make generate fails under podman due to unset $HOME, and is subtly broken under docker

Invoking make generate (or, equivalently, .dapper generate) fails at go generate:

Unmodified tree build log with podman
make-generate.log
$ make generate
./.dapper generate
<...>
COMMIT k3s:master
--> c5d9ede7f540
Successfully tagged localhost/k3s:master
c5d9ede7f5401ce8ec923b746df13e3510c573a975a9b650c367e1980a3ce6c5
Running: go generate
go: downloading github.com/sirupsen/logrus v1.9.3
<...>
go: downloading github.com/gofrs/uuid v4.4.0+incompatible
build cache is required, but could not be located: GOCACHE is not defined and neither $XDG_CACHE_HOME nor $HOME are defined
main.go:1: running "go": exit status 1
FATA[0074] exit status 1
make: *** [Makefile:13: generate] Error 1

This presumably happens because Dockerfile.dapper sets HOME=${DAPPER_SOURCE} in the same statement as DAPPER_SOURCE=..., which is then not substituted correctly. The problem is not immediately visible on docker only because docker resets an unset $HOME to /root:

Patched tree build log with docker, with changes to make the problem visible
make-generate-docker.log
$ git diff
diff --git a/Dockerfile.dapper b/Dockerfile.dapper
index af99d3d35e..81b5af3184 100644
--- a/Dockerfile.dapper
+++ b/Dockerfile.dapper
@@ -56,7 +56,7 @@ ENV DAPPER_RUN_ARGS="--privileged -v k3s-cache:/go/src/github.com/k3s-io/k3s/.ca
     DAPPER_SOURCE="/go/src/github.com/k3s-io/k3s/" \
     DAPPER_OUTPUT="./bin ./dist ./build/out ./build/static ./pkg/static ./pkg/deploy" \
     DAPPER_DOCKER_SOCKET=true \
-    HOME=${DAPPER_SOURCE} \
+    HOME= \
     CROSS=true \
     STATIC_BUILD=true

diff --git a/scripts/generate b/scripts/generate
index ebdaf31cc5..142592f36f 100755
--- a/scripts/generate
+++ b/scripts/generate
@@ -8,4 +8,6 @@ mkdir -p build/data
 GO=${GO-go}

 echo Running: "${GO}" generate
+env | grep HOME=
+exit 1
 "${GO}" generate

$ make generate
./.dapper generate
<...>
Successfully tagged k3s:master

Running: go generate
HOME=/root
FATA[0002] exit status 1
make: *** [Makefile:13: generate] Error 1

Still, this causes the Go cache (mounted at /go/src/github.com/k3s-io/k3s/.cache) to be effectively broken and unused because $HOME doesn't point to it.

Not sure this needs any other testing, since it's just used at build time.


Add progress indicators to UI

Loading the lists of entities in the UI can sometimes take several seconds, especially for the list of ORT runs. As there is no visual feedback while loading the data, it is unclear to the user if the click worked or not until the result appears.
To improve this, show some progress indicator while the data is being loaded.

Shouldn't we instead do https://github.com/eclipse-apoapsis/ort-server/issues/453?

Shouldn't we instead do #453?

Both should be done. Slow requests can always happen, even if less entities are returned.

For anyone wanting to take a stab at this, a good start could be to add a pending component to the relevant routes, like the repo page.

Found the pending component this morning, so I will.


Upper case

I'd like to only allow upper case letters, so using [A-Z], obviously lower case letters are now simply discarded. Is there a way I could simply convert lower case letters to upper case on the fly?

It's possible to use a pipe that upper-cases all entries. The code for the pipe could be something like:
function upperCasePipe(conformedValue) {
  return conformedValue.toUpperCase()
}

Thanks for your question!

How do you then use the pipe?

It depends on the framework component that you're using. You can start by reading the README.md of the framework component that you're using which will then lead you to this documentation page, which contains information about using pipe.

Got it working thanks :)

Awesome!

Just in case it might help someone, with angular2 I just have the following function in my component:
public toUpperCase(conformedValue: string): string {
  return conformedValue.toUpperCase();
}

And in my template I have the this:
<input id="bic" type="text"formControlName="bic" [textMask]="{mask: bicMask, pipe: toUpperCase}" />


Update vulnerable packages

Details
Using resolutions to update the the vulnerable packages.

Motivation
Avoid security vulnerabilities.

Context
Please follow the following links for more details about each updated package.
ansi-regex
@npmcli/arborist

Pull request checklist

[ ] PR title respects Conventional Commits (starts with fix:, feat:, etc, and is suitable for user-facing release notes)
[ ] PR contains no breaking changes, OR description of both PR and final merge commit starts with BREAKING CHANGE:
[ ] (if applicable) Addresses issue: #0000
[ ] Added relevant unit tests for your changes
[ ] Ran yarn precheckin
[ ] Verified code coverage for the changes made

:tada: This PR is included in version 2.9.0 :tada:
The release is available on:

npm package (@latest dist-tag)
GitHub release

Your semantic-release bot :package::rocket:


Decrease whitespace dependencies in checkoffs

Pre-Submission Checklist

[ x] Your pull request targets the staging branch of FreeCodeCamp.
[ x] Branch starts with either fix/, feature/, or translate/ (e.g. fix/signin-issue)
[ x] You have only one commit (if not, squash them into one commit).
[ x] All new and existing tests pass the command npm run test-challenges. Use git commit --amend to amend any fixes.

Type of Change

[ x] Small bug fix (non-breaking change which fixes an issue)
[ ] New feature (non-breaking change which adds new functionality)
[ ] Breaking change (fix or feature that would change existing functionality)
[ ] Add new translation (feature adding new translations)

Checklist:

[ ] Tested changes locally.
[ x] Closes currently open issue (replace XXXX with an issue no): Closes #8960

Description

Change most \s? to \s*\ in tests, to allow for multiple whitespace characters in places where whitespace does not matter.

@JacksonKearl as @camperbot has pointed out, your commit message should not have any keywords. In this case it is pointing at the Fixes #8960. Please remove them from the commit message so that we can merge you PR. Everything else looks good to me 👍

Its both says to not include any issue numbers, and to "replace XXX with the issue number this closes", so I'm not sure what to do.

@JacksonKearl understandably, it is a bit confusing. Specifically, you'll need to remove the fixes statement from your actual git commit statement you made locally shown here.

You shouldn't see the Fixes statement here. However, in the GitHub PR message you filled out above in the GitHub website, you'll need the Closes statement there. I hope that makes more sense. Let me know if any of that was unclear.

@JacksonKearl LGTM :+1: Congrats on your first PR to Free Code Camp! :sparkles: :tada: :sparkles:


Proactively tell the server about our expected state

Why
We have a few cases where the server recreates a connection that was meant to be a reconnect.
What changed
This change brings the Python implementation in line with the TypeScript one so that the server can proactively tell clients to recreate their sessions. See https://github.com/replit/river/pull/212 for reference
Test plan
Logs like https://app.datadoghq.com/logs?query=%40replid%3Ae2698176-9a19-4058-8619-7f5793b02cde&agg_m=count&agg_m_source=base&agg_t=count&cols=host%2Cservice%2C%40river.sessionId&event=AgAAAZAssKXztskj6QAAAAAAAAAYAAAAAEFaQXNzS2NBQUFBR1hKdG9Bd1NLLVFBbwAAACQAAAAAMDE5MDJjYjItYzE2Ny00YmZiLThjMjctNzdkNjI5Y2NkY2Vj&fromUser=true&messageDisplay=inline&refresh_mode=paused&storage=hot&stream_sort=desc&viz=stream&from_ts=1718734624299&to_ts=1718737623927&live=false should completely go away

This PR looks good to me, should we also add logic in python server to handle expectedSessionState?

This PR looks good to me, should we also add logic in python server to handle expectedSessionState?

oh yeah, brb


#244 Update the version number in the navbar

Updates the short git hash that matches the current version of the code in the navbar
Description
This allows the navbar to have the short version of the current commit hash from HEAD.
Reference to official issue
Fixes issue #244
Motivation and Context
Get the hash of the latest commit as the display instead of a static value.
How Has This Been Tested?

Run docker-compose -f local.yml build
Run docker-compose -f local.yml up
View the application UI on http://localhost:8080/#/
Open another terminal in the root of your project repo and run git rev-parse --short HEAD
The hash on the top right side of the navbar should be the same to the value of the previous step

CLA

[X] I have signed the CLA; if other committers are in the commit history, they have signed the CLA as well

@lamby it's updated now 😃

The travis build erred, so I restarted it.

Thakns"


FluidManager.getContainableFluids() is returning fluids with bugged buckets

THIS IS FOR FUTURE REFERENCE.
Some fluids have a bad registration and when getting buckets with that fluid (using the forge universal bucket) they can't be obtained, giving an empty universal bucket.
Note: Maybe those mods have their own bucket item and use that instead of forge's bucket?

Should be solved as of version 1.2
Added new verifications to ensure it only returns fluids that have a correct bucket (7079cfe826b3ac5b9544dfb2408f2000854bc52d)


GRCh38 version of pext?

Won't be available for the initial release of v3 in the browser. Check to make sure the browser UI handles nothing returned for pext.

This is blocked until GTEx and gnomAD are both on the same version of Gencode. Currently, GTEx v8 is on Gencode 26 and gnomAD v3 is on Gencode 29.

still has not been completed?

Is there a GRCh38 version of pext for gnomAD v2.1.1 liftover?

Resolved by #1602


Classical encryption does not work in aretha

All classical encryption/decryptions operations fail to work in aretha, e.g playfair encrypt will provide that the command is unknown

pushed a general fix for this


Feature: Tab-Filter Module

Feature Details
We have up to three filters in gsmApp: Metric, Site, and Participant. Which ones display depends on the currently selected tab.
Example Code

Possible Implementation
This module will have multiple server functions:

One takes something like a vector of filters to show, and sets the show/hide status appropriately.
Another one or set of ones will return the inputs as reactives (for use in other modules).

Additional Comments
This is very closely related to the tabset module, so I'm torn about whether they're somehow a single module (or at least share a namespace). Will sort things out more during implementation.

This is likely to become less weird in the updated version of the app, depending how #215 turns out.

We've done enough of this for now.


[vi] Logic models

Finished translation Vietnamese in topic Logic models.
Welcome to review.

Thank you for your dedication @tuanhm2911!

Hi @tuanhm2911, would the suggestions of @damminhtien sound good to you? Please feel to give your feedback when you get the time. After that, we'll be able merge all your hard work!

Thank you @tuanhm2911 and @damminhtien for all your work! Moving forward with the merge now.


Make changes to add description to groups

Date: 19/05/2024

Developer Name: @pallabez

Issue Ticket Number
https://github.com/Real-Dev-Squad/website-dashboard/issues/767
Description
API change to POST /discord-actions/groups to accommodate description field
Documentation Updated?

[ ] Yes
[x] No

Database Changes

[x] Yes
[ ] No

Breaking Changes

[ ] Yes
[x] No

Development Tested?

[x] Yes
[ ] No

Screenshots

Screenshot 1

Test Coverage

Screenshot 1

Additional Notes

Can you please add a test for the changes?

@pallabez The validation looks okay to me, please check and verify this with test case.


SVG support

Hi, is it possible to support SVG in addition to PNG?
More and more people are using high-dpi screens, even on Linux. With PNGs we could use a 1x and 2x scale of the same assets, but then fractional scale factors dont work so well. Shipping with resources for all scale factors does not.. scale well.
So SVG would be nice (or others ways to scale up, doesnt have to specifically be SVG)

So, SVG support is on it's way. I've implemented it via nanosvg https://github.com/memononen/nanosvg in libxputty and it works so far. I do base64 encoding on the SVG to allow embedding the file into the binary. For loading into a cairo surface it will be decoded from the binary. Now I need to implement SVG handling in XUiDesigner so that SVG's could be finally used to create LV2 GUI's.

Proper SVG support is now implemented.


Added a new room called 'PigeonHouse'

This new room allows players to explore an abandoned pigeon house within the ZDD environment. The room presents an option to open an old window, triggering different outcomes based on the player's choice. If the player decides to open the window, they will discover a baby pigeon, leading to an 'opportunity' to have the pigeon as a companion.

