acquireTokenByClientCredential broken for clientCertificate

Core Library
MSAL Node (@azure/msal-node)
Core Library Version
2.8.0
Wrapper Library
Not Applicable
Wrapper Library Version
n/a
Public or Confidential Client?
Confidential
Description
I upgraded to the latest version (2.8 from 2.7) and my call to acquireTokenByClientCredential fails now.
Error Message
{
"errorCode": "invalid_client",
"errorMessage": "7000216 - [2024-05-07 15:55:13Z]: AADSTS7000216: 'client_assertion', 'client_secret' or 'request' is required for the 'client_credentials' grant type. Trace ID: d1a0baab-1cf3-4a20-a263-605f65ceb200 Correlation ID: a93c308b-63ff-4880-8d07-383a27828034 Timestamp: 2024-05-07 15:55:13Z - Correlation ID: a93c308b-63ff-4880-8d07-383a27828034 - Trace ID: d1a0baab-1cf3-4a20-a263-605f65ceb200",
"subError": "",
"name": "ServerError",
"errorNo": 7000216,
"correlationId": "2bedce44-4ef7-4752-abb9-39cfe913cea3"
}
MSAL Logs
No response
Network Trace (Preferrably Fiddler)

[ ] Sent
[ ] Pending

MSAL Configuration
const clientConfig: Configuration = {
      auth: {
                clientCertificate: {
                    thumbprint,
                    privateKey
                },
                clientId: ,
                authority
            }
        }

Relevant Code Snippets
const pca = new ConfidentialClientApplication(clientConfig);
        const clientCredentialRequest: ClientCredentialRequest = {
            scopes: ["https://graph.microsoft.com/.default"]
        };
        const newToken = pca
            .acquireTokenByClientCredential(clientCredentialRequest)

Reproduction Steps
Run the code above
Expected Behavior
A token is returned
Identity Provider
Entra ID (formerly Azure AD) / MSA
Browsers Affected (Select all that apply)
Chrome
Regression
@azure/msal-node @2.7.0
Source
External (Customer)

I have the same problem

Hi, this started happening to me and my team as well for newer builds, as a workaround we had to downgrade to version 2.6.4

get same error
ServerError: invalid_client: 7000218 - [2024-05-08 14:38:58Z]: AADSTS7000218: The request body must contain the following parameter: 'client_assertion' or 'client_secret'. Trace ID: 43aaea61-54e5-4a8f-8a14-e7e12142f800 Correlation ID: 788b70bc-ed5b-4b63-90a1-f93cf45b04f8 Timestamp: 2024-05-08 14:38:58Z - Correlation ID: 788b70bc-ed5b-4b63-90a1-f93cf45b04f8 - Trace ID: 43aaea61-54e5-4a8f-8a14-e7e12142f800

@KarishmaGhiya - please see this bug. I recommend you don't take dependency on MSAL 2.8

@ericcan @aleclair-KoAi @joaquingomez-tc @wenytang-ms I can only reproduce this issue when thumbprint and privateKey are both empty strings. Can you all doublecheck your thumbprint and privateKey values and let me know if they're empty strings or not?

Neither the privateKey or thumbprint are empty strings in my case. The exact same calls do work with 2.7.
Not sure if it's helpful, but this is some call stack info that leads to the error (it's from a bundle, so the line numbers don't mean much but I could get you some data on the specific lines if it helps track this down).
 "    at _ResponseHandler.validateTokenResponse (/var/task/index.js:14121:27)",
    "    at ClientCredentialClient.executeTokenRequest (/var/task/index.js:17286:21)",
    "    at process.processTicksAndRejections (node:internal/process/task_queues:95:5)",
    "    at async ConfidentialClientApplication.acquireTokenByClientCredential (/var/task/index.js:17572:14)"

17286 is:
responseHandler.validateTokenResponse(serverTokenResponse, refreshAccessToken);
17572 is:
return await clientCredentialClient.acquireToken(validRequest);

@Robbie-Microsoft
See this comment for a possible place that might be causing the certificate to get lost.

@Robbie-Microsoft we use msal-node to get graph token
const config = {   auth: {     clientId: clientId,     authority:https://login.microsoftonline.com/${tenantId}`,
},
};
const usernamePasswordRequest = {
scopes: ["https://graph.microsoft.com/.default"],
username: username,
// Need to encode password for special characters to workaround the MSAL bug:
// https://github.com/AzureAD/microsoft-authentication-library-for-js/issues/4326#issuecomment-995109619
password: encodeURIComponent(password),
};
const pca = new msal.PublicClientApplication(config);
const credential = await pca.acquireTokenByUsernamePassword(
usernamePasswordRequest
);
const accessToken = credential?.accessToken;
await axios.request({method: get, url: 'https://graph.microsoft.com/v1.0/users',headers: {
authorization: Bearer ${accessToken },
"content-type": "application/json",
},})
`
and get such error

@wenytang-ms - this is probably unrelated. A public client application does not need a secret or a certificate. UsernamePassword exists for both public client and for confidential client. It is disabled by default for public client. Go to the portal and enable it.
But! Please realize that UsernamePassword flow is extremely insecure and should be avoided. We only recommend using it in tests, to test web apis. Public Client (CLI, desktop apps) should use interactive authentication.

It works with @azure/msal-node 2.6.4, but doesn't work with 2.8.0, I haven't tested with other versions.
If I strictly set @azure/msal-node version to 2.6.4 in package.json, it works.
At first time, I thought it's Azure Entra ID Application configuration problem.
But for the same configuration, 2.6.4 works.

@Robbie-Microsoft

See this comment for a possible place that might be causing the certificate to get lost.

Excellent, thanks for this @ericcan . I will be working on this today.

Terrific. I did do a local fix that works and would be happy to share it, but wasn't confident that it was consistent with all the cases. Let me know if there is anything that would be helpful.

@Robbie-Microsoft

See this comment for a possible place that might be causing the certificate to get lost.

Excellent, thanks for this @ericcan . I will be working on this today.

Terrific. I did do a local fix that works and would be happy to share it, but wasn't confident that it was consistent with all the cases. Let me know if there is anything that would be helpful.

Sure, please email the fix to Bogdan and he will forward it to me. In the meantime, I'm still working on reproducing this (-_-)

@all I was able to reproduce the issue via tinkering with our unit tests and developed a fix via the linked PR. Unit tests are needed before review + merging into our dev branch. I'll be publishing a new version of msal-node with this fix either today or tomorrow.

Fixed in v2.8.1, which is now available to install.


chore: bdd-gh-1585896881 to 0.0.1

chore: Promote bdd-gh-1585896881 to version 0.0.1

[APPROVALNOTIFIER] This PR is NOT APPROVED
This pull-request has been approved by:
To fully approve this pull request, please assign additional approvers.
We suggest the following additional approvers:
If they are not already assigned, you can assign the PR to them by writing /assign  in a comment when ready.
The full list of commands accepted by this bot can be found here.
The pull request process is described here

Needs approval from an approver in each of these files:

OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment


Host/port binding and reverse proxy

Adds command line configuration options to allow specifying the IP/port to bind to (--proxy-host and --proxy-port);
Adds a command line options for activating a reverse proxy mode (i.e. forwards the requests to the same server, --reverse-proxy).

Thank you! I'll take a look and merge it on weekend.

From what I've tested it works great. Please fix mentioned docs typo and I'll merge it.

Not sure if you still want to merge this PR. Anyway, please let me know if you want me to rebase the branch.

@mhnagaoka this time it took me a while to get back to you, sorry! The answer is: yes, absolutely! However, since I had to switch to mitm-proxy in order to support HTTPS (#31 - I'll merge it this week) you should rebase against that branch. It might be a bit challenging though (not sure how reverse proxy works with mitm-proxy), so if you won't find time to do it then I'll try.

Guys, it is 2018 here :)


Do not include Facebook license on users codegen'd code

Summary
The codegen generates a Facebook copyright notice at the top of the generated files.  While this might make sense on the core files, this codegen will be run on external components too.   The notice also refers to a LICENSE file in the root of this project, which might not be there if this is run on another project.   I did a quick look at some of the codegen that we ship within windows dev tools, and it looks like we normally just have comments saying the file was codegen'd and so the file shouldn't be manually edited.
Open to suggestions on what the comment header should say.
Changelog

[General] [Changed] - Do not include Facebook license on users codegen'd code
Test Plan

Thanks for the PR. Let me run this through our OSS IP team and I'll get back to you.

@acoates-ms I've published this https://github.com/facebook/react-native/pull/32840 that is going to close this PR as it has several merge conflicts + The files inside src/generators/modules were missing. So this updates the header for all the generated files 👍


Alternatives to markdown?

I came across how-i-format-my-cpp-papers and wanted to ask if you were aware of asciidoc and other alternatives to markdown?
There is no option to comment on your blog. I thought it better to ask here rather than email you directly as it could otherwise be asked a few times.
This is not a criticism or defect report and you are of course free to use whatever you want.
You might interpret this as a feature request for a companion blog entry "why Markdown is for me?" which you are free to reject.
asciidoc, if you don't know of it, is similar to markdown but much less limiting. You can write entire books in it (it can be mapped to docbook).
I've found it a very good fit for small specifications and where I want to generate both html and PDF.
There are other alternatives as well and its quite a deep well to explore but I think its interesting when someone settles on one to understand their reasons. I've observed people often start with pure Markdown and discover the alternatives only when they get fed up with its limitations.
Coming from LaTeX the limitations must have been more visible to you at the outset which should make for an interesting perspective.

Hi Bruce, I became aware of asciidoc after I had put this framework together and
the madness of "flavors" of Markdown during.
While I find the Markdown landscape far from ideal, my perception is that at least
the basic Markdown features are better known among developers and therefore
"more approachable" than asciidoc. The limitations are currently covered by
various Pandoc Markdown extensions, which I find to be quite acceptable.
From the glimpse of asciidoc, I'm already convinced of its design and power but
I'm also convinced of the design and power of LaTeX. I might eventually decide that
even Pandoc Markdown isn't powerful enough and move to asciidoc... for now,
other users of the framework seem happy about being able to get off the ground
immediately with Markdown.


Feature/add reuse api call

@dshirley @swankjesse Please review. It's probably easiest to go commit by commit. The idea behind this change is to allow users to reuse dex classes that were created in previous app sessions, instead of the current behavior where old files in the dex cache directory are ignored. I tried to make the API as minimal as possible.

Is this a performance optimization?

This is a relatively scary change, and although it's well-written, I'm not sure it's well-motivated!
What triggers the cache to be invalidated? Ideally the output of dexmaker is a function of its input, and when the input changes, the output also changes. Stale caches are the worst, and it shouldn't be the application's job to clear 'em.
How does the application developer know to call reuse() ? Often this code is used behind a library like Mockito, and so I don't like making it the app developer's responsibility to make this decision. We should be opinionated, and make it so this thing always works, and is always on. If we can't make it always work, it's a broken feature!

