Menu Item Options List is not Location Aware

Expected behavior:
When editing a menu item, the list of available menu options lists should be restricted to the user's locations.
Actual behavior:
The drop down list of available option sets to add to a menu item includes all menu option sets for all locations.
Reproduce steps:
Create a new menu item under a user with restricted location scope.
Go to the options tab
The list will include all option sets that have been created, not just the ones for their location.
Version:
3.0.4-beta.26
Additional Information:

Seems that getRecordEditorOptions() in menus_options_model needs to be location limited.

Seems that getRecordEditorOptions() in menus_options_model needs to be location limited.

Can you point me to another example of where this has been done on a list? I can take a swing at it if I have an example.

Can you point me to another example of where this has been done on a list? I can take a swing at it if I have an example.

@sampoyigi record editor seems to be unintentionally bypassing locationable when using self:: in getRecordEditorOptions in menu_options... not sure how best to work around this.

@sampoyigi record editor seems to be unintentionally bypassing locationable when using self:: in getRecordEditorOptions in menu_options... not sure how best to work around this.

This one is quickly becoming a real operational issue since all locations have access not only to see each others option sets, but they can also edit them even though they don't have permissions to that other location. Any thoughts on what might be required here?

This one is quickly becoming a real operational issue since all locations have access not only to see each others option sets, but they can also edit them even though they don't have permissions to that other location. Any thoughts on what might be required here?

@ryanmitchell maybe just adding ->whereHasLocation(AdminLocation::getIdOrAll()) to the query would do?

@ryanmitchell maybe just adding ->whereHasLocation(AdminLocation::getIdOrAll()) to the query would do?

I'm happy to try it if you can tell me where to add it.

I'm happy to try it if you can tell me where to add it.

@djtimca getRecordEditorOptions in menu_options

@djtimca getRecordEditorOptions in menu_options

So like this?:
    public static function getRecordEditorOptions()
    {
        return self::selectRaw('option_id, concat(option_name, " (", display_type, ")") AS display_name')
            ->whereHasLocation(AdminLocation::getIdOrAll())->dropdown('display_name');
    }

So like this?:
    public static function getRecordEditorOptions()
    {
        return self::selectRaw('option_id, concat(option_name, " (", display_type, ")") AS display_name')
            ->whereHasLocation(AdminLocation::getIdOrAll())->dropdown('display_name');
    }

yes something like that - you tell me if it works?

yes something like that - you tell me if it works?

Tried that with that added both before the dropdown() and after but both ways I get:
Class 'Admin\Models\AdminLocation' not found
(1/1) ErrorClass 'Admin\Models\AdminLocation' not found
in Menu_options_model.php line 69
at Menu_options_model::getRecordEditorOptions('_options')in RecordEditor.php line 207
at RecordEditor->getRecordEditorOptions()in RecordEditor.php line 87

Tried that with that added both before the dropdown() and after but both ways I get:
Class 'Admin\Models\AdminLocation' not found
(1/1) ErrorClass 'Admin\Models\AdminLocation' not found
in Menu_options_model.php line 69
at Menu_options_model::getRecordEditorOptions('_options')in RecordEditor.php line 207
at RecordEditor->getRecordEditorOptions()in RecordEditor.php line 87

Add use AdminLocation;  to the top of the file

Add use AdminLocation;  to the top of the file

PERFECT! Do you want me to put this into a PR and submit for you?

PERFECT! Do you want me to put this into a PR and submit for you?

Only one thing is that when logged in as super-admin I only see options that don't have a location I think... but that isn't a big deal since I shouldn't be setting up menus as super admin :)

Only one thing is that when logged in as super-admin I only see options that don't have a location I think... but that isn't a big deal since I shouldn't be setting up menus as super admin :)

Change to whereHasOrDoesntHaveLocation() And it should fix that
Yep update the PR please.

Change to whereHasOrDoesntHaveLocation() And it should fix that
Yep update the PR please.


runtime: a program built with a too-high GOAMD64 value will dump core on startup

What version of Go are you using (go version)?

$ go version
go version devel go1.18-5337e53dfa Sun Nov 14 17:38:42 2021 +0000 linux/amd64

Does this issue reproduce with the latest release?
No, since Go 1.17 doesn't support GOAMD64.
What operating system and processor architecture are you using (go env)?
go env Output
$ go env
GO111MODULE=""
GOARCH="amd64"
GOBIN=""
GOCACHE="/u/cks/.cache/go-build"
GOENV="/u/cks/.config/go/env"
GOEXE=""
GOEXPERIMENT=""
GOFLAGS=""
GOHOSTARCH="amd64"
GOHOSTOS="linux"
GOINSECURE=""
GOMODCACHE="/h/281/cks/go/pkg/mod"
GONOPROXY=""
GONOSUMDB=""
GOOS="linux"
GOPATH="/h/281/cks/go"
GOPRIVATE=""
GOPROXY="https://proxy.golang.org,direct"
GOROOT="/h/281/cks/src/go"
GOSUMDB="sum.golang.org"
GOTMPDIR=""
GOTOOLDIR="/h/281/cks/src/go/pkg/tool/linux_amd64"
GOVCS=""
GOVERSION="devel go1.18-5337e53dfa Sun Nov 14 17:38:42 2021 +0000"
GCCGO="gccgo"
GOAMD64="v3"
AR="ar"
CC="gcc"
CXX="g++"
CGO_ENABLED="1"
GOMOD="/tmp/t/go.mod"
GOWORK=""
CGO_CFLAGS="-g -O2"
CGO_CPPFLAGS=""
CGO_CXXFLAGS="-g -O2"
CGO_FFLAGS="-g -O2"
CGO_LDFLAGS="-g -O2"
PKG_CONFIG="pkg-config"
GOGCCFLAGS="-fPIC -m64 -pthread -fmessage-length=0 -fdebug-prefix-map=/tmp/go-build4250807351=/tmp/go-build -gno-record-gcc-switches"

What did you do?
If I build a Go program (even the playground's "Hello world") with a value of GOAMD64 that's too high for the machine I'm trying to run the program on, the program will dump core on startup. This happens even for GOAMD64 values that work on the machine I build the program on, but not on a machine with an older CPU; I can compile with GOAMD64=v3 on one machine where it works, copy the binary to another, and it dumps core on startup instead of running. On the original test machine, GOAMD64=v4 produces a binary that doesn't even run on the machine itself.
Gdb says that this is happening in:
(gdb) where
#0  0x000000000045c6c0 in runtime.write (fd=2, p=0x4b1680 <bad_cpu_msg>, n=84, ~r0=<optimized out>) at <autogenerated>:1
#1  0x0000000000457bc4 in runtime.rt0_go () at /h/281/cks/src/go/src/runtime/asm_amd64.s:194
[...]

Delve agrees with this trace and shows the relevant runtime source as:
(dlv) bt
0  0x000000000045c6c0 in runtime.write
   at :0
1  0x0000000000457bc4 in runtime.rt0_go
   at /h/281/cks/src/go/src/runtime/asm_amd64.s:194
(dlv) up
Stopped at: 0x45c6c0
=>   1: no source available
Frame 1: /h/281/cks/src/go/src/runtime/asm_amd64.s:194 (PC: 457bc4)
   189: bad_cpu: // show that the program requires a certain microarchitecture level.
   190:         MOVQ    $2, 0(SP)
   191:         MOVQ    $bad_cpu_msg<>(SB), AX
   192:         MOVQ    AX, 8(SP)
   193:         MOVQ    $84, 16(SP)
=> 194:         CALL    runtime·write(SB)
   195:         MOVQ    $1, 0(SP)
   196:         CALL    runtime·exit(SB)
   197:         CALL    runtime·abort(SB)
   198: #endif
   199:

Delve further reports the crash (dis)assembly and fault address as:
(dlv) disassemble
TEXT runtime.write(SB) <autogenerated>
        <autogenerated>:1       0x45c6a0        4883ec20                sub rsp, 0x20
        <autogenerated>:1       0x45c6a4        48896c2418              mov qword ptr [rsp+0x18], rbp
        <autogenerated>:1       0x45c6a9        488d6c2418              lea rbp, ptr [rsp+0x18]
        <autogenerated>:1       0x45c6ae        488b442428              mov rax, qword ptr [rsp+0x28]
        <autogenerated>:1       0x45c6b3        488b5c2430              mov rbx, qword ptr [rsp+0x30]
        .:0                     0x45c6b8        8b4c2438                mov ecx, dword ptr [rsp+0x38]
        .:0                     0x45c6bc        450f57ff                xorps xmm15, xmm15
=>      .:0                     0x45c6c0        644c8b3425f8ffffff      mov r14, qword ptr fs:[0xfffffff8]
        .:0                     0x45c6c9        e85207ffff              call $runtime.write
        .:0                     0x45c6ce        89442440                mov dword ptr [rsp+0x40], eax
        .:0                     0x45c6d2        488b6c2418              mov rbp, qword ptr [rsp+0x18]
        .:0                     0x45c6d7        4883c420                add rsp, 0x20
        .:0                     0x45c6db        c3                      ret
(dlv) regs
    Rip = 0x000000000045c6c0
    Rsp = 0x00007ffcd8aa16b8
    Rax = 0x0000000000000002
    Rbx = 0x00000000004b1680
    Rcx = 0x0000000000000054
    Rdx = 0x0000000000000000
    Rsi = 0x00007ffcd8aa1718
    Rdi = 0x000000000051e540
    Rbp = 0x00007ffcd8aa16d0
     R8 = 0x0000000000000000
     R9 = 0x0000000000000000
    R10 = 0x0000000000000000
    R11 = 0x0000000000000000
    R12 = 0x0000000000000000
    R13 = 0x0000000000000000
    R14 = 0x0000000000000000
    R15 = 0x0000000000000000
 Rflags = 0x0000000000010206    [PF IF IOPL=0 RF]
     Es = 0x0000000000000000
     Cs = 0x0000000000000033
     Ss = 0x000000000000002b
     Ds = 0x0000000000000000
     Fs = 0x0000000000000000
     Gs = 0x0000000000000000
Fs_base = 0x0000000000000000
Gs_base = 0x0000000000000000

This is a tricky one.
The rt0_go code is trying to call runtime.write. It's actually calling runtime.write.abi0. That is a wrapper that calls into runtime.write using the internal ABI. Part of that wrapper sets up r14 by loading it from TLS. But the TLS pointer has not been set up yet, so boom.
How did this used to work? The previous code called runtime.exit.abi0 for these kinds of errors, but that is implemented in assembly, so no wrapper needed.
I don't think we can call into Go code at this point in startup. We could delay the report until after settls runs, maybe?
For some reason it works fine on Darwin - something is different enough about TLS that it survives the bogus load. And nothing in runtime.write happens to use the G register for anything. At least I think, there's a lot of strangeness across platforms here.
@martisch @vpachkov

Seems like https://github.com/golang/go/blob/master/src/runtime/asm_386.s#L128 is another place that may be facing the same issue.

Possibly, yes. I think there is less of an issue because 386 isn't using the register ABI yet, so there's no explicit use of TLS to set up the G register. But the stack check in the preamble of write might be confused.
Also the processors that don't support the 386 minimum are very old at this point.


Document that UPSERT does not behave like INSERT ON CONFLICT

For details, see cockroach#18474.
tl;dr:

CRDB UPSERT will override a non-default value with a default value
apparently this is similar to MySQL, but not Postgres
however, if you don't want this overwriting behavior, you need to use an explicit INSERT ON CONFLICT
confusingly, our UPSERT docs say that UPSERT is in fact a shorthand for INSERT ON CONFLICT, which ... apparently it actually is not exactly, in this case (?)