@l4nz8 pull request ready to be merged!

Clean✨, the only thing I might add is a way to interact with your companion.


possible typo in SpriteLabel::updateScreenTransform?

I am playing a little bit with custom markers in Tangram ES and I have found out that when I am setting offset in styling for these markers they are not being drawed when they are partially visible and are near left and top edge. They should be drawed in this case because they are still partially visible.
After some searching in code which is responsible for this clipping I have found out that there may be typo here https://github.com/tangrams/tangram-es/blob/master/core/src/labels/spriteLabel.cpp#L165 and here https://github.com/tangrams/tangram-es/blob/master/core/src/labels/spriteLabel.cpp#L166 I think that m_options.offset shouldn't be there as on line https://github.com/tangrams/tangram-es/blob/master/core/src/labels/spriteLabel.cpp#L161 it is already added to position vector. I may be really wrong and this should be there maybe as I haven't digged deeply into what that projection is doing.
I have also tested it and when I delete that + m_options.offset from there, then clipping of markers works properly.

Yes, you are right. The offset was added twice to bounding box when testing visibility. Thanks!

Resolved vias #1623


[fix](stack trace) Default StackTrace contains inline and optimize output

Proposed changes

Modify the default value of dwarf_location_info_mode to FULL_WITH_INLINE, which will Scan .debug_info for inline functions, but this will be slower than FAST to scan .debug_aranges, so production environments may use FAST.
Status prints the stack trace, the first four frame pointers are removed, it doesn't make sense.
Optimize stack trace output.

Further comments
If this is a relatively large or complex change, kick off the discussion at<EMAIL_ADDRESS>by explaining why you chose the solution you did and what alternatives you considered, etc...

run buildall

run buildall

run buildall

run buildall

run buildall


EXC_BAD_ACCESS VKVotable.m:34

Maybe something to do with either the upvotes or downvotes field being deallocated. Changing the property from "assign" to "copy" seems to fix the issue. (VKVotable.h:22&27)

You're right, those should both be "copy". Strange that I'm not getting this error though. Can you provide some more info on the architecture you're building for & the code you're using?


Added portfolio Website

#Fixed issue #175
https://github.com/DhanushNehru/Ultimate-Web-Development-Resources/assets/143418802/663412e0-d06c-4de2-84f1-dc566fd453fc

Please include this in the list of projects table in the current Readme as well @Kedarnath-Rothe


Fails to install on Windows 10

PowerShellEditorServices.zip is downloaded and extracted to PowerShellEditorServices directory in Package Storage.
But then LSP complains about installation failure and prints following lines to console.
Unable to start subprocess for PowerShellEditorServices
Traceback (most recent call last):
  File "C:\Apps\Sublime Text\Data\Packages\LSP\plugin\core\windows.py", line 310, in start_async
    plugin_class.install_or_update()
  File "C:\Apps\Sublime Text\Data\Packages\LSP-PowerShellEditorServices\plugin.py", line 149, in install_or_update
    os.rename(os.path.join(cls.storage_path(), cls.name()), cls.basedir())
FileExistsError: [WinError 183] Eine Datei kann nicht erstellt werden, wenn sie bereits vorhanden ist: 'C:\\Apps\\Sublime Text\\Data\\Package Storage\\LSP-PowerShellEditorServices'

New version with the fix will appear on PC soon.


bootstrap: Rename mysql-community-devel for fedora

The name of the package is community-mysql-devel in currently
supported releases.
Signed-off-by: Brad Hubbard<EMAIL_ADDRESS>

jenkins test this please

jenkins test this please


ubuntu 20.04 / pango-error *coredump

Etcher version:

pine64-installer-2.0.0-beta.3-linux-x64.AppImage'

Operating system and architecture:

Ubuntu 20.04 64bit

'/home/rich/Downloads/pine64-installer-2.0.0-beta.3-linux-x64.AppImage'
/home/rich/.cache/thumbnails/normal/37c495186ab0bf1321b87d69d232327c.png is missing. Probably not running ./bin//pine64-installer.wrapper from within an AppImage.
Hence falling back to using .DirIcon
Gtk-Message: 17:49:46.923: Failed to load module "canberra-gtk-module"
(pine64-installer:3830): Pango-ERROR **: 17:49:47.085: Harfbuzz version too old (1.2.7)
Trace/breakpoint trap (core dumped)

Also having this on Solus 4.1 fortitude:
(pine64-installer:3345): Pango-ERROR **: 12:51:44.944: Harfbuzz version too old (1.2.7)`

I'm getting very similar:
/home/user/.cache/thumbnails/normal/e4577fa78c5ffb4c52b72717aed9775a.png is missing. Probably not running ./bin//pine64-installer.wrapper from within an AppImage.
Hence falling back to using .DirIcon

(pine64-installer:103394): Pango-ERROR **: 20:52:47.691: Harfbuzz version too old (1.2.7)

Trace/breakpoint trap (core dumped)

Kubuntu 20.04

Same here on manjaro.
/home/user/.cache/thumbnails/normal/90fcd6afb192196608fb7eb95cde11bb.png is missing. Probably not running ./bin//pine64-installer.wrapper from within an AppImage.
Hence falling back to using .DirIcon

(pine64-installer:27696): Pango-ERROR **: 22:12:30.430: Harfbuzz version too old (1.2.7)

Trace/breakpoint trap (core dumped)

KDE Neon won't run either.


[5.4] FatalThrowableError __clone method called on non-object

Laravel Version: 5.4.26
PHP Version: 7.1.5

Description:
In my project I have a service class (ServerPushService) for handling PUSH notifications with following methods:
/** @var ServerPushMessage|null */
protected $message = null;

/**
 * @param $message
 * @return $this
 */
public function setMessage($message)
{
    $this->message = $message;
    return $this;
}

/**
 * @param array|null $devices
 * @return $this
 */
public function sendAndroid(array $devices = null) { ... }

I'm using Laravel Notifications (which implement ShouldQueue and use Queueable) and the custom Channel for them. In the Channel class (ServerPushChannel) I call methods of the service above like:
$this->pushService->setMessage($message)
                            ->sendAndroid($androidDevices);

$message is always a ServerPushMessage instance and $androidDevices is always an array. Notification is fired while scheduled console command is executed.
And it works perfectly on:

development server with queues disabled (driver = sync)
development server with queues enabled (driver = database)
production server with queues disabled (driver = sync)

... but I doesn't work on:

production server with queues enabled (driver = database)

It throws:
Symfony\Component\Debug\Exception\FatalThrowableError __clone method called on non-object

    vendor/laravel/framework/src/Illuminate/Notifications/ChannelManager.php:57 Illuminate\Notifications\ChannelManager::sendNow
    vendor/laravel/framework/src/Illuminate/Notifications/SendQueuedNotifications.php:57 Illuminate\Notifications\SendQueuedNotifications::handle
    [internal] call_user_func_array
    vendor/laravel/framework/src/Illuminate/Container/Container.php:508 Illuminate\Container\Container::call
    vendor/laravel/framework/src/Illuminate/Bus/Dispatcher.php:94 Illuminate\Bus\Dispatcher::Illuminate\Bus\{closure}
    vendor/laravel/framework/src/Illuminate/Pipeline/Pipeline.php:151 Illuminate\Pipeline\Pipeline::Illuminate\Pipeline\{closure}
    vendor/laravel/framework/src/Illuminate/Pipeline/Pipeline.php:104 Illuminate\Pipeline\Pipeline::then
    vendor/laravel/framework/src/Illuminate/Bus/Dispatcher.php:98 Illuminate\Bus\Dispatcher::dispatchNow
    vendor/laravel/framework/src/Illuminate/Queue/CallQueuedHandler.php:47 Illuminate\Queue\CallQueuedHandler::call
    vendor/laravel/framework/src/Illuminate/Queue/Jobs/Job.php:73 Illuminate\Queue\Jobs\Job::fire
    vendor/laravel/framework/src/Illuminate/Queue/Worker.php:203 Illuminate\Queue\Worker::process
    vendor/laravel/framework/src/Illuminate/Queue/Worker.php:153 Illuminate\Queue\Worker::runNextJob
    vendor/laravel/framework/src/Illuminate/Queue/Worker.php:75 Illuminate\Queue\Worker::daemon
    vendor/laravel/framework/src/Illuminate/Queue/Console/WorkCommand.php:100 Illuminate\Queue\Console\WorkCommand::runWorker
    vendor/laravel/framework/src/Illuminate/Queue/Console/WorkCommand.php:84 Illuminate\Queue\Console\WorkCommand::fire
    [internal] call_user_func_array
    vendor/laravel/framework/src/Illuminate/Container/Container.php:508 Illuminate\Container\Container::call
    vendor/laravel/framework/src/Illuminate/Console/Command.php:169 Illuminate\Console\Command::execute
    vendor/symfony/console/Command/Command.php:261 Symfony\Component\Console\Command\Command::run
    vendor/laravel/framework/src/Illuminate/Console/Command.php:155 Illuminate\Console\Command::run
    vendor/symfony/console/Application.php:817 Symfony\Component\Console\Application::doRunCommand
    vendor/symfony/console/Application.php:185 Symfony\Component\Console\Application::doRun
    vendor/symfony/console/Application.php:116 Symfony\Component\Console\Application::run
    vendor/laravel/framework/src/Illuminate/Foundation/Console/Kernel.php:121 Illuminate\Foundation\Console\Kernel::handle
    artisan:35 [main]

It looks like it tries to use $message like the first parameter in sendAndroid() function, but... I never pass $message there, I use $devices which is definitely an array (I double-checked it).
To prove my point: everything works perfectly when I turn off queues on my production server. The PHP version is identical on both servers.
Thanks in advance (and sorry for my bad english).

While sending notifications to multiple notifiers Laravel clones the notification instance and sends a clone separately to each notifiable, the error shown here indicates that the notification instance sent is not an object, the issue doesn't have enough information for me to understand what's going on so you'll need to dig that yourself :)
Going to close the issue since it's not actually a bug, I suggest that you post on the forums and include the full code starting with how you send the notification, the notification channel, and the notification class, that way you can get help.


pam_ssh_agent_auth allowing users to define own ssh pubkey

Security impact: passwordless programmatic elevation of privileges via sudo to sudo-defined level.
Issue description
In the manpage it says that if ~ or %h are used, they enable allow_user_owned_authorized_keys_file.
We are using ~, so that means that if you are using security.pam.enableSSHAgentAuth = true;, any program running as a user can use sudo by changing the ~/.authorized_keys file.
I propose we replace % by /users/%U or somehow disable allow_user_owned_authorized_keys_file.
Steps to reproduce
151 $ ssh-agent bash
140 $ sudo -v
[sudo] password for wmertens:
^C

141 $ ssh-keygen -f test
Generating public/private rsa key pair.
Enter passphrase (empty for no passphrase):
Enter same passphrase again:
Your identification has been saved in test.
Your public key has been saved in test.pub.

142 $ cat test.pub >> .ssh/authorized_keys
143 $ ssh-add test
Identity added: test (test)

144 $ sudo -v
145 $ sudo -l
Matching Defaults entries for wmertens on cap-new:
    env_keep+=TERMINFO_DIRS, env_keep+=TERMINFO, env_keep+=SSH_AUTH_SOCK

User wmertens may run the following commands on cap-new:
    (ALL : ALL) SETENV: ALL

Technical details

System: 17.03.1840.88604ee33a (Gorilla)

Relevant setting is at https://github.com/NixOS/nixpkgs/blob/ea35bc94bf0efd28e39cf4e8212f7df5b6e78aba/nixos/modules/security/pam.nix#L260
/cc @edolstra

Does this work when the user does not belong to the wheel group?

cc @grahamc, @fpletz, @domenkozar, @rbvermaa

It will give you whatever permissions your user can receive via sudo.

