'MultiDetector' object has no attribute 'detected_callback'

Describe the bug
after detecting "word" with MultiDetector
throw exception
Traceback (most recent call last):
Traceback (most recent call last):
File "multi_streaming_example.py", line 90, in
label_stream(FLAGS.libpath)
File "multi_streaming_example.py", line 68, in label_stream
threading.Thread(target=FTask(frame,extractor_gain)).start()
File "multi_streaming_example.py", line 39, in FTask
mDetector.run_frame(features)
File "./src/multi_detector.py", line 134, in run_frame
if(self.detected_callback):
AttributeError: 'MultiDetector' object has no attribute 'detected_callback'
To Reproduce
running multi_streaming_example.py
Platform
aarch64

Thank you very much for the issue report. I fixed the issue with the latest commit.


Memory leak, JS out of memory in production

{
  "name": "app-name",
  "version": "1.0.0",
  "private": true,
  "scripts": {
    "dev": "nuxt",
    "build": "nuxt build",
    "start": "NODE_ENV=production nuxt start",
    "generate": "nuxt generate",
    "test": "jest",
    "test:snapshot": "jest --updateSnapshot"
  },
  "dependencies": {
    "@babel/preset-env": "^7.18.9",
    "@datadog/browser-logs": "^4.6.0",
    "@nuxtjs/axios": "^5.13.6",
    "@nuxtjs/dotenv": "^1.4.1",
    "@nuxtjs/i18n": "^7.2.2",
    "app-config": "*",
    "core-js": "^3.19.3",
    "jest-serializer-vue": "^2.0.2",
    "nuxt": "^2.15.8",
    "vue": "^2.6.14",
    "vue-server-renderer": "^2.6.14",
    "vue-template-compiler": "^2.6.14",
    "webpack": "^4.46.0"
  },
  "devDependencies": {
    "@nuxtjs/style-resources": "^1.2.1",
    "@vue/test-utils": "^1.3.0",
    "babel-core": "7.0.0-bridge.0",
    "babel-jest": "^28.1.3",
    "jest": "^28.1.3",
    "jest-environment-jsdom": "^28.1.3",
    "jsdom-worker": "^0.2.1",
    "node-sass": "^7.0.1",
    "nuxt-compress": "^5.0.0",
    "sass": "^1.53.0",
    "sass-loader": "^10",
    "vue-jest": "^3.0.4"
  }
}

import i18n from './config/i18n';

export default {
  ssr: false,
  loading: false,
  router: {
    base: '/appname',
    prefetchLinks: false
  },
  // Global page headers: https://go.nuxtjs.dev/config-head
  head: {
    title: 'app-name',
    htmlAttrs: {
      lang: 'en'
    },
    script: [
      {
        src: '',
        async: false,
      },
    ],
    meta: [
      { charset: 'utf-8' },
      { name: 'viewport', content: 'width=device-width, initial-scale=1' },
      { hid: 'description', name: 'description', content: '' },
      { name: 'format-detection', content: 'telephone=no' }
    ],
    link: [
      {rel: '' },
    ]
  },

  server: {
    host: '0',
    port: 3002
  },
  generate: {
    crawler: false,
  },
  publicRuntimeConfig: {
    eventLoggerServiceEndpoint: process.env.EVENT_LOGGER_API
  },
  // Global CSS: https://go.nuxtjs.dev/config-css
  css: [
  ],

  // Plugins to run before rendering page: https://go.nuxtjs.dev/config-plugins
  plugins: [
    { src: '~/plugins/zaf-library.js', mode: 'client'},
    { src: '~/plugins/event-logger.js', mode: 'client' },
    { src: '~/plugins/datadog-logger.js', mode: 'client' },
  ],
  // Auto import components: https://go.nuxtjs.dev/config-components
  components: true,

  // Modules for dev and build (recommended): https://go.nuxtjs.dev/config-modules
  buildModules: [
    '@nuxtjs/dotenv',
    '@nuxtjs/style-resources'
  ],

  // Modules: https://go.nuxtjs.dev/config-modules
    modules: [
      '@nuxtjs/axios',
    [
    '@nuxtjs/i18n',
    {
      vueI18nLoader: true,
      strategy: 'no_prefix',
      defaultLocale: 'en',
      skipSettingLocaleOnNavigate: true,
      locales: [
        {
          code: 'en',
          name: 'English'
        }
      ],
      vueI18n: i18n
    }
  ],
  [
      "nuxt-compress",
      {
        gzip: {
          cache: true
        },
        brotli: {
          threshold: 10240
        }
      }
    ]
    ],
  dev: process.env.NODE_ENV !== 'production',
  // Build Configuration: https://go.nuxtjs.dev/config-build
  build: {
    watch: ['api/**/*.js']
  },

  serverMiddleware: [
    '~/api/index.js'
  ],
}

What is actually happening?
I am having memory leak, i deploy Nuxt.js as containerized app in K8, the container memory keeps growing until it's being restarted by K8, i have been following graphana graphs and the memory keeps growing constantly. The same app in Laravel/Vue.js is quite stable and constant.

A memory leak can be due to many things, including your own code or libraries you are depending upon. It is impossible to diagnose without a minimal reproduction, so I'm closing this. Feel free to comment with a minimal reproduction and I'll be very happy to investigate further.

@danielroe i don't think it's fair that you are closing immediately, a lot of people are complaining about the same stuff. You must have a list of reasons why, i can tell you that i can deduce that the memory leak is not due to the app code, because it's happening with two different apps with separate codebases, and before refactoring to Nuxt.js this was not the case with old Vue.js codebase which is almost identical logical-wise in Nuxt.js.
So, can you list a number of reasons/dependencies (i listed) which it might affect Nuxt.js memory leak in production? Otherwise i think it's due to the framework itself since most of the questions opened remained unsolved.

There is no apparent reason of reproduction, it happens after we deploy and our end-users start using the app, memory keeps growing linearly until it hits to an error.
[28:0x7f2a249233c0] 118531583 ms: Mark-sweep 251.1 (258.8) -> 249.8 (258.8) MB, 681.1 / 0.0 ms  (average mu = 0.974, current mu = 0.973) allocation failure scavenge might not succeed

FATAL ERROR: Reached heap limit Allocation failed - JavaScript heap out of memory

Start by removing piece by piece of your app. Remove as much of you can as still exhibits the behaviour. It should have no dependencies but Nuxt. Then commit to a repository with some steps to reproduce. It's fine if behaviour takes a while to reproduce or requires running under high load.

@erkand-imeri  How did you resolve this?
I'm facing the same issue without any luck to find a solution


Usage of Object.assign breaks compatibility with IE 11

See this line: https://github.com/mattkrick/redux-optimistic-ui/blob/778e5ec0c85502553033d233de1c3fc43632b63f/src/index.js#L93
Could this be avoided?
We usually use lodash to express things like that.

Well that'a annoying.
Are you sure your IE11 isn't in compatibility mode?
Babel no longer transpiles Object.assign. If you want to, you can make your own build:
https://babeljs.io/docs/plugins/transform-object-assign/.
Alternatively (and this is the recommended choice) you use the object.assign.shim() from a couple years ago. That way your other packages (which I guarantee are also using Object.assign) will be OK.

They don't, that's why we noticed it is done in redux-optimistic-ui.
Probably because it's not supported by any IE version: https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Global_Objects/Object/assign#Browser_compatibility

a shim is definitely what you want then, either babel-polyfill or the one listed above. By shimming inside the package, the package gets bigger, which means the folks who use something like babel-polyfill are sending redundant bytes over the wire & there's no way they can avoid it. By shimming outside the package, the developer only sends 1 polyfill over the wire & all dependencies use that 1, keeping payloads as small as possible.


[CONTROLLER] support sub_domain with NULL and ""

This PR is for:

Server

Fixes supportting sub_domain with NULL and ""
Steps to reproduce the bug

learning resource in sub_domain which is legacy of 610 version

Changes to fix the bug

get sub_domain with filter NULL and ""

Affected branches

main

Checklist

[ ] Added unit test to verify the fix.

 Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.zhengya seems not to be a GitHub user. You need a GitHub account to be able to sign the CLA. If you have already a GitHub account, please add the email address used for this commit to your account.You have signed the CLA already but the status is still pending? Let us recheck it.


