Documentation: using alternative CNI plugins

Calico / Canal etc. They're all deployed as CNI plugins so they hopefully should be fairly interchangeable. As this is tested - we should add the process to the documentation.

I'll try to help out since I often deploy new clusters with bootkube and calico.
I haven't tried replacing flannel with calico on a running cluster, but there's already documentation on that elsewhere.

We're trying to leverage calico (and avoid flannel coming into the picture altogether) during the bootstrap process, as calico is the target state.  We're running into issues.
@bzub Do you by any chance have steps that work that you could share for initializing using calico vs flannel prior to full blown documentation?

@alanmeadows  Yes I'll share my manifests soon. Essentially I used the stock Calico yaml files and edited based on their documentation, and replaced the two flannel manifests that bootkube render generates with calico. The filenames just have to match the old flannel names so bootkube start uses them. It was surprisingly simple.

Here's the manifests and the filenames I used directly with bootkube.
They are based on these manifests from Calico.
I believe the only modifications I made were to:

Separate the configmap from the rest of the resources as bootkube expects
Change the etcd endpoint in the configmap to what works with my DNS setup
Comment out the volumes and volumeMounts pertaining to etcd TLS secrets since I don't use them

Please note I haven't tried this with self-hosted etcd nor kubelet.

Hello @bzub -- Thank you for your quick reply and manifests for using Calico.   I know you stated that you had not tested your Calico using the self-hosted etcd, but currently I am seeing a slight issue deploying this with the self hosted model.   Please note, we are using a non-self hosted kubelet, but a self hosted etcd.
I have pulled your manifests directly and the only modification I am making is supplying our self-hosted etcd IP in the kube-flannel-cfg.yaml file.  When I put in the IP address of the kube-etcd service (<IP_ADDRESS>), I am seeing all of our containers hang at ContainerCreating once the kubelet starts. During this time, our calico pods are in CrashLoop or Error state.  We are also seeing this behavior if I supply the localhost IP address: <IP_ADDRESS>:2379.    The only way I can see the pods create correctly and go into running state is if I supply the bootkube temporary ETCD server IP:    <IP_ADDRESS>:12379, but once bootkube stops itself and pivots over to the self-hosted etcd, the calico pods go down since the etcd is no longer listening on port 12379.
In summary, I am seeing the following issues when I supply various etcd server IPs for the etcd_endpoints: parameter:

kube-etcd service endpoint:  <IP_ADDRESS> ->  pods that require calico networking hang at ContainerCreating,  Calico is in CrashLoop or Error state,  since calico cannot reach the self-hosted ETCD yet.

Localhost IP at port 2379(<IP_ADDRESS>:2379) -> pods that require calico networking hang at ContainerCreating,  Calico is in CrashLoop or Error state, since Calico cannot reach the self-hosted ETCD yet.

Bootkube Temporary ETCD server (<IP_ADDRESS>:12379):   Pods spin up correctly, and go into running state but calico fails once the temporary etcd server goes away.

A solution I can see is for Calico to leverage its own etcd server, which I believe previous versions of calico did exactly that (Doesn't appear that this functionality is in your manifests), or have calico somehow fail over from the temporary bootkube etcd server to the cluster etcd server once bootkube goes away.
Let me know if you have any thoughts or potential solutions for this @bzub or require any further information.  For reference my bootkube/kubelet version details are below:
Bootkube:   v0.3.12
Kubelet:  v1.5.6
CNI:   v0.5.1

Hi @aric49. Thanks for the details of your issue.  The big difference between Flannel and Calico in terms of Bootkube is that Flannel is passed the --kube-subnet-mgr option which I believe results in Flannel not using etcd and instead uses the Kubernetes API server as an abstraction in front of etcd.  So if you don't mind the limitations, you could try Calico's similar Etcdless Hosted Install.
The Calico using its own etcd server/cluster option is basically what I use.  It's just a matter of configuration that my Bootkube installation uses the same etcd cluster as Calico.  So you could always go that route for Calico, and still use self-hosted etcd for Kubernetes.  If you would still like to attempt using self-hosted etcd for Calico, the next release of Bootkube could have the answer.  #418 was recently merged which appears to provide kube-apiserver with etcd endpoints for both the temporary plane and final Kubernetes cluster.  If I'm not mistaken these same endpoints could potentially be used in the Calico configuration manifest so it fails over, in a sense.
When you use the temporary etcd server (<IP_ADDRESS>:12379) as the endpoint does the Kubernetes cluster at least spin up the kube-apiserver(s) pods?  I would think they would start up because they use hostNetworking.  In that case, you could probably modify calico configmap with the new self-hosted etcd endpoint(s) on the final Kubernetes cluster.

Hey @bzub -- sorry for the delay in responding. I was doing some experimenting with the deployment using calico to replace the default flannel manifests and we were able to get our deployment at least semi-functional using the etcdless calico manifest. Unfortunately though, we need the full etcd capabilities of calico for our specific use cases, so this is more of a stop-gap solution.   We also did some experimentation with replacing the etcdless calico with the full hosted etcd calico manifest once we were able to get the cluster up and running.   However, we seem to be running into weird bugs when we do this.  For example, we are observing that sometimes different pods such as the api-server, or kube-dns goes into crashloop and never recovers.   Other issues we are seeing is that we cannot schedule workloads once the full cluster has come up.
It is possible that this instability could be caused by calico in conjunction bootkube, but it is quite difficult to nail down the root cause as of yet. I am also having some difficulty understanding what exactly is currently supported by bootkube in terms of switching out the default flannel CNI. It seems odd to me that the method would be to replace the flannel yamls with yaml files for other providers. Are there any plans to make this process more transparent in the way of documentation, or parameters we can pass into bootkube when we render it?  I think ideally, the operator should have an option to chose a CNI provider with a flag similar to:    bootkube render --cni-provider=calico, and provide a default manifest for a selfhosted calico/canal/flannel/romana/etc.   In the interim, perhaps provide documentation describing how to do this. Any thoughts?

Unfortunately I'm not super familiar with other CNI plugins - so I can't be of immediate help. However, it should ideally just be replacing the flannel manifests with whatever CNI plugin you wish to use (although I've never personally tested this).
From an architectural perspective, I would prefer that the only access to the cluster-etcd is from the api-server (access to etcd is essentially root on the cluster). But short of firewall rules, there's nothing immediately enforcing this in bootkube - so it's still an administrator's choice.
I wouldn't be opposed to allowing the render step to use a different CNI plugin -- but each supported plugin would likely would need to be something community supported (as I'm not personally knowledgeable of the different tools).

I've written documentation and manifests to use kube-router with Bootkube as an alternative to both kube-proxy and flannel.  It also provides NetworkPolicy enforcement.  I'd be willing to submit a PR that adds a link to the documentation if there's any interest.

@bzub there is definitely interest, thanks!

@bzub this is definitely interesting. i started working on a bootkube-ci repo, just so i can quickly standup and tear down bootkube deployments, and I have simply been auto-removing the flannel manifests and deploying custom calico/canal manifests (with policy enforcement). i will have to check out your suggestion for kube-router...it's definitely interesting and something we need to explore (i'm on the same team as @aric49 and @alanmeadows).


Support (and test) more interpretors?

E.g., Jython, Iron Python

As far as I can tell, at this point in time these two interpreters do not support cffi (required by the cryptography package), so it's a no go.


Changing the package naming

Changed

Changing the package naming

I didn't catch it before, but your other PR merged into main, bypassing develop. I fixed it this time, so that's why it looks strange.


Cannot access buttons under a tabular toolbar

I'm using FlaUI to test an application that has a 5 tab toolbar with unique buttons under each. The application starts with the first tab open and it's child buttons visible. Clicking these buttons works as intended.
However, when I use FlaUI to click another tab, it still only has access to the child buttons of the first tab. Is there some way to reset the current window or application so that the new tab's buttons are visible. Thank you.

Might be the "Tab" issue. See if http://www.colinsalmcorner.com/post/genericautomationpeer--helping-the-coded-ui-framework-find-your-custom-controls helps.

Closed due to inactivity, please reopen if my proposal didn't help.


Tune config API links

We favor links to generated docs targetting non-developer audiences over golang specifics.

/sig cluster-lifecycle


S3 backed vs Blob backed remote cache performance

We currently have an S3 backed cache. Whilst we haven't profiled the performance vs a blob based remote cache performance, I was wondering whether there is a configuration suggestion that is recommended (assuming a lot of small files and some larger ones here and there) in terms of best performance?

For best performance I recommend fast local storage (I tend to prefer XFS on linux), rather than using the proxy backends.


feat: add files to support manual tests

As cartesi-rollups-node gets built and new services are added, it becomes increasingly cumbersome to set up an environment to test it. The added docker-compose file is meant to simplify the process of manual testing for the time being.
Obs: the server_manager service will later be removed from the docker-compose to be managed by the cartesi-rollups-node binary itself.
Closes #97

@torives, my understanding is that this was part of #29. @fmoura

In the sense that this was a first step, yes. But since #29 is going to take a little while longer to be ready and I needed to advance with #80, I created this based on @fmoura's initial work 😉


[MM-54463] Enforce secure keyboard entry on macOS when a password box is focused

Summary
When a user types a password, there is a risk that another process on the user's computer could read the keyboard input and retrieve sensitive information from the user. On macOS, there is an API designed to prevent this.
This PR adds a call to that API that fires whenever the user has a password box focused.
Ticket Link
https://mattermost.atlassian.net/browse/MM-54463
NONE

Must be merged after the final v5.5 release is cut on Friday. This will go into a patch release.

Cherry pick is scheduled.


client IP address validation of cookies is punitive to users using mobile phones.

It means that if someone moves from wifi internet to phone internet, their IP changes and cookie/session will be invalid.

https://github.com/komuw/ong/commit/d6e111ba7dd891cb122a6d7b2971504bab4165a7

I think we should give option to people to be able to use IP address validation in cookies.
As well as other things they may wish, some people may want to invalidate cookies if the customers country changes, or if the customers role changes, etc.


Fix beta routing

ping @Hyperkid123

Thanks @karelhala.  I checked rbac and approval UIs and they already have this change.

I'll merge as tests are passing and this looks good to me.


Does cron support "exception date-time" ?

For example:
I have a task with two types of date-time:
type 1 is normal date-time:
start: 2019-1.1
end : 2019-1.10
time: 10:00 am
action: do A
type 2 is exception date-time:
date: 2019-1.5
time: 9:00 am
action: do B
The actual project maybe more complicated than above.
So simply dividing the above time to

2019-1.1>2019.1.4
2019-1.5
2019-1.6>2019.1.10

is improper.

That is not supported by this library. You would have to arrange for that in your own code, sorry!


Mislead usage of id in MediaAudioPlugin.connect, join, change

Just for me.

