Checklist
Essentials
Please feel free to remove inapplicable items for your PR.

[ ] The PR title starts with [MXNET-$JIRA_ID], where $JIRA_ID refers to the relevant JIRA issue created (except PRs with tiny changes)
[ ] Changes are complete (i.e. I finished coding on this PR)
[ ] All changes have test coverage:
Unit tests are added for small changes to verify correctness (e.g. adding a new operator)
Nightly tests are added for complicated/long-running ones (e.g. changing distributed kvstore)
Build tests will be added for build configuration changes (e.g. adding a new build option with NCCL)
[ ] Code is well-documented:
For user-facing API changes, API doc string has been updated.
For new C++ functions in header files, their functionalities and arguments are documented.
For new examples, README.md is added to explain the what the example does, the source of the dataset, expected performance on test set and reference to the original paper if applicable
Check the API doc at http://mxnet-ci-doc.s3-accelerate.dualstack.amazonaws.com/PR-$PR_ID/$BUILD_ID/index.html
[ ] To the my best knowledge, examples are either not affected by this change, or have been fixed to be compatible with this change

Changes

[ ] Feature1, tests, (and when applicable, API doc)
[ ] Feature2, tests, (and when applicable, API doc)

Comments

If this change is a backward incompatible change, why must this change be made.
Interesting edge cases to note here

@marcoabreu @larroy  @KellenSunderland - Can you please take a look at this PR?

Explain a bit for removing 'FInplaceIdentity' attr for cast and _backward_cast.
After upgrading tvm, a minor change on memory planning pass is included that allow doing memory inplace optimization on different data type with same size. Eg, for 'cast' op that casting data from fp32 to int32, previously, even  this op has 'FInplaceOption' and 'FInplaceIdentity' attrs, memory inplace won't happen because input and output have different data type(fp32 vs int32). After upgrading tvm, as fp32 and int32 are both 32-bit data size, memory inplace optimization will take effect.
Memory inplace optimization for 'cast' is a good thing, but 'FInplaceIdentity' will cause trouble when inputs has more than 1 dependence, which means the input will be used by other ops, and memory inplace will override the input, leading result incorrect. Removing 'FInplaceIdentity' can fix this issue.
Overall, after upgrading tvm with this fix, 'cast' can correctly get benefit from memory inplace optimization now.
@tqchen What do you think?

Non Blocking / Just Comments not a Review:
It would be great if we could get rid of some of the mem copies associated with casts.  I've seen quite a few cases (in Sockeye) where casts completely dominate performance when executing mixed precision graphs.  Typically what I saw was a bunch of FCs running with TCs in fp16, then a cast before a softmax that took longer to run than the actual softmax, then a cast back.  Granted in that case it was fp16<->fp32 conversions, but if we can at least improve the speed of int32<->fp32 it'd already be a great first step.  I'd imaging people trying to run graphs mixing between int32 and fp32 would be hitting the same issues.
Would this change have any impact on threadsaftey?  Would it be making a tensor that was previously immutable mutable?  Do we have protections in cases where the same input is casted from different threads (even to the same data type)?

@KellenSunderland I guess this change won't have impact on threadsaftey, because the 'cast' mentioned here is a symbolic op, which used in computing graph.

There're quite a few ops registered with FInplaceIdentity. Why is it only removed from cast?

Cast changes the type and others shouldn't


Implement a refresh method in the NumericBone

This refresh method ensures numeric values in the datastore.
This might be helpful if you change a StringBone to a NumericBone. You can do a rebuild search index and the strings will be converted to numbers.
This behavior was done in ViUR2 on every unserialize: https://github.com/viur-framework/server/blob/e53c744834103a467a5f51b6b29db7aa531a6096/bones/numericBone.py#L83-L93

There's one logical change, because I think this is the most transparent way:
Before, isEmpty() determined "42.0" with precision as empty, because the int("42.0") cast raised a ValueError. Now we convert it first to float, then to int.
In case of precision > 0 this value was already accepted.

I'm unsure about the behavior what refresh should do on invalid data (a list, embedded entity, ...)

Ignore the failed conversion and keep the data
Ignore the failed conversion and clear the data (set to None)
Reraise the exception (current implementation), so the caller has to decide what to do.

What do you think?

I am not sure if a list is an invalid record. For example, what if we previously had a stringbone that was multiple. Shouldn't we try to translate everything in the refresh function?

I am not sure if a list is an invalid record. For example, what if we previously had a stringbone that was multiple. Shouldn't we try to translate everything in the refresh function?

Good point. I hadn't thought of the multiple and language cases.
If you now turn a StringBone into a NumericBone with the same language+multiple configuration, numeric values should be converted.
With other formats this fails. Here you have to migrate manually.

Hello @sveneberth, I would like to integrate some function similar to JavaScript's parseInt() or parseFloat() into VIUR (let's call these parse_int() and parse_float()). Logics already contains such a function, as IMHO this is required in other places as well. Whats your opinion on this?

I think these parse functions can be helpful. Especially to process commas.
But I didn't know that letters after a number are simply ignored in JS:exploding_head:. I have also never needed and see no need there. Input fields, even those that have an associated unit, are also in the browser always purely numeric. Would there raise an error with other characters (or return a default value).


Multiple Input field

it will be great if have option of multiple input fields. like i want to design the password change with two fields. "New Password" and "Confirm Password". so i have no option to do this with input field and i just require multiple input fields.

This requires a custom layout.


bug(MatSlider): Thumb label behaviour is inconsistent across different browsers

Is this a regression?

[ ] Yes, this behavior used to work in the previous version

The previous version in which this bug was not present was
No response
Description
In Chrome selecting a value on the slider label stays there until the selected mark is focused (until you click outside).
In Safari the label shown for a fraction of second (arguably for not long enough to read the content) and disappears. You need to hold the mouse to keep it displayed.
Slider has changed significantly in version 15 so I'm not sure if this should be considered a regression.
Reproduction
Steps to reproduce:

Just open this example from the Slider Showroom https://material.angular.io/components/slider/overview#formatting-the-thumb-label in both Chrome and Safari
Try clicking on the slider marks and observe the difference

Expected Behavior
Label behaviour is consistent across popular browsers.
Actual Behavior
Label behaviour is inconsistent.
Environment
Angular: 15.0.4
CDK/Material: 15.1.1
Browser(s): Chrome 109.0.5414.87, Safari 15.4
Operating System: macOS

I looked into it briefly, but couldn't find an easy workaround. The problem is that we rely on the focused state of the underlying native input to know if the slider has focus, but Safari doesn't allow focus to land on an input[type="range"]. See https://stackoverflow.com/questions/68731734/is-there-a-way-to-make-an-html5-input-range-receive-focus-in-safari-when-its-us

@crisbeto you correct. Using the native input[type="range"] under the hood means we inherit all of the inconsistencies between browser implementations. Do you feel this something we should try to reconcile?

After discussing with the team, we've decided to close this issue. I will do my best to outline why here
The mat-slider label is meant to be visible when the slider is in an active, pressed, or focused state. The first problem is that the slider is working as intended, in that it is showing/hiding the slider label based on the input state as described by the material design spec. The divergence in behavior comes from the fact that, as @crisbeto mentioned, the focus state of the native input on Safari does not allow focus to land on an input [type="range"]. The second problem is, if we want to try and change this on our end would require implementing our own fake "focus" state inside of the slider which would end up being a hacky mess

Ok thanks for the explanation. Sad to realize, but I get the rationale behind your decision.


I meet RuntimeError:RuntimeError: cuDNN error: CUDNN_STATUS_NOT_SUPPORTED. This error may appear if you passed in a non-contiguous input.

This is config:
Traceback (most recent call last):
File "tools/train_net.py", line 162, in
args=(args,),
File "/data1/mazeyu/BCNet-main/detectron2/engine/launch.py", line 48, in launch
daemon=False,
File "/home/mazeyu/anaconda3/envs/bcnet/lib/python3.7/site-packages/torch/multiprocessing/spawn.py", line 171, in spawn
while not spawn_context.join():
File "/home/mazeyu/anaconda3/envs/bcnet/lib/python3.7/site-packages/torch/multiprocessing/spawn.py", line 118, in join
raise Exception(msg)
Exception:
-- Process 1 terminated with the following error:
Traceback (most recent call last):
File "/home/mazeyu/anaconda3/envs/bcnet/lib/python3.7/site-packages/torch/multiprocessing/spawn.py", line 19, in _wrap
fn(i, *args)
File "/data1/mazeyu/BCNet-main/detectron2/engine/launch.py", line 83, in _distributed_worker
main_func(*args)
File "/data1/mazeyu/BCNet-main/tools/train_net.py", line 150, in main
return trainer.train()
File "/data1/mazeyu/BCNet-main/detectron2/engine/defaults.py", line 373, in train
super().train(self.start_iter, self.max_iter)
File "/data1/mazeyu/BCNet-main/detectron2/engine/train_loop.py", line 131, in train
self.run_step()
File "/data1/mazeyu/BCNet-main/detectron2/engine/train_loop.py", line 224, in run_step
losses.backward()
File "/home/mazeyu/anaconda3/envs/bcnet/lib/python3.7/site-packages/torch/tensor.py", line 195, in backward
torch.autograd.backward(self, gradient, retain_graph, create_graph)
File "/home/mazeyu/anaconda3/envs/bcnet/lib/python3.7/site-packages/torch/autograd/init.py", line 99, in backward
allow_unreachable=True)  # allow_unreachable flag
RuntimeError: cuDNN error: CUDNN_STATUS_NOT_SUPPORTED. This error may appear if you passed in a non-contiguous input.
I change batch_size , but not work, please help me.

