[CBR-315] Have only pure getters for the Kernel's DB

This PR exposes only a single getter for the Kernel, which is the
'getWalletSnapshot' API, explaining library authors and users what they
are expected to do and how to interact with the wallet.
Description
We don't want to have developers pick up bad old habits when it comes to the new data layer. We want to enforce a way to access the data layer internal state in a consistent manner, and in line with what we have done in the past.
Linked issue
https://iohk.myjetbrains.com/youtrack/issue/CBR-315
Type of change

[~] 🐞 Bug fix (non-breaking change which fixes an issue)
[~] 🛠 New feature (non-breaking change which adds functionality)
[~] ⚠ Breaking change (fix or feature that would cause existing functionality to change)
[X] 🏭 Refactoring that does not change existing functionality but does improve things like code readability, structure etc
[~] 🔨 New or improved tests for existing code
[~] ⛑ git-flow chore (backport, hotfix, etc)

Developer checklist

[X] I have read the style guide document, and my code follows the code style of this project.
[X] If my code deals with exceptions, it follows the guidelines.
[X] I have updated any documentation accordingly, if needed. Documentation changes can be reflected in opening a PR on cardanodocs.com, amending the inline Haddock comments, any relevant README file or one of the document listed in the docs directory.

Testing checklist

[X] I have added tests to cover my changes.
[X] All new and existing tests passed.

QA Steps

Screenshots (if available)

I wouldn't personally re-export the whole module but I know I'm in the minority on that one :)

I don't have a strong opinion on this either, but I thought I would have been handy for developers to use 😉


Fix security issue with cleartext passwords in shell history

TL;DR: The current flags-based credential options leave cleartext passwords in shell history
For example, the --password cleartext_here flag will leave cleartext_here in the shell history.
Pulling from environment variables would be a mild improvement, but using a system credentials storage API would be best.

I can't seem to find any node packages to deal with credentials on linux (https://github.com/atom/node-keytar exists but it is archived)


backwards differentiation

Firstly, thanks the developers for the great package !
I tried to use the package with Zygote.jl (for automatic differentiation) but sadly this failed due to the usage of =. in the definition of pfaffian(A).
The usual fix for this is to define the backwards derivative manually, in this case I got :
using Zygote
using ChainRulesCore
using ChainRules

function ChainRules.rrule(::typeof(pfaffian), x::Union{Number, AbstractMatrix})
    Ω = pfaffian(x)
    function det_pullback(ΔΩ)
        ∂x = x isa Number ? zero(ΔΩ) : #=0.5 *=# inv(x)' * dot(Ω, ΔΩ)  #we removed the 0.5 because changing element ij immediatelyu changes element ji.
        return (NoTangent(), ∂x)
    end
    return Ω, det_pullback
end

which works well from the test :
for _ in 1:100
    n = rand(1:10)

    A = rand(2*n,2*n)
    A = A - transpose(A)
    A = SkewHermitian(A)

    epsi = 1e-6

    function make_zero_but_ij(i,j)
        out = zero(A)
        if i != j
            out[i,j] =  1.   #note, the one half here is because the pfaffian is antisymmetric in the rows and columns.
        end
        return out
    end

    numerical = gradient(x->pfaffian(x), A)[1]
    analytical = [(pfaffian(A + epsi*make_zero_but_ij(i,j)  )-pfaffian(A))/epsi for i ∈ 1:2*n, j ∈ 1:2*n]

    @show analytical ≈ numerical
end

would it be desirable if I made a pull request with this code ?
All the best,
Gertian

A pull request with a chain rule would be welcome.  You'll want to do it as a package extension, similar to how e.g. SpecialFunctions.jl does it.
(dot(Ω, ΔΩ) looks a bit weird to me since they are both real scalars.  Otherwise the formula looks correct to me.)
(What you are calling "numerical" and what you are calling "analytical" in your test looks backwards to me.

Hi,
Thanks for the quick reply ! I agree that this is indeed surely faster with a custom rrule so I'm happy I got forced into finally reading the zygote.jl manual.
As for the (dot(Ω, ΔΩ) I agree that this is a bit strange. However, I based based my code of the rrule for det in
https://github.com/JuliaDiff/ChainRules.jl/blob/e245d50a1ae56ce46fc8c1f0fe9b925964f1146e/src/rulesets/LinearAlgebra/dense.jl#L129
and made minimal changes since it's my first time implementing an rrule if you are certain that this can be dropped I'd be happy to do so !
As for the naming conventions in my test. Thanks for pointing that out. I'll be smarter in my pull request ;)

dot is harmless, since for two real scalars it simply calls *, so I would leave it as-is.

(Out of curiosity, in what context did you encounter a need to differentiate a Pfaffian?)

Thanks for your interest :)
I'm currently writing code to optimize Gaussian matrix product states so that they approximate groundstates of quantum many body problems. For now I'm just reproducing this work by Norbert Schuch and Bela Bauer , but in the future I plan to go beyond their approach.
More specifically, in this context the state is parametrized by a covariance matrix and the expectation value of operators (such as the Hamiltonian=energy) is calculated as the pfaffian of a submatrix of this covariance matrix. For more details I refer to this paper by Brevyi.

Thank you @Gertian for your interest in this package and your PR! Thank you also @stevengj! I am personnally not familiar with AD in Julia but you are welcome to contribute for anything that you find useful.

Thank you @smataigne. We've currently got a pull request which implements the desired functionality as a package extension.
I'm still testing it but it seems like we will be able to merge soon :)


adding libgpkg

Ticket
SPACON-95
Status
READY
Description
This pull request adds support for using libgpkg.  This means that we can build a custom version of SQLite that can load the libgpkg extension.  The custom version of SQLite is compiled with the R*Tree module which allows libgpkg to create and populate the index with theCreateSpatialIndex function .
This commit adds the SQLite Android bindings used to access the native functionality through JNI.  It also includes the libgpkg C source code, which is used to build the libraries for each platform.
Todos

[x] Tests
[x] Documentation

Deploy Notes
Depending on which CPU architecture is used, you may need to build libgpkg and SQLite using ndk-build -B from the spatialconnect-android-sdk/spatialconnect folder.  The target ABIs (x86 and armeabi-v7a) are currently defined in spatialconnect-android-sdk/spatialconnecjni/Application.mk and we can add more when needed.
Steps to Test or Reproduce
To test that the libgpkg library is working correctly, deploy the application to your emulator or device and then use the sqlite3 client to connect to the Haiti database.  You can then run
# loading the lib gpkg extension
sqlite> SELECT load_extension('/data/user/0/com.boundlessgeo.spatialconnect.test/lib/libgpkg');

# creating an index with libgpkg
sqlite> SELECT CreateSpatialIndex('point_features', 'the_geom', 'fid');

# query on the index
sqlite> SELECT COUNT(*) FROM rtree_point_features_the_geom WHERE maxx > -72.5 AND minx < -72;

Impacted Areas in Application

This PR will not affect other parts of the code b/c it is currently isolated.  All code accessing the GeoPackages using the NGA GeoPackage libraries is using the android.database.sqlite namespace and all of the code accessing libgpkg functionality will use the org.sqlite.database.sqlite namespace.  For more info see the docs

@boundlessgeo/spatial-connect

:+1:


Tomcat dependencies

Thanks for the nice writeup in the blog and example code.
I was looking for an alternative for a streaming upload without using commons-fileupload. This example seems to do that just fine.
Only minor issue is that there are some dependencies to tomcat util classes.  Do you think it is possible to have an implementation that isn't dependend on tomcat?

I can imagine there might be alternatives. If the question is if I plan to investigate whether there is; I'm not :)

Thanks for responding. Just checking if you had any new insights since you posted these sources. Very useful anyway!

@ekkelenkamp
You might be interested in the approach I used in this repo. Check out the dev branch.
The important bits are under

io/github/saxomoose/sca/web/config/TomcatConfiguration.java
The store method of io/github/saxomoose/sca/web/controllers/DocumentController.java


Add: Israel Pars TV

Channel Name
Israel Pars TV
Alternative Names (optional)
No response
Network (optional)
No response
Owners (optional)
No response
Country
IL
Subdivision (optional)
No response
City (optional)
No response
Broadcast Area
c/IR/IL
Languages
fas
Categories (optional)
general
NSFW
FALSE
Launched (optional)
No response
Closed (optional)
No response
Replaced By (optional)
No response
Website (optional)
https://pars-israel.com/
Logo
https://pars-israel.com/wp-content/uploads/2020/05/Untitled-2.jpg
Notes
No response

M3U Link: https://live.pars-israel.com/iptv/stream.m3u8


Match ambiguous searches better

[Far/Away] should find Far // Away but not Barbarian Bully.
[Upheavel] should find only Upheaval.
Neither of those things are true with a fuzziness threshold of 260.

Original ticket was #21.
Some examples from there with scores are:
[Define Bloodlord] => Defiant Bloodlord 165
[Ashenmoor Gourger] => Ashenmoor Gouger 135
[Ashenmmor] => Ashenmoor 70
[Frantic Scavenging] => Frantic Salvage 565
[Frantic Salvaging] => Frantic Salvage 290
[narcomeba] => Narcomoeba 105
[Winds of Wratg] => Winds of Rath 235
[Winds of Wrath] => Winds of Rath 135
Looking at it from the other side here's:
Upheavel
sqlite> SELECT word, distance FROM fuzzy WHERE word MATCH 'far/away*';
farewell to arms|170
farhaven elf|195
firewake sliver|195
wear away|200
far // away|210
freewind falcon|215
far wanderings|215
bravado|215
freewind equenaut|215
parapet|235
fireball|235
firewild borderpost|235
barbary apes|235
firewing phoenix|235
parapet watchers|235
war-wing siren|235
barbarian guides|250
barbarian bully|250
barbarian general|250
barbarian outcast|250

Far/Away
sqlite> SELECT * FROM fuzzy WHERE word MATCH 'far/away*';
farewell to arms|1|170|0|201|6
farhaven elf|1|195|0|226|7
firewake sliver|1|195|0|226|6
wear away|1|200|0|231|9
far // away|1|210|0|241|11
freewind falcon|1|215|0|246|6
far wanderings|1|215|0|246|6
bravado|1|215|0|246|5
freewind equenaut|1|215|0|246|6
parapet|1|235|0|266|6
fireball|1|235|0|266|6
firewild borderpost|1|235|0|266|6
barbary apes|1|235|0|266|7
firewing phoenix|1|235|0|266|6
parapet watchers|1|235|0|266|6
war-wing siren|1|235|0|266|6
barbarian guides|1|250|0|281|6
barbarian bully|1|250|0|281|6
barbarian general|1|250|0|281|6
barbarian outcast|1|250|0|281|6

So this makes it clear that we have to have special handling for 'X/Y' and 'X//Y' and 'X / Y' which we already knew.
Upheavel is really interesting. Hopeful Eidolon has a lower score than Defiant Bloodlord does for Define Bloodlord. But the key thing is that the lowest score by far is correct.
The way our query is currently structured it's going to be hard to know that at query time. But that does seem to be the key. A fuzziness of 200+ doesn't seem dumb until there are matches at much lower numbers and then it seems ridiculous the machine didn't find the lower score.

So the rule I'm looking for here is something like:
Don't include matches that are X worse than the best match but you can include up to threshold if you don't have a match yet. Just a loop over the results checking that should be sufficient.
Using the Upheavel example we'd want to find 40 and reject 137 even though 137 is < 260.
A simple thing might be "if next match is 2x previous match reject it and stop looking".