The authorized_keys paths should probably be configurable anyway but the default is pretty bad. I think we should just remove the ~ paths. This breaks backward-compatibility but I'm not sure how to disable allow_user_owned_authorized_keys_file after reading the man page.
This is also probably worth a CVE. Opinions? /cc @grahamc

Well, it looks like we can keep most backwards-compatibility by changing ~
to /home/%U, but that won't catch non-default homedirs.
However, personally I would love to only allow ssh keys from /etc. That's
what I was assuming when I enabled it…
On Tue, Nov 14, 2017 at 11:28 AM Franz Pletz<EMAIL_ADDRESS>wrote:

The authorized_keys paths should probably be configurable anyway but the
default is pretty bad. I think we should just remove the ~ paths. This
breaks backward-compatibility but I'm not sure how to disable
allow_user_owned_authorized_keys_file after reading the man page.
This is also probably worth a CVE. Opinions? /cc @grahamc
https://github.com/grahamc
—
You are receiving this because you authored the thread.
Reply to this email directly, view it on GitHub
https://github.com/NixOS/nixpkgs/issues/31611#issuecomment-344214222,
or mute the thread
https://github.com/notifications/unsubscribe-auth/AADWlvA8VOt87TWF5BsLsysqxZZXa4GRks5s2WthgaJpZM4Qb_hN
.

So uhm - kind of disappointing how this is lingering…

See #32178 for an example fix. I image we should also put it in the changelog, and it's not something we can just merge into stable…

@fpletz @globin shall I just merge #32178? How do I mark it as a breaking change? What should we do about our stable branches?

I just thought of a backwards-compatible way to fix this: make a new setting enablePAMSSHAuth with the secure configuration, and make the enableSSHAgentAuth setting deprecated with a warning on every evaluation. Makes sense? @fpletz @GrahamcOfBorg

I maintain a multi-user installation of NixOS where I initially create users with one public key they provide me, and thereafter they are free to add their own keys. In my installation, it is intentional that users are able to add their own keys, and sudo needs to follow along. So, if this behavior is changed, it is important to me that there's a way to change it back to the way it is currently, as in my installation, this is intended behavior. (I even submitted PR #23435 to fix this behavior when it broke once.)
Aside from my own use case, I also have qualms about making this change default in general. The root of my objection stems from the inconsistency it would introduce with how OpenSSH handles keys. As a user, I expect that if I turn on PAM SSH authentication, then it will use the same set of keys that OpenSSH uses for authentication. If we now say that configured keys are inherently more trustworthy than user-specified keys (which is reasonable), but apply that only to sudo and not also login to the system in general, that is inconsistent and looks like a bug (even if it is not really a bug, and was an intentional design decision because of this issue).
I agree that this ought to be configurable because I can certainly see some administrators wanting the ability to turn this off. It should also be configurable independently of how OpenSSH chooses which keys to use. It can even default to allowing only configured keys rather than user-provided keys, as long as OpenSSH uses the same default. But, I do think those two defaults need to match, because anything else looks strange and inconsistent.

Ok so the difference is that for me, strictly the specified key should be
allowed to sudo, and for you, any key that ssh accepts is ok. It should
definitely be configurable then, but I still think the default should be
strict.
On Thu, Feb 22, 2018, 8:32 AM sometimes-i-send-pull-requests, <
<EMAIL_ADDRESS>wrote:

I maintain a multi-user installation of NixOS where I initially create
users with one public key they provide me, and thereafter they are free to
add their own keys. In my installation, it is intentional that users are
able to add their own keys, and sudo needs to follow along. So, if this
behavior is changed, it is important to me that there's a way to change it
back to the way it is currently, as in my installation, this is intended
behavior. (I even submitted PR #23435
https://github.com/NixOS/nixpkgs/pull/23435 to fix this behavior when
it broke once.)
Aside from my own use case, I also have qualms about making this change
default in general. The root of my objection stems from the inconsistency
it would introduce with how OpenSSH handles keys. As a user, I expect that
if I turn on PAM SSH authentication, then it will use the same set of keys
that OpenSSH uses for authentication. If we now say that configured keys
are inherently more trustworthy than user-specified keys (which is
reasonable), but apply that only to sudo and not also login to the system
in general, that is inconsistent and looks like a bug (even if it is
not really a bug, and was an intentional design decision because of this
issue).
I agree that this ought to be configurable because I can certainly see
some administrators wanting the ability to turn this off. It should also be
configurable independently of how OpenSSH chooses which keys to use. It can
even default to allowing only configured keys rather than user-provided
keys, as long as OpenSSH uses the same default. But, I do think those two
defaults need to match, because anything else looks strange and
inconsistent.
—
You are receiving this because you authored the thread.
Reply to this email directly, view it on GitHub
https://github.com/NixOS/nixpkgs/issues/31611#issuecomment-367591667,
or mute the thread
https://github.com/notifications/unsubscribe-auth/AADWll6vMGt3kjzORGx9aFLRAPrnX104ks5tXRf6gaJpZM4Qb_hN
.

Sure, I can get behind that. As long as it's configurable! I still think there is something to be said for consistency (⇒ locking down OpenSSH by default too then) but that is a lesser concern.

The code referred to (in the opening comment):
"auth sufficient ${pkgs.pam_ssh_agent_auth}/libexec/pam_ssh_agent_auth.so file=~/.ssh/authorized_keys:~/.ssh/authorized_keys2:/etc/ssh/authorized_keys.d/%u"}

Should have an option (boolean) that removes the ~/.ssh/authorized_keys:~/.ssh/authorized_keys2 part.
That way you can configure the authentication to only use the system-supplied keys.

Two other PAM modules seems to suffer the same vulnerability: security.pam.yubico and security.pam.enableOTPW.

I can still reproduce this vulnerability on 23.05.
The current implementation uses config.services.openssh.authorizedKeysFiles which defaults to %h/.ssh/authorized_keys:/etc/ssh/authorized_keys.d/%u.

After https://github.com/NixOS/nixpkgs/pull/255547 has been merged, now we can use following config as workaround.
  security.sudo.extraConfig = ''
    # Keep SSH_AUTH_SOCK so that pam_ssh_agent_auth.so can do its magic.
    Defaults env_keep+=SSH_AUTH_SOCK
  '';
  security.pam.services =
    let
      serviceCfg = service: {
        rules.auth.ssh-agent-custom = {
          control = "sufficient";
          # order = config.security.pam.services.${service}.rules.auth.u2f.order + 10;
          modulePath = "${pkgs.pam_ssh_agent_auth}/libexec/pam_ssh_agent_auth.so";
          settings.file = "/etc/ssh/authorized_keys.d/%u";
        };
      };
    in
    lib.flip lib.genAttrs serviceCfg [ "sudo" "i3lock" ];

@wrvsrx
Thanks, this looks a nice solution.
I'm doing this, which seems to work just fine:
services.openssh.authorizedKeysFiles =
  lib.mkForce [ "/etc/ssh/authorized_keys.d/%u" ];

I guess the downside is that you can no longer specify authorized keys in ~/.ssh, but IMO this seems more secure in general. Any other possible downsides I'm not seeing?

@musjj As far as I know, there isn't any other downsides. However, IMO it's a big downside that a normal user can't determine which ssh key should be used to connect to its account.

In the man I see allow_user_owned_authorized_keys_file ? shouldn't we set it ? so we don't hardcode config path but if you want to allow ~/.ssh they need to be owned by root

@Et7f3
It also says this:

allow_user_owned_authorized_keys_file
A flag which enables authorized_keys files to be owned by the invoking user, instead of root. This flag is enabled automatically whenever the expansions %h or ~ are used.

I wonder if it can be manually overridden, even when there's a %h or ~?

I'm doing this, which seems to work just fine:
services.openssh.authorizedKeysFiles =
  lib.mkForce [ "/etc/ssh/authorized_keys.d/%u" ];

I just use
security.pam.sshAgentAuth.authorizedKeysFiles = lib.mkForce [ "/etc/ssh/authorized_keys.d/%u" ];

This still allows to login with user writable keys but not to use them for privilege elevation.

Yeah, the option didn't exist when I wrote that. But it looks like that the new option pretty much solves this issue.
All that's left is setting a saner default for authorizedKeysFiles: https://github.com/NixOS/nixpkgs/pull/277626


atom selection: noh

noh as an alias of not hydrogen? (VMD-like)

the shortest version currently is not #h, but noh better

hmm, not sure, it is also a PDB ligand name: http://www.rcsb.org/pdb/ligand/ligandsummary.do?hetId=NOH

it is "NOH", not 'noh'. ha ha.

closing this as noh too easily conflicts with residue names


Now that we have #28 working from the perspective of Maven packaging I've discovered that setting all my app dependencies as <scope>provided</scope> breaks runtime development within IntelliJ.  :(
Would it be possible to have a setting to exclude <optional>true</optional> dependencies from the fat jar?  Or maybe just automatically exclude those too?  The <provided> scope works for Capsule generation but otherwise breaks development.

I suppose an alternative could be setting up Maven profiles.  At best that would be double-maintenance of dependencies.  Did you have any thoughts on excluding optionals?

ok done, see readme and v1.0.3

Hey, I assume this satisfies your needs? so I'll go ahead and close it.

@chrischristo your implementation is exactly what I asked for but it turns out that I didn't think it through.
I was trying to use optional instead of provided to make my IDE happy and achieve the lean fat jar that downloads it's non-module dependencies while embedding it's module dependencies.  In your latest version, the optional=true jars are properly excluded from the Capsule but sadly they are not added to the dependencies-to-download list (which I did not specify, hence the I didn't think it through).
I was going to setup a new module in my project solely for building the Capsule and experiment with all the settings you've recently implemented to see if I could find some combination that suited my needs, but I have gotten side-tracked by work.

Did you try version 1.0.4? There was a bug related to that.


Error when jEnv is on a Path with spaces

I unzipped jEnv in a path with spaces (eg. "D:\path with spaces\jenv") but I get the following error when I run it:
Processing -File 'D:\path' failed because the file does not have a '.ps1' extension. Specify a valid Windows PowerShell script file name, and then try again.

Great. Thanks for the pr


Problem copying data to clipboard with Matlab R2022b and MacOS 12.6.1

Hi!
Thank you for the HRV toolbox!
I have problems copying HRV data with the clipboard button. When I click it, there's an error sound and nothing is copied. When I try to paste, nothing happens.
I run Matlab R2022b and MacOS Monterey 12.6.1.
Best regards
Johan

Dear Johan,
I'm aware of the error in the copy-to-clipboard function, but I haven't had time to publish a new version of the Toolbox because I want to combine this with other changes right away. Attached you will find some files that you need to replace in the app folder.
Best,
Marcus
UpdateHRVTool.zip

Thank you very much - it works now!
Regards
Johan

Från: Marcus Vollmer @.***>
Skickat: den 9 november 2022 10:47:37
Till: MarcusVollmer/HRV
Kopia: Johan Bengtsson; Author
Ämne: Re: [MarcusVollmer/HRV] Problem copying data to clipboard with Matlab R2022b and MacOS 12.6.1 (Issue #18)
Dear Johan,
I'm aware of the error in the copy-to-clipboard function, but I haven't had time to publish a new version of the Toolbox because I want to combine this with other changes right away. Attached you will find some files that you need to replace in the app folder.
Best,
Marcus
UpdateHRVTool.ziphttps://github.com/MarcusVollmer/HRV/files/9969622/UpdateHRVTool.zip
—
Reply to this email directly, view it on GitHubhttps://github.com/MarcusVollmer/HRV/issues/18#issuecomment-1308485625, or unsubscribehttps://github.com/notifications/unsubscribe-auth/A4CYHKXSRLTYP5WQI2NGMZTWHNXLTANCNFSM6AAAAAAR3B3U3U.
You are receiving this because you authored the thread.Message ID: @.***>
När du har kontakt med oss på Uppsala universitet med e-post så innebär det att vi behandlar dina personuppgifter. För att läsa mer om hur vi gör det kan du läsa här: http://www.uu.se/om-uu/dataskydd-personuppgifter/
E-mailing Uppsala University means that we will process your personal data. For more information on how this is performed, please read here: http://www.uu.se/en/about-uu/data-protection-policy


Support for 32-bit PE

Hi there,
Currently the tool is not supporting 32-bit PE. I am not too familiar with the codebase, but is there a simple guideline on how to add support for this? I would be interested in contributing.
Thanks!