Hi, thanks for watching our work. Please refer to the issue discussion here.

thank you!


xTicks is not working for BarChart

xTicks is not working for BarChart
Expected Behavior

We should restrict xAxis labels using xTicks
Current Behavior

The labels on the xAxis are not changing.
Possible Solution

Steps to Reproduce

To use xTicks while Chart plotting
To use also yTicks to be sure you did no errors
See that yTicks works while xTicks no.

Screenshots (if appropriate)

Context

Your Environment

Britecharts version used:
Browser Name and version:
Operating System and version:
Link to your project or codepen:

Hi @Lennen, thanks for opening this issue!
Ticks are definitely tricky on D3.js, as they don't really "work" as requested, only on an approximate way. From what I see on your chart, there are a lot of entries, so probably an horizontal bar chart will probably work better.
Anyways, if you put it on a codepen I could try to find a good solution. (use https://codepen.io/Britecharts/pen/yEwpeg as a jumpstart)

Closing for now.


suggestion: make repository python package ready

Hello,
If you're interested, I've made a few small changes to the organization of your repository so it can be easily installed as a python package (eg: pip install -e git+https://github.com/deworrall92/harmonicConvolutions.git#egg=harmonicconvolutions).
Any scripts that were referenced by other scripts, I've placed in the harmonicconvolutions package subfolder with an init.py. Otherwise, I've left the script in the original folder. I've also added a setup.py that you may want to modify to include additional requirements.
I have only tested that the train.py command in the repository README.md is functioning after the changes.
Thanks!
Tess

Hi Tess,
Thank you for that, I will look into compatibility of this with some of our latest changes next week.
Best
Stephan

Does this work with tf 1.3?

We unfortunately haven’t had the time to investigate the compatibility of this pull request with tensorflow 1.3. This relates to an older version of the code in any case that isn’t supported anymore.
At this stage we advise just cloning the repo and referencing it in your scripts.
Hope that helps!

I was actually able to upgrade it to tf 1.3.  Would you like the diff?
On Mon, Oct 30, 2017 at 7:07 PM, Stephan Garbin<EMAIL_ADDRESS>wrote:

We unfortunately haven’t had the time to investigate the compatibility of
this pull request with tensorflow 1.3. This relates to an older version of
the code in any case that isn’t supported anymore.
At this stage we advise just cloning the repo and referencing it in your
scripts.
Hope that helps!
—
You are receiving this because you commented.
Reply to this email directly, view it on GitHub
https://github.com/deworrall92/harmonicConvolutions/pull/7#issuecomment-340611522,
or mute the thread
https://github.com/notifications/unsubscribe-auth/ALarq5H1-TRfjmVqqiZ3QCNPROz_PB8Sks5sxlangaJpZM4Lre3B
.


Moved exporttoCSV Button

Removed all export csv buttons from groupings tabs (include, exclude, owners, basis, and all). Moved it instead underneath the "Return to Groupings List" button.

fixing the codacy issue should be straighforward: https://app.codacy.com/gh/uhawaii-system-its-ti-iam/uh-groupings-ui/pullRequest?prid=8925541

The indentation for the addition looks a bit off, I think.


Implement database import procedure

Legacy database data will be imported as a batch operation directly from csv using the postgresql csv load capability.
Assumptions:

data is available in a publicly accessible url

the url does not change when the data is updated

[ ] Create a task image on antibody registry capable of loading the data

[ ] Create an endppoint in the antibody registry to run the ingestion job as an argo workflow

https://palewi.re/docs/django-postgres-copy/index.html

Data notes:
A) supplemental data file.xlsx had no reference to 'ab_id_old' but it appears as a column in the antibody_table data. At the same time, supplemental data file.xlsx refers a column called 'accession' that does not appear in the data files. I wonder if accession and ab_id_old are meant to be the same. If not, I question where's accession and what should we do with ab_id_old (do we need it)?
B) Very few entries have the 'uid' column different than '(null)', specifically only 18 on the 500000 data file. Why do we need another id?
C) There's also a column called ID, I don't believe we need to store this value in the database as it seems to derive from the ab_id ('AB_' + {ab_id}). What do you think?
D) When there's no alternative to catalog number, the column 'cat_alt'  sometimes has '(null)' values and other times has empty values. Do they have different meaning? If not, I think we should converge to one way to define no value.
(Same question for 'target_subregion', 'target_modification', 'epitope', 'uniprot_id', 'feedback' and 'disc_date')
E) Vendors seem to have synonyms which is something I believe was not referenced before. Do we want to keep them?
(Same question for 'euid' and 'nifID' columns of the vendors csv)
F) There's also a commercial_type on the vendors. Is this value duplicated from the commercial_type or is it something different? If it is something different, which user story specifies the process of how we get that value?
G) product_form definition contains has 'Can include: Lyophilized, Affinity purified, Liquid" but I see entries with 'Purity: Immunogen affinity purified'. Should this be a free form text attribute or only allow the options quoted
H) There's a column in the antibody table: 'of_record' that was not mentioned in the 'supplement data file'. Should we keep it?
I) Vendors domain seem to have a status associated with it. What's the meaning of this status. Which values can it have and how does it change?

feature/29 should now contain a workable ingestion script that you can use on #52 @aranega.
I also created a pre-process script which I used to apply some fixes on the data we received (remapping vendors ids, removing ab_ids duplicated).
You will need the csv files in the same folder as manage.py:

And then you run:
python manage.py ingest antibody_table500000_no_duplicates_ab_id.csv antibody_vendors.csv antibody_vendors_domain_vendors_mapped.csv
make sure you migrate first.
As said through DM, feel free to change the model as you like and according to the feedback we got here on github issues.

I need access to the database please.
Please send the JDBC connection details.
I worry about the "remapping vendors ids, removing ab_ids duplicated"
Want to check what the integrity of the data is after these updates.
On Tue, Sep 13, 2022 at 1:25 AM Afonso Pinto @.***>
wrote:

feature/29
https://github.com/MetaCell/scicrunch-antibody-registry/tree/feature/29
should now contain a workable ingestion script that you can use on #52
https://github.com/MetaCell/scicrunch-antibody-registry/issues/52
@aranega https://github.com/aranega.
I also created a pre-process script which I used to apply some fixes on
the data we received (remapping vendors ids, removing ab_ids duplicated).
You will need the csv files in the same folder as manage.py:
[image: image]
https://user-images.githubusercontent.com/19196034/189775214-be13cc17-14c1-4768-87d1-e48013e657be.png
And then you run:
python manage.py ingest antibody_table500000_no_duplicates_ab_id.csv
antibody_vendors.csv antibody_vendors_domain_vendors_mapped.csv
make sure you migrate first.
As said through DM, feel free to change the model as you like and
according to the feedback we got here on github issues.
—
Reply to this email directly, view it on GitHub
https://github.com/MetaCell/scicrunch-antibody-registry/issues/29#issuecomment-1244704575,
or unsubscribe
https://github.com/notifications/unsubscribe-auth/ABNSWNKHLBFPLSC5OGGT4KTV563VJANCNFSM576IUMHA
.
You are receiving this because you are subscribed to this thread.Message
ID: @.***>

--
All key biological entities deserve an #RRID!
orcid.org/0000-0002-5497-0243

@bandrow there is no database we can give you access yet, this is still in development. Will do as soon as it's up and deployed

Ok thank you all good.
Just wanted to make sure that the scripts were not removing data. There are
many cases where there will be multiple records for an ab_id, many are
legitimate duplicates, others are not legitimate. We are cleaning these
records, but preserving the accession numbers and comments and other things
that we store about the records.
I am certain that with 3M records there will be some issues with upload,
just trying to make sure it is just some minimal junk, not systematic
errors.
On Tue, Sep 13, 2022 at 11:03 AM Filippo Ledda @.***>
wrote:

@bandrow https://github.com/bandrow there is no database we can give
you access yet, this is still in development. Will do as soon as it's up
and deployed
—
Reply to this email directly, view it on GitHub
https://github.com/MetaCell/scicrunch-antibody-registry/issues/29#issuecomment-1245112947,
or unsubscribe
https://github.com/notifications/unsubscribe-auth/ABNSWNKTQ654CHPIXBA6L7TV6A7OBANCNFSM576IUMHA
.
You are receiving this because you were mentioned.Message ID:
@.***>

--
All key biological entities deserve an #RRID!
orcid.org/0000-0002-5497-0243

If you can think some specific checks we can do to ensure data integrity please share. We can write automated tests for the trickiest data

sure
count rows in all tables (need to match expected, I need to find those for
the date I downloaded the files)
all records in the ab_id field must have a number.
all records must have a status = "CURATED", "REJECTED" or "QUEUE"
all records that are status = "CURATED" must have
*some text in the cat_num field
*name not blank or null
*vendor_id = number
this set of checks should highlight any field transpose errors
On Tue, Sep 13, 2022 at 11:12 AM Filippo Ledda @.***>
wrote:

If you can think some specific checks we can do to ensure data integrity
please share. We can write automated tests for the trickiest data
—
Reply to this email directly, view it on GitHub
https://github.com/MetaCell/scicrunch-antibody-registry/issues/29#issuecomment-1245123494,
or unsubscribe
https://github.com/notifications/unsubscribe-auth/ABNSWNIUABJS632HEMGCEHTV6BAPNANCNFSM576IUMHA
.
You are receiving this because you were mentioned.Message ID:
@.***>

--
All key biological entities deserve an #RRID!
orcid.org/0000-0002-5497-0243

these constraints should be added (if not already existing) to the model(s)
the first one is a NOT NULL constraint
the second and third are CHECK constraints (see f.e. https://docs.djangoproject.com/en/4.1/ref/models/options/#constraints)

@afonsobspinto @zsinnema  please note that some of the NOT NULL constraints are only after with status = "CURATED", so cannot be added to the database constraints.