Thanks for tracking this, @rmloveland!

Closing as out of date


Add hovering effect to the contact us section.

Hey I want to add hover effect to the contact us section and make it text look more attractive by aligning them.

👋 @Aditi323 Thanks for opening your first issue here! Be sure to follow the issue template!

Please assign me so that I could start working on it

I would like to work on this issue pls assign me under the GSSOC '2023


PKCS12: change safeContentsBag from a SET OF to a SEQUENCE OF

As per RFC 7292.
Fixes #6665

So, a note in CHANGES? A discussion on the project list? What do you have in mind?

Will this bread IOP with windows ?

@bartonj might be able to shed some light on that. According to what he wrote in #6665, windows seems to be a non-issue in this regard...

Whether encoding it as SET-OF or SEQUENCE-OF, PFXImportCertStore reports only one certificate imported with my test case of one cert within a SafeContentsBag and another at the normal level.
That fairly well suggests (to me) that Windows (Server 2012 R2) doesn't traverse into SafeContentsBag at all.  (At least, not at a semantic level, it probably still walked through it to verify the BER encoding didn't have length issues)

I think it should be raised on the project list and/or users and see if anyone has concerns.

This also fixes interop with NSS, at least skimming their code. Presumably also any other non-OpenSSL stack that bothered to implement safeContents. (safeContentsBag is kind of pointless and appears virtually unused, so I don't expect this OpenSSL bug to have had an effect on the ecosystem. Odd it's in the spec at all if Windows didn't implement it...)

I sent a message to openssl-users just now.

Merged.
master / 1.1.1:
b709babbca0498cd2b05f543b09f57f4a670298e PKCS12: change safeContentsBag from a SET OF to a SEQUENCE OF
1.1.0:
46905cd473db84649b39850c02056883c3da0960 PKCS12: change safeContentsBag from a SET OF to a SEQUENCE OF
1.0.2:
7ccc506b56c3f20f08565b5aff268cb2f3bd046d PKCS12: change safeContentsBag from a SET OF to a SEQUENCE OF

Read cross at https://travis-ci.org/openssl/openssl/builds/406776736 appears relevant.

Can you point at which part of that log?
What I find is:
go test: FAILED (ServerNameExtensionServer-TLS1)
go test: unexpected failure: local error 'read tcp4 <IP_ADDRESS>:41484-><IP_ADDRESS>:42704: read: connection reset by peer', child error 'signal: segmentation fault (core dumped)', stdout:
go test:
go test: stderr:

But I'm not sure that's related or not.

I had just really quick look, and apparently got it wrong. The failure actually stems from previous merge, or from https://travis-ci.org/openssl/openssl/builds/406252276. Apologies for caused confusion.


Error at startup in 0.3.3

Hi,
Yesterday I downloaded 0.3.3 and I'm getting this error:
************* Exception Text **************
System.BadImageFormatException: Could not load file or assembly 'file:///C:\Program Files (x86)\ItemEditor\Plugins\PluginThree.dll' or one of its dependencies. An attempt was made to load a program with an incorrect format.
File name: 'file:///C:\Program Files (x86)\ItemEditor\Plugins\PluginThree.dll'
   at System.Reflection.RuntimeAssembly._nLoad(AssemblyName fileName, String codeBase, Evidence assemblySecurity, RuntimeAssembly locationHint, StackCrawlMark& stackMark, IntPtr pPrivHostBinder, Boolean throwOnFileNotFound, Boolean forIntrospection, Boolean suppressSecurityChecks)
   at System.Reflectio...

I can confirm that the pluginThree.dll is there.

Please check if it's already fixed in the latest release.

looks like its fixed, thanks!


CI for GeoStyler-Workshop broken

Bug
Describe the bug
The CI for geostyler-workshop is broken. The building works fine, but a later step without logs exits with status 1.
To Reproduce
Example: https://travis-ci.com/github/geostyler/geostyler-workshop/builds/219505053
This build is based on https://github.com/geostyler/geostyler-workshop/pull/6 which clearly does not contain any build breaking changes.
Expected behavior
The CI should work properly and exit with status 0.

We should also consider to switch to jekyll (including the gitbook theme).


iBeacon battery charge level

It is possible to check on beacon battery charge level?

As far a I know, the battery level is not part of the standard iBeacon specification and only available when you use the vendor's proprietary protocols. Therefore the library does not support it.
Which beacons are you using?

I use IBc41 https://www.dfrobot.com/index.php?route=product/product&product_id=1296&search=tel0095&description=true#.VhIzRSuG2Ht

Ok yes, it is as I said. The battery charge level is only visible using the configuration app provided by the vendor. It is not part of the iBeacon advertisement. The information is probably contained in BLE packets which are encoded using a vendor-specific format. You could try to sniff these packets and reverse-engineer the format. But I cannot help you with that as I don't have one of these beacons.

@citruz Thank you for the information.


Any plans to use SharedWorker?

Thanks for this library.  I noticed in the source it is using Worker.js and interested if you have plans to use the SharedWorker.js instead?
Not 100% knowing what i'm talking about, but inspired by this library https://github.com/neomjs/neo  it would be very useful to be able to popout a blazor component into its own browser tab - and port to existing worker seamlessly. Completely off the radar or not relevant to objectives of your library?

Hello. Thank you for your feedback.
No plans for shared worker api. It could be interesting I guess, but probably quite a different api compared to the one already implemented at least in blazorworker.backgroundservice, and browser support seems a bit sketchy.
I think that multi tab apps would be quite an unusual usecase. Also bear in mind that blazorworker, as it is today, is just a dotnet worker that can be used by Blazor. You cannot run the actual Blazor framework inside it today, just "normal" dotnet code. So you would have to reload/reinitialize the Blazor framework in a new tab. Indeed, you would not have to reinitialize the worker, and I guess a shared state could have some advantages, if you would close one of the tabs the workers could "live on"... Still sounds like an exotic use case.
My priorities for this library today are foremost a robust jsinterop support and a more performant message layer (maybe shared memory) and indexDb support for the core. And for the service abstraction I'd like to see more options for serialization and native streaming.

Thanks for looking into it..I look forward to the roadmap!


stop_serving method

This pull request implements the stop_serving method, which enables graceful halting of bots using webhooks

Thanks!


adding some css to buttons

Add style to an buttons to make an interactive.

Congratulation your pr is successfully merged make sure to star the repo
kindly help me by registering yourself in mood indigo
Link : https://my.moodi.org/
referal code : CCP62216
make sure to share with freinds as well
comment after registering
@vishaljadhav207


Add completions

For example:

Image path
Image by reference

Notice: This plugin is no more maintained and it has been removed from Jetbrains plugins repository. There is a Markdown plugin officially supported by Jetbrains.


NameParts: Replace Array with Collection Type

Array is a very specialized type in Kotlin and can better be replaced by the normal Collection type. Currently some namePart fields (legalNameParts) are of type Array and should be converted to the Collection Type. The resulting JSON will be unaffected.

Waiting for review on https://github.com/eclipse-tractusx/bpdm/pull/287


Missing Module: joblib

The runDecode.py script (and several others) attempts to load some functions from joblib, however the module does not appear to be in the project.  Can you add this file to the repository?

joblib can be installed through pip: https://pythonhosted.org/joblib/

Thank you!


whats the equivalent of torch.nn.Parameter() in TF ?

from my understanding torch.tensor(5.5, requires_grad=True) is equivalent to tf.Variable(5.5, trainable=True)
how about torch.nn.Parameter(torch.zeros([1,1,1])) ?

@turmeric-blend,
This question is better asked on StackOverflow since it is not a TensorFlow bug or feature request. There is also a larger community that reads questions there. Thanks!


[UPDATE] Send flow to include Fast vaults

Please verify and if needed adjust the flow of sending to implement to ensure a good UX with fast faults and active vaults.
Especially when signing with fast sign that it directly goes to signing the tx without showing the QR code.
See figma for verification and reference.
Let me know if questions arise in regards to the figma flow.

fixed #1201


Debian 8 'init' service provider

Debian 8 is shipped with systemd, but it's possible to replace it by installing sysvinit-core package.
It's documented on https://wiki.debian.org/systemd page.
I'm not 100% sure, but it looks that systemd is hardcoded in params.pp, so there is no option to change it:
   'Debian': {
...
      if versioncmp($::operatingsystemmajrelease, '8') >= 0 {
        $init_template        = 'elasticsearch.systemd.erb'
        $service_providers    = 'systemd'
        $systemd_service_path = '/lib/systemd/system'
        $pid_dir              = '/var/run/elasticsearch'

If i set $service_providers to array [ 'init', 'systemd' ] - works fine :-)

While I do think this would work, the default $service_provider parameter on init.pp is set to init, so making this change would mean all Debian 8 users would be forcibly moved to init. Making the change would therefore require some other fixes as well to default to systemd but provide init as an option.


Registry UI should be able to accept the schema text as a file upload

@shahsank3t #47 is pushed into master. You can use that API in UI.


Does not seem to work with IAM roles for service accounts

What happened?

Get the following error:
 Warning  CannotObserveExternalResource  6s (x7 over 103s)     managed/workspace.tf.crossplane.io  cannot diff (i.e. plan) Terraform configuration: error configuring terraform aws provider: no valid credential sources for terraform aws provider found.

How can we reproduce it?

Set the controller config to the following:
apiVersion: pkg.crossplane.io/v1alpha1
kind: ControllerConfig
metadata:
  name: terraform-config
  labels:
    app: crossplane-provider-terraform
  annotations:
    eks.amazonaws.com/role-arn: arn:aws:iam::<account>:role/<rolename>
spec:
  podSecurityContext:
    fsGroup: 2000
  image: crossplane/provider-terraform-controller:v0.2.0
  args: ["-d"]

Can see the annotation however the terraform aws provider does not seem to use it
What environment did it happen in?
Crossplane version:
1.8

@andrewhibbert - do you have the role configured with a trust relationship for the Service Account and OIDC provider as described here:
https://github.com/crossplane-contrib/provider-aws/blob/master/AUTHENTICATION.md#using-iam-roles-for-serviceaccounts
We have this working in our environment so I know it's supported - or at least functional.

@bobh66 you have role based auth working with the Terraform provider? I know it works with the AWS provider, but is this supported by the Terraform provider?
Can you share an example terraform provider config?

When we set the SA annotations with the AWS role, there's a controller that injects some env vars into the pod, like for example, with the AWS provider we get:
$ kdpo provider-aws-600a696e071d-8444cb57d4-pkhhl -n crossplane-system | gr 'AWS_'
      AWS_DEFAULT_REGION:           us-west-2
      AWS_REGION:                   us-west-2
      AWS_ROLE_ARN:                 arn:aws:iam::000000000:role/eks-cluster-name
      AWS_WEB_IDENTITY_TOKEN_FILE:  /var/run/secrets/eks.amazonaws.com/serviceaccount/token

maybe we can use something like:
provider "aws" {
  assume_role {
    role_arn                = "$AWS_ROLE_ARN"
    session_name            = "SESSION_NAME"
    web_identity_token_file = "$AWS_WEB_IDENTITY_TOKEN_FILE"
  }
}

to get the TF provider to use that role, is it something like this that you used @bobh66 ?

@luisdavim We put the same type of role annotation on the controllerconfig for terraform so the pod picks up the native AWS ENV and credentials:
apiVersion: pkg.crossplane.io/v1alpha1
kind: ControllerConfig
metadata:
  annotations:
    eks.amazonaws.com/role-arn: arn:aws:iam::accountid:role/provider-terraform

which allows the terraform aws provider to use the default set of credentials.   Then when we need the aws provider to use a different account we can use the assume_role configuration.