7412d355.


AntiLogger does not work (help)

I'm using windows 11 22000.194
when I use it with the driver (amsdk.sys) it works fine, but when I use it with the driver (zamguard64.sys) this error happens:
[!] failed to obtain device handle
[!] failed to initialize exploit (GetLastError: 0x2)

Open the zamguard64.sys in IDA, go Imports, Ctrl + F and search for IoCreateDevice and right click, go to xref
if ( dword_14002FBE4 == 1 )
  {
    RtlInitUnicodeString(&DestinationString, L"\\DosDevices\\ZemanaAntiMalware");
    v3 = L"\\Device\\ZemanaAntiMalware";
    goto LABEL_9;
  }
  if ( dword_14002FBE4 == 3 )
  {
    RtlInitUnicodeString(&DestinationString, L"\\DosDevices\\B5A6B7C9-1E31-4E62-91CB-6078ED1E9A4F");
    v3 = L"\\Device\\B5A6B7C9-1E31-4E62-91CB-6078ED1E9A4F";
LABEL_9:
    RtlInitUnicodeString(&DeviceName, v3);
  }

memset64(v2->MajorFunction, (unsigned __int64)&sub_14001147C, 0x1Cui64);
  v2->MajorFunction[0] = (PDRIVER_DISPATCH)&sub_14001049C;
  v2->MajorFunction[2] = (PDRIVER_DISPATCH)&sub_14001049C;
  v2->MajorFunction[14] = (PDRIVER_DISPATCH)sub_1400104BC;
  v2->DriverUnload = (PDRIVER_UNLOAD)sub_140011384;
  if ( IoCreateDevice(v2, 0x10u, &DeviceName, 0x22u, 0, 0, &v16) >= 0 && v16 )

You will see DOS & NT device names.

@kkent030315 thanks


Implement image validation in backend

Issue description
The system doesn't validate that actual images are uploaded to the blob storage. Nachet Interactive should only accept user images when using this feature (image upload).
Steps to Reproduce

Upload an image
The image is uploaded to the cache
Test the image to validate it's an actual image

Expected Behavior
The system should notify the users if the image they try to upload does not satisfy the validation.
Current Behavior
The system does not notify the users if the image is not an image.
Possible Solution
Test the image with two checks:

Test if the object is resizable
Validate extension (PNG, JPEG, JPG, TIFF)

Additional Context
Tasks

[ ] Add an image validation function in the backend
[ ] Implement extension validation check
[ ] Implement resizable validation check

What about size?
You can also validate the actual headers of files: https://github.com/ahupp/python-magic

What about size?

Got merged with resizable in my mind. Will add it to the issue

You can also validate the actual headers of files: https://github.com/ahupp/python-magic
Good idea! In inference_request we already divide files from headers, we can incorporate a check there


Fix can't interact with workspace item that is previously failed to delete

Explanation of Change

Fixed Issues

$ https://github.com/Expensify/App/issues/53413
PROPOSAL: https://github.com/Expensify/App/issues/53413#issuecomment-2523278930
Tests

Same as QA Steps

[x] Verify that no errors appear in the JS console

Offline tests

Same as QA Steps
QA Steps

Log in with a new email address
Create a new Workspace to start a subscription
Go to "Subscriptions" and make sure it shows "Annual"
Go to Workspaces and delete the newly created Workspace
This will give an error Looks like you're on an annual subscription. Please downgrade your account from your account settings before trying again
Verify the workspace is not crossed out
Verify you can press the 3-dot menu

[x] Verify that no errors appear in the JS console

PR Author Checklist

[x] I linked the correct issue in the ### Fixed Issues section above
[x] I wrote clear testing steps that cover the changes made in this PR

[x] I added steps for local testing in the Tests section
[x] I added steps for the expected offline behavior in the Offline steps section
[x] I added steps for Staging and/or Production testing in the QA steps section
[x] I added steps to cover failure scenarios (i.e. verify an input displays the correct error message if the entered data is not correct)
[x] I turned off my network connection and tested it while offline to ensure it matches the expected behavior (i.e. verify the default avatar icon is displayed if app is offline)
[x] I tested this PR with a High Traffic account against the staging or production API to ensure there are no regressions (e.g. long loading states that impact usability).

[x] I included screenshots or videos for tests on all platforms
[x] I ran the tests on all platforms & verified they passed on:

[x] Android: Native
[x] Android: mWeb Chrome
[x] iOS: Native
[x] iOS: mWeb Safari
[x] MacOS: Chrome / Safari
[x] MacOS: Desktop

[x] I verified there are no console errors (if there's a console error not related to the PR, report it or open an issue for it to be fixed)
[x] I followed proper code patterns (see Reviewing the code)

[x] I verified that any callback methods that were added or modified are named for what the method does and never what callback they handle (i.e. toggleReport and not onIconClick)
[x] I verified that comments were added to code that is not self explanatory
[x] I verified that any new or modified comments were clear, correct English, and explained "why" the code was doing something instead of only explaining "what" the code was doing.
[x] I verified any copy / text shown in the product is localized by adding it to src/languages/* files and using the translation method

[x] If any non-english text was added/modified, I used JaimeGPT to get English > Spanish translation. I then posted it in #expensify-open-source and it was approved by an internal Expensify engineer. Link to Slack message:

[x] I verified all numbers, amounts, dates and phone numbers shown in the product are using the localization methods
[x] I verified any copy / text that was added to the app is grammatically correct in English. It adheres to proper capitalization guidelines (note: only the first word of header/labels should be capitalized), and is either coming verbatim from figma or has been approved by marketing (in order to get marketing approval, ask the Bug Zero team member to add the Waiting for copy label to the issue)
[x] I verified proper file naming conventions were followed for any new files or renamed files. All non-platform specific files are named after what they export and are not named "index.js". All platform-specific files are named for the platform the code supports as outlined in the README.
[x] I verified the JSDocs style guidelines (in STYLE.md) were followed

[x] If a new code pattern is added I verified it was agreed to be used by multiple Expensify engineers
[x] I followed the guidelines as stated in the Review Guidelines
[x] I tested other components that can be impacted by my changes (i.e. if the PR modifies a shared library or component like Avatar, I verified the components using Avatar are working as expected)
[x] I verified all code is DRY (the PR doesn't include any logic written more than once, with the exception of tests)
[x] I verified any variables that can be defined as constants (ie. in CONST.ts or at the top of the file that uses the constant) are defined as such
[x] I verified that if a function's arguments changed that all usages have also been updated correctly
[x] If any new file was added I verified that:

[x] The file has a description of what it does and/or why is needed at the top of the file if the code is not self explanatory

[x] If a new CSS style is added I verified that:

[x] A similar style doesn't already exist
[x] The style can't be created with an existing StyleUtils function (i.e. StyleUtils.getBackgroundAndBorderStyle(theme.componentBG))

[x] If the PR modifies code that runs when editing or sending messages, I tested and verified there is no unexpected behavior for all supported markdown - URLs, single line code, code blocks, quotes, headings, bold, strikethrough, and italic.
[x] If the PR modifies a generic component, I tested and verified that those changes do not break usages of that component in the rest of the App (i.e. if a shared library or component like Avatar is modified, I verified that Avatar is working as expected in all cases)
[x] If the PR modifies a component related to any of the existing Storybook stories, I tested and verified all stories for that component are still working as expected.
[x] If the PR modifies a component or page that can be accessed by a direct deeplink, I verified that the code functions as expected when the deeplink is used - from a logged in and logged out account.
[x] If the PR modifies the UI (e.g. new buttons, new UI components, changing the padding/spacing/sizing, moving components, etc) or modifies the form input styles:

[x] I verified that all the inputs inside a form are aligned with each other.
[x] I added Design label and/or tagged @Expensify/design so the design team can review the changes.

[x] If a new page is added, I verified it's using the ScrollView component to make it scrollable when more elements are added to the page.
[x] I added unit tests for any new feature or bug fix in this PR to help automatically prevent regressions in this user flow.
[x] If the main branch was merged into this PR after a review, I tested again and verified the outcome was still expected according to the Test steps.

Screenshots/Videos

Android: Native

https://github.com/user-attachments/assets/0dbcf65c-1549-4ee8-a2cb-8b4512c3e7d1

Android: mWeb Chrome

https://github.com/user-attachments/assets/409ea5bf-5550-4840-a831-02b464d28d14

iOS: Native

https://github.com/user-attachments/assets/2e48fd28-6694-4cc3-9b2c-c3e5a08b0695

iOS: mWeb Safari

https://github.com/user-attachments/assets/2c707dc7-e7e8-447e-af3c-1ffc445724b3

MacOS: Chrome / Safari

https://github.com/user-attachments/assets/5c85af21-50cf-4298-b32e-a64e1939684d

MacOS: Desktop

https://github.com/user-attachments/assets/2a7a9415-671e-43e6-828a-fbaabd10bdaf

I can't repro the "Looks like you're on an annual subscription. Please downgrade your account from your account settings before trying again" error anymore even if I remove my last workspace. I tried to log in on my account that able to repro this before but got blocked. It would be great if someone from the team could unblock it.

Since this issue isn't specific to that error, but to any error, I manually simulate the error locally by passing an empty policyID to the API params and set the error to the failure data.

But I'm not sure how QA would be able to test this.

I can't also reproduce this issue, I was already having some trouble but it worked with one of my account now it is not working there too

@srikarparsi What do you think about this? We can manually set an error in the code but I think it would cause a problem for QA team. Is it possible to clarify with backend team the logic behind showing error Looks like you're on an annual subscription. Please downgrade your account from your account settings before trying again


Re-enables Travis to test s390x arch

Travis gave us 50k credits while we are still under review as to being OSS or not cc @openzipkin/core. Might as well test the other archs! Worst case is they cut us off and we are in the same position as before (not testing them except via emulation).

pass pass 👍


Revert "add missing rbac role for resizing volume"

Reverts kubernetes/cloud-provider-openstack#880

/release-note-none

/lgtm
I tested this as indicated in the previous PR

@ramineni Thanks!!
/lgtm
/approve


Specifying current_db on a session call.

Hi, not sure where that went -- but since the 4.2.0 bump i cannot specify
...driver.session(current_db="one_of_my_dbs_name")
to choose one of the databases. Can we bring that back or am i missing something? Couldn't find in current docs on a cursory search.
Thank you!

I'm not a Pythonista so I may be wrong, but I think the setting is now just called database?

Right on, good to know the source.
Thanks for the swift response.


[DO_NOT_MERGE]fix etcd proxy instance failure on restart

adds a custom systemd unit file for etcd with a one line if statement that
checks to see if both member and proxy folders exist in /var/lib/etcd/ and
removes the member folder so that etcd members in proxy mode can start on next
reboot.
This does not affect etcd full members. It's also not possible to automatically
promote a proxy to member https://github.com/coreos/etcd/issues/2869#issuecomment-105607322
so this fix doesn't break any functionality.

removes the extra parameters sent to etcd from the default systemd unit file,
since etcd picks up all the settings from the salt provisioned
/etc/sysconfig/etcd file.
This should be considered a temporary fix.

@inercia @ereslibre

since this doesn't work with caasp images, ignore this PR for now.

@PI-Victor Maybe you could investigate the use of drop-in units. You would have to create a /etc/systemd/system/etcd.service.d directory, copy a file there with the PreExec stuff and restart etcd.

We would still need to request that /etc/systemd/system/etcd.service.d is RW if we expect to do this at salt level. Other solution would be to provide this drop-in unit, or a modification of the original unit at package level.