@filippomc yes that's why I mentioned them as CHECK constraint


Unitful.string is actually Base.string

This package extends Unitful.string. But Unitful does not define a string function, so it actually extends Base.string. Calling it Unitful.string just seems confusing to me. Is there a reason for doing it like this?
It also means that this package would break if an actual Unitful.string function is defined in Unitful (the function in this package would then no longer extend Base.string but instead Unitful.string, which might have a different purpose and might not even be exported).
Also, irrespective of whether extending Unitful.string or Base.string, this is type piracy. It might be better to define a UnitfulParsableString.string function. It could have a fallback method that calls Base.string so that it can be used as a replacement. Of course, this would be a breaking change.
What do you think of this?

Thank you for your feedback, @sostock.
Indeed, since Unitful.jl does not define a string method, it effectively means that this pkg is extending Base.string, not Unitful.string. Originally, this pkg was intended to include string methods that I thought should be part of the main Unitful.jl package, which is why the naming might seem confusing.
I understand that the current string definition in this package constitutes type piracy.
However, I can't think of another way to override the conversion to string used in CSV output and other similar cases.
Even if we define UnitfulParsableString.string, we cannot change the string used in CSV.write to UnitfulParsableString.string.
Changing the current implementation to extend Base.string is easy and non-destructive, so I think that's a good short-term solution.
In the longer term, I believe the string methods in UnitfulParsableString.jl should be moved to Unitful.jl.
(In that case, it would likely involve multi-dispatching the show method instead of string, but the function's content would remain almost the same.)
I'm working on this development, but due to time constraints, I haven't been able to submit a PR. I apologize for the delay.
(PainterQubits/Unitful.jl/#214)
Conversely, I have a question: other than the above, do you plan to change the string or show methods in Unitful?

I understand that the current string definition in this package constitutes type piracy. However, I can't think of another way to override the conversion to string used in CSV output and other similar cases.

Yes, type piracy is the only way to get something like this working without incorporating it in Unitful.jl. And I don’t think the type piracy is too bad in this case. I mainly dislike the naming Unitful.string.

Changing the current implementation to extend Base.string is easy and non-destructive, so I think that's a good short-term solution.

Yes, I think this should be done as it is less confusing and would have no effect on existing code that uses this package.

Conversely, I have a question: other than the above, do you plan to change the string or show methods in Unitful?

I currently have no plans to change the string or show methods in Unitful, but I am generally in favor of changing the default show output to be parseable. The implementation in this package could be used for that (but extending show instead of string).

Thanks for the reply.
I just changed Unitful.string to Base.string.

I currently have no plans to change the string or show methods in Unitful, but I am generally in favor of changing the default show output to be parseable. The implementation in this package could be used for that (but extending show instead of string).

OK, thanks!  As soon as I finish the doctoral course, I will try this one.


[Issue 5720][authorization provider] Add granularity

Fixes #5720
Motivation
Provide "real" authz abilities to pulsar resources.
Modifications
Add stuff to AuthorizationProvider interface, and use them on every pulsar resource management auth (tenant, namespace, topics, functions, connectors, ...)
Verifying this change

[ ] Make sure that the change passes the CI checks.

This change added tests and can be verified as follows:
Will add specified test.
Documentation

Does this pull request introduce a new feature? yes
If yes, how is the feature documented? not documented (yet, will do)

I see that there is an unload permission being granted to namespace  owners? What is the rationale?
A few many unloads, and you ZK and cluster is dead.

@joefk I'm open to all discussion I don't know correctly this part. Can you explain why unloads are critical for Pulsar? We can imagine that only one unload is authorized at the same time.
The main goal of this issue is to provide real authz provider.

@KannarFr you should get familiar with the PIP-49 and the discussion on the dev list about it. Just because unload operates on a namespace, it does not imply that it should ever be  executed by a namespace owner.
FWIW, I don't think it's feasible to implement an adequate restriction on unload in a simple way, because it's a system management operation, driven by system management needs.
At the least,  these kind of shoot-yourself features should not be hard-coded into the broker as a possible option. It should be in a config file.

@joefk I think every permissions should be enabled by authz provider. So we need to provide authz provider stuff to authorize or not, but it's not to the pulsar side to decide if access is grant or not. Maybe we can documents critical stuff as mentioned unload but that's it. I'm not working on the PulsarAuthorizationProvider which is the default used, but on the AuthorizationProvider interface and its usages.
Thats being said, I can be wrong WDYT?

@KannarF

I think every permissions should be granted by authz provider.
Some of them are not grantable.  How did your arrive at that conclusion? That is a very simplistic view of the system. After going through PIP-49 and the discussions about that, what is your take?

As, you state in the description of your PR..

And the biggest part of the task: go through every usage of validateSuperUserAccess and validateAdminAccessForTenant and check if they can be replaced with finer grain access
Can you share your findings for that? I did not see any

My concern is this. How can I, as a Pulsar operator (NOT a tenant) decide which of these operations I will delegate to my tenants for  finer control ?
Operators should not be put in a position where if they were to deploy this authz provider, they would have to go and turn off/on certain actions  for all fine-grained resources every time someone creates a namespace or topic.  And the things you are proposing to delegate here in this proposal are an operators nightmare for a large cluster.  Hence my ask.  Put the list of the things that can be delegated into a config file, so that operators can decide ONCE when they DEPLOY Pulsar, about  what can be potentially delegated. Don't hardcode it into the server, and create runtime maintenance work for operators

Hi,
Here we are defining an authz provider interface not the authz provider. We
want to provide the way to authz every cases as multitenancy stuff. In my
case all authorized info will be defined in the role String which will be a
token containing authorized information. Like this token has produce
operation authorized on this namespace or this topic.
In the case you are illustrating we just want that the PulsarAuthzProvider
(which is the default for now) handles some default cases as you mentioned.
And sure we could define default bindings in configuration file.
This stuff will come in other PR (I guess), currently I just want to impl
the granularity possibilities without breaking changes for current default
PulsarAuthzProvider.
Le sam. 29 févr. 2020 à 02:44, joefk<EMAIL_ADDRESS>a écrit :

@KannarF
I think every permissions should be granted by authz provider.
Some of them are not grantable. How did your arrive at that conclusion?
That is a very simplistic view of the system. After going through PIP-49
and the discussions about that, what is your take?
As, you state in the description of your PR..
And the biggest part of the task: go through every usage of
validateSuperUserAccess and validateAdminAccessForTenant and check if they
can be replaced with finer grain access
Can you share your findings for that? I did not see any
My concern is this. How can I, as a Pulsar operator (NOT a tenant) decide
which of these operations I will delegate to my tenants for finer control ?
Operators should not be put in a position where if they were to deploy
this authz provider, they would have to go and turn off/on certain actions
for all fine-grained resources every time someone creates a namespace or
topic. And the things you are proposing to delegate here in this proposal
are an operators nightmare for a large cluster. Hence my ask. Put the list
of the things that can be delegated into a config file, so that operators
can decide ONCE when they DEPLOY Pulsar, about what can be potentially
delegated. Don't hardcode it into the server, and create runtime
maintenance work for operators
—
You are receiving this because you were mentioned.
Reply to this email directly, view it on GitHub
https://github.com/apache/pulsar/pull/6428?email_source=notifications&email_token=ABZLQJMY5MQQXPQAXPIWBH3RFG4YLA5CNFSM4K4ES5QKYY3PNVWWK3TUL52HS4DFVREXG43VMVBW63LNMVXHJKTDN5WW2ZLOORPWSZGOENKYPUA#issuecomment-592807888,
or unsubscribe
https://github.com/notifications/unsubscribe-auth/ABZLQJKYUH3RYTKDCFSZTUTRFG4YLANCNFSM4K4ES5QA
.

@KannarFr
Thank you for your contribution!
I think we should have a clear interface about resources and verbs. I feel that you are mixing resources with verbs and generating a lot of "unneeded" operations.
For example,  each policy rule in a namespace policy should be treated as a resource. The operations to a given policy rule are write and read. So when you introduce a new policy rule, you don't need to introduce a new verb. Also, I don't think enum is a good way to allow extensibility. I think we can use a string for representing different policy rules within a namespace policy.
Kubernetes' API machinery provides a good example of this.

@joefk
I think the pull request here is to allow people to define their own authorization implementation since some organizations have the need to integrate Pulsar into its owner authentication/authorization system to control those resources. The purpose of this pull request is different from PIP-49. We attempt to improve the current authorization model. This pull request should NOT change our current authorization model as the concerns have been raised when discussing PIP-49.

@sijie operations like internalGrantPermissionOnNamespace in NamespacesBase.java are antipattern with the reworking I'm doing. I don't know how to manage them. I think I should let them as they are. Due to "real" authz plugin we should drop all roles/actions stuff which are in ZK. DefaultAuthzProvider should be updated regarding this.
That being said, we need maintain legacy stuff so I would like to have your opinions about this.

Due to "real" authz plugin we should drop all roles/actions stuff which are in ZK. DefaultAuthzProvider should be updated regarding this.That being said, we need maintain legacy stuff so I would like to have your opinions about this.