Compiling with vitejs breaks due to reliance on Node's global

This is a front-end library, it shouldn't rely on Node built-ins.
Error: vue-router.esm.js:2314 ReferenceError: global is not defined
Found at:
const isWindows = 'navigator' in global && /Win/i.test(navigator.platform);
const isMacLike = 'navigator' in global && /(Mac|iPhone|iPod|iPad)/i.test(navigator.platform);

Looks like this was resolved here


import PQ zips from browser and email attachments

support application/zip in addition to application/xml, text/xml
refactored import thread classes
the import via browser/email attachements still has room for improvement

But that leaked window is independent of your changes, right? I already had that issue too (but forgot to change that code). The main issue there is that the help dialog gets displayed, but the execution doesn't stop there, so immediately after showing the dialog, the underlying activity owning the dialog is closed.
I see multiple possible solutions:

Use a toast instead of a dialog.
Refactor the helpDialog method to take an additional runnable as argument. We would then close the activity in the runnable instead of in the main thread.
Don't use the helpDialog method and close the activity from the cancel listener of the new to be written AlertBuilder.
Don't use the ImportActivity. I would be fine with that solution. I introduced it mainly because otherwise the activity listing the files would be the only meaningful entry point (at that time, now the code has been refactored) and that didn't make much sense for attachments.

Works fine on my system, therefore merging...

@stephanme: I've created a separate issue for the activity fix: #826.


Soft Assert

Hi all,
I was wondering if there is a way to have a soft assert method just like the one used in JAVA. It would be really cool if we have such a feature.
Thank you!

Is #1049 what you mean?

@bwowk This is exactly what I want. Thank you so!

@oabdelsamad since this is a duplicate can you close please?

Close 1061


[Question] How to insert Relations with all new entities?

This is maybe a dumb question, but i'm just not sure and the documentation is not clear.
I use a ClassB with a To-One-Relation to ClassA, and the proper backlink-list as To-Many.
If I now have a new ClassA, can i just fill with a ClassB-List and then put it to the box? Will then all entities be saved?

This is my little tryout setting:
First, the two entity-classes
@Entity
public class ClassA {
    @Id
    long id;
    @Backlink
    public List<ClassB> classBs = new ToMany<>(this, ClassA_.classBs);
    /** Used to resolve relations */
    @Internal
    @Generated(1307364262)
    transient BoxStore __boxStore;
    @Generated(1708778210)
    @Internal
    /** This constructor was generated by ObjectBox and may change any time. */
    public ClassA(long id) {
        this.id = id;
    }
    @Generated(827156522)
    public ClassA() {
    }
}

@Entity
public class ClassB {
    @Id
    long id;
    long classAId;
    @Relation
    ClassA classA;
    /** Used to resolve relations */
    @Internal
    @Generated(1307364262)
    transient BoxStore __boxStore;
    @Generated(279318635)
    @Internal
    /** This constructor was generated by ObjectBox and may change any time. */
    public ClassB(long id, long classAId) {
        this.id = id;
        this.classAId = classAId;
    }
    @Generated(136981164)
    public ClassB() {
    }
    @Internal
    @Generated(1237822122)
    transient ToOne<ClassA> classAToOne = new ToOne<>(this, ClassB_.classA);
    /** To-one relationship, resolved on first access. */
    @Generated(1681660464)
    public ClassA getClassA() {
        classA = classAToOne.getTarget(this.classAId);
        return classA;
    }
    /** Set the to-one relation including its ID property. */
    @Generated(1851307217)
    public void setClassA(ClassA classA) {
        classAToOne.setTarget(classA);
        this.classA = classA;
    }
}

and now the code:
List<ClassA> classAs = new ArrayList<>();
for (int i = 0; i < 3; i++) {
  ClassA classA = new ClassA();
  List<ClassB> classBs = new ArrayList<>();
  classBs.add(new ClassB());
  classBs.add(new ClassB());
  classA.classBs = classBs;
  classAs.add(classA);
}
classABox.put(classAs);

List<ClassA> resultA = classABox.query().build().find();
List<ClassB> resultB = classBBox.query().build().find();

I expected that all entities are now in the database. But resultB is empty. Do I expect wrong or did I mak any mistake in the entities?

Thanks for the help. This is sadly not the answer I wanted :) ... my problem is that the object tree is filled via GSON and i hoped i can give it one-to-one to the persistence layer .


Using appsignal_phoenix with phoenix 1.6.0

We're currently trying to upgrade our phoenix version to 1.6.0 due to another dependency requiring this, but we're getting
appsignal_phoenix (versions 2.0.7 to 2.0.13) requires ~> 1.4
Is it possible to add support for Phoenix 1.6.0?

Hi @d-wire, our version lock should allow Phoenix 1.6. The ~> 1.4 should allow versions 1.4 through anything below 2.0.
What versions of AppSignal and Phoenix have you specified in your mix.exs file? Can you share that?

Hi @tombruijn. I have Phoenix specified as {:phoenix, "~> 1.6.0"} and Appsignal as {:appsignal, "~> 2.2.10"}.

When I tried to upgrade I saw a similar message, but with more packages that seemed to limit the upgrade:
Failed to use "phoenix" (versions 1.6.0 to 1.6.6) because
  appsignal_phoenix (version 2.0.13) requires ~> 1.4
  phoenix_live_reload (version 1.3.3) requires ~> 1.4
  phoenix_live_view (versions 0.15.0 to 0.15.7) requires ~> 1.5.7
  mix.exs specifies ~> 1.6.0

Failed to use "telemetry" (version 1.0.0) because
  ecto_sql (version 3.6.2) requires ~> 0.4.0
  phoenix (versions 1.6.0 to 1.6.6) requires ~> 0.4 or ~> 1.0

What doesn't translate in the output snippet above, is that some lines are colored in red. As if to indicate they are a problem. The lines that are not in red, are in green, as if to indicate they are not the problem. The AppSignal line is colored in green.

What instead I needed to do, was update all the packages listed in red, like the phoenix_live_view package. I'm not sure of the best way, but I temporarily added them to my project's mix.exs file, selected the desired version, ran mix deps.get and it worked. (Running mix deps.update phoenix_live_view did not work for me.) This process may require a couple attempts, I ended up with this:
  defp deps do
    [
      {:phoenix, "~> 1.6.0"},
      {:phoenix_ecto, "~> 4.1"},
      {:ecto_sql, "~> 3.4"},
      {:postgrex, ">= 0.0.0"},
      {:phoenix_html, "~> 3.1"},
      {:phoenix_live_reload, "~> 1.2", only: :dev},
      {:phoenix_live_dashboard, "~> 0.6"},
      {:phoenix_live_view, "~> 0.17.7"},
      {:telemetry_metrics, "~> 0.4"},
      {:telemetry_poller, "~> 0.4"},
      {:gettext, "~> 0.11"},
      {:jason, "~> 1.0"},
      {:plug_cowboy, "~> 2.0"},
      {:appsignal, "~> 2.2.10"},
      {:appsignal_phoenix, "~> 2.0.13"}
    ]
  end

@d-wire let me know if this helps!

@d-wire did you manage to resolve the problem? If so, we can close the issue :)

@tombruijn I sure did! Thanks for the help!

@d-wire great to hear!


Thank you!

Thank you for this component, it seems great. I may close this issue later if I have issues with it :D

You're most welcome!
I appreciate your feedback very much, but if you don't mind I'll close the issue to keep the issue tracker clean :)

Yes, no problem, just wanted to say it :)


Add syntax highlighting

It would be great to have syntax highlighting for the code blocks on the forum. I tried implementing Prism which seems the goto solution but didn't manage to get it working.
http://prismjs.com/
I really like Solarized Dark but maybe the default theme will suffice.

@driesvints Already built-in Markdown works great, any specific reason you want to use prismjs?

@introwit how did you get this to work?

@driesvints use the language name after the opening backticks and it will do the rest. Example: php , html , ```json , etc.
<?php

class Action {

}

The above was written as (screenshot before posting this)

Hmm, that doesn't seems to work on production. Notice my comment here: https://laravel.io/forum/validate-two-fields-with-the-same-validation-rule
It has the php flag after the code block but it doesn't gets highlighted.

@driesvints Seems like I was working on this issue specific branch a few days ago and had included prism css & js in the base layout that day. Just checked out on that branch and started testing the current behavior and I got the highlighting. Completely forgot my past work. But I just included the 2 files and it seems prism detects the language same as MD.

Yeah, I just couldn't get it to work. Feel free to send in a PR.


[Issue] Open private channel

	trigger:
		open private channel of event-user and store it in {_channel}
		broadcast "%{_channel}%"

The variable is always set, even thought my DM's are closed, making the effect useless

It was a top-level error, as the async effects were not clearing the variable if the inputs was null.


Do we want to use the summary feature instead of truncate for blog-index.html?

Right now it's using truncate 1400 which is fine, but we could use the summary feature of Hugo which would let us define where to cut off with a  tag in the blog. We'd probably have to change the summary settings to make it more than 70 words though so what else does that effect? https://discourse.gohugo.io/t/change-the-70-word-limit-for-summary/6695

Pretty low priority...