I promise the change was completely well-intentioned. :)
The idea behind this change was to allow dexmaker to avoid repeating work that was done in previous app sessions for proxying classes. I think there is something to be said for that from a performance optimization standpoint; furthermore, as things stand right now, dexmaker by default would take up ever increasing disk space, as old files pile up, and so the application developer would need to know to clear that directory each time a new process is spun up for the app.
You make a very interesting point about choosing one behavior and having it be the only behavior. As you figured, that was not the way I was thinking about the feature when I implemented it. The idea was to have a fairly minimal API, and the user would have the responsibility of creating a directory structure that's easy to check for invalidation scenarios (e.g. /dxDir/versionX/). It's true that the user would need to know that the responsibility lies on his end to set up an invalidation strategy, but he would have complete flexibility in terms of how to do that.
That said, having worked with dexmaker, I am very familiar with the perils and dangers of stale caches and how confusing they can be to debug, especially for someone who is not too familiar with the internals. If we were to get rid of the reuse() call but make reuse a part of dexmaker's defined behavior, I would say the following invalidation scenarios apply:

An app is updated and it uses a new version of dexmaker. With a new version of dexmaker, it's possible that the bytecode generated for a proxy class might have changed, and so any existing code should be wiped.
Either through an OS update or an app update, the class being proxied has changed to the point where its proxied methods list is different from what it was prior to the update.

Another scenario where we would have to be careful would be when two base classes have the same name (excluding the package). I do not know that we would have to invalidate classes in that case, but we would need to check that a proxy's parent class matches the base class that was provided by the user.
I believe those scenarios cover the potential pitfalls. I'd love to hear your thoughts, and in the meantime, I'll be thinking about ways to make this workable.

Can we somehow name the generated file using a checksum of the proxied class?

I was thinking one way to implement cache validation would be to alter the naming strategy of the jar files. Right now, the naming appears to happen in DexMaker.java, and up until now, I've generally tried to avoid changing the behavior of that class. I think you would know more about this than I would, but it appears that the spot where the naming happens, DexMaker.generateAndLoad() is really only touched by ProxyBuilder (and some tests), so I imagine it would be okay to modify. Are there other dependencies, though, that I should be aware of?

@apyousef You could create a directory structure inside of the dex cache and use a naming convention for determining if/when to invalidate cache entries.  This would also help with maintaining backward compatibility with any dex cache directories that have been in use for a while.
It seems like there are two routes we can go for cache (in)validation:

A checksum as Jesse suggested.  I think that this type of mechanism could work of of checksumming the method signatures, right?  We don't actually care if the internals of a class have been modified, we only care about the public & protected interfaces to the class.

Use a combination of OS & app version.  The system classes won't change unless the OS changes... though I suppose someone could so something wonky.  There's an issue with the app version, though.  There's no rule that states that a dev has to role the version for every build.  Since that isn't enforced this probably isn't a good approach.  It still might be nice to include the Android version & app version in the file name for debugging purposes.

IIRC the method signatures are already being stored in a Set, right?  It seems like #1 would be pretty easy.


fix: enforce ploidy in GATK gCNV ploidy calling wrapper

In particular for Agilent V8, the ploidy calls were very unreliable. We need to hard-fix this in the ploidy calling to get results at all. Complementary methods must be used for checking ploidy sanity.

Coverage: 84.865%. Remained the same when pulling cd0843a51e249208e7eb160fef51f9767b842a7b on fix-gcnv-ploidy-calling into 9717be72dfb0a3536378ef726cdd93750f862e9b on main.

Coverage: 84.865%. Remained the same when pulling cd0843a51e249208e7eb160fef51f9767b842a7b on fix-gcnv-ploidy-calling into 9717be72dfb0a3536378ef726cdd93750f862e9b on main.


Add jitter for exponential backoff

It is extension to the Pr raised by @pravj and adds the jitter for the exponential backoff

@timusg We need to update the docs too

LGTM, thanks @timusg for this PR. Merging


Adding patch for ldaps concurrent failures.

As per issue #329 a race condition can occur that will emit events before the callback has had a chance to listen to them. We were able to replicate this about 60% of the time, causing timeout issues internally when in fact while looking at the trace logs, the search results returned.
Easiest to replicate with single result searches.
With these changes, we 100% verified that we no longer are missing events and it works as intended.
Thanks to @javefang for the fix!

Glad that you got this to work! Nice job, @pfmooney any chance you could take a look at this PR, please?

Any chance we can merge this PR? Without it the ldaps:// protocol is not really usable.

I have the same issue with LDAP/TLS where about 1% of the search never receive the "end" event.  This commit seems to fix the issue.

@RenEvo I will publish a fork from your repo since we need this on our project quite soon. I'll be glad to fetch your own publication if you publish it.
According to https://github.com/joyent/node-ldapjs/issues/461 , I don't expect an update on this repo.

@RenEvo I just published the ldapjs-concurrency-fix package.

@RenEvo Sorry for the delayed reply. I haven't had a chance since migrating this and several other packages over to go through all the pending merge requests and bugs, but I'd like to try to do so next week. Was there a reason you moved the writeCallback away from the .write() call? At first glance, I would expect it to not be called until the write succeeds.

The emitter was not able to be wired up properly due to not having been sent to the callback yet.
#329  explains this pretty well, the fix was to call the callback so the emitter can be listened, then actually send the request across the wire. (writeCallback, then send message)

This can be reproduced (in our case) by having an ldap search happen on a single connection through HTTP API over STARTTLS or TSL LDAP connection.

Any progress on this @melloc ?

⚠ This issue has been locked due to age. If you have encountered a recent
problem that seems to be covered by this issue, please open a new issue.
Please include a minimal reproducible example
when opening a new issue.


Possible Looser Coupling with monaco-editor

Since the last version of monaco-editor to support IE11 is 0.18.1 I cannot upgrade and therefor I am stuck with 1.7.0 of monaco-editor-webpack-plugin because of the tight coupling. However I need access to options that were introduced in 1.8.X (filename, publicPath). Shouldn't access to these options be accessible regardless of the version of monaco-editor?
I've forked locally and cherry-pick'd the commits (3bab..., dfa3...) that introduced these features to unblock myself. I imagine others will run into this limitation.

The coupling is much looser now.


GH-4 Fix scripts to properly treat special symbols in the issue body

[x] I understand that contributing to this repository will require me to agree with the CLA

Description
Single quotes in description no longer crash the workflow when piped into issue.json
What type of PR is this? (check all applicable)

[ ] 🍕 Feature
[x] 🐛 Bug Fix
[ ] 📝 Documentation Update
[ ] 🎨 Style
[ ] 🧑💻 Code Refactor
[ ] 🔥 Performance Improvements
[ ] ✅ Test
[ ] 🤖 Build
[x] 🔁 CI

Related Tickets & Documents
https://linear.app/anytype/issue/GH-4/fix-scripts-to-properly-treat-symbol-in-the-issue-body
Mobile & Desktop Screenshots/Recordings

Added tests?

[ ] 👍 yes
[ ] 🙅 no, because they aren't needed
[ ] 🙋 no, because I need help

Added to documentation?

[ ] 📜 README.md
[ ] 📓 tech-docs
[ ] 🙅 no documentation needed

[optional] Are there any post-deployment tasks we need to perform?

@any contributor @jmetrikat tooling


mono_repo pub get cant resolve relative path packages

mono_repo pub get cant get relative path packages correctly.

Could you provide more details about the setup of your repo?
Where did you run mono_repo? How are your directories configured?

It's my mistake, just close this issue.

cool!


Update/Add Xcode 15.2

Tool name
Xcode 15.2
Tool license
NA
Add or update?

[X] Add
[X] Update

Desired version
15.2 (15C500b)
Approximate size
3GB
Brief description of tool
Xcode 15.2 has been released. It contains a number of fixes that could improve the performance issues that many of us are having when running CI actions on GitHub.
URL for tool's homepage
https://developer.apple.com/download/applications/
Provide a basic test case to validate the tool's functionality.
No response
Platforms where you need the tool

[X] Azure DevOps
[X] GitHub Actions

Runner images where you need the tool

[ ] Ubuntu 20.04
[ ] Ubuntu 22.04
[ ] macOS 11
[ ] macOS 12
[X] macOS 13
[X] macOS 13 Arm64
[ ] Windows Server 2019
[ ] Windows Server 2022

Can this tool be installed during the build?
No response
Tool installation time in runtime
No response
Are you willing to submit a PR?
No response

should be fixed, sync your main.

Assuming you closed this originally because of the other 15.2 build currently being deployed. They are definitely different builds unfortunately, to the point where I would say to stop the rollout of the beta one.

Hello @erikng, xcode 15.2 will be added shortly

I've updated the xcode-version to '15.2-beta', however the xcodebuild -version is pointing to Xcode 14.3.1.
In my case this cause that builds failure because of a different swift-tool-version that i use in my project.

It seems that Xcode 15.2 is officially available for regular macOS13 machines, but it's still randomly failing for us on macos-13-xlarge machines - it works most of the time, but randomly it is not seeing the latest Xcode version.
Sometimes it uses 20240107.1 without new version and sometimes 20240114.1 with Xcode 15.2.

available now

@mikhailkoliada - Is this available? I've tried macos-latest, macos-14, and macos-13 and none of them seem to have xcode 15.
Is there some additional step I need to take in my workflow?

If you're using macos-latest as the image, that's on macOS 12.x, which does not have Xcode 15.2. You'll need to pick a macOS image that actually has Xcode 15.2 on it.
Check out which macOS image name maps to which macOS version here: https://github.com/actions/runner-images?tab=readme-ov-file#available-images
And check which Xcode is available on each macOS version here: https://github.com/actions/runner-images/blob/releases/macos-13/20240114/images/macos/macos-13-Readme.md#installed-sdks


Should FOL be run through prover to check for consistency before being released to a wider audience?

From<EMAIL_ADDRESS>on May 09, 2012 11:30:16
I think yes, but we should make a decision and then follow it.
Original issue: http://code.google.com/p/bfo/issues/detail?id=30

From<EMAIL_ADDRESS>on May 09, 2012 14:24:33
On first thought, I'd say yes.
But what, if any, are the disadvantages to using prover (do you mean prover9?) ?

From<EMAIL_ADDRESS>on May 09, 2012 18:16:09
perhaps Alan just meant theorem prover generically. P9 is an option but you'd have to convert the CLIF using some tool (I have some adhoc tools for this), and P9 may have some limitations.
HETS might be a good choice as this will maximize interoperability with bfo-owl

From<EMAIL_ADDRESS>on May 09, 2012 20:23:16
I meant a theorem prover generically. Don't know HETS. Latest version sent by Mark includes a clif format version. Chris - you should have received that email.

From<EMAIL_ADDRESS>on May 14, 2012 12:23:55
I don't think it is possible to use a reasoner on BFO-FOL as it stands...
For one thing '=df' is not a connective in FOL.
For another, the specification as it stands is incoherent.

From<EMAIL_ADDRESS>on May 24, 2012 19:17:09
HETS for Common Logic Users: https://svn-agbkb.informatik.uni-bremen.de/Hets/trunk/doc/UserGuideCommonLogic.pdf http://www.informatik.uni-bremen.de/agbkb/forschung/formal_methods/CoFI/hets/installation_e.htm Looks like a consistency check can be done by translation to the format SPASS uses.
On this page, bottom, there is a CLIF validation tool.
It says, about the most recent release by Mark: "BFO-FOL-alpha-2012-05-21.clif is valid". Woot!
Status: Accepted


enable barcode option for single-end data

minor fix, that allows for de-duplication of single-end data barcode wise. barcode option is now available for single-end data

Sorry I missed this PR last week. I took a look through it and it looks good. I've merged the PR and will be making a new release shortly with the updates.
Thanks for adding the feature!