I would like to see legacy stuff work as it is.
My concern is that is trying to impose a model which is not supported in Pulsar.  Assumptions like  "Any resource operation should be managed/authorized by the resource which owns it." and  "ClusterOperations should manage Tenants, TenantOperation should manage Namespaces, etc. Hierarchical approach" it only makes me think that is being designed for some other system, which is not Pulsar.
Pulsar has no operational hierarchy beyond  tenants. It is not designed for namespace admins or topic admins. The premise of pulsar is that a tenant manages all its namespaces. There are  operations that can be logically managed at the namespace and topic level, but that is a convenience for the tenant admin.

@KannarFr @joefk I think we should make sure this change here is more about adding the granularity to the authorization interface to have a better "role" based authorization model. but we shouldn't change the existing authorization model.

@codelipenghui @jiazhai @rdhabalia @merlimat please take a look at this pull request

All cleaned, waiting for CI outputs, but Namespaces & ServerCnx are ready.

@codelipenghui @jiazhai @rdhabalia @merlimat @sijie Please take a look. Thanks.

/pulsarbot run-failure-checks

/pulsarbot run-failure-checks

/pulsarbot run-failure-checks

/pulsarbot run-failure-checks

@sijie can you review?

I will review it soon.

/pulsarbot run-failure-checks

rebased.

@tuteng @zymap Would you also please help review this PR?

Merged this pull request to allow some time to bake the change for the 2.6.0 release.


[Typo] Update en_US.json

You can correct the typo Minumum in Line 58 to Minimum and Sematics in Line 158 to Semantics by the way.


Implement Casdoor.AspNetCore for web app

@sagilio can we move the example code to the dedicated repo: https://github.com/casdoor/casdoor-dotnet-sdk-example ? Like other languages.


onOpenWindow incorrect typing

Bug description:

onOpenWindow has the current TS type:
(JSX attribute) onOpenWindow?: (((event: WebViewOpenWindowEvent) => void) & ((event: WebViewOpenWindowEvent) => void)) | undefined

therefore implementing a type such as the below snippet fails TS checks with the following error:
Type '(event: WebViewOpenWindowEvent) => void' is not assignable to type '((event: WebViewOpenWindowEvent) => void) & ((event: WebViewOpenWindowEvent) => void)'.

To Reproduce:

Pass handleOpenWindow to onOpenWindow={handleOpenWindow}
  const handleOpenWindow = (event: WebViewOpenWindowEvent) => {
    // things
  }

Expected behavior:

No TS error
Screenshots/Videos:

Environment:

OS: Mac
OS version: 12.5.1
react-native version: 0.70.8
react-native-webview version: 13.3.0

I'm trying to pin down whats causing it, but it looks like its typed correctly in WebViewTypes.ts:

sigh I imported the wrong type 🤦♂
For reference in case anyone else is having a moment, this is the correct import:
import {
  WebViewOpenWindowEvent,
} from 'react-native-webview/lib/WebViewTypes'


admin.0 (481696) awtrix-light has an invalid jsonConfig

The problem
The log shows:
2023-10-28 15:10:01.795  - warn: admin.0 (481696) awtrix-light has an invalid jsonConfig: [{"instancePath":"/items/_options/items/_buyDeviceLink/label","schemaPath":"#/patternProperties/%5E.%2B/properties/label/oneOf/0/type","keyword":"type","params":{"type":"string"},"message":"must be string"},{"instancePath":"/items/_options/items/_buyDeviceLink/label","schemaPath":"#/definitions/multilingual/additionalProperties","keyword":"additionalProperties","params":{"additionalProperty":"uk"},"message":"must NOT have additional properties"},{"instancePath":"/items/_options/items/_buyDeviceLink/label","schemaPath":"#/patternProperties/%5E.%2B/properties/label/oneOf","keyword":"oneOf","params":{"passingSchemas":null},"message":"must match exactly one schema in oneOf"},{"instancePath":"/items/_options","schemaPath":"#/properties/items/patternProperties/%5E.%2B/allOf/8/if","keyword":"if","params":{"failingKeyword":"then"},"message":"must match \"then\" schema"}]

Not sure if really a fault or just a false positive.
Version of nodejs
v18.18.2
Version of ioBroker js-controller
5.0.15
Version of Adapter
<EMAIL_ADDRESS>Version of awtrix-light firmware
0.90
Operating system running ioBroker
Debian 12 'Bookworm'
Checklist of files to include below

[X] iobroker.current.log (Please share the logs in debug mode)
[ ] Contents of the JavaScript browser console (always include in cases of issues with the user interface)

Additional information & file uploads
2023-10-28 15:10:01.795  - warn: admin.0 (481696) awtrix-light has an invalid jsonConfig: [{"instancePath":"/items/_options/items/_buyDeviceLink/label","schemaPath":"#/patternProperties/%5E.%2B/properties/label/oneOf/0/type","keyword":"type","params":{"type":"string"},"message":"must be string"},{"instancePath":"/items/_options/items/_buyDeviceLink/label","schemaPath":"#/definitions/multilingual/additionalProperties","keyword":"additionalProperties","params":{"additionalProperty":"uk"},"message":"must NOT have additional properties"},{"instancePath":"/items/_options/items/_buyDeviceLink/label","schemaPath":"#/patternProperties/%5E.%2B/properties/label/oneOf","keyword":"oneOf","params":{"passingSchemas":null},"message":"must match exactly one schema in oneOf"},{"instancePath":"/items/_options","schemaPath":"#/properties/items/patternProperties/%5E.%2B/allOf/8/if","keyword":"if","params":{"failingKeyword":"then"},"message":"must match "then" schema"}]

Already hate the validation, since the schema is incomplete 😞 Opened an issue for some of the messages:
https://github.com/ioBroker/adapter-react-v5/issues/198


RFC: Text

I've started implementing a possible solution for the current styling limitations reported in #304 and #88. People want to use ansi escape codes but the current accepted solution is to use what is provided at an higher level by tui: Style, Color, Modifier. However, some complex styling scenarios are not possible with the current primitives. Let's say I want to have a Block with a white title and a the first letter in bold red. This is not possible at the moment as you can only provide a single Style object for the whole title. My plan is to introduce three new primitives in tui to cover all needs in the different widgets:

Span which is the smallest unit in a text. It is a Cow<str> that can be associated with a style.
Line which is a sequence of Span.
Text which is a sequence of Line.

The primitives allows the end users to build complex styled strings and by using a specific primitive widgets may convey the styling capabilities of their properties (Span = unique style for the whole string, Line = multiple styles on a single row, Text = multiple styles on multiples rows).
By providing various From implementations, the widgets api can also be more flexible. For example, for a Block,  all those calls could be valid:
// Raw string no styling => converted to a Line with a single unstyled fragment.
Block::default().title("My title");
// String with unique style => converted to a Line with a single styled fragment.
Block::default().title(Span::styled("My title", Style::default().fg(Color::Red));
// String with multiple styles => converted to a Line with multiple fragments.
Block::default().title(vec![Span::styled("My", Style::default().fg(Color::Red)), Span::from("title")]);

Feedback more than welcome !

I think Fragment should be Span. The definition is exact and it matches HTML. "Fragment" seems pretty vague.

Whatever we end up calling it, I'd really love this feature!
Right now I'm rendering items in a List, and it would be amazing to be able to have multiple styles in each line. For example, I have this here: https://github.com/acheronfail/repgrep/blob/fae12f50c9879127ba17d9c19383dad680d69a5f/src/model/item.rs#L148-L153 which means I can only color the entire line in one style, not portions of it.

I think I could use this as well. Not necessarily for styling, but more as a method to render multiple line wrapping text fields ala paragraph.

@teohhanhui Thanks for the Span suggestion, I've replaced Fragment with it. I want to add Line and Text to let widgets advertise which type of string they accept, e.g a Block accepts a title which should fit on a single Line while a List might accept Text items to support multi-lines items.

Would Text and MultilineText be clearer?

I've put some additional work in the PR. The most text heavy widgets have been migrated (with the exception of Table). You can see a summary of the changes in the PR description. I still need to document all the new stuff and add maybe some tests to cover new edge cases but if some of you are up for an early review be my guest :).

The documentation has been added. The new api is now stable after many iterations. I'm going to merge this in a few days.


Placeholder for add course button

Add to the component javascript/src/main/components/BasicCourseSearch/BasicCourseTable.js in the table, a new column, all the way at the right hand side, for controls.
In this new column, we'll place an add button ONLY when we have either a

a discussion section
a lecture section that HAS no discussion sections.

For now, the button does nothing... but in this story, the point is to get the button on the right courses, and have it NOT appear on the ones where it should not appear.
TODO: Fully groom this story.

Estimate this as a 20 point story.

branch name: 5pm-2-addbtn


[Bug Report][Windows] Incorrect duration stream when playing webm files from local storage

Problem :
When i tried playing locally stored webm file the player is treating it as a online stream and the event stream of duration is 1-3 seconds ahead of the position stream. It is not displaying the total duration of the media. This is only happening while playing webm files.
Solutions Tried :
I also tried changing the buffer size.
ps: let me know if screenshot is needed.

Screenshot to help...

Working as intended. That's how media streaming & demuxer works.

Working as intended. That's how media streaming & demuxer works.

Just want to clear that i am not streaming through url, i am playing the downloaded media,
but vlc shows the full duration of the media while playing.


FEVER Data

Hi, thank you for sharing your interesting work!
I want to reproduce the results of FEVER,  but I cannot figure out which data I should download.
I found fever_symmetric*.jsonl at https://github.com/TalSchuster/FeverSymmetric, but could not find other files, unique.fever.*.duplicate.jsonl.
It would help me a lot if you could specify the links to download the data or share the data you used.
I really appreciate any help you can provide!

Hi. I'm looking for the same thing. Which FEVER file was used, and how to obtain it? @putama.