Pretty low priority...


Meta consistency

Builds off the work in #712 to provide improved consistency and conciseness to meta.

Looks good other than those minor nits.

Good points @tkellen  - fixed!

:shipit:


Fix missing triple quotes in well-formed.md

Not a really useful contribution 😬

THanks anyway, good to get the little things fixed. :)


DeprecationWarning: crypto.createDecipher

After downloading everything and installing on my ubuntu vm, running node start.js throws an error:
(node:96262) [DEP0106] DeprecationWarning: crypto.createDecipher is deprecated.
(Use node --trace-deprecation ... to show where the warning was created)
closing code:  0
Any ideas?

@MatthewCole-PDX  I am having the same issue. Did you get any success?

I don't remember what this is. What are you trying to do? I'm pretty good with node these days

@MatthewCole-PDX I want to set up a pg-rest admin rest api server and I am getting crypto error

ah ok, I see. I remember this didn't work. I did find something that worked
well though. I take it you are trying to connect with a postgres database
with node.js?
just add "pg" to your dependencies
npm i pg
and to display the data on the page I recommend using pug templates rather
than basic html so you can iterate through the data dynamically
when the page loads.
npm i pug
And then in express put:
const { Pool } = require("pg");
const { SSL_OP_SSLEAY_080_CLIENT_DH_BUG } = require("constants");
const { render } = require("pug");
app.set("views", __dirname + "/samplePugTemplateDirectory");
app.set("view engine", "pug");
const pool = new Pool({
connectionString:
"https://yourPostGreSQLDB.com",
ssl: {
rejectUnauthorized: false,
},
});
fetch(url)
.then((response) => {
return response.json();
})
.then((data) => {
clone = Object.assign({}, data);
dataLength = data.length;
})
.catch((error) => console.log(error));
app.get("/", async (req, res) => {
res.status(200);
var searchResults = [];
try {
const client = await pool.connect();
const result = await client.query("SELECT dataSample1, dataSample2 FROM
dataSetSample");
const results = { results: result ? result.rows : null };
let data = result.rows;
for (let i = 0; i < data.length; i++) {
var reviews = {
dataSample1: data[i].dataSample1,
dataSample2: data[i].dataSample2
}
res.render("index", {
data1: dataSample1,
data2: dataSample2
});
/
client.release();
} catch (err) {
console.error(err);
res.send("Error " + err);
}
});
good luck!
On Tue, Jul 20, 2021 at 6:14 AM Braap @.***> wrote:

@MatthewCole-PDX https://github.com/MatthewCole-PDX I want to set up a
pg-rest admin rest api server and I am getting crypto error
—
You are receiving this because you were mentioned.
Reply to this email directly, view it on GitHub
https://github.com/QBisConsult/psql-api/issues/5#issuecomment-883383017,
or unsubscribe
https://github.com/notifications/unsubscribe-auth/AOI6WMIXF6EF7RWMNZPWGVLTYVZCRANCNFSM4PFTNZYA
.


Tyco

.

 Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you all sign our Contributor License Agreement before we can accept your contribution.7 out of 8 committers have signed the CLA.:white_check_mark: samadDotDev:white_check_mark: cjswedes:white_check_mark: ctowns:white_check_mark: greens:white_check_mark: sjl2178:white_check_mark: NikitaKuchta:white_check_mark: mikesip:x: satyajitanandYou have signed the CLA already but the status is still pending? Let us recheck it.


[DRAFT] librewolf: init at 90.0.2

Motivation for this change
Packaging Librewolf, a privacy oriented Firefox fork, as requested in this issue https://github.com/NixOS/nixpkgs/issues/94918 .
I created a new package since I'm unsure about integrating this as a Firefox sub-package. There are no existing Firefox forks yet, just ESR, developer and beta builds. Also the Firefox packages seems to complicated for me. Maybe we could move duplicate code into a general Gecko-browsers meta package with a future rework.
This PR is a draft. I copied the Palemoon package and trying to integrate Librewolf patches + Firefox config into this.
Things done

[ ] Tested using sandboxing (nix.useSandbox on NixOS, or option sandbox in nix.conf on non-NixOS linux)
Built on platform(s)

[ ] NixOS
[ ] macOS
[ ] other Linux distributions

[ ] Tested via one or more NixOS test(s) if existing and applicable for the change (look inside nixos/tests)
[ ] Tested compilation of all packages that depend on this change using nix-shell -p nixpkgs-review --run "nixpkgs-review wip"
[ ] Tested execution of all binary files (usually in ./result/bin/)
21.11 Release Notes (or backporting 21.05 Release notes)

[ ] (Package updates) Added a release notes entry if the change is major or breaking
[ ] (Module updates) Added a release notes entry if the change is significant
[ ] (Module addition) Added a release notes entry if adding a new NixOS module

[ ] Fits CONTRIBUTING.md.

I'd personally rather use firedragon. It seems to have more reasonable defaults. Surprised it hasn't been added to nixpkgs yet.

i think this is done in #151439


2.0.3 build fails on Ubuntu - tool/LibSassBuilder: not found

We have a .NET 6 project that is build on both Windows and Ubuntu agents in Azure Devops.
On updating from 2.0.2 to 2.0.3 the windows build is fine while the ubuntu build now fails:

/usr/bin/sh: 2: /tmp/MSBuildTempvsts/tmp58991d4476b74471866cdfb25fa0278f.exec.cmd: /home/vsts/.nuget/packages/libsassbuilder/2.0.3/build/../tool/LibSassBuilder: not found
##[error]/home/vsts/.nuget/packages/libsassbuilder/2.0.3/build/LibSassBuilder.targets(95,5): Error MSB3073: The command ""/home/vsts/.nuget/packages/libsassbuilder/2.0.3/build/../tool/LibSassBuilder" files "[a series of .scss files]" --outputstyle compressed --level default " exited with code 127.
/home/vsts/.nuget/packages/libsassbuilder/2.0.3/build/LibSassBuilder.targets(95,5): error MSB3073: The command ""/home/vsts/.nuget/packages/libsassbuilder/2.0.3/build/../tool/LibSassBuilder" files "[a series of .scss files]" --outputstyle compressed --level default " exited with code 127.

I assume this is due to changes in #41

@JelleHissink any thoughts here?

Hmm, I tried to reproduce it. When I built libsassbuilder tool on linux I got an executable without extension. However in the package there is LibSassBuilder with the .exe extension. It is not part of the build output of this PR.
When the tool was compiled using ubuntu it did not have a file extension (build in PR #41, https://github.com/johan-v-r/LibSassBuilder/pull/41/checks ).
When I open the .nupkg file however I only get  the .exe output, that will only run on windows.
I noticed the release build used a windows build agent. That produced only a LibSassBuilder.exe, that file is not compatible with linux however.
So I am a bit at a loss on how this while build pipeline works. What do you normally do to release a version? Where can I get the output of the pipeline? Can I download the .nupkg of the builds somewhere?

I publish the artifact from my Publish GitHub Action - you can download it there, or just inspect the download from NuGet.
The same package needs to be runnable on all 3 OS - so it gets built (dotnet publish) without a specific RID.

I understand the requirement to be able to run it on any os.
I don't have time today, but I was planning to make some time to invest in the whole build experience for LibSassBuilder, I will put this on top of my list. My hope is if we get this build integration in VS and build pipeline better this would transfer to LibDartBuilder later without major issues.

I made some time anyway, because I don't like people running into issues because of this

Thanks Jelle! I have unlisted and deprecated v2.0.3 - will review & publish that new change soon

Thanks @JelleHissink and @johan-v-r
v2.1.0 builds on both Windows and Ubuntu agents for us.


Compatibility with my latest liquidctl fork

Since you are linking to my liquidctl fork, I'd like to remind you that the latest version prints out some additional information which your version of my plugin fork likely doesn't understand yet. I'm not too sure how you could set git up so you can pull from my repo and edit yours as well, but I'm pretty sure my latest liquidctl.exe breaks your dll, because its based on an older version of my plugin fork.
Maybe have a look at the commits, beginning from 42888bf.

Thanks for the heads-up, I will check on this in the following days!
I am also working on a fork for FanControl's LiquidCtl plugin itself, as I had some compatibility issues with my loan Kraken X63 with the upstream version. I've been playing around with building a version with your fork of liquidctl aswell.  I think I will end up adapting your changes here, as they look a lot better.
I will also try to clean up my branch for the X63 and possibly mainline into jmarucha's plugin, so we don't need to maintain both FanControl plugins.