PRL-19694 implemented dropDownList extension

Hi Alexy,
I had a talk with Davey and understood that the look and feel of the dry dock will be changed a bit after merging this ticket.
I will therefore ask you to write a small mail to me and Davey  with screenshots and working after fixing of this ticket so that we can make the customer aware of the changes .
Kind regards,
Ritu Gupta


add eslint rule to force absolute imports

Feature description
Imports should be consistent and relative imports often break when moving files
Describe the solution
Add an eslint rule like:
"no-restricted-imports": [
      "error",
      {
        "patterns": [".*"]
      }
    ],

Additional aliases in tsconfig could be added to make the absolute imports shorter.
Describe alternatives
No response
Additional context
No response
Are you working on this?
None

@rolznz I would like to work on this issue, can you assign it to me.
Thanks!

@reneaaron @bumi are you ok with going ahead to make this change?

Hey @rolznz plz assign it to me, i would luv to work on it😃😄

Sorry, we still need approval from the Alby team for this issue.

I never had real problems when moving files, but maybe I was just lucky. Would you update all files with this PR then @rolznz?


I trained sofvsr model. But how to use it to infer RGB image and save as RGB not gray?

In VSRTorch, you say SOF is Y-channel SR with depth=3.
I trained sofvsr model. But how to use it to  save result as RGB not gray in inferring RGB image process?

add --output_color=RGB when using eval.py (default is gray)

UV channel is simply bicubic resized.

When I use --output_color=RGB, Another problem:

This issue I have addressed. Thank you. It seems the result is not better than edsr.

ye


Error undefined! ShopifyAPIError

I keep getting this error: Error undefined! ShopifyAPIError Not sure why it keeps failing to upload.
Any ideas?

ping

ping

I have the same issue, anyone had any luck with this?

I think my issue is that basePath is not working.
My structure:
root
|   gulpfile.js
|___tasks
|	|___shopifyUpload.js
|___builds
|	|___remote-development  #all config, assets, layout etc...

My gulpfile
var requireDir = require('require-dir');

// Require all tasks in gulp/tasks, including subfolders
requireDir('./gulp/tasks', { recurse: true });

My shopify gulp task
var gulp = require('gulp'),
	gulpShopify = require('gulp-shopify-upload');

var options = {
  "basePath": "./builds/remote-development/+(assets|layout|config|snippets|templates|locales)/**"
};

gulp.task('shopify', function() {
	 return gulp.src('./builds/remote-development/+(assets|layout|config|snippets|templates)/**')
	 	.pipe(gulpShopify( '<<key>>', '<<pass>>', '<<url>>', null, options ));
});

I solved this, by removing the http:// I had:
.pipe(gulpShopify('API KEY', 'PASSWORD', 'http://MYSITE.myshopify.com', 'THEME ID'));
When I should have had:
.pipe(gulpShopify('API KEY', 'PASSWORD', 'MYSITE.myshopify.com', 'THEME ID'));

I am also getting this error. The above did not solve it for me.
I assume this error is returned from the Shopify API - its not very helpful in debugging the issue. If I solve it I will post it here later.

My issue was the location of my shopify files .I needed :
  var options = {         'basePath': paths.shopify     };
and pass this in  where path.shopify is a file path from for shopify files and use this option as defined in the advanced section of the readme.
.pipe(gulpShopify('API KEY', 'PASSWORD', 'http://MYSITE.myshopify.com', 'THEME ID', options));
I would suggest improving the error handling in this case.

I had this issue, my problem was with the URL.
Shopify gives you URL that has "https://", then api key, then password, and then your domain, followed by .myshopify.com.
gulp-shopify-upload doesn't want all that, it just wants your_domain.myshopify.com. No api, no password, nothing else in the link itself.
Well, that's what I had problem with. :)

Hi
I am also getting 2 errors:
Error undefined! ShopifyAPIError when we don't provide https:// in shop url
Error undefined! ShopifyConnectionError providing options or not. Not sure about the "you can change the directory from which the plugin picks up files." All folders are in the theme folder. We have an extra sass folder where we do all import and drop it in /assets.
I'm not sure if the error message is accurate, and I'm out of ideas to fix it. Any help appreciated :) Thx


Type complexity algorithm

Summary
This is a functioning type complexity analysis algorithm that passes tests up to and including with aliases. The algorithm traverses the query AST which is a bunch of nested nodes of different graphQL types. The algorithm implements a different function for each AST Node Type so that the algorithm is modular and easily extendable. To add new functionality, create a new function to handle the GraphQL Node that holds the responsibility for that functionality.
Still to do

handle arguments and variables
handle fragments
handling lists

Type of Change

[ ] New feature (non-breaking change which adds functionality)

Issues

closes #2

Evidence

Updated evidence. All tests still passing


Add a py.typed file for PEP 561 compliance

The code seems to be fully-typed, in which case a py.typed file is needed in azure/functions to mark the package as being typed.
https://www.python.org/dev/peps/pep-0561/#packaging-type-information

Thanks for reminding @brettcannon, I will add the marker in the next release.


feat(slideshow): add 'force random slideshow' feature

:tada: This PR is included in version 1.8.0 :tada:
The release is available on GitHub release
Your semantic-release bot :package::rocket:


Expose AtomicTask

This PR exposes AtomicTask as it is a generally useful API. It also removes unsafe from the API.

CI is failing due to rustc regressions:

https://github.com/rust-lang/rust/issues/43852
https://github.com/rust-lang/rust/issues/43853

Ah yeah no worries about failures on beta. Could you add a detailed comment about the concurrent behavior of park?

@alexcrichton I added additional notes to park, but I'm not sure if you had anything specific in mind.

I'm not sure if you had anything specific in mind.

Nah looks great to me, thanks!

👍


Where are the veins?

I have never been able to use the machine, I have never found a vein of minerals in the chunk, always nearby or traces, but never in the chunk so I have never been able to extract anything

Press F3+G to see chunk borders, nearby means it's in a neighboring chunk, traces is in a 2 chunk radius.


Correct Copyright Year in Footer

Describe the bug
The copyright year displayed in the footer is outdated. It currently shows [2023], and it should be updated to the current year, [2024].
Screenshots

Go ahead @AsmitaMishra24. We won't be tagging this under GSSoC since its a very small fix.

Any updates @AsmitaMishra24?


fixes git clone --bare to git clone to run npm install

removed --bare flag to clone repo and be able to run npm install issue #1272

Thanks a lot @codeandrop. LGTM

Happy to contribute @surma !


Addition of GFG API and Tour Planning Project | Issue #337

Pull Request for PyVerse 💡
Requesting to submit a pull request to the PyVerse repository.

Issue Title
Please enter the title of the issue related to your pull request.
Addition of GFG API and Tour Planning Project | Issue #337

[X] I have provided the issue title.

Name
Please mention your name.
Enter your name here.
Shariq

[X] I have provided my name.

GitHub ID
Please mention your GitHub ID.
Enter your GitHub ID here.
Shariq2003

[X] I have provided my GitHub ID.

Email ID
Please mention your email ID for further communication.
Enter your email ID here.

[ ] I have provided my email ID.

Identify Yourself
Mention in which program you are contributing (e.g., WoB, GSSOC, SSOC, SWOC).
Enter your participant role here.
GSSOC Ext

[X] I have mentioned my participant role.

Closes
Enter the issue number that will be closed through this PR.
*Closes: #337

[X] I have provided the issue number.

Type of Change
Select the type of change:

[ ] Bug fix (non-breaking change which fixes an issue)
[X] New feature (non-breaking change which adds functionality)
[ ] Code style update (formatting, local variables)
[ ] Breaking change (fix or feature that would cause existing functionality to not work as expected)
[ ] This change requires a documentation update

Checklist
Please confirm the following:

[X] My code follows the guidelines of this project.
[x] I have performed a self-review of my own code.
[X] I have commented my code, particularly wherever it was hard to understand.
[X] ] My changes generate no new warnings.
[X] I have added things that prove my fix is effective or that my feature works.
[ ] Any dependent changes have been merged and published in downstream modules.

@UTSAVS26 please merge this.

@Shariq2003 sorry but we are not merging this PR as based on new guidelines that has been shared in discussion, projects that don't have python will be removed from the repo.


feat: Liquid Insurance Funds

This PR introduces a new feature to marginfi, an ability to create and interact with a liquid insurance pool that is integrated with a bank's insurance vault. Each liquid insurance pool offers a mint token which represents shares in the pool. Users can deposit and withdraw from the pool.
This feature presents another opportunity for users to earn yield on top of marginfi.

CI is unhappy about unused variables but those should be resolved during the course of review.

Also we need to make sure we can create these insurance funds through the MS -- meaning we need to be able to use a single signature -- all new accounts need to be pdas

The basic use cases that should be covered:

User deposits, earns interest, user requests withdraw, user withdraws
User deposits, user requests withdraw, earns interest, user withdraws
User deposits, lif handles bad debt, user requests withdraw, user withdraws
User deposits, user requests withdraw, lif handles bad debt, user withdraws
User deposits, user requests withdraw, user withdraws

Thanks for the reviews. I'm mainly going through and deleting code and updating the shares model.
TODOs:

[ ] Bankruptcy handling (giving the shares a haircut in case money moves out)
[ ] Locking shares that in the process of being removed
[ ] Use only PDAs to derive related addresses, instead of storing them in lif state
[ ] Add seeds to the lif state
[ ] Support multiple lif withdrawals

Closed in favor of #215


Interest in Token Pooling?

Hi team!
We ran an eval experiment implementing this: https://www.answer.ai/posts/colbert-pooling.html in ColiVara on top of the embeddings generated by this package (v0.3.4), and the results were basically <1% loss, 60-70% less embeddings (speeds up AND storage savings) at Pooling Factor of 3.  So, pretty impressive.
Details on our evals here: https://blog.colivara.com/unlocking-70-faster-response-times-through-token-pooling#heading-hierarchical-clustering-token-pooling
It is pretty simple to implement and I am happy to open a PR and put a function in the utils to implement. Here is what it will look like from the user standpoint (continuing on the example in the readme):
from colpali_engine.utils import pool_embeddings

with torch.no_grad():
    image_embeddings = model(**batch_images)
    query_embeddings = model(**batch_queries)

# one third less embeddings. Everything else is the same
pooled_image_embeddings = pool_embeddings(image_embeddings, pool_factor=3)

And here is the actual function:
def pool_embeddings(embeddings_list: List[torch.Tensor], pool_factor: int = 3) -> List[List[List[float]]]:
    """
    Reduces number of embeddings by clustering similar ones together for multiple sets of embeddings.