Visual indication for annotated variables

Add a visual indication to show if a variable is annotated and/or a variable is not annotated.
Things to think about:

What kind of visual indication? We don't want the users to misread annotation indications and warnings/errors.
Show annotated variables, or unannotated variables?
Can users turn off the feature or switch between showing annotated variables, or unannotated variables?

https://github.com/microsoft/vscode-discussions/discussions/46#discussioncomment-3051788

Update: Completed implementing visual indication by presentation date with Dr. Sauro. Will now implement applying the visual indication to annotated variables and may proceed with an on/off switch afterward.

Update: Completed obtaining list of annotated variables from back end. Will now implement decorator highlighting for the annotated variables.

Update: Completed implementing decorator highlighting for annotated variables obtained from the backend. The feature is now finished. Will now implement on/off switch of the feature.

Update: Completed right click for on/off switch of visual indications. Will now implement dynamic button title and might streamline switching on. Next is the extension setting of the switch.

Update: Finished the extension setting for the switch. Will now implement unit tests for the feature.

Update: Managed to figure out how to implement the dynamic button for the right-click menu and syncing for the user settings and right-click menu. Implemented two unit tests. Plan on implementing a few more before submitting a PR.

Update: Implemented unit testing for button/setting syncing and also switching on and off of visual indications using the context menu

As of VSCode 1.37.1 (2019-08-30), there is no way to write an automated test for decorations using the decorations extensions API.
There are automated tests of decorations in the vscode sources, particularly modelDecorations.test.ts, but they use private APIs.
Microsoft has an example extension that uses decorators, decorator-sample, but it has no tests.


Deadlock in SignatureMatcher

It's possible that the signature matcher portion of analysis can cause a deadlock when functions have disabled analysis.

Fixed in 3.5.4357-dev.


fix: "Desirec" misspelling fix

PR o'clock
Description
Just a simple misspelling fix
Checklist

[x] README.md has been updated after any changes to variables and outputs. See https://github.com/terraform-aws-modules/terraform-aws-eks/#doc-generation

Hooray, the most valuable contribution in my life 😂

@barryib  can you merge it?

@okgolove Your contributions are awesome! This one is not an exception :)


Support CSSStyleSheet for .styles property

lit-element should support returning a CSSStyleSheet object from the static class getter .styles(), in order to support the upcoming CSS Modules spec.
This behavior should be supported:
import styles from './my-element.css';

class MyElement extends LitElement {
  static get styles() { return [styles]; }
}

Currently, I can do this, but it's using browser support only:
import styles from './my-element.css';

class MyElement extends LitElement {
  constructor() {
    super();

    // Lit doesn't clobber this, since it has zero styles
    this.shadowRoot.adoptedStyleSheets = [styles];
  }
}

Take a look: https://github.com/Polymer/lit-element/pull/747
Maybe this can help you...

@danielbarion that's not related. I don't have the raw string, CSS Modules gives you a parsed CSSStyleSheet.

Can we have ability to modify LitElement.styles as we dynamically load styles?


Switched to Vite

Switched frontend to Vite
Upgraded VideoJS and it's plugins
Branding is now a bit more consistent
The SharedWorker and frame-api.html are now built by Vite and no longer just static files in public/
Random bugfixes

Now for the testing:


Matrix Preprocessor Bug With 1 Job

The following configuration file throws an error (provided below). Relates to the way the ensemble is being handled, removing the line ensemble: 1 from the configuration file solves the issue.
YAML file:
out_dir: 'pardir'
verbose: 2
ensemble: 1
Length: 10.0
Width: 10.0
dx: 1.0
L0_meters: 1.0
N0_meters: 1.0
Np_water: 10
Np_sed: 10
parallel: 1
save_dt: 300
resume_checkpoint: False
save_checkpoint: True
save_eta_grids: True

Terminal output:
pyDeltaRCM --config par02.yaml --timesteps 10
Traceback (most recent call last):
  File "/home/jayh/anaconda3/envs/pydeltarcm/bin/pyDeltaRCM", line 11, in <module>
    load_entry_point('pyDeltaRCM', 'console_scripts', 'pyDeltaRCM')()
  File "/home/jayh/Documents/pyDeltaRCM/pyDeltaRCM/preprocessor.py", line 897, in preprocessor_wrapper
    pp = PreprocessorCLI()
  File "/home/jayh/Documents/pyDeltaRCM/pyDeltaRCM/preprocessor.py", line 761, in __init__
    self.construct_job_file_list()
  File "/home/jayh/Documents/pyDeltaRCM/pyDeltaRCM/preprocessor.py", line 299, in construct_job_file_list
    self.expand_yaml_matrix()  # creates self.file_list
  File "/home/jayh/Documents/pyDeltaRCM/pyDeltaRCM/preprocessor.py", line 206, in expand_yaml_matrix
    raise ValueError(
ValueError: Length of matrix key "seed" was 1, relocate to fixed configuration.

I'm not sure this a bug exactly...we raise this error here. Running an ensemble of 1 is not an ensemble. An ensemble of 1 expands to a matrix of one:
matrix:
  seed:
    - 34324521

So the current implementation tells the user to reconfigure to remove the ensemble/matrix.
That said, I don't think there's any reason we need to forbid an ensemble of 1...I think we just need to test that the infrastructure still works if the length is just one. Moreover, we could try and raise a better error message about it being from an ensemble, if that's what you mean to call a bug?

Moreover, we could try and raise a better error message about it being from an ensemble, if that's what you mean to call a bug?

Yeah I guess that was more the point. "relocate to fixed configuration" wasn't super obvious to me. In the context of the ensemble I think it is a bit less clear because your yaml doesn't look like it has multiple configurations as it is "hidden" by the ensemble keyword.

yeah I think that a better error is a good idea. :+1:


Repeating REQ AssignSUCReturnRoute

Is your problem within Home Assistant (Core or Z-Wave JS Integration)?
NO, my problem is NOT within Home Assistant or the ZWave JS integration
Is your problem within ZWaveJS2MQTT?
NO, my problem is NOT within ZWaveJS2MQTT
Checklist

[X] I have checked the troubleshooting section and my problem is not described there.

[X] I have read the changelog and my problem was not mentioned there.

Describe the bug
What causes the bug?
Upgraded to z2m 6.2.0 / zwave-js 8.9.1. The problem was not occurring prior to that point, as far as I can tell.
What do you observe?
A battery powered node appeared in the z2m as if it was waking and sleeping continuously. This started after the upgrade and has not stopped. Examining the logs shows that the driver is trying to perform a AssignSUCReturnRoute request for some reason, and that fails. It repeats this forever. It's not obvious to me that the device is actually waking up.
What did you expect to happen?
The infinite requests to a sleeping a battery device to not occur.
Steps to reproduce the behavior:
Don't know.
Device information
Manufacturer: BRK Brands, Inc.
Model name: ZCOMBO
Node ID in your network: 10
I have 3 of these same devices, and only 1 of them exhibits the problem currently.
How are you using node-zwave-js?

[X] zwavejs2mqtt Docker image (latest)
[ ] zwavejs2mqtt Docker image (dev)
[ ] zwavejs2mqtt Docker manually built (please specify branches)
[ ] ioBroker.zwave2 adapter (please specify version)
[ ] HomeAssistant zwave_js integration  (please specify version)
[ ] pkg
[ ] node-red-contrib-zwave-js (please specify version, double click node to find out)
[ ] Manually built from GitHub (please specify branch)
[ ] Other (please describe)

Which branches or versions?
version:
node-zwave-js branch: 6.2.0
zwavejs2mqtt branch: 8.9.1
Did you change anything?
yes (please describe)
If yes, what did you change?
Upgraded to z1m 6.2.0.
Did this work before?
Yes (please describe)
If yes, where did it work?
I haven't noticed the problem in earlier releases. Not sure if it's just a coincidence. I haven't tried downgrading yet, but I might need to do that. Or I suppose I can try waking it and seeing if that fixes it.
Attach Driver Logfile
Here are a few days of activity. Problem starts in 12-26 log. After a restart of z2m it persists.
zwavejs_2021-12-24.log.gz
zwavejs_2021-12-25.log.gz
zwavejs_2021-12-26.log
I can provide a zniffer trace during this time as well, if needed.

Confirmed that reverting back to 8.9.0-beta.3, the problem goes away. Upgrading to 8.9.1, the problem returns.
zwavejs_2021-12-26.log

most likely caused by https://github.com/zwave-js/node-zwave-js/pull/3949

I actually can't reproduce on 8.9.1, even if I cheat by changing the nodes status:
18:53:48.140 DRIVER » [Node 014] [REQ] [AssignSUCReturnRoute]
                        payload: 0x0e03
18:53:48.146 SERIAL « [ACK]                                                                   (0x06)
18:53:48.147 SERIAL « 0x0104015101aa                                                       (6 bytes)
18:53:48.148 SERIAL » [ACK]                                                                   (0x06)
18:53:48.149 DRIVER « [RES] [AssignSUCReturnRoute]
                        was executed: true
18:53:48.446 SERIAL « 0x01210051030125010000007f7f7f7f7f00010600000000020900007f7f7f7f7f0 (35 bytes)
                      000a5
18:53:48.447 SERIAL » [ACK]                                                                   (0x06)
18:53:48.448 DRIVER « [REQ] [AssignSUCReturnRoute]
                        callback id:     3
                        transmit status: NoAck
18:53:48.455 CNTRLR   [Node 014] The node did not respond. It is probably asleep, moving its message
                      s to the wakeup queue.
18:53:48.456 CNTRLR   [Node 014] The node is now asleep.

@kpine can you share a dump for node 10?