I tried that and I get the following error:
cannot get credentials: no extraction handler registered for source: InjectedIdentity

Adding the annotation worked as I can see the AWS_ envs vars injected into the terraform provider pod, but is there something else to it? In the ProviderConfig I'm setting the credentials to:
credentials:
  - filename: aws-creds.ini
    source: InjectedIdentity

This seems to be the method the provider uses: https://github.com/crossplane/crossplane-runtime/blob/master/pkg/resource/providerconfig.go#L89-L102 it doesn't contain a case for xpv1. CredentialsSourceInjectedIdentity

My default providerconfig has:
  spec:
    credentials:
    - filename: aws.json
      source: None

For me, that fails with:
cannot diff (i.e. plan) Terraform configuration: error configuring terraform aws provider: no valid credential sources for terraform aws provider found.

According to the TF docs that should work:

If you're running Terraform on EKS and have configured IAM Roles for Service Accounts (IRSA), Terraform can use the pod's role. This support is based on the underlying AWS_ROLE_ARN and AWS_WEB_IDENTITY_TOKEN_FILE environment variables being automatically set by Kubernetes or manually for advanced usage.

And the vars are there for sure:
$ kex -n crossplane-system provider-terraform-6f2df84a9c2f-965bf8564-c72bb -- env | grep AWS_
AWS_DEFAULT_REGION=us-west-2
AWS_REGION=us-west-2
AWS_ROLE_ARN=arn:aws:iam::0000000:role/role-name
AWS_WEB_IDENTITY_TOKEN_FILE=/var/run/secrets/eks.amazonaws.com/serviceaccount/token

Is there a way to inject extra env vars? Do we need to set AWS_SDK_LOAD_CONFIG=1 ?

I think you also need pooSecurityContext.fsGroup: 2000 in the controller config to allow access to the filesystem credentials:
apiVersion: pkg.crossplane.io/v1alpha1
kind: ControllerConfig
metadata:
  name: terraform
spec:
  args:
  - --debug
  podSecurityContext:
    fsGroup: 2000

That didn't work either, I'll keep looking into it, thanks for the help.
This is how the pod looks like ATM:
apiVersion: v1
kind: Pod
metadata:
  annotations:
    kubernetes.io/psp: eks.privileged
  generateName: provider-terraform-6f2df84a9c2f-5c4876dc6d-
  labels:
    pkg.crossplane.io/provider: provider-terraform
    pkg.crossplane.io/revision: provider-terraform-6f2df84a9c2f
    pod-template-hash: 5c4876dc6d
  name: provider-terraform-6f2df84a9c2f-5c4876dc6d-g8lhd
  namespace: crossplane-system
spec:
  containers:
    - args:
        - --debug
      env:
        - name: POD_NAMESPACE
          valueFrom:
            fieldRef:
              apiVersion: v1
              fieldPath: metadata.namespace
        - name: AWS_SDK_LOAD_CONFIG
          value: "1"
        - name: AWS_DEFAULT_REGION
          value: us-west-2
        - name: AWS_REGION
          value: us-west-2
        - name: AWS_ROLE_ARN
          value: arn:aws:iam::000000000:role/role-name
        - name: AWS_WEB_IDENTITY_TOKEN_FILE
          value: /var/run/secrets/eks.amazonaws.com/serviceaccount/token
      image: crossplane/provider-terraform-controller:v0.2.0
      imagePullPolicy: IfNotPresent
      name: provider-terraform
      ports:
        - containerPort: 8080
          name: metrics
          protocol: TCP
      resources: {}
      securityContext:
        allowPrivilegeEscalation: false
        privileged: false
        runAsGroup: 2000
        runAsNonRoot: true
        runAsUser: 2000
      terminationMessagePath: /dev/termination-log
      terminationMessagePolicy: File
      volumeMounts:
        - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
          name: provider-terraform-6f2df84a9c2f-token-slgl9
          readOnly: true
        - mountPath: /var/run/secrets/eks.amazonaws.com/serviceaccount
          name: aws-iam-token
          readOnly: true
  dnsPolicy: ClusterFirst
  enableServiceLinks: true
  nodeName: ip-10-0-161-181.us-west-2.compute.internal
  preemptionPolicy: PreemptLowerPriority
  priority: 0
  restartPolicy: Always
  schedulerName: default-scheduler
  securityContext:
    fsGroup: 2000
    runAsGroup: 2000
    runAsNonRoot: true
    runAsUser: 2000
  serviceAccount: provider-terraform-6f2df84a9c2f
  serviceAccountName: provider-terraform-6f2df84a9c2f
  terminationGracePeriodSeconds: 30
  tolerations:
    - effect: NoExecute
      key: node.kubernetes.io/not-ready
      operator: Exists
      tolerationSeconds: 300
    - effect: NoExecute
      key: node.kubernetes.io/unreachable
      operator: Exists
      tolerationSeconds: 300
  volumes:
    - name: aws-iam-token
      projected:
        defaultMode: 420
        sources:
          - serviceAccountToken:
              audience: sts.amazonaws.com
              expirationSeconds: 86400
              path: token
    - name: provider-terraform-6f2df84a9c2f-token-slgl9
      secret:
        defaultMode: 420
        secretName: provider-terraform-6f2df84a9c2f-token-slgl9

I got it working, it turned out to be a condition on the trust policy that wasn't matching the k8s SA name....
Thanks for all the help, really appreciate it.
I think this issue can be closed now, maybe we should add this to the docs or the examples as it's normally preferable to run this using a role through injected identity rather than having a secret with the credentials for some IAM user...

I got it working, it turned out to be a condition on the trust policy that wasn't matching the k8s SA name....

That's a very common place to find an error.

maybe we should add this to the docs or the examples as it's normally preferable to run this using a role through injected identity rather than having a secret with the credentials for some IAM user...

Can you push a PR with the updated text?

We should also remove InjectedIdentity from the list of valid options in the CRD since it's not really supported and we have to use None instead in this scenario...

This is definite a bug - can you open a new issue for this and we'll clean it up or if you want to include it in a doc PR that would be fine too.
Thanks!

The bug is here - https://github.com/crossplane-contrib/provider-terraform/blob/158879adf9c028c607fba10c09fb9dcbe009ebfe/apis/v1alpha1/types.go#L44

I've opned https://github.com/crossplane-contrib/provider-terraform/pull/78


grub: Delete loopback device on fallback

During boot if the active menu-entry fails the fallback will also fail with the error-message "device already exists".
This commit ensures we delete the loopback-device if it exists before booting to fallback or recovery.
Part of https://github.com/rancher/elemental/issues/708

Also I think that it requires a bump on cos package to make sure the CI pulls this change. The CI just rebuilds the modified packages without taking into account dependencies IIRC... disappointed

Ah, bumped it now!

Marking this as blocked until after release of new version of elemental-teal.


Ga  Tau tiap ngesave muncul notif itu

Template
Please write your blade template that occurs issues.
Context (Environment)

write your environment

Description

Any other informations

Closed by #372


Fill option

I'm trying to enable only one plugin to remove fill/stroke
To do that svgo has fill: true option, so I'm trying to do
{
  loader: 'svgo-loader',
  options: {
    full: true,
    plugins: [
      {removeUselessStrokeAndFill: true},
    ],
  },
},

But then fill and stroke attributes remain. If I remove full: true those attributes are gone, but then other optimizations are applied as well

This plugin simply passes options to svgo and doesn't process them in any way. Do these options work if you use them with svgo directly, without svgo-loader?


feature: Split this plugin into 2 or support for CodeGPT features

Feature request
I use avante and codegpt, i think it would be nice to either have 2 plugins where avante depends on codegpt for easier maintenance or at least have codegpt featureset
Motivation
These plugins are very similar, most of the code is already there. I just think this is a right approach
Other
No response

What is CodeGPT lmao

https://github.com/dpayne/CodeGPT.nvim

I'm confused, this seems out of scope lol


Display a confused error dialog after inputting a large message for one queue

Storage Explorer Version: 1.4.0
Platform/OS Version: Windows 10/MacOS High Sierra/ Linux Ubuntu 16.04
Architecture: ia32/x64
Build Number: 20180724.5
Commit: 3947e25b
Regression From: Not a Regression
Steps to Reproduce:

Go to Subscription -> Storage Accounts.
Create a new queue -> Add a large message for it -> Check the popped error dialog after saving the message.

Expected Experience:
Display the limit of inputting message size like Visual Studio.

Actual Experience:
Display a confused error dialog after inputting a large message.

Once again, we're avoiding interpreting server errors. I think this message is fairly clear about the problem.


