368             response = requests.request(method=method.upper(), url=url, timeout=timeout, **params)
    369             success = True
    370         except (requests.exceptions.ConnectTimeout, requests.exceptions.ConnectionError) as err:

/opt/conda/lib/python3.7/site-packages/requests/api.py in request(method, url, **kwargs)
     59     # cases, and look like a memory leak in others.
     60     with sessions.Session() as session:
---> 61         return session.request(method=method, url=url, **kwargs)
     62
     63

/opt/conda/lib/python3.7/site-packages/requests/sessions.py in request(self, method, url, params, data, headers, cookies, files, auth, timeout, allow_redirects, proxies, hooks, stream, verify, cert, json)
    527         }
    528         send_kwargs.update(settings)
--> 529         resp = self.send(prep, **send_kwargs)
    530
    531         return resp

/opt/conda/lib/python3.7/site-packages/requests/sessions.py in send(self, request, **kwargs)
    643
    644         # Send the request
--> 645         r = adapter.send(request, **kwargs)
    646
    647         # Total elapsed time of the request (approximately)

/opt/conda/lib/python3.7/site-packages/requests/adapters.py in send(self, request, stream, timeout, verify, cert, proxies)
    448                     decode_content=False,
    449                     retries=self.max_retries,
--> 450                     timeout=timeout
    451                 )
    452

/opt/conda/lib/python3.7/site-packages/urllib3/connectionpool.py in urlopen(self, method, url, body, headers, retries, redirect, assert_same_host, timeout, pool_timeout, release_conn, chunked, body_pos, **response_kw)
    708                 body=body,
    709                 headers=headers,
--> 710                 chunked=chunked,
    711             )
    712

/opt/conda/lib/python3.7/site-packages/urllib3/connectionpool.py in _make_request(self, conn, method, url, timeout, chunked, **httplib_request_kw)
    384         # Trigger any extra validation we need to do.
    385         try:
--> 386             self._validate_conn(conn)
    387         except (SocketTimeout, BaseSSLError) as e:
    388             # Py2 raises this as a BaseSSLError, Py3 raises it as socket timeout.

/opt/conda/lib/python3.7/site-packages/urllib3/connectionpool.py in _validate_conn(self, conn)
   1038         # Force connect early to allow us to validate the connection.
   1039         if not getattr(conn, "sock", None):  # AppEngine might not have  `.sock`
-> 1040             conn.connect()
   1041
   1042         if not conn.is_verified:

/opt/conda/lib/python3.7/site-packages/urllib3/connection.py in connect(self)
    356     def connect(self):
    357         # Add certificate verification
--> 358         self.sock = conn = self._new_conn()
    359         hostname = self.host
    360         tls_in_tls = False

/opt/conda/lib/python3.7/site-packages/urllib3/connection.py in _new_conn(self)
    173         try:
    174             conn = connection.create_connection(
--> 175                 (self._dns_host, self.port), self.timeout, **extra_kw
    176             )
    177

KeyboardInterrupt:

Hi,
Could you tell us how you are running this code?
I tested on my machine (M1 Mac). And it is running fine both on and off internet.

Tested on both stable and dev version.

Sure, I was running it on a Linux machine.
I found that if I turn the Internet off, it would still try to make a HTTPS call which would slow down the cache loading. If you can't reproduce then we can close the issue.

Hi @Muennighoff! You can set the env variable HF_DATASETS_OFFLINE to 1 to avoid this behavior in offline mode. More info is available here.


Analysis upload fails with rejecting SARIF, as there are more threadflow steps per result than allowed (19350 > 10000)

Hello!
Today I wanted to enhance our CodeQL scan in the systemd repo by using the security-extended and security-and-quality query sets, but after adding them the CodeQL action can no longer upload the resulting SARIF file:
Waiting for processing to finish
  Analysis upload status is pending.
  Analysis upload status is failed.
  Error: Code Scanning could not process the submitted SARIF file:
  rejecting SARIF, as there are more threadflow steps per result than allowed (19350 > 10000)
  Error: Code Scanning could not process the submitted SARIF file:
  rejecting SARIF, as there are more threadflow steps per result than allowed (19350 > 10000)
      at Object.waitForProcessing (/home/runner/work/_actions/github/codeql-action/0c670bbf0414f39666df6ce8e718ec5662c21e03/lib/upload-lib.js:334:19)
      at async run (/home/runner/work/_actions/github/codeql-action/0c670bbf0414f39666df6ce8e718ec5662c21e03/lib/analyze-action.js:131:13)
      at async runWrapper (/home/runner/work/_actions/github/codeql-action/0c670bbf0414f39666df6ce8e718ec5662c21e03/lib/analyze-action.js:221:9)

Example job: https://github.com/systemd/systemd/actions/runs/3053021449/jobs/4923112318
Configuration:
---
# vi: ts=2 sw=2 et:
# SPDX-License-Identifier: LGPL-2.1-or-later
#
name: "CodeQL"

on:
  pull_request:
    branches:
      - main
      - v[0-9]+-stable
    paths:
      - '**/meson.build'
      - '.github/**/codeql*'
      - 'src/**'
      - 'test/**'
      - 'tools/**'
  push:
    branches:
      - main
      - v[0-9]+-stable

permissions:
  contents: read

jobs:
  analyze:
    name: Analyze
    runs-on: ubuntu-22.04
    concurrency:
      group: ${{ github.workflow }}-${{ matrix.language }}-${{ github.ref }}
      cancel-in-progress: true
    permissions:
      actions: read
      security-events: write

    strategy:
      fail-fast: false
      matrix:
        language: ['cpp', 'python']

    steps:
    - name: Checkout repository
      uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b

    - name: Initialize CodeQL
      uses: github/codeql-action/init@0c670bbf0414f39666df6ce8e718ec5662c21e03
      with:
        languages: ${{ matrix.language }}
        queries: +security-extended,security-and-quality

    - run: sudo -E .github/workflows/unit_tests.sh SETUP

    - name: Autobuild
      uses: github/codeql-action/autobuild@0c670bbf0414f39666df6ce8e718ec5662c21e03

    - name: Perform CodeQL Analysis
      uses: github/codeql-action/analyze@0c670bbf0414f39666df6ce8e718ec5662c21e03

Since the build & analysis finishes successfully and only the last step fails, I don't think this is an issue on our side - is there something which can be done to mitigate this or we're out of luck?
Thank you!

Hello! Thanks for reporting this. The first thing to do would be to figure out which rules/alerts are causing the problem. As an immediate fix you could remove the problematic alerts using https://github.com/advanced-security/filter-sarif .
Could you Re-run all jobs on the workflow and toggle the Enable [debug logging](https://docs.github.com/actions/monitoring-and-troubleshooting-workflows/enabling-debug-logging) checkbox? When the workflow finishes a debug artefact should have been uploaded. This artefact contains a .sarif file. The debug artefact is a relatively new feature, so you may need to adjust the SHA of the codeql-action steps in the workflow. Alternatively, you can set the output property of the codeql-action/analyze step to a folder name and use the actions/upload action to upload that folder as an artefact.
Once you obtained the SARIF file, could you run the following jq commands on it and post the output?
cat FILE.sarif | jq  '.runs[].results[].ruleId' | sort | uniq -c

cat FILE.sarif | jq -rc '.runs[].results[] | {rule: .ruleId, file: .locations[0].physicalLocation.artifactLocation.uri, codeFlowsCount: (.codeFlows | length), threadFlowStepsCount: (.codeFlows | reduce .[]? as $item (0;  . + ($item.threadFlows[0].locations | length)))}' | jq -s -c 'sort_by(.threadFlowStepsCount) | .[]'

Hello! Thanks for reporting this. The first thing to do would be to figure out which rules/alerts are causing the problem. As an immediate fix you could remove the problematic alerts using https://github.com/advanced-security/filter-sarif .
Could you Re-run all jobs on the workflow and toggle the Enable debug logging checkbox? When the workflow finishes a debug artefact should have been uploaded. This artefact contains a .sarif file. The debug artefact is a relatively new feature, so you may need to adjust the SHA of the codeql-action steps in the workflow.

You were right, I had to use the main ref instead of the pinnes SHAs to get the artifacts, so thanks for that!

Once you obtained the SARIF file, could you run the following jq commands on it and post the output?
cat FILE.sarif | jq  '.runs[].results[].ruleId' | sort | uniq -c

$ cat cpp.sarif | jq  '.runs[].results[].ruleId' | sort | uniq -c
      1 "cpp/cleartext-storage-file"
     16 "cpp/commented-out-code"
      2 "cpp/complex-condition"
      2 "cpp/constant-comparison"
     36 "cpp/fixme-comment"
      4 "cpp/include-non-header"
      3 "cpp/inconsistent-null-check"
     70 "cpp/irregular-enum-init"
      1 "cpp/leap-year/unchecked-after-arithmetic-year-modification"
     92 "cpp/long-switch"
     33 "cpp/loop-variable-changed"
      1 "cpp/missing-case-in-switch"
      7 "cpp/missing-header-guard"
      1 "cpp/non-constant-format"
      1 "cpp/offset-use-before-range-check"
      1 "cpp/overrunning-write"
    137 "cpp/path-injection"
    293 "cpp/poorly-documented-function"
     25 "cpp/stack-address-escape"
      4 "cpp/suspicious-allocation-size"
      2 "cpp/system-data-exposure"
     19 "cpp/toctou-race-condition"
     43 "cpp/too-many-format-arguments"
      9 "cpp/trivial-switch"
    113 "cpp/unbounded-write"
      4 "cpp/uncontrolled-allocation-size"
     15 "cpp/uncontrolled-process-operation"
     81 "cpp/uninitialized-local"
     82 "cpp/unterminated-variadic-call"
      1 "cpp/unused-local-variable"
    183 "cpp/unused-static-function"
      3 "cpp/unused-static-variable"
     34 "cpp/world-writable-file-creation"

cat FILE.sarif | jq -rc '.runs[].results[] | {rule: .ruleId, file: .locations[0].physicalLocation.artifactLocation.uri, codeFlowsCount: (.codeFlows | length), threadFlowStepsCount: (.codeFlows | reduce .[]? as $item (0;  . + ($item.threadFlows[0].locations | length)))}' | jq -s -c 'sort_by(.threadFlowStepsCount) | .[]'

https://gist.github.com/mrc0mmand/d516a60a02c2f15b9bbfeac9b589f8bd
In case a further inspection is needed, I also uploaded the SARIF file to https://mrc0mmand.fedorapeople.org/gh_2022-09-14-cpp.sarif

The tail of the second jq command shows there are 3 alerts that exceed the limits:
{"rule":"cpp/unbounded-write","file":"src/libsystemd/sd-bus/sd-bus.c","codeFlowsCount":1208,"threadFlowStepsCount":14496}
{"rule":"cpp/path-injection","file":"src/test/test-fs-util.c","codeFlowsCount":606,"threadFlowStepsCount":15135}
{"rule":"cpp/unbounded-write","file":"src/basic/unit-name.c","codeFlowsCount":1211,"threadFlowStepsCount":19350}

You could try to add a  advanced-security/filter-sarif  to filter out the  cpp/unbounded-write results for src/libsystemd/sd-bus/sd-bus.c and src/basic/unit-name.c and also the cpp/path-injection results for src/test/test-fs-util.c.