Integration Test - Release - 2021/11/02 05:42:21

Auto create for integration test. IssueCommandFlow

#pri1

Just type '#pri3'

#pri2

#pri3

#assign NonAllowedUser

#assign PRMergerTest1

The following users don't have valid GitHub IDs, or are not collaborators on this repo: nonalloweduser

#reassign PRMergerTest2

#reassign NonAllowedUser

#please-close

The following users don't have valid GitHub IDs, or are not collaborators on this repo: nonalloweduser

GitHub user PRMergerTest1 has been removed from the MicrosoftDocs organization, so they were automatically removed as an assignee.

#unassign NonAllowedUser

#unassign PRMergerTest1


Cannot set ssh port in config.json

how can i use ssh port 9922 instead default 22 ?
a

Currently, there's no way to do that, but it's definitely something we should add.


test: create config tests

Codecov Report

Merging #11 into master will increase coverage by 0.88%.
The diff coverage is n/a.

@@            Coverage Diff             @@
##           master      #11      +/-   ##
==========================================
+ Coverage   49.92%   50.81%   +0.88%
==========================================
  Files          18       18
  Lines         679      679
==========================================
+ Hits          339      345       +6
+ Misses        340      334       -6

Impacted Files
Coverage Δ

Sources/AWSXRayRecorder/Config.swift
95.45% <0.00%> (+27.27%)
:arrow_up:

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update 7528cd0...2b5d4dd. Read the comment docs.


update current release to 1.24

inteeeerrreeesting, both CLAs say no :x

Yeah it's because I did it on my work laptop 🙃. I'll get it sorted

Approved, once we get the CLA situation fixed.
/approve
/lgtm

/check-cla

/check-cla

reopening shortly


package logo

package logo found here - https://github.com/panukatan/bagyo/raw/main/man/figures/logo.png


Tilt camera

Hi,
Is it possible to tilt/pitch the map (camera).
If not, is it technically possible to add such support?
For example in Mapbox GL - link
<script>
  mapboxgl.accessToken = '<your access token here>';
  var map = new mapboxgl.Map({
    container: 'map',
    style: 'mapbox://styles/mapbox/streets-v9',
    center: [-73.5804, 45.534830],
    pitch: 60, // pitch in degrees
    bearing: -60, // bearing in degrees
    zoom: 10
  });
</script>

or google_maps_flutter - link
RaisedButton(
  child: const Text('Go to London'),
  onPressed: mapController == null ? null : () {
    mapController.animateCamera(CameraUpdate.newCameraPosition(
      const CameraPosition(
        bearing: 270.0,
        target: LatLng(51.5160895, -0.1294527),
        tilt: 30.0,
        zoom: 17.0,
      ),
    ));
  },
),

No, that's not possible currently. You could try faking it, but I think there's a few issues off the top of my head.
I'm assuming the example linked, uses vector tiles ? So the characters/locations are independent. You could add some perspective to png tiles, but the lettering wouldn't be ideal, especially if rotated like in a satnav. So I'm guessing vector tiles would be needed.
I note that library uses webgl, which isn't available in flutter currently.
If you add various perspectives, I think the inputs (drags etc) may end up being off, so that would need to be accounted for as well.
So all in all, I assume this wouldn't be a trivial thing to do, unless you just wanted a simple visual none interactive map, then you could look at 3d transforms on tiles and try and hack something together (maybe).

Well, I would like it to be like in Google map app.

And an example with sat layer:

I will try the 3d transforms but I am not sure this is the best way. Maybe a better approach is use some kind of SDK and bridge it?

yeah, this package might not achieve what you want for this. applying a 3D transform to the tile layer is feasible in Flutter, but requires extra work to determine what tiles to render (there may be tiles in the distance that don't get rendered)


Add setting for captcha disable and MISC

update env example for to <IP_ADDRESS>
(localhost is resolver-dependent
could cause SQLSTATE[HY000] [2002] error on artisan installation)
add git ignore for IJ and R
Add settings for captcha disable
More localizations
some layout fixes

Can you suggest the controllers which I should consider putting $view->withSiteCaptcha.... ?

@abbychau
AuthController is the best. :laughing:

nice. thanks.

p.s. AuthController is not yet changed.

@abbychau  I did it. :laughing:

Whisp great :+1: .. I was steathily visiting GitHub during office hour. I can only check out at home. (Sweating:p


Heatmap div not resizing after deleting samples

When a user deletes a user-uploaded sample, the outer div surrounding the heatmap does not resize as needed.

Also seen when hiding lineages


when will you release the code

when will you release the code? I want to replay your experiments and verify your idea.

None of the pigs in the production team can rest as well as you, I guess.

Hej Channing, thanks for your interest in our work. We will release the code soon.

Hej Channing, now the full codebase has been released

Hej Channing, now the full codebase has been released

wow, so quickly !!! Thank you for your amazing work :)


installing on a live web server

Im trying to get this installed on my web server.
I get to the Set Up Path part and ill be putting the mangas in a directory called/read.   So wouldn't that path be domain.com/read? It keeps sayign that it cannot access that path.

Currently, this application can only support images from local file (filesystem) so there are no way to do it from url such as http or ftp


Workbook - VMware ESXi "VM status" is not found results

Describe the bug
A clear and concise description of what the bug is.
To Reproduce
Steps to reproduce the behavior:

Go to 'VMWare ESXi built-in dashboard'
Click on 'view the VMStatus'
Click edit the Query

VMwareESXi
| where SyslogMessage has ('VmPoweredOffEvent')
| extend DstHostname = extract(@'[\d+]\s+[(.*?)\s+on', 1, SyslogMessage)
| summarize off_t = max(TimeGenerated) by DstHostname
| project DstHostname, Status=strcat(iff(isnotempty(off_t), '❌ - Powered Off', '✅ - Running'))
4. See no result
Screenshots

Expected behavior
The vm status timeline is Running or poweroff data is showing.
Expected Screenshots filtered

Hi @jeffrywu28 , Thanks for flagging this issue, we will investigate this issue and get back to you with some updates by 29Nov23. Thanks!

Hi @jeffrywu28, we are unable to reproduce this issue, could you please share the sample data with us? so, we can check it from our end. Thanks!

Hi @jeffrywu28, we are waiting for your response on above comment. thanks!

Hi @jeffrywu28, Gentle Reminder: We are waiting for your response on this issue. If you still need to keep this issue active, please respond to it in the next 2 days. If we don't receive a response by 07-12-2023 date, we will be closing this issue.
Thanks!

sure which platform i can send u the sample?

Hi @jeffrywu28, you can provide sample data with us over GitHub itself or sent on this mail id -<EMAIL_ADDRESS>

Hi @jeffrywu28, we are waiting for sample data from you. could you please have a look at above comment and sent on that mail id or you can share it over this GitHub chat as well.
Thanks!

Hi @jeffrywu28, Gentle Reminder: We are waiting for your response on this issue. If you still need to keep this issue active, please respond to it in the next 2 days. If we don't receive a response by 13-12-2023 date, we will be closing this issue.
Thanks!

Hi @jeffrywu28, thanks for sharing the logs with us. we will check on this issue and get back to you by - 20-12-2023. Thanks!

Hi @jeffrywu28, we have made few modifications below workbook, could you please custom add it and let us know you are getting expected result.
Workbook Template Here - VMWareESXi.json

Go to Standalone Workbook -

Click Add workbook -

5.click advance edit -

Past our shared template there and click on apply -

Thanks!

Hi @jeffrywu28, hope you are doing well. Could you please check on above comment? and share feedback with us. Thanks!