Oh, I thought the whole /etc was RW... Maybe we could put the drop-in unit in a etcd-caasp.rpm, and then force the installation of that RPM in the CaaSP machines somehow...

Sorry, @inercia is right, /etc is writable. I can confirm on the image from CaaSP that I have I can actually create /etc/systemd/system/etcd.service.d and everything is fine.
Sorry for the noise.

@inercia i've tested this with caasp and it works ok. please merge if everything's ok.


Add ValuError message for Adamax

Added valueerror messages for adamax optimizer.

Thanks! Did you run the pre-commit hooks for formatting? Could you run those and then we can merge?
See the CONTRIBUTING.md doc.

Done testing on a notebook at local. Changed code positions and deleted betas valueerror messages. It works on local. You can merge

Thanks!! I think it's good the way it is. I don't feel too strongly about learning rate check either way, but thanks for humoring me 😄

Thanks!! I think it's good the way it is. I don't feel too strongly about learning rate check either way, but thanks for humoring me 😄

I thank you for the information you provided. I'm relatively new to this, so correcting any mistakes or gaps in my knowledge is beneficial for me. Regards 😁


Windows Server Container cross-version host compatibility

Windows containers are currently more or less strictly version bound to the same version as the host (process isolation).
I do not count Hyper-V isolation, as that is in my opinion just another kind of VM hosting and has nothing to do with containers.
Dependencies can be viewed here: https://docs.microsoft.com/en-us/virtualization/windowscontainers/deploy-containers/version-compatibility?tabs=windows-server-2004%2Cwindows-10-2004
It would be very useful if windows userland could work independent of the kernel version.
E.g. a 2004 kernel being able to start a container with 1903 userland and vice verse.
As a developer bundling applications I want to be able to have a single container being able to run on multiple windows host (kernel) versions, so that I do not have to create the container for all windows versions that a customer might be running (maybe even on outdated versions because of other containers not being packaged against newer ones).
As a operator I do not want to consider containers when updating the host operating system so that I can install updates (maybe even automatically) when I want to.
As a user I do not want engage with the server operator to deploy an older host for some application container so that I can just "docker run" the application without having to consider the windows version it was build against.
As a security engineer I do not want operators holding back with installing windows updates (e.g. because of compatibility issues or the container not being available for the new version) so that all systems can be kept up to date without service impact.

This is one of those issues, that will seriously hinder the usage of windows containers. It's a huge issue for us.
This is not a issue only to those that stick to LTSC versions until the end of (extended) support (or universe's heat death), and those places are exactly the ones that don't adopt new tech like containers.

Hi all, thank you for this perspective! This is something that we have been aware of for a some time now and are in the midst of working on a solution to fix it.
I want to note that patch-level versions are compatible with one another, and this is mostly an issue across major versions. Security patches also apply to both user and kernel mode binaries and thus need to be updated accordingly (hence the requirement to rebuild container images). If you have run across scenarios where this is not the case, feel free to contact me directly.
I understand the desire to decouple the container version from the host OS and ensure stronger levels of compatibility. We are working hard to push in this direction. I will keep this thread updated with our progress as we move forward.

Hi folks, just wanted to update this thread on our progress here. This is absolutely a high priority item and we are working on adding support for it in the future. This is a top issue for Windows containers and we are listening closely to your feedback on this. Cross-version compatibility demands a lot from the fundamental design of the Windows OS and enabling support for this is by no means trivial. Because of this it's likely that cross-version compatibility will not be supported for WS2019 images, and we will release communications on our plan for WS2022 and onwards as we get closer to a solution.
For now I'm going to close this issue, but we will continue to work hard on it and release communications on the subject when ready. As always, feel free to reach out to me with specific concerns.


[Snyk] Upgrade autoprefixer from 10.4.2 to 10.4.7

This PR was automatically created by Snyk using the credentials of a real user.Snyk has created this PR to upgrade autoprefixer from 10.4.2 to 10.4.7.

:information_source: Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

The recommended version is 5 versions ahead of your current version.
The recommended version was released a month ago, on 2022-05-02.

Release notes

Package name: autoprefixer

10.4.7 - 2022-05-02
Fixed print-color-adjust support in Firefox.

10.4.6 - 2022-05-01
Fixed print-color-adjust support.

10.4.5 - 2022-04-23
Fixed NaN in grid (by @ SukkaW).

10.4.4 - 2022-03-16
Fixed package.funding to have same value between all PostCSS packages.

10.4.3 - 2022-03-15
Fixed package.funding (by @ mondeja).

10.4.2 - 2022-01-07
Fixed missed -webkit- prefix for width: stretch.

    from autoprefixer GitHub release notes

Commit messages

Package name: autoprefixer

20fd999 Release 10.4.7 version
c8319f4 Update dependencies
8fe5b66 Fix print-color-adjust in FF
0a82431 Release 10.4.6 version
51b991c Improve handling print-color-adjust
08d960e Fix Node.js 12 on CI
684afed Update dependencies
89c5b9a Update dependencies
e9478db Clean up ESLint config
fca3f01 Fix test name
1c0adb8 Fix test
fdddbf3 Release 10.4.5 version
4ad9f72 Update dependencies
f6fa524 Update CI config
355a87a Fix #1446 (#1457)
37f26d6 Release 10.4.4 version
f6328f4 Update PostCSS
18d5417 Revert funding URL format changes
e41d4f5 Release 10.4.3 version
ec8e482 Update PostCSS
65c7bda Update dependencies
fbc094b Fix funding URL format
2d923ae Update dependencies
f18db88 Update `funding` key in package.json (#1448)

Compare

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.
For more information:
🧐 View latest project report
🛠 Adjust upgrade PR settings
🔕 Ignore this dependency or unsubscribe from future upgrade PRs

:rocket: Welcome to Baloise ChatOps based GitOps Bot :tada:
- If you want to enable preview environments for this PullRequest, comment with `/preview`.
- If you want to disable the preview environment for this PR, comment with `/undeploy`.
- If you need help or want to see the docs, comment with `/help`.

Make sure to refresh this page after submitting a command.
Preview environments can be redeployed automatically if you enable the webhook for updates to the source branch. :new:

Have fun building awesome apps! :hammer:  :whale2:  :truck:  :ship:


Decide what happens at the end of using the tag generator.

Overview
What is the functionality of the button - a user clicks the button 'Added to Civic Tech Index' at the end of using the tag generator
Action Items

[ ] Change the button to say
I added my project to Civic Tech Index/Add my logo to your homepage.

[ ] What clicking the button will do:

Record the URL string to a database for UX review
Send them to the form for uploading their logo( we need to create a google form for uploading logo)

[ ] Backend will write the endpoint that does step no.1

[ ] The front end will make the button hit the endpoint with the URL and send the user to the new google form to upload a logo

EX:
http://civictechindex.org/join-index?changeValue=CopyPasteTags&displayState=CopyPasteTags&orgName=&repositoryName=guides&repositoryUrl=https%3A%2F%2Fgithub.com%2Fhackforla%2Fguides&tagsToAdd=civictechindex&tagsToAdd=structure&tagsToAdd=diiivic&topicSearchError=&userTags=structure&userTags=diiivic&value=no
Resources/Instructions

@nagas018-ken   See form as reference...https://docs.google.com/forms/d/1y4l9vlQuKnoq6Asd4LOpvdBtvHeFXLUrqNoCH_5Aw1s/edit

@emecas Can we detect when an admin has tagged a repo from CTI?

@emecas Can we detect when an admin has tagged a repo from CTI?

@mariastudnicka  I am not sure what you mean. Can you elaborate a little better the use case, thanks
I am not sure an admin of what?

an admin of a particular GitHub Repository?
an admin of CTI project?

@emecas We're trying to understand if it's either any one with privileges at GitHub to make a change to a tag. Is there a way for us to be aware of that change?

@emecas will check if a endpoint exists in GitHub. Verify if task is done.
Post MVP: if user abandons process, we will create a means to contact to complete the tagging in CTI and GitHub or Force the user to complete the entire process. TBD.

I need to be outside during the meeting today. Here is the update for the issue.
@emecas you can reference to embed a google form. https://paperform.co/blog/embed-google-form/

@CNK and @emecas to coordinate --
We're currently not tagging activity in our database.

Track the URL activity of the repo the user selects
Using the URL of repo the user selects, a script needs to be created to check GitHub API for tagging that was created in the CTI.

Thanks @nagas018-ken!
Could you you at change behavior on click “I submitted my project” Create a version of “I voted,” but instead says "I submitted my project to the Civic Tech Index"  Please reach out to me if you have any questions.

@mariastudnicka  @nagas018-ken @DrIffathsultana
This is the documentation for the API call to get the tags (topics) for any repository,  https://docs.github.com/en/rest/reference/repos#get-all-repository-topics
Sample for this repo: civictechindex/CTI-website-frontend
URL: https://api.github.com/repos/civictechindex/CTI-website-frontend/topics
Method: GET
Header (required) :  Accept: application/vnd.github.mercy-preview+json
Response:

{
  "names": [
    "civictechindex",
    "hack-for-la",
    "code-for-america",
    "code-for-all",
    "civic-tech",
    "open-source",
    "opensource"
  ]
}

Screenshot

Bonnie and Iffath review of the tag generator on the hackforla/internship project
meeting_saved_closed_caption.txt

Create new screen grabs to be more legible.

@nrrao Please add text ("separate with spaces") for directions for submitting tags.

@chalimar Create new screen grabs to be more legible.

Instruction images can be found here.


Rewrite.
Still needs documentation.
Implements the following (at a high level).

obs-websocket API versioning.
Automatic version switching for API changes.
Expanded method binding.
All requests now use the following syntax
obs.doSomething(arguments, callback) returns Promise
All events now use the following syntax. You can call this method any number of times, currently no way to remove a listener.
obs.onSomething(callback)
All events are also available using the following syntax
obs.on('Something', callback)
Split the node and browser endpoints a bit... Not sure if I like this, it might not even be worth managing objects.

Plain JS:
var obs = new OBSWebSocket();

NodeJS:
var OBSWebSocket = require('obs-websocket-js').OBSWebSocket;
var OBSSource = require('obs-websocket-js').OBSSource;
var OBSScene = require('obs-websocket-js').OBSScene;

TODOs:

API Documentation.
Travis auto deployments/prereleases/releases/npm publishes.
Overload methods for backwards compatibility.
Marshal events to normalize the return data for future proofing.
Global logger/log level.
Static API, currently it gets instantiated twice.

Hey @haganbmj!
I'm interested in seeing this PR get merged soon. Are there any tasks that I could help with to get it ready?

@Lange Hey, sorry I kind of dropped this project. Life got weird and I stopped doing anything related to streaming.
I also published to npm @ 0.4.0 (and validated to ensure that I was actually publishing enough files this time...)
Just merged a stripped down version of this. The API versioning was turning out to be a pain as I wanted to account for all the non-passive changes between obs-websocket 0.3.2 and 4.0.0 ~ I might come back to that, but overall it just didn't feel worthwhile to implement a whole separate api on top of obs-websocket when all the versioning could just be handled there.
So, I'm going to write up a proper readme and some examples, but the gist of this is that I switched this over to the following formats.
// Constructor now automatically calls connect and authenticate.
var obs = new OBSWebSocket('address', 'password');

// When you need to switch later/make multiple authenticate calls.
obs.connect({ address: 'address' }, callback(err, data)) returns Promise
obs.authenticate({ password: 'password' }, callback(err, data)) returns Promise

// I probably will get around to optionally passing the password into the connect method.