There is a new feature in code-scanning that allows you to remove queries from the analysis. Using this feature should remove the queries that are causing the problems. The documentation for this feature has not yet been published, but I will explain how to use it here.

Create a custom configuration file, as explained here: https://docs.github.com/en/code-security/code-scanning/automatically-scanning-your-code-for-vulnerabilities-and-errors/configuring-code-scanning#using-a-custom-configuration-file
The file can be empty, except for a query-filters block, like this:

query-filters:
    - exclude:
        id:
          - cpp/unbounded-write
          - cpp/path-injection

That should be enough.

Thank you both for the suggestions. I tried filtering the SARIF file using advanced-security/filter-sarif and it seems to be doing the right thing.
Using a CodeQL config file to disable the checks completely would also be an option (and would be probably much easier, given we already utilize such config file), but I'd like to avoid that, since both checks seem quite useful (especially in systemd's case).
On a related note - is this issue caused by some limitations of the SARIF format or it's limited somewhere in the CodeQL action?

The issue is that the two queries are behaving badly and producing a large number of paths for an alert. Our team is still diagnosing why. This is producing a sarif file with a large number of threadflow steps. Our code-scanning processor has trouble with these kinds of files and it rejects them.

The issue is that the two queries are behaving badly and producing a large number of paths for an alert. Our team is still diagnosing why. This is producing a sarif file with a large number of threadflow steps. Our code-scanning processor has trouble with these kinds of files and it rejects them.

Ah, I see, thank you for the explanation. I also just noticed how many alerts the cpp/unbounded-write check generates (and by a quick look they don't seem quite useful for us anyway), so I might end up going with your suggestion and disabling the check completely . For some reason I thought we had this one enabled on LGTM as well, but it turns out that wasn't the case.

Ah, I see, thank you for the explanation. I also just noticed how many alerts the cpp/unbounded-write check generates (and by a quick look they don't seem quite useful for us anyway), so I might end up going with your suggestion and disabling the check completely . For some reason I thought we had this one enabled on LGTM as well, but it turns out that wasn't the case.

If you have time, could you create an issue on github/codeql  with examples of alerts you don't find useful? Perhaps the team can improve the query to improve the quality of the result.

Ah, I see, thank you for the explanation. I also just noticed how many alerts the cpp/unbounded-write check generates (and by a quick look they don't seem quite useful for us anyway), so I might end up going with your suggestion and disabling the check completely . For some reason I thought we had this one enabled on LGTM as well, but it turns out that wasn't the case.

If you have time, could you create an issue on github/codeql  with examples of alerts you don't find useful? Perhaps the team can improve the query to improve the quality of the result.

That's definitely a good idea. After enabling the security-enhanced and security-and-quality query sets, they spawned around ~1400 new alerts, where most of them were false positives - mostly a couple of the same alerts spread through the entire codebase. Once I have a bit of spare time I'll go through them, prepare some minimal examples, and report them to github/codeql.


Simple 'user' should not be able to assign a ticket nor set it's status.

Simple 'user' should not be able to assign a ticket nor set it's status.
He should however have a seperate field to state the tickets 'type'. I don't think the current Tag system is usable that way. Having simple dropdowns per ticket with a 'resolution', a 'Current Status', and a ticket types like 'Feature', 'Bug', 'Severe Bug', 'Idea' etc. would be much more helpful.
Also it would mean nice filtering options in list and kanban view.

Works great. Thanks and closed.

I think this issue can be closed :)


🌸 [C++] Fix double pointers to foreign ref types

Explanation: Corrects import of doubly-indirect pointers/references to C++ foreign reference types. ClangImporter was previously collapsing away all of the levels of indirection; it should only have removed one. (rdar://123905345)
Scope: Projects using C++ interop and using the SWIFT_SHARED_REFERENCE, SWIFT_IMMORTAL_REFERENCE, or SWIFT_UNSAFE_REFERENCE macros.
Risk: Low, and should only affect projects that would have otherwise miscompiled.
Testing: New tests have been added.
Reviewer: @zoecarver, @egorzhdan
Original PR: apple/swift#73811

When a C++ type ForeignTy is imported as a foreign reference type, Swift should strip a level of indirection from parameters of that type, so e.g. ForeignTy * and ForeignTy & should be imported to Swift as just ForeignTy.  However, it should only strip one level of indirection. importType() was instead stripping all levels, so things like ForeignTy ** and ForeignTy *& were also being incorrectly imported as ForeignTy. Narrow this behavior so it only applies to a single level of indirection and add a few test cases to pin down the specifics.

@swift-ci please test


Map file added

Map file is added with initial charset

Thank you Sumy, I'm merging. Please give some sample data for testing....


Add type label to osctlplane object

Adds map[string]string{"core.openstack.org/openstackcontrolplane": ""} to the instance, if not already provided in the CR. With this ctlplane object can be queried using the default label. Which is useful e.g. in tests to query the ctlplane in a generic way without the object name.

v1.3.x PR https://github.com/openstack-k8s-operators/osp-director-operator/pull/1029

recheck


Update Composer dependencies (2020-12-21-00-11)

Visual regression test passed!
View the visual regression test report


error that 7.0 .NET SDK is being used, not 8.0

Is there an existing issue for this?

[X] I have searched the existing issues

Package ecosystem
nuget
Package manager version
whatever is in the 8.0 SDK
Language version
No response
Manifest location and content before the Dependabot update
various in https://github.com/danmoseley/eShop/tree/dependabot
dependabot.yml content
https://github.com/danmoseley/eShop/blob/dependabot/.github/dependabot.yml
Updated dependency
No response
What you expected to see, versus what you actually saw
log: https://github.com/danmoseley/eShop/network/updates/758220044
errors appear to start ere
updater |   Updating global.json files.
updater |     Dependency [Duende.IdentityServer.AspNetIdentity] not found in any global.json files.
updater |   No dotnet-tools.json files found.
updater | Running for project [/home/dependabot/dependabot-updater/repo/src/eShop.AppHost/eShop.AppHost.csproj]
updater |   Running for SDK-style project
updater | dotnet build in GetAllPackageDependenciesAsync failed. STDOUT: MSBuild version 17.6.3+07e294721 for .NET
updater |   Determining projects to restore...
updater | /usr/local/dotnet/current/sdk/7.0.305/Sdks/Microsoft.NET.Sdk/targets/Microsoft.NET.TargetFrameworkInference.targets(151,5): error NETSDK1045: The current .NET SDK does not support targeting .NET 8.0.  Either target .NET 7.0 or lower, or use a version of the .NET SDK that supports .NET 8.0. [/tmp/package-dependency-resolution_66Ggzt/Project.csproj]

The .NET 8.0.100 SDK is shipped 3 weeks ago. As far as I know, my repo is calling for it -- the global.json has
{
  "sdk": {
    "version": "8.0.100",
    "rollForward": "latestPatch",
    "allowPrerelease": true
  }
}

Is Dependabot using the 7.0 SDK still? That would cause it to fail when examining projects that target 8.0.
Native package manager behavior
No response
Images of the diff or a link to the PR, issue, or logs
No response
Smallest manifest that reproduces the issue
No response

BTW I see this mentioned in https://github.com/dependabot/dependabot-core/issues/8483 by @martincostello but it's not clear to me that issue covers it.

Yeah, it's a weird one. Every single repo I have where I use Dependabot and .NET has been upgraded to .NET 8, but only two of them are hitting this specific error.

only two of them are hitting this specific error.

Could it be that dependabot is running on a pool of machines only some of which have it installed? One would have thought it would be in a consistent container though.

Might be helpful to have the dotnet-install script install the latest version of each "in support" and preview release of the .NET SDK during the container image build. Side-by-side installs of .NET SDKs is possible.
I can see a potential problem with that though. IIRC the dotnet CLI will default to the highest version available, so if an in-development/preview release of the .NET 9 SDK is installed it will use that over the other versions. The only way to force it to use .NET 6/7/8 would be to have a global.json in the repo, but not everyone uses that and I can see that being a problem.

FWIW, all my repos have a global.json for reproducibility.

I'll actually need .NET 9 support almost immediately, eg., dotnet/eshop (which is owned by the .NET team) will take a dependency on it right away. Clearly, we're outliers, but presumably if the problem is solved for any previews, it will work for us.

I think the ideal would be to allow a flag in the yml specifying that dependabot should use the latest preview .NET rather than latest stable. It's just a flag to the install script.
My guess is that it would be unlikely for dependabot to hit a bug introduced in a preview
as the dependabot use of .NET is not particularly extensive or stressful (?) but this would eliminate any risk.
Also as a .NET committer I would certainly champion fixes to any problem it may encounter (and @martincostello is a regular contributor there too.)


Doesn't seem to be very compatible with ElementPlus

Describe the bug
There are some unexpected errors during the build process of vite-ssg

Reproduction
Whether there is a solution to the problem
System Info
System:
    OS: Windows 11 10.0.22631
    CPU: (20) x64 12th Gen Intel(R) Core(TM) i9-12900H
    Memory: 13.70 GB / 31.73 GB
  Binaries:
    Node: 21.1.0 - D:\nodejs\node.EXE
    Yarn: 1.22.22 - ~\AppData\Local\pnpm\yarn.CMD
    npm: 10.2.0 - D:\nodejs\npm.CMD
    pnpm: 9.12.3 - D:\nodejs\pnpm.CMD
    bun: 1.1.34 - G:\bun\bun.EXE
  Browsers:
    Edge: Chromium (127.0.2651.74)
    Internet Explorer: 11.0.22621.3527

Used Package Manager
pnpm
Validations

[X] Follow our Code of Conduct
[X] Read the Contributing Guide.
[X] Check that there isn't already an issue that reports the same bug to avoid creating a duplicate.
[X] Check that this is a concrete bug. For Q&A, please open a GitHub Discussion instead.
[X] The provided reproduction is a minimal reproducible of the bug.

Contributions

[ ] I am willing to submit a PR to fix this issue
[ ] I am willing to submit a PR with failing tests (actually just go ahead and do it, thanks!)

ssr: {
    noExternal: ["element-plus"],
  },

这样可能会有用


[VOTE] Proposing Roberth Strand as Tech Lead of the TAG App Delivery

Hello!
As discussed with the TAG Leadership and Platforms WG, I propose @roberthstrand as a new Tech Lead for the TAG App Delivery.
Roberth was a founding member of the Cooperative Delivery (now Platforms) Working Group and maintainer of OpenGitOps. He has been an active member of the TAG for many years, and with his broad knowledge and technical leadership capability, he would definitely be a valuable addition to the TAG Leadership Team.
Bio
Roberth is a self-proclaimed "cloud automator", and works at Sopra Steria as Principal Cloud Native Architect. He has several honorary titles, like Microsoft MVP in the Azure category, CNCF Ambassador, and was previously a HashiCorp Ambassador. Roberth has been involved with TAG App Delivery for years, since he joined the GitOps WG and helped create the GitOps Principles. He currently serves as maintainer on the OpenGitOps project and is one of the co-chairs of the Platforms WG.
Action requested: This issue is to ask TAG App Delivery's leaders, TOC Liaisons, and WG Leads (@kgamanji, @linsun, @joshgav, @lianmakesthings, @AloisReitbauer, @angellk, @roberthstrand, @abangser, @sabre1041, @krumware, @rchincha) for their support in nominating him as a Co-Chair. Please add a +1 to indicate your support. After the majority has agreed, I will forward the proposal to the TOC.