bpftrace not picking generic headers

I am currently using ubuntu 20 distro with linux kernel version 5.15.
I have installed latest kernel headers as well as generic headers, and then installed bpftrace from package manager.
However, i see that bpftrace is picking up latest headers and failing with below output -
bpftrace -I /lib/modules/linux-headers-5.4.0-165/include/ tcpconnect.bt
/lib/modules/5.15.0-1045/build/arch/x86/include/asm/processor.h:549:17: warning: taking address of packed member 'sp0' of class or structure 'x86_hw_tss' may result in an unaligned pointer value [-Waddress-of-packed-member]
/lib/modules/5.15.0-1045/build/include/linux/cgroup-defs.h:509:16: warning: field 'cgrp' with variable sized type 'struct cgroup' not at the end of a struct or class is a GNU extension [-Wgnu-variable-sized-type-not-at-end]
/lib/modules/5.15.0-1045/build/include/net/flow_offload.h:324:4: warning: multi-character character constant [-Wmultichar]
/lib/modules/5.15.0-1045/build/include/net/flow_offload.h:324:4: warning: character constant too long for its type
/lib/modules/5.15.0-1045/build/include/net/flow_offload.h:324:4: error: array initializer must be an initializer list or string literal
/lib/modules/5.15.0-1045/build/include/net/flow_offload.h:324:4: error: expected ';' at end of declaration
/lib/modules/5.15.0-1045/build/include/net/flow_offload.h:359:3: warning: multi-character character constant [-Wmultichar]
/lib/modules/5.15.0-1045/build/include/net/flow_offload.h:359:3: warning: character constant too long for its type
/lib/modules/5.15.0-1045/build/include/net/flow_offload.h:359:3: error: array initializer must be an initializer list or string literal
/lib/modules/5.15.0-1045/build/include/net/flow_offload.h:359:3: error: expected ';' at end of declaration
/lib/modules/5.15.0-1045/build/include/net/flow_offload.h:363:3: warning: multi-character character constant [-Wmultichar]
/lib/modules/5.15.0-1045/build/include/net/flow_offload.h:363:3: warning: character constant too long for its type
/lib/modules/5.15.0-1045/build/include/net/flow_offload.h:363:3: error: array initializer must be an initializer list or string literal
/lib/modules/5.15.0-1045/build/include/net/flow_offload.h:363:3: error: expected ';' at end of declaration
/lib/modules/5.15.0-1045/build/include/net/inet_sock.h:64:24: warning: field 'opt' with variable sized type 'struct ip_options_rcu' not at the end of a struct or class is a GNU extension [-Wgnu-variable-sized-type-not-at-end]
/lib/modules/5.15.0-1045/build/include/net/inet_connection_sock.h:209:3: warning: multi-character character constant [-Wmultichar]
/lib/modules/5.15.0-1045/build/include/net/inet_connection_sock.h:209:3: warning: character constant too long for its type
/lib/modules/5.15.0-1045/build/include/net/inet_connection_sock.h:209:3: warning: incompatible integer to pointer conversion initializing 'const char *' with an expression of type 'int' [-Wint-conversion]
/lib/modules/5.15.0-1045/build/include/net/inet_connection_sock.h:223:3: warning: multi-character character constant [-Wmultichar]
/lib/modules/5.15.0-1045/build/include/net/inet_connection_sock.h:223:3: warning: character constant too long for its type
/lib/modules/5.15.0-1045/build/include/net/inet_connection_sock.h:223:3: warning: incompatible integer to pointer conversion initializing 'const char *' with an expression of type 'int' [-Wint-conversion]
/lib/modules/5.15.0-1045/build/include/net/inet_connection_sock.h:238:3: warning: multi-character character constant [-Wmultichar]
/lib/modules/5.15.0-1045/build/include/net/inet_connection_sock.h:238:3: warning: character constant too long for its type
/lib/modules/5.15.0-1045/build/include/net/inet_connection_sock.h:238:3: warning: incompatible integer to pointer conversion initializing 'const char *' with an expression of type 'int' [-Wint-conversion]
prachi@prachi-test-rg7-ub20x:~$ sudo bpftrace -I /lib/modules/linux-headers-5.4.0-165/build/include/ t
race_outbound_connections.bt
/lib/modules/5.15.0-1045/build/arch/x86/include/asm/processor.h:549:17: warning: taking address of packed member 'sp0' of class or structure 'x86_hw_tss' may result in an unaligned pointer value [-Waddress-of-packed-member]
/lib/modules/5.15.0-1045/build/include/linux/cgroup-defs.h:509:16: warning: field 'cgrp' with variable sized type 'struct cgroup' not at the end of a struct or class is a GNU extension [-Wgnu-variable-sized-type-not-at-end]
/lib/modules/5.15.0-1045/build/include/net/flow_offload.h:324:4: warning: multi-character character constant [-Wmultichar]
/lib/modules/5.15.0-1045/build/include/net/flow_offload.h:324:4: warning: character constant too long for its type
/lib/modules/5.15.0-1045/build/include/net/flow_offload.h:324:4: error: array initializer must be an initializer list or string literal
/lib/modules/5.15.0-1045/build/include/net/flow_offload.h:324:4: error: expected ';' at end of declaration
/lib/modules/5.15.0-1045/build/include/net/flow_offload.h:359:3: warning: multi-character character constant [-Wmultichar]
/lib/modules/5.15.0-1045/build/include/net/flow_offload.h:359:3: warning: character constant too long for its type
/lib/modules/5.15.0-1045/build/include/net/flow_offload.h:359:3: error: array initializer must be an initializer list or string literal
/lib/modules/5.15.0-1045/build/include/net/flow_offload.h:359:3: error: expected ';' at end of declaration
/lib/modules/5.15.0-1045/build/include/net/flow_offload.h:363:3: warning: multi-character character constant [-Wmultichar]
/lib/modules/5.15.0-1045/build/include/net/flow_offload.h:363:3: warning: character constant too long for its type
/lib/modules/5.15.0-1045/build/include/net/flow_offload.h:363:3: error: array initializer must be an initializer list or string literal
/lib/modules/5.15.0-1045/build/include/net/flow_offload.h:363:3: error: expected ';' at end of declaration
/lib/modules/5.15.0-1045/build/include/net/inet_sock.h:64:24: warning: field 'opt' with variable sized type 'struct ip_options_rcu' not at the end of a struct or class is a GNU extension [-Wgnu-variable-sized-type-not-at-end]
/lib/modules/5.15.0-1045/build/include/net/inet_connection_sock.h:209:3: warning: multi-character character constant [-Wmultichar]
/lib/modules/5.15.0-1045/build/include/net/inet_connection_sock.h:209:3: warning: character constant too long for its type
/lib/modules/5.15.0-1045/build/include/net/inet_connection_sock.h:209:3: warning: incompatible integer to pointer conversion initializing 'const char *' with an expression of type 'int' [-Wint-conversion]
/lib/modules/5.15.0-1045/build/include/net/inet_connection_sock.h:223:3: warning: multi-character character constant [-Wmultichar]
/lib/modules/5.15.0-1045/build/include/net/inet_connection_sock.h:223:3: warning: character constant too long for its type
/lib/modules/5.15.0-1045/build/include/net/inet_connection_sock.h:223:3: warning: incompatible integer to pointer conversion initializing 'const char *' with an expression of type 'int' [-Wint-conversion]
/lib/modules/5.15.0-1045/build/include/net/inet_connection_sock.h:238:3: warning: multi-character character constant [-Wmultichar]
/lib/modules/5.15.0-1045/build/include/net/inet_connection_sock.h:238:3: warning: character constant too long for its type
/lib/modules/5.15.0-1045/build/include/net/inet_connection_sock.h:238:3: warning: incompatible integer to pointer conversion initializing 'const char *' with an expression of type 'int' [-Wint-conversion]

I was able to get it working in fedora and ubuntu 22 without any changes. Any guidance or help would be appreciated. Thanks

Can you give us the output of bpftrace --info?
Also I've reformated the issue description by using block code snippets (three backticks instead of one).

Which version of bpftrace are you using?

sudo bpftrace --version
bpftrace v0.9.4
Due to some constraints, we want to use the bpftrace from the linux package manager, but facing this issue in one of the distros.

Well, v0.9.4 is over 3.5 years old and it's really possible that it contains a bug causing this. I'd recommend upgrading to a newer bpftrace but that's pretty much everything that we can do at the moment.
I'm closing the issue, if you manage to replicate the bug on the latest bpftrace, please reopen it.

Same issue with Ubuntu 20.04.6 LTS. I will attempt at installing a newer version.


ContainerApps - list job executions filter usage

Package Name: azure.mgmt.appcontainers
Package Version: 3.0.0
Operating System: Windows 10
Python Version: 3.10

Describe the question
I'm trying to retrieve only failed container apps job's executions but I can't understand how the filter string should work nor I found any documentation that describes the behavior. What is the correct way to use the filter string?
There is another way to filter the retrieved executions?
To Reproduce
Steps to reproduce the behavior:

client = ContainerAppsAPIClient(credential=DefaultAzureCredential(exclude_shared_token_cache_credential=True),                                subscription_id="XXXXXXX")
client.jobs_executions.list(resource_group_name="XXXXXX", job_name="XXXXX", filter="status=Failed")
exception:

azure.core.exceptions.HttpResponseError: Operation returned an invalid status 'Internal Server Error'
Content: {"error":{"code":"InternalServerError","message":"Internal server error occurred. correlation ID: 15a04c35-1fe7-424a-a308-4a14c790a185","details":null,"target":null,"additionalInfo":null}}

Expected behavior
A clear description of what the format of the filter string is expected to be or a more descriptive error.

Hey, sorry that you are having issues filtering. I'm not familiar with the service or what precisely is the expected format, but if it's like other services, it might expect the OData expression syntax. (Example documentation for search: https://learn.microsoft.com/en-us/azure/search/search-query-odata-filter). @msyyc can correct me if I am wrong.
In any case, azure-mgmt-appcontainers could still benefit from improved docstrings for the filter param and/or some samples demonstrating using it.

Hi @pvaneck, thanks for the suggestion. I did some try but it seems that is not working
I'll try something else in the next days 😄 thanks anyway

Hi @ChenxiJiang333
it was one of my first attempts but I got always a 500 Internal Server Error, tried again a few minutes ago but nothing changed

Turn to service team for support https://github.com/Azure/azure-rest-api-specs/issues/26257.

Closing and please use https://github.com/Azure/azure-rest-api-specs/issues/26257 to track the issue.


Add table gcp_cost_usage

References
Add any related links that will help us understand the resource, including vendor documentation, related GitHub issues, and Go SDK documentation.

Closing this issue since it is not on priority. Similar issue reference - https://github.com/turbot/steampipe-plugin-gcp/issues/354


BFF test cleanup

Scope of changes
This cleans up some of the HTTP response checks in the BFF tests with a custom assertion.
Type of change

[ ] bug fix
[ ] new feature
[ ] documentation
[x] cleanup

Acceptance criteria
Tests still pass and the new assertion is useful.
Author checklist

[x] I have manually tested the change and/or added automation in the form of unit tests or integration tests
[ ]  I have updated the dependencies list
[ ]  I have recompiled and included new protocol buffers to reflect changes I made
[ ]  I have added new test fixtures as needed to support added tests
[x]   Check this box if a reviewer can merge this pull request after approval (leave it unchecked if you want to do it yourself)
[x]  I have moved the associated Shortcut story to "Ready for Review"

Reviewer(s) checklist

[ ] Any new user-facing content that has been added for this PR has been QA'ed to ensure correct grammar, spelling, and understandability.

Codecov Report

Merging #706 (c447c0c) into main (6f8b137) will increase coverage by 0.03%.
The diff coverage is n/a.

:exclamation: Current head c447c0c differs from pull request most recent head 0669a08. Consider uploading reports for the commit 0669a08 to get more accurate results

@@            Coverage Diff             @@
##             main     #706      +/-   ##
==========================================
+ Coverage   43.56%   43.59%   +0.03%
==========================================
  Files         584      580       -4
  Lines       17556    17476      -80
  Branches     1329     1279      -50
==========================================
- Hits         7648     7619      -29
+ Misses       8719     8664      -55
- Partials     1189     1193       +4

Impacted Files
Coverage Δ

...b/gds-user-ui/src/components/Regulations/index.tsx
11.11% <0.00%> (-46.04%)
:arrow_down:

web/gds-user-ui/src/hooks/useAuth.ts
3.33% <0.00%> (-39.53%)
:arrow_down:

...i/src/components/CertificateReview/TrixoReview.tsx
64.70% <0.00%> (-35.30%)
:arrow_down:

...ds-user-ui/src/components/Footer/LandingFooter.tsx
66.66% <0.00%> (-33.34%)
:arrow_down:

...hub.com/trisacrypto/directory/pkg/sectigo/creds.go
44.68% <0.00%> (-22.35%)
:arrow_down:

web/gds-user-ui/src/hooks/useCustomAuth0.ts
1.69% <0.00%> (-22.04%)
:arrow_down:

...rc/components/CertificateReview/ContactsReview.tsx
81.81% <0.00%> (-18.19%)
:arrow_down:

...components/CertificateReview/LegalPersonReview.tsx
81.81% <0.00%> (-18.19%)
:arrow_down:

...omponents/CertificateReview/BasicDetailsReview.tsx
81.81% <0.00%> (-18.19%)
:arrow_down:

web/gds-user-ui/src/application/config/index.ts
53.33% <0.00%> (-16.67%)
:arrow_down:

... and 93 more

Help us with your feedback. Take ten seconds to tell us how you rate us. Have a feature suggestion? Share it here.


Show breadcrumbs on non live taxons

When looking at a taxon, it's useful to see the breadcrumbs regardless
of the phase it's in as without the breadcrumbs it's hard to navigate
up the taxonomy.
Therefore, apply the restriction regarding the phase only if the
content item isn't a taxon.
Before

After

The conditional isn't necessary, you can just remove the phase_is_live? stuff. This class is only used on topic pages and taxonomy-based finders, where we'd want this behaviour.

Ok, I think I follow. I've updated the changes to remove the phase stuff.


Fix timing attack

The PR introduces a simple fix for the fork choice timing attack presented in this paper: https://arxiv.org/abs/2009.04987
By making the attestation production time unpredictable to the attacker & unique for each validator, we make it harder for an attacker to separately influence the fork choice of disjoint subsets of validators by sending well-timed messages to each set, such that these messages are not gossiped with the other subset of validators before attestations for the slot are produced.

Has there been any consideration to the impact this could have on attestations going "too early" and missing the current block?
From local measurements, at current around 90% of blocks are received by my local validator before the 4 second mark.  However, only around 60% of blocks are received before the 2 second mark.  Obviously we'd expect a spread of validators across the 2-6 second range, but it does appear that this will reduce the % of validator clients that will use the block of the current slot as in their attestation.