// Requests have a couple different optional formats
obs.send('MethodName', {args}, callback(err, data)) returns Promise

obs.MethodName({args}, callback(err, data)) returns Promise

// Where method name is exactly what is defined by the obs-websocket plugin.
// Wasn't entirely sure if I should fix the casing on these or not. Seemed more intuitive to have them match exactly, but dunno.

``
// Events are now managed by EventEmitter
obs.on('EventName', function(err, data))
obs.onEventName(function(err, data))
// Or whatever else you want to do with EventEmitter.
// Again, EventName is exactly as detailed in the obs-websocket plugin.
// There are a couple extra emitters beyond the plugin.
ConnectionOpened
ConnectionClosed
AuthenticationSuccess
AuthenticationFailure

I've got a cheatsheet for the method name binding in [Api.js](lib/API.js) for reference.

Still a couple more things to fix up.
- Strengthen the address parsing.
- Tests.
- Debate if going back to handling API versions is worthwhile.
- Clean up project structure, group a couple functions, etc.


Builder docs

Wrote document on how to use the new builder infrastructure for Math, MemRef, Krnl, and Affine

@etiotto @tungld thanks for the comments. Edited the text to reflect your changes.


Architecture Website Added.

Description
(Describe your project over here.)
Checklist

[x] I've been assigned an issue related to this PR.
[ ] I've used beautifiers.
[x] I've added my Project's name and description to Index.md
[x] I've made a README.md file for my Project.
[x] The README.md file of my projrct contains Project title, Description, Use of project, Set up, Stack used and Output (Screenshots).

Related Issues or Pull Requests number
#252

please have a look at it and suggest me changes if any @harshita2216

https://www.codefactor.io/repository/github/ayushparikh-code/web-dev-mini-projects/pull/284
Make the following changes @jugeshraghav

@harshita2216 please have a look


Issue in running R from a note in Obsidian

Hi,
Thanks for your work on this plugin.
I am trying to run code chunks in R. I tried the following ways:
{r} 	  print("abc")
r 	  print("abc")
Both give the following error message:
<Error: spawn Rscript ENOENT>
Am I missing something basic?

Hi! This appears to be an issue with your local installation of R: the issue indicates that the spawn call wasn't able to find Rscript. I can help you debug!
What operating system are you on?
If you're on Linux, have you installed Obsidian through Snap/Flatpak/AppImage?
What version of the plugin are you using?

Hi chlohal,
Thanks so much for helping me debug this.
I am using Windows 11 and the plugin version is 1.0.0.

Wonderful, thank you. If you open up a terminal (PowerShell or cmd) and enter in Rscript, what do you see?

When I run RScript from C: It says:
'Rscript' is not recognized as an internal or external command,
operable program or batch file.
But when I navigate to the bin folder to where R is installed for me, it says:
<Usage: /path/to/Rscript [--options] [-e expr [-e expr2 ...] | file] [args]
--options accepted are
--help              Print usage and exit
--version           Print version and exit
--verbose           Print information on progress
--default-packages=list
Where 'list' is a comma-separated set
of package names, or 'NULL'
or options to R, in addition to --no-echo --no-restore, such as
--save              Do save workspace at the end of the session
--no-environ        Don't read the site and user environment files
--no-site-file      Don't read the site-wide Rprofile
--no-init-file      Don't read the user R profile
--restore           Do restore previously saved objects at startup
--vanilla           Combine --no-save, --no-restore, --no-site-file
--no-init-file and --no-environ
'file' may contain spaces but not shell metacharacters
Expressions (one or more '-e ') may be used instead of 'file'
See also  ?Rscript  from within R>
By the way, my obsidian vault is in a google drive and my R is installed in my hard drive. Just in case this is helpful in debugging.
Thanks for your help!

Hi, looks like Rscript is not added to your PATH variable. You can try one of the following:

Add the path to your R installation to your PATH variable.
Go to the settings for this plugin in the Obsidian settings. There you change the path of Rscript from Rscript to your/path/to/Rscript

That worked. Thanks so much for solving this!!


log was calling function without parens

Found this while fixing another branch.

Coverage remained the same at 40.97% when pulling 2e5bada788732d1de9822f6c124c75fb070bf3b5 on fix-test-failure into 0050a51a8cd7f635615d9b1a5d08916aa5451d5e on master.


Update 2015-10-01-SneakPeekAtOptaPlannerWorkbench.adoc

thanks Matyas :)

You're welcome! Great article!


api function not accessible

Since api is not exposed via scope object, its functions are not accessible. In my scenario, i want to update color of clicked country. but couldnt call updateWithData function.
after adding "api" to scope it worked. see code below
angular.module('datamaps').directive('datamap', [
'$window',
function($window) {
return {
restrict: 'EA',
scope: {
map: '=',
plugins: '=?',
zoomable: '@?',
onClick: '&?',
pluginData: '=',
api: '=?'
},
Is this correct approach

Same issue. Is this repo still being maintained? Can I submit a PR?


Using a polygon cropper

Hi,
I need to do polygon cropper inside my react application. can I use your component for this purpose?

Hey, sorry it's not suited to polygons only a rectangular shape on a fundamental level, you'll have to find alternatives.

Hey, sorry it's not suited to polygons only a rectangular shape on a fundamental level, you'll have to find alternatives.


fix: compose dropping only.localOS in an only filter

Description
This fixes an issue where compose could drop the only.localOS filter through compose.
Related Issue
Fixes #2158
Type of change

[X] Bug fix (non-breaking change which fixes an issue)
[ ] New feature (non-breaking change which adds functionality)
[ ] Other (security config, docs update, etc)

Checklist before merging

[X] Test, docs, adr added or updated as needed
[X] Contributor Guide Steps followed

We need to dereference the "composed" pointer on line 47 in src/pkg/packager/compose.go:
components = append(components, composed) -> components = append(components, *composed)

relevant screenshot:


Splash screen

Describe the solution you'd like
A cool looking splash screen similar to desktop. Maybe even a dynamic screen based on what season (similar to how mobile games do)
Additional context
Can use https://github.com/zoontek/react-native-bootsplash to create these.

There absolutely cannot be a delay in opening Shabad OS, it should not take as long as opening a game. This would be a band aid, not a solution.


can't authenticate user when opening a new download tab

devise_token_auth doesn't work when opening a new tab to download a file:
Angular app with ng-token-auth
$scope.downloadExcel = (token_id) ->
    $window.open('/excel/download/' + token_id, '_blank', '')
    return true

Rails api controller
class Api::V1::SpreadsheetsController < Api::V1::BaseController
	before_action :authenticate_user!

	respond_to :json, :xlsx

	def download
		@records = Record.where(id: params[:token_id])
		render xlsx: 'excel', filename: 'excel.xlsx', template: "spreadsheets/excel"
	end
end

If I comment out :authenticate_user! in the controller, the code will open a new tab, download an xlsx file, and close as expected. If I don't comment out :authenticate_user!, devise_token_auth returns an unauthorized user error.
How do I authenticate_user in a new download tab?

The problem stems from a conflict within rails routes. Solved.


[Bug][BitBucket] Not able to add Bitbucket connection

Search before asking

[X] I had searched in the issues and found no similar issues.

What happened
I am not able to add Bitbucket connection.
It says : Test Failed.Please check your configuration.
I noticed the BitBucket server's log contains: GET /rest/api/latest/user HTTP/1.1"  ( return 404

But according to the BitBucket API doc, it should be  /rest/api/latest/users
FYI : https://developer.atlassian.com/server/bitbucket/rest/v809/api-group-system-maintenance/#api-api-latest-users-get
What do you expect to happen
Add the Bitbucket connection successfully.
How to reproduce
Create a Bitbucket connection
Endpoint URL: http://testdomain.com:port/rest/api/latest
and then click the Test connection button.
Anything else
https://github.com/apache/incubator-devlake/blob/v0.15.0/plugins/bitbucket/api/connection.go#L61
I think it should be
res, err := apiClient.Get("users", nil, nil)
in Line 61
Version
v0.15.0
Are you willing to submit PR?

[X] Yes I am willing to submit a PR!

Code of Conduct

[X] I agree to follow this project's Code of Conduct

You can try this Endpoint URL: https://api.bitbucket.org/2.0/

You can try this Endpoint URL: https://api.bitbucket.org/2.0/

Hello, we are not using the Bitbucket cloud.
Our Bitbucket version is v5.14.1 and it seems that the 2.0 API is not available.
Is devlake only able to work with Bitbucket cloud or I should upgrade to a higher version?

@leehoawki oh,  i'm sorry. The Bitbucket server is not supported.

hello is there a plan for bitbucket server support? since I noticed that there is a tab for bitbucket server on the page.

Not in the short term, we are short of bandwidth at this point, would like to contribute?

I am interested in contributing as stated in #4568 Some initial pointers to get me started would be great.

@tim-goto That is great. You may want to check out the Gitlab plugin, it does support cloud and server simultaneously. In general:
It detects the API version when preparing the ApiClient
https://github.com/apache/incubator-devlake/blob/8262cb3b830fa3e1a141d5408f8e85fabf6d1603/backend/plugins/gitlab/models/connection.go#L90
Then, some subtasks would behavior different based on the version information.
https://github.com/apache/incubator-devlake/blob/b4c1d85cf0d41d07233cf5ee3db16f8a23cc8450/backend/plugins/gitlab/tasks/account_collector.go#L50
However, it is data source dependent, and may or may not be suitable for Bitbucket.

Please follow #4568 for the support of the BitBucket Server.


gke provider: Fix "gcloud .* describe" checks in util.sh

This basically prevents you from re-running e2es cross-project on the
GKE provider. (The current Jenkins jobs that have been moved to
different projects are working kind of accidentally.)

cc @jlowdermilk @mbforbes

lgtm

Merging to try to preempt breakage, as I just cleaned up networks in kubernetes-jenkins project.

I will always specify project in gcloud requests
I will always specify project in gcloud requests
I will always specify project in gcloud requests
...


Fixed filepaths for model files in configs/prompts/animation.yaml

Problem:
The animation.yaml did not have the correct paths to the model files, hence one encountered an error message about an incorrect repo_id.
Solution:
Prepend "magicanimate/" to the paths to reflect the correct folder structure.

followed the instruction as you told, but still get error messages as:
Traceback (most recent call last):
File "C:\Users\xiohu.conda\envs\python310\lib\runpy.py", line 196, in _run_module_as_main
return _run_code(code, main_globals, None,
File "C:\Users\xiohu.conda\envs\python310\lib\runpy.py", line 86, in _run_code
exec(code, run_globals)
File "D:\magicanimate\demo\gradio_animate.py", line 19, in
animator = MagicAnimate()
File "D:\magicanimate\demo\animate.py", line 58, in init
tokenizer = CLIPTokenizer.from_pretrained(config.pretrained_model_path, subfolder="tokenizer")
File "C:\Users\xiohu.conda\envs\python310\lib\site-packages\transformers\tokenization_utils_base.py", line 1813, in from_pretrained
resolved_vocab_files[file_id] = cached_file(
File "C:\Users\xiohu.conda\envs\python310\lib\site-packages\transformers\utils\hub.py", line 428, in cached_file
resolved_file = hf_hub_download(
File "C:\Users\xiohu.conda\envs\python310\lib\site-packages\huggingface_hub\utils_validators.py", line 110, in _inner_fn
validate_repo_id(arg_value)
File "C:\Users\xiohu.conda\envs\python310\lib\site-packages\huggingface_hub\utils_validators.py", line 158, in validate_repo_id
raise HFValidationError(
huggingface_hub.utils._validators.HFValidationError: Repo id must be in the form 'repo_name' or 'namespace/repo_name': 'magicanimate/pretrained_models/stable-diffusion-v1-5'. Use repo_type argument if needed.