Roberth has been a long time lead for the WG Platforms and will be able to add a lot of context about the WG progress during TAG meetings. I look forward to creating this more aligned structure within the TAG!

Roberth has been a constant and reliable contributor to the TAG and its WGs.
Thanks again for stepping in, we can scale up operations and enable even more volunteers for the TAG 🙏

I'd vote yes twice if I could 👍 👍

+1 .. welcome Roberth!

Opened up the issue for the voting, therefore closing this ticket. Congrats, Roberth!


Support the 'this' parameter for azure functions

When calling the function we don't set the 'this' parameter, see (https://github.com/Azure/azure-webjobs-sdk-script/blob/dev/src/WebJobs.Script/azurefunctions/functions.js#L93)
This should be changed to pass the user module.
https://www.reddit.com/r/AZURE/comments/6n3ldo/im_noticing_that_azure_functions_seem_to_not/

Can we say for certain this isn't a breaking change? Is there any pattern this could break? We're close to 2.0, should we save the concern?

@paulbatum votes this is breaking. Let's just move this to 2.0 only.

Fair enough :)

Moved to worker repo


When the pdf is downloaded, image uploaded in the resume is not displayed / viewable[BUG]

Describe the bug

Product Flavor

[ ] Managed (https://rxresu.me)
[ ] Self Hosted

To Reproduce

Go to '...'
Click on '....'
Scroll down to '....'
See error

Expected behavior

Screenshots

Desktop (please complete the following information):

OS:
Browser
Version

Additional context

This should be resolved as of v3.3.3, could you please comment if this occurs again. Thank you :)


Timesheet - 30/04/2021 - Mr. K

Task 1
Worked on Download Wallet Page Hifi design. Researched on structure and layouts.
Proof of Work

https://www.figma.com/file/dniKTujBGiZmRha4OrtCOT/Download-Wallet?node-id=1%3A10

Time Spent
4.0 hours

Task 2
Started working on FAQ Handoff.
Proof of Work

https://www.figma.com/file/C22D4Et2I0AIE0n8QwBDMm/FAQ?node-id=152%3A3508

Time Spent
1.0 hours

Task 3
Had weekly meeting with Design lead.
Proof of Work

Gave update and discuss about possible layouts of new ‘download wallet’ page. Also, discuss about SDK options.

Time Spent
0.5 hours

Total Time Spent
5.5 hours
Account Number
c93ee24b89991a1438b45444cf06e5bb167ed1796d54a800174def4480f98ed0

Approved

Approved


packaging: add files for packaging velum in openbuildservice

It's still a bit bad to have the make_spec.sh script duplicated between here and Portus.
But there is some work on the way to fix that (see https://github.com/openSUSE/ruby-packaging/pull/6)

lgtm


fix: lazily creating a tempdir in NativeLoader

This pr is recreated. origin pr is https://github.com/microsoft/SynapseML/pull/945

When predicting with a lightgbm model, there are so many lightgbm's so files on runtime.
It made failure on allocating memory on tmpfs in my application.
So, I tried to use java.library.path that has already "so" files.
When trying this approach, I found that it is possible to create so many /tmp/mml-nativesXXXX directories. Though, copied "so" files were not used.
Therefore, this pr is created to create lazily tempdir in NativeLoader to using getOrCreateTempDir() instead of making it in class's initializer.

@mhamilton723 Semantic Pull Request is failed T.T How to fix it?

/azp run

Codecov Report

Merging #1326 (639e419) into master (906b408) will decrease coverage by 79.13%.
The diff coverage is n/a.

@@            Coverage Diff             @@
##           master   #1326       +/-   ##
==========================================
- Coverage   84.69%   5.55%   -79.14%
==========================================
  Files         284     255       -29
  Lines       13916   12655     -1261
  Branches      673     673
==========================================
- Hits        11786     703    -11083
- Misses       2130   11952     +9822

Impacted Files
Coverage Δ

...m/src/main/scala/com/microsoft/lightgbm/SWIG.scala
0.00% <0.00%> (-100.00%)
:arrow_down:

...n/scala/org/apache/spark/ml/param/UDPyFParam.scala
0.00% <0.00%> (-100.00%)
:arrow_down:

...ala/org/apache/spark/ml/param/ByteArrayParam.scala
0.00% <0.00%> (-100.00%)
:arrow_down:

...ala/org/apache/spark/ml/param/EvaluatorParam.scala
0.00% <0.00%> (-100.00%)
:arrow_down:

...la/org/apache/spark/ml/param/ParamSpaceParam.scala
0.00% <0.00%> (-100.00%)
:arrow_down:

...la/org/apache/spark/ml/param/TypedArrayParam.scala
0.00% <0.00%> (-100.00%)
:arrow_down:

...a/com/microsoft/azure/synapse/ml/stages/udfs.scala
0.00% <0.00%> (-100.00%)
:arrow_down:

.../org/apache/spark/ml/LimeNamespaceInjections.scala
0.00% <0.00%> (-100.00%)
:arrow_down:

...org/apache/spark/ml/param/ArrayParamMapParam.scala
0.00% <0.00%> (-100.00%)
:arrow_down:

...org/apache/spark/ml/param/PipelineStageParam.scala
0.00% <0.00%> (-100.00%)
:arrow_down:

... and 261 more

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update 8b64094...639e419. Read the comment docs.


Preserve whitespace after WHERE keyword

The lexer would always remove whitespace after the WHERE keyword in SPARQL queries, e.g., "SELECT ... WHERE { ... }" would become (highlighted) "SELECT ... WHERE{ ... }". This is fixed in this pull request.

Great, thanks @atextor!


$request->getPreferredFormat() is null

Hi, In my controller $request->getPreferredFormat() is null whenever the page is called from ux-turbo or not.
I'm using symfony/ux-turbo: 2.12.0 with Symfony 6.2.14.
I'm using turbo stream instead of frame. When I set the a tag outside a turbo-frame $request->headers->get('Turbo-Frame') and $request->getPreferredFormat() are null.
When I add the link inside a turbo-frame I get the $request->headers->get('Turbo-Frame') but $request->getPreferredFormat() is set to Html.
The links are inside <div {{ stimulus_controller('@symfony/ux-turbo/turbo-core') }}>...</div>

Hello @Guervyl

When I add the link inside a turbo-frame I get the $request->headers->get('Turbo-Frame') but $request- > getPreferredFormat() is set to Html.
The links are inside <div {{ stimulus_controller('@symfony/ux-turbo/turbo-core') }}>...

This part seems normal to me, right ?
Could you create a reproducer, showing clearly what result you expected and what you got ?


Here's a new site I'd like you to consider blocking

Here's a new site I'd like you to consider blocking:
www.instagram.com
(please include any other relevant details)

Unfortunately, that's one of the few sites (instagram and facebook) that I haven't been able to reliably block.
Why isn't Facebook blocked?


Update share output

Part of #338
Description of the changes:

Convert MathML to linear for sharing until we find a better way to share MathML
Tweak the share output to be closer to the comps
Remove the call to SetBitmap since it is just adding a duplicate image to the payload

How changes were validated:

Manual tests

It looks like you have an extra space for an equation that shouldn't be there. It shows up in mail, but not in OneNote.

It looks like you have an extra space for an equation that shouldn't be there. It shows up in mail, but not in OneNote.

Fixed, I think it's because I had an unnecessary open table tag

Perfect! Thanks a lot!


MSID: 91779 Version: 2 DOI: 10.1101/2<IP_ADDRESS>7704

MSID: 91779
Version: 2
Preprint DOI: https://doi.org/10.1101/2<IP_ADDRESS>7704
Step 1. Awaiting reviews
Editorial to post reviews via hypothesis
Useful links:

DocMap: https://data-hub-api.elifesciences.org/enhanced-preprints/docmaps/v2/by-publisher/elife/get-by-manuscript-id?manuscript_id=91779
New model tracking: https://docs.google.com/spreadsheets/d/1_fHaoOy7hjyocptKtVJRijeNpUY4hBS7Ck_aVmx6ZJk/
Reviews on sciety: https://sciety.org/articles/activity/10.1101/2<IP_ADDRESS>7704

For trouble shooting (e.g. no Docmaps available):

DocMap issue addressing: https://miro.com/app/board/uXjVNCwK6EI=/
Explore DataHub DocMaps API: https://lookerstudio.google.com/reporting/4c2f0368-babb-4beb-b5b3-497e7e7b0f08/page/ejphD
Unmatched submissions and preprints: https://lookerstudio.google.com/u/0/reporting/9f86204f-3bf7-477c-9b18-5c5ef141bf69/page/p_gxi57ha93c
Unmatched manuscripts spreadsheet: https://docs.google.com/spreadsheets/d/15QcK8w-ssB7109RQEDtFpJPZ0J5HTGxoHa_2TtpMBbg/edit#gid=1336081641

Step 2. Preview reviewed preprint
Production QC content ahead of publication
Instructions:

QC preview: https://prod--epp.elifesciences.org/previews/91779v2
Update ticket with any problems (add blocked label)
When QC OK, add QC OK label to ticket and add publication date and time to https://docs.google.com/spreadsheets/d/1amAlKvdLcaDp5W8Z8g77NmkwbMF5n_u89ArSqPMO8jg
Move card to next column
(At end of the day post link in #enhanced-preprint and ask for PDF to be generated)

Useful links:

Preprint DOI :  https://doi.org/10.1101/2<IP_ADDRESS>7704
Confirm reviews returned by EPP: https://prod--epp.elifesciences.org/api/reviewed-preprints/91779/v2/reviews
To update the MECA path in the docmap: https://docs.google.com/spreadsheets/d/1mctCQuNFBjSn97Lihy7_vBO6z7-N-oqyLv4clyi6zHg

Step 3: Awaiting search reindex
This step adds the reviewed preprint to the homepage: https://elifesciences.org
The search reindex is triggered once an hour. We need the reviewed preprint to be indexed as the search application serves the journal homepage.
Useful links:

Jenkins pipeline to reindex search can be triggered sooner or monitored here: https://alfred.elifesciences.org/job/process/job/process-reindex-reviewed-preprints/

Step 4: Published! PDF requested
Waiting for PDF to be generated
Useful links:

PDF tracking: https://docs.google.com/spreadsheets/d/106_XeDjmuBae7gexOTNzg60lapeqjl2aRn9DzupGyS8/

Step 5: Introduce PDF to data folder and git repo
Upload PDF to relevent folder in git repo https://github.com/elifesciences/enhanced-preprints-data/
Step 6: Done!