Great point!
This shouldn't be hard to add - this is where it should be added: https://github.com/0vercl0k/symbolizer-rs/blob/main/src/pe.rs but I have been working on extracting the logic into a library that I'll use whenever it gets tested a bit more: https://github.com/0vercl0k/addr-symbolizer-rs/blob/fbl_v0.1.0/src/pe.rs#L387 so I'll add it / port your changes there as well; don't worry too much about it :)
You need to read the type of PE file it is and read either ImageOptionalHeader64 or ImageOptionalHeader32 and extract the offsets for the export / debug directory and the rest should just work as is I think.

@ducphanduyagentp I've implemented a dirty PoC in https://github.com/0vercl0k/addr-symbolizer-rs/commit/a1c2887996406c0d5ba8926d3844719b24778d07 - do you mind giving it a shot?
You can try it out by running the below (it'll pull addr-symbolizer-rs & the fix automatically):
$ git clone https://github.com/0vercl0k/symbolizer-rs.git
$ git checkout fbl_libify
$ cargo run --release

Let me know!
Cheers

Looks like it works well for me 👍
./symbolizer-rs --trace traces/input.txt.trace --symcache sym --crash-dump snapshot_main_x86_1/mem.dmp
main_x86.exe+0x1100
main_x86.exe+0x1000
main_x86.exe+0x1001
main_x86.exe+0x1003
main_x86.exe+0x1004
main_x86.exe+0x1008
main_x86.exe+0x100c
main_x86.exe+0x1011
main_x86.exe+0x1014
main_x86.exe+0x1017
main_x86.exe+0x101b
main_x86.exe+0x101e
main_x86.exe+0x1071
main_x86.exe+0x1073
main_x86.exe+0x1074
✓ Successfully symbolized 15.0 lines across 1.0 files in 0.0s (0% cache hits)

After I tested it with a couple more complex traces, it seems to be skipping modules that are still present in the memory dump. Not sure if this is a dump parser bug or symbolizer bug. I'll send you the dump and trace for this case.
Output:
...
symbolizing address 0xfffff805392041b0..
address 0xfffff805392041b0 doesn't belong to any module
...

Windbg output in mem dump:
32.kd:x86> u 0xfffff805392041b0
nt!SwapContext:
fffff805`392041b0 48              dec     eax
fffff805`392041b1 55              push    ebp
fffff805`392041b2 48              dec     eax
fffff805`392041b3 83ec30          sub     esp,30h
fffff805`392041b6 0f0d4e71        prefetchw [esi+71h]
fffff805`392041ba 884c2428        mov     byte ptr [esp+28h],cl
fffff805`392041be 807e7100        cmp     byte ptr [esi+71h],0
fffff805`392041c2 0f8552060000    jne     3920481a

Thank you! Will investigate this this week and let you know :)
Cheers
On Thu, Jul 25, 2024 at 12:31 AM Duc Phan @.***> wrote:

After I tested it with a couple more complex traces, it seems to be
skipping modules that are still present in the memory dump. Not sure if
this is a dump parser bug or symbolizer bug. I'll send you the dump and
trace for this case.
Output:
...
symbolizing address 0xfffff805392041b0..
address 0xfffff805392041b0 doesn't belong to any module
...
Windbg output in mem dump:
32.kd:x86> u 0xfffff805392041b0
nt!SwapContext:
fffff805392041b0 48              dec     eax fffff805392041b1 55              push    ebp
fffff805392041b2 48              dec     eax fffff805392041b3 83ec30          sub     esp,30h
fffff805392041b6 0f0d4e71        prefetchw [esi+71h] fffff805392041ba 884c2428        mov     byte ptr [esp+28h],cl
fffff805392041be 807e7100        cmp     byte ptr [esi+71h],0 fffff805392041c2 0f8552060000    jne     3920481a
—
Reply to this email directly, view it on GitHub
https://github.com/0vercl0k/symbolizer-rs/issues/5#issuecomment-2249648890,
or unsubscribe
https://github.com/notifications/unsubscribe-auth/AALIORM56MVEKCOIXX2ZC4TZOCSUZAVCNFSM6AAAAABLMKUR2KVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZDENBZGY2DQOBZGA
.
You are receiving this because you commented.Message ID:
@.***>

Okay so kdmp-parser can see ntoskrnl.exe:
(base) c:\work\codes\kdmp-parser-rs>cargo run --example parser \Users\over\Downloads\mem.dmp --modules

    Finished `dev` profile [unoptimized + debuginfo] target(s) in 0.13s
     Running `target\debug\examples\parser.exe \Users\over\Downloads\mem.dmp --modules`
...
0xfffff80538e00000-0xfffff80539e46000: \SystemRoot\system32\ntoskrnl.exe
...

Will check if something funky happens on the symbolizer side.
Cheers

Actually it seems to work fine; maybe I'm looking at the wrong dump (or maybe you're using symbolizer-rs from the main branch? I've implemented improvements in the libify branch that might explain what you are seeing)?
(base) c:\work\codes\symbolizer-rs>cargo run -- --trace c:\Users\over\Downloads\test-trace.txt --crash-dump \Users\over\Downloads\mem.dmp
    Finished `dev` profile [unoptimized + debuginfo] target(s) in 0.33s
     Running `target\debug\symbolizer-rs.exe --trace c:\Users\over\Downloads\test-trace.txt --crash-dump \Users\over\Downloads\mem.dmp`
ntoskrnl.exe!SwapContext+0x0
✓ Successfully symbolized 1.0 lines across 1.0 files in 4.0s (0% cache hits, downloaded 8.2mb / 1.0 PDBs)

Hey there,
I tested it again today and it was able to symbolize it just like yours. I was using the correct branch, but wasn't sure what caused the previous output.
Also as discussed, some WoW64 32-bit modules are still missing. I've opened a PR here https://github.com/0vercl0k/kdmp-parser-rs/pull/8 to address it. You can test it out on the same dump and trace I've sent you.
Thanks!

Beautiful - I'll review this as soon as I can (probably this week-end); thanks again man! Closing this as that part of the work is done 🫡


[2201.7.x] Disable debugger integrations tests having intermittent failures

Purpose
Related to https://github.com/ballerina-platform/ballerina-lang/issues/41692
Check List

[ ] Read the Contributing Guide
[ ] Updated Change Log
[ ] Checked Tooling Support (#)
[ ] Added necessary tests

[ ] Unit Tests
[ ] Spec Conformance Tests
[ ] Integration Tests
[ ] Ballerina By Example Tests

[ ] Increased Test Coverage
[ ] Added necessary documentation

[ ] API documentation
[ ] Module documentation in Module.md files
[ ] Ballerina By Examples

@nipunayf https://github.com/ballerina-platform/ballerina-lang/pull/41713/commits/d6c2f71f585c3a6d024d9ebd6046da1efe7076df commit needs to be added to this too. The org.ballerinalang.langserver.completion.CompletionPerformanceTest test failed and I retriggered the build.

Closing this because https://github.com/ballerina-platform/ballerina-lang/pull/41748 will be merged instead of this.


Cannot mount sd card

Hello,
I am trying to use this library. But I cannot mount sd card. For example, I uploaded the FatFS_SPI_example.cpp example then I send mount 0: command. After that I receive that error:
> mount 0:
sd_spi_go_low_frequency: Actual frequency: 398089
V2-Version Card
R3/R7: 0x1aa
Illegal command CMD:59 response 0x5
R3/R7: 0x80ff8000
R3/R7: 0x80ff8000
Card Initialized: Standard Capacity Card: Version 2.x
SD card initialized
_read_bytes: Invalid CRC received 0xc904 result of computation 0x8657
Couldn't read csd response from disk
f_mount error: The physical drive cannot work (3)

I am using this sd module:

I set my card as Fat32
and I changed sd_cards section in hw_config.c to that
static sd_card_t sd_cards[] = {  // One for each SD card
    {
        .pcName = "0:",           // Name used to mount device
        .spi = &spis[0],          // Pointer to the SPI driving this card
        .ss_gpio = 17,            // The SPI slave select GPIO for this SD card

        .use_card_detect = false,
        .card_detect_gpio = 22,   // Card detect
        .card_detected_true = -1,  // What the GPIO read returns when a card is
                                  // present. Use -1 if there is no card detect.
        .m_Status = STA_NOINIT,
    }
};

What am I doing wrong?

I tried an sd module like that once, and I never could get it to work. I came to the conclusion that it was really meant for 5V (compatible with things like Arduino). You could try disconnecting the VCC pin and sticking a 5 V power supply across it and the GND pin.  (I believe the LDO voltage regulator on that module requires a power supply of 4.5V ~ 5.5V. A few batteries might do it.) Or, you could try hacking the module to bypass the LDO voltage regulator. Somehow, you want to get 3.3V on the SD card's VCC.
My new favorite module for the Pico is the Adafruit Micro SD SPI or SDIO Card Breakout Board - 3V ONLY!. At $2.95 in quantity one, it doesn't cost that much more than the Arduino compatible cards if you really only need one or two.
However, if you want to figure this out, I would start by running the Low Level I/O Driver Test with the command "lliot". Much easier to debug at that lower level than with something like "mount".  You can use the debugger to step through the code and see where things go wrong. If it's a hardware problem, you'll probably need something like this: Comidox 1Set USB Logic Analyzer Device Set USB Cable 24MHz 8CH 24MHz 8 Channel UART IIC SPI Debug for Arduino ARM FPGA M100 Hot and PulseView - sigrok to see what's going on.

The LDO regulator looks like it could be something like this: https://www.onsemi.com/pdf/datasheet/ncp1117-d.pdf
(but I can't make out the markings in the photo).
The output on the heatsink tab is probably going to the 3.3V VCC on the SD card socket, with a couple of decoupling capacitors there off to the side. You could try desoldering that chip, or just cut the pins, then run a jumper wire from the pin marked VCC on the board edge connector over to where the heatsink tab on the LDO is.
Actually, you probably don't even need to remove the LDO. Just run the jumper, effectively shorting the input and output of the regulator, which shouldn't hurt anything. You might find that the bottom of the board is a 3.3V plane, so it might be easier (or neater) to jumper there.
Then you should be able to run on 3.3V.  The other chip appears to be
https://www.ti.com/lit/ds/symlink/sn74lvc125a.pdf
which should be fine.

I just remembered that if you power your Pico by USB, you've already got 5 V sitting on VBUS. So, the simplest thing might be to just power this module at 5 V (as it was designed to be)  by running a line from Pin 40 (VBUS) on the Pico to the pin marked VCC on the micro SD card module.

Thanks for your help. I tried 5V, I don't know why but it didn't work. So I decided to build Adafruit's 3V ONLY card. And it worked.
Here is what I got


Fixing a TS compilation error in index.d.ts

This provides a fix for the issue reported in #70. I've taken the easy (and probably safer) way out by dropping the offending import (Bucket) altogether, and declaring our API to return any instead. I've also added a new verifyReleaseTarball.sh script which will check for this type of errors in the future.
Here's the repro of the error as detected by the new verification script:
npm WARN<EMAIL_ADDRESS>No repository field.
npm WARN<EMAIL_ADDRESS>No license field.
> tsc -p tsconfig.json
node_modules/firebase-admin/lib/index.d.ts(397,3): error TS2666: Exports and export assignments are not permitted in module augmentations.
Deleted temp working directory /tmp/tmp.fsnUBunSgA
Error: Release tarball failed verification.

And with the fix...
npm WARN<EMAIL_ADDRESS>No repository field.
npm WARN<EMAIL_ADDRESS>No license field.
> tsc -p tsconfig.json
> /usr/local/google/home/hkj/Projects/firebase-admin-node/public/node_modules/.bin/mocha -r ts-node/register src/*.test.ts

  Init App
    ✓ Should return an initialized App

  1 passing (8ms)

Deleted temp working directory /tmp/tmp.JoeZmoqQoY

[INFO] firebase-admin-5.2.1-rc0.tgz successfully created!
[INFO] Create a CL for the updated package.json and npm-shrinkwrap.json if this is an actual release.```

@bojeil-google Made the suggested changes.


Make compilation of Contact library independent from Planners library

Should something be added to the changelog?

If we are going to add specifically about Contact library on the README, then I guess it makes sense to update also the CHANGELOG. Otherwise, I think it's safe to ignore it.

Should something be added to the changelog?

If we are going to add specifically about Contact library on the README, then I guess it makes sense to update also the CHANGELOG. Otherwise, I think it's safe to ignore it.

As you prefer.