I'm not sure the fix was necessary for everyone as the pr never got merged and they still have the original version in their repo.
It was necessary for me on W11/WSL.
Did you encounter the same error before changing the filepaths? What system?


Add bower.json file for have this lib in bower

As you say in one of your issues Add to Bower, I allowed myself to associate your repo has a bower.json file.
With that, and once the pull accepted , I will simply register your repository to make accessible it via bower.
The command will be :
      bower register nanoajax https://github.com/yanatan16/nanoajax

But this command can be applied only if your repository have bower.json file. So please accept this version of your project for can I put your project on bower.io :)

Thanks!

I did the registration command, so its on bower now. See #8.


Purpose of mlc_chat compiler

❓ General Questions
I was looking through the repo and I'm confused about why there are two Llama implementations: a Relax model and a seemingly higher-level nn.Module-based definition.
I saw the PR but I still don't fully understand what its purpose is and why it rquires a second model definition.  Some clarification would be much appreciated, thanks!

Thanks for asking! This is going to be the next generation of the compilation pipeline that aims at making the system actually easy to use.

Thanks for asking! This is going to be the next generation of the compilation pipeline that aims at making the system actually easy to use.

Ah okay that makes sense. Looking forward to the evolution! Thanks for the fast reply!


Bazel intelliJ gives wrong "invalid package name" errors

Description of the bug:
While trying to create a package, IntelliJ give incorrect error message but can create a package

I tried to reproduce wrt to maven project but couldn't see any error there

What's the simplest, easiest way to reproduce this bug? Please provide a minimal example if possible.
having bazel plugin installed, create a package in IntelliJ and check for error
No response
Which Intellij IDE are you using? Please provide the specific version.
JetBrains Client 2023.1.2
No response
What programming languages and tools are you using? Please provide specific versions.
Java
No response
What Bazel plugin version are you using?
bundled 2<IP_ADDRESS>.1-api-version-231
No response
Have you found anything relevant by searching the web?
No
No response
Any other information, logs, or outputs that you want to share?
No response

I tried using this project: https://github.com/bazelbuild/intellij/tree/master/examples/java/greetings_project. After importing it, I clicked right click on greeting_lib/src/com/example then New->Package. Can you try with this project and give us more details if you are able to reproduce it there.


Cannot tranfer funds out of Electrum-stratis wallet.

Have been trying to transfer funds out of my stratis electrum wallet, failing each time.
Also this error pops up every time i try
error: TX rejected
Please Help.
p.s: Yes i am upgraded to the latest version v2.7.17.

Also this error pops up every time i try
error: TX rejected

I am having the same issue. I rebuilt the wallet from seed with the same result. No matter how high I set the fee the transaction is rejected (tried up to .1 strat)

@stratboy11 @hackinthebochs
Try setting your system clock to automatic (if it's already on it, switch to manual and back to automatic).

That fixed it for me. System clock was off by about 10 minutes. Thanks!


ScannerError (eDx course Sawtooth exercise)

Following the instructions from Chapter 6. > Starting Hyperledger Sawtooth I've dowloaded sawtooth-default.yaml, changed directory and tried to run docker command. Then I've stuck with an error:
yaml.scanner.ScannerError: mapping values are not allowed here in "./sawtooth-default.yaml", line 381, column 24
Do you have any idea how to solve this one?

Can you post line 381 from your sawtooth-default.yaml file?

You are correct, there are 77. And that's what confuses me most...

Can you check your file just to be sure that it matches the above link? Also, what operating system and docker-compose version are you using?


hip joint child terms

Add new child terms of abnormal hip joint morphology MP:0030829
abnormal acetabular labrum morphology
DEF: any structural anomaly of the horse-shaped fibrocartilaginous structure that attaches to the peripheral rim of the acetabulum, contacts the articular surface of the femoral head, and blends inferiorly with the transverse acetabular ligament; it increases the depth of the acetabulum, increasing static stability and contributes to hydrostatic pressurization of the intra-articular space, joint lubrication, and load distribution
SOURCE: https://books.google.com/books?isbn=0323549667
abnormal transverse acetabular ligament morphology
DEF: any structural anomaly of the fibrous continuation of the acetabular labrum that is completely collagenous and contains no chondrocytes or cartilage; it consists of strong, flattened fibers which cross the acetabular notch and convert it into a foramen through which the nutrient vessels enter the joint; it prevents inferior displacement of head of femur
https://en.wikipedia.org/wiki/Transverse_acetabular_ligament, http://www.anatomyexpert.com/app/structure/15415/
NOTE: Existing terms abnormal ischiofemoral ligament morphology MP:0030774 and abnormal iliofemoral ligament morphology MP:0030784 should be placed under abnormal hip joint morphology MP:0030829

Added new terms:
abnormal acetabular labrum morphology MP:0030840
abnormal transverse acetabular ligament morphology MP:0030841
Placed abnormal ischiofemoral ligament morphology MP:0030774 and abnormal iliofemoral ligament morphology MP:0030784 under abnormal hip joint morphology MP:0030829


pkg/app: staticcheck

Closing this, see my comment here:

https://github.com/perkeep/perkeep/pull/1405#issuecomment-894727096


Add version command to driver

This PR adds a command (version) and an option (--version or -v) to the driver. Both print the current working version of MIGraphX.

@turneram @pfultz2 I am wondering whether we should always print the version info in the first line no matter what we execute..

@turneram assume you didn't change msgpack.cpp, why are the format tests failing now?
Cc: @pfultz2

The .o files should be removed from this PR.

assume you didn't change msgpack.cpp, why are the format tests failing now?

I dont see a formatting failure in msgpack. These are format diffs shown:
432,433c432
 sh -c clang-format-5.0 -style=file ./src/driver/main.cpp | diff - ./src/driver/main.cpp
sh -c clang-format-5.0 -style=file ./src/driver/models.hpp | diff - ./src/driver/models.hpp
<         std::cout << "MIGraphX Version: " << MIGRAPHX_VERSION_MAJOR << "." << MIGRAPHX_VERSION_MINOR
<                   << std::endl;
---
>         std::cout << "MIGraphX Version: " << MIGRAPHX_VERSION_MAJOR << "." << MIGRAPHX_VERSION_MINOR << std::endl;
518,519c517,518
<         std::string version_str = "MIGraphX Version: " + std::to_string(MIGRAPHX_VERSION_MAJOR) +
<                                   "." + std::to_string(MIGRAPHX_VERSION_MINOR);
---
>         std::string version_str = "MIGraphX Version: " +
>             std::to_string(MIGRAPHX_VERSION_MAJOR) + "." + std::to_string(MIGRAPHX_VERSION_MINOR);
521,524c520,521
<         ap(nullptr,
<            {"-v", "--version"},
<            ap.help("Show MIGraphX version"),
<            ap.show_help(version_str));
---
>         ap(nullptr, {"-v", "--version"}, ap.help("Show MIGraphX version"), ap.show_help(version_str));
>
sh -c clang-format-5.0 -style=file ./src/version.h.in | diff - ./src/version.h.in
1,2c1,2
< #define MIGRAPHX_VERSION_MAJOR @PROJECT_VERSION_MAJOR @
< #define MIGRAPHX_VERSION_MINOR @PROJECT_VERSION_MINOR @
---
> #define MIGRAPHX_VERSION_MAJOR @PROJECT_VERSION_MAJOR@
> #define MIGRAPHX_VERSION_MINOR @PROJECT_VERSION_MINOR@

So main.cpp should be formatted, but we should skip formatting version.h.in(as adding the space wont configure correctly in cmake) using // clang-format off.


Create DataVisualizationAgent

📝 Description
Added datavisualization agent.
💣 Is this a breaking change (Yes/No):

[ ] Yes
[x] No

🚧 How to migrate?
Don't need.
📝 Additional Information
lol

Dear @calapsss ,
We found there are some issuse in your prompt as the following screenshot shows. Please update your prompt and reply to this PR.

Updated


EKS 1.24 + ESO 0.7.0 + IRSA cant assume role

Hi
i have new cluster eks 1.24 and i install eso 0.7.0 from helm ,
certController:
  create: false
webhook:
  create: false
serviceAccount:
  create: true
  name: vu-prod-secret-manager-operator
  annotations:
    eks.amazonaws.com/role-arn: arn:aws:iam::XXXXXXXXXXX:role/vu-prod-secret-manager-operator
serviceMonitor:
  enabled: false
extraArgs:
  loglevel: info

we are using ODIC + IRSA The IAM role is config like this
{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Sid": "",
            "Effect": "Allow",
            "Principal": {
                "Federated": "arn:aws:iam::XXXXXXXXX:oidc-provider/oidc.eks.us-east-1.amazonaws.com/id/XXXXXXXCXCXCXCXCX"
            },
            "Action": "sts:AssumeRoleWithWebIdentity",
            "Condition": {
                "StringEquals": {
                    "oidc.eks.us-east-1.amazonaws.com/id/XXXXXXXCXCXCXCXCX:sub": "system:serviceaccount:*:*"
                }
            }
        }
    ]
}

and i created "ClusterSecretStore"
apiVersion: external-secrets.io/v1beta1
kind: ClusterSecretStore
metadata:
  name: cluster-secret-store
spec:
  provider:
    aws:
      service: SecretsManager
      region: us-east-1
      role: arn:aws:iam::XXXXXXXXXXX:role/vu-prod-secret-manager-operator

this setup is working in eks 1.22 and EOS 0.5.6
after i upgraded to new eks 1.24 i am getting  error about assume
"could not validate provider: WebIdentityErr: failed to retrieve credentials\ncaused by: AccessDenied: Not authorized to perform sts:AssumeRoleWithWebIdentity"
{"level":"error","ts":1672823804.0083609,"msg":"Reconciler error","controller":"clustersecretstore","controllerGroup":"external-secrets.io","controllerKind":"ClusterSecretStore","ClusterSecretStore":{"name":"cluster-secret-store"},"namespace":"","name":"cluster-secret-store","reconcileID":"fe380224-1627-4a08-a212-51623906989d","error":"could not validate provider: WebIdentityErr: failed to retrieve credentials\ncaused by: AccessDenied: Not authorized to perform sts:AssumeRoleWithWebIdentity\n\tstatus code: 403, request id: 4bc346ed-884f-4a1e-932c-352e6ed1b35d","stacktrace":"sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/home/runner/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.13.1/pkg/internal/controller/controller.go:326\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/home/runner/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.13.1/pkg/internal/controller/controller.go:273\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/home/runner/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.13.1/pkg/internal/controller/controller.go:234"}
{"level":"info","ts":1672823885.9289026,"logger":"provider.aws","msg":"using aws session","region":"us-east-1","credentials":null}

{"level":"error","ts":1672823723.199175,"msg":"Reconciler error","controller":"clustersecretstore","controllerGroup":"external-secrets.io","controllerKind":"ClusterSecretStore","ClusterSecretStore":{"name":"cluster-secret-store"},"namespace":"","name":"cluster-secret-store","reconcileID":"ab0b975c-ee60-4b0c-a108-3c5f442c100d","error":"could not validate provider: WebIdentityErr: failed to retrieve credentials\ncaused by: AccessDenied: Not authorized to perform sts:AssumeRoleWithWebIdentity\n\tstatus code: 403, request id: 52cb0f4d-c6ef-458d-a5ed-c8834efdf997","stacktrace":"sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/home/runner/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.13.1/pkg/internal/controller/controller.go:326\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/home/runner/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.13.1/pkg/internal/controller/controller.go:273\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/home/runner/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.13.1/pkg/internal/controller/controller.go:234"}