Tuning the numbers according to real-world data was the motivation for converting the constants to configuration parameters :smiley:
Given your observations about block timings, it makes sense to change the attestation production time to 4 ± 1 sec from the start of the slot.
@mcdee Can you share the collected data so we can analyze this more?

blockdelay.txt
Here's a dump of the last ~7.5K blocks against one of my validator clients, standard prometheus histogram.

Thanks for sharing! Looks like ~75% blocks are seen within 3 seconds and ~85% are seen within 4 seconds of the slot start, so 4 ± 1 sec is a reasonable configuration.

I'd agree that this could make it harder for attacks, but I don't think it's a substitute for deeper changes (eg. my "the proposer has 1/4 slot weight" proposal) that provide liveness in the standard model (attacker chooses the latency of every message within the bounds [0, delta]).
The attack under this proposal (ie. this PR) would be: the attacker connects to every node (eg. by connecting to the network with a huge number of nodes and just waiting until they get included in the network and they make up 80%+ of all nodes in the network), and then splits the network 50/50 by broadcasting a set of attestations at exactly the time window when the slot_timing_entropy is right in the middle of its probability distribution. The attacker would have better connections to all the nodes than the nodes have to each other, so them accomplishing this is well within the realm of possibility.

The goal of the PR is to provide some satisfactory mitigation of the attack in v1.0 of the spec, while having relatively low code impact and low risk of the proposed changes.  In addition, this fix is definitely backwards-compatible.
Since the attack is feasible & has become well-known by now, it would be a bad move to go ahead with v1.0 without any fixes.

I'm curious on how valuable this fix is (e.g., how weaker the network model where the liveness is guaranteed becomes, how much the fault tolerance changes) compared to the additional complexity of the implementation, the effect on the efficiency of the attestation aggregation, and the risk of unknown side effect (for instance, this fix will affect the analysis of the incentive compatibility of the timing of attesting.).

These messages are only useful to the attacker when they are note gossiped between validators in A and B.

The attacker's attestations are useful even if some portion of validators receive the attackers' attestations from the other subset and switch the chain to vote for. The difference of the two target chains' scores at the end of the current slot is |(the validators in A who switched) - (the validators in B who switched)|. If this difference is smaller than the number of the attacker's attestations in the next slot, the attacker can make the tie again. (Although in the original attack in the Ebb-and-Flow paper the attacker uses a few attestations per slot, the attacker can have much more attestations per slot proportionally to its stake.)

Let min_network_latency be the minimum network latency between validators in A and B

From the above observation, to consider the minimum network latency between the two subsets is not enough. We need to precisely analyze how many attacker's attestations are exchanged within the time window and how large the difference of the scores becomes as a result.

closing this. likely to go another path


chore(scanner): remove unused variables

Description
Merged https://github.com/stackrox/stackrox/pull/8614 without realizing these variables are now unused and may be removed.
Checklist

[x] Investigated and inspected CI test results
~[ ] Unit test and regression tests added~
~[ ] Evaluated and added CHANGELOG entry if required~
~[ ] Determined and documented upgrade steps~
~[ ] Documented user facing changes (create PR based on openshift/openshift-docs and merge into rhacs-docs)~

Testing Performed
Here I tell how I validated my change
CI
Reminder for reviewers
In addition to reviewing code here, reviewers must also review testing and request further testing in case the
performed one does not seem sufficient. As a reviewer, you must not approve the change until you understand the
performed testing and you are satisfied with it.

/retest-required

/retest


PHP support

I would love support for php and usage of php-fpm.
could look at https://github.com/adsr/phpspy for some idéas

FYI as of now, the agent has some minimal support with PHP 8+ and its JIT compiler, here is an example: https://github.com/parca-dev/parca-demo/tree/main/php
I am not a PHP user, so I am not sure how much would need to be adapted for the same to work with FPM, insights and docs welcome :slightly_smiling_face:

If anyone comes across this who has Laravel experience, it'd be great to try a demo example with Laravel and see how far we get there. Contributions are welcome.


Empty message with media implementation

Description
This PR added the possibility to post an empty message with medias without errors.
Closes #110
Checklist

[x] Targeted PR against correct branch.
[x] Linked to Github issue with discussion and accepted design OR link to spec that describes this work.
[x] Wrote unit tests.
[x] Wrote integration tests (simulation & CLI).
[x] Updated the documentation.
[x] Added an entry to the CHANGELOG.md file.
[x] Re-reviewed Files changed in the Github PR explorer.

Codecov Report

Merging #113 into master will not change coverage.
The diff coverage is 100%.

@@          Coverage Diff           @@
##           master    #113   +/-   ##
======================================
  Coverage    82.4%   82.4%
======================================
  Files          32      32
  Lines        1478    1478
======================================
  Hits         1218    1218
  Misses        231     231
  Partials       29      29

Impacted Files
Coverage Δ

x/posts/internal/types/msgs.go
91.89% <100%> (ø)
:arrow_up:

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update 740ef9c...3bdc621. Read the comment docs.


Add Windows installation

Partially addresses https://github.com/ignitionrobotics/docs/issues/117
Should I target sdf10 or master? Let me know if I need to retarget.
Is ignition-tools an optional dependency? I saw a warning in CMake but didn’t see it in CMakeLists.txt.
I don't have permissions in this repo to request reviewers @chapulina @JShep1

Codecov Report

Merging #451 (0d18c48) into sdf10 (7dbf121) will not change coverage.
The diff coverage is n/a.

@@           Coverage Diff           @@
##            sdf10     #451   +/-   ##
=======================================
  Coverage   87.54%   87.54%
=======================================
  Files          61       61
  Lines        9357     9357
=======================================
  Hits         8192     8192
  Misses       1165     1165

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update 7dbf121...0d18c48. Read the comment docs.

Do we want to add Windows binary install also?  The package name would be libsdformat<#>

Do we want to add Windows binary install also?  The package name would be libsdformat<#>

Closing in favor of #463

Closing in favor of #463


No need to use user_id in recovery and settings controller

Q
A

Is bugfix?
no

New feature?
yes

Breaks BC?
no

Fixed issues
#926

Good one. Could you re-open your PR here: https://github.com/dabilite/yii2-user/pulls ? Currently we have a fork of dektrium/yii2-user.

Help is needed to review this.
@SamMousa @philippfrenzel @thyseus @bscheshirwork @tsdogs


How can I get more information to help me deploy tapir?

When I try to upload the provider, it returns {"errorId":"41ede21f-72c9-4df3-a33b-e9f75eea3965","errors":[{"message":"An unexpected error has occurred. Please raise an issue if you think this is a bug."}]
But based on the existing documents, I haven't been able to find out where the problem lies?
Console output of tapir：

No further information...

Thanks for reporting! Could you please share further insights?
Ideally the request you made and the folder structure of your provider, if you tried to push a custom build one.

Hello paco!
Can you help me answer this question?
I got this error while uploading.
2023-12-25 10:10:16,416 SEVERE [api.map.exc.ThrowableMapper] (executor-thread-3) errorId e8cc5635-4546-4f64-8e88-b816564585a2: java.lang.RuntimeException: java.nio.file.NoSuchFileException: /tmp/13909245068916160045/archive/terraform-provider-yunti_0.0.2_darwin_arm64.zip
I entered the container according to the path and found that the file looked like this:

Is there something wrong with my operation?
The directory structure I uploaded is like this:

Commands used:
curl -XPOST --fail-with-body -H 'x-api-key: xxxxxxxx' -F<EMAIL_ADDRESS>"https://example.com/terraform/providers/v1/fc/yunti/v0.0.2"

Assuming that the archive size is 318804492 bytes (~319MB), did you already set API_MAX_BODY_SIZE to a custom value? Because default is 100MB.

Hello, I have set API_MAX_BODY_SIZE to 1GB, but I'm still encountering the same issue even though the file size being uploaded this time is around 50MB.
-e API_MAX_BODY_SIZE=1024M

Commands used:
curl -XPOST --fail-with-body -H 'x-api-key: aZAk6Y6Tu8PhLmcYZnaUN7M7' -F<EMAIL_ADDRESS>"https://ccb1-14-22-11-165.ngrok-free.app/terraform/providers/v1/fc/yunti/v0.0.2"
Run:
docker run -d --name tapir   -p 8088:8080
-e API_MAX_BODY_SIZE=1024M
-e BACKEND_CONFIG=elasticsearch
-e BACKEND_ELASTICSEARCH_HOST=xxxx:9200
 -e STORAGE_CONFIG=host
-e REGISTRY_HOSTNAME=localhost
 -e REGISTRY_PORT=443
-e REGISTRY_GPG_KEYS_0__ID=xxxx
-e REGISTRY_GPG_KEYS_0__ASCII_ARMOR=xxxxx
-e AUTH_ENDPOINT=http://xxxxx:8080/auth/realms/terraform
-e AUTH_CLIENT_ID=registry
pacovk/tapir

Ah I think the docs could be more expressive, for the STORAGE_CONFIG.
You set STORAGE_CONFIG=host which is not valid, to use local volume please set to STORAGE_CONFIG=local
Let me know if that fixes the issue, I will extend the startup script to also check for the storage config and print a better Error message in case it is invalid.

Thank you for your reply.
Oh, sorry for the mistake. However, I have already set STORAGE_CONFIG to local, but the issue still persists. Are there any other directions for troubleshooting?
 docker run -d --name tapir   -p 8088:8080
-e API_MAX_BODY_SIZE=400M
-e BACKEND_CONFIG=elasticsearch
-e BACKEND_ELASTICSEARCH_HOST=xxx:9200
-e STORAGE_CONFIG=local
-e REGISTRY_HOSTNAME=localhost
-e REGISTRY_PORT=443
-e REGISTRY_GPG_KEYS_0__ID=xxx
-e REGISTRY_GPG_KEYS_0__ASCII_ARMOR=xxx
-e AUTH_ENDPOINT=http://xxxx:8080/auth/realms/terraform
-e AUTH_CLIENT_ID=registry
pacovk/tapir

Commands used:
$ curl -XPOST  -H 'x-api-key:aZAk6Y6Tu8PhLmcYZnaUN7M7' --fail-with-body  -F<EMAIL_ADDRESS>https://examlpe.cn/terraform/providers/v1/fc/yunti/v0.0.2
curl: (22) The requested URL returned error: 500
{"errorId":"53b38893-a350-4027-b1ba-81a3a9894435","errors":[{"message":"An unexpected error has occurred. Please raise an issue if you think this is a bug."}]

My file:

The backend files are:

I will try to reproduce and investigate a bit further. Thanks for the comprehensive report👌

@WeiMengXS  i tried to write a reproducer with the following:
ℹ For Keycloak i used my dev setup, but that should not have any influence, since you are already able to login and create the deploykey.
ℹ  I also did no setup any GPG_ things because you wrote the error occures during upload of the provider. I omitted any setting that is relevant for downloading providers to keep it simple
docker-compose.yml
version: '3'
services:

  tapir:
    image: pacovk/tapir
    ports:
      - "8088:8080"
    environment:
      API_MAX_BODY_SIZE: 400M
      BACKEND_CONFIG: elasticsearch
      BACKEND_ELASTICSEARCH_HOST: opensearch-node1:9200
      STORAGE_CONFIG: local
      AUTH_ENDPOINT: http://keycloak:8080/realms/tapir

  keycloak:
    image: quay.io/keycloak/keycloak:22.0
    volumes:
      - /etc/localtime:/etc/localtime:ro
      - ./dev/scripts/keycloak:/opt/keycloak/data/import
    ports:
      - "8080:8080"
    command:
      - start-dev --import-realm
    environment:
      - KEYCLOAK_ADMIN=admin
      - KEYCLOAK_ADMIN_PASSWORD=admin

  opensearch-node1:
    image: opensearchproject/opensearch
    container_name: opensearch-node1
    environment:
      - cluster.name=opensearch-cluster # Name the cluster
      - plugins.security.disabled=true
      - node.name=opensearch-node1 # Name the node that will run in this container
      - discovery.type=single-node
      - bootstrap.memory_lock=true # Disable JVM heap memory swapping
      - "OPENSEARCH_JAVA_OPTS=-Xms512m -Xmx512m" # Set min and max JVM heap sizes to at least 50% of system RAM
    ulimits:
      memlock:
        soft: -1 # Set memlock to unlimited (no soft or hard limit)
        hard: -1
      nofile:
        soft: 65536 # Maximum number of open files for the opensearch user - set to at least 65536
        hard: 65536
    ports:
      - "9200:9200" # REST API
      - "9600:9600" # Performance Analyzer

I used a fake provider as demo with similar folder structure as you described
I did then the following:

create a deploykey via Tapir for the provider, where namespace=fc and type=yunti
issue a upload command to Tapir via curl curl -XPOST  -H 'x-api-key:tM6pX3IlTBROmLAJk8Nm4Fhy' --fail-with-body  -F<EMAIL_ADDRESS>http://localhost:8088/terraform/providers/v1/fc/yunti/v0.0.2
No error...