MediaAudioPlugin is extended by AudioroomPlugin and AudiobridgePlugin. AidioroomPlugin uses id for its entities. Audiobridge uses room. Because of that I had to do options = Helpers.extend({id: id}, options); or options = Helpers.extend({room: roomId}, options); in every action of those plugins.
How can we resolve this? It's hard to say. We can't put it inside MediaAudioPlugin cause it can not know id's key as room or id. We can't remove id from arguments cause we need it for _currentRoomId and we can't extract it from options without knowing its key room or id.
On the other hand keeping it as is now makes me wanna say WTF when I look at it.


add onBeforeSelect callback

Adds an onBeforeSelect callback to allow intercepting a selection. Ensures
access to both the prospective new selection and the current selection.
This is a preliminary offer for #1071 - let me know if you'd like any additional tests, style changes, etc.
Features:

provides a way to access both the incoming selection and the current selection, e.g.:

$scope.confirmMatch = function(currentSelection, incomingSelection) { ...
<ui-select on-before-select="confirmMatch($select.selected, $item)" ...

defaults to completing the selection
allows aborting the selection synchronously by returning falsy
allows fulfilling or aborting the selection asynchronously by returning a $q promise

Updated the features explanation above.

:+1:

This needs squashing and rebasing.


Add tint to color scales

Checklist

[x] the PR target is correct

[ ] main for postmortem, docs-only fixes, and post-release hot-fixes
[x] dev for everything else

[x] ran doit lint locally

References

fixes #129

Code changes

[x] add tint to scales
[x] add to demo
[ ] docs
[ ] tests

User-facing changes

users of scales can provide a tint to lighten or darken all values of an output

Backwards-incompatible changes

n/a

Going with #131


[OTHER]

What would you like to share?
I want to change the thumbnail of the website so that it looks good
Additional information

Want to Change this
🥦 Browser
Google Chrome
👀 Have you checked if this issue has been raised before?

[X] I checked and didn't find similar issue

🏢 Have you read the Contributing Guidelines?

[X] I have read the Contributing Guidelines

Are you willing to work on this issue ?
Yes I am willing to submit a PR!

Hello @Satakshijain , that is something we wouldnot change.
That is not thumbnail, rather just a readme banner made by the UI team for Hacktoberfest promotions !


Sample cs-winui miss languages after it is published as a package

Hello,
When I run the sample cs-winui ( https://github.com/microsoft/WindowsAppSDK-Samples/tree/main/Samples/ResourceManagement/cs-winui) in Visual Studio (mine is VS 2019) - after clicking "Override Language" button, I can see the German text is displayed as expected.

However, after I publish it as a sideloading package and install it - right click on package project, select Publish > Create App Packages ... .

When I click "Override Language" button, it shows me the text in English.

It seems that resources in German is gone after packaging.  Is this a bug or any additional configuration is needed ? And if this is a known issue, is there any workaround I could apply?

Dupe of https://github.com/microsoft/WindowsAppSDK/issues/1980


Completing The Intake

By the end of the sprint, we should have our intake done.
This means:

[ ] We will have completed the FTC Into the Deep Starter Bot Intake Guide (Except for Cutting Hex Shaft and Plastic)
[ ] We will have hooked up the motor to a battery and tested it (To see if it can pick up a sample)
[ ] We will also try to add or modify the design to become more efficient (By optimizing plastic sheet lengths, putting mesh grabbers further out, etc.)

Day 1:

Mateo wasn't here, so I couldn’t start actually building the model
I did, however, gather the parts
I also played around with the idea of a longer plastic sheet for the intake, to see if we were able to scoop it up quickly and transport without it falling out
I used a mock plastic sheet (made out of cardboard) to test out the scooping mechanism, and we were somewhat successful

Day 2:

We built the main structure for the intake system
We couldn't cut the shaft so we built our intake after measuring 175mm so that it is the correct length
We assembled the two pieces of vertical extrusion onto the horizontal extrusion and used pillow blocks at the end
We used the pillow blocks to fasten the hex shaft (which has the mesh grabbers on it)
We began working on the servo but we couldn't finish it. We decided to finish it on Day 3.

Day 3:
Minor Setback:

We assembled the servo only to realize we put it on the wrong way (into the bracket)
We ended up having to re-assemble the bracket and the servo, which took a while (to screw in)
We also realized that we couldn't test it because the servo needs to be plugged into a control hub
However, we came up with the solution to fasten a regular motor (from our old robot) and then just plug the battery in, so that we could test the build, without needing special equipment
I also started to brainstorm what length we should cut the plastic, so that it is a little longer than the original (for the more efficient intake system we discussed before).

Day 4:

We began the final steps of the intake
First we had to cut out the correct shape from the corrugated plastic
We used an exacto knife to cut the plastic but we used a pencil to make the holes (for screws)
We used corner brackets to mount the cut corrugated plastic onto the horizontal extrusion
After some contemplation we decided to extend the plastic longer than it needed to be so that it is easier to intake/hold samples

Day 5:

We finished fastening the corrugated plastic
We used a motor to test the intake
It is able to pick up samples but in its current unconfigured state it "yeets" the samples backwards
The intake is now complete

Here is a picture of the intake:


delete-comments

Added 'delete comments' feature. First commit: f0839b8

I just realized that it seems that I never made a pull request for my branch "comments-additional-features". Sorry about that. All of these PRs get really confusing.

So the first commit in this PR is actually faae094.


Update databaseVulnerabilityAssessments.json

Updated storageContainerSasKey explaining that both read and write access is required in the SAS token.
Latest improvements:
MSFT employees can try out our new experience at OpenAPI Hub  - one location for using our validation tools and finding your workflow.

Contribution checklist:

[X] I have reviewed the documentation for the workflow.
[X] Validation tools were run on swagger spec(s) and have all been fixed in this PR.
[N/A] The OpenAPI Hub was used for checking validation status and next steps.

ARM API Review Checklist

[N/A] Service team MUST add the "WaitForARMFeedback" label if the management plane API changes fall into one of the below categories.
adding/removing APIs.
adding/removing properties.
adding/removing API-version.
adding a new service in Azure.

Failure to comply may result in delays for manifest application. Note this does not apply to data plane APIs.

[N/A] If you are blocked on ARM review and want to get the PR merged urgently, please get the ARM oncall for reviews (RP Manifest Approvers team under Azure Resource Manager service) from IcM and reach out to them.
Please follow the link to find more details on API review process.

Can one of the admins verify this patch?

Automation for azure-sdk-for-go

@michaelelleby, can you fix the CI check failures?

@qiaozha , can you have a look at JS SDK failures and give suggestions for the fix? @michaelelleby , can you look at the CI check failures and fix them?

@michaelelleby hi, it seems that you have several files defined "storageContainerSasKey", but you've only changed the description of  this file specification/sql/resource-manager/Microsoft.Sql/preview/2017-03-01-preview/databaseVulnerabilityAssessments.json which cause inconsistency. you may change the description of  other files that have "storageContainerSasKey" definition to the same as this file.
Also, duplicate definitions may cause SDK generation failure.

@michaelelleby, can you please follow the guidelines @qiaozha provided to fix the failures?

Automation for azure-sdk-for-python


PM feature

I think it's necessary to implement sending private messages between users as most forums do.

This is a barebones forum package, we'll have a separate package for additional (optional) features.


Configure Webpack for code/asset bundling

Currently, the project does not seem to be using any "bundler" programs, these are programs that will take all of your files (for example your JavaScript files) and bundle them into a single output file.
During the bundling process, the output file will be optimised and altered, reducing the output code size and allowing the code to work on more devices.
Webpack is best for this as there is a tremendous amount of documentation and plugins available.
Webpack: https://webpack.js.org/

Decided that Webpack is not required for the backend and is being implemented with the "implement-react" branch for the frontend.


TREC Clinical Trials 2021

Dataset Information:
A new TREC Track about finding clinical trials, given a medical record.
Links to Resources:

http://www.trec-cds.org/2021.html
https://trec.nist.gov/pubs/call2021.html

Dataset ID(s):
This will use an April 2021 snapshot of clinicaltrials.org. So to fit in with the current hierarchy:

clinicaltrials/2021 -- documents
clinicaltrials/2021/trec-ct-2021 -- documents, queries, [qrels to be released in the future]

Supported Entities

[x] docs
[x] queries
[x] qrels
[ ] scoreddocs
[ ] docpairs

Additional comments/concerns/ideas/etc.
The documents, queries, qrels are not available at this time. Can add here as they become available.

The documents are now available. Queries to be released in the future.
http://www.trec-cds.org/2021.html#documents

Topics are released: http://www.trec-cds.org/topics2021.xml
(linked from this page: http://www.trec-cds.org/2021.html)


Show specific error messages in the UI related to connection errors

Problem you would like to solve
Currently, the Desktop Modeler shows an generic error message of "Unknown error: Please Check Zeebe cluster status".

Tailing the logs shows the more specific connection error messages such as:
RequestError: certificate has expired

Proposed solution
Display the specific error messages in the ui to make troubleshooting easier.
Alternatives considered
It's possible to tail the Desktop Modeler logs. However this is tedious and not intuitive for most customers.
Additional context
No response

We're using NodeJS/OpenSSL under the hood. To my knowledge they are as unspecific as stated in the case of a broken SSL handshake.

Hi @nikku 👋
Yeah, that'd be great. Ideally, it'd be really great to be able to see the more specific reasons as to why the Desktop Modeler is unable to connect to the Zeebe Gateway without having to look at the logs.
So, any additional details that can be parsed out of a response, or out of an exception trace, and show in the UI could help a lot.
Or, I had another idea ... maybe it could be possible to show the more detailed error messages inside the Log panel? Perhaps the human readable portion of the stack trace (such as RequestError: certificate has expired) could be shown in the Log panel?

Parsing the log for special character streams does not seem to me like a satisfying (and robust) solution.
zeebe-node error handling is what we'd need to plug into.
Maybe, if you have the chance, you could give it a debugging session yourself, and figure if there is pragmatic improvements we can do.
I've tagged this as spring cleaning.

Could we perhaps add additional checks prior to making a request to ensure that the TLS certificate is valid  and display an error message if it's not?
This form and lack of error response is a big frustration on my end, causing about 3-5 hours of debugging effort every time I have to deploy a model, which I often have to do for testing. (I have this issue both in web modeler and desktop modeler)
Additionally, I would like to offer my support. If there's a change that can be made in the helm chart (I suppose this would be for the web modeler) such that a user does not need to configure their oauth url  /  zeebe gateway url,  like environment variables I can add for these to be auto-filled,  I would be more than happy to write a helm-chart patch for that.
From my perspective, this form has shown the red box for:

Untrusted TLS certificate in the gateway
Untrusted TLS certificate in keycloak
Failing to write to a cache file that I never even knew existed
Invalid client credentials

There might be more reasons. In my debugging I've also messed around with the Audience form element and found that whatever you put in that field is completely ignored by the application.
Also, I do know that there is a troubleshoot link that goes to the documentation, and while I am grateful for this, it is not good enough in my opinion.

@jessesimpson36 Thanks for chiming in, and sorry to hear that you are frustrated abut SSL configuration issues in Camunda 8.
Before we can try to improve the situation, let me better understand some of your feedback:

This form and lack of error response is a big frustration on my end, causing about 3-5 hours of debugging effort every time I have to deploy a model, which I often have to do for testing. (I have this issue both in web modeler and desktop modeler)

Could you elaborate what you deploy, and why this always takes such long amount of time to deploy + debug? Is what you do a common thing ordinary users do, and if so, how frequently do it? Which documentation / guidelines do you follow as you do it?