{"level":"error","ts":1672823886.0788324,"logger":"controllers.ClusterSecretStore","msg":"unable to validate store","clustersecretstore":"/cluster-secret-store","error":"could not validate provider: WebIdentityErr: failed to retrieve credentials\ncaused by: AccessDenied: Not authorized to perform sts:AssumeRoleWithWebIdentity\n\tstatus code: 403, request id: b7952055-108d-4f47-b882-6901f9f53332","stacktrace":"github.com/external-secrets/external-secrets/pkg/controllers/secretstore.reconcile\n\t/home/runner/work/external-secrets/external-secrets/pkg/controllers/secretstore/common.go:67\ngithub.com/external-secrets/external-secrets/pkg/controllers/secretstore.(*ClusterStoreReconciler).Reconcile\n\t/home/runner/work/external-secrets/external-secrets/pkg/controllers/secretstore/clustersecretstore_controller.go:54\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/home/runner/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.13.1/pkg/internal/controller/controller.go:121\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/home/runner/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.13.1/pkg/internal/controller/controller.go:320\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/home/runner/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.13.1/pkg/internal/controller/controller.go:273\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/home/runner/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.13.1/pkg/internal/controller/controller.go:234"}

the configuration is not changed and i can see the service didn't create "secrets"  as it was in the eks 1.22 i think the is du to a change in the eks 1.24 in Service account ...
i am not sure if this a bug in the EOS but i cant get any secrets
as part of the test i add new ubuntu pods and assume the role

aws sts get-caller-identity

aws sts assume-role-with-web-identity  --role-arn arn:aws:iam::xxxxxxxxxxx:role/vu-prod-secret-manager-operator  --role-session-name noam --web-identity-token $(cat /run/secrets/eks.amazonaws.com/serviceaccount/token ) --region us-east-1

and i can get a valid aws access
any one have any idea what is this issue ?
Thanks