Hi @jeffrywu28, since we have not received a response in the last 5 days, we are closing your issue #9468 as per our standard operating procedures. If you still need support for this issue, feel free to re-open at any time. Thank you for your co-operation.


python311Packages.aioautomower: 2024.5.1 -> 2024.6.1

Automatic update generated by nixpkgs-update tools. This update was made based on information from passthru.updateScript.
meta.description for python311Packages.aioautomower is: Module to communicate with the Automower Connect API
meta.homepage for python311Packages.aioautomower is: https://github.com/Thomas55555/aioautomower
meta.changelog for python311Packages.aioautomower is: https://github.com/Thomas55555/aioautomower/releases/tag/2024.6.1
Updates performed

Ran passthru.UpdateScript

To inspect upstream changes
Impact
Checks done

built on NixOS
The tests defined in passthru.tests, if any, passed
found 2024.6.1 with grep in /nix/store/vvk06i72p65iajryj9zrsj84g544bmrm-python3.11-aioautomower-2024.6.1
found 2024.6.1 in filename of file in /nix/store/vvk06i72p65iajryj9zrsj84g544bmrm-python3.11-aioautomower-2024.6.1

Rebuild report (if merged into master) (click to expand)

4 total rebuild path(s)

4 package rebuild(s)

First fifty rebuilds by attrpath

home-assistant-component-tests.husqvarna_automower
python311Packages.aioautomower
python312Packages.aioautomower

Instructions to test this update (click to expand)

Either download from Cachix:
nix-store -r /nix/store/vvk06i72p65iajryj9zrsj84g544bmrm-python3.11-aioautomower-2024.6.1 \
  --option binary-caches 'https://cache.nixos.org/ https://nix-community.cachix.org/' \
  --option trusted-public-keys '
  nix-community.cachix.org-1:mB9FSh9qf2dCimDSUo8Zy7bkq5CX+/rkCWyvRCYg3Fs=
  cache.nixos.org-1:6NCHdD59X431o0gWypbMrAURkbJ16ZPMQFGspcDShjY=
  '

(The Cachix cache is only trusted for this store-path realization.)
For the Cachix download to work, your user must be in the trusted-users list or you can use sudo since root is effectively trusted.
Or, build yourself:
nix-build -A python311Packages.aioautomower https://github.com/r-ryantm/nixpkgs/archive/9b0b6ee4210c61032ef5838c70d0d8f8fbedba63.tar.gz

Or:
nix build github:r-ryantm/nixpkgs/9b0b6ee4210c61032ef5838c70d0d8f8fbedba63#python311Packages.aioautomower

After you've downloaded or built it, look at the files and if there are any, run the binaries:
ls -la /nix/store/vvk06i72p65iajryj9zrsj84g544bmrm-python3.11-aioautomower-2024.6.1
ls -la /nix/store/vvk06i72p65iajryj9zrsj84g544bmrm-python3.11-aioautomower-2024.6.1/bin

Pre-merge build results
We have automatically built all packages that will get rebuilt due to
this change.
This gives evidence on whether the upgrade will break dependent packages.
Note sometimes packages show up as failed to build independent of the
change, simply because they are already broken on the target branch.
Result of nixpkgs-review --extra-nixpkgs-config '{ allowInsecurePredicate = x: true; }' run on x86_64-linux 1

1 package failed to build:

home-assistant-component-tests.husqvarna_automower

4 packages built:

python311Packages.aioautomower
python311Packages.aioautomower.dist
python312Packages.aioautomower
python312Packages.aioautomower.dist

Maintainer pings
cc @fabaff for testing.

Superseded by d831b1661c258c0594bf76c0a969bc12678c3f3a


Support binwalkv3 rewritten in Rust

The plugin does not work with the Rust-rewritten latest binwalk versions.

Thank you for notifying this evolution of binwalk. I was not aware of it.
Do you know if there is still a system allowing plugins written in python?


Enhancement: Enable vector search when base dataset has sufficient columns

Goal-State/What/Result
Support v1/search and DocumentSimilarity tool for datasets that have embedding columns in their underlying connection. A local dataset does not have to recreate these embedding columns. Initially, only the spice.ai connector needs to be supported.
Why/Purpose
Enable children spiced instances to read data/embeddings from a shared, parent spiced instance without needing to recompute vectors/chunking.
By When
Issue/Spec written and reviewed: 7th October
Done-Done: 10th October
Done-Done

[ ] First Principles Driven
[ ] The Algorithm
[x] PM/Design Review
[x] UX Review
[ ] Threat Model / Security Review
[ ] Tests
[ ] Documentation
[ ] Samples/Quickstarts/Tutorials
[ ] Release Notes

The Algorithm

[ ] Every requirement questioned?
[ ] Delete (Scope) any part you can.
[ ] Simplify.
[ ] Break down into smaller iterations/milestones.
[ ] Opportunities for automation.

Spec
Context + Current State
Consider a common dataset with vector search support.
datasets:
  - from: file:/Users/jeadie/Github/my-repo/docs/
    name: my_app_docs
    acceleration:
      enabled: true
    embeddings:
      - column: content
        use: embedding_model
        column_pk:
          - location
        chunking:
          enabled: true
          target_chunk_size: 512
          overlap_size: 128

embeddings:
  - name: embedding_model
    from: openai
    params:
      openai_api_key: ${ secrets:SPICE_OPENAI_API_KEY }

It requires the following state within spiced:

A column content_embeddings storing the embeddings for each row. In this example, since datasets[0].embeddings[0].chunking.enabled: true, content_embeddings will be of type List(FixedSizedList(Float32/64)).
A column content_offsets storing the offsets into the datasets[0].embeddings[0].column (i.e. content) that the embedding was produced onto. Note: when datasets[0].embeddings[0].chunking.enabled: false, this column is not present.
The configuration of the embedding model to use. datasets[0].embeddings[0].use is a reference to the embeddings[*].name to use.

Inferring embedding columns in a dataset.
Ideas:

For child spice instance, user still provides datasets[*].embeddings. If datasets[0].embeddings[0].column already has associated columns (as above), don't create these columns, use existing.

This solves issue about how to get the correct embedding model to embed search payloads.
For read-only use cases, child spiced doesn't need to know understand chunking.
Possible to have discrepancy in 1. child's datasets[0].embeddings[0] configuration and 2. how the parent spiced is configure. (e.g. child has chunking params that is different to parents).

For child spice instance, user does not provide datasets[*].embeddings. If any column(s) in dataset matches the pattern (e.g. content, content_embeddings & content_offsets) and has appropriate schema, don't create these columns, use existing.

Does not handle where/how to get embedding model
No erroneous/duplicate datasets[0].embeddings metadata.

Pass down metadata in Flight Schema either at base Schema level, or the individual Field level. Use to decide if/how to use column for embeddings.     - Does not handle where/how to get embedding model

Will only ever work with spice connector (have no control over schema metadata for other connectors).

Decision: Option 1.

When datasets[0].embeddings[0].column exists, user only needs to provide the following

datasets:
- from: flightsql:my_app_docs
  name: child_ds
  params:
    flightsql_endpoint: http://<IP_ADDRESS>:50051
  embeddings:
      - column: content
        use: child_embed
        column_pk:
          - location

embeddings:
  - name: child_embed
    from: openai:embedding_model # Model name from parent spice instance.
    params:
      endpoint: http://<IP_ADDRESS>:8090 # Proxy embedding requests (e.g. for /v1/search) to parent.

A user could use a different embedding model locally (i.e. running the same model locally, or using a different query embedding model).
Any additional config for dataset will receive warning logs.
How/MAP
A clear and concise plan of how this should be implemented.
Implementation (issues)

QA

Wait on https://github.com/spiceai/spiceai/issues/3068 before closing as it isn't functional for users until then.

Discovered that unnest is not supported in FlightSQL more generally. Must decide if we want to either:

Implement unnest in FlightSQL
Change how we perform vector search on chunked embedding columns.
Only support accelerated children nodes for vector search.

Target EOW: Done-done

#3133  fixes https://github.com/spiceai/spiceai/issues/3068

@Jeadie this is not done until the checklist is complete.


How to access dispatch function inside onDrop function() ?

I was planning to use middleware API where I can dispatch all actions using redux-thunk. So I was trying to upload my files using this common middleware API. For this I need to access dispatch function in onDrop() function.
Following is my component code:-
class DropZone extends Component{

  onDrop(files){
      const {dispatch} = this.props
     console.log("ondrop"+dispatch);// undefined
  }

  render(){
    const {accept,dispatch} = this.props
    console.log("dispatch"+dispatch); // works
    return(

        <Dropzone onDrop={this.onDrop} accept={accept}>

Try dropping some files here, or click to select files to upload.

        </Dropzone>

    );
  }
}

export default DropZone

Following is my container code:-
import React,{Component,PropTypes} from 'react'
import {connect} from 'react-redux'
import DropZone from '../components/DropZone'

function mapStateToProps(state){
  return{
    state
  }
}

class DropZoneContainer extends Component{
  render(){
    return(
        <DropZone {...this.props}/>
    )
  }
}

export default connect(mapStateToProps)(DropZoneContainer)

Looks like you forgot to bind this for onDrop.
BTW you don't need the Container element. You can write:
export default connect()(Dropzone);

onDrop = files => {}

Yup looks like I missed it 😞 . Works fine after binding this. Thanks a lot.


is it possible to run getsockopt against a luasocket?

I am looking to collect detailed information about a socket opened in luasocket and I don't currently see a way to run getsockopt against it. Is this possible currently?

Have you seen the getoption method?

Ah thank you, I was looking for getsockopt and glanced over getoption.