    Args:
        embeddings_list: List of image embeddings, where each embedding is of shape (N, 128)
        pool_factor: Factor by which to reduce the number of embeddings

    Returns:
        List of pooled embeddings for each input embedding set
    """
    pooled_results = []

    for embeddings in embeddings_list:
        # Process each set of embeddings separately

        # Step 1: Calculate similarity between all vectors
        similarities = torch.mm(embeddings, embeddings.t())

        # Step 2: Convert to distances
        distances = 1 - similarities.cpu().numpy()

        # Step 3: Calculate target number of clusters
        target_clusters = max(embeddings.shape[0] // pool_factor, 1)

        # Step 4: Perform hierarchical clustering
        clusters = linkage(distances, method="ward")
        cluster_labels = fcluster(clusters, t=target_clusters, criterion="maxclust")

        # Step 5: Average embeddings within each cluster
        pooled = []
        for cluster_id in range(1, target_clusters + 1):
            mask = cluster_labels == cluster_id
            cluster_embeddings = embeddings[mask]
            cluster_mean = cluster_embeddings.mean(dim=0)
            pooled.append(cluster_mean.tolist())

        pooled_results.append(pooled)

    return pooled_results

Happy to open the PR if there is interest :)

Hi @Jonathan-Adly, thank you so much for you message 👋🏼
Token pooling is already supported in vidore-benchmark, and I believe it's best to keep colpali-engine minimal, i.e. the bare model implementation! However, I agree token pooling deserves to be highlighted in the README so that more people can be aware of this great technique 👍🏼


DocumentDB: nil pointer in generated code

Describe the bug
When generating the respective controller for DocDB DBInstance the external type is defined containing a field filterList in zz_controller.go.
However, in newExternal this field is never set to its default value nopFilterList. Causing a
panic when called in Observe in line 86 resp = e.filterList(cr, resp).
When the default value is added to newExternal the error disappears:
e := &external{
		kube:           kube,
		client:         client,
		preObserve:     nopPreObserve,
		postObserve:    nopPostObserve,
		lateInitialize: nopLateInitialize,
		isUpToDate:     alwaysUpToDate,
		preCreate:      nopPreCreate,
		postCreate:     nopPostCreate,
		preDelete:      nopPreDelete,
		postDelete:     nopPostDelete,
		preUpdate:      nopPreUpdate,
		postUpdate:     nopPostUpdate,
		filterList:     nopFilterList,  <---------
	}

Steps to reproduce

Generate a controller for Crossplane provider-aws using

go run -tags codegen cmd/ack-generate/main.go crossplane docdb --provider-dir ../provider-aws

Run generated controller without setting filterList in your connector opts

Expected outcome
nopFilterList should be called if not configured differently in opts.
Environment

Kubernetes version: v1.18.9-eks-d1db3c
Using EKS eks.3
AWS service targeted: DocumentDB

@muvaf ping on this. fancy having a look into it in your morning?

It's a small fix in Crossplane template, https://github.com/aws-controllers-k8s/code-generator/pull/24 takes care of it. Thanks @MisterMX for letting us know!


Using required_if in a MediaType causes doc generation to fail

When generating docs I get this error:
Attributor::AttributorException: No AttributeResolver set.

Only happens if the required_if option is specified.


Remove unused params from apiloader.LoadContainerServiceFromFile

The only place we use LoadContainerServiceFromFile is in cmd/generate.go, with this call:
apiloader.LoadContainerServiceFromFile(gc.apimodelPath, false, false, nil)
Since "validate", "isUpdate" params are always false and existingContainerService is always nil, we can simplify the code a lot.

/lgtm


[Event Request] Table 37 Sales Line - OnValidate "Purchasing Code" - OnValidatePurchasingCodeOnAfterCalcShouldAssignValuesFromPurchasingCode

Please add an Event OnValidatePurchasingCodeOnAfterCalcShouldAssignValuesFromPurchasingCode in OnValidate "Purchasing Code" in Table 37 Sales Line
[Event Request] Table 37 - Sales Line - OnValidate "Purchasing Code"
field(5711; "Purchasing Code"; Code[10])
{
    AccessByPermission = TableData "Drop Shpt. Post. Buffer" = R;
    Caption = 'Purchasing Code';
    TableRelation = Purchasing;

    trigger OnValidate()
    var
        PurchasingCode: Record Purchasing;
        ShippingAgentServices: Record "Shipping Agent Services";
        IsHandled: Boolean;
        ShouldAssignValuesFromPurchasingCode: Boolean;
    begin
        IsHandled := false;
        OnBeforeValidatePurchasingCode(Rec, IsHandled);
        if IsHandled then
            exit;

        TestStatusOpen();
        TestField(Type, Type::Item);
        CheckAssocPurchOrder(FieldCaption("Purchasing Code"));

        ShouldAssignValuesFromPurchasingCode := PurchasingCode.Get("Purchasing Code"; // <-- NEW VARIABLE
        OnValidatePurchasingCodeOnAfterCalcShouldAssignValuesFromPurchasingCode(Rec, ShouldAssignValuesFromPurchasingCode); // <-- NEW EVENT
        if ShouldAssignValuesFromPurchasingCode then begin // <-- NEW CONDITION

            "Drop Shipment" := PurchasingCode."Drop Shipment";
            "Special Order" := PurchasingCode."Special Order";
        ...

[IntegrationEvent(false, false)]
local procedure OnValidatePurchasingCodeOnAfterCalcShouldAssignValuesFromPurchasingCode(var SalesLine: Record "Sales Line"; var ShouldAssignValuesFromPurchasingCode: Boolean)
begin
end;

Thanks for reporting this. We agree, and we’ll publish a fix asap, either in an update for the current version or in the next major release. Please do not reply to this, as we do not monitor closed issues. If you have follow-up questions or requests, please create a new issue where you reference this one.
Build ID: 47021.


New Patch feature and Developer App

I haven't tested the Patch feature with a standalone app yet, only with Developer App. I noticed that once the patch is applied, it stays there permanently, even after I refresh my instance or restart the Developer App.
For example, my original app has tabris.ui background set as blue in my app.js. After I applied a patch to replace my app.js to set the background to black, there doesn't seem to be a way to revert my patch and reset my app.js. Whatever changes I make to my original app.js no longer seems to take effect as the patched app.js always seems to take precedence even when I subsequently turned off my patch feature. The only way I could make it right again is to rename my app.js to another name and update my package.json to point to it.

Patches are kept and applied based on the URL. If you open another snippet from the same URL, the patch will be applied. The only way of getting rid of it is to clear the Developer App's data or to re-install the Developer App.
Closing as a dup of #553. Let's continue there.


Add truncating version of Slice#{copy,move}_{from,to}

Got the idea from https://gitter.im/crystal-lang/crystal?at=5e59a809b873303e276d8be8
src = Slice[41, 42, 43, 44, 45, 46]
dest = Slice[0, 0, 0]

dest.copy_from src  # raises IndexError
dest

https://carc.in/#/r/8nb4
~I would expect the result to be Slice[41, 42, 43] instead of raising.~
Actually it seems to be the expected behavior: https://github.com/crystal-lang/crystal/issues/4262
The IndexError is because dest.copy_from(src) is implemented as src.copy_to(dest) which does a size check to ensure dest.size is at least src.size.
I suggest to add a truncate argument, defaulting to false to avoid breaking changes (like: small_slice.copy_from(bigger_slice, truncate: true)) to:

copy_to
copy_from
move_to
move_from

Note: This was also suggested by @RX14 here: https://github.com/crystal-lang/crystal/issues/4262#issuecomment-292802287

As a workaround there is another overload to specify the count of elements to copy, but it accepts a raw pointer and a count, not a slice and a count, which exposes "unsafe" code in user code.
We could also add a Slice#copy_from(source : self, count) overload to accept a slice and a count for Slice#{copy,move}_{from,to}, do I make another issue for this?

The behavior is intentional. This is to make sure you know what you are copying, a d how much you are copying.


VSCode Extention Update and OpenVSX Integration

Feature Request
The repo that is connected to VS MarketPlace is archived. I think connection should renew with this repo or else.
In addition,  to open source community especially for Codium users this extension also should be in OpenVSX
Please add the corresponding labels to the issue.
--> ecosystem
Implement Suggestion
This guide can be followed

Updated the vscode extension but haven't yet done the openvsx integration

Any think new about the OpesVSX publish?
It is possible to manual download and installing the extension for now?


Always list authenticaton and payout address explicitly when displayed in output.

Users are confused about the address listed (authentication vs payout address). If and address is shown in the output it must be explicitly declared which one it is.

Made use output more clear, see https://github.com/Storj/dataserv-client/commit/7eba725d47a6511f9e191e78718a4eb4c3221a62 and https://github.com/Storj/dataserv-client/commit/c11b00756180ccbef087d20092637a8d236f91a4


i keep gettings this error

Your Chrome driver failed to initialize. Could you share the errors from the latest log file? in  ..\logs\programs

EsportsHelperV2.4.0_08.12_03-03.log

2024-08-12 03:03:36,213 INFO: -----------------------------------------------------------------------
2024-08-12 03:03:36,214 INFO: ---------------------- Program started 2.4.0   -----------------------
2024-08-12 03:03:36,214 INFO: ---------------------- Open Source on github  ----------------------
2024-08-12 03:03:36,214 INFO: ------- Address: https://github.com/Yudaotor/EsportsHelper ------
2024-08-12 03:03:36,215 INFO: ---------------- Please give me a star,Thanks(^_^)  ---------------
2024-08-12 03:03:36,215 INFO: -----------------------------------------------------------------------
2024-08-12 03:03:36,673 INFO: Parameter file successfully imported.
2024-08-12 03:03:37,688 INFO: ====== WebDriver manager ======
2024-08-12 03:03:38,801 INFO: Get LATEST chromedriver version for google-chrome
2024-08-12 03:03:38,801 INFO: Get LATEST chromedriver version for google-chrome
2024-08-12 03:03:38,802 INFO: There is no [win64] chromedriver "127.0.6533.100" for browser google-chrome "127.0.6533.100" in cache
2024-08-12 03:03:38,802 INFO: Get LATEST chromedriver version for google-chrome
2024-08-12 03:03:39,089 INFO: WebDriver version 127.0.6533.99 selected
2024-08-12 03:03:39,093 INFO: Modern chrome version https://storage.googleapis.com/chrome-for-testing-public/127.0.6533.99/win32/chromedriver-win32.zip
2024-08-12 03:03:39,093 INFO: About to download new driver from https://storage.googleapis.com/chrome-for-testing-public/127.0.6533.99/win32/chromedriver-win32.zip
2024-08-12 03:03:39,270 INFO: Driver downloading response is 200
2024-08-12 03:03:41,367 INFO: Get LATEST chromedriver version for google-chrome
2024-08-12 03:03:41,536 INFO: Driver has been saved in cache [.\driver.wdm\drivers\chromedriver\win64\127.0.6533.100]
2024-08-12 03:03:43,571 INFO: Using default port 9222
2024-08-12 03:03:43,575 INFO: Preparing...
2024-08-12 03:03:43,578 INFO: patching driver executable .\driver.wdm\drivers\chromedriver\win64\127.0.6533.100\chromedriver-win32/THIRD_PARTY_NOTICES.chromedriver.exe
2024-08-12 03:03:43,583 ERROR: ++++++++++++++++++++++++++++++++++++++++++++++++++
Traceback (most recent call last):
File "main.py", line 38, in initWebdriver
File "Webdriver.py", line 167, in createWebdriver
File "undetected_chromedriver_init_.py", line 246, in init
File "undetected_chromedriver\patcher.py", line 99, in auto
File "undetected_chromedriver\patcher.py", line 217, in patch_exe
FileNotFoundError: [Errno 2] No such file or directory: '.\driver\.wdm\drivers\chromedriver\win64\127.0.6533.100\chromedriver-win32/THIRD_PARTY_NOTICES.chromedriver.exe'

I believe this issue is related to Issue #137.
To resolve this, please follow these steps:

Navigate to the following path: .\driver.wdm\drivers\chromedriver\win64\127.0.6533.100\chromedriver-win32
Rename the file chromedriver.exe to THIRD_PARTY_NOTICES.chromedriver.exe

Please let me know if this solution works for you.