Actually

Implement Contact library. (https://github.com/dic-iit/bipedal-locomotion-framework/pull/43 and https://github.com/dic-iit/bipedal-locomotion-framework/pull/45)

This line already exists in the CHANGELOG. Since we are yet to release a new version, I think we can stick with the default.

Let me know if I can merge it

@GiulioRomualdi please see the discussion here https://github.com/dic-iit/bipedal-locomotion-framework/pull/142#discussion_r522823899.
We need to consider that design decision before merging this.

Give the comment in https://github.com/dic-iit/bipedal-locomotion-framework/pull/142#discussion_r522824832, we could proceed with the merge.

Sorry I mistakenly clicked on Close with comment instead of comment ;D

We can merge this, right?

Thanks for the merge.


Deprecate kamel install and promote Kustomize-based installation to primary method

Similarly to #3790, it's good time to deprecate kamel install and promote Kustomize-based installation to the primary method of Camel K installation.
There are two tasks we should perform:

[ ] Mark deprecation to kamel install command, like kamel init and kamel local.
[ ] Rewrite documentation and restructure it so that it's seen as the primary method for Camel K installation.

Relates #1503

Do we have full feature parity if we adopt the Kustomize option?

One further consideration from Apache release process policy point of view. Right now we are releasing a binary following a release process that produces a CLI which configure the released container image. This combination of software is passing a voting system. How should we change this to be in line with the policy? I mean, I guess we need a clear deliverable (it could be even a repository tag) that will need to tested during the release voting process.
@oscerd wdyt?

It's not a maven release, so there is no concept of staging repository, what we could do is creating a pre-release tag with everything in place and eventually create a tag from there once the vote passed.

Do we have full feature parity if we adopt the Kustomize option?

Good point. Right now, only few kamel install flags are ported to the Kustomize method, while users are free to manually patch the resources under install/ to achieve the same. So I agree that it's a bit too early to deprecate kamel install. At the same time, unless we try to push the Kustomize method as the primary method we won't fill the gap in the near term. At least I think we can start promoting it as one of the primary methods.
$ make help
...
operator        Install the operator deployment and related resources

                Cluster-admin privileges are required.

                NAMESPACE:          Set the namespace to install the operator into
                PLATFORM:           Override the discovered platform, if required
                GLOBAL:             Sets the operator to watch all namespaces for custom resources [true|false]
                CUSTOM_IMAGE:       Set a custom operator image name
                CUSTOM_VERSION:     Set a custom operator image version/tag
                ALWAYS_PULL_IMAGES: Sets whether to always pull the operator image [true|false]
                MONITORING:         Adds the prometheus monitoring resources
                MONITORING_PORT:    Set a custom monitoring port
                HEALTH_PORT:        Set a custom health port
                LOGGING_LEVEL:      Set the level of logging [info|debug]
                DRY_RUN:            Prints the resources to be applied instead of applying them
...

Okey, so, maybe we should do this development the other way around. We start changing the documentation in order to promote the kustomize way to install the operator. As soon as we have it, our user base will naturally ask to include such features in the kustomize (at least, I hope so!). Once we have a certain level of parity we will be able to deprecate officially the kamel install. However, we need to start to change the documentation for this to happen.

Hi @phantomjinx,
To complete the features of Kustomize installation, I'm trying to add ENV_VARS and SKIP_DEFAULT_KAMELETS_SETUP parameters to make operator as a starter. However, I found that implementing these in Makefile can be tricky, probably requiring a lot of bash,Makefile,sed,awk magic. Now I wonder if it's really the right direction to try to replicate every feature provided by kamel install in the Makefile for the Kustomize installation, as it doesn't seem like a good idea to use Makefile as a general programming language.
It seems that the Kustomize way is for users to directly create and customise their own patches either by hand or through kustomize command, rather than the tool to provide convenient parameters to customise everything for them.
What do you think about it?  Is it your original intention to provide every installation feature through the Makefile?

FWIW, we can add some pre-configured and opinionated kustomize overlay for dev/test/etc

So @astefanutti and I thought that the kustomize/Makefile combination was always going to be a pairing of convenience designed to allow for the most common and simplest use-cases. Since kustomize can be so opinionated and uses can readily change the kustomize config files to suit their own objectives, it was therefore thought best not to implement every function and switch of the kamel binary, not least because the more advanced use-cases do not readily lend themselves to the Makefile syntax.

@lburgazzoli @phantomjinx Thanks for your inputs. Those really make sense.
So, instead of making it more feature-rich, we should rather keep the Makefile simple and then provide a sensible and useful set of predefined overlays for the base installation yaml files. And we should extend more about how to install specific configurations of Camel K with kustomize or kubectl -k in the documentation:
https://camel.apache.org/camel-k/next/installation/advanced/kustomize.html

Can you assign this one to me @squakez please. I will see how to continue this subject.

@gansheer what's the status of this?

I was waiting for advancement on https://github.com/apache/camel-k/issues/3397. But I wonder if I should not continue again because #3397 looks like a long time development

I was waiting for advancement on #3397. But I wonder if I should not continue again because #3397 looks like a long time development

IMO they should independent. If there is any dependency, then, we can always adjust the development accordingly. The main reason to try closing this ASAP is to deprecate and remove the CLI definitively.

@gansheer I'm taking this over. Are you okay with that?

Closing this in favor to the discussion opened in #5615


autorip fails with invalid preset; and presets.json not where expected

I'm chasing an issue with auto encodes failing via the watch folder.  The only log info that I could find was conversion.log, which showed an invalid preset error.  I then went to Handbrake.conf and changed the preset argument without success.
I then noticed that in Handbrake.conf the cli argument points to a presets.json file that doesn't exist. the argument is: "--preset-import-file /config/handbrake/presets.json".  I checked and there's no folder "/config/handbrake"; however, I did find the json at "/handbrake/config/ghb/presets.json".
I've tested pointing --preset-import-file to the correct location, but now autorip doesn't leave anything in conversion.log at all, so not sure where to go from here.
Is there something wrong with the docker file structure, or am I just not understanding what's going on within the argument calls?
Appreciate help.
Here's my docker create:
docker run -d
--name=handbrake
--restart unless-stopped
-p 5890:5800
-e USER_ID=1000
-e GROUP_ID=8675309
-e AU=Australia/Melbourne
-e AUTOMATED_CONVERSION_PRESET="HQ 1080p30 Surround"
-e AUTOMATED_CONVERSION_FORMAT=mp4
-e AUTOMATED_CONVERSION_KEEP_SOURCE=0
-e AUTOMATED_CONVERSION_SOURCE_STABLE_TIME=120
-e AUTOMATED_CONVERSION_SOURCE_MIN_DURATION=3600
-e AUTOMATED_CONVERSION_CHECK_INTERVAL=300
-e AUTOMATED_CONVERSION_NON_VIDEO_FILE_ACTION=ignore
-e UMASK=000
-e CLEAN_TMP_DIR=1
-v /home/docker/handbrake/config:/config:rw
-v /home/docker/handbrake/storage:/storage:ro
-v /home/docker/handbrake/output:/output:rw
-v /home/docker/handbrake/output:/watch:rw
-v /home:/home:rw
jlesage/handbrake

Update: I deleted the container, fixed the error in my create file, and removed all file structures from the system and reinstalled and now it works. Not sure why the file system was so weird, but everything appears to be where it's meant to be now.


RAFT: make single-threaded

There are too many concurrent things going on in RAFT, and it is hard to keep track of all of them and make sure the protocol is correct. I therefore decided to make RAFT single-threaded: all requests go into a queue which is handled by a single thread. In a next step, I'll remove all synchronization (once I've changed the way ELECTION interacts with RAFT).
See the javadoc in RAFT for details.
Perf even increased slightly (perhaps threads were freed up sooner?)
Results with 100 threads, run for 60s:
======================= Results: ===========================
C: 6’778.24 increments/sec (406’925 increments, 14.75ms / increment)
A: 6’942.40 increments/sec (416’787 increments, 14.40ms / increment)
B: 6’776.48 increments/sec (406’819 increments, 14.75ms / increment)
Throughput: 6’832.37 increments/sec/node
Time:       14.66ms / increment
Results with 8 threads, run for 60s):
======================= Results: ===========================
C: 5’959.68 increments/sec (357’688 increments, 1.34ms / increment)
A: 7’660.55 increments/sec (459’771 increments, 1.04ms / increment)
B: 5’940.45 increments/sec (356’528 increments, 1.35ms / increment)
Throughput: 6’520.23 increments/sec/node
Time:       1.25ms / increment

Not all tests (e.g. RaftTest) pass at this time, I'll look into this next week


Ktorrent broken on unstable

Issue description
Current unstable seems totally broken:
KTorrent fails to install/build
CMake Error at /nix/store/5dh82kd6qppsap7b12llcbp6w4d2i6a9-cmake-3.8.2/share/cmake-3.8/Modules/FindPackageHandleStandardArgs.cmake:137 (message):
  Could NOT find LibGcrypt (missing: LibGcrypt_INCLUDE_DIRS
  LibGcrypt_LIBRARIES) (Required is at least version "1.4.5")
Call Stack (most recent call first):
  /nix/store/5dh82kd6qppsap7b12llcbp6w4d2i6a9-cmake-3.8.2/share/cmake-3.8/Modules/FindPackageHandleStandardArgs.cmake:377 (_FPHSA_FAILURE_MESSAGE)
  /nix/store/0znc26msy9nvybwnd8x3yaj661i7l4w6-libktorrent-2.0.1-dev/lib/cmake/LibKTorrent/FindLibGcrypt.cmake:108 (find_package_handle_standard_args)
  /nix/store/5dh82kd6qppsap7b12llcbp6w4d2i6a9-cmake-3.8.2/share/cmake-3.8/Modules/CMakeFindDependencyMacro.cmake:55 (find_package)
  /nix/store/0znc26msy9nvybwnd8x3yaj661i7l4w6-libktorrent-2.0.1-dev/lib/cmake/LibKTorrent/LibKTorrentConfig.cmake:82 (find_dependency)
  CMakeLists.txt:21 (find_package)

-- Configuring incomplete, errors occurred!
See also "/tmp/nix-build-ktorrent-5.0.1.drv-0/ktorrent-5.0.1/build/CMakeFiles/CMakeOutput.log".
-- Found KF5JobWidgets: /nix/store/3qwp25zfh54x3y3p8n0jqniff51jikz6-kjobwidgets-5.34.0-dev/lib/cmake/KF5JobWidgets/KF5JobWidgetsConfig.cmake (found version "5.34.0")
builder for ‘/nix/store/fb1hsshjvcwq56nfkdv04ffcxjj9in9v-ktorrent-5.0.1.drv’ failed with exit code 1
cannot build derivation ‘/nix/store/c53s5d0vcfbydx6df4dhx0cmbiv0ha8h-system-path.drv’: 1 dependencies couldn't be built
cannot build derivation ‘/nix/store/jbiqdv3yd9m38jnwhvqkd2g2pkh83apv-nixos-system-subi-17.09pre110094.1add3519df.drv’: 1 dependencies couldn't be built
error: build of ‘/nix/store/jbiqdv3yd9m38jnwhvqkd2g2pkh83apv-nixos-system-subi-17.09pre110094.1add3519df.drv’ failed

Steps to reproduce
Running   nixos-rebuild boot --upgrade
Technical details

System: (NixOS: nixos-version, Ubuntu/Fedora: lsb_release -a, ...)