Here's a dump from z2m, is that what you wanted?  10.txt
I've started of a build to use the linked PR, I'll give it a try soon.

I think the fix is working. For good measure, I upgraded back to z2m 6.2.0, confirmed the problem, then upgraded to a z2m 6.2.0 build with the linked PR. At first glance, it seems to have fixed the problem.
zwavejs_2021-12-27.log
My question is (and perhaps why you were asking for the dump?) why is zwave-js trying to assign a return route?

why is zwave-js trying to assign a return route?

I guess because it didn't work before. Without https://github.com/zwave-js/node-zwave-js/pull/3949, the previous attempts likely failed with NoACK because the device was asleep.


⚠ TorrentLeech has degraded performance

In be7e401, TorrentLeech ($TL) experienced degraded performance:

HTTP code: 200
Response time: 6360 ms

Resolved: TorrentLeech performance has improved in 8352fd0 after 19 minutes.


Added coverage & badges

Codecov Report

:exclamation: No coverage uploaded for pull request base (master@78fa3af). Click here to learn what that means.
The diff coverage is n/a.

@@            Coverage Diff            @@
##             master       #5   +/-   ##
=========================================
  Coverage          ?   84.09%
=========================================
  Files             ?        4
  Lines             ?       44
  Branches          ?        5
=========================================
  Hits              ?       37
  Misses            ?        7
  Partials          ?        0

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update 78fa3af...b5ccdcb. Read the comment docs.


404 hyperlink in README

At the bottom of README.md there's a hyperlink to some docs which previously would take you to https://reactjs.org/docs/package-management.html
This html page seems to no longer exist, I guess it used to be equivalent to the page I've found here: https://zhenyong.github.io/react/docs/package-management.html
Can't seem to find a comparable entry in the new docs which contains the information that package-management used to contain. Just an entry on optimizing browserify & webpack (https://reactjs.org/docs/optimizing-performance.html#browserify)
If someone wants to suggest the correct page this hyperlink should forward to then I'd be happy to make a PR

@W1lkins
I think this link is correct so I created the pull request for this issue. #3227


Bower support

Please add this cool jQuery plugin to the Bower.

My Fork is available as package jquery-colpick. All versions 2.* are identical to those here.

@mrgrain Thank you very much!


HDDS-5545. Enable TLS for GRPC OmTransport implementation

…sync with Ozone master containing s3gateway perisistent connection hadoop rpc from HDDS-5881.  This commit also includes functionality to configure omtransport choosiing either hrpc (default) or Grpc OmTransport s3gateway om channel - HDDS-5813.
What changes were proposed in this pull request?
Support for TLS secured Grpc OmTransport channel between s3gateway, s3g, and the ozone manager, om.  TLS is enabled for the s3g persistent connection between the s3g and the om through the configuration "hdds.grpc.tls.enabled" boolean.
Included is selection of OmTransport used between s3g and om through configuration "ozone.om.transport.class", org.apache.hadoop.ozone.om.protocolPB.Hadoop3OmTransportFactory (default) or org.apache.hadoop.ozone.om.protocolPB.GrpcOmTransportFactory.  Allowing use of Hadoop rpc, hrpc, (HDDS-5581) while migrating to the full HDDS-4440 feature using Grpc persistent OmTransport s3g.
The TLS Grpc client connection is established by initially using a temporary secured (kerberos) hrpc connection between the s3g and the om to obtain the CA Certificates (serviceInfo OmRequest).  The certificates are then used to authenticate the Grpc TLS connection established between the s3g and the om through the GrpcOmTransport.
What is the link to the Apache JIRA
https://issues.apache.org/jira/browse/HDDS-5545
How was this patch tested?
Patch was tested through both unit tests and manually with the secureozone cluster.

unit test TestGrpcOmTransport.testGrpcOmTransportFactory, TestGrpcOmTransport.testHrpcOmTransportFactory

hadoop-ozone/s3gateway$ mvn -Dtest=TestGrpcOmTransport#testGrpcOmTransportFactory test
[INFO] Running org.apache.hadoop.ozone.protocolPB.TestGrpcOmTransport
[INFO] Tests run: 1, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.97 s - in org.apache.hadoop.ozone.protocolPB.TestGrpcOmTransport
[INFO]
[INFO] Results:
[INFO]
[INFO] Tests run: 1, Failures: 0, Errors: 0, Skipped: 0
hadoop-ozone/s3gateway$ mvn -Dtest=TestGrpcOmTransport#testHrpcOmTransportFactory test
[INFO] Running org.apache.hadoop.ozone.protocolPB.TestGrpcOmTransport
[INFO] Tests run: 1, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.647 s - in org.apache.hadoop.ozone.protocolPB.TestGrpcOmTransport
[INFO]
[INFO] Results:
[INFO]
[INFO] Tests run: 1, Failures: 0, Errors: 0, Skipped: 0

manual testing with ozonesecure cluster:
hadoop-ozone/dist/target/ozone-1.2.0-SNAPSHOT/compose/ozonesecure$ docker-compose up -d --scale datanode=3
setup kdc and get user secret:

hadoop-ozone/dist/target/ozone-1.2.0-SNAPSHOT/compose/ozonesecure$ docker-compose exec scm bash
$ kinit -kt /etc/security/keytabs/testuser.keytab<EMAIL_ADDRESS>$ ozone s3 getsecret<EMAIL_ADDRESS>

With user credentials set in profile 'ozone' (aws secret & username<EMAIL_ADDRESS>through aws cli:
$ aws s3api --profile ozone --endpoint http://localhost:9878 list-buckets
{
    "Buckets": []
}

Runs s3g with hrpc omtransport.
Now for TLS Grpc rerun with same but with ozone configuration for Grpc om transport through "ozone.om.transport.class"=org.apache.hadoop.ozone.om.protocolPB.GrpcOmTransportFactory ie.
set in hadoop-ozone/dist/target/ozone-1.2.0-SNAPSHOT/compose/ozonesecure/docker-config :  OZONE-SITE.XML_ozone.om.transport.class=org.apache.hadoop.ozone.om.protocolPB.GrpcOmTransportFactory
$ aws s3api --profile ozone --endpoint http://localhost:9878 list-buckets
{
    "Buckets": []
}

@kerneltime - following up on what we discussed earlier, it would be great for you look at this and get your comments.  Thanks!

Thanks for updating the patch @neils-dev.
I would request you to avoid force-pushing to PRs. It makes it hard for the reviewer as they cannot see what updates have been done since the last review.

Thanks @neils-dev for addressing all the comments.
LGTM. +1 pending CI.

Thanks @neils-dev. I will merge the PR.


Upgrade ethers

preparatory work for adding typechain. Causes some tests to fail :-(

in favour of #3603


add a HX711

Hi,
I would like to know if it is possible to modify the code to add a second HX711?
thank you in advance

Hi maelisen,
of course it is. you just have to create a second (third, fourth,...) variable where you are going to store it.
For example:
#!/usr/bin/env python3
import RPi.GPIO as GPIO  # import GPIO
from hx711 import HX711  # import the class HX711

GPIO.setmode(GPIO.BCM)  # set GPIO pin mode to BCM numbering
my_hx_1 = HX711(dout_pin=21, pd_sck_pin=20)  # create a first hx
my_hx_2 = HX711(dout_pin=23, pd_sck_pin=24)  # create a second hx
my_hx_3 = HX711(dout_pin=25, pd_sck_pin=26)  # create a third hx
print(my_hx_1.get_raw_data_mean())  # get raw data reading from hx711 number 1
print(my_hx_2.get_raw_data_mean())  # get raw data reading from hx711 number 2
print(my_hx_3.get_raw_data_mean())  # get raw data reading from hx711 number 3
GPIO.cleanup()

Just change the pin numbers in the code for appropriate based on your wiring.
Any issues pls let me know.


Can you upload the report.pdf again? The download file is damaged. Thank you!

Can you upload the report.pdf again? The download file is damaged. Thank you!


Added ackermann function in php

Have you read the Contributing Guidelines on Pull Requests?
Yes
Description
Added ackermann function in php
Checklist

[x] I've read the contribution guidelines.
[x] I've checked the issue list before deciding what to submit.
[x] I've edited the README.md and link to my code.

Related Issues or Pull Requests
Fixes #6303

Hey @ankitaggarwal23 , for future reference can you maybe tell me ...the function had only 3 statements only 3 conditions what changes could have I made?
Thanks!


MQTT gateway port not exposed in dockerfile

Checklist

[X]  I am not using Home Assistant. Or: a developer has told me to come here.
[X] I have checked the troubleshooting section and my problem is not described there.
[X] I have read the changelog and my problem is not mentioned there.

Deploy method
Docker
Z-Wave JS UI version
zwave-js-ui: <IP_ADDRESS>2ca88
ZwaveJS version
zwave-js: 12.9.1
Describe the bug
The Dockerfile and docker-compose do not EXPOSE the port needed for the MQTT gateway:
https://github.com/zwave-js/zwave-js-ui/blob/master/docker/Dockerfile#L77
https://github.com/zwave-js/zwave-js-ui/blob/master/docker/docker-compose.yml#L24
MQTT Error: Error: connect ECONNREFUSED <IP_ADDRESS>:1883

To Reproduce
Run Docker image from https://hub.docker.com/r/zwavejs/zwave-js-ui
Expected behavior
MQTT gateway is accessible
Additional context
No response

AHHH.......that was not clear to me, sorry. Thanks for the clarification.