Hi @nikku ,
I am a developer on the Distribution team who works on the helm charts.  For me, it's pretty common to deploy the helm chart locally and do basic testing, especially as it relates to support tickets, new features, helping others internally, and the occasional customer calls where customers struggle to do similar things.

Could you elaborate what you deploy, and why this always takes such long amount of time to deploy + debug?

What I deploy is often a values.yaml for the https://github.com/camunda/camunda-platform-helm/tree/main/charts/camunda-platform repo, and many times, I take a customers values.yaml, and modify it so that I can test things locally with their configuration. The reason it takes a long time for me is because I don't know why it happens and that there are many reasons for the same error message (we basically just get a red box and something like "Unknown error. Please check Zeebe cluster status. Troubleshoot").
So what am I doing that it takes so long for me to debug?
Once I get this error, I have to wonder whether the issue has to do with the networking, the deployment configuration, or the application configuration.

I check to see if the cluster endpoint matches the external url in the ingress configuration
I check that the OAuth2 url host name matches the keycloak host name designated in the ingress configuration
I modify the ending of the oauth2 url: /auth/realms/camunda-platform/protocol/openid-connect/token.  I often try removing the auth part, or playing around with different urls because I have no idea how I'm supposed to get this magic url.
I verify the client ID and client secret in identity. Sometimes I will make a new Application in identity with all privileges, and sometimes I will just use the Zeebe client.
I test all my TLS certs to ensure they are all valid
I check the logs for Zeebe, Zeebe-gateway, and the web modeler restapi.  The logs have always been worthless for me in debugging this, but I check them anyway.
I modify the Keycloak url to use the kubernetes service name as the hostname instead of the external-facing url
I modify the OAuth url to use the kubernetes service name as the hostname instead of the external-facing url
I try the desktop modeler with previous steps to see if that's any different

Usually, I go through those steps, they don't always help, and then I just make panic changes because theres no logs or error messages.  I have gone to the troubleshoot link before, sometimes it helps. Most of the times it does not.  It did help with my most recent frustration when I was trying to configure a read-only root filesystem though.   That was when I learned about the magic file ZEEBE_CA_CERTIFICATE_PATH=/path/to/certificate using the docs link.

Is what you do a common thing ordinary users do, and if so, how frequently do it?

Every user who installs C8 will need to verify that their installation is correct, and the only way to do that is to deploy a model and access each of the web components.   Users will only have to debug this once, but I have to deploy the helm charts many times.  So ordinary users will not be as frustrated as internal devs who are testing their installation.

@jessesimpson36 Thanks for your feedback.

I modify the ending of the oauth2 url: /auth/realms/camunda-platform/protocol/openid-connect/token. I often try removing the auth part, or playing around with different urls because I have no idea how I'm supposed to get this magic url.

I see two things we want to address rather soonish (check if properly documented, and/or can be validated):

Partially in scope of the modeler: What OAuth URL should be entered, how do I learn about it, how can we validate it?
In scope of the (Desktop) modeler: Can we return more meaningful error messages?

A third thing that I wonder:

Can we provide a CLI utility that verifies the proper configuration of a C8 (self-managed) instance, using tools equipped to do the job? I.e. if I verify proper configuration of my mail server I turn to detailed diagnostics utilities (i.e. this) when just sending or receiving an email proves inconclusive.

What I wonder is if we can provide a CLI utility that verifies the proper configuration of a C8 (self-managed) instance, using tools equipped to do the job?

I'm not sure this is a good way to handle it.  We have zbctl, but zbctl will often work regardless of whether the web modeler /  desktop modeler can work. Or vice versa.
To me, a better solution would simply be to have environment variables that would pre-fill that form, and for us to set them as part of the helm chart.   so for example:
CLUSTER_ENDPOINT=http://<RELEASE>-zeebe-gateway:26500
IDENTITY_OAUTH_URL=http://<RELEASE>-keycloak/auth/realms/camunda-platform/protocol/openid-connect/token
DEFAULT_AUDIENCE=test

Then the user only puts in the client id and secret.  The helm chart can then properly set those environment variables.
That's more of a Web Modeler suggestion.  I'm not sure if that's a good idea or not, or if that idea could be translated to the desktop modeler.
I still also think better error messages makes most since directly inside the modeler / web modeler.

What we'd accomplish with a test kit is to verify the remote end(s) are configured correctly, independent of zbctl (being extremely forgiving with SSL certificates) and the modelers (being fairly strict).

What sort of test would make sense here? some openssl  command to verify the ssl cert?  SSL isn't the only problem that can trigger this error. Perhaps accessing an OIDC in endpoint to ensure the keycloak url is properly set (https://developer.okta.com/docs/reference/api/oidc/#well-known-openid-configuration).  Perhaps something that tests if a port is open  on the zeebe gateway and whether we can get a certain response out of it.

If you ask me there is a couple of steps involved:

Ensure remote endpoints are reachable
SSL: Ensure remote endpoints are trusted / properly configured
Ensure remote endpoints are correct (right OAuth callback url)

The second step is fully supported by openssl connection diagnosis.

Ok,  so we have the openssl command,
timeout 1 openssl s_client -alpn h2 -connect modeler.dev.jlscode.com:443 -servername modeler.dev.jlscode.com -brief
CONNECTION ESTABLISHED
Protocol version: TLSv1.3
Ciphersuite: TLS_AES_256_GCM_SHA384
Peer certificate: CN = modeler.dev.jlscode.com
Hash used: SHA256
Signature type: RSA-PSS
Verification: OK
Server Temp Key: X25519, 253 bits

And the openid-configuration endpoint which can be queried like so:
> curl --silent \
         -X GET \
        https://keycloak.dev.jlscode.com/auth/realms/camunda-platform/.well-known/openid-configuration  \
        | jq .authorization_endpoint

"https://keycloak.dev.jlscode.com/auth/realms/camunda-platform/protocol/openid-connect/auth"

I'd say this is a solid start.  Are there ways to verify a GRPC connection? Like some sort of curl / healthcheck endpoint over GRPC to verify the gateway url connection works?

With those two things passing, I still struggle to deploy a model.

You want to run the openssl command against all endpoints, keycloak, modeler, and zeebe gateway. alpn is, to my knowledge, only required for Zeebe.
Once Zeebe is connected you'd want to try to query the cluster topology using zbctl status.

To verify the full OID endpoint you want to assert (in a shell script) that the token-endpoint is reachable + that it provides you with a token, cf. this stackoverflow answer. Adapted to use client id and secret, of course.

Parsing the log for special character streams does not seem to me like a satisfying (and robust) solution.
zeebe-node error handling is what we'd need to plug into.
Maybe, if you have the chance, you could give it a debugging session yourself, and figure if there is pragmatic improvements we can do.
I've tagged this as spring cleaning.

Just saw this message. yeah I'll give this a try and post here if I find something useful.

ALPN stands for Application-Layer-Protocol-Negotiation. It is being used by GRPC (Zeebe) to negotiate the binary protocol after HTTP(S)/2 + TLS connection to the server.
It must be appropriately configured for Zeebe only. Other endpoints use standard REST, where the protocol (HTTP(S)) is settled on the protocol layer, before initiating communication, after TLS.

To test deployment to Zeebe I'd suggest to use the desktop modeler, with DEBUG logging enabled.
This gives you detailed output (even if hidden via the UI) on things that go awry.

Last point: Desktop modeler trusts your OS root certificates. In web modeler you may need to double check the behavior.

Based on my investigation in Modeler land I discovered two things I'll immediately follow up upon:

https://github.com/camunda/camunda-modeler/issues/3864
showcase self-managed OAauth URL + audience in use (https://github.com/bpmn-io/internal-docs/issues/781)

ChatGPT-produced script for connection validation:
#!/bin/bash

# Define the URLs of the remote endpoints
ZEEBE_ENDPOINT="https://example.com/zeebe"
OAUTH_ENDPOINT="https://example.com/oauth"
CLIENT_ID="your_client_id"
CLIENT_SECRET="your_client_secret"
SSL_ENABLED="true" # Set to "true" to enable SSL validation

# Function to check if an endpoint is reachable
check_endpoint_reachability() {
    local endpoint="$1"
    if curl -Is --connect-timeout 5 "$endpoint" >/dev/null; then
        echo "Endpoint $endpoint is reachable."
    else
        echo "Endpoint $endpoint is not reachable."
        exit 1
    fi
}

# Function to validate SSL for an endpoint if SSL_ENABLED is set to "true"
validate_ssl() {
    local endpoint="$1"
    local ssl_enabled="$SSL_ENABLED"

    if [[ "$ssl_enabled" == "true" ]]; then
        if openssl s_client -connect "$(echo "$endpoint" | sed -e 's/https:\/\/\([^/]*\).*/\1/')" < /dev/null 2>/dev/null | openssl x509 -noout -checkend 0; then
            echo "SSL for endpoint $endpoint is valid."
        else
            echo "SSL for endpoint $endpoint is not valid or expired."
            exit 1
        fi
    else
        echo "SSL validation is disabled."
    fi
}

# Function to check if the OAuth callback URL is correct and obtain a token
check_oauth_callback() {
    local oauth_callback_url="$1"
    local oauth_token_url="$oauth_callback_url/token"

    # Make a request to obtain an OAuth token using the client ID and client secret
    local response
    response=$(curl -s -X POST "$oauth_token_url" -d "client_id=$CLIENT_ID" -d "client_secret=$CLIENT_SECRET")
    local http_status=$(echo "$response" | head -n 1 | awk '{print $2}')

    if [[ "$http_status" == "200" ]]; then
        if echo "$response" | jq -e '.access_token' >/dev/null; then
            echo "OAuth callback URL is correct, received a 200 status code, and contains an access_token field in the JWT token."
        else
            echo "OAuth callback URL is correct and received a 200 status code, but the response does not contain an access_token field in the JWT token."
            exit 1
        fi
    else
        echo "OAuth callback URL is incorrect, or the request returned a non-200 status code."
        exit 1
    fi
}

# Check reachability of remote endpoints
check_endpoint_reachability "$ZEEBE_ENDPOINT" || exit 1
check_endpoint_reachability "$OAUTH_ENDPOINT" || exit 1

# Validate SSL for remote endpoints (if enabled)
validate_ssl "$ZEEBE_ENDPOINT"
validate_ssl "$OAUTH_ENDPOINT"

# Check if the OAuth callback URL is correct and obtain a token
check_oauth_callback "$OAUTH_ENDPOINT" || exit 1

Based on ChatGPT prior art https://github.com/camunda/zeebe-connection-test/pull/10 adds a basic C8 connection checker, validating reachability, SSL and oauth. Can be extended in a fairly simple manner.

Another review of our deploy flow (against C8 SaaS) uncovered that the C8 SaaS /token endpoint indicates "client not found for CLIENT_ID" with HTTP 404, making it indistinguishable for us from "endpoint not found" (ref).
An update to C8 SaaS fixes the issue (will now indicate wrong credentials as `HTTP 401 as suggested by the OpenID specification (Page 45).