Relevant Information:
This issue is likely caused by an older version of webdriver_manager. Upgrading to the latest version should resolve it. For more details: webdriver_manager Issue #663.

that fixed it thanks <3

that fixed it thank you

is there is no permeant fix for this issue
i have to change name every time there is update :(

@NaniDaFuck
Based on the issue I linked earlier, I assume that updating webdriver_manager to version 4.0.2 in the requirements.txt file might resolve the problem. After updating the file, try running the following command in the root directory:
python -m pip install -r requirements.txt
This should help, but please let me know if the issue persists.

@NaniDaFuck
Based on the issue I linked earlier, I assume that updating webdriver_manager to version 4.0.2 in the requirements.txt file might resolve the problem. After updating the file, try running the following command in the root directory: python -m pip install -r requirements.txt
This should help, but please let me know if the issue persists.

thank you.i also fixed this issue by following your steps


actions.reverse()  actions is not defined

Hello
I installed lfm to laravel 5.8 on local LAMPP.
And I can't see any files & folders
Browser console write me:

laravel-filemanager:1 A cookie associated with a cross-site resource at http://cloudflare.com/ was set without the SameSite attribute. A future release of C

hrome will only deliver cookies with cross-site requests if they are set with SameSite=None and Secure. You can review cookies in developer tools under Application>Storage>Cookies and see more details at https://www.chromestatus.com/feature/5088147346030592 and https://www.chromestatus.com/feature/5633521622188032.
laravel-filemanager:583` Uncaught ReferenceError: actions is not defined
at HTMLDocument.<anonymous> (laravel-filemanager:583)
at j (jquery.js:3143)
at Object.fireWith [as resolveWith] (jquery.js:3255)
at Function.ready (jquery.js:3467)
at HTMLDocument.J (jquery.js:3498)

Please, help me find solution!

[583]  actions.reverse().forEach(function (action) { //Uncaught ReferenceError: actions is not defined
$('#nav-buttons > ul').prepend(
$('').addClass('nav-item').append(
$('').addClass('nav-link d-none')
.attr('data-action', action.name)
.attr('data-multiple', action.multiple)
.append($('').addClass('fas fa-fw fa-' + action.icon))
.append($('').text(action.label))
)
);
});

Hello,
it happened to me when I updated to 2.0, maybe is it your case?
I forced to refresh published files with php artisan vendor:publish --all --force and it worked for me
regards

Thanks, worked for me @pabloperezromani

Hello,
it happened to me when I updated to 2.0, maybe is it your case?
I forced to refresh published files with php artisan vendor:publish --all --force and it worked for me
regards

this is very dangerous, be careful else you will loose a lot of work


啥时候出1.5版本

Why you need it?
Is your feature request related to a problem? Please describe in details
How it could be?
A clear and concise description of what you want to happen. You can explain more about input of the feature, and output of it.
Other related information
Add any other context or screenshots about the feature request here.

年后


Logo Design

Hi @walmik, so I would like to know if you have something in your mind for this logo, any ideas?
Scribbletune it´s a project to create music with JavaScript, right?
Can you tell me o more to get inspired.
Greetings!

Thank you @zuurw for offering your creativity for the logo of this project.
This project started a while ago to solve a personal problem. While creating electronic dance music I found myself repeating too many steps again and again for every track. In electronic dance music, as you might know, there are a lot of repeating elements in the track. It's loop based music to a large extent. I wanted to programmatically get done with the common elements which are so pattern based so that I could focus more on the melodies and such. From there it went on to become much more than that.
Initially it was a terminal based Node module where it would export MIDI files using an existing project called jsmidgen using a simple pattern language I created  (it s made of x, - and _) . These MIDI files would then be required to be imported into a music production software like Ableton Live. This functionality still exists and I continue to use it myself even today. But earlier this year I got interested in another project called Tone.js and saw that one can play MIDI data right in the browser, thanks to the WebAudioAPI Hence I used Tone.js to provide that functionality via Scribbletune to the browser as well. Now users can create musical ideas using the same pattern language that I had created to create loops in the browser. Then I also added functionality such that developers can create music production software in the browser itself. So in a way Scribbletune (I use it as one word) is a library to enable the creation of music with JavaScript in the terminal and the browser.
The goal is to come to a point where you dont need any software or hardware or even instruments to create music. Just code away to glory! :D
Here are a coupla links of the talks I gave (it should give you a very good idea what scribbletune is all about). The first one is when scribbletune was just a terminal based module and the second one is when I added browser support:

SF Node 2017 at Github's SF office
JS.LA 2018 at Smarket's LA office

Hey @walmik, I saw your videos and this project it´s really amazing, like it very much!
For this design I will focus on what this project does, which is to create dance music.
Do you have any special requests for the logo?

Hey @walmik, I saw your videos and this project it´s really amazing, like it very much!
For this design I will focus on what this project does, which is to create dance music.
Do you have any special requests for the logo?

Hello @walmik, I start to design something for this project and create this, see if you undestand the concept :)

Hi @walmik I create this variation of the logo, what do you think?

HI @zuurw I am thankful to you for putting so much time and effort on this.
Though I m not so sure if we should add more shape elements to the logo. From your initial design I had liked the vertical lines with the rectangles in them that suggested settings or patterns. It also reminded me of a piano roll of a music software (and that s very close to what Scribbletune ultimately generates). This is how a piano roll looks

If I had to chose just one from so many wonderful options from you then I d chose the option presented on the bottom left corner of your initial design. I m not completely sure bout the phonograph record, but from a broad perspective, it might just be in the right direction.
Having said all that, I d rather depend on your judgement coz you are clearly an artist :)

I create this version with piano keys

after the last version I try to put the logo in a square shape and I like more this version.
And you can make nice variations of the logo.
See if you like it.

HI @zuurw, I do like this square shaped variations too. All 4 options are great!

Hi @walmik I create the PR.

Hi @walmik
Did you see the PR, is there something wrong?
Best Regards!

Hi @walmik
Do you need more help? do yo have any other projects to work?
Best Regards!

Hi @zuurw I ve started putting together a design for scribbletune.com where i intend to use the logo you created. You can take a look at the preliminary stuff I ve put together (I generally dont have much free time hence development is slow - but I ve started publishing whatever is ready - I still havent put a "About" page where I ll put your name in the credits but I ll do that in the coming week)
Lemme know what you think http://scribbletune.com/


Update Twilio SDKs (0.17.1/0.12.1)

The latest IOS SDKs fixes some push notification problems.
Also, I did same change to Android SDK...

Thanks! I tried bumping the podspec and build.gradle files but didn't have access... they should be like this.
ios/RCTTwilioChat.podspec
  s.version      = "0.1.1"

android/build.gradle
defaultConfig {
  minSdkVersion 19
  targetSdkVersion 23
  versionCode 11
   versionName "0.1.1"
}

Example/package.json
// replace react-native-twilio-ip-messaging
"dependencies": {
  "react-native-twilio-ip-chat": "^0.1.1"
}

Hi @bradbumbalough, I've changed the version numbers in the files you've mentioned. Hope I didn't miss anything.
~Cheers

Released in 0.3.0.


[Snyk] Upgrade org.slf4j:slf4j-log4j12 from 1.7.30 to 1.7.36

This PR was automatically created by Snyk using the credentials of a real user.Snyk has created this PR to upgrade org.slf4j:slf4j-log4j12 from 1.7.30 to 1.7.36.
:information_source: Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

The recommended version is 6 versions ahead of your current version.
The recommended version was released 2 years ago, on 2022-02-08.

The recommended version fixes:

Severity
Issue
PriorityScore (*)
Exploit Maturity

Deserialization of Untrusted Data SNYK-JAVA-LOG4J-2342647
166/1000  Why? Confidentiality impact: High, Integrity impact: High, Availability impact: High, Scope: Unchanged, Exploit Maturity: No data, User Interaction (UI): None, Privileges Required (PR): None, Attack Complexity: High, Attack Vector: Network, EPSS: 0.0079, Social Trends: No, Days since published: 635, Reachable: No, Transitive dependency: Yes, Is Malicious: No, Business Criticality: High, Provider Urgency: High, Package Popularity Score: 99, Impact: 9.79, Likelihood: 1.69, Score Version: V5
No Known Exploit

Denial of Service (DoS) SNYK-JAVA-LOG4J-3358774
166/1000  Why? Confidentiality impact: High, Integrity impact: High, Availability impact: High, Scope: Unchanged, Exploit Maturity: No data, User Interaction (UI): None, Privileges Required (PR): None, Attack Complexity: High, Attack Vector: Network, EPSS: 0.0079, Social Trends: No, Days since published: 635, Reachable: No, Transitive dependency: Yes, Is Malicious: No, Business Criticality: High, Provider Urgency: High, Package Popularity Score: 99, Impact: 9.79, Likelihood: 1.69, Score Version: V5
No Known Exploit

Deserialization of Untrusted Data SNYK-JAVA-LOG4J-572732
166/1000  Why? Confidentiality impact: High, Integrity impact: High, Availability impact: High, Scope: Unchanged, Exploit Maturity: No data, User Interaction (UI): None, Privileges Required (PR): None, Attack Complexity: High, Attack Vector: Network, EPSS: 0.0079, Social Trends: No, Days since published: 635, Reachable: No, Transitive dependency: Yes, Is Malicious: No, Business Criticality: High, Provider Urgency: High, Package Popularity Score: 99, Impact: 9.79, Likelihood: 1.69, Score Version: V5
Proof of Concept

SQL Injection SNYK-JAVA-LOG4J-2342645
166/1000  Why? Confidentiality impact: High, Integrity impact: High, Availability impact: High, Scope: Unchanged, Exploit Maturity: No data, User Interaction (UI): None, Privileges Required (PR): None, Attack Complexity: High, Attack Vector: Network, EPSS: 0.0079, Social Trends: No, Days since published: 635, Reachable: No, Transitive dependency: Yes, Is Malicious: No, Business Criticality: High, Provider Urgency: High, Package Popularity Score: 99, Impact: 9.79, Likelihood: 1.69, Score Version: V5
No Known Exploit