[ ] Kettle is on!

error: [journal-ref-article-title] This journal reference (id c20) has no article-title element.
error: [journal-ref-article-title] This journal reference (id c37) has no article-title element.
error: [journal-ref-article-title] This journal reference (id c41) has no article-title element.


Please include Slick.Controls in parasol.standalone.js

I want to include the Slick.Controls.Pager control but it appears to be missing from the minified version in the parasol.standalone.js, that or I don't know what I'm doing which is likely ;)
I need the Pager control because currently Parasol doesn't load quickly with large data sets.  The Parcoords instance is fine, but the SlickGrid is very slow to load because all records are being loaded.  The Pager solves this issue.  Take a look at the Parcoords examples to see how they use the Pager.
Also, IMO, Parasol should expose the SlickGrid more effectively.  There needs to be a way to access the actual Slick library and the Grid and DataView objects created by Parasol so they can be extended at run time.

Hi Scott!
You're correct, the grid is not currently configured to incorporate the Pager. I can add this as an option in the attachGrid function (i.e. ps.attachGrid({..., pager=true})) and update the SlickGrid example to showcase it.
Moving forward, we'd definitely like to make the SlickGrid functionality more accessible, and we completely agree with you about exposing SlickGrid more effectively. Currently, you can use ps.grid and ps.dataview to access the SlickGrid objects directly, and with attachGrid you can pass column definitions and configuration options as follows:
ps.attachGrid({container, columns={}, options={} })

We haven't spent much time playing with the configuration yet, so let us know what you come up with and if you have any thoughts on how we might improve this interface.
Best,
Josh

Hi again Scott,
Apologies for the long delay in getting back to this! I just went to add the pager feature to attachGrid and discovered that the SlickGrid package used to build Parasol never implemented the SlickGrid controls (see DimitarChristoff/slickgrid-es6#18), meaning this is not something Parasol can add for the time being.
In the future, there is a possibility of migrating Parasol's SlickGrid dependency to a more active repo where the controls are implemented, though I'm not sure how I feel about introducing AngularJS.
I'm going to close this issue for now, but please let us know if you have other questions / comments / suggestions!
Thanks,
Josh


Excel import:  undefined method `close' for 0:Fixnum

From error id: 59593928-8cd6-48ab-b55a-fe5490f51e43
@juanignaciosl  says:
Line:

%x[in2csv #{filepath} | #{newline_remover_path} > #{converted_filepath}]

in file ./services/importer/lib/importer/excel2csv.rb

P.S.: I have the source file if you need it.

@juanignaciosl sorry, do you have a link to the error? what's that id?

PS: If that's local you have to install csvkit as stated in https://github.com/CartoDB/cartodb/blob/master/NEWS.md#380-2015-01-xx

It's production, the error ID is an import error id

I don't see it on any of the juanignacios* users :(

Sorry for the badly written issue then:
We had this error in support. I sent it to Nacho, which told me what is said in the block code, and that this was something you changed recently.
:smile:

Actually this is the trace:
2015-01-21 11:04:01 UTC: NoMethodError: undefined method `close' for 0:Fixnum
2015-01-21 11:04:01 UTC: ----------------------------------------------------
2015-01-21 11:04:01 UTC: ["/usr/lib/ruby/1.9.1/csv.rb:1381:in `ensure in parse'"
 "/usr/lib/ruby/1.9.1/csv.rb:1381:in `parse'"
 "/home/ubuntu/www/production.cartodb.com/releases/20150121103732/services/importer/lib/importer/csv_normalizer.rb:178:in `single_column?'"
 "/home/ubuntu/www/production.cartodb.com/releases/20150121103732/services/importer/lib/importer/csv_normalizer.rb:174:in `needs_normalization?'"
 "/home/ubuntu/www/production.cartodb.com/releases/20150121103732/services/importer/lib/importer/csv_normalizer.rb:47:in `run'"
 "/home/ubuntu/www/production.cartodb.com/releases/20150121103732/services/importer/lib/importer/excel2csv.rb:31:in `run'"

and the related code:
# File /usr/lib/ruby/1.9.1/csv.rb
1375   def self.parse(*args, &block)
1376     csv = new(*args)
1377     if block.nil?  # slurp contents, if no block is given
1378       begin
1379         csv.read
1380       ensure
1381         csv.close
1382       end
1383     else           # or pass each row to a provided block
1384       csv.each(&block)
1385     end
1386   end

but this happened today before we upgraded to ruby 1.9.3p547 with its core library as well.

@rafatower I meant this change. csv.close fails because csv file is empty. I've reproduced it locally, after installing all the needed things to make it work (I also had to upgrade xml parser).

Yeah, I managed to reproduce myself locally too. Thanks and sorry for the confusion. I can take it over from here.

$ in2csv input.xlsx
local variable 'row' referenced before assignment
$ echo $?
1

$ in2csv Islington_North.xlsx
local variable 'row' referenced before assignment
developer@cartodbv3:~/src$ echo $?
1

This is the bug in openpyxl and the workaround for the moment is to downgrade to v2.1.3:
$ sudo -H pip install openpyxl==2.1.3
$ in2csv input.xlsx > /tmp/out.csv && echo "OK"
OK

Fixed. Changes to be in prod around 6:30 PM MAD time.

Great! Thanks :smile:

This seems to be happening again.
Import error in rollbar: https://rollbar.com/vizzuality/CartoDB/items/19/occurrences/5916939892/
No traces there besides the "Import error" item.
Files are these ones ( XLS from US Census, not private data):
https://dl.dropboxusercontent.com/u/2879308/UScensus_county_Percent_Hispanic_or_Latino__of_any_race_ (1).xls
https://dl.dropboxusercontent.com/u/2879308/UScensus_county_Percent_Some_Other_Race (1).xls
By inspecting the XLS, they seem fine: 3 columns with basic data, no merged columns (although the import crashes in "normalize single column"):
 23:32:43 UTC: Orig file: /tmp/imports/20150617-3733-l31zpm/uscensus_county_percent_some_other_race.xls\nTemp destination: /tmp/imports/20150617-3733-l31zpm/uscensus_county_percent_some_other_race.csv\n2015-06-17 23:32:43 UTC: Errored importing data from /tmp/imports/20150617-3733-l31zpm/uscensus_county_percent_some_other_race.xls:\n2015-06-17 23:32:43 UTC: NoMethodError: undefined method `close' for 0:Fixnum\n2015-06-17 23:32:43 UTC: ----------------------------------------------------\n2015-06-17 23:32:43 UTC: [\"/usr/lib/ruby/1.9.1/csv.rb:1381:in `ensure in parse'\", \"/usr/lib/ruby/1.9.1/csv.rb:1381:in `parse'\", \"/home/ubuntu/www/production.cartodb.com/releases/20150617144303/services/importer/lib/importer/csv_normalizer.rb:178:in `single_column?'\", \"/home/ubuntu/www/production.cartodb.com/releases/20150617144303/services/importer/lib/importer/csv_normalizer.rb:174:in `needs_normalization?'\", \"/home/ubuntu/www/production.cartodb.com/releases/20150617144303/services/importer/lib/importer/csv_normalizer.rb:47:in `run'\", \"/home/ubuntu/www/production.cartodb.com/releases/20150617144303/services/importer/lib/importer/excel2csv.rb:34:in `run'\", \"/home/ubuntu/www/production.cartodb.com/releases/20150617144303/services/importer/lib/importer/loader.rb:117:in `block (2 levels) in normalize'\", \"/home/ubuntu/www/production.cartodb.com/releases/20150617144303/services/importer/lib/importer/importer_stats.rb:33:in `block in timing'

# in2csv UScensus_county_Percent_Hispanic_or_Latino__of_any_race_\ \(1\).xls
Unsupported format, or corrupt file: BOF not workbook/worksheet: op=0x0009 vers=0x0000 strm=0x1000 build=0 year=0 -> BIFF21
# echo $?
1

I tried upgrading some of the underlying libraries but it didn't fix the problem.
I opened the file and saved it again as xls with libreoffice, then the import worked. Chances are the file is actually corrupted. Where's the original file, @iriberri? I'd like to check the original one.


Laravel 10 support

Added Laravel 10 support.

It seems your changes to composer.json got somewhere lost. I have created a new rls v3.0.9 with laravel 10 support


Update hierarchical-partition-keys.md

Partition keys should start with lower case to recognise in the document.

@seesharprun

Can you review this PR?
IMPORTANT: When this content is ready to merge, you must add #sign-off in a comment or the approval may get overlooked.

#label:"aq-pr-triaged"
@MicrosoftDocs/public-repo-pr-review-team

@ketonbevero, can you provide more context? I was under the impression that partition keys are case sensitive.

@seesharprun - can you help us advance this aging PR that's assigned to you?  Should this PR be discarded?
IMPORTANT: When the changes are ready for publication, add a #sign-off comment to signal that the PR is ready for the review team to merge.
Thanks, PR review team

Sorry for the late comment.
When I opened this PR, I overlooked the fact that I have configured the Cosmos client serializer options with camel case notation.
The default value provides no custom policy, the property name (in the json document) will be the same as the source (like TenantId string in a record or something). In this case, the documentation is right, we should create the partition with the same key "/TenantId". However, with camel case policy the query didn't work from code, because I have configured the  partition key with pascal case notation.

@seesharprun
Can you respond to the comment above?
@MicrosoftDocs/public-repo-pr-review-team

Sorry for the late comment.
When I opened this PR, I overlooked the fact that I have configured the Cosmos client serializer options with camel case notation. The default value provides no custom policy, the property name (in the json document) will be the same as the source (like TenantId string in a record or something). In this case, the documentation is right, we should create the partition with the same key "/TenantId". However, with camel case policy the query didn't work from code, because I have configured the partition key with pascal case notation.

You are right that configuring your CosmosClient for camel casing will have impacts on how the partition key is parsed.
#please-close


Syncing of chains between nodes in private mode has problems

Checklist

[X ] You've tried latest version of SushiChain
[ X] You've confirmed there is not a same report

Description
Nodes will properly sync with the target node given on the command line (via the -n option) and acquire their chain, but new blocks that are mined on the target don't seem to get sent from the target to the new node when running in private mode.
Environment

Using docker: no
Crystal version: 0.29.0
Where do you connect to? http://localhost:3000, 3001, and 3002 for the test

Command Lines and results
(each sushid node and miner run from their own command shell windows and separate directories with their own sushi_chain.db)
./sushid -w testnet-wallet-1.json -d sushi_chain.db --testnet  --private

../sushid -w ../testnet-wallet-2.json -d sushi_chain.db --testnet  --private  -p 3001 -n http://<IP_ADDRESS>:3000

../sushid -w ../testnet-wallet-3.json -d sushi_chain.db --testnet  --private  -p 3002 -n http://<IP_ADDRESS>:3000

./sushim -w testnet-wallet-1.json --testnet -n http://<IP_ADDRESS>:3000 --process=2

The last 2 nodes start up and and sync with the first to get the full chain from it.. but...
newly mined blocks are put in the chain of the first node, but it (for some reason) doesn't see the connected nodes as predecessors or successors and doesn't send the new blocks to them.

This is a low priority issue - which I think was a design choice. So we could just prevent any nodes from connecting to a node which is running in private mode - this would make it clear that this kind of configuration is not intended.