SO after full testing i think i fount a solution,
{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Sid": "",
            "Effect": "Allow",
            "Principal": {
                "Federated": "arn:aws:iam::XXXXXXXXXX:oidc-provider/oidc.eks.us-east-1.amazonaws.com/id/CCCCCCCCCCC"
            },
            "Action": "sts:AssumeRoleWithWebIdentity",
            "Condition": {
                "StringLike": {
                    "oidc.eks.us-east-1.amazonaws.com/id/XXXXXXXXXXXXXXX:sub": "system:serviceaccount:*:*"
                }
            }
        },
        {
            "Effect": "Allow",
            "Principal": {
                "AWS": "*"
            },
            "Action": "sts:AssumeRole"
        }
    ]
}
```yaml

i am not sure why its working like this and you need to add explisit "sts:AssumeRole" as the main point when you use IRSA is to use "sts:AssumeRoleWithWebIdentity" ... i think its bug ? or wrong use ?

StringEquals does exact case-sensitive matching. The second example uses StringLike, that's probably the issue here i suppose

@moolen HI
so long story short i try the "StringEquals" and "StringLike" and the issues is same ... i can recreate eks 1.24 + ESO 0.7.0 and use the
"StringLike": {
"oidc.eks.us-east-1.amazonaws.com/id/xxxxxxxxxx:sub": "system:serviceaccount::"
it will not work i think in the code ( i didn't check ) its not use the "sts:AssumeRoleWithWebIdentity" token and we get this error
if you like i can try to reproduces it

You configure the external-secrets controller in the following way:

you assign the pod a role using IRSA by setting an annotation on the Kubernetes Service Account eks.amazonaws.com/role-arn: arn:aws:iam::XXXXXXXXXXX:role/vu-prod-secret-manager-operator
in your  ClusterSecretStore you let the controller assume the very same role

What happens is:

the controller fetches temporary credentials using the Kubernetes Service account
when using this ClusterSecretStore the controller does a AssumeRole call with these :point_up_2: credentials to assume the very same role (which is unneeded)

I suggest you:

run the controller completely without AWS credentials (no service account annotation)
create a new service account with IRSA annotation and point your service account to it. This service doesn't need to be mounted anywhere.

That should solve this issue. The details can be found here: https://external-secrets.io/v0.7.0/provider/aws-secrets-manager/#eks-service-account-credentials. Please let me know if that helps.

Hi
i use eks 1.24 , ESO 0.7.1
the fooling config
{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Sid": "",
            "Effect": "Allow",
            "Principal": {
                "Federated": "arn:aws:iam::xxxxxx:oidc-provider/oidc.eks.us-east-1.amazonaws.com/id/xxxxxxx"
            },
            "Action": "sts:AssumeRoleWithWebIdentity",
            "Condition": {
                "StringEquals": {
                    "oidc.eks.us-east-1.amazonaws.com/id/xxxxxxxx": "system:serviceaccount:kube-system:vu-prod-secret-manager-operator"
                }
            }
        }
    ]
}

ESO config
certController:
  create: false
webhook:
  create: false
serviceMonitor:
  enabled: false
extraArgs:
  loglevel: debug

ESO ClusterSecretStore
apiVersion: v1
kind: ServiceAccount
metadata:
  annotations:
    eks.amazonaws.com/role-arn: arn:aws:iam::xxxxxx:role/vu-prod-secret-manager-operator
  name: vu-prod-secret-manager-operator
  namespace: kube-system

---
apiVersion: external-secrets.io/v1beta1
kind: ClusterSecretStore
metadata:
  name: secret-store
spec:
  provider:
    aws:
      service: SecretsManager
      role: arn:aws:iam::xxxxxxxx:role/vu-prod-secret-manager-operator
      region: us-east-1
      auth:
        jwt:
          serviceAccountRef:
            name: vu-prod-secret-manager-operator
            namespace: "kube-system"

i get this erros

external-secrets-546d6b7948-zs2cq external-secrets {"level":"debug","ts":1672998866.7665577,"logger":"controllers.ClusterSecretStore","msg":"validating","clustersecretstore":"/secret-store"}
external-secrets-546d6b7948-zs2cq external-secrets {"level":"debug","ts":1672998866.7666209,"logger":"clientmanager","msg":"creating new client","provider":"*aws.Provider","store":"/secret-store"}
external-secrets-546d6b7948-zs2cq external-secrets {"level":"debug","ts":1672998866.7669966,"logger":"provider.aws","msg":"using credentials via service account","role":"arn:aws:iam::xxxxxxx:role/vu-prod-secret-manager-operator","region":"us-east-1"}
external-secrets-546d6b7948-zs2cq external-secrets {"level":"info","ts":1672998866.7670486,"logger":"provider.aws","msg":"using aws session","region":"us-east-1","credentials":{}}
external-secrets-546d6b7948-zs2cq external-secrets {"level":"debug","ts":1672998866.7672124,"logger":"provider.aws","msg":"fetching token","ns":"kube-system","sa":"vu-prod-secret-manager-operator"}
external-secrets-546d6b7948-zs2cq external-secrets {"level":"error","ts":1672998866.8102505,"logger":"controllers.ClusterSecretStore","msg":"unable to validate store","clustersecretstore":"/secret-store","error":"could not validate provider: AccessDenied: User: arn:aws:sts::xxxxxxxx:assumed-role/vu-prod-secret-manager-operator/external-secrets-provider-aws is not authorized to perform: sts:AssumeRole on resource: arn:aws:iam::xxxxxx:role/vu-prod-secret-manager-operator\n\tstatus code: 403, request id: 3f9466c7-5ae2-4bf4-ba9a-c2e88f74e944","stacktrace":"github.com/external-secrets/external-secrets/pkg/controllers/secretstore.reconcile\n\t/home/runner/work/external-secrets/external-secrets/pkg/controllers/secretstore/common.go:67\ngithub.com/external-secrets/external-secrets/pkg/controllers/secretstore.(*ClusterStoreReconciler).Reconcile\n\t/home/runner/work/external-secrets/external-secrets/pkg/controllers/secretstore/clustersecretstore_controller.go:54\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/home/runner/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.14.1/pkg/internal/controller/controller.go:122\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/home/runner/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.14.1/pkg/internal/controller/controller.go:323\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/home/runner/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.14.1/pkg/internal/controller/controller.go:274\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/home/runner/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.14.1/pkg/internal/controller/controller.go:235"}
external-secrets-546d6b7948-zs2cq external-secrets {"level":"debug","ts":1672998866.8103285,"logger":"events","msg":"AccessDenied: User: arn:aws:sts::xxxxxxxxx:assumed-role/vu-prod-secret-manager-operator/external-secrets-provider-aws is not authorized to perform: sts:AssumeRole on resource: arn:aws:iam::xxxxxxxxx:role/vu-prod-secret-manager-operator\n\tstatus code: 403, request id: 3f9466c7-5ae2-4bf4-ba9a-c2e88f74e944","type":"Warning","object":{"kind":"ClusterSecretStore","name":"secret-store","uid":"67fcab16-9053-4fd6-9412-1949f608e41a","apiVersion":"external-secrets.io/v1beta1","resourceVersion":"175379"},"reason":"ValidationFailed"}
external-secrets-546d6b7948-zs2cq external-secrets {"level":"error","ts":1672998866.8257182,"msg":"Reconciler error","controller":"clustersecretstore","controllerGroup":"external-secrets.io","controllerKind":"ClusterSecretStore","ClusterSecretStore":{"name":"secret-store"},"namespace":"","name":"secret-store","reconcileID":"8e4afc6e-46f7-4c72-8298-f2bc91694711","error":"could not validate provider: AccessDenied: User: arn:aws:sts::xxxxxxxxx:assumed-role/vu-prod-secret-manager-operator/external-secrets-provider-aws is not authorized to perform: sts:AssumeRole on resource: arn:aws:iam::xxxxxxxx:role/vu-prod-secret-manager-operator\n\tstatus code: 403, request id: 3f9466c7-5ae2-4bf4-ba9a-c2e88f74e944","stacktrace":"sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/home/runner/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.14.1/pkg/internal/controller/controller.go:329\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/home/runner/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.14.1/pkg/internal/controller/controller.go:274\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/home/runner/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.14.1/pkg/internal/controller/controller.go:235"}

i think the issues is as you instruct me not to use
"run the controller completely without AWS credentials (no service account annotation)" this will setup the default SA "external-secrets" its installed via helm ( by default ) i am not sure ....
i try to
{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Sid": "",
            "Effect": "Allow",
            "Principal": {
                "Federated": "arn:aws:iam::xxxxxx:oidc-provider/oidc.eks.us-east-1.amazonaws.com/id/xxxxxx"
            },
            "Action": "sts:AssumeRoleWithWebIdentity",
            "Condition": {
                "StringLike": {
                    "oidc.eks.us-east-1.amazonaws.com/id/xxxxxxxxx": "system:serviceaccount:*:*"
                }
            }
        }
    ]
}

same issue its just want STS  ....

Remove the spec.provider.aws.role, that should do it then.

HI
i can confirm
{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Sid": "",
            "Effect": "Allow",
            "Principal": {
                "Federated": "arn:aws:iam::xx:oidc-provider/oidc.eks.us-east-1.amazonaws.com/id/xxxx"
            },
            "Action": "sts:AssumeRoleWithWebIdentity",
            "Condition": {
                "StringEquals": {
                    "oidc.eks.us-east-1.amazonaws.com/id/xxxxx": "system:serviceaccount:kube-system:vu-prod-secret-manager-operator"
                }
            }
        }
    ]
}

---
apiVersion: external-secrets.io/v1beta1
kind: ClusterSecretStore
metadata:
  name: cluster-secret-store
spec:
  provider:
    aws:
      service: SecretsManager
      region: us-east-1
      auth:
        jwt:
          serviceAccountRef:
            name: vu-prod-secret-manager-operator
            namespace: "kube-system"

This is working , i must say that i didnt understand from the docs that this is the way .... it will be nice to add some examples "using Irsa"
in any case thanks !!! you helped me allot !


Let user reload page due to permission errors

it actually doesn't work - as soon as anything disallowed enters the tab, the debugging is lost.


Error while downloading pytorch_model.bin

Hello,
The installation was fine, however when I begin to train lora, I get an error.
Setup is fine everything matching and looking like this:
[Dataset 0]
loading image sizes.
100%|█████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████| 265/265 [00:00<00:00, 9129.44it/s]
make buckets
min_bucket_reso and max_bucket_reso are ignored if bucket_no_upscale is set, because bucket reso is defined by image size automatically / bucket_no_upscaleが指定された場合は、bucketの解像度は画像サイズから自動計算されるため、min_bucket_resoとmax_bucket_resoは無視されます
number of images (including repeats) / 各bucketの画像枚数（繰り返し回数を含む）
bucket 0: resolution (512, 512), count: 26500
mean ar error (without repeats): 0.0
prepare accelerator
Using accelerator 0.15.0 or above.
load StableDiffusion checkpoint
loading u-net:
loading vae:
But then a big 1.71GB file begins downloading and always crashing
Downloading pytorch_model.bin:   7%|███▍                                           | 126M/1.71G [01:02<10:37, 2.49MB/s]Traceback (most recent call last):
File "C:\path\Kohya\kohya_ss\venv\lib\site-packages\urllib3\response.py", line 444, in _error_catcher
yield
File "C:\ path1\Kohya\kohya_ss\venv\lib\site-packages\urllib3\response.py", line 567, in read
data = self._fp_read(amt) if not fp_closed else b""
File "C:\ path1\Kohya\kohya_ss\venv\lib\site-packages\urllib3\response.py", line 533, in _fp_read
return self._fp.read(amt) if amt is not None else self._fp.read()
File "C:\ path2\Python\Python310\lib\http\client.py", line 465, in read
s = self.fp.read(amt)
File "C:\ path2\Python\Python310\lib\socket.py", line 705, in readinto
return self._sock.recv_into(b)
File "C:\ path2\Python\Python310\lib\ssl.py", line 1274, in recv_into
return self.read(nbytes, buffer)
File "C:\ path2\Python310\lib\ssl.py", line 1130, in read
return self._sslobj.read(len, buffer)
TimeoutError: The read operation timed out
I tried to play with some settings, ensured I have pip and torch up to date and set up kohya_ss once more but cannot resolve the issue.

same error I've download the  pytorch_model.bin manually, but where or in what directory I have to put ?... you can download here: https://huggingface.co/openai/clip-vit-large-patch14/tree/main but I have no ideia where to place since the system insist in trying to download from huggingface..

same error I've download the pytorch_model.bin manually, but where or in what directory I have to put ?... you can download here: https://huggingface.co/openai/clip-vit-large-patch14/tree/main but I have no ideia where to place since the system insist in trying to download from huggingface..

Thank you for the download link.
You just need to place the  pytorch_model.bin path in this line of code, instead of openai/clip-vit-large-patch14: https://github.com/kohya-ss/sd-scripts/blob/7ad7cac0c272211abb688168d4c2d4400bef7c51/library/model_util.py#L898

This should be same as train_util.load_tokenizer which read from args.tokenizer_cache_dir

I have the same problem and it cannot be resolved. I have followed above comments and the result is just the same as Timellie.
can anyone have any idea where should i place the pytorch_model.bin?
Thanks a lot.

I have the same problem and it cannot be resolved. I have followed above comments and the result is just the same as Timellie. can anyone have any idea where should i place the pytorch_model.bin?
Thanks a lot.

I solve this problem in ubuntu, hope this can help u . first , I download the "https://huggingface.co/openai/clip-vit-large-patch14/tree/main" to local disk, put it to "/home/lora-scripts/openai/clip-vit-large-patch14" . and then you need to modify two files in ~/lora-scripts/sd-scripts/library folder, I mean "model_util.py" and "train_util.py".  first, modify "model_util.py", you need modify this line "text_model = CLIPTextModel.from_pretrained("openai/clip-vit-large-patch14").to(device)", in my case , it changed to "text_model = CLIPTextModel.from_pretrained("/home/lora-scripts/openai/clip-vit-large-patch14").to(device)". second, you also should modify the "train_util.py", modify this line TOKENIZER_PATH = "openai/clip-vit-large-patch14"  like above.


Can Centos image run on Ubuntu nodes？

Description of problem
when i use kata on a ubuntu node,i want to run a container with centos img, can kata support that?
the config:
[hypervisor.qemu]
path = "/usr/bin/qemu-vanilla-system-x86_64"
kernel = "/usr/share/kata-containers/vmlinuz.container"     //this is centos kernel
initrd = "/usr/share/kata-containers/kata-containers-initrd.img"  //this is cenos img
machine_type = "pc"

It should, but it depends on the configuration you're using, which CentOS version you're using, etc.
Please, provide all the configuration and versions of what you want to use.

Shouldn’t be anime issue. Give it a try. If you use github/kata-containers/osbuilder, you’ll see that centos is a supported target for the rootfs builder. I’m not sure you’ll have requirements on the kernel, versus rootfs?

@fidencio @egernst thanks.


Store task.steve_jobs.process_message results

When looking at the task in Flower one can see the input kwargs of the task, which contain the whole incoming event. So it AFAIK should be stored somewhere in redis (where else could Flower take it from?), but I can't see it via redis-commander.

I've added project and trigger to the stored results.
We can add more once we know what we actually need.

One more question, do we want to store also tasks that we do not process. For example, I tried to send a hook from the github-app installation which is not yet in SteveJobs and result stored is:
{"status": "SUCCESS", "result": null, "traceback": null, "children": [], "task_id": "50b002f7-a165-479b-b800-4bb96fe2ca3c", "date_done": "2019-06-27T13:03:35.662240"}

do we want to store also tasks that we do not process

tl;dr; no  :-)
we don't process them because we ignore them so there's no point in storing any info

I simplified & improved it. PTAL @rpitonak
If it looks good, go ahead and merge. Thanks.


[Bug]: 0.48.0 breaks button style imports

Preflight Checklist

[X] I have read the Contributing Guidelines for this project.