Thanks for all the feedback folks, especially @jessesimpson36! I think we were able to move the "deploy to C8 experience" forward substantially.
We'll ship with the next release of the Desktop Modeler:

[x] https://github.com/camunda/camunda-modeler/pull/3868
[x] https://github.com/camunda/camunda-modeler/issues/3864
[ ] https://github.com/camunda/camunda-modeler/pull/3873

We've otherwise worked on / improved:

[x] https://github.com/camunda/camunda-docs-modeler-screenshots/pull/62
[x] https://github.com/camunda/zeebe-connection-test/pull/10

We collected the following potential follow-ups:

[ ] https://github.com/camunda/camunda-platform-docs/issues/2623
[ ] Verify web modeler provides similarily (useful) UX

Closing this issue. Let's handle further improvements in individual follow-ups.


[Bug]: Issue in arithmetics in PDF forms

Attach (recommended) or Link to PDF file
I cannot attach the file to a public repository, as it concerns an order sheet which could be abused. Please contact me via email - peter dot kraus at tu-berlin dot de and I will share the file with you.
Web browser and its version
Firefox 130.0
Operating system and its version
Windows 10
PDF.js version
Whatever is in Firefox 130.0
Is the bug present in the latest PDF.js version?
Yes
Is a browser extension
No
Steps to reproduce the problem

Type 302.80 into order total field
Select 7% VAT which calculates it to be 21.20 (which is correct)
The sum is 323.00 instead of 324.00

What is the expected behavior?

Correct sum in Foxit.
What went wrong?

Incorrect sum in pdf.js (Firefox 130)
Link to a viewer
No response
Additional context
No response

You can file a bug in the Firefox pdf viewer component:
https://bugzilla.mozilla.org/enter_bug.cgi?product=Firefox&component=PDF Viewer
and check the box to make it only visible by Mozilla employees:

If you prefer sending it to me, you can, please use my mozilla email (I'm the owner of the above component, so you'll be able to find my email address in the page).

https://bugzilla.mozilla.org/show_bug.cgi?id=1918115


Error uploading file when a file seems corrupted with sharp.

Bug Report
When trying to upload a file i face an errored which said that There was an problem trying to upload a file.

The file should upload even if i don't trust this one
Current Behavior
it cause a throw

Possible Solution
You could edit the file https://github.com/payloadcms/payload/blob/78edac684e54d335b15303d8348c8abcb2bba716/src/uploads/imageResizer.ts#L54
And apply the following solution
https://github.com/lovell/sharp/issues/1859#issuecomment-528255648

Steps to Reproduce

Detailed Description

Thanks for the report @alexdieudonne . I have a few clarifying questions:

Are you uploading from the Admin UI?
Does this happen for any file you attempt or specific ones?
What version of node?

Okay

I'm not uploading from the Admin UI, it's through the API
No i've found the solution. This occur when you want to upload a file and this one exceed the limit that you've chosen in your payload config file
v18.7.0


README does not contain explanation of the pun behind 'icicle'

I mean, it's a cool name, but I'd love to know why.

Icicle == I(vory) SQL.

:cake:

It's also related to https://github.com/ambiata/ice (cut down ivory afaik), but I don't know if that pun is explained either....


Azure Service Bus Default Credentials when only Endpoint is specified

From discord chat - i feel TokenCredentials is valid to be separate as it may allow for you to have more fine grained control over the priority ordering which may be occurring under default credentials.
The current code did not deal well with the connection string being null when checking for presence of the access token.
I wanted to add a test for this - but i wasn't sure what credentials might be available to allow DefaultAzureCredentials to function on the build server. Is there any suggestions there?

Rebased/merged. Please check my work!


Sage 10 - Vendor.js 404 error

[x] I've read the guidelines for Contributing to Roots Projects
[x] This request isn't a duplicate of an existing issue
[x] I've read the docs and followed them (if applicable)
[x] This is not a personal support request that should be posted on the Roots Discourse community

Description
Removing Bootstrap results in an 404 error that vendor.js can not be found. Vendor.js is not build in production.
Steps to reproduce

Remove: import 'bootstrap'; from app.js
yarn build:production

Expected behavior: [What you expect to happen]
Maybe conditional load vendor.js?
Actual behavior: [What actually happens]
The wp_enqueue_scripts action in app/setup.php still has it as a dependency and results in a 404.
Reproduces how often: [What percentage of the time does it reproduce?]
Always
Versions
master
macOS 10.15.5
Additional information
None

vendor.js is generated by .extract() in the mix manifest. If you were going to remove it, you would more or less take it upon yourself to then remove it from after_setup_theme

Hm, when no vendor/libraries are used in the theme scripts, Laravel mix doesn't generate a vendor.js at all.

Yep, this was happenening to me too before I started writing any JS for this most recent project. When app.js is empty vender.js 404s.

And just commenting out/removing the vendor scripts enqueue will result in the main app script not running as it relies on the manifest json that needs vendor as dependency. So when commenting it out, be sure to comment it out as dependency, too.

Yep, this was happenening to me too before I started writing any JS for this most recent project. When app.js is empty vender.js 404s.

Same issue here!

Same here, just to test it out I imported Alpinejs in app.js and then the build generated vendor.js

I'd like to draw attention to this issue.
Wordpress 5.8 makes heavy use of JS in the backend.
When vendor doesn't exist, wordpress responds with a redirection.

then javascript stops execution and page displays blank
check: /wp-admin/widgets.php

Temporary solution
webpack.mix.js
remove .extract()
setup.php
change this:
    wp_enqueue_script('sage/vendor.js', asset('scripts/vendor.js')->uri(), ['jquery'], null, true);
    wp_enqueue_script('sage/app.js', asset('scripts/app.js')->uri(), ['sage/vendor.js'], null, true);
    wp_add_inline_script('sage/vendor.js', asset('scripts/manifest.js')->contents(), 'before');

to this:
wp_enqueue_script('sage/app.js', asset('scripts/app.js')->uri(), ['jquery'], null, true);

change this:
    if ($manifest = asset('scripts/manifest.asset.php')->load()) {
        wp_enqueue_script('sage/vendor.js', asset('scripts/vendor.js')->uri(), ...array_values($manifest));
        wp_enqueue_script('sage/editor.js', asset('scripts/editor.js')->uri(), ['sage/vendor.js'], null, true);
        wp_add_inline_script('sage/vendor.js', asset('scripts/manifest.js')->contents(), 'before');
    }

to this:
        wp_enqueue_script('sage/editor.js', asset('scripts/editor.js')->uri(), [], null, true);

I'm not sure what manifest.asset.php does, please edit my code if it's wrong


News layout same as LP layout

use the same layout as learning pathways for the news index

We can tweak further later but already an improvement I think

Oh that is much better

One day a bar to tick which labels to show perhaps!


popover javascript on firefox not breaking line automatically

if you add the following code:
https://gist.github.com/1248469
you're gonna see that, on chrome it breaks the line automatically, but on firefox 6.0.2 for linux it's not doing the same. Guess the same for windows and mac but i have no such OS to give a try.
result: the information is not shown completely.

@lucasmcastro Any update on this? If not we'll close it out as we don't actively support Linux (we should clarify that on our docs I guess).

Okay, i am @lucasmcastro. I was using his login when i reported this. Sorry for that.
I'm not familiar with jsfiddle, but i gave it a try: http://jsfiddle.net/6bZH7/2/
well, i guess that i can see better on this page: http://www.trynimbus.com/download-center.php
if you hover the "VER" button it should popover the md5checksum of the file (it's a download center).
on firefox it's not wrapping well, not braking the line of the long md5checksum and consequently not being able to show the end of the text. on chrome it's doing perfect.

Wrapping fine for me in firefox? what version do you have?

The screenshot here on chrome: http://pho.to/R48Syd
The screenshot on firefox 7.0.1 (i've just updated this, the previous version behaved same way) : http://pho.to/j4j4xg

Oh lol... you're using linux?

this is definitely a linux bug

sorry to comment on a closed issue. Everything else that I've tried is working well on Linux. Why not try to support this OS too?

It actually looks like it is breaking the line - but your font is too big (regular letter/number characters wont wrap). You have some options, either make the font the same size as it is in chrome, add invisible characters (to hack in wrapping), or make the size of your popover auto or just larger.
Either way, it's not really something for us to fix in bootstrap. If you'd like more help, please ask in the mailing list! Thanks! :)


Svg files lacking a width and height throw errors

I have a svg file which is fairly weird, it doesn't have a width or height anywhere in the file and uses a <style> + @media selectors to select a <use> element to make visible dynamically based on the screen size.
What appears to be happening is that sharp is interpreting this file as a 0x0 image and then fails lower down as a result.
Unfortunately for me this isn't my image, its coming from a 3rd party. I have a work around (try/catch and then render a blank image of the right dimensions 😬 ) but what I'd really love is for sharp to render the image successfully, as is. I think that it should have the ability to interpret the the width and height of the image based on the desired resize dimensions. If not I would be happy to pass to sharp any additional parameters it may need to successfully render the image.
What is the output of running npx envinfo --binaries --languages --system --utilities?
  System:
    OS: macOS Mojave 10.14.6
    CPU: (12) x64 Intel(R) Core(TM) i7-8850H CPU @ 2.60GHz
    Memory: 255.21 MB / 16.00 GB
    Shell: 3.2.57 - /bin/bash
  Binaries:
    Node: 11.12.0 - ~/.nvm/versions/node/v11.12.0/bin/node
    npm: 6.11.2 - ~/.nvm/versions/node/v11.12.0/bin/npm
  Utilities:
    Make: 3.81 - /usr/bin/make
    GCC: 4.2.1 - /usr/bin/gcc
    Git: 2.21.0 - /usr/bin/git
    Clang: 1<IP_ADDRESS> - /usr/bin/clang
    Subversion: 1.10.4 - /usr/bin/svn
  Languages:
    Bash: 3.2.57 - /bin/bash
    Perl: 5.18.4 - /usr/bin/perl
    PHP: 7.1.23 - /usr/bin/php
    Python: 2.7.15 - /usr/local/bin/python
    Python3: 3.7.0 - /usr/local/bin/python3
    Ruby: 2.3.7 - /usr/bin/ruby
    Rust: 1.18.3 - /Users/justin/.cargo/bin/rustup

What are the steps to reproduce?
Using the attached svg file, simply try to resize it or do any other operation with it:
> sharp(fs.readFileSync('original.svg')).resize(100, 100).toBuffer().catch(console.error)
CSS parsing error
CSS parsing error
CSS parsing error
CSS parsing error
CSS parsing error
Promise { <pending> }
CSS parsing error
CSS parsing error
> CSS parsing error

(sharp:90891): GLib-GObject-WARNING **: 15:40:55.924: value "0" of type 'gint' is invalid or out of range for property 'width' of type 'gint'

(sharp:90891): GLib-GObject-WARNING **: 15:40:55.924: value "0" of type 'gint' is invalid or out of range for property 'height' of type 'gint'