This will be addressed by #296


Add a  normalize-noIE.css for specialized uses

The proposal was arrived here.
This adaptation of  Normalize.css, named Normalize-noIE.css, is easy to maintain, removing IE support (cuting ~1/3 of code). Can be used with web applications optimized for non-MS browsers, or in production environments where the user has no option to use IE.
It is smaller, faster, and will be used in environments where IE not exist.

Hi, thanks for the idea. I don't think it is practical from a maintenance perspective, and the file savings over the wire are negligible relative to the total size of all but the sparsely coded website.


fix(Explore): Force different color for same metrics in Mixed Time-Series

SUMMARY
This PR forces the colorScale to return a different color when the same metrics are found across the two queries in order to apply contrasting colors. It appends a -A to the name of the metric in series A when found in series B so that the colorScale will treat it as a different value.
BEFORE
https://user-images.githubusercontent.com/60598000/152832268-17552fbb-5bdd-4abc-ae8c-f6b347bb4bce.mp4
AFTER
https://user-images.githubusercontent.com/60598000/152831369-b0953035-1b1e-4cf0-ab59-92a2f01dba6d.mp4
TESTING INSTRUCTIONS

Choose a mixed time-series chart
Date added in Time with a Grain: Month
Add the same metrics A and B
Customize -> Create 1 metric as a Line and the other as a Bar
Make sure different colors applied

ADDITIONAL INFORMATION

[ ] Has associated issue:
[ ] Required feature flags:
[ ] Changes UI
[ ] Includes DB Migration (follow approval process in SIP-59)

[ ] Migration is atomic, supports rollback & is backwards-compatible
[ ] Confirm DB migration upgrade and downgrade tested
[ ] Runtime estimates and downtime expectations provided

[ ] Introduces new feature or API
[ ] Removes existing feature or API

@stephenLYZ @zhaoyongjie I updated the PR in a way that conforms with the way the chart labels behave, by adding a suffix (1) to the end of the label name, as you can see in the screenshot. That's standard behaviour.

With this update the user can now customize the label colors fully and it should still guarantee that same metrics across different queries, use different colors by default. Please watch the video below that shows the new behaviour.
https://user-images.githubusercontent.com/60598000/153009181-8161365e-e0cc-4fe2-a477-5db853b2f272.mp4


BED-4358: add merge clause to supported cypher

Description
Adds necessary plumbing to enable cypher MERGE clauses in our interpreter. This also means they are available when using the Cypher Search box in BloodHound, if enable_cypher_mutations is enabled.
Motivation and Context
We are working on cost modeling for mutation queries (BED-4358), and this was a prerequisite since it turned out we hadn't wired in support for MERGE yet.
How Has This Been Tested?
Ran through multiple scenarios manually:

MERGE (n:Hello {objectid:'hello'}) RETURN n (x2 to ensure that an existing node prevents a node creation)
MERGE (n:Hello {objectid:'hello'}) SET n.hello = 'hello' RETURN n
MERGE (n:Hello {objectid:'goodbye'}) ON CREATE SET n.hello = 'goodbye' RETURN n
MERGE (n:Hello {objectid:'goodbye'}) ON MATCH SET n.hello = 'hello' RETURN n
MERGE (n:Hello {objectid:'goodbye'}) ON CREATE SET n.hello = 'created' ON MATCH SET n.hello = 'matched' RETURN n
MERGE (n:Hello {objectid:'goodbye'}) ON CREATE SET n.hello = 'created' ON MATCH SET n.hello = 'matched' SET n.always = 'always' RETURN n
MERGE (n:Hello {objectid:'goodbye'}) ON CREATE SET n.hello = 'created' ON CREATE SET n.goodbye = 'created' ON MATCH n.hello = 'matched' ON MATCH SET n.goodbye = 'matched RETURN n

No these are not good queries, but they do help exercise all parts of MERGE's formal grammar.
Types of changes

[x] Chore (a change that does not modify the application functionality)
[ ] Bug fix (non-breaking change which fixes an issue)
[x] New feature (non-breaking change which adds functionality)
[ ] Breaking change (fix or feature that would cause existing functionality to change)

Checklist:

[x] Documentation updates are needed, and have been made accordingly.
[ ] I have added and/or updated tests to cover my changes.
[x] All new and existing tests passed.
[ ] My changes include a database migration.

Nothing really stands out to me here. Solid changes.


[gui error report] Error: Command failed: powershell.exe -NoProfile -NonInteractive -InputF

👉 Please describe what you were doing when this error happened.
Specifications

OS: win32 10.0.19045
IPFS Desktop Version: 0.31.0
Electron Version: 19.1.9
Chrome Version: 102.0.5005.167

Error
Error: Command failed: powershell.exe -NoProfile -NonInteractive -InputFormat None -Command Get-AuthenticodeSignature -LiteralPath 'C:\Users\miros\AppData\Local\ipfs-desktop-updater\pending\temp-IPFS-Desktop-Setup-0.32.0.exe' | ConvertTo-Json -Compress | ForEach-Object { [Convert]::ToBase64String([System.Text.Encoding]::UTF8.GetBytes($_)) }

    at ChildProcess.exithandler (node:child_process:408:12)
    at ChildProcess.emit (node:events:526:28)
    at maybeClose (node:internal/child_process:1092:16)
    at ChildProcess._handle.onexit (node:internal/child_process:302:5)

### Tasks
- [ ] OS version taken from device in LAN (ISS service )

See workaround in https://github.com/ipfs/ipfs-desktop/issues/2335#issuecomment-2161827010


Moving slider over to css

Moving the slider over to css should help with animations, and layout problems. Right now, from what I can tell, it's mostly javascript with some interaction with the css. Javascript would still be required to control what content is being shown, but all animations should be hardware accelerated to give it a nice buttery smooth animation.

---
Want to back this issue? **[Post a bounty on it!](https://www.bountysource.com/issues/14534228-moving-slider-over-to-css?utm_campaign=plugin&utm_content=tracker%2F10548672&utm_medium=issues&utm_source=github)** We accept bounties via [Bountysource](https://www.bountysource.com/?utm_campaign=plugin&utm_content=tracker%2F10548672&utm_medium=issues&utm_source=github).

Closing this as a dupe of #663 because Cass can't read


Fix BMP loader to distinguish between compression types

Some of the values in compression enumeration represent uncompressed formats:
https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-wmf/4e588f70-bd92-4a6f-b77f-35d0feaf7a57
This allows the loader to proceed with uncompressed formats.
Note that loading compressed BMP's is still not supported (likely 🙂).
Fixes loading icon_from_gimp_32bit.bmp and icon_from_imagemagick.bmp in #30629.

Thanks!

Cherry-picked for 3.1.2.

Great job. Now i can load my sprites properly 👍 .


Migrate from Twitter

With twitter 🔥 it is important to have options for other services. Mastodon support would be great, but also just a simple upload (FTP?) to a website would be great. I have purchased https://www.saskwildfire.com/ so it's possible that this may be the time to move over there as the "primary" place to find information?

Hmmm https://techcrunch.com/2023/02/04/elon-musk-says-twitter-will-provide-a-free-write-only-api-to-bots-providing-good-content/

Tweet c/o https://twitter.com/elonmusk/status/1622082025166442505

Registered<EMAIL_ADDRESS>https://botsin.space/@SaskWildfire

Save this for later: https://github.com/halcy/Mastodon.py


openssl-3.0.0 uses des encryption to report an exception

Version:       3.0.0-alpha6
Download From: https://www.openssl.org/source/openssl-3.0.0-alpha6.tar.gz
Compiler Environment:
OS:     Debian 10 Buster
Kernel: 4.19.0-10-amd64
GCC:    8.3.0,system build-in
perl:   perl-5.28.1 ,system build-in
Compilation parameters: ./Configure --prefix=/opt/scientific/libs/openssl
Use command:
openssl des -a -pass pass:1111
Output:
Error setting cipher DES-CBC
00A14855797F0000:error::digital envelope routines:evp_generic_fetch:fetch failed:crypto/evp/evp_fetch.c:318:
Global default library context, Algorithm (DES-CBC), Properties ()
00A14855797F0000:error::digital envelope routines:EVP_CipherInit_ex:initialization error:crypto/evp/evp_enc.c:179
des-cfb, des-ecb and cast all have the same problem

This isn't a bug, it is the intended behaviour.  DES is a very old algorithm and is considered legacy.  This means it is not enabled by default.
You'll need to add -provider legacy or modify your configuration file.


Change nfs mounting for macOS Catalina, fixes #1869

The Problem/Issue/Bug:
OP #1869 points out that nfs_mount_enabled is broken in macOS Catalina.
How this PR Solves The Problem:

[x] Change the nfssource to /System/Volumes/Data/... in ddev
[x] Change the scripts/macos_ddev_nfs_setup.sh to share the /System/Volumes/Data/... instead of sharing it raw
[x] Add docs on troubleshooting as mentioned in #1869
[x] Update at least one testbot to Catalina

Manual Testing Instructions:
On fresh Catalina (and other macOS, but should be covered by automated testing)

Read/review the new docs about how to upgrade and debugging technique.
On Catalina or pre-Catalina, run the nfs setup script
Use showmount -e to verify that the directory is now being shared.
In a project directory, use ddev debug nfsmount to verify that it's successful and shows the mounted volume.
In a project directory with nfs_mount_enabled: true do a ddev start and visit the site to make sure everything works.

Automated Testing Overview:
Both of the macStadium testbots are being upgraded to Catalina.
Related Issue Link(s):
OP #1869
Release/Deployment notes:

On Mojave 10.14.6, all tests complete successfully.

Seems to be working on Catalina.
➜  my-drupal8-site ddev debug nfsmount
Successfully accessed NFS mount of /Users/cyberswat/my-drupal8-site
TARGET    SOURCE                                                FSTYPE OPTIONS
/nfsmount :/System/Volumes/Data/Users/cyberswat/my-drupal8-site nfs    rw,relatime,vers=3,rsize=65536,wsize=65536,namlen=255,hard,nolock,proto=tcp,timeo=600,retrans=2,sec=sys,mountaddr=<IP_ADDRESS>,mountvers=3,mountproto=tcp,local_lock=all,addr=<IP_ADDRESS>
/nfsmount/.ddev

Verified the site works as intended.


Update github actions to latest version (coast-site repo)

This is to look at github actions from the v2 or v1 to the latest v4. this is to avoid issues with actions stop working and to get access to the newer features.

Resolved by this https://github.com/British-Oceanographic-Data-Centre/COAsT-site/pull/99


Add DMA support to the NXP MCUX Flexcomm SPI driver

Tested with the spi_loopback test on RT600 and LPC55S69 boards.