Error on SSR projects with actions execution

Now I see that source code in tag v3.0.2 (https://github.com/bluebill1049/little-state-machine/releases/tag/v3.0.2), doesn't contain changes for middleware.
In archive:
 if (isDevMode) {
    middleWare(debugName);
  }

but in code on GitHub:
https://github.com/bluebill1049/little-state-machine/blob/master/src/stateMachine.tsx#L62
if (isDevMode && isClient) {
    // @ts-ignore
    window['STATE_MACHINE_NAME'] = storeName;
  }

and when I execute action on Server Side I have an error:
ReferenceError: window is not defined
    at middleWare (/ssr/node_modules/little-state-machine/dist/little-state-machine.js:125:9)
    at Object.updateUserData (/ssr/node_modules/little-state-machine/dist/little-state-machine.js:163:9)

you happy to submit a PR on this?

Yes I can

Can you publish new version?

done.


Extract topic subscription logic to TopicSubScriptionManager

Motivation
relate issue #384
Because of many logic about topic subscription everywhere, this may easy to cause error.
I think we need to extract topic subscription logic to TopicSubScriptionManager.
Modification

Extract topic subscription logic to TopicSubScriptionManager.
This change can Fix #384.

@Technoboy-  PTAL :)


Setup Airbrake for your Node application

Installation
Add the library
npm install @airbrake/node

Configuration
This is a simple Node app app.js file that throws an error and sends it to Airbrake. To configure Airbrake in your project, require our library and instantiate it with your project credentials:
(You can find your project ID and API key in your project's settings)
const http = require('http');
const Airbrake = require('@airbrake/node');

new Airbrake.Notifier({
  projectId: <Your project ID>,
  projectKey: '<Your project API key>',
  environment: 'production'
});

const hostname = '<IP_ADDRESS>';
const port = 3000;

const server = http.createServer((_req, res) => {
  res.statusCode = 200;
  res.setHeader('Content-Type', 'text/plain');
  res.end('Hello World');
  throw new Error('I am an uncaught exception');
});

server.listen(port, hostname, () => {
  console.log(`Server running at http://${hostname}:${port}/`);
});

Full documentation
Visit our official GitHub repo for more examples and info on advanced options.

@abhijoshi2k I didn't open this issue, I think airbrake did it

@abhijoshi2k I didn't open this issue, I think airbrake did it

Same thing happened when I logged in from my account


Instance scheduler multiple tag support, and holiday

I'm curious if we can configure to support multiple tag, with support variety holiday for each individual country. ex: TH, and US will have difference holiday day.
EX:
To stop all 50 instances that have been tag in "holiday-th" (Which may include weekday)

Duplicate with https://github.com/awslabs/aws-instance-scheduler/issues/231

@chatchai-komrangded Thanks this is already in our backlog and will be reviewed for a future release!


added all the proto files

I've looked through the structures of the created classes, but I don't feel up to looking through all the refactored hit/stats code.
I think I'm just gonna trust you on this one, and if there are specific parts you'd like me to look over, do let me know - I will be able to look through smaller bits, but it coming as a whole is really hard to read :/ The state of the code wasn't great to begin with (before you started refactoring/rearrange/reformatting) but at least it was mine so I sorta knew where everything lay and what I had in mind when writing it.
tl;dr: I need more practice reading code but this is a whole lot of changes to what was quite messy code, and I just don't feel like following everything through, but do let me know of bits you've changed that are more high-risk at introducing bugs.

May also be worth noting that in addition to protobufs, this also adds hdf5 usage, especially as it's another platform dependency.


Fixed Meeting Side-panel Missing Import Csharp Sample

Configured and Tested In Vandana's Machine as well, and she got the output as expected.
Issue Link : https://github.com/MicrosoftDocs/msteams-docs/issues/9433

Executed Build Pipeline : https://github.com/OfficeDev/Microsoft-Teams-Samples/actions/runs/7057646624


concave body fixed texture

Hello , I'm create a concave body like Tetris "L"
var tetris=Vertices.fromPath('0 60 40 60 40 40 20 40 20 0 0 0');
var compoundBodyB = Matter.Bodies.fromVertices(0, 0, tetris,{render:{sprite:{texture:"images/test.png"}}});
the texture has some problem.
and the position it's not at (0,0) , how can i fixed these issue?
thanks so much~

the texture size is width:40px height:60px

I think the problem here might be the same as in #153, so please now refer to that thread, thanks.

I am facing texture repetition issue while using fromVertices. Any solution? Check the attached screenshot.

`var customTrey = Vertices.fromPath('0 0 0 20 152 20 152 0 150 0 150 18 2 18 2 0 0 0');
var trey = Bodies.fromVertices(1080, 385, customTrey, getOptions('images/trey.png', true, false), true, 0.01, 30);
function getOptions(sprite = '', static = false, sensor = false) {
var options = {
isSensor: sensor,
isStatic: static,
density: 0.1,
frictionAir: 0.001,
restitution: 0,
friction: 0,
// id: 420,
render: {
fillStyle: 'none',
sprite: {
texture: sprite,
xScale: 1,
yScale: 1
}
}
}
return options;
};`


Implement focus support for Canon EOS

Canon EOS support for focus during shutter control doesn't behave as expected.
Investigate how or whether it is possible to bring up to parity with the Fujifilm cameras.

Based on this discussion, we will need to implement the 'Remote' service handling to get focus support.
I do not have access to any newer EOS cameras, but I can guess what may work as a starting point.


Log4j updated to 2.17.1 for CVE-2021-44832

We should use the latest log4j to avoid security alerts when using this plugin.
Closes as well #43

upvote to build a new release version including l4j 2.17.1.


Add CORS domain support

Describe the feature
Since the HTTP server is accessible from any local application, additional protection has been built into the server to prevent misuse of the API from web pages.
To enable access to the API from a web page (for example, to use the online IDE Remix), the server must be configured to accept cross-origin requests.
TODO

add http.corsdomain CLI args ref #1221
Integrate CORS layer in rpc-builder ref https://github.com/paritytech/jsonrpsee/blob/f6f4a0845d7c94dfb9befe625b2a779b3a40a127/examples/examples/cors_server.rs

Additional context
No response

I would try doing this one


Installing .net 6 is required for 5.0 projects and when installing this version the build agent on the same machine fails to build due to error

This was copied from https://developercommunity.visualstudio.com/t/Installing-net-6-is-required-for-50-pr/1474894
When I have the latest version of the preview 2022 I cannot use the build agent on my machine for devops. I recieve the error below in the pipeline. If I on the other hand uninstall .net 6.0 the pipeline runs smoothly. The installer tells me I still have 5.0 installed but the project with .net 5.0 version cannot be opened and visual studio suggests that I should install some packages. After installation I end up in the same situation where the build agent pipeline fails meanwhile the project can be opened again.
"
##[error]Error: The process ‘C:\Program Files\dotnet\dotnet.exe’ failed with exit code 1
##[warning].NET 5 has some compatibility issues with older Nuget versions(<=5.7), so if you are using an older Nuget version(and not dotnet cli) to restore, then the dotnet cli commands (e.g. dotnet build) which rely on such restored packages might fail. To mitigate such error, you can either: (1) - Use dotnet cli to restore, (2) - Use Nuget version 5.8 to restore, (3) - Use global.json using an older sdk version(<=3) to build
Info: Azure Pipelines hosted agents have been updated and now contain .Net 5.x SDK/Runtime along with the older .Net Core version which are currently lts. Unless you have locked down a SDK version for your project(s), 5.x SDK might be picked up which might have breaking behavior as compared to previous versions. You can learn more about the breaking changes here: https://docs.microsoft.com/en-us/dotnet/core/tools/ and https://docs.microsoft.com/en-us/dotnet/core/compatibility/ . To learn about more such changes and troubleshoot, refer here: https://docs.microsoft.com/en-us/azure/devops/pipelines/tasks/build/dotnet-core-cli?view=azure-devops#troubleshooting
##[error]Dotnet command failed with non-zero exit code on the following projects : …

Hello, @FahaoTang could you please provide error logs or repro steps for your issue?

Hello, @FahaoTang could you please provide error logs or repro steps for your issue?

The steps to reproduce:

Create a solution in VS2019
Add an .NET 5 based website project
Add an .NET 5 based (.NET worker) Azure Functions project using Blob trigger
Submit the code to a Azure DevOps repo
Create a standard build plan in Azure DevOps using .NET Core website template.
Add task to use .NET SDK 3.1.x which is unfortunately required by .NET 5 based Azure V3 functions.
Then run the build pipeline.
This has been working really well for me all the time since early this year and from last week the error started to occur.

I eventually resolved the issue by separate Azure Functions build into another pipeline and my website build pipeline only build the website project. It's working but the pipeline time has increased from 6-7 mins to almost 20 mins.

Hello @FahaoTang,
I have investigated this issue. And it looks like not related to build agent. Most likely it's related to installing of Visual Studio 2022 preview and .NET 6 preview or RC version. Update of some SDKs, components or tools installed on machine can require update of other software to keep compatibility between them.
I see in description of occurred error that root cause is non-compatible version of NuGet manager. Actual version of .NET require NuGet manager version 5.8 or newer.
Please try to update version of NuGet manager by one of following ways:

command nuget update -self - in case NuGet manager was installed manually (https://docs.microsoft.com/en-us/nuget/install-nuget-client-tools)
by modifying of installed Visual Studio instance, tab "Individual components", section "Code tools" (https://docs.microsoft.com/en-us/visualstudio/install/modify-visual-studio)

Hello @FahaoTang, I have investigated this issue. And it looks like not related to build agent. Most likely it's related to installing of Visual Studio 2022 preview and .NET 6 preview or RC version. Update of some SDKs, components or tools installed on machine can require update of other software to keep compatibility between them. I see in description of occurred error that root cause is non-compatible version of NuGet manager. Actual version of .NET require NuGet manager version 5.8 or newer. Please try to update version of NuGet manager by one of following ways:

command nuget update -self - in case NuGet manager was installed manually (https://docs.microsoft.com/en-us/nuget/install-nuget-client-tools)
by modifying of installed Visual Studio instance, tab "Individual components", section "Code tools" (https://docs.microsoft.com/en-us/visualstudio/install/modify-visual-studio)

Thanks for the suggestions.