I used the following fake provider source:
Archiv.zip
How to proceed?

Increase the log level by setting envinroment variable QUARKUS_LOG_LEVEL=debug
Please check if you can upload the "fake provider" i used here.
If not, please also check if you have any extra setting for Tapir set in your container, apart from those you already posted.
For further investigation, please try to setup a local Tapir instance from the docker compose reference aforementioned and try to upload your provider there (mind without SSL and GPG you wont be able to download but it should at least work with the upload
Keep me posted here, in case i can further assist i am happy to do so

Thank you very much for this detailed guidance. I have been able to successfully deploy and publish my provider!
However, I encountered a new issue during 'terraform init'.
`tianqiaoshuoshurendeMacBook-Pro:tencentcloud-test tianqiaoshuoshuren$ terraform init
Initializing the backend...
Initializing provider plugins...

Finding latest version of examlpe.com/fc/yunti...
╷
│ Error: Failed to install provider
│
│ Error while installing xxx/fc/yunti v0.0.2: could not query provider registry for xxxx/fc/yunti: failed to retrieve authentication checksums for provider: 400 Bad
│ Request returned from xxxxx:8080
╵
`
There seems to be some problem with my keycloak configuration. I am debugging...

Initializing the backend...
Initializing provider plugins...

Finding latest version of xxx.com.ngrok-free.app/fc/yunti...
Installing xxx.com/fc/yunti v0.0.2...
╷
│ Error: Failed to install provider
│
│ Error while installing xxx.com/fc/yunti v0.0.2: checksum list has no SHA-256 hash for "terraform-provider-yunti_0.0.2_darwin_arm64.zip"
╵
But I encountered this problem. I debugged and found that it seemed to be an auth problem with keylocak.

I think that is more about the provider artefact. You strictly have to fulfill the requirements described in the official Hashicorp docs
In your case the SHASUM file might not be correct. Read here if you try to manually prepare the release. The GPG key used for signing must be the same passed to Tapir!

Hashicorp 官方文档I am quite familiar with it now, it seems that when TF is accessing the backend, it is redirected to the Keycloak's verification URI. Do you have any reference for setting up Keycloak? Because I am not very familiar with Keycloak itself, This is a bit confusing for me.

You found a bug with the local storage backend, I will try to fix it soon. The storage api needs to be accessible without authentication to allow read from the registry! No issue with Keycloak. Thanks for sharing this!

When is it expected to be restored? I'm very interested in this project!

I already fixed it and will create a release probably today, latest tomorow.

Here we go 0.6.2 contains the fix https://github.com/PacoVK/tapir/releases/tag/0.6.2

I have verified it and there seems to be no issue. Thank you very much.
However, it seems that there could be room for improvement in displaying it on the frontend,I'm not sure if there is a misconfiguration somewhere.

If this is a domain name, should the 'https://' prefix actually be removed? In Terraform, it is expected to follow the format [hostname/][namespace/]name.
 The "source" attribute must be in the format "[hostname/][namespace/]name"

Good point, I'll add that on the list. Actually it makes no difference but without the protocol it follows the naming of hashicorp in a consistent way 👌
Thanks again for the valuable feedback!

@all-contributors please add @WeiMengXS  for bug, ideas


Word list

The NYT changed the order of the daily words, and now this program is incorrect. This is described in this Reddit post: https://www.reddit.com/r/wordle/comments/trzu4i/my_wordle_today_is_different_from_everyones/

Riight. So I just spent 3 hours trying to get the current word list and implenting it into a .8xv. I did that very successfully. However, the .8xv file is weird. I put it on the calculator and its still wrong. And for some reason, some words I type that are in the word list I created like brick show up as not in the word list on the calculator. Please fix this. I have given up.

that is some real dedication to Wordle on a calculator my man

I can't figure this out. I made the word list. It can be easily converted to a .8xv. However for some reason, the word list isn't fully registering. Every word list that either is or comes after BLAES is counted as in the list on the calculator. But for some reason, all the words before BLAES aren't counted. I have no idea why. I had no calculator coding experience until yesterday, but even then I still have no idea what I am doing wrong. Here is the new word list in .txt and .8xv form. Note: I couldn't upload the .8xv directly so it's in a zip file.
WORDS.txt
WORDS.zip

The word list 8xv is the list of all possible words you can guess in alphabetical order. It uses binary search to find words, so it needs to be in alphabetical order for it to work. Additionally, the list of puzzle solutions is stored in the program itself, not the word list, so I'll need to release an update for it.

Ok cool.


only merge specific kind of summary

Currently, I need to gitve tf.summary.merge an input arg to specify what summaries to merge.
But it will be more convinient if there is a function called tf.summary.merge_scalar / tf.summary.merge_image cause scalars and images are often logged with different frequencies, and they need to be merged seperately.

Nagging Awaiting TensorFlower: It has been 14 days with no activity and the awaiting tensorflower label was assigned. Please update the label and/or status accordingly.

Nagging Awaiting TensorFlower: It has been 14 days with no activity and the awaiting tensorflower label was assigned. Please update the label and/or status accordingly.

Nagging Awaiting TensorFlower: It has been 14 days with no activity and the awaiting tensorflower label was assigned. Please update the label and/or status accordingly.

@jart Feature request possibly related to tensorboard.  Thoughts?

Nagging Assignee @jart: It has been 14 days with no activity and this issue has an assignee. Please update the label and/or status accordingly.

I agree that the tf.summary API has room for improvement regarding convenience. We're trying to move towards tf.contrib.summary and eventually tb.summary at this time. We sadly don't have resources to do feature work on this older API at this time.


Feature proxy server

Let's use facebook.com as an example,facebook.com returns more than 2000 registered domains, and Meta owns almost every one of them; when you use the phash and screenshot option, the typosquatting domain will redirect to the original domain, so if you run the scan repeatedly, Facebook will block your ip, and report as a malicious one.
To prevent this kind of situation, it would be great if you could run the scan through a proxy server.

Pull the most recent code. Then set your environment variables $http_proxy $https_proxy and test the tool. Let me know if that works.


Task 309-311: RACE

task309_RACE_answer_generation  -->  Given an article, a question and four options; provide the correct answer for the question based on the article.
task310_RACE_classification  -->  Given an article, a question and four options; provide the incorrect answer for the question based on the article.
task311_RACE_question_generation  -->  Generate a question based on the given article and an answer.
Please review.

@nrjvarshney can you review these tasks?

@nrjvarshney can you review these tasks?

@nrjvarshney, pinging in this thread to check if you have seen my earlier comment?

@nrjvarshney can you review these tasks?

@nrjvarshney, pinging in this thread to check if you have seen my earlier comment?

@danyaljj or @swarooprm please assign this PR to someone else.

@Maitreyapatel, wondering if you can help review this PR?

@Mirzyaaliii, looks good overall, some comments:

Task309: you're given a article, a question or fill-in-the-blank--> you are given an article, a question which often contains a blank. In the definition, mention to generate only the option names and not the exact answer. Ask not to generate anything else apart from A, B, C, D. Also, optionally specify that, only one of the 4 options are correct.
Task 310- same changes as 309 in definition.
Task 311- do you have multiple questions per a single input? If yes, append them all and make it a list in instance outputs (output of positive example will still be a single question). Multiple questions improve the reliability of the evaluation. I also have a problem when you say "task is to generate the question (which can be in form of fill-in-the-blank also) for this answer based on the given article." Don't give options because if someone generates fill-in-the-blank question and we don't have that in our gold annotation, the evaluation will be incorrect. I would suggest splitting this in to 2 tasks (i) ask to generate a question (by default question does not mean fill in the blank) (ii)ask to generate fill in the blank question.
Some minor typos: you're given a article and an answer. You task is to generate the question (which can be in form of fill-in-the-blank also) for this answer based on the given article--->you are given an article and an answer. Your task is to generate a question for the provided answer based on the given article.

If you want, you can create 2 more tasks (i) generate correct answer (without options) and (ii) generate incorrect answer (without options) similar to task003 and task004.
Also, in all these tasks. I assume labels are balanced.

Thank you very much for your comments @swarooprm.

In Task 309 and 310, changes are done according to suggestions.
From task 311, as suggested I separate the task for the question and fill-in-the-blank question. Please check #309 for another task.

Let me know if any other changes are required.


Update to Rails 6.1 - DO NOT MERGE YET

This commit begins an update from Rails 6.0.X -> 6.1.X.
This requires a large number of simultaneous library updates
(some took a while to identify).
This does not complete the update.
The biggest problem is the many error reports of this form:

Error:
ProjectsControllerTest#test_should_fail_to_create_project_with_duplicate_repo:
ActiveRecord::StatementInvalid: PG::UndefinedColumn:
ERROR:  column users.email does not exist

It's true that there is no users.email column in the database,
but that's because it's a virtual column that is supposed to be
managed by the attr_encrypted gem.
Since it's not being handled, it appears that this gem does not
work with ActiveRecord 6.1. I went to check out its status, and they
are looking for new maintainers:
https://github.com/attr-encrypted/attr_encrypted/issues/379
All options are not the desired ones here.
In addition, there are at least two kinds of deprecation warnings
which will need to be addressed (probably many times):

DEPRECATION WARNING: action_view.raise_on_missing_translations is deprecated and will be removed in Rails 6.2. Set i18n.raise_on_missing_translations instead. Note that this new setting also affects how missing translations are handled in controllers. (called from call at /home/dwheeler/best-practices-badge/config/initializers/canonical_trailing_slash.rb:30)

DEPRECATION WARNING: Rendering actions with '.' in the name is deprecated: static_pages/error_404.html.erb (called from error_404 at /home/dwheeler/best-practices-badge/app/controllers/static_pages_controller.rb:46)

Signed-off-by: David A. Wheeler<EMAIL_ADDRESS>

Do not merge yet. I just wanted to show public progress. There are some nontrivial problems that need to be addressed.

@jdossett (and anyone else) - good news, it's a little awkward, but a lot of the Rails 6.0->6.1 conversion can be done by simultaneously upgrading a lot of other libraries.
The deprecation warnings are a pain, but should be straightforward to fix.
HOWEVER: the fact that the attr_encrypted gem doesn't seem to work any more is a big potential problem :-(. It's a single parameter, so I might be able to just hand-define a getter & setter for "email" (which is really what attr_encrypted does). But it's more work that we didn't have to hand-code before. Sigh.