I have updated the PR to address the review feedback

run the cases on mimxrt685_evk board the spi_loop output seems strange
*** Booting Zephyr OS build zephyr-v2.4.0-389-gc8c9dfdf7589  ***
Running test suite test_spi
===================================================================
START - test_spi_loopback
I: SPI test on buffers TX/RX 0x301801d5/0x30182342
I: SPI test slow config
I: Start complete multiple
I: CS control inhibited (no GPIO device)
E: Buffer contents are different: 0x30,0x31,0x32,0x33,0x34,0x35,0x36,0x37,0x38,0x39,0x61,0x62,0x63,0x64,0x65,0x66,0x00,
E:                            vs: 0xff,0xff,0xff,0xff,0xff,0xff,0xff,0xff,0xff,0xff,0xff,0xff,0xff,0xff,0xff,0xff,0xff,

    Assertion failed at ../src/spi.c:151: spi_complete_multiple: (1 is true)
Buffer contents are different
 FAIL - test_spi_loopback
===================================================================
Test suite test_spi failed.
===================================================================
PROJECT EXECUTION FAILED

please rebase

I have rebased.


Update New-CsTeamsVoiceApplicationsPolicy.md

Updating to added Historical keys and correcting error with paramater values.

@get-itips @dariomws @tseward @tiburd Please and thanks!

@tiburd Please merge this PR. Thanks


The SSL handshake failure made a re-appearance

Repro:

Clone aaladev_1356_yarong
Set 'jx' to point at v<IP_ADDRESS> Spider Monkey (NOT V8! V8 crashes instantly)
After doing usual set up go to test/www/jxcore and run 'jx runCoordinatedTests.js --filter bv_tests_/testThaliManagerCoordinated.js'

If you do this a bunch of times then eventually you'll see:
2016-10-21 22:51:28 - DEBUG thaliReplicationPeerAction: 'Got error on replication -<PHONE_NUMBER>49612800:error:14077102:SSL routines:SSL23_GET_SERVER_HELLO:unsupported protocol:../deps/openssl/openssl/ssl/s23_clnt.c:726:
'

2016-10-21 22:51:28 - DEBUG thaliPeerPoolOneAtATime: 'action returned with error from startError:<PHONE_NUMBER>12800:error:14077102:SSL routines:SSL23_GET_SERVER_HELLO:unsupported protocol:../deps/openssl/openssl/ssl/s23_clnt.c:726:
 - Action ID: 25, Action Type: ReplicationAction, Connection Type: tcp, Peer Identifier: BLEA5pScH_iqY_srYBZkpa9C_Qa-FfjYjDXa6JikgvaLw6IdCjOqhaTIsatheG6lhSbiHnxCof2VNKYv0KbaXIs'

We are getting closer to figuring this out. We can see that this is the result of a data pass from JXcore to OpenSSL. Aren't clear if this is a memory corruption or a code flaw.

The SecureContext is created in jxcore:
https://github.com/thaliproject/jxcore/blob/master/src/wrappers/node_crypto.cc#L159-L165
JS_METHOD(SecureContext, New) {
  SecureContext* p = new SecureContext();
  JS_CLASS_NEW_INSTANCE(obj, SecureContext);
  p->Wrap(obj);
  RETURN_POINTER(obj);
}
JS_METHOD_END

The SecureContext is associated to the connection:
https://github.com/thaliproject/jxcore/blob/master/src/wrappers/node_crypto.cc#L1223-L1242
JS_METHOD(Connection, New) {
  Connection* p = new Connection();
  JS_CLASS_NEW_INSTANCE(obj, Connection);

  p->Wrap(obj);

  if (args.Length() < 1 || !args.IsObject(0)) {
    THROW_EXCEPTION("First argument must be a crypto module Credentials");
  }

  SecureContext* sc =
      ObjectWrap::Unwrap<SecureContext>(JS_VALUE_TO_OBJECT(GET_ARG(0)));

  bool is_server = args.GetBoolean(1);

  p->ssl_ = SSL_new(sc->ctx_);
  p->bio_read_ = BIO_new(BIO_s_mem());
  p->bio_write_ = BIO_new(BIO_s_mem());

  SSL_set_app_data(p->ssl_, p);

  ...

}
JS_METHOD_END

The SecureContext is passed to SSL_connect:
https://github.com/thaliproject/jxcore/blob/master/src/wrappers/node_crypto.cc#L1716-L1735
JS_METHOD(Connection, Start) {
  Connection* ss = Connection::Unwrap(args.GetHolder());

  if (!SSL_is_init_finished(ss->ssl_)) {
    int rv;
    if (ss->is_server_) {
      rv = SSL_accept(ss->ssl_);
      ss->HandleSSLError("SSL_accept:Start", rv, kZeroIsAnError, kSyscallError);
    } else {
      rv = SSL_connect(ss->ssl_);
      ss->HandleSSLError("SSL_connect:Start", rv, kZeroIsAnError,
                         kSyscallError);
    }

    RETURN_PARAM(STD_TO_INTEGER(rv));
  }

  RETURN_PARAM(STD_TO_INTEGER(0));
}
JS_METHOD_END

The SecureContext passed to SSL_connect was retrieved using args.GetHolder() to
get the connection object:
https://github.com/thaliproject/jxcore/blob/master/src/jx/Proxy/Mozilla_340/PArguments.cc#L22-L26
void *PArguments::GetHolder() {
  MozJS::Value val(JS_THIS(ctx_, jsval_), ctx_);

  return val.GetPointerFromInternalField(0);
}

GetHolder calls GetPointerFromInternalField that calls the SM API JS_GetPrivate:
https://github.com/thaliproject/jxcore/blob/master/src/jx/Proxy/Mozilla_340/MozJS/MozValue.cc#L590-L609
void *Value::GetPointerFromInternalField(const int index) {
  INNER_VALUE_TO_OBJECT(object_, false);
  JSObject *object_ = object_rt;

  JS::RootedObject ret_val(ctx_);
  if (object_ != nullptr) {
    if (!JS_HasReservedSlot(object_, GC_SLOT_GC_CALL) &&
        !JS_HasPrivate(object_)) {
      // perhaps this object was created on JS land
      // add a property that can trigger the event when the base
      // object is GC'ed
      Natify(object_rt, false, &ret_val);
      object_ = ret_val;
    }
  }

  if (object_ == nullptr) return nullptr;

  return JS_GetPrivate(object_);
}

https://github.com/thaliproject/jxcore/blob/master/deps/mozjs/src/jsapi.cpp#L2269-L2274
JS_PUBLIC_API(void *)
JS_GetPrivate(JSObject *obj)
{
    /* This function can be called by a finalizer. */
    return obj->getPrivate();
}

The SecureContext retrieved from the unwrapped object (returned by SM) contains the corrupted data.

When the SSL error occurs, the following connection attempts succeed, the reason is that after the error the connection is closed and new connections are created, with a new connection the Secure Context is recreated.

The PSK code was always passing values to the TLS layer wrong. But by a miracle most of the time this didn't cause a failed connection, but sometimes it does. So we have to fix the PSK code.

https://github.com/thaliproject/Thali_CordovaPlugin/blob/aaladev_1356_yarong/thali/NextGeneration/replication/thaliReplicationPeerAction.js#L207-L220
Thali uses the secureOptions attribute assuming that jxcore won't use it, but it does.

So the bug is caused by our work around to thaliproject/Thali_CordovaPlugin#730 so we have to fix that bug.

@yaronyg when #730 is fixed we need to test again jxcore with the same test, since during debugging we noticed two things that we don't know if they were caused by #730:

in the SSL handshaking there were too many requests coming from the client (I don't think it's caused by #730 but we didn't really investigate it so it's just a guess that is not related to #730).
the secureOptions attribute was always overwritten with random values, most of the times the values were not causing the SSL error just by chance, but in one particular case the value was way off and causing the SSL negotiation to fail. We need to make sure that the value that was causing the error was indeed produces by #730 and not by another bug that somehow is hidden by the #730 issue.

We believe we fixed this when we fixed the bugs in secureOptions.


Revert "💄 Fix Safari status bar style"

Reverts jpanther/congo#789
The theme-color tag is supported by all Apple devices released since 2015 (iOS 15, available from 2021).
In addition, the meta tag apple-mobile-web-app-capable has no effect unless full-screen mode as described in apple-apple-mobile-web-app-capable is specified. A regular congo webpage should not run in full-screen mode.

Having looked into this more closely now, I tend to agree. I did test the PR that introduced this change yesterday and couldn't see any negative consequences but it seems pointless if theme-color is already covering this use case.


Collect code coverage.

Use Codecov.io to track coverage data.

Codecov Report

:exclamation: No coverage uploaded for pull request base (master@18c8775). Click here to learn what that means.
The diff coverage is 100%.

@@            Coverage Diff            @@
##             master      #55   +/-   ##
=========================================
  Coverage          ?   94.04%
=========================================
  Files             ?       21
  Lines             ?     1730
  Branches          ?      299
=========================================
  Hits              ?     1627
  Misses            ?       69
  Partials          ?       34

Impacted Files
Coverage Δ

adanet/core/report_pb2.py
100% <100%> (ø)

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update 18c8775...9c9567d. Read the comment docs.


Require typing_extensions for successful installation

typing_extensions is not in requirements.txt.  This leads to the following wonderful error:
  File "/home/XXX/.local/bin/rfc-http-validate", line 5, in <module>
    from rfc_http_validate import main
  File "/home/XXX/.local/lib/python3.8/site-packages/rfc_http_validate/__init__.py", line 8, in <module>
    import http_sfv
  File "/home/XXX/.local/lib/python3.8/site-packages/http_sfv/__init__.py", line 32, in <module>
    from .dictionary import Dictionary
  File "/home/XXX/.local/lib/python3.8/site-packages/http_sfv/dictionary.py", line 3, in <module>
    from .item import Item, InnerList, itemise, AllItemType
  File "/home/XXX/.local/lib/python3.8/site-packages/http_sfv/item.py", line 4, in <module>
    from typing_extensions import SupportsIndex
ModuleNotFoundError: No module named 'typing_extensions'

Patch inbound shortly.

Patch not inbound as I don't quite know how to manage this properly.  This is only needed for python3.9 or earlier, which is probably why the thing that builds the package fails to include typing_extensions.  I could add this always, I guess, but I am not quite sure how to manage that.


Run tests on master against 3.11

Description
Run tests on master against 3.11
linked pr: https://github.com/inmanta/irt/pull/1740
closes https://github.com/inmanta/inmanta-core/issues/6022
Strike through any lines that are not applicable (~~line~~) then check the box

[x] Attached issue to pull request
[x] Changelog entry
[ ] Type annotations are present
[ ] Code is clear and sufficiently documented
[ ] No (preventable) type errors
[ ] Sufficient test cases (reproduces the bug/tests the requested feature)
[ ] Correct, in line with design
[ ] End user documentation is included or an issue is created for end-user documentation (add ref to issue here: )

Processing this pull request

Failed to merge changes into iso6 due to merge conflict. Please open a pull request for these branches separately by cherry-picking the commit that was made on the branch master (git cherry-pick 38f2777083bcd053e2ce215bf1f6a86d83848345).

Failed to merge changes into iso5 due to merge conflict. Please open a pull request for these branches separately by cherry-picking the commit that was made on the branch master (git cherry-pick 38f2777083bcd053e2ce215bf1f6a86d83848345).

Merged into branches master in 38f2777083bcd053e2ce215bf1f6a86d83848345

Not closing this pull request due to previously commented issues for some of the destination branches. Please open a separate pull request for those branches by cherry-picking the relevant commit. You can safely close this pull request and delete the source branch.