17.09pre109180.0d4431cfe9 (Hummingbird)

Nix version: (run nix-env --version)

nix-env (Nix) 1.11.10

Nixpkgs version: (run nix-instantiate --eval '<nixpkgs>' -A lib.nixpkgsVersion)

"17.09pre110094.1add3519df"

Sandboxing enabled: (run grep build-use-sandbox /etc/nix/nix.conf)

build-use-sandbox = false

fixed in 8f5cf685ad7b8a79b2033e99604898a9fa1fe819

still broken
-- The C compiler identification is GNU 5.4.0
-- The CXX compiler identification is GNU 5.4.0
-- Check for working C compiler: /nix/store/3k978nnp7ppjim34di40vwz5f95rsxhw-gcc-wrapper-5.4.0/bin/gcc
-- Check for working C compiler: /nix/store/3k978nnp7ppjim34di40vwz5f95rsxhw-gcc-wrapper-5.4.0/bin/gcc -- works
-- Detecting C compile features
-- Check for working CXX compiler: /nix/store/3k978nnp7ppjim34di40vwz5f95rsxhw-gcc-wrapper-5.4.0/bin/g++
-- Detecting CXX compiler ABI info
-- Detecting CXX compile features
-- Could not set up the appstream test. appstreamcli is missing.
-- Looking for __GLIBC__ - found
-- Performing Test _OFFT_IS_64BIT - Success
-- Found PythonInterp: /nix/store/frnm6ahmm6kzlh7sqrn09hdkkfyy9q39-python-2.7.13/bin/python (found version "2.7.13")
5.34.0")
0")
ersion "5.34.0")
-- Found KF5Notifications: /nix/store/r4zqnffl0zyqabqm6a47nc8xa0ns6avw-knotifications-5.34.0-dev/lib/cmake/KF5Notifications/KF5NotificationsConfig.cmake (found version "5.34.0")
figConfig.cmake (found version "5.34.0")
n "5.34.0")
ersion "5.34.0")
g.cmake (found version "5.34.0")
(found version "5.34.0")
-- Found KF5Kross: /nix/store/m8lh5mq2d53358cria6aagdfi131ps3p-kross-5.34.0-dev/lib/cmake/KF5Kross/KF5KrossConfig.cmake (found versio-- Found KF5KCMUtils: /nix/store/l59v0441b28nn1875wvikiv51wmmx85m-kcmutils-5.34.0-dev/lib/cmake/KF5KCMUtils/KF5KCMUtilsConfig.cmake (-- Found LibGMP: /nix/store/qsiqw59f3k9d8csckmb0q4ip1pkk0bbz-gmp-6.1.2-dev/include (found suitable version "6.1.2", minimum required CMake Error at /nix/store/5dh82kd6qppsap7b12llcbp6w4d2i6a9-cmake-3.8.2/share/cmake-3.8/Modules/FindPackageHandleStandardArgs.cmake:137 (message):
  Could NOT find LibGcrypt (missing: LibGcrypt_INCLUDE_DIRS
Call Stack (most recent call first):
  /nix/store/5dh82kd6qppsap7b12llcbp6w4d2i6a9-cmake-3.8.2/share/cmake-3.8/Modules/FindPackageHandleStandardArgs.cmake:377 (_FPHSA_FAILURE_MESSAGE)
  /nix/store/0znc26msy9nvybwnd8x3yaj661i7l4w6-libktorrent-2.0.1-dev/lib/cmake/LibKTorrent/FindLibGcrypt.cmake:108 (find_package_handle_standard_args)
  /nix/store/5dh82kd6qppsap7b12llcbp6w4d2i6a9-cmake-3.8.2/share/cmake-3.8/Modules/CMakeFindDependencyMacro.cmake:55 (find_package)
  /nix/store/0znc26msy9nvybwnd8x3yaj661i7l4w6-libktorrent-2.0.1-dev/lib/cmake/LibKTorrent/LibKTorrentConfig.cmake:82 (find_dependency)
  CMakeLists.txt:21 (find_package)

-- Configuring incomplete, errors occurred!
See also "/tmp/nix-build-ktorrent-5.0.1.drv-0/ktorrent-5.0.1/build/CMakeFiles/CMakeOutput.log".
builder for ‘/nix/store/kkzvsvgnhys5kiwbcr19xybq9r1a2piz-ktorrent-5.0.1.drv’ failed with exit code 1
cannot build derivation ‘/nix/store/jxvfx7lh0lf2s1vjxsvagm6h57f77bvf-system-path.drv’: 1 dependencies couldn't be built
cannot build derivation ‘/nix/store/lw1g40ah99fwva0wnkl5jqlcs54bfm12-nixos-system-subi-17.09pre110181.c5e314dabe.drv’: 1 dependencies couldn't be built

17.09pre110094.1add3519df (Hummingbird)
nix-env (Nix) 1.11.11
"17.09pre110181.c5e314dabe"
build-use-sandbox = false

For crying out loud, how many times do you need to be explained how channels and revisions work. Neither of these fixes have occurred yet at the revisions you refer to. Stop wasting my time.


Check file type and file extension when importing csv

issue #7144

added a check for file type and file extension
added an error message to the localization file
added integration test

Hi @twalling thanks for the PR! Just a little detail about GitHub - it annoyingly doesn't notify about force pushes. Therefore it's always great if you drop us a little note to let us know you've updated.

Thanks for the fix 🎉, and for taking so much care over our guidelines. We really appreciate it 👍


[Dataset edit modal] UX for edit metrics tab need improvement

Is your feature request related to a problem? Please describe.
It is confusing how to edit metrics in edit dataset modal.

I can only add SQL expression in the list, and I cannot see it after I expand an item? not when I expand it?

I can only add label after I expand it? It is unclear to user that they need to expand the item to add label vs can update sql expression right from the list

Once added a label, can edit it on either list or expanded form, but they are not synced?

Describe the solution you'd like

I think if we want to expand an item into form and have more input fields, we should be consistent that sql expression field, label field all present in the expand form.
Should be consistent on either able to edit every fields in list view
Should not be able to update data in list when the form is expanded (problem 3)

Describe alternatives you've considered
Alternatively, make it not able to edit any fields in list view at all, do all modification in the expand form.

let's discuss a middle ground solution and tackle it by mid Aug. @michael-s-molina 🙏

@rosemarie-chiu Totally agree with your points. I would like to add that we should consider Metrics, Columns, and Calculated Columns when deciding the behavior because they all look the same.


rolling and main branches are not in sync

Checklist

[X] I've read the contribution guidelines.
[X] I've searched other issues and no duplicate issues were found.
[X] I'm convinced that this is not my fault but a bug.

Description
Same as https://github.com/autowarefoundation/autoware_adapi_msgs/issues/56
Expected behavior
Same as https://github.com/autowarefoundation/autoware_adapi_msgs/issues/56
Actual behavior
Same as https://github.com/autowarefoundation/autoware_adapi_msgs/issues/56
Steps to reproduce
Same as https://github.com/autowarefoundation/autoware_adapi_msgs/issues/56
Versions
No response
Possible causes
No response
Additional context
No response

@youtalk given that main and rolling haven't diverged, we can fix this by renaming rolling to main and removing main. Alternatively, we could pull --ff-only from rolling to main (NOT MERGE) to preserve the same commit ids and then push to main. If we open a PR from rolling to main it might not work, we'd need to push to main directly.

Also, in order for https://github.com/autowarefoundation/autoware_msgs/issues/93#issuecomment-2160955700 to work, we can't merge any PRs until this is resolved so that the commit history is kept intact.

@esteve Yes, indeed. We should change the branch to main.

@xmfcx @mitsudome-r can I have admin access to this repo? Or at least, have write access to main? This is what I want to do:
esteve@haggis:/tmp$ git clone git@github.com:autowarefoundation/autoware_msgs.git
Cloning into 'autoware_msgs'...
remote: Enumerating objects: 617, done.
remote: Counting objects: 100% (362/362), done.
remote: Compressing objects: 100% (224/224), done.
remote: Total 617 (delta 206), reused 227 (delta 133), pack-reused 255
Receiving objects: 100% (617/617), 243.76 KiB | 834.00 KiB/s, done.
Resolving deltas: 100% (311/311), done.
esteve@haggis:/tmp$ cd autoware_msgs/
esteve@haggis:/tmp/autoware_msgs$ git pull --ff-only origin rolling
From github.com:autowarefoundation/autoware_msgs
 * branch            rolling    -> FETCH_HEAD
Updating 8e657ab..4c3a193
Fast-forward
 autoware_common_msgs/CHANGELOG.rst       | 16 ++++++++++++++++
 autoware_common_msgs/package.xml         |  2 +-
 autoware_control_msgs/CHANGELOG.rst      | 10 ++++++++++
 autoware_control_msgs/package.xml        |  2 +-
 autoware_localization_msgs/CHANGELOG.rst | 10 ++++++++++
 autoware_localization_msgs/package.xml   |  2 +-
 autoware_map_msgs/CHANGELOG.rst          | 34 ++++++++++++++++++++++++++++++++++
 autoware_map_msgs/package.xml            |  2 +-
 autoware_perception_msgs/CHANGELOG.rst   | 49 +++++++++++++++++++++++++++++++++++++++++++++++++
 autoware_perception_msgs/package.xml     |  2 +-
 autoware_planning_msgs/CHANGELOG.rst     | 61 +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
 autoware_planning_msgs/package.xml       |  2 +-
 autoware_sensing_msgs/CHANGELOG.rst      | 11 +++++++++++
 autoware_sensing_msgs/package.xml        |  2 +-
 autoware_system_msgs/CHANGELOG.rst       | 17 +++++++++++++++++
 autoware_system_msgs/package.xml         |  2 +-
 autoware_vehicle_msgs/CHANGELOG.rst      | 38 ++++++++++++++++++++++++++++++++++++++
 autoware_vehicle_msgs/package.xml        |  2 +-
 18 files changed, 255 insertions(+), 9 deletions(-)
 create mode 100644 autoware_common_msgs/CHANGELOG.rst
 create mode 100644 autoware_control_msgs/CHANGELOG.rst
 create mode 100644 autoware_localization_msgs/CHANGELOG.rst
 create mode 100644 autoware_map_msgs/CHANGELOG.rst
 create mode 100644 autoware_perception_msgs/CHANGELOG.rst
 create mode 100644 autoware_planning_msgs/CHANGELOG.rst
 create mode 100644 autoware_sensing_msgs/CHANGELOG.rst
 create mode 100644 autoware_system_msgs/CHANGELOG.rst
 create mode 100644 autoware_vehicle_msgs/CHANGELOG.rst
esteve@haggis:/tmp/autoware_msgs$ git push
ERROR: Permission to autowarefoundation/autoware_msgs.git denied to esteve.
fatal: Could not read from remote repository.

Please make sure you have the correct access rights
and the repository exists.

Or if you want to do it yourselves, the --ff-only flag for git pull is very important so that rolling is not merged into main, the commits from rolling need to be in the linear history. Thanks.

Fixed in 4c3a1939520cd8ac9d05b0addf7286a0534de024, thanks @youtalk @xmfcx @mitsudome-r

I've submitted https://github.com/ros/rosdistro/pull/41606 to update the branch in the rosdep database.


BlTextUnderlineAttribute displays at the start of the text

BlTextUnderlineAttribute is being displayed at the start of the text instead of the character range.
| text |
text := '12345' asRopedText.
(text from: 3 to: 4) attributes: {(BlTextUnderlineAttribute new
		paint: BrGlamorousColors textHighlightColor;
		width: 3)}.

Fixed:
text := '12345' asRopedText fontSize: 100.
(text from: 3 to: 4)
   underlinePaint: (Color red alpha: 0.5) width: 6.
text


Build(deps-dev): Bump @types/styled-components from 5.1.20 to 5.1.21 (#2483)

Pull request opened by the merge tool on behalf of #2483

Merged in c407d5c2ea2153848d560e82dcd5d2f49abeaed8


Fixes #7: Parse selects when getting values from the modal

It now supports selects properly.
I tested it in the demo, but removed it as the input looks way prettier :)

A fantastic implementation. Good job! :)

Thanks!


build_pip_package: drop python_ppc64le files

Just like python_x86_64 and python_aarch64 , drop python_ppc64le files from the pip package

Hi @jakeharmon8 Can you please review this PR ? Thank you!

Hi @jakeharmon8 Can you please review this PR ? Thank you!

Hi @jakeharmon8 Can you please review this PR ? Thank you!