(sharp:90891): GLib-GObject-WARNING **: 15:40:55.927: value "0" of type 'gint' is invalid or out of range for property 'width' of type 'gint'

(sharp:90891): GLib-GObject-WARNING **: 15:40:55.927: value "0" of type 'gint' is invalid or out of range for property 'height' of type 'gint'
[Error: svgload_buffer: SVG rendering failed
vips2png: unable to write to buffer
]

What is the expected behaviour?
I expect it to render the svg at the provided size.
Are you able to provide a standalone code sample, without other dependencies, that demonstrates this problem?
Yes. 1-liner for nodejs console:
sharp(fs.readFileSync('original.svg')).resize(100, 100).toBuffer()

Are you able to provide a sample image that helps explain the problem?
Yes: original.svg.gz

Hi, this is a limitation of the current librsvg API. The same problem can be seen using its rsvg-convert command line tool, even when providing dimensions:
$ rsvg-convert --version
rsvg-convert version 2.46.0
$ rsvg-convert original.svg -o out.png
CSS parsing error
CSS parsing error
CSS parsing error
CSS parsing error
CSS parsing error
CSS parsing error
CSS parsing error
CSS parsing error
The SVG original.svg has no dimensions
$ rsvg-convert original.svg -o out.png -w 100 -h 100
CSS parsing error
CSS parsing error
CSS parsing error
CSS parsing error
CSS parsing error
CSS parsing error
CSS parsing error
CSS parsing error
The SVG original.svg has no dimensions

A new rsvg_handle_render_document function has just been added to the librsvg API via https://gitlab.gnome.org/GNOME/librsvg/merge_requests/237 but this has not yet been released. Using it should solve this kind of problem, but will require a change to libvips first.


firewall infrastructure does not get reconciled

How to reproduce:

create cluster
cluster has two workers and one firewall:

metalctl machine list --project ed53d0dc-fd1c-41f9-a534-bf84c61c98c9
  ID                                         LAST EVENT   WHEN  AGE      HOSTNAME                        PROJECT                               SIZE           IMAGE         PARTITION
  fafd0c00-7090-11e9-8000-efbeaddeefbe       Phoned Home  2s    23m 9s   shoot--p7l8m...-firewall-fcbab  ed53d0dc-fd1c-41f9-a534-bf84c61c98c9  c1-xlarge-x86  Firewall 1    nbg-w8101
  00000000-beef-beef-0011-efbeaddeefbe       Phoned Home  3s    18m 52s  shoot--p7l8m...dfb8b55dc-f9zxg  ed53d0dc-fd1c-41f9-a534-bf84c61c98c9  c1-xlarge-x86  Ubuntu 19.04  nbg-w8101
  00000000-beef-beef-0001-efbeaddeefbe       Phoned Home  1s    6m 36s   shoot--p7l8m...dfb8b55dc-nfvv9  ed53d0dc-fd1c-41f9-a534-bf84c61c98c9  c1-xlarge-x86  Ubuntu 19.04  nbg-w8101

destroy firewall
metalctl machine rm fafd0c00-7090-11e9-8000-efbeaddeefbe
reconcile cluster
cloudctl cluster reconcile c1605f39-1668-11ea-853c-42ced4c4a306

=> reconcile freezes at 86%:
  UID                                   TENANT  PROJECT                               NAME      VERSION  PARTITION  OPERATION   PROGRESS         API   CONTROL  NODES  SYSTEM  SIZE  AGE
  c1605f39-1668-11ea-853c-42ced4c4a306  fits    ed53d0dc-fd1c-41f9-a534-bf84c61c98c9  mwen4895  1.14.3   nbg-w8101  Processing  86% [Reconcile]  True  True     False  False   2/2   54m 7s

project still without firewall:
  ID                                         LAST EVENT   WHEN  AGE      HOSTNAME                        PROJECT                               SIZE           IMAGE         PARTITION
  00000000-beef-beef-0011-efbeaddeefbe       Phoned Home  15s   49m 6s   shoot--p7l8m...dfb8b55dc-f9zxg  ed53d0dc-fd1c-41f9-a534-bf84c61c98c9  c1-xlarge-x86  Ubuntu 19.04  nbg-w8101
  00000000-beef-beef-0001-efbeaddeefbe       Phoned Home  17s   36m 50s  shoot--p7l8m...dfb8b55dc-nfvv9  ed53d0dc-fd1c-41f9-a534-bf84c61c98c9  c1-xlarge-x86  Ubuntu 19.04  nbg-w8101

That's right. We do not ask the metal-api again after we got a machine id from the firewall create request. Would be a good thing to make this more robust.

Unfortunately, the Gardener does not explicitly request infrastructure reconciliation once it succeeded successfully. When adding the gardener.cloud/operation: "reconcile" annotation to the infrastructure resource, the newly implemented behavior of recreating a firewall works fine...

@Gerrit91 The Gardener does add the gardener.cloud/operation=reconcile annotation to the Infrastructure only during the maintenance time window. It's a little bit special here. For all other extension resources (like Worker, ControlPlane, etc), it adds the annotation in every reconciliation loop. The rational was to minimize the number of calls to the IaaS providers to prevent running into quota limits, especially if you have a lot of shoots using the same IaaS account. Hence, the idea was to run the infrastructure reconciliation only once a day - in the maintenance time window. WDYT?

Rafael, I did not expect you here! :D
Thanks for clarification. We wanted to make our firewall creation idempotent. I guess it's fine for the time being if the infrastructure gets only reconciled during maintenance window. We differ a little from the other cloud providers here because we actually maintain a server in the infrastructure. Ideally, this would be managed by something like the machine-controller-machine, such that we can also do machine upgrades. Maybe we even need a special controller to handle this properly... not sure yet.

We now support updating the firewall spec (image or size), which causes firewall deletion (hence downtime) and recreation.

I think, we can close this for now as it has partially been resolved. Let's open another issue for "zero-downtime firewall updates" when it's time.


persistent Auth Example broken

Flutter auth SDK seems to be broken
My Code (with go_router)
https://gist.github.com/chief-nerd/c5dc85a40c9f72040e7a4b6875189606
which is pretty much the code from
https://github.com/nhost/nhost-dart/blob/main/packages/nhost_flutter_auth/example/lib/persistent_auth_example.dart
I see on Web in my Chrome Application that the token is being put into store.
But when I do a reload of the application I am logged out again.
Do I need to call nhostClient.auth.signInWithStoredCredentials(); manually? Cause it's not called during init of the application??

Hi,
Yes, There is an example here https://github.com/nhost/nhost-dart/issues/91
I am, at the moment, creating a better way to handle this out of the box in the library; it'll come out as soon as we have a stable release. More examples are also on the way.


how to use iOpenValueHelp and iChangeEditingStatus

Hi all,
i´m trying to use the method iOpenValueHelp from the sap.fe.test api. https://sapui5.hana.ondemand.com/#/api/sap.fe.test.api.FilterBarActions%23methods/iOpenValueHelp
The parameter "vFieldIdentifier" is required but i dont know whats expected for that. How do i identify explicit fields?
I also want to use the method iChangeEditingStatus.
https://sapui5.hana.ondemand.com/#/api/sap.fe.test.api.FilterBarActions%23methods/iChangeEditingStatus
The required parameter is "sEditState" which should be an enum out of these: https://sapui5.hana.ondemand.com/#/api/sap.fe.test.api.EditState%23overview
My question is also here: How should the parameter look like, or rather, how do I access the enums?
BR Simon

that's definitely something for @Siolto or @georgbischoff, as it's their daily (testing) business 😄 → guys, please jump in and help @seimon-ohh

Hi Simon,

The expected syntax for ChangeFilterField is: When.onTheMainPage.iChangeFilterField({ property: "OverallStatus" },"O"). In the code example OverallStatus is the name of a field. In most cases you should find the name of the property in the related entityset of your metadata.
In case of iChangeEditingStatus you typically refer to sap.fe.test.api.EditState in an OPA5 Journey. In WDI5 you can also directly pass the state in uppercase, e.g. ALL or UNCHANGED.
Code example: When.onTheMainPage.onFilterBar().iChangeEditingStatus("UNCHANGED")

Regards,
Georg

Hi Simon,
in many of the sap.fe.test.api test-functions you can pass the "vFieldIdentifier" parameter as either an object or as a string.
In case of an object you have to pass the (internal) name of the field you can find in the metadata (as described by Georg already). In case of a string, you can pass the content of the label of that field on the UI.
In case of FilterBarActions.iOpenValueHelp() this would be the label content of the parameter field of the action dialog you want to open the value help for.
Passing the content of a label is a bit more critical than passing the internal name because the same label might be existing more than once on the UI which would mean that the test is executed for every label content found on the UI.
Regards
Andreas


Alternative for container_name for docker compose on Azure

Hello,
I am deploying a simple app with docker compose on azure and I noticed that the directive container_name does not work, Azure assigns a random name like this:
serving_0_b144dc70
The problem is that I am trying to communicate my containers through the default network of docker compose but I do not have success because I do not know the exact name of the service because Azure generates a random number and it adds it to the name of my services.
Thanks in advance for your help.

Document Details
⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

ID: b2472d79-baad-f202-75dc-c0d7c08e5c49
Version Independent ID: 7816cf1e-2264-e365-4d5c-b1fc9f7d08fe
Content: Create multi-container app in Web App for Containers - Azure App Service
Content Source: articles/app-service/containers/tutorial-multi-container-app.md
Service: app-service
GitHub Login: @msangapu
Microsoft Alias: msangapu

@DanlFrn Could you please share the doc that you are referring to?

Sure:
https://docs.microsoft.com/en-us/azure/app-service/containers/tutorial-multi-container-app

@DanlFrn Could you please share the doc that you are referring to?

Sure:
https://docs.microsoft.com/en-us/azure/app-service/containers/tutorial-multi-container-app

This is is similar to my problem:
https://blogs.msdn.microsoft.com/appconsult/2018/10/24/deploy-a-docker-multi-container-application-on-azure-web-apps/
I cannot connect to my container because Azure adds a random number to my service name, like this:
serving_2_254bc79a

@DanlFrn Are you using the image: tag in your docker-compose.yml file to define the container name so that Azure does not assign a random value?

@DanlFrn Since we have not heard back from you we will now proceed to close this thread. If there are further questions regarding this matter, please tag me in your reply. We will gladly reopen the issue and continue the discussion.

@BryanTrach-MSFT I have exactly the same problem... AFAIK image: tag instructs composer which image to choose and container_name defines the name of the container. As on now, sadly, 'container_name' is not supported, hence no chance to communicate between containers.


each slice

I guess this was just a typo... @Sirupsen

oh wow, that's what I get for not testing with more than two.

LGTM


Chebyshev polynomial version is included

I added KACnet.py file to include Chebyshev polynomial version of the KAN. I saw that the efficiency is similar to that given by the KALnet. I have already implemented KACnet in my FluxKAN.jl. So this is a python version.