[X] I agree to follow the Code of Conduct that this project adheres to.
[X] I have searched the issue tracker for an issue that matches the one I want to file, without success.

Bug type
Functionality
It affects the following packages
Components
Which version of Lyne Components are you using
0.48.0
Operating system
macOS
Browser / Browser version
Chromium
Input mode
None
Additional settings
No response
What happened?
Since 0.48.0, and probably PR #2475, our , respectively its style imports break with the following error:
node_modules/@sbb-esta/lyne-components/button/common/index.d.ts:2:46 - error TS2307: Cannot find module './button-common.scss?lit&inline' or its corresponding type declarations.
See the stackblitz example linked below.
I'm not sure if this is an "Angular only" issue or not - so far I don't have a deep enough understanding of how Lit components work. 😉
Thanks in advance!
Steps to reproduce the issue

Set up a basic Angular project
Install Lyne
Try to use a button (any variant will do)
See the error in the console

Minimal stackblitz:
https://stackblitz.com/edit/angular-at-nxjrka?file=src%2Fmain.ts
Relevant log output
No response

not solved with 0.48.1


Ref in affects field is not set in Vulnerability (JSON export)

Hi,
When using this code:
from cyclonedx.model.vulnerability import (
        Vulnerability,
        VulnerabilitySource,
        VulnerabilityAnalysis,
        ImpactAnalysisState,
        BomTarget,
        )

from cyclonedx.model.component import Component
from cyclonedx.model.bom import Bom
from cyclonedx.output import SchemaVersion, get_instance
from cyclonedx.output import OutputFormat as CycloneDxFormat
from pathlib import Path

comp = Component(name="component")
vul = Vulnerability(id="CVE-xxxxxx", affects=[BomTarget(ref=comp.bom_ref)])

sbom = Bom()
sbom.components.add(comp)
sbom.vulnerabilities.add(vul)

outputter = get_instance(
        bom=sbom,
        output_format=CycloneDxFormat.JSON,
        schema_version=SchemaVersion.V1_4,
        )

path = Path("output.json")

with path.open("w") as f:
    f.write(outputter.output_as_string())

I have the following output:
{
    "components": [
        {
            "bom-ref": "d33a87a7-658a-4823-b488-0bc64dff18a2",
            "name": "test",
            "type": "library"
        }
    ],
    "dependencies": [
        {
            "ref": "d33a87a7-658a-4823-b488-0bc64dff18a2"
        }
    ],
    "metadata": {
        "timestamp": "2023-04-28T12:47:08.750010+00:00",
        "tools": [
            {
                "externalReferences": [
                    {
                        "type": "build-system",
                        "url": "https://github.com/CycloneDX/cyclonedx-python-lib/actions"
                    },
                    {
                        "type": "distribution",
                        "url": "https://pypi.org/project/cyclonedx-python-lib/"
                    },
                    {
                        "type": "documentation",
                        "url": "https://cyclonedx.github.io/cyclonedx-python-lib/"
                    },
                    {
                        "type": "issue-tracker",
                        "url": "https://github.com/CycloneDX/cyclonedx-python-lib/issues"
                    },
                    {
                        "type": "license",
                        "url": "https://github.com/CycloneDX/cyclonedx-python-lib/blob/main/LICENSE"
                    },
                    {
                        "type": "release-notes",
                        "url": "https://github.com/CycloneDX/cyclonedx-python-lib/blob/main/CHANGELOG.md"
                    },
                    {
                        "type": "vcs",
                        "url": "https://github.com/CycloneDX/cyclonedx-python-lib"
                    },
                    {
                        "type": "website",
                        "url": "https://cyclonedx.org"
                    }
                ],
                "name": "cyclonedx-python-lib",
                "vendor": "CycloneDX",
                "version": "4.0.0"
            }
        ]
    },
    "serialNumber": "urn:uuid:1cbe8ca8-b6a0-4b1c-b8b4-b9f31291625b",
    "version": 1,
    "vulnerabilities": [
        {
            "affects": [
                {
                    "ref": {}
                }
            ],
            "bom-ref": "74bbd2e2-ddc8-4bd5-a6bf-0e53c583fb8f",
            "id": "CVE-xxxxxx"
        }
    ],
    "$schema": "http://cyclonedx.org/schema/bom-1.4.schema.json",
    "bomFormat": "CycloneDX",
    "specVersion": "1.4"
}

In Json, "vulnerabilities->affects->ref" field is not set.  I think the field should be set using the component reference (given in code) but for an unknown reason it's not. Am I missing something ?
Thanks.

Hi,
I found the issue. "ref" is supposed to be a string. So I need to convert bom_ref to string:
vul = Vulnerability(id="CVE-xxxxxx", affects=[BomTarget(ref=str(comp.bom_ref))])


Not able to see HDMI/ rtsp output

I have the set up the DevKit following the GetStarted module. I have all four modules (edgeAgent, EdgeHub, AIVisionDevKitGetStartedModule, and WebStreamModule) running on the device.
The docker logs for 'WebStreamContainer':
Listening for incoming mp4 stream on http://<IP_ADDRESS>:3001/camera
Awaiting WebSocket connections on ws://<IP_ADDRESS>:3002
Webserver listening, configured on port 3000
Docker logs for `AIVisionDevKitGetStartedModule':
Error: Time:Fri Jun 19 15:46:21 2020 File:/usr/sdk/src/c/umqtt/src/mqtt_client.c Func:mqtt_client_connect Line:1000 Error: io_open failed
Error: Time:Fri Jun 19 15:46:21 2020 File:/usr/sdk/src/c/iothub_client/src/iothubtransport_mqtt_common.c Func:SendMqttConnectMsg Line:2122 failure connecting to address qcs605-32.
send: b'\x89\x80\xab8\x9b\xba'
send: b'\x89\x80-D\xe76'
send: b'\x89\x80\xa5\xed\x08\x98'
send: b"\x89\x80\xdc'\xee\xe8"
send: b'\x89\x807\xc5\xca\x19'
send: b'\x89\x80\xa2\xd5\x88\xaf'
send: b'\x89\x80\xa4/^\xeb'
send: b'\x89\x80S7\xc9\x16'
send: b'\x89\x80]\r\xac\x1d'
send: b'\x89\x80\xf9\xdd\x91\x01'
send: b'\x89\x80\xfa\xc1\xae\x15'
send: b"\x89\x80\xd5\xef\x1c'"
Earlier I had this error with the VisionAIDevKitGetStarted module:
_gst-launch-1.0  -q  rtspsrc  location=rtsp://<IP Add>:8902/live protocols=tcp  !  application/x-rtp, media=application  !  fakesink  dump=true
Error: Time:Thu Jun 18 16:30:58 2020 File:/usr/sdk/src/c/c-utility/adapters/socketio_berkeley.c Func:socketio_dowork Line:1006 Socketio_Failure: Receiving data from endpoint: errno=104.
Confirmation for reported state called with:
status_code: 204_
Is there anything else missing to get the output from the camera?

@Pratheek-Dev We will look into this.

Hi @v-prsasa what is the recommended stable firmware version to run on the device?

@Pratheek-Dev  v0.5370 - Current version 2020-02-26.
You may find it here - https://store.altek.com.tw/qualcomm/downloads/Azure-IoT-Starter-Kit

Would you recommend upgrading to the latest? I get the following from the version output:
adb shell cat /etc/version
v0.2680_Perf

Yes you should use latest firmware.Kindly upgrade it and try once again.

Thanks, I will update this thread once I do.

Yeah sure. Kindly update us after that.

Hi @v-prsasa I have the latest firmware, and I am able to see the model scoring, but still can't get the HDMI, webstream, or rtsp to work (get the camera output):
Here is the model log which seems to be working fine:
Found result object
{"confidence": 90, "width": 927.936, "label": "person", "position_x": 24.96, "position_y": 164.916, "id": 2, "height": 895.968}
Confirmation[0] received for message with result = OK
Properties: {}
Total calls confirmed: 43
send: b'\x89\x80Y\x8e%\xeb'

Can you go through this link-https://azure.github.io/Vision-AI-DevKit-Pages/docs/RTSP_stream/

Yes, that's the link I followed already and tested with VLC player

Okay.let me try once then

Hey, I have tried in my camera and it is working fine. I am attaching screenshot.For me it's working in web stream video. I tried in vlc it's showing some kind of error.I am working on that error.
Can you try to refresh your web stream page and your camera should be in same network.

Hi @Pratheek-Dev , I got to know what's the problem with the rtsp in vlc. While applying the RTSP address in vlc apply the 2nd url which is mentioned. I have attached the screenshot. You can verify from it.

I've tried both of those rtsp URLs neither of them work unfortunately.

Can you share me the screenshot that what error you are getting?

@Pratheek-Dev Hey pratheek, Is your issue resolved ? if not can you attach the screenshot of the error which you are getting?

Hi @v-prsasa I tried resetting the device and recreating a new IoT Edge Device, but the same issue persists:
This site can’t be reached 192.xxx.x.xx refused to connect.
Try:
Checking the connection
Checking the proxy and the firewall
ERR_CONNECTION_REFUSED
Can you share which images are running on your device? Are they the stock images found on the IoT Kit? I will try to rebuild the deployment manifest with the images you are using

@Pratheek-Dev Hey Pratheek,
First of all I want to say if it's connection problem then Open your WiFi settings and disconnect your workstation from the camera (MSIoT_B9D4B6). Note that your workstation and this camera should be on the same Wi-Fi network in order to view the web stream. You should be able to see the camera video output within minutes. Make sure it is plugged in to an HDMI monitor .
I am attaching a screenshot what are the things running in my device-

Thanks for your help @v-prsasa . I have the webstream working now, but the HDMI is still having issues, I'll try with another cable just in case.

@Pratheek-Dev Great, Thanks for the update Pratheek . So can we close this case now or do you need further support?

@Pratheek-Dev Can we close this case now? or you need further support?

@v-prsasa I'm attempting to find another HDMI monitor/cable to test with, since the output isn't shown via HDMI.

Ok no issues, Once you are done kindly update us.

@Pratheek-Dev Hey Pratheek, Is your issue resolved with HDMI cable?

Hi @v-prsasa I tested with a new monitor and it works now! looks like it doesn't work on some monitors.


Integration of Python Extensions for Development Environment

Adding extensions that I think are important for python development, as well as some general extensions that I think should always be included.
For python:

ms-python.autopep8: Formatting support for Python files using the autopep8 formatter.
ms-python.flake8: Linting support for Python files using Flake8.
ms-python.isort: Import organization support for Python files using isort
njpwerner.autodocstring: Generates python docstrings automatically
ms-python.vscode-pylance instead of ms-python.python: A performant, feature-rich LSP (language server) for Python.

For general purpose:

medo64.render-crlf: Displays the line ending symbol and optionally extra whitespace when 'Render whitespace' is turned on. (no more extra whitespace....)
VisualStudioExptTeam.vscodeintellicode: Allow for more autocompletion, even without an LSP.

lgtm


add 12 build

This will not work until https://github.com/AdoptOpenJDK/openjdk-jdk12u has something in it

Depends on https://github.com/AdoptOpenJDK/openjdk-build/issues/883 ?


Add Cloud Services section

Thank you for taking the time to work on a Pull Request for this project!
To ensure your PR is dealt with swiftly please check the following:

[x] Your submissions are formatted according to the guidelines in the contributing guide
[x] Your additions are ordered alphabetically
[x] Your submission has a useful description
[x] The description does not end with punctuation
[x] Each table column should be padded with one space on either side
[x] You have searched the repository for any relevant issues or pull requests
[x] Any category you are creating has the minimum requirement of 3 items
[x] All changes have been squashed into a single commit

Hi @s-nirali , these APIs are not free tier services since they are simply interfaces for paid cloud services.


onload event is not triggered as expected

I wanted to implement the following HTML code using Dioxus and Rust,
<!DOCTYPE html>
<html>
  <head>
    <script>
      function draw() {
        const canvas = document.getElementById("tutorial");
        if (canvas.getContext) {
          const ctx = canvas.getContext("2d");
          ctx.fillStyle = "rgb(200, 0, 0)";
          ctx.fillRect(10, 10, 50, 50);
        }
      }
    </script>
  </head>
  <body onload="draw();">
    <canvas id="tutorial" width="150" height="150"></canvas>
  </body>
</html>

which should render a simple red rectangle on screen,

I tried with the following,
fn main() {
    dioxus_desktop::launch(App);
}

#[allow(non_snake_case)]
fn App(cx: Scope) -> Element {
    let eval = dioxus_desktop::use_eval(cx);

    cx.render(rsx!(
        body {
            onload: move |_| {
                to_owned![eval];
                cx.spawn(async move {
                    eval(draw()).await.unwrap();
                });
            },
            canvas {
                id: "tutorial",
                width: 150,
                height: 150,
            }
        }
    ))
}

fn draw() -> String {
    r#"
    const canvas = document.getElementById("tutorial");
    if (canvas.getContext) {
      const ctx = canvas.getContext("2d");
      ctx.fillStyle = "rgb(200, 0, 0)";
      ctx.fillRect(10, 10, 50, 50);
    }
    "#
    .to_string()
}

but nothing is printed, leaving an empty, unused canvas, due to onload not getting triggered.
I don't know why this is the case, but wanted to report the bug.
Thanks to @Demonthos for helping me out with my issue, for pointing me in the right direction to report this bug, giving me an alternative that makes the code work, and in general for being there to help and be kind.

Dioxus automatically creates the body element. There is still an issue with the onloaded event. Here is a minimal example with the img element:
use dioxus::prelude::*;

fn main() {
    dioxus_desktop::launch(App);
}

fn App(cx: Scope) -> Element {
    cx.render(rsx!(img {
        onload: move |_| {
            println!("onload");
        },
        src: "examples/assets/logo.png",
    }))
}

The onload event does not work on web either.


Proposal: github repository for taxonomy definition with a PR and Review workflow and search capability

Create a dedicated repository for the taxonomy definition pack
CMSIS.Taxonomy.pdsc

Documentation of scope and purpose
Pull Request and Review Process for extending
packchk validates components against the CMSIS.Taxonomy.pdsc
packchk flags definition of  in packs

inspired by: https://github.com/simple-icons/simple-icons
Please give feedback and comments on this proposal in this issue.

Eric, can this be discussed on the technical forum calls that we run typically every Tuesday? When would be a good timing for you?

Proposal:
https://github.com/Open-CMSIS-Pack/Open-CMSIS-Pack-Taxonomy

This is done, hence closing


fix(aws_lambda): Fixing duplicate JSONify

publishing this https://github.com/epsagon/epsagon-node/pull/318

:tada: This PR is included in version 1.73.4 :tada:
The release is available on:

npm package (@latest dist-tag)
GitHub release

Your semantic-release bot :package::rocket:


Delete "share" button and corresponding codes

Delete "share" button and corresponding codes.

Done.


Installation failure

Downloading/unpacking redis-py-cluster
Running setup.py egg_info for package redis-py-cluster
warning: no files found matching 'CHANGES'
Requirement already satisfied (use --upgrade to upgrade): redis>=2.10.2 in /usr/lib/python2.6/site-packages (from redis-py-cluster)
Installing collected packages: redis-py-cluster
Running setup.py install for redis-py-cluster
SyntaxError: ('invalid syntax', ('/usr/lib/python2.6/site-packages/rediscluster/nodemanager.py', 151, 37, '        connection_kwargs = {k: v for k, v in self.connection_kwargs.items() if k in set(allowed_keys) - set(disabled_keys)}\n'))
SyntaxError: ('invalid syntax', ('/usr/lib/python2.6/site-packages/rediscluster/client.py', 219, 83, "        servers = list({'{0}:{1}'.format(nativestr(info['host']), info['port']) for info in self.connection_pool.nodes.startup_nodes})\n"))

warning: no files found matching 'CHANGES'

Successfully installed redis-py-cluster
Cleaning up...

Please read the docs regarding supported python versions for this lib https://redis-py-cluster.readthedocs.io/en/master/#supported-python-versions
TLDR: Python 2.6 is and will not be supported by this lib.