Hi @smuzaffar Can you please resolve conflicts? Thank you!

closing this as https://github.com/tensorflow/tensorflow/pull/64239 has removed this deprecated tensorflow/tools/pip_package/build_pip_package.sh file


No documented alternative to the robonomics io command

Hello, I am trying to write string data into the datalog, however instructions provided in the wiki seem to be outdated.
$ echo "foo" | robonomics io write datalog -s 0xbdfe0930de2bb82...8e5634035d1997
error: Found argument 'io' which wasn't expected, or isn't valid in this context

I was not able to find an alternative way to write data into the datalog on the wiki. Is there any way to write arbitrary string or YAML data into the datalog as of today? Our project relies heavily on this functionality.
I am running latest version of Robonomics binary for Linux x86 under Ubuntu 20.04 LTS in a VM
$ robonomics -V
robonomics 1.1.0-3d61e8c-x86_64-linux-gnu
$ uname -a
Linux feecchub-VirtualBox 5.11.0-25-generic #27~20.04.1-Ubuntu SMP Tue Jul 13 17:41:23 UTC 2021 x86_64 x86_64 x86_64 GNU/Linux

Hello, robonomics io isn't included in this release, it will be announced a bit later in one of patch releases.

Try this for strings
https://github.com/PaTara43/robonomics_daos_toolkit/blob/main/common_utils.py


[Docs] Modify README to include boilerplate and SDK

Modify the README.md file to mention the boilerplate and SDK repository and give some context about the repositories.
Reference:
https://github.com/ZencypherSolutions/semaphore-stellar-boilerplate
https://github.com/ZencypherSolutions/semaphore-stellar-sdk

@bitfalt
I will take my time to go through the referenced files attached to this issue and make the necessary modification in 48hrs. can this issue be assigned to me?

Hello! I'm Kimberly Cascante, a Dojo Coding member :) Looking for my first contribution.
I estimate this will take me around 24 to 48 hours to complete.
I will start reviewing the context, modify the file README.md with the information needed and share.
Happy to contribute!

Hello! I'm Kimberly Cascante, a Dojo Coding member :) Looking for my first contribution.
I estimate this will take me around 24 to 48 hours to complete.
I will start reviewing the context, modify the file README.md with the information needed and share.
Happy to contribute!


Make and include poll for Culture of Concentration.

:bar_chart:

What does concentration look like for you?
https://goo.gl/forms/Td2CKC2Xfpp5g1q13
Google Sheet: https://docs.google.com/spreadsheets/d/1HhE2PKJsp0268IR5Sg41Dbxcv3BCZ_cYoccfNXZ4mIQ/edit?usp=sharing

Awesome!

Can you add me as a collaborator with full permissions to all the forms we make?

Ah, of course! ✅


Exclude DuPage County from the list of available courts to file into, like we do for Cook County already

This is a deep dive, unfortunately, as it's hard to see where Cook County is filtered out of the results. It appears to go through multiple levels of intermediate variables with the logic hidden. This needs more documentation and code clarity going forward.
We can tell that we only reach the Cook County warning page after can_check_efile ends up getting set to False (https://github.com/IllinoisLegalAidOnline/docassemble-AppearanceEfile/blob/34c1e4f5af36e6e6b81e366962ab58a354b4ccae/docassemble/AppearanceEfile/data/questions/appearance.yml#L98), because we don't reach the next screen that asks for tyler_login.
can_check_efile in turn is defined by efile_setup being True, in login_qs.yml:
https://github.com/SuffolkLITLab/docassemble-EFSPIntegration/blob/01875efe745bb35511eabcd53f6fdd4fa9587c4d/docassemble/EFSPIntegration/data/questions/login_qs.yml#L297
efile_setup (???) is True iff court_id in available_efile_courts:
https://github.com/SuffolkLITLab/docassemble-EFSPIntegration/blob/01875efe745bb35511eabcd53f6fdd4fa9587c4d/docassemble/EFSPIntegration/data/questions/login_qs.yml#L294
When trial_court_index is Cook County, the court_id is set to "richard j. daley center", which is not a court ID that is on the list of allowed courts. For DuPage county, the court_id is "dupageinteg"
This ultimately comes from il_courts.xlsx, in the docassemble.ILAOEFile package, which simply doesn't have a value for the tyler_court_code column. It appears that the "quick and dirty" solution to exclude Cook County from all filing was to just not define this value in the XLSX spreadsheet. We will NOT want to replicate this; instead, we will need new logic.
Probably, this goes under can_check_efile but I don't understand the naming of this variable.

Note to add: it looks like dupageinteg was leftover from an older, not-matching version of the ILAOEFile package. When I updated to the latest version, it has the tyler code as dupage instead.


Loading more games/streams on demand

When reaching the last row, we should asynchronously load more games/streams. For exemple, look at the web interface.

:+1:

Solved by fdc49d63935ec717ca9b69f249aecddf3ee89288


Fix integer division

PyTorch started to raise errors when performing integer division with /. This PR fixes this with //.
Closes #713

Thanks


Add the audit report

Closes #161

Codecov Report

Merging #223 (0132301) into main (d4e61fc) will increase coverage by 0.53%.
The diff coverage is n/a.

@@            Coverage Diff             @@
##             main     #223      +/-   ##
==========================================
+ Coverage   83.09%   83.63%   +0.53%
==========================================
  Files           5        5
  Lines         556      556
==========================================
+ Hits          462      465       +3
+ Misses         70       68       -2
+ Partials       24       23       -1

Flag
Coverage Δ

unittests
83.63% <ø> (+0.53%)
:arrow_up:

Flags with carried forward coverage won't be shown. Click here to find out more.

Impacted Files
Coverage Δ

server/service.go
83.82% <0.00%> (+0.99%)
:arrow_up:

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update d4e61fc...0132301. Read the comment docs.

thanks!


Swapped IsDNX and IsMono to fix running Mono Mobile(Xamarin.Android/Xamarin.iOS)

Crash happens when IsDNX method is loaded because it tries to load System.Runtime.Versioning.FrameworkName type which is not present on Mono Mobile. If IsMono is called first IsDNX is never called, hence no crash.

Hi @DavidKarlas, I'm your friendly neighborhood .NET Foundation Pull Request Bot (You can call me DNFBOT). Thanks for your contribution!

This seems like a small (but important) contribution, so no Contribution License Agreement is required at this point. Real humans will now evaluate your PR.

TTYL, DNFBOT;

This is too subtle to not write a giant comment saying why the ordering of conditions within the if statement matter. Why doesn't the try catch work on iOS and Android?

Added comment.
Reason why try catch is not working is because exception happens while constructing method and not finding FrameworkName type, so before entering try catch statement.
Added new PR that you might like more:
https://github.com/aspnet/Microsoft.Data.Sqlite/pull/217

This PR has been superseded by #225


Update GKE Kubeconfig to use gke-cloud-auth-plugin

Update ExecProvider to support InstallHint and ProvideClusterInfo
This should resolve #37

Thank you, I'll try it out


⚠ SkyfallMC Minecraft Server has degraded performance

In 7b73a10, SkyfallMC Minecraft Server (play.skyfallmc.ga) experienced degraded performance:

HTTP code: 200
Response time: 1732 ms

Resolved: SkyfallMC Minecraft Server performance has improved in 81d9fa7.


Test PyInstaller -onefile with more complicated projects

I suspect that Pyinstaller won't work with the current, very basic way, we are loading images. This is likely linked to issue #52 and issue #2 as we need an all round better loading solution that we can be confident works across platforms and in all kinds of 'freezing' libraries.

Upgraded the test project in the pygame_gui_examples to cover this. Likely easier than unit testing pyinstaller builds...


Refactor transition generators

Codecov Report
All modified and coverable lines are covered by tests :white_check_mark:

Project coverage is 100.00%.

Additional details and impacted files
@@            Coverage Diff            @@
##              main      #408   +/-   ##
=========================================
  Coverage   100.00%   100.00%
=========================================
  Files          115       118    +3
  Lines         3581      3602   +21
  Branches       261       262    +1
=========================================
+ Hits          3581      3602   +21

:umbrella: View full report in Codecov by Sentry.
:loudspeaker: Have feedback on the report? Share it here.


When should ApplicationFactory_UnitOfWorkBinding and DomainMethodToken be used?

Hi @ImJohnMDaniel @stohn777 ,
Can you provide some examples for using ApplicationFactory_UnitOfWorkBinding and Domain Process Action DomainMethodToken?
I don't understand when I'd reach for either option.  I checked for these in at4dx-samplecode, but didn't see any examples.
Also, I found @ImJohnMDaniel response to an earlier question in #39 about DomainMethodToken, but would like to see an example for understanding.
re: DomainMethodToken vs TriggerOperation -- So the thought here is that it is an "either/or" feature. You will specify the TriggerOperation approach or the DomainMethodToken approach. The DomainMethodToken option is for use cases where you are wanting to call an orchestrated domain process from a Service tier class or maybe another Domain class. In theory could call another Domain that is part of another package and simply wrap the call in a try/catch thus allowing for the functionality to be called, if the code were present in the org, and it still be loosely coupled.
Thanks for your work on this great framework!  My team and I have recently picked up AT4DX to aid us in breaking up our organization into packages.  It has been a joy to use so far.
Best Regards,
Chaz Watkins

Thanks, @ImJohnMDaniel.
I missed the UOW examples.  Thanks for taking the time to provide the links.  I notice there is no ‘To__c’ field.  So, do I use the Binding Sequence to order the SObjextTypes as I would using ‘Application.UnitOfWork.newInstance(List sobjTypeList)’?

https://github.com/apex-enterprise-patterns/at4dx/issues/60

Also, regarding Domain Process Bindings execution order. Given I have 2 Trigger Context Criteria and Action bindings for an object, when Criteria 1 filters down the records for Action 1 and Action 1 executes, then Criteria 2 is given only the records from Criteria 1? Is this accurate? Or is Criteria 2 given all records from Trigger.new and Trigger.old?

So, the execution order is going be a decimal; not an integer.  The "integer-side" of that number represents the "domain process id".  The "decimal-side" of that number represents the sequence for criteria/action class execution within that domain process.
Say you have three independent domain processes (i.e. DP-A, DP-B, and DP-C).  Those domain processes have the following criteria and action class constituents:

DP-A

Criteria

C-1
C-2

Actions

A-1
A-2

DP-B

Criteria

C-1
C-3

Actions

A-3

DP-C

Criteria

C-2
C-4
C-5

Actions

A-4
A-5

Notice that you can reuse criteria and action classes across multiple domain processes.
In this scenario, you have three domain processes where each of those domain process should have a unique "domain process sequence Id".  We will say the following domain process sequence Ids are:

DP-A -- 10
DP-A -- 20
DP-A -- 30

So, with that in mind, the domain process sequences would be the following:

DP-A

Criteria

C-1 -- 10.10
C-2 -- 10.20

Actions

A-1 -- 10.10
A-2 -- 10.20

DP-B

Criteria

C-1 -- 20.10
C-3 -- 20.20

Actions

A-3 -- 20.10

DP-C

Criteria

C-2 -- 30.10
C-4 -- 30.20
C-5 -- 30.30

Actions

A-4 -- 30.10
A-5 -- 30.20

Ok.  Let's start looking at this now.
Each domain process will be treated in isolation.  If the criteria classes from domain process 10 criteria filter the active record set down to a subset for the domain process 10 actions, it will only be for those actions.  When domain process 20 begins, it will start fresh with the original set of records and the domain process 20 criteria will filter that original record set down to a subset that the domain process 20 actions will work on.  The same is true for when domain process 30 begins.  Each domain process begins with the same original group of records.  This is true regardless of whether or not the same physical crtiera or action class is utililzed in multiple domain processes.
Also note that these domain process ids are specific to the other defining traits of the domain process.  What I mean is a domain process is classified by multiple elements:

the SObject involved,
Trigger or Domain Method context,
If Domain Method context, then what is the unique "domain method token",
If Trigger context, then what type of Trigger context -- Before Insert, After Update, etc.

So, you could see a domain process id of "10" for all of the following combination examples:

Account - Trigger context - BeforeInsert
Account - Trigger context - AfterUpdate
Contact - Trigger context - BeforeInsert
Account - Domain Method context - unique "domain method token"
Contact - Domain Method context - unique "domain method token"
etc...

I hope this helps.   Let me know if you have questions.

Thanks, @ImJohnMDaniel for the in-depth explanation of Domain Processes.  It answered my question about DP execution order perfectly.  Your explanation would be a great addition to the at4dx documentation for Domain Processes.  If you'd like, I can take what you wrote and submit a PR to the documentation.
When you reference "Domain Method context", how are those utilized?  Is this calling the Domain Process from the Domain Apex class?