@jdossett - HALLELUJAH!
This looks like a working transition to Rails 6.1.
Comments welcome.

Clarification: the gem attr_encrypted works just fine. The problem was that I needed to update the gem blind_index, but the error messages mislead me to blame the wrong gem. All's okay now.

Wow @david-a-wheeler, great work!

@jdossett - thanks!! What a pain, but success feels sweet. Any comments before merging?

I have found a problem. The updated gem blind_index stores email hashes differently, so while it works with new data (and thus automated tests work), it won't find old email addresses (and thus won't allow local logins for existing accounts).
This will need to be fixed before merging. One solution is to regenerate all the hashes (e.g., as part of a migration). However, there are over 4,000 such accounts, so doing that all at once during a migration will take a little time. That may be the easy way though.

Regenerating all the hashes doesn't take long at all, it's about a minute.
However, there were a crazy number of little details that needed to be worked out before I had a finished solution. I think I've got it.

@jdossett or anyone else, please let me know if you have any concerns about merging this. I think it's all well. The tests all pass. I did a trial conversion of the real database & that seemed to work.

I hear no complaints, and I see no reason to complain. I'm finally merging it in!


fix: internal import not found

Describe the bug
in v4.1.17 I get those errors:
17 116.5 [warn] (node-resolve plugin) Could not resolve import "#internal/nuxt-site-config" in /srv/app/node_modules/.pnpm/nuxt-simple-sitemap@4.1.17_@nuxt+devtools@1.0.6_@vue+compiler-core@3.3.11_nuxt<EMAIL_ADDRESS>using imports defined in /srv/app/node_modules/.pnpm/nuxt-simple-sitemap@4.1.17_@nuxt+devtools@1.0.6_@vue+compiler-core@3.3.11_nuxt<EMAIL_ADDRESS>#17 116.6 [warn] (node-resolve plugin) Could not resolve import "#internal/nuxt-site-config" in /srv/app/node_modules/.pnpm/nuxt-simple-sitemap@4.1.17_@nuxt+devtools@1.0.6_@vue+compiler-core@3.3.11_nuxt<EMAIL_ADDRESS>using imports defined in /srv/app/node_modules/.pnpm/nuxt-simple-sitemap@4.1.17_@nuxt+devtools@1.0.6_@vue+compiler-core@3.3.11_nuxt<EMAIL_ADDRESS>#17 116.6 [warn] "#internal/nuxt-site-config" is imported by "../node_modules/.pnpm/nuxt-simple-sitemap@4.1.17_@nuxt+devtools@1.0.6_@vue+compiler-core@3.3.11_nuxt<EMAIL_ADDRESS>but could not be resolved – treating it as an external dependency.
#17 129.1 [error] Package import specifier "#internal/nuxt-site-config" is not defined in package /srv/app/src/package.json imported from /srv/app/src/.nuxt/prerender/index.mjs

Reproduction
https://github.com/maevsi/maevsi/actions/runs/7207508777/job/19634547300#step:7:1185
System / Nuxt Info
No response

Oh wait, could be because of some version pins I still have around.

Yup, that was the reason :see_no_evil:


[BUG] v2prov is broken on v2.7.0-rc1

Rancher Server Setup

Rancher version: v2.7.0-rc1
Installation option (Docker install/Helm Chart): Docker

If Helm Chart, Kubernetes Cluster and version (RKE1, RKE2, k3s, EKS, etc):

Proxy/Cert Details: byo-valid

Information about the Cluster

Kubernetes version: Any
Cluster Type (Local/Downstream):
Downstream v2prov clusters - [ node driver + custom ]

User Information

What is the role of the user logged in? (Admin/Cluster Owner/Cluster Member/Project Owner/Project Member/Custom)
Admin

Describe the bug
v2prov is broken on v2.7.0-rc1 and reports No version info found in KDM
To Reproduce

Fresh install of rancher v2.7.0-rc1
Attempt to provision a v2prov cluster
Reproduced

Result
UI reports the following error: No version info found in KDM
Expected Result
Create Cluster page should load and allow user input to provision cluster
Screenshots

This should be ready to test on dev-v2.7 KDM branch as https://github.com/rancher/kontainer-driver-metadata/pull/978 is now merged.

Validated that this is addressed in v2.7-head https://github.com/rancher/rancher/commit/c567ef3f2bd13c2f2a5819242ab88cd334b1ae79.
ENVIRONMENT DETAILS

Rancher install: Docker
Rancher version: v2.7-head https://github.com/rancher/rancher/commit/c567ef3f2bd13c2f2a5819242ab88cd334b1ae79
Browser: Chrome

TEST RESULT
PASS
VERIFICATION STEPS

Setup Rancher, created a standard user and logged in as that user.
Provisioned two downstream K3s node driver clusters with following roles: 1 etcd, 1 cp, 1 worker.

Ensured that one is of a fresh install of the highest K8s version and another is of the second highest K8s version to be upgraded.

Validated that the clusters and nodes came up Active in Cluster Management and Cluster Explorer.
With the second cluster provisioned, edited the config and upgraded the K8s version.
Validated that the upgrade completes and that the nodes and cluster are Active in Cluster Management and Cluster Explorer and that the K8s version is updated.


redhat

Expected behavior
Actual behavior
Information about the Issue
Steps to reproduce the behavior

...
...

No information provided or steps to replicate - Closing


[Stargate RPG] v.1.73

Changes / Comments

Remove History Skill (was skill in old beta rules, but no longer in the final rules)
update preview img

Roll20 Requests
Comments are very helpful for reviewing the code changes. Please answer the relevant questions below in your comment.

[x] Does the pull request title have the sheet name(s)? Include each sheet name.
[ ] Is this a bug fix?
[ ] Does this add functional enhancements (new features or extending existing features) ?
[ ] Does this add or change functional aesthetics (such as layout or color scheme) ?
[ ] If changing or removing attributes, what steps have you taken, if any, to preserve player data ?
[ ] If this is a new sheet, did you follow Building Character Sheets standards ?

If you do not know English. Please leave a comment in your native language.

Character Sheet Info Roll20 Internal Use only.


How can i integrate card.io without scan card feature(only manual entry) with custom UI

First of all thanks for the wonderful library.
In one of my app i want to use card.io's mechanism to validate the card , but i do not want scanning feature I only want manual entry feature.
And also i have my custom UI built in for getting card's number and expiry.
Can i apply your your method to validate those info along with displaying card's image on the textfiled alon with the formatter (i.e. 4111 1111 1111 111) ?
Thanks

@mihirpmehta it sounds like you will want to simply copy a few bits of code from our project.
From the card.io-dmz repo, you might want dmz_card_info_for_prefix_and_length() and dmz_passes_luhn_checksum() (both in dmz-olm.h.)
From the card.io-iOS-source repo, some of the code from, for example, CardIONumbersTextFieldDelegate.m might be helpful.
Just be sure to include with any copied code our copyright and license text.


Support for S3 storage provided by non-AWS (FreeNAS/TrueNAS/etc)

I'm learning Rancher, and I noticed there's only local storage or S3 storage for backups (amongst other things). But S3 storage can only seemingly be configured to interface with AWS, but not other S3 storage servers.
I run FreeNAS/TrueNAS for my central storage in all regards, as my whole setup is 100% on-prem, and it can serve S3 storage endpoints. As such, I was hoping that support for S3 storage endpoints that are not just AWS could be added to Rancher. Perhaps just enable the option to define the target server and connection details, since the protocol is supposed to be compliant anyways.
Any chance we can get this added as a feature, and this request added to a milestone? I have no interest in using AWS services whatsoever.

@BloodyIron - we are configuring the rancher backup (also longhorn or rke2 etcd snapshots) against on-premise S3 storage systems like Minio or NetApp etc… you just have to specify your on-premise „endpoint“ with the proper settings..

Ooops sorry should have closed this!


Key Pinning

From @winhowes on February 5, 2015 8:17
Allow users to pin keys to a specific domain or domain+path
Copied from original issue: winhowes/grd.me#23

we should probably have an option to mangle the current url into a wildcard or regex, and allow the user to specify their own wildcard and regex patterns

we should probably have an option to mangle the current url into a wildcard or regex, and allow the user to specify their own wildcard and regex patterns

From @winhowes on March 27, 2015 21:39
Yep, totally agree. (This may be a good task for you to start on if you want - fairly straightforward, but would let you touch quite a bit of code.)

From @winhowes on March 27, 2015 21:39
Yep, totally agree. (This may be a good task for you to start on if you want - fairly straightforward, but would let you touch quite a bit of code.)

From @winhowes on April 7, 2015 4:7
cool, no worries. Milestone v4 is far off, still working on 3 for the next few weeks

From @winhowes on April 7, 2015 4:7
cool, no worries. Milestone v4 is far off, still working on 3 for the next few weeks

shit, did not intend to close the issue; I will let you know if I think I can get this done in a timely manner, for now do not let me hold up https://github.com/winhowes/grd.me/milestones/v4

shit, did not intend to close the issue; I will let you know if I think I can get this done in a timely manner, for now do not let me hold up https://github.com/winhowes/grd.me/milestones/v4


[Implementation-Change] Observing 404 for forwarding contruct and forwarding-construct-port APIs.

Depends on #33
Tested with v1.0.1_test
Observing 404 for forwarding contruct and forwarding-construc-port APIs.
Lookslike the "=" is not added for fc and fc-port, hence API fails.
For Both APIs we are able to see the response In MWDI.

/core-model-1-4:network-control-domain=cache/control-construct={mountName}/forwarding-domain={uuid}/forwarding-construct{uuid1}

/core-model-1-4:network-control-domain=cache/control-construct={mountName}/forwarding-domain={uuid}/forwarding-construct{uuid1}/fc-port{localId}

"http://xxx:xxx/core-model-1-4:network-control-domain=cache/control-construct=xxx/forwarding-domain=FD-VLAN-1234-1/forwarding-constructFC-1234-1-3392" -H "accept: application/json" -H "Authorization: Basic YWRtaW46QWRtaW4xMjM="

{
  "code": 404,
  "message": "not found"
}

g-constructFC-1234-1-3392","response-code":404} failed with response status: 400
[04:57:03.651] ERROR (1): error during /core-model-1-4:network-control-domain=cache/control-construct=513250004/forwarding-domain=FD-VLAN-1234-1/forwarding-constructFC-1234-1-3392
    err: {
      "message": "Request failed with status code 404",
      "stack":

   }
loggingErrorHandler - caught error, returning response with status code "404" and body {"code":404,"message":"not found","errors":[{"path":"/","message":"not found"}]}
HEAD / 404 11.617 ms - 122
recordServiceRequest - record service request with body {"application-name":"MultiDomainInventoryProxy","release-number":"1.0.0","operation-name":"/","response-code":404} failed with response status: 400
POST /v1/update-operation-key 204 15.74

/core-model-1-4:network-control-domain=cache/control-construct={mountName}/forwarding-domain={uuid}/forwarding-construct{uuid1}/fc-port{localId}

curl -X GET "http://<IP_ADDRESS>:3013/core-model-1-4:network-control-domain=cache/control-construct=513250004/forwarding-domain=FD-VLAN-1234-1/forwarding-constructFC-1234-1-3392/fc-portFCPort-1234-1-3392" -H "accept: application/json" -H "Authorization: Basic YWRtaW46QWRtaW4xMjM="

{
  "code": 404,
  "message": "not found"
}

loggingErrorHandler - caught error, returning response with status code "404" and body {"code":404,"message":"not found","errors":[{"path":"/","message":"not found"}]}
HEAD / 404 12.283 ms - 122
recordServiceRequest - record service request with body {"application-name":"MultiDomainInventoryProxy","release-number":"1.0.0","operation-name":"/","response-code":404} failed with response status: 400

Looking in the github history of the MicroWaveDeviceInventory, I see recent changes in the MWDI API:
The errors we are faced are due to a mismatch between the modified MWDI and the current MDIP implementation:
The way forward is to adjust the MDIP specification to match that of the MWDI and then adapt the implementation accordingly.