Deserialization of Untrusted Data SNYK-JAVA-LOG4J-2342646
166/1000  Why? Confidentiality impact: High, Integrity impact: High, Availability impact: High, Scope: Unchanged, Exploit Maturity: No data, User Interaction (UI): None, Privileges Required (PR): None, Attack Complexity: High, Attack Vector: Network, EPSS: 0.0079, Social Trends: No, Days since published: 635, Reachable: No, Transitive dependency: Yes, Is Malicious: No, Business Criticality: High, Provider Urgency: High, Package Popularity Score: 99, Impact: 9.79, Likelihood: 1.69, Score Version: V5
No Known Exploit

Arbitrary Code Execution SNYK-JAVA-LOG4J-2316893
166/1000  Why? Confidentiality impact: High, Integrity impact: High, Availability impact: High, Scope: Unchanged, Exploit Maturity: No data, User Interaction (UI): None, Privileges Required (PR): None, Attack Complexity: High, Attack Vector: Network, EPSS: 0.0079, Social Trends: No, Days since published: 635, Reachable: No, Transitive dependency: Yes, Is Malicious: No, Business Criticality: High, Provider Urgency: High, Package Popularity Score: 99, Impact: 9.79, Likelihood: 1.69, Score Version: V5
Proof of Concept

Man-in-the-Middle (MitM) SNYK-JAVA-LOG4J-1300176
166/1000  Why? Confidentiality impact: High, Integrity impact: High, Availability impact: High, Scope: Unchanged, Exploit Maturity: No data, User Interaction (UI): None, Privileges Required (PR): None, Attack Complexity: High, Attack Vector: Network, EPSS: 0.0079, Social Trends: No, Days since published: 635, Reachable: No, Transitive dependency: Yes, Is Malicious: No, Business Criticality: High, Provider Urgency: High, Package Popularity Score: 99, Impact: 9.79, Likelihood: 1.69, Score Version: V5
No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.
For more information:
🧐 View latest project report
🛠 Adjust upgrade PR settings
🔕 Ignore this dependency or unsubscribe from future upgrade PRs

Fixed in release 1.0.8:  https://github.com/Neotys-Labs/Apache-JMeter/commit/70dbc597ddbdf92db4b95828e8eff21c101d6061


Fix some status codes to match spec

CC @ejona86

a link to the spec?

https://github.com/grpc/grpc/blob/master/doc/statuscodes.md

ping


I saw something: broken boundary relations

heya,
I've been trying to extract boundary:administrative data from our PBF metro extracts and found that either all, or some of the members are missing from the relation.
An example would be http://www.openstreetmap.org/relation/1638991 which contains 43 outer members.
In the old metro extracts (wellington_new-zealand.osm.pbf) only 25 of the members were referenced, so unfortunately the polygon was invalid due to it not being able to close properly using the data available in the PBF file.
In the new metro extracts, all the members have been removed except for the admin_centre node.
The wiki for boundary says that a relation marked as boundary:* should have at least one member with the role of outer.
I understand that including all the member data in each extract would frequently include a bunch of data outside the bbox and could potentially recurse to include the whole planet file!!
Is it possible to do one of the following?

completely exclude these relations from the extract
change the relation tags so that tools consuming the extracts know how to behave
convert the relation to a node (as per osmconvert --all-to-nodes)

Good question; I’m a bit removed from the underlying OSM mechanics of this. I believe @heffergm created the underlying extract service, and would be able to answer any questions about possible differences between these new extracts and the older, weekly ones.

All the osmconvert code amongst the two systems is identical in function. All the ODES code was heavily borrowed (read largely cut/paste) from the old metroextractor system.
... except the hash-memory fix that snuck into the old system didn't get ported over, so I'll add that now. It may have an impact, although I'm somewhat doubtful given the size of the extracts in question. But if you want to re-cut an extract @missinglink, let me know if it looks any different.
We've tried all kinds permutations of messing with including/excluding nodes. There are fundamental, systemic reasons we can't allow recursion (OOM) and at the end of the day every time we seem to choose one way, we get complaints about having preferred the other. I'm happy to change it to anything (provided it still functions) but at the rate it's happened in the past, I expect someone to ask me to switch it back (or to something else) within a few months.

here some hard data:
for sake of simplicity, in my examples I used way elements which are part of a relation in the file.
the problem effects any element with member elements, so both way and relation element types.
old extracts
$ wget https://s3.amazonaws.com/metro-extracts.mapzen.com/new-york_new-york.osm.pbf

$ ls -lah new-york_new-york.osm.pbf
-rw-rw-r-- 1 peter peter 79M Aug 13 14:53 new-york_new-york.osm.pbf

$ shasum new-york_new-york.osm.pbf
428d95b58dad852bee12c299d8c7e0eaa9ab50b3  new-york_new-york.osm.pbf

I found the following ways using a script I wrote (it's only looking at ways which are a member of a relation with a single node ref):
way 24315304 only has 1 ref
way 242967138 only has 1 ref
way 37788892 only has 1 ref
way 242967138 only has 1 ref
way 37788892 only has 1 ref
way 37561688 only has 1 ref
way 37788892 only has 1 ref
way 37788892 only has 1 ref
way 242967138 only has 1 ref
way 37788892 only has 1 ref
way 242967138 only has 1 ref
way 37788892 only has 1 ref
way 24315304 only has 1 ref

which can be confirmed with osmconvert:
$ osmconvert --out-osm new-york_new-york.osm.pbf | grep -A6 24315304
	<way id="24315304" version="12" timestamp="2013-10-05T18:00:30Z" changeset="18199919" uid="113450" user="nfgusedautoparts">
		<nd ref="263599185"/>
		<tag k="source" v="county_import_v0.1_20080508235456"/>
		<tag k="boundary" v="administrative"/>
		<tag k="admin_level" v="6"/>
		<tag k="border_type" v="county"/>
	</way>

compared to the source http://www.openstreetmap.org/way/24315304 you can see that this way is having members truncated (1 node ref vs. 4 refs)
this is a similar issue to what I reported about the relations but not as severe, for road segments it's not a huge deal but for polygons it converts them to linestrings or cuts holes in them which is completely corrupting the data.
ways with a single node should definitely be removed from the extract as they are essentially just a single point, i'm not sure how GIS systems will handle this sort of thing, in this case it's actually supposed to be a county polygon.
new extracts
I created a custom extract 8ecf227e2bae by dragging the bbox to visually match the bbox of the 'popular extract' and it contained the same amount of errors as the old extract above.
geofabrik
I also tried running my script against a small extract from geofabrik and found that they are also including relation members in their country extracts but do not include the corresponding way entries in the file:
$ wget http://download.geofabrik.de/europe/andorra-latest.osm.pbf

$ shasum andorra-latest.osm.pbf
56c4d3cc54d7e9fcda2c8706c00127691487d132  andorra-latest.osm.pbf

way 45356002 not found in extract
way 45356023 not found in extract
way 45356009 not found in extract
... many more

$ osmconvert --out-osm andorra-latest.osm.pbf | grep 45356002
		<member type="way" ref="45356002" role="outer"/>
		<member type="way" ref="45356002" role="outer"/>
		<member type="way" ref="45356002" role="outer"/>

... 3x references in a relation but no actual way data in the file

I hate to be the bearer of bad news but it seems that both the mapzen and geofabrik extracts contain truncated or corrupted entities.
There is also a bunch of data that could be removed to thin them down, depending on the use-case.
I got frustrated, so I wrote a linter https://github.com/missinglink/pbflint which you can use to validate the extracts, it's not feature complete but it's good enough for now to find some of the invalid entities.
re: your comment @heffergm:

every time we seem to choose one way, we get complaints about having preferred the other

I know what you mean, it's probably down to the way that people use the data, for the purposes of display the truncated road segments are probably fine, it's possible that the road finishes slightly before the extract border but that's not a huge deal.
The things is, for analytical and data science purposes the extracts are not valid because they mutate the source data, this is a big problem and there is no indication in the file which entities have been mutated and which have not.
I see a 4 different options when dealing with entity relationships:

recurse and include all the things.
remove nodes/ways which do not lie inside the bbox, do not update the way refs/relation members
remove nodes/ways which do not lie inside the bbox, update the way refs/relation members
remove nodes/ways which do not lie inside the bbox, remove any elements which reference them

no 1. would be my preference but due to the OOM errors this is probably not going to work at scale.
no 2. is what geofabrik does, this bloats the file with a bunch of invalid elements and makes it hard to parse.
no 3. is what mapzen does, this mutates and invalidates records, deleted edges from polygons and does not reproduce the data verbatim.
no 4. would be a better solution as the entities inside would be valid and copied verbatim, the downside is that roads which exited the bbox would not be included at all.
thoughts?

It sounds like you're the expert, so you tell me ;)
What I can point to is what we're doing now, which in the case of PBF extracts is this (I think we're talking about pbf, yes?): https://github.com/mapzen/chef-mapzen_odes/blob/master/templates/default/extracts.sh.erb#L5
Note --drop-broken-refs.
The short of it is, if osmconvert supports it, I can have it to whatever you'd prefer.

ha! yea I'm becoming quite the expert :)
so you feed the exporter data/planet.o5m and then it cuts the extracts from that? is it possible that we cut from a postgres database export instead?
i'll have a look in to the settings for osmconvert and run the linter against the output, worst case scenario we have to write something custom.

The short answer is no, not without completely re-architecting the entire thing...
We do currently use postgres, but only to produce shp files (the extracts we cut from the planet file are loaded into postgres then dumped as shapes).

right, so I slept on this and I have figured out a way producing valid extracts using option 1. without having memory issues and which can cut smaller extracts in under a minute.
the idea is to use option 1, which recurses and includes ways/relations that are only partially inside the bbox (with the exception of super relations) and then; since they are valid for all child bboxes, we can just use any larger extract to produce the smaller ones. Eg. use new_zealand to cut wellington.
@migurski if you want to take this further let me know and we can set up a video call


Expected release

Hi,
Could you please advise when you'll be publishing the first release?
Thank you.

Hi @radumamy,
Thanks a lot for your interest into my project, it's very much appreciated :)
So far, I was first focusing on the desktop version where I need to build the base with electron and the clamscan library written in NodeJS.
For now the desktop version is only scanning the folder from where it is loaded on boot without no real interface written yet.
But I can probably try to write a minimal PHP version that you could easily setup on a web server 🤔 I'm open to suggestions!
In this case, I'd probably create a separate project, let's say clamav-web if the name is not already taken and host all the backend code in PHP first and then later in NodeJS if possible and keep the clamav-webui project to host the frontend code for both clamav-web and clamav-desktop...
I'm pretty busy with my daily job actually but I'll try my best to release something in the coming weeks 😉
Please, feel free to put here some visual interface suggestions if you already have some in mind, it will be much appreciated!

@radumamy, the name clamav-web was available so I've created the clamav-web project to host the backend code as said previously.

+1 for a php version ... missing on Qnap NAS ... following this project as well

@Jiab77
Thanks for setting this up. I am personally looking for an End Point protection dashboard for Linux/Unix, similar to MS ATP. The dashboard would use clamav as the agent running on end points/instances, so multiple instances could be monitored. In the future more agents/modules could be added (e.g. rkhunter) for a complete security solution. That might be a lot to ask, but there is definitely something like this missing in the open source community.