Implement inferencing pipeline and visually evaluate

Setup an inferencing pipeline that allows you to view the results on images and results as if the model is being used in the pipeline.
Note:

How will you handle rescaling of outputs if UNet is returning 512x512 masks?
How will you ingest images into the model? Will you need to resize them? Grid crop them?

what are the trade-offs between inferencing speed and accuracy? (we need to inferencing on several thousands of images so inferencing speed needs to be reasonable.

create a new branch for this

Note:
With defaults unet_implementation:

unet output image size: 512x512
inference input size: 512x512

@mkutu
The GPU memory was insufficient to process the image NCB00789.jpg, Reason: larger size of (5156, 4379, 3).
This is the full size image ---> Cropped with detected weed bbox with the pre-trained model --->  cropped image used for inference with the trained UNET segmentation model.

Resizing to 1/4th works.


@angular-devkit/build-angular depends on vulnarable version of webpack

Command
new
Is this a regression?

[ ] Yes, this behavior used to work in the previous version

The previous version in which this bug was not present was
No response
Description
Running npm audit on Angular v15 project causes an error output, because @angular-devkit/build-angular depends on vulnerable version of webpack 5.75.0.
Minimal Reproduction

Create new Angular project using the latest @angular-cli version 15.2.3.
Run npm audit in the project folder

Exception or Error
webpack  5.0.0 - 5.75.0
Severity: high
Cross-realm object access in Webpack 5 - https://github.com/advisories/GHSA-hc6q-2mpp-qw7j
fix available via `npm audit fix --force`
Will install<EMAIL_ADDRESS>which is a breaking change
node_modules/webpack
  @angular-devkit/build-angular  0.1200.0-next.0 - 16.0.0-next.3
  Depends on vulnerable versions of webpack
  node_modules/@angular-devkit/build-angular

2 high severity vulnerabilities

Your Environment
Angular CLI: 15.2.3
Node: 16.15.1
Package Manager: npm 8.11.0
OS: win32 x64

Angular: 15.2.2
... animations, common, compiler, compiler-cli, core, forms
... platform-browser, platform-browser-dynamic, router

Package                         Version
---------------------------------------------------------
@angular-devkit/architect       0.1502.3
@angular-devkit/build-angular   15.2.3
@angular-devkit/core            15.2.3
@angular-devkit/schematics      15.2.3
@angular/cli                    15.2.3
@schematics/angular             15.2.3
rxjs                            7.8.0
typescript                      4.9.5

Anything else relevant?
No response

Please port the fix to 13.x version if possible.
Thanks!

Good morning, I have the same problem in Angular 14.0.0. In the console, I see this message: webpack  5.0.0 - 5.75.0
Severity: high
Cross-realm object access in Webpack 5 - https://github.com/advisories/GHSA-hc6q-2mpp-qw7j
fix available via npm audit fix --force
Will install<EMAIL_ADDRESS>which is a breaking change
node_modules/webpack
@angular-devkit/build-angular  0.1200.0-next.0 - 16.0.0-next.3
Depends on vulnerable versions of webpack
node_modules/@angular-devkit/build-angular
2 high severity vulnerabilities
To address all issues (including breaking changes), run:
npm audit fix --force

Could you please port this fix back to 14.2.x version?

Could you please port this fix back to 14.2.x version?

The same patch is replicated for 14.2.x here:
https://github.com/angular/angular-cli/pull/24863

Webpack version has been updated in 13.3.11, 14.2.11 and 15.2.4.


Page Load Error - Droid Turbo 2

For the last week or so, any attempt to use the app is met with a Page Load Error. Screen initializes once, flashes black, then displays the plain text message Page Load Error. I'm on the latest system software, 25.201.6
Any help with this would be great, as otherwise I really do like the app.

I can't seem to reproduce this on any of my devices. Was there a system update, or possibly a chrome update, immediately prior to this happening?

I don't believe so. I went ahead and updated to the most recent version of Chrome available, 59.0.3071.117, then reinstalled Pocket Furc, then power cycled, but I'm still having issues. Once I'm done with work today I will see if I can dig through the app code and try and find the issue as well

Ah, just thought I should clarify: it's Page load failed, not error. My mistake. Further, I've tried clearing both Chrome and Pocket Furc's cache, as well as my system cache, to no help.

A friend of mine confirms this issue.
Samsung Galaxy J3, Model Number SM-J320FN, Android version 5.1.1, Chrome version 58.0.3029.83

Yesterday app worked fine, Last night google updated lots of things including the Chrome browser and now this morning it no longer works. Just gives "Page load error" In top left of screen.

I've had the same issue for about a week too. On both my Tab S2 and Galaxy S8+, both updated to the latest android.

Finally started receiving this error now as well. Guessing it's due to a chrome webview content policy update. I'll try to figure it out and patched this week.

Well, it seems like recent changes to the android sdk have broken the android framework pocketfurc uses (Mobile Chrome Apps). That framework is no longer in active development since chrome apps are being phased out. Since pocketfurc has been living on borrowed time for the past year or so, the proper solution is to disentangle pocketfurc from chrome then port it to cordova for mobile and electron for desktop. This isn't trivial at all so I've unpublished the app from the play store until this can all get sorted out. No ETA on when pocketfurc will return, sorry.

Was wondering if there was an update on how the unfortunate overhaul is going?

Any update? I just got a Galaxy Fiesta and went to open pocketfurc to meet the page load error message. Made me so sad...

Sorry, I've really got no time to devote to this project right now. I was hoping the web client would be out by now to pick up the slack.

Well that makes me sad.... It was a great app. Hope you are doing well.
Guess I'll just have to wait then
On Mar 10, 2018 8:03 PM, "Not Larry"<EMAIL_ADDRESS>wrote:

Sorry, I've really got no time to devote to this project right now. I was
hoping the web client would be out by now to pick up the slack.
—
You are receiving this because you commented.
Reply to this email directly, view it on GitHub
https://github.com/cluracan/pocketfurc/issues/29#issuecomment-372080481,
or mute the thread
https://github.com/notifications/unsubscribe-auth/AjhpPz0MT7OFk8m5uisMVfhNya6VMzJwks5tdHfdgaJpZM4OFL1v
.


add Contains operation

Make sure that you've checked the boxes below before you submit PR that adds a new operation:

[ ] I implemented the operation for all applicable types
[ ] I put all code in a seperate .go file named after the operation
[ ] I included tests for all functions
[ ] I documented all functions
[ ] I named all functions using the OperationType convention. For example MinInt32 instead of Int32Min
[ ] I included one testable example at the end of the test file
[ ] I added a simple example in the Example section of Readme
[ ] I updated the Operations section of Readme

Thanks for your PR, you're awesome! :+1:

Codecov Report

Merging #6 into master will not change coverage.
The diff coverage is 100%.

@@          Coverage Diff           @@
##           master     #6    +/-   ##
======================================
  Coverage     100%   100%
======================================
  Files           2      3     +1
  Lines         240    373   +133
======================================
+ Hits          240    373   +133

Flag
Coverage Δ

#unittests
100% <100%> (ø)
:arrow_up:

Impacted Files
Coverage Δ

contains.go
100% <100%> (ø)

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update c93bbe8...1a56c9f. Read the comment docs.


UI controls not accessible through keyboard under metrics in application live view plugin

Expected Behavior
UI controls should be accessible through keyboard under metrics in application live view plugin.
Actual Behavior

Navigate to Home on the left navigation. Make sure Components is selected on menu below the main heading.
Select all filter and in the table navigate to any application under name column with application live view plugin available (see screenshot below).
In the next page that opens up for selected appplication, please navigate to Runtime resources tab.
Navigate to Resources table and select the name of the application. A new page opens up.
Navigate to Pods table and select a link under name column.
In the new page that opens up, navigate to Live view section.
Select Metrics item from the menu item.
Verify whether multiple comboboxes and buttons (e.g. Add metric) are accessible through keyboard.

Context
Ensure all interactive elements can receive focus and are actionable via keyboard. For example, links use the ENTER key while buttons should allow ENTER and SPACE key.
Involved component(s):

Select from '@backstage/core-components'
Button from '@backstage/core-components'

User Impact:
When any UI component are not accessible by using keyboard then user who rely on keyboard are facing difficulty and not able to perform any action and are completely block to perform any functionality on that control element.
A11y Conformance Level: A
WCAG Success Criteria: 2.1.1
Environment
Browser Information:
Google Chrome v100.0.4896.127
Firefox 99.0.1
Safari 15.4

Thanks for making all of these, by the way! 🥳

@claudiahub We are not sure that we recognise this view at all - could it be an internal plugin that you have?

@freben this is, as you mentioned, an internal plugin but the components in this view are located on @backstage/core-components so I guess we should address there this accessibility issue. What do you think ?