Make proxyv2 image building operations universal

Describe the feature request
The current build script for the proxyv2 image has some logic hardcoded, such as https://github.com/istio/istio/blob/master/bin/init.sh#L220. I hope this script could more general, for example, it can be via parameter specifies the name of the sidecar, which is convenient for compiling other data planes.
Describe alternatives you've considered
As mentioned above.
[ ] Configuration Infrastructure
[ ] Docs
[ ] Installation
[ ] Networking
[ ] Performance and Scalability
[ ] Policies and Telemetry
[ ] Security
[ ] Test and Release
[ ] User Experience
[ ] Developer Infrastructure
Additional context

https://github.com/istio/istio/pull/25146


Support printenv

So that I can see which environment variables are defined. This is useful for figuring out what variables to put into my .shellrc to make MSVC work.

As a workaround this seems to work:
$ cmd
> set

This prints all environment variables that cmd can see.


Update members

Pre-submission checklist:
Please check each of these after submitting your pull request:

[x] Are you only including a repo_url if your project is 100% open source? If so, you need to pick the single best GitHub repository for your project, not a GitHub organization.
[x] Is your project closed source or, if it is open source, does your project have at least 300 GitHub stars?
[x] Have you picked the single best (existing) category for your project?
[x] Does it follow the other guidelines from the new entries section?
[x] Have you included a URL for your SVG or added it to hosted_logos and referenced it there?
[x] Does your logo clearly state the name of the project/product and follow the other logo guidelines?
[x] Does your project/product name match the text on the logo?
[x] Have you verified that the Crunchbase data for your organization is correct (including headquarters and LinkedIn)?
[ ] ~15 minutes after opening the pull request, the CNCF-Bot will post the URL for your staging server. Have you confirmed that it looks good to you and then added a comment to the PR saying "LGTM"?

Build failed because of:
No cached entry, and Pixie Labs (member) has issues with twitter: https://twitter.com/pixie_run, 404 - {"errors":[{"code":34,"message":"Sorry, that page does not exist."}]}
No cached entry, and Comforte (member) has issues with twitter: https://twitter.com/comForteLounge, 404 - {"errors":[{"code":34,"message":"Sorry, that page does not exist."}]}

Deploy preview for landscape failed.
Built with commit e7fa78ed3fbb779f795c93a25e7889360055d734
https://app.netlify.com/sites/landscape/deploys/5ef53ad7738b750007a32334

LGTM


Not able to update initial conditions and stop time of Lorenz example

I wanted to allow for changing stop time and initial conditions in the Lorenz example. However, when adding the following code to the update function, I get trouble when updating integ:
`
prob = ODEProblem{true, SciMLBase.FullSpecialize}(lorenz!, u0, (0.0, stop), p)

integ = init(prob, Tsit5(), dense = true)`

The error message in the browser is:
`
lorenz.wasm:0xd7 Uncaught RuntimeError: unreachable

at lorenz.wasm:0xd7

at run ((index):76:16)

at async (index):78:15`

Is there some other way of changing initial conditions and stop time which does not imply updating the global variable integ

I think the best way to handle changes to stop times and initial conditions is to use the integrator interface. Run step!(integ) inside a loop in the update() function. That's how I started statically compiling these DiffEq models. It should give more control.
On a side note, the next versions of Firefox and Chrome will support these apps without any experimental flags. The demos now work with the beta versions of Chrome and Firefox without flags. These releases are coming next month. I've updated the code to only use the features coming out next month.

I now read the documentation of OrdinaryDiffEq more carefully and realized that I could do:
OrdinaryDiffEq.reinit!(integ, initial, tf=stopTime)
So the problem is solved.
Great that the experimental features will be available in the next release of Chrome.

There is one problem with:
OrdinaryDiffEq.reinit!(integ, initial, tf=stopTime)
I can't change the size of the u vector from what is given in:
prob = ODEProblem{true, SciMLBase.FullSpecialize}(lorenz!,u0,tspan,p)
I have tried
`
OrdinaryDiffEq.resize!(integ, n)
OrdinaryDiffEq.set_u!(integ, init)`

giving unreachable code or
[wasm-validator error in function julia_errorTuple_String__String_] struct.new operand 0 must have proper type, on (struct.new $struct.0  (local.get $5) )
For the moment, I am using an oversized u vector which can handle all the different models I want to switch between. I hope a better solution would be given in the future.
I assume there would be a similar problem if one would like to change the solver method.

Resizing sounds like a problem that's tough to work around given that we bake in the integrator as a global variable. In theory, we can enlarge arrays, but I'm not sure how well it works with global variables. Your oversized vector sounds like the way to go.

Hi, thank you for your great effort, first of all!
I'm a beginner with both Julia and WASM.
Is it expected behaviour, that i can't set
global integ = init(prob, Tsit5(), dense = true)

from a WASM exported function?
When trying, i get:
ERROR: LoadError: type Argument has no field value

Also, when i try to define it in the global scope
integ = init(prob, Tsit5(), dense = true)

it gives
ERROR: LoadError: KeyError: key 12 not found

The only way to make it compile, seems to be
const integ = init(prob, Tsit5(), dense = true)

Context: besides trying to include the creation of the integrator in another WASM exported function setupIntegrator(), i'm using an exported update(), like you do in https://github.com/tshort/WebAssemblyCompiler.jl/blob/main/examples/lorenz/lorenz.jl

@geordie2020, I'm not following that. Can you post a bigger part of the code?

Sure, my end goal is something like:
function n_body(du, u, p, t)
    ...
end

global integ

function setupNBodyIntegrator()
	n = 4 # number of bodies. should later be an arg to this fn.
	dim = 2
	order = 2

	param = ones(Float64, n) * 1
	# println("param $param")

	u_begin_pos = rand(Float64, round(Int64, n * dim * order / 2))
	u_begin_vel = ones(Float64, round(Int64, n * dim * order / 2))
	u_begin = vcat(u_begin_pos, u_begin_vel)
	# println("u_begin $u_begin")

	t_begin = 0.0
	t_end = 10.0
	tspan = (t_begin, t_end)
	# println("tspan $tspan")

	prob = OrdinaryDiffEq.ODEProblem{true, SciMLBase.FullSpecialize}(n_body, u_begin, tspan, param)
	global integ = init(prob, Tsit5(), dense = false, dtmax = 0.03)
    nothing
end

function updateStep()
	step!(integ)
	u = integ.sol.u[end][1:div(end, 2)]
	return JS.object(u)
end

using Base.Experimental: @overlay
@overlay WebAssemblyCompiler.MT @inline SciMLBase.check_error(integrator::SciMLBase.DEIntegrator) = SciMLBase.ReturnCode.Success
# The following function includes a try/catch, so bypass it.
@overlay WebAssemblyCompiler.MT @inline OrdinaryDiffEq.ode_determine_initdt(args...; kw...) = 0.001

WebAssemblyCompiler.debug(:inline)

WebAssemblyCompiler.compile((updateStep,), (setupNBodyIntegrator,), filepath = "wasmtest1.wasm", validate = true, optimize = false, experimental = true)

I'm not sure, what i changed, but currently the error is:
ERROR: LoadError: UndefVarError: `integ` not defined
Stacktrace:
  [1] top-level scope
    @ :0

Hi I'm trying to build the docs for this example from source, but am unable to because of the following error:
 KeyError: key 50 not found
I get this error executing the compilation on this line:
https://github.com/tshort/WebAssemblyCompiler.jl/blob/e2fa9a9183721703c345d830aea3a7655e4fda52/examples/lorenz/lorenz.jl#L117C64-L117C69


feat: support lint rules plugins

Adds support for the following types of plugins:

lintRules.<tab-type> - lint rules used for a specific type of tab (e.g. bpmn, cloud-bpmn or dmn)

Artifacts

https://camunda-modeler-on-demand.s3.eu-central-1.amazonaws.com/custom-lint-rules/camunda-modeler-custom-lint-rules-linux-x64.tar.gz
https://camunda-modeler-on-demand.s3.eu-central-1.amazonaws.com/custom-lint-rules/camunda-modeler-custom-lint-rules-mac.dmg
https://camunda-modeler-on-demand.s3.eu-central-1.amazonaws.com/custom-lint-rules/camunda-modeler-custom-lint-rules-mac.zip
https://camunda-modeler-on-demand.s3.eu-central-1.amazonaws.com/custom-lint-rules/camunda-modeler-custom-lint-rules-win-ia32.zip
https://camunda-modeler-on-demand.s3.eu-central-1.amazonaws.com/custom-lint-rules/camunda-modeler-custom-lint-rules-win-x64.zip

Can be tested with this plugin: https://github.com/camunda/camunda-modeler-custom-linter-rules-plugin/tree/custom-lint-rules

Requires https://github.com/camunda/linting/pull/20
Related to https://github.com/camunda/camunda-modeler/issues/3145

Minor odd thing: Warnings are not shown in the error panel toggle (yet). But we're going to fix that some day, soon I guess?

I created a follow-up issue as this involves changes in both @camunda/linting and the Camunda Modeler and we also need to decide on what warnings are going to look like: https://github.com/camunda/camunda-modeler/issues/3200


Regenerate based on latest schema

This is the result of running script/generate.

Please create a release and use semantic versioning when you merge 🙏 🤓

Please create a release and use semantic versioning when you merge 🙏 🤓

I think I'd like to have a strategy that works for go mod (and, ideally, the least breaking way for existing users too) before creating a tagged release. I need some time to experiment on that front. Let's chat over in #39 on that.

Before merging any module system changes, let's please make a release containing the current "pre-go mod" client.


Uncaught TypeError: Cannot read property 'coordinates' of undefined mapbox

So basically in react component render method:
if I put a Feature component and a list of Feature component using react wrapper in Layer component, and it will raise Uncaught TypeError: Cannot read property 'coordinates' of undefined mapbox even I defined it.
This error costs me hours of debugging, so I guess maybe we can fix this in Layer component.
      const NodesFeatures = this.states.nodes.map( (node, i)=> <Feature properties={{rssi: node.rssi}} coordinates={node.location} />);
      <Layer
        id="clusters"
        type="circle"
        paint={{
          "circle-radius": circleRadius,
          "circle-color": {
                property: "rssi",
                stops: [
                    [-300, "#1a237e"],
                    [-120, "#18FFFF"],
                    [-115, "#00E676"],
                    [-110, "#FFEB3B"],
                    [-105, "#FF9800"],
                    [-100, "#FF5722"],
                ]
          },
          "circle-opacity": .8 }}>
        <Feature properties={{rssi: -102}} coordinates={[12.5870103, 52.5170092]} /> // this shoud be removed otherwise it will cause error
        {NodesFeatures}
      </Layer>

https://github.com/alex3165/react-mapbox-gl/blob/master/src/layer.ts#232
maybe we need to change it to const children = ([] as any).concat(this.props.children)  to allow children like [element, [list of elements]]???

https://github.com/alex3165/react-mapbox-gl/blob/master/src/layer.ts#L232 maybe this line const children = ([] as any).concat(this.props.children || []); this.props.children are type of list like [1, [2,3]]??
and it works like [].concat([1,[2,3]] || []) rather than [].concat(1,[2,3] || []) as we expected.

Hey @zh0uquan could you reproduce the issue using : https://github.com/alex3165/react-mapbox-gl-debug ? thanks

can you check this one? https://github.com/zh0uquan/react-mapbox-gl-debug/tree/master/src

https://github.com/alex3165/react-mapbox-gl/blob/master/src/layer.ts#L232
I changed the line to const children = this.props.children.reduce((arr, el)=> arr.concat(el), []), and it works for me

Oh right, I pushed a fix, have a look: https://github.com/alex3165/react-mapbox-gl/commit/d68a4343b81290178fc107c3717ccbae2dff130c can you tell me if it fixed your problem ? Then I will release and publish it.

how can I check it? I tried npm install https://github.com/alex3165/react-mapbox-gl --save, but instead i got in my react-mapbox-gl-debug folder
Failed to compile.

Error in ./src/App.js
Module not found: 'react-mapbox-gl' in /root/react-mapbox-gl-debug/src

By the way, I was trying to add onClick function to Features inside a circle type Layer, but no event is fired, is it supported or I have to hack it?

I published it, try version 1.11.0

Cool, bug fixed. Thank you :)