@radumamy, You're very welcome, I'm very happy to see that some of my projects can be interesting for someone else!
Thanks a lot for your suggestions, I've checked the dashboards and I see what you mean. I think I can try to make something similar but as I'm not the best coder neither I hope some others will be interested to contribute and improve this project too.
About the monitoring part, maybe it would be better to create monitoring plugins for ClamAV and/or RKHunter that could be used in Netdata as everything is already built and you could also use it to monitor many other things in your infra.
But the idea to manage several ClamAV instances is not bad at all! I'll keep it in mind when building the project structure. 👍🏽
Anyway, you're right it's a lot of work but I'll try my best to make it even if I'm already pretty busy with my daily job 😅

@nephaste, thanks a lot for your input about Qnap NAS's! Do you mean you would integrate it in the NAS or in the dashboard? or make it running as a Docker container for example?
Anyway, many thanks for your interest for my project too as well! Keep watching it, you guys gave me some nice ideas and energies 😁

@nephaste, thanks a lot for your input about Qnap NAS's! Do you mean you would integrate it in the NAS or in the dashboard? or make it running as a Docker container for example?
Anyway, many thanks for your interest for my project too as well! Keep watching it, you guys gave me some nice ideas and energies 😁

Thank you... I am third part developper for Qnap .. and also working for Qnap as support engineer in France... I already built (cross compiled) clamav (full) for Qnap ... but only binaries .. and lazy script ... config file must already be setup by user in SSH (or winSCP)

it is just missing a cool webinterface... i always searched for someting like that which can be simply installed on embedded PHP Apache server (else language shouldnt be a problem... Python3, Go , Java ... ) never found something who can fit in the NAS ..

@nephaste, Thanks a lot for having shared me your project based on ClamAV for Qnap. As I like develop minimalist things without complicated structure, I should be able to make something that would be compatible with your existing work.
I've planned to handle both, binary scan and socket scan, so you would be able to run scans by pointing on the clamscan binary location or the clamd socket path.
I saw some other PHP / ClamAV implementation that was allowing to connect to a remote clamd instance but I have no idea if that would really useful or not so I'll probably ask for creating an issues if people would like to have it added into the project.

Hi guys!
I did some progress on the following projects:

https://github.com/Jiab77/fatfree-admin
https://github.com/Jiab77/clamav-web
https://github.com/Jiab77/clamav-webui

All of them are used to compose the backend and frontend architecture. I'm still having to document how to deploy everything but it's pretty simple for now 😉
I'll keep you updated on each progress.

thank you very much ...

Thank you. Looking forward to some documentation to install it and begin testing.

Hi guys, thanks a lot for your support! @radumamy, I'll write a minimal documentation once I get a minimal working prototype.
For now, the web server I'm using is basically the embedded web server in PHP this way but it can be easily replaced by apache or nginx or any other web servers as long as it can handle .htaccess files or skipping them as the embedded web server in PHP is doing.
I prefer not give you a precise date because I don't really know when I'll have enough time and energy along my daily job to give you something already functional. 🤞🏽 for this weekend, otherwise for the end of this month.

Hi guys, here are some progress samples so that you know why I'm pretty silent 😅

Test code:

<?php
require 'clamd.php';
$options = [
    'debug' => true,
    'driver' => 'local', // 'local' or 'remote'
    'path' => '/var/run/clamav/clamd.ctl'
];
$clamd = new ClamAV($options);
switch ($f3->get('PATTERN')) {
    case '/test/ping':
        echo ' -- Ping: ' . $clamd->ping() . PHP_EOL;
        break;

    case '/test/reload':
        echo ' -- Reload: ' . $clamd->reload() . PHP_EOL;
        break;

    case '/test/scan':
        echo ' -- Test: get('REALM')) . '">Test file
' . PHP_EOL;
        echo ' -- Test: get('REALM')) . '">Test folder
' . PHP_EOL;
        break;

    case '/test/scan/@file':
        // echo ' -- Scan: ' . $clamd->multiscan('/path/to/folder/file') . PHP_EOL;
        echo ' -- Scan: ' . $clamd->multiscan(base64_decode($params['file'])) . PHP_EOL;
        break;

    case '/test/shutdown':
        echo ' -- Shutdown: ' . $clamd->shutdown() . PHP_EOL;
        break;

    case '/test/stats':
        echo ' -- Stats: ' . $clamd->stats() . PHP_EOL;
        break;

    case '/test/version':
        echo ' -- Version: ' . $clamd->version() . PHP_EOL;
        break;

    default:
        # code...
        break;
}

Test results:

/test/scan/@file:

Execute command: MULTISCAN /path/to/folder/ -- Scan: /path/to/folder/Quickstart Guide _ ipstack API.pdf: Access denied. ERROR
--
  | /path/to/folder/Microsoft_Toolkit/Windows_Loader_v2.2.2.zip: Win.Malware.Aa93a15d-6745814-0 FOUND
  | /path/to/folder/android-things-setup-utility/quickstart-temp: File path check failure: Permission denied. ERROR
  | /path/to/folder/Telegram Desktop/Windows_Loader_v2.2.2.zip: Win.Malware.Aa93a15d-6745814-0 FOUND
  | /path/to/folder/Telegram Desktop/Cloud-Archives/chats/chat_019/files/Windows_Loader_v2.2.2.zip: Win.Malware.Aa93a15d-6745814-0 FOUND

I should have something functional but pretty ugly visually soon.

Hi @Jiab77. Sorry to trouble you. I was wondering if this still going ahead? Many thanks.

@radumamy, thanks a lot for your comment! I really would love to have time to focus on this project but unfortunately I can't 😞 However you can stil expect a release at some point as I keep this project in my todolist.
To be honest, after having seen Cisco dropping the support of their clamav interface called Immunet, I've questioned myself if that was not he right time to focus on this project 🤔
But the main problem remain the same: how to sustain myself while I'm focusing on the development?
And the answers are: find a support or do something else on side 😅
So I can't really tell you when will be released the first version but I can tell you that the idea behind this project and the will to make it are not dead.


A11y_AzureToolsStorageExplorer_Disk_DiskInfoTable_ScreenReader: NVDA does not announcing the table name it is only announcing as table.

Check out Accessibility Insights! - Identify accessibility bugs before check-in and make bug fixing faster and easier.”
GitHubTags: #A11y_AzureToolsStorageExplorer; #A11yMAS; #A11YTCS; #DesktopApp; #MAS1.3.1;#NVDA; #Win10;
Environment Details:
Desktop App: Windows Version: Windows10
NVDA Version: 2019.1.1
Steps to Reproduce:

Launch Storage Explorer
Navigate to "Open Connect dialog" pane and Sign in to Azure.
Go to "Manage Accounts" pane and Select the subscriptions you will use. Once selected, click on "Apply" button.
Navigate to "Disks" of the selected subscription.
Navigate to "A11ytest" and  click on it.
Navigate to Table under the tool bar.
Verify that all the elements of "DiskInfoTable" Screen are accessible and MAS Compliant.

Actual
NVDA does not announcing the table name it is only announcing as table.
Same issue is observed with JAWS for below scenarios.
Blob Container Table : Table-

Launch Storage Explorer
Navigate to "Open Connect dialog" pane and Sign in to Azure.
Go to "Manage Accounts" pane and Select the subscriptions you will use. Once selected, click on "Apply" button.
Navigate to "Blob Containers" of the selected subscription, right click and hit enter on "Create Blob container" to Create a new Blob container.
Once completed, Navigate to "Upload" button and Upload a blob/file by using  "Upload Files" control.
Navigate to Table present in right side of the storage explorer.
Verify that all the elements of "Table" screen are accessible and MAS Compliant.

Expected
NVDA should announce  the table name as "Disk info table".
Recommendations:
Refer below link which is repository of bug fixes code snippets:
https://microsoft.sharepoint.com/teams/msenable/mas/Pages/browse-fixes.aspx
User Impact:
Screen reader user unable to know that about which table it is reading.
MAS Reference:
MAS1.3.1:
https://microsoft.sharepoint.com/:w:/r/teams/msenable/_layouts/15/WopiFrame.aspx?sourcedoc={54f28d1f-a2d1-4dcd-84e1-5c9b87e8aba4}
Attachment for Reference

Verified this issue on:Azure Tools Storage Explorer (Version: 1.12.0)
The issue is no longer to reproduces, Hence closing this bug.

GitHubTags:#BM-TCS-StorageExplorer-Win32-Sep2019;


Add Input.Password

Can we have a new input type for password type of fields. It can be helpful to get the user credentials directly from the bot itself.

Document Details
⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

ID: 4dc7404b-3d6c-01bc-568b-746835e4a471
Version Independent ID: 8a4bacfa-deef-f1e2-74e4-41899ad3d409
Content: Card Schema - Adaptive Cards
Content Source: AdaptiveCards/create/CardSchema.md
Product: adaptive-cards
GitHub Login: @matthidinger
Microsoft Alias: mahiding

Hi @live-abhishek, thanks for the suggestion! We have a discussion going on this topic at the link below, please feel free to add your comments there:
https://github.com/Microsoft/AdaptiveCards/issues/1443


3D Object detection on S3DIS

For now only semantic segmentation in supported on S3DIS. However there are some works applying object detection on it, e.g. https://arxiv.org/abs/2006.12356 . Is somebody working on adding bbox preprocessing for this task to this codebase? Can try to do it myself.

Sure, that's definitely a great contribution to the community. We do not have someone working on that, so just feel free to add new features on that. Our team will support you if there is any help needed.


Basic progressive smoke unit test

Based on the great feedback from @pgkeller:
Add a good basic progressive unit test, a single “smoke” test that:

Runs an empty brisc kernel and returns
Runs empty brisc+ncrisc kernels
Runs empty brisc+ncrisc+trisc kernels
Runs 3 kernels that return data.  This could return data from stack, l1, local memory to ensure everything is properly initialized.
Runs 3 kernels that send data through noc
Runs 3 kernels and flips noc state
Uses tensix
Uses sfpu
Uses profiler
Uses dprint
Uses fast dispatch (once ready)

Command line option quit after any stage.
This would be a great new HW bring up test as well as smoke test for fw changes. We can add more basic tests as new functionality is introduced (ie fast dispatch).

Also, it is much easier to debug than more complex OP tests, and helps pinpoint the level of failure.

done as part of metal gtest suite


add_metaclass: breaks super() without args

Using the six.add_metaclass decorator breaks usage of super() without args in Python 3:
import six

class Base():
    def method(self):
        print("Base.method")

class Meta(type):
    pass

# works:
# class C(Base, metaclass=Meta):
@six.add_metaclass(Meta)
class C(Base):
    def method(self):
        super().method()

C().method()

Traceback (most recent call last):
  File "t-six.py", line 18, in <module>
    C().method()
  File "t-six.py", line 15, in method
    super().method()
TypeError: super(type, obj): obj must be an instance or subtype of type

As a workaround super(C, self) can be used.