@freben a Pr I did recently ➡https://github.com/backstage/backstage/pull/11339, I guess this should close also this issue.

@freben Hi, I guess this can be closed.
It's on an internal plugin that #11339 fixed.
Thanks!


Update changes from dependabot

Coverage remained the same at 90.098% when pulling 2b888431575e50f714fdb0b01b94bea247c4855b on kinow:update-changelog into 8db7f684d30bf8df1e34d92e09ef83df8bb876be on apache:master.


Allow online installation of packages

Registries
This PR adds a new concept: registry. Registries are .nuon files containing a list of packages, their versions, and how they should be installed. Currently, registry can contain two kinds of packages:

local -- installed from local file system
git -- installed from remote Git repository

Examples of registry files:

https://git.sr.ht/~kubouch/nupkgs/tree/main/item/registry.nuon
tests/packages/registry.nuon

The list of recognized registries is stored in $env.NUPM_REGISTRIES as a record of name: path pairs. That way, users can maintain their collection of sources from where they want to install packages. Not sure if this will be the final way to pass available registries to nupm, but should be good enough for early testing.
Once this PR is done, we'll have one official nupm registry that will be used as default. The current defaults are just for testing.
Online Installation
If a package is to be installed from a local Git repository, the repository is cached in $env.NUPM_CACHE to avoid re-cloning the same repository all the time. Once cloned, the local path of the cloned repository is passed to the installer, as if you called nupm install --path=....
One important missing feature is some kind of file integrity check. One step at a time...
Versions
If a registry contains multiple versions (common scenario), by default, the newest one is installed. "Newest" currently means sorting the versions alphabetically and taking the last one. If --pkg-version is specified, nupm tries to install the exact version passed to this option. This needs better version matching (e.g., version 0.2 matching 0.2.1 etc.), but again, one step at a time...
Try it out
From the repository root:
# Add some testing registries
$env.NUPM_REGISTRIES = {
    kubouch: 'https://git.sr.ht/~kubouch/nupkgs/blob/main/registry.nuon'
    local_test: ($env.PWD | path join tests packages registry.nuon)
}

use nupm

# Make installed scripts executable
$env.PATH ++= [ ($env.NUPM_HOME | path join scripts) ]

nupm install spam_script --registry kubouch --force
spam_script.nu # prints "Hello world!"

nupm install spam_script --registry local_test --force
spam_script.nu # prints "Hello world v0.2.0!"

nupm install spam_script --registry local_test --pkg-version 0.1.0 --force
spam_script.nu # prints "Hello world!"

TODO

[ ] Remove debug stuff
[ ] Nicer / more informative prints
[ ] Rewrite https://github.com/nushell/nupm/blob/main/index.nuon to fit the registry format, move it to its own repo

It would be a single-file repository
Package authors would put PRs there whenever they update their package

[ ] Tests

After

better version matching => 0.2 shouldn't match 0.2.1
file integrity checks

Poggers! This is really cool! Good job kobouch! 🎉

i could run the first step with
nupm install spam_script --registry kubouch --pkg-version '0.1.0'

Ah, you managed to find a Nushell type checking bug, I fixed the missing --pkg-version error :-).

Seems like you're trying to run it from the installed directory, the test commands in the PR description are meant to be run from the nupm repo root . The tests/ directory shouldn't be installed, so it makes sense it doesn't work. I'll update the description.

Ah, you managed to find a Nushell type checking bug, I fixed the missing --pkg-version error :-).

ehe :smirk:

I also reordered and fixed the steps, check it out. Save the whole snippet to a file and run nu file.nu from the repo root.

ooh interesting

when i run from inside a script, i get no errors, but the middle print is Hello world!, not  Hello world v0.2.0!
when i run the same steps from the REPL, i get the error above with the two last nupm install commands

The first bullet should work now.
The second bullet is because you have misconfigured the registry path (note, I changed FILE_PWD to PWD). It's just for the sake of the example, you can define your own paths.

yup, the first bullet is fixed :ok_hand:
as for the second one, i'm not sure what i should run in the REPL to make it work...
i have this script for now
$env.NUPM_HOME = /tmp/foo.nu

$env.NUPM_REGISTRIES = {
    kubouch: 'https://git.sr.ht/~kubouch/nupkgs/blob/main/registry.nuon'
    local_test: ($env.PWD | path join tests packages registry.nuon)
}

# Make installed scripts executable
$env.PATH ++= [ ($env.NUPM_HOME | path join scripts) ]

use nupm

nupm install spam_script --registry kubouch --force
spam_script.nu # prints "Hello world!"

nupm install spam_script --registry local_test --force
spam_script.nu # prints "Hello world v0.2.0!"

nupm install spam_script --registry local_test --pkg-version 0.1.0 --force
spam_script.nu # prints "Hello world!"

You can run each line/statement as its own REPL iteration. Note that you've set NUPM_HOME to a file, not a directory.

yeah my bad that was a typo...

You might have some old stuff lingering around from the previous REPL attempts. Try running a fresh nu -n.

yes i did run everything above (with the typo fixed) from nu -n and still get the same error

but there is something fishy going on

before running the first nupm install
> $env.NUPM_REGISTRIES
╭───────────────┬──────────────────────────────────────────────────────────────────────────────────────────────╮
│ kubouch       │ https://git.sr.ht/~kubouch/nupkgs/blob/main/registry.nuon                                    │
│ local_test    │ /home/amtoine/documents/repos/github.com/amtoine/nushell-nupm/tests/packages/registry.nuon   │
╰───────────────┴──────────────────────────────────────────────────────────────────────────────────────────────╯

and after
╭────────────┬───────────────────────────────────────────────────────────╮
│ kubouch    │ https://git.sr.ht/~kubouch/nupkgs/blob/main/registry.nuon │
│ local_test │ /home/amtoine/.config/bspwm/tests/packages/registry.nuon  │
╰────────────┴───────────────────────────────────────────────────────────╯

i run BSPWM with Nushell, no idea what it has to do with Nupm here :eyes:

That's because NUPM_REGISTRIES are currently set to some debugging values, do not run it with nupm install, just set the values manually and run it locally. I just wanted to get feedback on the core functionality before moving on.

aah yeah, sorry again for the back and forth @kubouch, it works fine both in a script and in the REPL after i apply
diff --git a/nupm/mod.nu b/nupm/mod.nu
index 3b7b0de..53152bd 100644
--- a/nupm/mod.nu
+++ b/nupm/mod.nu
@@ -26,7 +26,7 @@ export-env {
     $env.NUPM_REGISTRIES = {
         # nupm: ($env.NUPM_HOME | path join registry.nuon)
         kubouch:'https://git.sr.ht/~kubouch/nupkgs/blob/main/registry.nuon'
-        local_test: ($env.FILE_PWD | path join tests packages registry.nuon)
+        local_test: ("/home/amtoine/documents/repos/github.com/amtoine/nushell-nupm" | path join tests packages registry.nuon)
         # remote_test: 'https://raw.githubusercontent.com/nushell/nupm/main/tests/packages/registry.nuon'
     }
 }

OK, I think it's ready for review. Could be polished and tested more thoroughly, but then it would never be ready :-D

That's because the registry is pointing at the local registry.nuon which doesn't get installed by nupm. This will be pointing at the online file, but because it's not merged yet, I put the local file there for now. Maybe I should commit the registry separetely?
Try running it from the repo root without installing nupm. It's a chicken and egg problem...

@kubouch
i don't know why it keeps not working...
what i'm seeing is that the $path that http get tries to fetch is a local path on my filesystem and thus it fails and gives the error above :thinking:

nupm tries http get $path if $path is not a valid file. Which means that the nupm_test registry pointed at invalid file. This might be because you installed nupm with nupm which doesn't install the registry by default and because the registry was derived from $env.FILE_PWD.
Now, I changed the default registry to point at nupm repository so it should work regardless of how you installed nupm, one https://github.com/nushell/nupm/pull/68 is merged.

aah yeah, let me try again :+1:

okey, the example appears to work now :partying_face:
i won't have time to finish this right now, i'll come back to it soon :pray:

let's try it out and see how it goes :yum:


Where is the wixel in the data abstraction?

Is it transmitter -> BLE receiver -> wixel -> usb -> computer?
Or is it transmitter -> wixel -> BLE transmitter -> android -> xDrip?
Is it possible to have the packets be read into a computer instead of an android phone?

it goes transmitter to wixel to ble to xdrip/android
if you want it to go to a computer, just plug the wixel in to a computer running a serial terminal like coolterm or screen or something, the xdrip-wixel code is set up to send the data over usb if it see its plugged in through usb automatically

Great, thanks!