This branch was not deleted as it seems to still be in use.


migration  to CSS

CSS has a file-system mode that could allow migration/mapping at the filesystem level.
This is a work in progress, to summarize some of the questions raised by solidcommunity.net migration/mapping from NSS to CSS
file system mapping

resource mapping is using the same mapping convention : resource + contentType is mapped

to file if file mimeType = contentType
else to file$.ext with mimeType of ext = contentType
profile is stored in card$.ttl
.meta and .acl are turtle resources stored as files at the same relative location.

pod mapping

CSS a pod is allways stored in a folder named user
while NSS pod data is stored in a folder named subdomain

IdP

authentication have different entry points (login) :

CSS is using email as entryPoint versus WebId for NSS
NSS may have multiple pod's with the same email, not CSS
solidcommunity.net on 20220603  has 59030 accounts but only 48445 emails

idp migration

data migration (?)
or batch pod creation see issue https://github.com/solid/community-server/pull/1165

WebId structure

NSS https://user.server/profile/card#me
CSS can use subdomain configuration like NSS
or domain/user configuration https://server/user/profile/card#me

WebId profile

in CSS extended profile (preferences) is not created by default : supported via custom pod templates (this is not a migration isssue)
Resolved : NSS was missing solid:oidcIssuer for old pod's. see issue comment
 and chat Resolved on current pod with https://github.com/RubenVerborgh/add-oidc-issuer

CSS functionalities

CSS container as turtle do not display contentType by default

v4 has it by default

app authorisation

CSS do not use the trustedApp mechanism.

Note that this goes beyond the v0.9 spec; the mechanism is not secure and will not be supported in the default CSS configuration. However, no breakage occurs; the statements are simply ignored.

NSS uses trustedApp at the pod or ACL document level

notifications ?

CSS supports the unsecure Solid WebSockets API 0.1 in all versions up to and including v4.0.0, but the mechanism is scheduled to be removed from the default configuration in v5.0.0. (Note that this does conform to 0.9 since support is indicated as SHOULD, not MUST.) However, it will still be available as a custom module that can be plugged in, so keeping that functionality will not be an issue.

owner implementation ? to allow unlock ACL Control : yes it does

mashlib issues

mashlib can be linked to CSS has an external webApp
and CSS v3.0.0 has a recipe using mashlib by default
extended profile is not available in CSS missing properties are :

space:storage
solid:account
preference files

CSS domain is allways seen as a podStorage : pim:Storage is available on container representation even with no profile

On the issues with mashlib

You can easily configure mashlib in order to generate new files for a pod on pod creation using handlebars templates. I have added handlebars files to my configuration: https://github.com/redpencilio/app-solid which are responsible for generating preference files. These are located in templates/pod. In order to use these templates, you can configure a TemplatedResourcesGenerator in the components.js config file to use the correct pod-templates folder.

Some quick addenda to the above (if it's fine to edit your top post, @bourgeoa, you or I can also add them there):

CSS container as turtle do not display contentType by default

It's possible to enable this and v4.0.0 will have it enabled by default

extended profile is not created by default

Note that this goes beyond the v0.9 spec; CSS supports this via a custom pod templates.

app authorisation

Note that this goes beyond the v0.9 spec; the mechanism is not secure and will not be supported in the default CSS configuration. However, no breakage occurs; the statements are simply ignored.

notifications ?

CSS supports the unsecure Solid WebSockets API 0.1 in all versions up to and including v4.0.0, but the mechanism is scheduled to be removed from the default configuration in v5.0.0. (Note that this does conform to 0.9 since support is indicated as SHOULD, not MUST.) However, it will still be available as a custom module that can be plugged in, so keeping that functionality will not be an issue.

Top post edited with @RubenVerborgh responses
One new question : does CSS implement : "owner implementation ? to allow unlock ACL Control"

Yes, it does!

Thanks

as of 20220603 there are 59030 accounts but only 48445 emails

Is that 48,445 accounts that have email addresses? Or is it 48, 445 unique email addresses?

The plan I was tracking on this topic is:

[ ] First experiments with mashlib on CSS (reporting bugs)

[ ] Fix problems of SolidOS(mashlib) to be able to move to CSS

[ ] SolidOS team concerns about CSS

[ ] Tim migrated and switched timbl.com to CSS
[ ] all SolidOS team has local CSS installations
[ ] collecting issues on muli-user setup
[ ] fix any big multi-user setup problems

[ ] Working on checking/documenting Solid Apps working with CSS

[ ] Migrate Pods

[ ] added solid:oidcIssuer missing tripple to solidcommunnity.net and inrupt.net
[ ] migration plan approved by SolidOS team & Solid Team
[ ] thoughts about migration of login experience
[ ] collect info on pod users
[ ] solve/reconcile any login to CSS issues of older (pre CSS) pod owners

This is the number of unique email addresses recorded in the IdP.
Le mer. 8 juin 2022 à 18:50, Jeff Zucker @.***> a
écrit :

Is that 48,445 accounts that have email addresses? Or is it 48, 445 unique
email addresses?
—
Reply to this email directly, view it on GitHub
https://github.com/solid/solidcommunity.net/issues/62#issuecomment-1150157202,
or unsubscribe
https://github.com/notifications/unsubscribe-auth/AAQ5TZTVQSTO6BUEFI5357LVODFLPANCNFSM5P7TMRFQ
.
You are receiving this because you were mentioned.Message ID:
@.***>

Now we have https://github.com/RubenVerborgh/NSS2CSS -- thanks to @RubenVerborgh -- I have checked off the box above "develop a migration script for data".    I had understood originally that CSS and NSS used different password hash algorithms, and so a conversion from one to the other was impossible.  But now it seems that was not in fact the case, and the conversion script is possible.    That is a major step


Remove invalidArgumentException from throws annotation

Codecov Report
All modified and coverable lines are covered by tests :white_check_mark:

Comparison is base (ee05ecb) 6.31% compared to head (e1c3022) 6.31%.

Additional details and impacted files
@@           Coverage Diff           @@
##              main     #13   +/-   ##
=======================================
  Coverage     6.31%   6.31%
  Complexity      82      82
=======================================
  Files           11      11
  Lines          206     206
=======================================
  Hits            13      13
  Misses         193     193

:umbrella: View full report in Codecov by Sentry.
:loudspeaker: Have feedback on the report? Share it here.


Label placement issue with widths of 16% and below

Please verify the version of auro-input you have installed
@latest
Please describe the bug
See screenshot taken from Auro doc site.
It appears that there is an issue where the label placement animation has issues when the width of the form input element is short in width, approx 16%.

What also can be noticed is that the error icons are not visible at widths less than 10%. See screenshot from app team that reported the issue. Also notice placement of label with datepicker labels. Undertermined if this is related to auro-input or specific to auro-datepicker.

To reproduce, use the following steps:

Go to https://auro.alaskaair.com/components/auro/input/api
Use any bordered example
Reduce width of the input to approx 16% or less
UI issue should present with both tab and click/tap

Reproducing the error on the docsite
This issue is reproducible on the Auro docsite
Expected behavior
The label placement should be consistent regardless of input width.
NOTE: It could also be considered that a min-width would be set by the Design System as to set a documented standard of width that the UIs will always perform as expected.
What browsers are you seeing the problem on?
Firefox, Chrome, Safari, Microsoft Edge
Additional context
The issue was communicated by the AirportCustomerExperience team.  ID: 1087631

This looks very similar to an issue we are seeing with Datepicker: https://github.com/AlaskaAirlines/auro-datepicker/issues/247
Moving to investigate and see if these are a common root cause and come up with a holistic solution if that's the case

@blackfalcon Currently, I am NOT able to reproduce the bug from the first screenshot. Are you saying this UI issue happens when you are exactly at 16% screen width or anything lower than that as well?

@jordanjones243 please see this CodePen to illustrate the issue https://codepen.io/blackfalcon/pen/zYVWKwP

I am now able to validate this issue. To replicate this issue, a user must TAB focus into the inputs to reproduce this error, rather than clicking inside the element.

Troubleshooting
(ONLY on Chrome)
The input element is bigger than the wrapper and the wrapper's scroll position is changed when user focuses the input with tapping
Troubleshooting Result
This is due to the overflowing input size which makes chrome to reposition the scroll (where the cursor to be very left of the wrapper on onfocus with keyboard input
Solution
Make .wrapper .main input to not to exceed the width of wrapper


[[FIX]] emit I003 more carefully and less annoyingly

Allows toggling es5 mode on/off if anyone needs that
Only warns if the es5 option is explicitly set

Closes #2251

Coverage increased (+0.03%) to 96.36% when pulling fa6f842e34e94f8cd5a488430d99e97a1a77663f on caitp:issue-2251 into 12811e797a264f323b920b314db965b8adcb207e on jshint:master.

https://github.com/jshint/jshint/commit/757fb73dbd5f5bb842053dbce294e30e5f130b49


lib/src/scanner now depends on lib/src/fasta

lib/src/scanner now imports FastaCode from lib/src/fasta.
I'm filing this bug to track if we need to revisit that.

I believe this is OK - lib/src/scanner should be deleted in the (not too far) future.


Build VSCode from Source

VSCode is currently packaged with binaries from Microsoft. Those are non-free.
The source code is under MIT license.
It might be necessary to build Electron from Source first, see https://github.com/NixOS/nixpkgs/issues/17073

I managed to build vscode from source with the electron build from nixpkgs (so we don't need to change the electron build).

You need a patched version of node-native-keymap, I have submitted a PR
Then you just need to replace the electron binary with ours (after building vscode):

nix-build '<nixpkgs>' -A electron -o nixpkgs-electron
ln -sf nixpkgs-electron/lib/electron/electron .build/electron/code-oss

vscode has a wrapper around npm and also downloads packages during the build.  I haven't yet figured out how to integrate that with our node.js infrastructure.

Not that I know of.  I just managed to build vscode from source at all.

Implemented here: https://github.com/NixOS/nixpkgs/pull/86122

There is already a PR, but it still needs a bit of clean up.

Is the vscodium build from source? I think that would be enough.

Doesn’t look like it
https://github.com/NixOS/nixpkgs/blob/ee1aa3985792944ba13f2e0c18d42e2ed0f3f4ba/pkgs/applications/editors/vscode/vscodium.nix#L29


useless volume for /var/log/mysql

why is there a volume defined for /var/log/mysql when there is nothing written do it?

If Percona is configured to use binary logs, they are stored there, AFAIU: https://github.com/docker-library/percona/pull/11


MSBuild Converts block comment line endings to \n, from \r\n

As the title says, when I save a project from VS, the line endings of block comments go from \r\n to \n. A simple example:

Create a blank .NET Core project (doesn’t matter what type, I used a console app).
In a separate editor, with the project open, create a block comment. Observe that the line endings are \r\n.
Switch back to VS, left-click on the project node, and hit CTRL+S.
Switch back to the project file in an external editor. Line endings are now \n for the block comment.