Thank you so much for your contribution. You are right, there is not a lot of difference in these two, and that is expected as well, because the base computations are very similar so the accuracy of adaptation are going to be the same.


holehunter.com 105.9 KB

holehunter.com
105.9 KB

  105.9 KB
  holehunter.com

Need GTMetrix link

https://gtmetrix.com/reports/www.holehunter.com/vjgZbzGn/

Declined. Adult site.

Thank you for your consideration. I understand. The submission information didn't have a prohibition against the category so I thought it was worth a shot as the site uses a lot of advanced optimization techniques to create a fully fledged experience under 67kb compressed on the initial visit and about 8kb compressed on subsequent visits. The user generated text is adult, but there there are no, and will never be any, pornographic pictures or video. The site also uses all responsible meta tags and warnings to identify its content to users.


WPF and Winforms applications will require a new sdk and TargetPlatform

WPF and Winforms applications should use the .NET sdk and Target net5.0-windows
There is a new TFM in .net 5.0 which replaces netcoreapp and netstandard.  You can find more details on this change here: https://github.com/dotnet/designs/blob/master/accepted/2020/net5/net5.md
Windows Forms and WPF projects which retarget to .NET 5.0 will need to change the TargetFramework to net5.0-windows instead of just net5.0.  It is also recommended to change the Project Sdk attribute on the first line of the project from Microsoft.NET.Sdk.WindowsDesktop to Microsoft.NET.Sdk.
Version introduced
.NET 5.0 preview 8
Old behavior
<Project Sdk="Microsoft.NET.Sdk.WindowsDesktop">

  <PropertyGroup>
    <OutputType>WinExe</OutputType>
    <TargetFramework>netcoreapp3.1</TargetFramework>
    <UseWPF>true</UseWPF>
  </PropertyGroup>

</Project>

New behavior
<Project Sdk="Microsoft.NET.Sdk">

  <PropertyGroup>
    <OutputType>WinExe</OutputType>
    <TargetFramework>net5.0-windows</TargetFramework>
    <UseWPF>true</UseWPF>
  </PropertyGroup>

</Project>

Issue metadata

Issue type: breaking-change

@marcpopMSFT I've updated the issue description with my suggestions


Fix #4129: Warn if the default global execution context is used.

The behavior in the presence of imports is unfortunately not ideal
here, especially when the implicit ExecutionContext is
imported.
Ideally, we'd like a warning on the import already and the ability to
silence the warning once for an entire file. However, imports get
fully resolved in the typer phase, so this would require processing
imports in the pre-typer phase, where the entire suppression
infrastructure is not available (it requires typing of the @nowarn
annotations).
Therefore, we live with the sub-optimal situation, especially given
that there is a compiler flag to disable the warnings overall.

Let's see how many tests still fail.

TBD: Do we merge this before v1.0.0 of https://github.com/scala-js/scala-js-macrotask-executor is released?

TBD: Do we merge this before v1.0.0 of https://github.com/scala-js/scala-js-macrotask-executor is released?

I guess it would better to wait for it to be released, yes.

Linking to https://github.com/scala-js/scala-js-macrotask-executor/issues/21

This looks good to me!

Seems like some partests also fail. I guess the best course of action is to simply add the compiler flag to the partest compilation?

Seems like some partests also fail. I guess the best course of action is to simply add the compiler flag to the partest compilation?

Yes, that seems like the right thing to do in this case.

It looks like this is the last thing that could go into v1.7.1. Should we merge now-ish then publish v1.7.1, or should we publish v1.7.1 without it? I guess it depends on how far we're thinking https://github.com/scala-js/scala-js-macrotask-executor v1.0.0 will be.

IMO this PR can wait. But if @djspiewak says they can release 1.0.0 soon, then maybe it's worth waiting with 1.7.1.

FWIW there are no blockers for macrotask-executor 1.0, we've just been letting it "bake". But it's @djspiewak's call.

I have done another iteration at test fixing. Hopefully we'll have green light.
Given that macrotask executor is simply baking, feels like we might as well tag it 1.0.0 and put this PR in 1.7.1.


Prevent accounts without account numbers from breaking the payments page

Details

Do not return un-issued or deleted cards
If we get an account without an account number just don't display the description.

Fixed Issues
$ https://github.com/Expensify/Expensify/issues/171546
Tests

Log into e.cash with an account that has both a bank account and credit card
Make sure there are descriptions under each with the last 4 of the account numbers

QA Steps

Ping @joekaufmanexpensify and ask him to go to the payments page
His page should not crash

Tested On

[x] Web
[ ] Mobile Web
[ ] Desktop
[ ] iOS
[ ] Android

@Dal-Papa Are you looking for a screenshot of how my screen looks when I try to access the payments page from my test account?

Ideally a screenshot of your screen with the fix that @stitesExpensify provided, but I think we can simply QA when that's out.

Cool sounds good, feel free to ping me when it's time to QA!

Account without account number and no crash

:hand: This PR was not deployed to staging yet because QA is ongoing. It will be automatically deployed to staging after the next production release.

🚀 Deployed to staging         in version: 1.0.80-3🚀

platform
result

🤖 android 🤖
success ✅

🖥 desktop 🖥
success ✅

🍎 iOS 🍎
success ✅

🕸 web 🕸
success ✅

@joekaufmanexpensify Can you go to your payments page and check if the app crashes? 😬 (following PR orders)

I was able to access the Payments page from my expensifail account on staging!

:tada: Thanks @joekaufmanexpensify

you're welcome!

This issue can be checked off, but it looks like something weird is still going on though, we shouldn't be putting non-activated cards in the wallet since they can't be used. Would you mind making an issue for that @joekaufmanexpensify ?

Wouldn't we want that listed there so the user can click the validate that card in the future? Even though I'm not using this card because it was sent by mistake, it's still a card that exists. Or is it just not expected behavior that the card is listed there right now because validating expensify cards in newdot doesn't exist yet?

Yeah my thinking was that we would not show it for now since it is not usable, and then we'll start showing those again once we decide we want the ability to activate in newDot

We are supposed to show the card in NewDot once it is activated though right? If that is what we do, then it could make sense to just add Not Activated or something similar now rather remove it. Because then we'd just need to add it back later.

Well the cards are in different states. So basically the front end would only get activated cards from the server which means that when it is activated, it will automatically show up

Ah got it, so we haven't really considered how the activation flow will work for Expensify Cards in NewDot at all? And we haven't even mapped out how we want un-activated cards to appear in NewDot yet for N6, so we should remove now and then add something like this when we've actively designed how this will work?

Yep! That's what I'm thinking :)

Sounds good. I'll make a new issue today!

🚀 Deployed to production         in version: 1.0.81-4🚀

platform
result

🤖 android 🤖
success ✅

🖥 desktop 🖥
success ✅

🍎 iOS 🍎
success ✅

🕸 web 🕸
success ✅


Version control for Automate Models

The Automate model is an object model with classes, instances and scripts segregated by domains and namespaces. The ManageIQ UI has a built in Automate explorer which allows a designer to add new elements to editable domains. The designers look at the automate model as code which should be subject to version control and be stored in a Version Control System (VCS). In the Anand release the Automate model is stored in the Postgres database and you can only have the latest model stored in the database. We are researching to create a prototype using GIT as the VCS and some of the goals that we are working towards are

Allow for multiple versions of models to be stored in the VCS
Allow for dev and production environments to be stored in the VCS
When the automate model is being instantiated by the Automation Engine allow for which version of the model gets used.
Allow for models to be fetched from different sources.
Revert/Undo changes to the automate model
Synchronizing the Automate models between servers in a zone.
Allow for Multiple designers from editing the model from different servers in the zone.
Backup of the Automate Model since it will be now stored in the filesystem as opposed to the database.
Explore using the VCS model for import/export

@mkanoor is this still a valid issue? In not, can you close it.

We are not pursuing this anymore instead we allow customers to import a Domain from a Git Repository using a specific branch.


This looks great! Where do I find the methods available?

Is there some documentation or list of methods available?

@lpanebr this repository is just integration (or "wrapper") for Google Apps Script.
You can see details about source package here: https://github.com/cheeriojs/cheerio

@tarasyyyk Thank you for the explanation. That's right. Please refer to the document of Cheerio.
@lpanebr Thank you for using this library. Have fun!

thanks @tarasyyyk
I've found some other examples there:
import { load, select } from 'cheerio';

// Aliases are short hands for longer HTML selectors
select.aliases.classic = 'marquee,blink';

const $ = load(doc);
$(':classic').html();

  ///

const $ = cheerio.load('

');

$.contains($('div').get(0), $('p').get(0));
//=> true

$.contains($('p').get(0), $('div').get(0));
//=> false

  ///

const $ = cheerio.load('');

$.merge([1, 2], [3, 4]);
//=> [1, 2, 3, 4]

  ///

const $ = cheerio.load('');
$.parseHTML('markup');

  ///

const $ = cheerio.load('');
$.root();


Any reason as to why img-rounded radius is set to 0?

I've been using Bootstrap for quite some time (Almost years now) and i never got to use img-rounded just because i always had a separated CSS Stylesheet for avatars and stuff.
But today i was going to use it and realized that by default img-rounded has gotten its border set to border-radius: 0

This is for Bootstrap 3. .img-rounded continues to have a border-radius value: https://github.com/twbs/bootstrap/blob/v3-dev/less/scaffolding.less#L86
Please make sure that someone has not edited your copy of that file, or has changed the value of @border-radius-large/$border-radius-large if you're using Less/Sass.

Closing give above comment.


fix: misspelling BreadcrumbElipssis -> BreadcrumbEllipsis

@NikSchaefer I think this is a duplicate of https://github.com/shadcn-ui/ui/pull/2978


[SECURESIGN-1049] changing url to securesign namespace

/approve

/ok-to-test

@SequeI When you have a chance can you close this and open it up against main pls :)


PromptDialog.Confirm doesn't show up properly on Skype web app or skype desktop client

Hello,
I am working with PromptDialog.Confirm styled dialog prompt and noticed that it doesn't render properly on desktop skype/SkypeWebApp. But it does properly render the buttons in Iphone's skype  app.
I had the PromptStyle set to PromptStyle.Auto.
Kindly look into this and let me know.
Thanks in advance.

I have the same issue, the only way to get the prompt to render properly is to the use the development version of skype web chat
https://web.skype.com/en/?ecsoverride=developer

It's just the way it is at the moment I'm afraid until it gets pushed to the other versions of Skype.

Even the buttons are not rendering in Embeded Web Chat control. But working perfectly with Emulator v3 version

I guess with the release of Skype clients with card support this is issue is resolved. Feel free to open another issue if you still see this issue.


Fix Scala.js behavior and test

I merged #376 even though it causes one Scala.js test to fail, and the first change here updates the test to match the new behavior.
The other change causes convertJsToJson to fail on unknown types, rather than silently providing a Json.Null. This seems reasonable and I'm not sure the older behavior was even intentional (any idea, @chandu0101?).