@FahaoTang, please notify us about the results, and let us know if you need additional help.

@FahaoTang, please notify us about the results, and let us know if you need additional help.

Hello, I am using Azure DevOps to build and the agent I used is windows-2022 with NuGet <IP_ADDRESS> already.
https://github.com/actions/virtual-environments/blob/main/images/win/Windows2022-Readme.md
Note: my previous error was not caused by different dependent SDKs; it was because Node.js issue (times out I guess) when building in that agent. After I commented out the node.js actions in Publish step, my build has always been successful.  Apologies my original comment may have caused confusion.

@FahaoTang, thank you for this info.
Could you please confirm that your pipelines aren't affected by issue described in first message now? Please let us know if the ticket can be closed in this case.
If no, please share us details about environment used to repro this issue, YAML of affected pipeline and logs of failed run (with enabled "Enable system diagnostics").

I didn't raise the original issue thus would not be able to confirm that. I can confirm my previous issue was resolved (but not related to the solution as mine was mainly Node.js issue in my publish task).

This issue is not related to agent itself, most likely this is environment-specific. And there is no new repro.
So the ticket is closed.

I am also getting the same error and I followed the above-suggested step but error is still prevailing
For switch syntax, type "MSBuild -help"
##[error]Error: The process '/usr/bin/dotnet' failed with exit code 1
##[warning].NET 5 has some compatibility issues with older Nuget versions(<=5.7), so if you are using an older Nuget version(and not dotnet cli) to restore, then the dotnet cli commands (e.g. dotnet build) which rely on such restored packages might fail. To mitigate such error, you can either: (1) - Use dotnet cli to restore, (2) - Use Nuget version 5.8 to restore, (3) - Use global.json using an older sdk version(<=3) to build
Info: Azure Pipelines hosted agents have been updated and now contain .Net 5.x SDK/Runtime along with the older .Net Core version which are currently lts. Unless you have locked down a SDK version for your project(s), 5.x SDK might be picked up which might have breaking behavior as compared to previous versions. You can learn more about the breaking changes here: https://docs.microsoft.com/en-us/dotnet/core/tools/ and https://docs.microsoft.com/en-us/dotnet/core/compatibility/ . To learn about more such changes and troubleshoot, refer here: https://docs.microsoft.com/en-us/azure/devops/pipelines/tasks/build/dotnet-core-cli?view=azure-devops#troubleshooting
##[error]Dotnet command failed with non-zero exit code on the following projects : /home/vsts/work/1/s/Sempra.ADF.AzureFunctions/Sempra.ADF.AzureFunctions.csproj
Finishing: DotNetCoreCLI


Standalone DropDatabase method

Codecov Report

Merging #101 (94d1e87) into main (c14b302) will decrease coverage by 0.12%.
The diff coverage is 40.00%.

@@            Coverage Diff             @@
##             main     #101      +/-   ##
==========================================
- Coverage   79.51%   79.38%   -0.13%
==========================================
  Files          18       18
  Lines        1533     1538       +5
==========================================
+ Hits         1219     1221       +2
- Misses        243      245       +2
- Partials       71       72       +1

Impacted Files
Coverage Δ

tigris/database.go
49.36% <40.00%> (-0.64%)
:arrow_down:

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update c14b302...94d1e87. Read the comment docs.


[Bug]: Seeing differences on local vs CI runs for the formatters

What happened?
As the title states, starting to pull my hair our locally. Currently I have my format targets configured like..
load("@aspect_rules_lint//format:defs.bzl", "format_multirun", "format_test")

format_multirun(
    name = "format",
    go = "@multitool//tools/gofumpt",
    protocol_buffer = "@rules_buf_toolchains//:buf",
    starlark = "@buildifier_prebuilt//:buildifier",
    terraform = "@multitool//tools/terraform",
    yaml = "@multitool//tools/yamlfmt",
)

format_test(
    name = "test",
    size = "small",
    go = "@multitool//tools/gofumpt",
    no_sandbox = True,
    protocol_buffer = "@rules_buf_toolchains//:buf",
    starlark = "@buildifier_prebuilt//:buildifier",
    workspace = "//:.gitlab-ci.yml",
    yaml = "@multitool//tools/yamlfmt",
)

Locally on ubuntu 22.04 and on MacOS a current commit fails as such:
spencer@gspencer-mlt autobots % bazel test tools/format/... --test_output=summary
INFO: Analyzed 16 targets (0 packages loaded, 0 targets configured).
FAIL: //tools/format:test_Starlark_with_buildifier (see /private/var/tmp/_bazel_gspencer/26b182f6d79bbfc06c198e7527c526e0/execroot/_main/bazel-out/darwin_arm64-fastbuild/testlogs/tools/format/test_Starlark_with_buildifier/test.log)
FAIL: //tools/format:test_YAML_with_yamlfmt (see /private/var/tmp/_bazel_gspencer/26b182f6d79bbfc06c198e7527c526e0/execroot/_main/bazel-out/darwin_arm64-fastbuild/testlogs/tools/format/test_YAML_with_yamlfmt/test.log)
INFO: Found 12 targets and 4 test targets...
INFO: Elapsed time: 0.312s, Critical Path: 0.22s
INFO: 5 processes: 8 local.
INFO: Build completed, 2 tests FAILED, 5 total actions
//tools/format:test_Go_with_gofmt                                        PASSED in 0.1s
//tools/format:test_Protocol_Buffer_with_buf                             PASSED in 0.1s
//tools/format:test_Starlark_with_buildifier                             FAILED in 0.1s
  /private/var/tmp/_bazel_gspencer/26b182f6d79bbfc06c198e7527c526e0/execroot/_main/bazel-out/darwin_arm64-fastbuild/testlogs/tools/format/test_Starlark_with_buildifier/test.log
//tools/format:test_YAML_with_yamlfmt                                    FAILED in 0.1s
  /private/var/tmp/_bazel_gspencer/26b182f6d79bbfc06c198e7527c526e0/execroot/_main/bazel-out/darwin_arm64-fastbuild/testlogs/tools/format/test_YAML_with_yamlfmt/test.log

Executed 4 out of 4 tests: 2 tests pass and 2 fail locally.
There were tests whose specified size is too big. Use the --test_verbose_timeout_warnings command line option to see which ones these are.

Summary here as it is just formatting yaml files and a BUILD file. *
In CI this isn't the case.. as all targets pass
Computing main repo mapping:
Loading:
Loading: 0 packages loaded
Analyzing: 16 targets (1 packages loaded, 0 targets configured)
Analyzing: 16 targets (1 packages loaded, 0 targets configured)
[0 / 1] [Prepa] BazelWorkspaceStatusAction stable-status.txt
Analyzing: 16 targets (16 packages loaded, 1217 targets configured)
[1 / 1] checking cached actions
Analyzing: 16 targets (21 packages loaded, 1257 targets configured)
[1 / 17] checking cached actions
Analyzing: 16 targets (23 packages loaded, 3545 targets configured)
[64 / 69] 4 / 4 tests; [Prepa] Creating symlink bazel-out/k8-fastbuild/bin/external/rules_multitool~~multitool~multitool/tools/terraform/terraform ... (2 actions, 0 running)
INFO: Analyzed 16 targets (23 packages loaded, 3545 targets configured).
INFO: Found 12 targets and 4 test targets...
INFO: Elapsed time: 5.028s, Critical Path: 0.74s
INFO: 76 processes: 68 internal, 8 local.
INFO: Build completed successfully, 76 total actions
//tools/format:test_Go_with_gofmt                                        PASSED in 0.3s
//tools/format:test_Protocol_Buffer_with_buf                             PASSED in 0.1s
//tools/format:test_Starlark_with_buildifier                             PASSED in 0.5s
//tools/format:test_YAML_with_yamlfmt                                    PASSED in 0.1s
Executed 4 out of 4 tests: 4 tests pass.
There were tests whose specified size is too big. Use the --test_verbose_timeout_warnings command line option to see which ones these are.

CI here is running in gitlab inside of the gcr.io/bazel-public/bazel:7.1.0 container image.
I'm not really sure of how to go about debugging this..
Version
bazel version
Bazelisk version: development
Build label: 7.1.1
Build target: @@//src/main/java/com/google/devtools/build/lib/bazel:BazelServer
Build time: Thu Mar 21 18:08:59 2024<PHONE_NUMBER>)
Build timestamp:<PHONE_NUMBER>
Build timestamp as int:<PHONE_NUMBER>
bazel run @buildifier_prebuilt//:buildifier -- -version
buildifier version: 6.4.0
buildifier scm revision: 433ea8554e82832e4fa4bdd530ca471564071511
bazel run @multitool//tools/yamlfmt -- -version
yamlfmt 0.13.0 (dd8547d)
How to reproduce
No response
Any other information?
No response

As documented on https://github.com/aspect-build/rules_lint/blob/main/docs/format.md#format_test - the format_test rule is not recommended because it's impossible for it to be hermetic when you've set no_sandbox = True. Maybe on your CI you're getting a remote cache hit so it's not actually running the formatter on the files?
I'd recommend having a separate CI step to assert the changed files are formatted. Our https://aspect.build/workflows product includes this.