I guess that's fair given that you have to use super(C, self) in the first place for compatibility though.. ;)


Updated mesh doc to add new prod environment img

What are you changing in this pull request and why?
I have created this PR to update the image on the Mesh guide under the Create a production environment section. The previous section was showing an image for the v1.6 environment image
Checklist

[x] I have reviewed the Content style guide so my content adheres to these guidelines.
[x] The topic I'm writing about is for specific dbt version(s) and I have versioned it according to the version a whole page and/or version a block of content guidelines.
[ ] I have added checklist item(s) to this list for anything anything that needs to happen before this PR is merged, such as "needs technical review" or "change base branch."
[ ] The content in this PR requires a dbt release note, so I added one to the release notes page.

🚀 Deployment available! Here are the direct links to the updated files:

https://docs-getdbt-com-git-nfiann-mesh-img-dbt-labs.vercel.app/guides/mesh-qs

https://docs-getdbt-com-git-nfiann-mesh-img-dbt-labs.vercel.app/guides/mesh-qs?step=3
confirmed, looks good


Minimize GHA permissions

Set the GitHub Actions token permission to null in most workflows.
This results in:
GITHUB_TOKEN Permissions
Metadata: read
The default permissions, used without the null override, are either
GITHUB_TOKEN Permissions
Actions: write
Checks: write
Contents: write
Deployments: write
Discussions: write
Issues: write
Metadata: read
Packages: write
Pages: write
PullRequests: write
RepositoryProjects: write
SecurityEvents: write
Statuses: write
or
GITHUB_TOKEN Permissions
Actions: read
Checks: read
Contents: read
Deployments: read
Discussions: read
Issues: read
Metadata: read
Packages: read
Pages: read
PullRequests: read
RepositoryProjects: read
SecurityEvents: read
Statuses: read
Jobs triggered by PRs get read permissions, other jobs get write.
Two jobs require non-null permissions to function.
The Anchore vulnerability scan GHA that reports results on merges needs
security-events write permission to publish SARIF reports using
github/codeql-action/upload-sarif. Fails with HTTP 403 otherwise.
The dependent issues GHA needs PR/issues write permissions to add/remove
dependent labels. It needs status write permission to block/unblock
PRs when dependencies are missing/met. Fails with HttpError otherwise.
Signed-off-by: Daniel Farrell<EMAIL_ADDRESS>

Code scanning results / Grype Queued

This job seems stuck in Queued. It's triggered as a part of the vuln scan job, which ran fine. It's also working fine on other recent PRs in this repo and in runs that include this PR in other repos.


Anything about query parameters? Like ?x=a&y=b ,etc?

Or is this on another page?

Document Details
⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

ID: 79da574a-570f-04eb-86bd-c8065a016f44
Version Independent ID: ac771374-6102-b838-57d2-e99bcf3f7d3e
Content: Blazor routing
Content Source: aspnetcore/blazor/routing.md
Product: aspnet-core
Technology: aspnetcore-blazor
GitHub Login: @guardrex
Microsoft Alias: riande

Hello @wrkettlitz ... Only Route Parameters (described in the Components topic) are supported at this time.
Query string scenarios are on the roadmap and should appear in a future preview. See the remarks at :point_right: https://github.com/aspnet/AspNetCore/issues/5489, where catch-all segments and querystring/hash values are mentioned.
If you have questions or comments, chat directly with the engineers and management on that engineering issue.


cubeMapProjectionBoxZone

ACTUALLY, I think we need it per meshInstance, not material

Would be much better to assign objects to zone, and then they would pick the cubemap/ambient from it, etc

Yep, I agree. If I define a 'wood' material, it's just wood. It's not 'wood in room X but not in room Y'. That's just weird.


Move zookeeper to exhibitor

Using consul-template to manage zookeeper is adding complexity. Investigate using exhibitor instead.

There are a few options... Netflix has an example with zookeeper/exhibitor running in the same container. Exhibitor just needs access to the zookeeper data directory and the zookeeper install directory.
Could be run in a separate container on the mesos masters and mount the volume container into an exhibitor container.
It also looks like there is a CiscoCloud project :dancer:
https://github.com/CiscoCloud/exhibitor-mesos-framework

From an operations point of view, it would be best if Exhibitor runs outside of Docker -  that means you're not dependent on the Docker daemon to be up and running for ZooKeeper to work. I suppose we could justify using consul k/v as a shared backend for Exhibitor, if it supports some form of degraded availability mode when consul isn't working.

What do we think of just trying zookeeper 3.5.1 and using dynamic reconfiguration? https://zookeeper.apache.org/doc/trunk/zookeeperReconfig.html

More ideas about this. Should we write a custom client (like exhibitor) that supports dynamic reconfiguration and is service discovery aware? Looking at  https://github.com/Netflix/exhibitor/issues/262 seems that exhibitor doesn't have support for 3.5. features.
Also see https://groups.google.com/forum/#!topic/exhibitor-users/wfyn0e-faJk, as there may be some work here in Exhibitor.

One option is to simply move ZooKeeper out of docker and run it right on the control nodes, and move dynamic configuration from consul-template to ansible. (Making the setup slightly less dynamic, but still acceptable in my opinion)

Is this issue still relevant now that we run ZK outside of Docker?

Closing because I think this is solved. Please reopen if it isn't!


Making a submenu in the top and left navigation using SPFX in modern

Category

[x] Question
[ ] Typo
[ ] Bug
[ ] Additional article idea

Is it possible to make spfx extensions that include submenus as part of the top navigation? This is a requirement as part of migrating existing submenus in classic sites.

It sounds like you're asking about the suite bar. No, customizations to the suite bar are not supported.
You can use an app customizer spfx extension to add a top placeholder that contains your additional navigation elements though.


Create a test that ensures that SSL is working appropriately

An easy test that users can run to hit a secure endpoint to check the installation would be very helpful to the community.

Sent to Trello: https://trello.com/c/ZFl2KhSv.


NVRAM tab in Big Sur 11.3 shows preferred-count value as ???

First, congratulations and thanks for your excellent work, this app is a must-have in hackintosh world.
The NVRAM tab shows preferred-count variable with a value of ??? although with the "nvram -p" command this variable has a numeric value  according with the number of preferred wifi networks.
Regards, Emilio.

Can you please try 3.5.5

Perfect!!! Fixed. Thanks.


rosdistro entry requiring PPA?

We're looking to add a new package to Nav2 that needs xtensor which has public releases for 18.04/21.10 but not 20.04. There is, however, a PPA with the package available to use (see below). Is it possible to get rosdistro entries requiring adding a new PPA? I do not believe I've seen documentation about this previously.
https://answers.launchpad.net/ubuntu/+source/xtensor/+question/699443

I'm pretty sure ROS infrastructure doesn't support requiring a specific PPA for a rosdep rule.
@nuclearsandwich may have a more concrete answer.

I assumed so, but figured it would be good to ask :smile:

I know in the past @tfoote helped me import a PPA-built version of ceres-solver into packages.ros.org when the built was broken in a particular Ubuntu distro.

@nuclearsandwich shall we close? AFAIK there's no plan to support custom PPAs in the foreseeable future.

Yes, we explicitly require that content is either in the upstream or the ROS sources: https://github.com/ros/rosdistro/blob/master/CONTRIBUTING.md#ubun
If it's already released into 18.04 and 21.10 we can probably assist getting it backported  20.04 with the debian/ubuntu maintainers if it's still of interest. Email me direcly and we can start a thread looking to get it released upstream into focal.

Thanks @tfoote  for jumping in and apologies upthread for not fielding the mentions. I've been swamped and am in the process of clearing out direct mentions before declaring GitHub bankruptcy so that I'm in a better place going into 2022.

OK, will do when the time comes!


Complete TQ2 Mapping Inventory

User Story
As ReportStream, I must implement the HL7v2 -> FHIR Mapping inventory for the TQ2 segment in order to support onboarding future Senders to the Universal Pipeline.
Note: If a mapping does not exist in the inventory, only fields specified by NIST 2.5.1 should be considered to help limit the scope to a manageable level
Description/Use Case
Presently, RS implements mappings for the TQ2 segment but there are fields and rules specified in the mapping inventory that are not implemented as of yet. In order to speed up future onboarding and prevent the issues that arise when implementing these mappings piecemeal, we should go ahead and attempt to create these mappings before we start onboarding many more senders.
Risks/Impacts/Considerations
Dev Notes
Test Plan
Test Plan: https://github.com/CDCgov/prime-reportstream/blob/master/prime-router/docs/design/proposals/mapping-inventory-test-plan.md
PR That implements test plan, use as example: https://github.com/CDCgov/prime-reportstream/pull/11147
Acceptance Criteria

[ ] TQ2 segment mappings updated to match HL7v2 -> FHIR Mapping inventory ORU_R01
[ ] Tests created and passing, per the linked test plan

Removing this segment focused story in favor of resource focused stories.

Covered by other stories


create hashlib extension on all DBs

This will be necessary to get https://github.com/dimagi/commcare-hq/pull/18611/ working.
This stack overflow post summarizes the problem and solutions. Basically the problem is that you need “superuser” privileges to create this extension but the migrations are run under hqweb... which does not have it. The solutions are:

Make c a trusted language using a superuser (not recommend)
Run the command as a superuser instead
(Temporarily) provide superuser credentials to the running user

Of these options it seems that just doing it as a superuser from ansible during setup makes the most logical sense since the others would still have to involve the postgres user (and likely ansible) and either have security downsides or be more complex to roll out.
Note: I haven't tested this yet though it seems on the safe end in terms of the changes it is making. Working on getting my ansible environment back online...

alrighty ran on staging and looks good. going to try on enikshay now :crossed_fingers:
TASK [postgresql : Create pghashlib extension] *********************************
changed: [hqdb1-staging.internal-va.commcarehq.org] => (item={u'query_stats': True, u'django_alias': u'default', u'name': u'commcarehq'})
ok: [hqdb1-staging.internal-va.commcarehq.org] => (item={u'django_alias': u'proxy', u'name': u'commcarehq_proxy'})
ok: [hqdb1-staging.internal-va.commcarehq.org] => (item={u'query_stats': True, u'django_alias': u'p1', u'name': u'commcarehq_p1', u'shards': [0, 99]})
changed: [hqdb1-staging.internal-va.commcarehq.org] => (item={u'query_stats': True, u'django_alias': u'p2', u'name': u'commcarehq_p2', u'shards': [100, 199]})
changed: [hqdb1-staging.internal-va.commcarehq.org] => (item={u'query_stats': True, u'django_alias': u'p3', u'name': u'commcarehq_p3', u'shards': [200, 299]})
changed: [hqdb1-staging.internal-va.commcarehq.org] => (item={u'query_stats': True, u'django_alias': u'p4', u'name': u'commcarehq_p4', u'shards': [300, 399]})
changed: [hqdb1-staging.internal-va.commcarehq.org] => (item={u'query_stats': True, u'django_alias': u'p5', u'name': u'commcarehq_p5', u'shards': [400, 511]})
changed: [hqdb1-staging.internal-va.commcarehq.org] => (item={u'query_stats': True, u'django_alias': u'ucr', u'name': u'commcarehq_ucr', u'django_migrate': False})
changed: [hqdb1-staging.internal-va.commcarehq.org] => (item={u'name': u'formplayer'})
changed: [hqdb1-staging.internal-va.commcarehq.org] => (item={u'query_stats': True, u'django_alias': u'icds-ucr', u'name': u'commcarehq_icds_testdata', u'django_migrate': False})