Current coverage is 80.88% (diff: 100%)

Merging #382 into master will decrease coverage by 0.04%

@@             master       #382   diff @@
==========================================
  Files            63         63
  Lines          2019       2019
  Methods        1861       1861
  Messages          0          0
  Branches        158        158
==========================================
- Hits           1634       1633     -1
- Misses          385        386     +1
  Partials          0          0

Powered by Codecov. Last update 7435c98...85b143f


Salesforce Locker Service integration

I was just curious how we are intended to integrate the website install portion of this script with Salesforce's Locker Service https://developer.salesforce.com/blogs/developer-relations/2016/04/introducing-lockerservice-lightning-components.html
Basically, the documentation states to include a <script> tag (which is not allowed in Lightning components Locker Service) to load up a script from a CDN (which is also not allowed in Lightning components Locker Service).
When I include this library as a "static resource" (Salesforce's own CDN per organization), it complains that DOM elements are being manipulated (i.e. added/removed from the DOM, which is also not allowed in Lightning components Locker Service)
So my question is - how are we supposed to utilize this script in a locked-down JavaScript sandbox like Salesforce? Is there an easier way to set up a JavaScript-based integration without manipulating the DOM to add/remove <script>s?

So the way I accomplished this is by utilizing a combination of browserify with the standalone option along with the analytics-node library.
In my case, I was using gulp and npm to assist in building the project.
the package.json for npm is as follows:
{
  "scripts": {
    "build": "gulp segmentAnalytics",
  },
  "devDependencies": {
    "analytics-node": "^3.3.0",
    "app-root-path": "^2.0.1",
    "browserify": "^16.2.0",
    "gulp": "^3.9.1",
    "vinyl-source-stream": "^2.0.0"
  }
}

the relevant code snippet used to generate the standalone segment analytics file is as follows:
import { path as rootPath } from 'app-root-path';
import gulp from 'gulp';
import browserify from 'browserify';
import source from 'vinyl-source-stream';

gulp.task('segmentAnalytics', () => {
  const segmentAnalyticsFilename = 'analytics.js';
  const segmentStaticResourcesDir = `${rootPath}/force-app/main/default/staticresources`;
  const segmentAnalyticsPath = `${rootPath}/node_modules/analytics-node/index.js`;
  browserify(segmentAnalyticsPath, {
    standalone: 'Analytics',
  })
    .bundle()
    .pipe(source(segmentAnalyticsFilename))
    .pipe(gulp.dest(segmentStaticResourcesDir));
});

and the relevant code to load it in a lightning component would be
<aura:component>
  <ltng:require
    scripts="{!$Resource.analytics}"
    afterScriptsLoaded="{!c.doInit}"
  />
</aura:component>

and the controller code would look like
({
  doInit: function(component, event, helper) {
    var analytics = new Analytics('your_write_key');
    analytics.page({
      userId: 'test-user-id',
      name: 'my event',
    });
  }
})


Add eslint, convert one spec to use import and update browserify-rails config for specs

This adds eslint into the package.json so you can do:
$ npm run lint
...

/Users/krob/github/studentinsights/app/assets/javascripts/helpers/profile_details_style.jsx
  103:7  error  Duplicate key 'margin'        no-dupe-keys
  104:7  error  Duplicate key 'borderRadius'  no-dupe-keys

/Users/krob/github/studentinsights/app/assets/javascripts/helpers/prop_types.jsx
  4:9  error  'PropTypes' is assigned a value but never used  no-unused-vars

...

✖ 683 problems (683 errors, 0 warnings)

We'll chip away at fixing these (or codemod them) and then move this into the build.  We can also add docs for adding inline lint errors to Sublime too so folks can see helpful warnings like this:

I also ran eslint --fix so the noisy change here is those whitespace or semicolon fixes.

Hey @kevinrobinson -- I should have left a status note about this last night -- the eslint and the style fixes are good, but this PR isn't successfully transforming the spec/javascripts file yet. The line we added to transform spec/javascripts was breaking on Travis. I commented it out last night to try to pin down the exact issue. So we have some more work to do here on browserifying specs.

@alexsoble k, thanks!  looking at it now then

@alexsoble This should be resolved with https://github.com/studentinsights/studentinsights/pull/903 now, but ping me if not!


Add constructor for setting custom background colors of clusters

Couldn't figure out how to set my own background colors on clusters in the icon generator without modifying the code so made a new constructor for that purpose.

Thanks for the contribution.


The Micro Mainframe EMS-5150T support?

Hello!
I saw you are adding support for the NEAT chipset and also the Everex AT 3000 deluxe, and they are a great addition for 80286 machines!.
Adding the Mainframe EMS-5150T, would be interesting, if it is possible ,and if the documentation exists because, back in the day, it was the only board that was compatible with Tandy 1000 series machines and also was compatible with any IBM PC/XT machine.
(I read that most Tandy 1000 machines were not compatible with the use of the upper memory regions required by most EMS boards)
I don't know if it easier or not to implement.
It is an LIM EMS 3.2 ISA 8-bit board, it has a memory limit of 2mb of EMS memory (and up to 4mb with a daugtherboard) and has not backfilling capabilities or XMS support. A freeware EMS device driver ver 4.1 exist.  I think this driver allows Windows 2.x and Win 3.0 in real mode to use its memory.
Thanks for this great work!

HI,
Correct.  I have implemented several ISA-based memory expansion board,
for both 8bit (PC/XT) as well as 16bit (AT+) systems. The Everex 3000 is
good for the AT, others work better for XT.  But all work, and provide base
RAM expansion, extended-memory expansion and/or EMS.
If you can send me documentation for the EMS-5150T, I can (easily) add
it to the code.
All 3.2-based boards had a limit of 2MB per board, and a total of 4 boards
per system, by the way :)
--fred

On Sun, 9/2/18, Fenix770<EMAIL_ADDRESS>wrote:
Subject: [VARCem/VARCem] The Micro Mainframe EMS-5150T support? (#43)
To: "VARCem/VARCem"<EMAIL_ADDRESS>Cc: "Subscribed"<EMAIL_ADDRESS>Date: Sunday, September 2, 2018, 8:28 PM
Hello!
I saw you are adding support for the NEAT chipset and
also the Everex AT 3000 deluxe, and they are a great
addition for 80286 machines!.
Adding the Mainframe EMS-5150T, would be interesting, if
it is possible ,and if the documentation exists because,
back in the day, it was the only board that were compatible
with Tandy 1000 series machines.
(I read that most Tandy 1000 machines were not compatible
with the upper memory regions required by most EMS
boards)
I don't know if it easier or not to implement.
It is an LIM EMS 3.2 ISA 8-bit board, it has a memory
limit of 2mb of EMS memory (and up to 4mb with a
daugtherboard) and has not backfilling capabilities or XMS
support. A freeware EMS device driver ver 4.1 exist.  I
think this driver allows Windows 2.x and Win 3.0 in real
mode to use its memory.
Thanks for this great work!
—
You are receiving this because you are subscribed to this
thread.
Reply to this email directly, view it on
GitHub, or mute
the thread.

Hello
I am not a programmer but, I found oldskool site the manual of the board hereftp://ftp.oldskool.org/pub/tvdog/tandy1000/documents/ems5150t.zip
And in the utility section there is a LIM EMS 3.2 driver from the manufacturer of the board and
an driver version 4.1 made by a programmer  (ems32.zip and ems41.zip). The ems41.zip file, also has some files with asm extension ( I beleve it's the assembler source code). The programmer also describes how to enable and disable the hardware spacific fuctions 60h, 61h and 62h and how it differs from AST implementation.
The drivers are in the utilities section here http://www.oldskool.org/guides/tvdog/utilities.html

Hi,
Yes, found that too, already working on it. I also found the EMS drivers, which is a
requirement before I work on implementing something.
Btw, it's easier to talk to me in the IRC channel... :)
--fred

On Sun, 9/2/18, Fenix770<EMAIL_ADDRESS>wrote:
Subject: Re: [VARCem/VARCem] The Micro Mainframe EMS-5150T support? (#43)
To: "VARCem/VARCem"<EMAIL_ADDRESS>Cc: "Fred N. van Kempen"<EMAIL_ADDRESS>"Assign"<EMAIL_ADDRESS>Date: Sunday, September 2, 2018, 11:06 PM
Hello
I am not a programmer but, I found oldskool site the
manual of the board hereftp://ftp.oldskool.org/pub/tvdog/tandy1000/documents/ems5150t.zip
And in the utility section there is a LIM EMS 3.2 driver
from the manufacturer of the board and
an driver version 4.1 made by a programmer  (ems32.zip and
ems41.zip). The ems41.zip file, also has some files with asm
extension ( I beleve it's the assembler source code).
The programmer also describes how to enable and disable the
hardware spacific fuctions 60h, 61h and 62h and how it
differs from AST implementation.
The drivers are in the utilities section here http://www.oldskool.org/guides/tvdog/utilities.html
—
You are receiving this because you were
assigned.
Reply to this
email directly, view
it on GitHub, or mute
the thread.


Visual Studio Code Failed to find dotnet from path with "which dotnet"

I have installed dotnet sdk inside MacBook and in my terminal dotnet --info returns valid information.
But inside Visual Studio Code, I am getting following error message, when I try to run the project:
Failed to find dotnet from path with "which dotnet".
Cannot find .NET SDK installation from PATH environment. C# DevKit extension would not work without a proper installation of the .NET SDK accessible through PATH environment. Rebooting might be necessary in some cases. Check the PATH environment logged in the C# DevKit logging window. In some cases, it could be affected how VS code was started.
PATH=/usr/bin:/bin:/usr/sbin:/sbin

How can I fix this error? Note that vscode tries to read PATH from /bin/sh rather than /bin/bash.

Looks like the issue is on the devkit side, moving to https://github.com/microsoft/vscode-dotnettools/issues/1565


feat: add stopOnHover to AutoPlay

Issue
#10
Details
This adds stopOnHover option for AutoPlay.

 Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.You have signed the CLA already but the status is still pending? Let us recheck it.


Fixes: #61. Allows subsequent text blocks.

What does this PR do?
Allows subsequent code and text blocks.
Reimplements text and code block merging tracking position.

closed for recheck

hey @ioggstream, thanks for the PR! Could you modify the tests so that they fail before this change and pass after?

@aaren this patch does not modify the behavior of the code. It's just an enabler for subsequent changes.

@aaren prerequisite patch https://github.com/aaren/notedown/pull/63

@aaren fixed this PR: now it has the same output testcase than before.