Created new issue #33 to update the specification. Once this issue is resolved, the implementation shall be changed and further tracked with this issue.

Updated loadFile

Fixed in tag "v1.0.0_impl-fix-4"

Latest tag : [v1.0.0_impl-fix-4] test observation:
Issue can be re-tested only when MWDI/MDIP specification is in sync with parameter as 'fc' instead of 'forwarding-construct'.
http://xx:xx/core-model-1-4:network-control-domain=cache/control-construct=xx/forwarding-domain=xx/forwarding-construct=xx

changed forwarding-construct to fc with #44

Fixed in tag "v1.0.0_impl-fix-5"
Tests on Lab:
/core-model-1-4:network-control-domain=cache/control-construct={mountName}/forwarding-domain={uuid}/fc={uuid1}
with input data:
mountName: 513250008
uuid: VLAN-FD
uuid1: VLAN-201
fields: layer-protocol-name
result:
{
"core-model-1-4:fc": [
{
"layer-protocol-name": "vlan-interface-1-0:LAYER_PROTOCOL_NAME_TYPE_VLAN_LAYER"
}
]
}
/core-model-1-4:network-control-domain=cache/control-construct={mountName}/forwarding-domain={uuid}/fc={uuid1}/fc-port={localId}
with input data:
mountName: 513250010
uuid: VFD-CB
uuid1: VLANFC-500
localId: 10
result:
{
"core-model-1-4:fc-port": [
{
"local-id": "10",
"lifecycle-state": "core-model-1-4:LIFECYCLE_STATE_INSTALLED",
"logical-termination-point": [
"VI-10"
],
"operational-state": "core-model-1-4:OPERATIONAL_STATE_ENABLED",
"fc-port-direction": "core-model-1-4:PORT_DIRECTION_BIDIRECTIONAL",
"selection-priority": "0",
"administrative-state": "core-model-1-4:ADMINISTRATIVE_STATE_UNLOCKED",
"is-internal-port": false,
"administrative-control": "core-model-1-4:ADMINISTRATIVE_CONTROL_QUIESCENT",
"is-protection-lock-out": false
}
]
}

Tested OKAY with v1.0.0_impl-fix-5 and issue is not observed.


zephyr_library: missing 'kernel-mode' vs 'app-mode' documentation

Not sure where this should be documented, probably as a comment in cmake/extensions/cmake?
From: tests/subsys/settings/functional: make common code a zephyr_library() #19531, see also references there.
zephyr_library_named(  settings_func_test)
add_dependencies(      settings_func_test offsets_h)

@mbolivar :

Why is this add_dependencies() required?
I see this in the top level zephyr/CMakeLists.txt:
foreach(zephyr_lib ${ZEPHYR_LIBS_PROPERTY})
add_dependencies(${zephyr_lib} ${OFFSETS_H_TARGET})
endforeach()
So it looks like zephyr_library_named() should be taking care of this:

@SebastianBoe

From: "Bøe, Sebastian"<EMAIL_ADDRESS>Date: Thursday, 3 October 2019 at 08:12
To: @marc-hb , @mbolivar , @nvlsianpu
Subject: Re: [zephyrproject-rtos/zephyr] tests/subsys/settings/functional: make common code a zephyr_library() (#19531)
The build system runs in two "modes", or phases, kernel-mode,
and app-mode. Scripts executed directly or in-directly by boilerplate.cmake
is in kernel-mode, everything else is in app-mode.
It's not supported to create zephyr libraries in app-mode as we are doing here,
but this is not documented anywhere AFAIK so therefore us needing
to do workarounds like this is a "lack-of-documentation bug" and not a "design bug".
We use the API in this unsupported way in this case because it happens to do roughly
(with the exception of needing to manually add_dependencies) what we need to do
with minimal build script boilerplate.
The supported way of doing nearly the same thing would be for the app build script to
add a zephyr_extra_module because west modules are run in kernel-mode and can use
the zephyr_library API in a supported way. But I decided not to do it in this case because
creating a zephyr module for this seemed like overkill.

What I find concerning here is the randomness of build failures.
Quoting myself from: tests/subsys/settings/functional: make common code a zephyr_library() #19531
zephyr_library_named(  settings_func_test)
add_dependencies(      settings_func_test offsets_h)

make -C build [settings_func_test] always fails without add_dependencies(      settings_func_test offsets_h)
make -j sometimes succeeds in building even without this dependency thanks to a race condition. make -k; make obviously succeeds too.
ninja -j1 doesn't fail, it seems "lucky" enough to build in some order that avoids the missing dependency issue. However ninja settings_func_test fails with the same error than make settings_func_test above.

if you think this is not stale, then please do something about it, this is now the 3rd time being reopened.

if you think this is not stale, then please do something about it, this is now the 3rd time being reopened.

@tejlmand , @mbolivar-nordic , is Sebastian's email in the description above still valid today and is it still missing from https://docs.zephyrproject.org/latest/guides/zephyr_cmake_package.html ?

@tejlmand , @mbolivar-nordic , is Sebastian's email in the description above still valid today and is it still missing from https://docs.zephyrproject.org/latest/guides/zephyr_cmake_package.html ?

I assume it is still valid. I think https://docs.zephyrproject.org/latest/application/index.html might be a better place to document this, but I defer to @tejlmand .

This is still valid, but instead of just documenting this, I think it's better to issue a warning if the user tries to use zephyr_library() after find_package(Zephyr) completes, and then in future we can remove the possibility.

@tejlmand can you look at this for the 2.6 release

@tejlmand can you look at this for the 2.6 release

Done, fixed here: https://github.com/zephyrproject-rtos/zephyr/pull/35887


Wording + CSS for external links

Everything looks good. Plus thanks for the css!


Update cirq to bloq interop to automatically replace basic gates with their Bloq versions

Pulled out from https://github.com/quantumlib/Qualtran/pull/732
TODO(as part of a follow-up PR): @mpharrigan Can we add a method to convert Cirq's AbstractControlValues to CtrlSpec? This would allow converting ControlledGate instaces to Controlled Bloq. There's also a nuance that both cirq.Gate.controlled() and Bloq.controlled()exist and they have different interfaces so cirq style API and bloq style API clashes for GateWithRegisters.

Instantiating a local dictionary on every function call would not be faster, but I think it's cleaner so I have done the replacement.

I'll have to import all the basic gates, that can probably lead to circular imports, so I wanted to keep the global imports minimal. I'm sure I can find a way around if it becomes a bottleneck.

ah fair point


Node.js: ngrok.forward() issue

try this command:
await ngrok.forward()

and get this issue:
[Error: failed to connect session: Usage of ngrok requires a verified account and authtoken.
Sign up for an account: https://dashboard.ngrok.com/signup
Install your authtoken: https://dashboard.ngrok.com/get-started/your-authtoken error_code: ERR_NGROK_4018] {
  code: 'GenericFailure',
  error

but when passing manuaaly it work:
{
  authtoken_from_env: false,
  authtoken: 'xxxxx-my-auth-token-my-auth-token-xxxxx'
}

Node.js version: v14.21.3
ngrok version: 3.6.0

Hi @ballonura , when running your initial command did you have the environment variable NGROK_AUTHTOKEN set ?

In order to connect to the ngrok service, you need to supply a valid authtoken. There are two ways to do this with ngrok-javascript:

Set authtoken_from_env to true (it defaults to false) and set the NGROK_AUTHTOKEN to your authtoken. How you set this environment variable will depend on your OS.
Set authtoken_from_env to false and set authtoken to your authtoken as you did above when you passed manually.

Hello! Looks like this issue has been taken care of, so going to close this ticket out. Feel free to reopen if anything else comes up. Thanks again for writing in!


fix typo

Looks like the last "frist" was missed in 53d84ea.

lgtm

It took me half an hour to realize you meant "looks good to me." I kept reading this as "let's get this money" for some reason and I was like, damn, this guy's pull request reviews are hype


Create the basic encoding/decoding interface.

The issue regards setting up the foundational types, the encoder and the decoder. Making them work correctly on streams and implementing the encoder:writestring and decoder:readstring methods and testing that they write and read correctly from input/output streams.

Completed in 363db3d806103673bd20b83d331a68620a10ed17


Gyroscope is undefined at first render

Hello,
It seems that this.props.Gyroscope is undefined at first render maybe because its initialization happens some ms after render, however I would like to know how should I correctly handle this behavior, something like that maybe ?
render() {
   if(this.props.Gyroscope)
     return (<Foo/>);
   else
     return null;
}

Thanks,

Hey, I will have a look into this this weekend and will come up with a (hopefully) good answer

@Eyyub I am sorry, I haven't had time to look into this issue. What would be your preferred solution:

Leave it like it is but make it explicit in the documentation
Render null if one of the values is missing
Add a renderLoading prop, which renders a loading screen while one of the values is missing

Hello! IMO I would rather leave it like this and making it explicit in the documentation. Also you could add an example with a renderLoading so people would know how they can handle this behavior. But this is only my opinion, it's all about what things a lib should handle and what things should be left to the user's decision :p

Okay, I see. I will enhance the docs then and also add it to an example. Thanks for your help!


When displaying complex frames the figspec viewer selection becomes really slow and displays visual artifacts

Affected design types

[ ] figma
[X] figspec
[ ] link
[ ] image
[ ] iframe

Describe the bug
The Figspec viewer selection utility is very slow while displaying a complexe frame, as much that it becomes impossible to maneuver in the frame. There's a video describing the issue: https://youtu.be/OZe-T3u_acE
On Firefox it's not as worse as shown on Chrome, you can feel the lag but there won't be any artifact
How to reproduce the bug?
Create a complex frame in Figma and load it into Storybook through the Figspec viewer (the component/symbol shown in the video has 580 variants)
Expected behaviour
The viewer display the information as it should without latency and visual artifacts.
Environment

[X] Chrome / Chromium / Chromium based browsers
[X] Firefox
[ ] macOS Safari
[ ] iOS Safari
[ ] Samsung Internet
[ ] Other

Affected versions
6.2.1
Storybook versions
6.4.9

I have a similar issue even with relatively small number of nodes.
The issue I have is it is super laggy when inspector is open as shown below

Hello @pocka , I've invited you to join a Figma file where you can have full access

I'll take a look at the file and see if a fix for #37 improves performance issues.

It seems there are many factors causing this poor performance:

Lit's render function iterates every nodes twice per property change (including internal ones, such as scaling factor)
SVG images -- SVG rendering + CSS transform is not performant enough for this usage
Guideline strokes needs to be updated on every scale changes

I tested on a WIP plain DOM implementation (removed Lit to minimize update) with the largest frame from Twemoji file (frame JSON ... 13MB, frame SVG ... 7MB). The newer implementation is slightly more performant than the current implementation, but still unusably laggy/sluggish.
Probably WebGL is the only[^0] choice... though it takes a lot of effort to implement.
[^0]: WebGPU and fallback WebGL renderer using wgpu would be more performant, but using WASM makes package structure/publishing/usage too complicated. If this was a standard application, Worker + WASM is definitely the way to go.

Fixed in v2.0.0 (release note, npm)