This creates a bad experience in VS, as VS will helpfully pop up a line ending normalization dialog when the project file is opened directly. I've only tested this is .NET Core apps, but I suspect that it'll hold true for others well. Moved from https://github.com/dotnet/roslyn-project-system/issues/742.

An important note this that is the line endings inside the block comment. This is what you should see:
<Project>\r\n
    <!-- Line 1 of block comment, note the line ending here\n
         Line 2 of block comment, line ending here too\n
    -->\r\n
    <ItemGroup>\r\n
    </ItemGroup>\r\n
</Project>


fix(olm): properly detect cluster operator API

This was causing vanilla upstream to crash due to attempting to write to
a not present API.

Will test this further while doing other installer work.

/retest
haven't tested on openshift yet... so this may really be broken

/retest

/retest

/retest

/retest

/retest

/retest

/retest

/retest

/retest


Whitelist Rules does not work

I need to block all websites except those are allowed in my whitelist. So I create rules:
Whitelist Rules
medium.com
BlackList Rules
*.*
I can not open medium.com. Is it possible to  block all websites except those are allowed in my whitelist with SimpleDnsCrypt?

It's my screenshot. I can not open medium.com

I have found a solution. Need to delete Simple DNSCrypt and install dnscrypt-proxy. I can do this thing with dnscrypt and it's possible to block all websites except those are allowed in my whitelist with dnscrypt-proxy.

Need to delete Simple DNSCrypt and install dnscrypt-proxy. I can do this thing with dnscrypt

wait wait wait, can you explain, delete dnscrypt and install dnscrypt-proxy with dnscrypt, but... you delete dnscrypt

I deleted Simple DNSCrypt.
I install dnscrypt-proxy here: https://github.com/DNSCrypt/dnscrypt-proxy

I use dnscrypt-proxy without Simple DNSCrypt.

All works.

Need to delete Simple DNSCrypt and install dnscrypt-proxy. I can do this thing with dnscrypt

wait wait wait, can you explain, delete dnscrypt and install dnscrypt-proxy with dnscrypt, but... you delete dnscrypt

So it's possible to block all websites except those are allowed in my whitelist with dnscrypt-proxy (new version). Maybe it's  possible with Simple DNSCrypt. I don't know. But I use dnscrypt-proxy here https://github.com/DNSCrypt/dnscrypt-proxy without GUI and it's work fine. I like it.

But I think that dnscrypt-proxy here https://github.com/DNSCrypt/dnscrypt-proxy works very well without any GUI. This program has a very good documentation.

Yes, but Simple DNSCrypt is simple and user-friendly - ready to go solution without studying the documentation, and the concept of the new application looked great, sad if the development is abandoned.
Is there an auto-selection of the best DNS in dnscrypt-proxy by the way?


Common: fix travis deployment test

Summing up the issue:
travis will wrap the condition in [[ ]]
and [[ "" ]] gives $? 1
but any string will give exit code 0
Made the messages a bit more informative, but using STDERR so as not to interfere with [[.

@rzats you'll need to add this to the changelog for R107


const qualifiers

Reviewer @ilia3101
Reasoning
const qualifiers convey how the memory passed to these functions is treated.
It is useful for consumers to know which functions might modify their BigInts.
It is also helpful because it is more clear which parameters are invars and outvars.
Changeset

Add const qualifier to all public functions, fix any compiler warnings

hmm my script must have messed up. I meant to make this against upstream.

hmm my script must have messed up. I meant to make this against upstream.

Fixed: https://github.com/wjmelements/scripts/pull/24


Intellij export of editorconfig from square/java-code-styles

Exported from preferences menu, removed less common types

This is pretty horrific, especially with regard to long-term maintainability. In reality we probably only needs like 6-10 lines.

This is pretty horrific, especially with regard to long-term maintainability. In reality we probably only needs like 6-10 lines.

@JakeWharton 100% agree.  Going to ask some questions to try to imagine what the target we are actually heading for looks like.
Wants

Without additional setup (for example importing github.com/square/java-code-styles) Intellij formats correctly
Our gradle check and apply tasks (whichever they are) match intellij styles enough that we don't end up with IDE fighting CI
Noisy sticky formatting features like single import and indentation/spaces are absolutely

How

.editorconfig with minimal entries to make Intellij match our formatting.
simple gradle task (spotlessApply*?) to fix before submitting a PR.

I don't want to try to much here if we don't agree what the solution looks like.  Any pointers to projects in square that have nailed this, let me know.

I think this broke with some of the sourcepath tricks we used to get conscrypt and android testing working without duplicating tests.

@JakeWharton 100% agree.  Going to ask some questions to try to imagine what the target we are actually heading for looks like.
Wants

Without additional setup (for example importing github.com/square/java-code-styles) Intellij formats correctly
Our gradle check and apply tasks (whichever they are) match intellij styles enough that we don't end up with IDE fighting CI
Noisy sticky formatting features like single import and indentation/spaces are absolutely

How

.editorconfig with minimal entries to make Intellij match our formatting.
simple gradle task (spotlessApply*?) to fix before submitting a PR.

I don't want to try to much here if we don't agree what the solution looks like.  Any pointers to projects in square that have nailed this, let me know.

I think this broke with some of the sourcepath tricks we used to get conscrypt and android testing working without duplicating tests.

Agreed with Wants. I don't even know if we care to require spotless before a PR; accidental differences are low-cost but enforcement is high-cost. I'd rather we get the tools to fix whitespace for us and try to avoid humans ever spending time on it.
Diffing the SQ styles vs. IntelliJ defaults might help. Anything that's the same presumably doesn't need to be in the .editorconfig file!

Agreed with Wants. I don't even know if we care to require spotless before a PR; accidental differences are low-cost but enforcement is high-cost. I'd rather we get the tools to fix whitespace for us and try to avoid humans ever spending time on it.
Diffing the SQ styles vs. IntelliJ defaults might help. Anything that's the same presumably doesn't need to be in the .editorconfig file!

Will rework in a smaller project like certifikit, before transposing here.

Interesting starting point from ktfmt https://github.com/facebookincubator/ktfmt/blob/master/docs/editorconfig-section.txt


getVelocity returns incorrectly when player is in boat

This issue was originally submitted by @zedwick in SpongePowered/SpongeForge#2035.

I am currently running

SpongeForge version: spongeforge-1.12.2-2611-7.1.0-BETA-2931
Forge version: forge-1.12.2-<IP_ADDRESS>11
Java version: 1.8.0_131
Operating System: Mac OS X

When a player is in a boat, Player.getVelocity() and Player.getVehicle().get().getVelocity() both return (0.0, 0.0, 0.0) instead of their actual velocity.

When a non SP player is moving the boat it's not handled through the normal handling and motionX/Y/Z are not used. Instead there is linear interpolation with the positions. I will have to look more into providing a decent estimated velocity.


[tbb:x64-windows] build failure

@BurningEnlightenment - I just started getting this TBB error today, looks like it might be related to your recent change:

Building package tbb[core]:x64-windows...
-- Downloading https://github.com/intel/tbb/archive/427c252e0bb9e191767a62d8a744b21950c343f6.tar.gz...
CMake Error at scripts/cmake/vcpkg_download_distfile.cmake:99 (message):
File does not have expected hash:
      File path: [ C:/vcpkg/downloads/temp/intel-tbb-427c252e0bb9e191767a62d8a744b21950c343f6.tar.gz ]
  Expected hash: [ b61107a751363f6acbf31297fc1232314a41622d6e89fe87dedb34a11c9a1d04dd1be724e7a6021e889342e7a453b6605523560441460716933817dffd4a4191 ]
    Actual hash: [ 01307b689680c8d796357a65258257b0c54336aa2a5dc75746d65e169988b8cb353537ad480cc4b8970b32667ab7f965bfedee4a15186f2a3159c9f130667f26 ]

I would be quite surprised if any of my recent changes did cause this. In fact only one of recent my PRs did land on master. Furthermore all of my PRs only change or add ports which are unrelated to tbb.
I think the underlying issue is that the tbb repository was renamed/moved from intel/tbb to oneapi-src/oneTBB which in turn changed the directory name within the archive which in turn changed the archive hash...

@BurningEnlightenment - thanks! That does look like the problem.

Hi @danrbailey
Thanks for posting this issue.
It's duplicated to #10447. I have submitted a PR #10456 to fix this issue.


EX 51 line 81 colon.

code line 81: cout << "Day: " << .....
//------------------------------^

What is EX 51?

Sorry. EX 9.51


Capacitor Filesystem

I added electron to my capacitor project, I'm having problems with the Filesystem plugin. I downloaded some pdf files and saved with the method
let result = await Filesystem.writeFile ({
  path: path,
  data: fileData,
  directory: FilesystemDirectory.Data
})

my problem is being able to show them to electron api.
if I try to fetch the uri of the saved file I see it with the Filesystem plugin, but I don't understand where it is saved or how to use it with electron.
let result = await Filesystem.getUri ({
  path: pathFile,
  directory: FilesystemDirectory.Data
});

console.log (result.uri) /DATA/example.pdf

What does it mean, that this has been set to "plugin update needed"? Is there any plan for solving this? Any idea regarding the timeline? My project is blocked by this issue.

Any news here? We cannot expect to use electron without a Filesystem access ...

@IT-MikeS
Couldnt we add it from here: https://github.com/ionic-team/capacitor/tree/2.x/electron/src/electron directly to @capacitor-community/electron sources?
Or should I create a @capacitor-community/filesystem plugin which just implements it for electron? What is the best approach here?

After 4 is released the official file system plug-in for capacitor will need a pr giving it electron support.
At this point you can either create your own plugin or expose your own file api using electrons context bridge system for use in the renderer processes

@IT-MikeS
thanks for the reply. I am currently trying to create my own plugin implementing the Filesystem API.
So far I kinda got it working but am running into an issue where the Promises of the plugin are never resolved. I do not know why this is the case as my other plugins do not have this issue:
https://github.com/digaus/capacitor-community-filesystem
The calls are working (folders and files get created when using mkdir or writeFile) but they are never resolved or rejected.
When the Plugin is supposed to reject, I get following error;
sending sync ipc from renderer of channel: Filesystem-mkdir

TypeError: f.mkdir(...).catch is not a function
    at e.<anonymous> (9289.8eb515d713fc4a521e0b.js:1)
    at Generator.next (<anonymous>)
    at s (9289.8eb515d713fc4a521e0b.js:1)
    at e.invoke (polyfills.4efd05b7e2c2183e44e6.js:1)
    at Object.onInvoke (main.9a92667a6a0c7cd9525e.js:1)
    at e.invoke (polyfills.4efd05b7e2c2183e44e6.js:1)
    at t.run (polyfills.4efd05b7e2c2183e44e6.js:1)
    at polyfills.4efd05b7e2c2183e44e6.js:1
    at e.invokeTask (polyfills.4efd05b7e2c2183e44e6.js:1)
    at Object.onInvokeTask (main.9a92667a6a0c7cd9525e.js:1)

Any idea whats the issue here?

What version of the platform are you using out of curiosity?

I added a pull-request to the default Capacitor plugins repo that adds support for Electron to the Filesystem plugin: https://github.com/ionic-team/capacitor-plugins/pull/792