I mean can you add something to tests.py that causes it to fail before this PR and to pass afterwards? I don't fully understand what this PR is fixing, as I think subsequent code blocks are already supported.


fix: fixed issue of double scrollbar

Fixes #2480
fixed the bug where two scrollbars appeared if the website was zoomed

closing this issue as the UI of the dropdown menu has been changed and the issue doesn't appear for now


error allocate and success ios 15.6.1

download succeeded
usb_timeout: 5
[libusb] Waiting for the USB handle with VID: 0x5AC, PID: 0x1227
CPID:8015 CPRV:11 CPFM:03 SCEP:01 BDID:06 ECID:000C3090302BC02E IBFL:3C SRTG:[iBoot-33<IP_ADDRESS>.23] PWND:[gaster]
Found the USB handle.
Now you can boot untrusted images.
[libusb] Waiting for the USB handle with VID: 0x5AC, PID: 0x1227
Found the USB handle.
usb_timeout: 5
[libusb] Waiting for the USB handle with VID: 0x5AC, PID: 0x1227
CPID:8015 CPRV:11 CPFM:03 SCEP:01 BDID:06 ECID:000C3090302BC02E IBFL:3C SRTG:[iBoot-33<IP_ADDRESS>.23] PWND:[gaster]
Found the USB handle.
Now you can boot untrusted images.
[libusb] Waiting for the USB handle with VID: 0x5AC, PID: 0x1227
Found the USB handle.
main: Starting...
iOS 14 iBoot detected!
getting get_debug_enabled_patch() patch
getting get_sigcheck_patch() patch
applying patch=0x180032bf0 : 000080d2
applying patch=0x180032c44 : 000080d2
applying patch=0x180034750 : 200080d2
main: Writing out patched file to work/iBSS.patched...
main: Quitting...
none
main: Starting...
iOS 14 iBoot detected!
getting get_boot_arg_patch(rd=md0 debug=0x2014e -v wdt=-1  ) patch
getting get_debug_enabled_patch() patch
getting get_unlock_nvram_patch() patch
getting get_sigcheck_patch() patch
applying patch=0x180032bf0 : 000080d2
applying patch=0x180032c44 : 000080d2
applying patch=0x18001f8a8 : 000080d2c0035fd6
applying patch=0x18001f8f8 : 000080d2c0035fd6
applying patch=0x18006be6c : 000080d2c0035fd6
applying patch=0x180034750 : 200080d2
applying patch=0x180035cac : 183e5430
applying patch=0x1800de46d : 72643d6d64302064656275673d30783230313465202d76207764743d2d31202000
applying patch=0x180039060 : 1f2003d5
main: Writing out patched file to work/iBEC.patched...
main: Quitting...
none
krnl
main: Starting...
Kernel: Adding AMFI_get_out_of_my_way patch...
get_amfi_out_of_my_way_patch: Entering ...
get_amfi_out_of_my_way_patch: Kernel-7195 inputted
get_amfi_out_of_my_way_patch: Found entitlements too small str loc at 0x40c7ee
get_amfi_out_of_my_way_patch: Found entitlements too small str ref at 0x11ac270
get_amfi_out_of_my_way_patch: Patching AMFI at 0x11a86e8
main: Writing out patched file to work/kcache.patched...
main: Quitting...
krnl
dtre
rtsc
rdsk
error: allocate
error: Success
[-] An error occurred

me too,
in 7 iphone 15.4.1
nothing happens

Seems like an issue with hfsplus on Linux? I’ll see if there’s anything to mitigate it

Seems like an issue with hfsplus on Linux? I’ll see if there’s anything to mitigate it

how do i fix the problem with hfs?

This was fixed, please reclone the repo


Configuration issues old vs new ipmi.yml

Long time user of ipmi_exporter here! ❤
I have finally upgraded our version dating from Aug. 2018 to v1.3.2.
Now the changes in ipmi.yml have slapped me in the face pretty hard.
We use a combination of (lets make it) 56 hosts: 40 hosts with password 12345, 8 hosts with password abcde and another 8 with password 1a2b3c used to be working where the 40 hosts where used as default and the other 2x 8 ones as "specialhosts", using their unique IP addresses:
Old ipmi.yml used to be pretty small, using default as expected:
credentials:
  default:
    user: "user1"
    pass: "12345"
  <IP_ADDRESS>:
    user: "user2"
    pass: "abcde"

--- and so on for 2x 8 hosts

The only way I could get it to work was adding ALL hosts / IP addresses separately one-by-one into the newer ipmi.yml as "module", like this:
modules:
  default:
    user: user1
    pass: 12345
    driver: LAN_2_0
    privilege: user
  <IP_ADDRESS>:               # duplicate from default
    user: user1
    pass: 12345
    driver: LAN_2_0
  <IP_ADDRESS>:
    user: user2
    pass: abcde
  <IP_ADDRESS>:
    user: user3
    pass: a1b2c3
    collectors:
    - bmc
    - ipmi
    - chassis

--- etcetera - up to > 250 lines

The block with default is needed, otherwise a scrape would give
# curl "http://<IP_ADDRESS>:9290/ipmi?target=<IP_ADDRESS>"
Unknown module "default"

In file /etc/prometheus/prometheus.yml currently the job is configured like this - I freshly added the source_labels-block with __param_module as suggested here: https://github.com/soundcloud/ipmi_exporter/issues/50#issuecomment-778351848
  - job_name: 'ipmi'
    scrape_interval: 1m
    scrape_timeout: 30s
    metrics_path: /ipmi
    scheme: http
    file_sd_configs:
      - files:
        - /etc/prometheus/targets/ipmi_exporter.yml
        refresh_interval: 5m
    relabel_configs:
    - source_labels: [__address__]
      separator: ;
      regex: (.*)(:80)?
      target_label: __param_target
      replacement: ${1}
      action: replace
    - source_labels: [__address__]
      separator: ;
      regex: (.*)(:80)?
      target_label: __param_module
      replacement: ${1}
      action: replace
    - separator: ;
      regex: .*
      target_label: __address__
      replacement: ipmi_exporter.example.com:9290
      action: replace

I hope the above explains the situation where we came from and how it runs as of today.
My question: is this for now the right way to go or is there a better way?
The newer ipmi.yml has grown considerably, in our case to over 260 lines.

Hey there!
I understand that it might make your specific use case a little less convenient, but the new-style config is designed to very explicit about everything, which usually helps prevent errors in the long run. That said, you basically have three options to handle your described setup:

Keep the prometheus config as is, ditch the default module entirely from the exporter config, instead listing a module for each target individually. This solution is often used in larger environments, where the exporter config is often generated from some sort of asset inventory anyways. But yeah, it may not may not be great if you maintain the config by hand.
Keep the default module (by any name), and split your prometheus config instead. You could have one job with the config you posted for only the "specialhosts", and another job where you always set the module to the fixed value (the name of your "default" module):- target_label: __param_module
  replacement: default
  action: replace

You could keep both the simpler exporter config and the simpler prometheus config if you add labels to your targets in the prometheus config. If you look at the documentation, you can write your /etc/prometheus/targets/ipmi_exporter.yml with labels:- targets: [ - '<host>' ] labels: [ <labelname>: <labelvalue> ... ]

So you could assign a label module to every target, then write a relabel rule that replaces __param_module with the value of module.

Reading your description, I think maybe option 3 might be the most suitable here?
Let me know if you need any further details or examples for any of the above approaches!

Thanks for the response, Conrad. Much appreciated!
I'll have a look after the weekend and discuss the options with mu co-workers.


feat(tutorial): step 3 org error

Closes #
{{short description}}
Changelog
New

{{new thing}}

Changed

{{change thing}}

Removed

{{removed thing}}

The Repos Page link works now.

@alisonjoseph I think that this branch is working now


Beta - CSS Grid - Three Typo Corrections

Issue Description
The following is a list of needed corrections that needs to be implemented.

Change 5px of the grid's height to 5px tall
https://github.com/freeCodeCamp/freeCodeCamp/blob/staging/seed/challenges/01-responsive-web-design/css-grid.json#L279

Change <cod>20px in the test message with 20px ( missing e)
https://github.com/freeCodeCamp/freeCodeCamp/blob/staging/seed/challenges/01-responsive-web-design/css-grid.json#L328

Change between the first and forth horizontal lines and between the third and forth vertical lines to between the third and forth horizontal lines and between the first and forth vertical lines .
https://github.com/freeCodeCamp/freeCodeCamp/blob/staging/seed/challenges/01-responsive-web-design/css-grid.json#L819

Sorry, I am a bit lost in the exact behavior here?

@raisedadead there are a couple of challenges that have typos or some sentences need to be changed. I was not sure If I need to make issues for them one by one or bundle them together in one issue since they are minor issues.

Sure if you could link the files to be changed in the opening post, we can open this to potential first time contributors.
Thanks for reporting!

@raisedadead I modified the description and added the files and line numbers.

@ahmadabdolsaheb  @raisedadead  can i take this up ??

@ganes1410 sure thing, here are our Guidelines for Contributing and you can reach us in Contributors Chat room for any assistance.

@ahmadabdolsaheb  @raisedadead for that third typo is it fourth or forth

Yes its numeric fourth. Thanks for catching.


Update submodule

Update submodule reference to latest commit

Hmm, already conflicting. For now, it's best if you always run git pull inside the core directory yourself.
We need to find the best workflow here. When do we update the submodule? /cc @tobscure

@franzliedke Sorry if I'm forgetting something obvious, but do we really need a submodule/studio for people to contribute to core? I imagine people could:

git clone flarum/flarum
composer install
add their git remote in vendor/flarum/core, branch, commit, send PRs

Same with existing extensions.
studio is definitely useful for creating new extensions that don't yet exist on packagist, but what's the benefit for existing ones?

Yeah, I hadn't noticed your changes when I made that comment. It's fine. (Although I still don't like developing in the vendor folder...)

Ew, no don't develop in the vendor folder! One composer install/update and you could be toast (although Composer warns you about overwriting any local changes). I ended up setting the origin remote branch to my fork instead of the "upstream" flarum/core. I'll just have to keep an eye on my fork and keep it up-to-date myself.

Yeah, I'm keen to investigate how to make that kind of stuff easier with Studio. But right now, it doesn't help much in such a situation, yes.


[FEAT] add PDF as output

Hey there,
this project came in clutch when I needed to batch generate thumbnails for a large folder of video files. The one feature I was missing though is to concatenate all produced thumbnails into neatly organized PDF files, appropriately sized to a pagesize, and properly compressed to not get too large.
If you're not sure what I am thinking of, consider this report from a professional (and paid) media software:

This would require moving the file information to the left of the thumbnails, and by default only generating one line of 3-4 thumbnails, depending on what fits best. Then making sure these stacked images dont exceed the width and height of standard page sizes.
Since I've been looking for go projects to better myself with, I'd offer to jump on and try to add this if you think of it as useful. I've played around with imagemagik a little to get this to work and have some sort of solution using magick montage, I'd just have to figure out how to properly implement this (or a more efficient solution) into the code.

Sounds good, we can add an cmd argument to specify file type of output. Then process them in different ways.

Create a branch to develop this feature. And we should not let too many external programs as dependencies if possible.


[SPARK-40324][SQL] Provide query context in AnalysisException

What changes were proposed in this pull request?

This is a major PR for extending AnalysisException with query context. After changes, we can:

migrate analysis errors to error classes
change the actual error messages of AnalysisException, showing the query context from original query instead of an unresolved logical plan.

Why are the changes needed?

Make it possible for better error messages in analysis exceptions.
Does this PR introduce any user-facing change?

No. This is an extension of the framework. We will have more improvements based on this one.
How was this patch tested?

Existing UT

cc @srielau @anchovYu as well

cc @dtenedor myself for context

+1, LGTM. Merging to master.
Thank you, @gengliangwang and @cloud-fan for review.