/go-openai/master

A similar PR may already be submitted!
Please search among the Pull request before creating one.
If your changes introduce breaking changes, please prefix the title of your pull request with "[BREAKING_CHANGES]". This allows for clear identification of such changes in the 'What's Changed' section on the release page, making it developer-friendly.
Thanks for submitting a pull request! Please provide enough information so that others can review your pull request.
Describe the change
Please provide a clear and concise description of the changes you're proposing. Explain what problem it solves or what feature it adds.
Provide OpenAI documentation link
Provide a relevant API doc from https://platform.openai.com/docs/api-reference
Describe your solution
Describe how your changes address the problem or how they add the feature. This should include a brief description of your approach and any new libraries or dependencies you're using.
Tests
Briefly describe how you have tested these changes. If possible — please add integration tests.
Additional context
Add any other context or screenshots or logs about your pull request here. If the pull request relates to an open issue, please link to it.
Issue: #XXXX

from openai import OpenAI
client = OpenAI()
response = client.chat.completions.create(
model="gpt-3.5-turbo",
messages=[
{
"role": "system",
"content": "# Jarvis DApp\n\nJarvis is a decentralized application (DApp) built on the Ethereum blockchain, partnered with OpenAI.\n\n## Smart Contracts\n\n- MyContract.sol: Main smart contract for the Jarvis DApp.\n\n## Frontend\n\n- index.html: HTML file for the frontend.\n- styles.css: CSS file for styling the frontend.\n- script.js: JavaScript file for frontend logic.\n\n## Testing\n\n- Automated tests for smart contracts and frontend components.\n\n## Deployment\n\n- Deployment scripts and instructions for deploying the Jarvis DApp.\n\n## Usage\n\n- Instructions for using the Jarvis DApp.\n\n## Contributors\n\n- List of contributors to the Jarvis DApp project.\n\n## License\n\n- License information for the Jarvis DApp.\n\nCreated with Ethereum. Partnered by OpenAI.Many words map to one token, but some don't: indivisible.\n\nUnicode characters like emojis may be split into many tokens containing the underlying bytes: 🤚🏾\nImproving coding skills requires consistent practice, learning from mistakes, and seeking out new challenges. Here's how you can approach it:\n\n1. Practice Regularly: Dedicate time each day or week to coding practice. Work on coding challenges, solve problems on platforms like LeetCode or HackerRank, and build small projects to apply what you've learned.\n\n2. Learn from Mistakes: Don't be afraid to make mistakes. When you encounter errors or bugs in your code, take the time to understand why they occurred and how you can fix them. Learning from mistakes is one of the most effective ways to improve.\n\n3. Review and Refactor: After completing a coding task or project, take the time to review your code. Look for areas where you can improve efficiency, readability, and maintainability. Refactor your code as needed to make it cleaner and more organized.\n\n4. Seek Feedback: Share your code with peers, mentors, or online communities for feedback. Constructive criticism can help you identify blind spots and areas for improvement that you may not have noticed on your own.\n\n5. Learn Data Structures and Algorithms: Deepen your understanding of fundamental data structures and algorithms. Knowing when and how to use different data structures and algorithms is essential for writing efficient and scalable code.\n\n6. Explore New Technologies and Languages: Stay curious and explore new technologies, frameworks, and programming languages. Learning different programming paradigms and tools can broaden your skill set and make you a more versatile developer.\n\n7. Read Code: Read code written by experienced developers. Studying well-written code can teach you new techniques, design patterns, and best practices.\n\n8. Set Goals: Set specific, achievable goals for your coding journey. Whether it's mastering a new programming language, building a particular project, or solving a challenging coding problem, having clear goals can keep you motivated and focused.\n\n9. Stay Updated: Keep up with industry trends, new developments, and best practices in software development. Attend conferences, workshops, or online courses to stay updated on the latest technologies and methodologies.\n\n10.  Share your knowledge through tutorials, blog posts, or mentoring opportunities.\n\nRemember, improving coding skills is a continuous journey, so be patient and persistent in your efforts. Celebrate your progress along the way, and don't hesitate to ask for help when you need it."
},
{
"role": "user",
"content": ""
}
],
temperature=1,
max_tokens=256,
top_p=1,
frequency_penalty=0,
presence_penalty=0
)
Sure, here's a simple example of how you might structure your DApp code and a README.md file:
DApp Structure:
├── contracts
│   └── MyContract.sol
├── frontend
│   ├── index.html
│   ├── styles.css
│   └── script.js
├── tests
│   ├── contract_tests.js
│   └── frontend_tests.js
├── deployment
│   ├── deploy.js
│   └── README.md
└── README.md

Sample Code:
MyContract.sol:
// MyContract.sol
pragma solidity ^0.8.0;

contract MyContract {
    string public greeting;

    constructor() {
        greeting = "Hello, World!";
    }

    function setGreeting(string memory _greeting) public {
        greeting = _greeting;
    }
}

index.html:

<!DOCTYPE html>

    <meta charset="UTF-8">
    <meta name="viewport" content="width=device-width, initial-scale=1.0">
    <title>My DApp</title>
    <link rel="stylesheet" href="styles.css">

Welcome to My DApp

    <input type="text" id="newGreeting">
    <button onclick="setGreeting()">Set Greeting</button>

script.js:
// script.js
const contractAddress = 'CONTRACT_ADDRESS';
const contractABI = [
    // Add your contract ABI here
];

const web3 = new Web3(Web3.givenProvider);

const contract = new web3.eth.Contract(contractABI, contractAddress);

async function getGreeting() {
    const greeting = await contract.methods.greeting().call();
    document.getElementById('greeting').innerText = greeting;
}

async function setGreeting() {
    const newGreeting = document.getElementById('newGreeting').value;
    await contract.methods.setGreeting(newGreeting).send({ from: ethereum.selectedAddress });
    getGreeting();
}

getGreeting();

README.md:
# My DApp

My DApp is a decentralized application (DApp) built on Ethereum.

## Smart Contracts

- `MyContract.sol`: Main smart contract for the My DApp.

## Frontend

- `index.html`: HTML file for the frontend.
- `styles.css`: CSS file for styling the frontend.
- `script.js`: JavaScript file for frontend logic.

## Testing

- Automated tests for smart contracts and frontend components.

## Deployment

- Deployment scripts and instructions for deploying the My DApp.

## Usage

- Instructions for using the My DApp.

## License

- License information for the My DApp.

Created with Ethereum.

This is a basic structure and sample code for a DApp. You'll need to fill in the details such as the contract address, ABI, contract logic, deployment scripts, testing, and usage

pushing to the master branch on Roockeeeet/go-openai.


Question: local $ref in external file

Hello,
I'm trying to split my YML files into smaller parts so that it will be easier to work with. I have main file api-paths-extracted.yml
openapi: 3.0.2
info:
  description: |-
    This is a sample Pet Store Server based on the OpenAPI 3.0 specification.  You can find out more about
    Swagger at [http://swagger.io](http://swagger.io).
  version: 1.0.17
  title: Swagger Petstore - OpenAPI 3.0
  termsOfService: 'http://swagger.io/terms/'
  contact:
    email<EMAIL_ADDRESS>  license:
    name: Apache 2.0
    url: 'http://www.apache.org/licenses/LICENSE-2.0.html'
tags:
  - name: pet
    description: Everything about your Pets
paths:
  /pet:
    put:
      $ref: './pet_put.yml'
components:
  schemas:
    $ref: './components.yml'

In components.yml I have Pet definition and in pet_put.yml I would love to reference it using #/components/schemas/Pet. However if I run lint or bundle it will complain that in pet_put.yml reference to #/components/schemas/Pet is unknown. Is there a way to handle that in redocly-cli.
I'm using redocly-cli in version 1.0.0-beta.120.
My command:
node<EMAIL_ADDRESS>bundle ./schemas/pet/api-paths-extracted.yml  --output api-bundled.yml

Files that I'm using
Archive.zip

No, you should reference it like $ref: ./path-to-file.yml. The reference will change once you bundle the file and inspect the output.
One of the easiest ways to see this is to use the split command:
npx @redocly/cli split openapi.yaml --outDir split

Inspect the files.
Then bundle the split file
npx @redocly/cli bundle split/openapi.yaml -o dist/bundled.yaml

Then inspect bundled.yaml and you will see the references are local. The reference parts roughly mean # in this file, / from the root of the file, components to the components property, schemas to the schemas property, Pet, to the Pet property.

This looks like a good answer so I'll close the issue - but let us know if you need anything else on this, @antusus ?


942520: Add a new ruleset for SQL Authentication bypass

This is a patch for a bypass from the BugBounty event combined with a light cleanup of existing rules.
Testdata only have one rule for now, but many more will be added to it in other PRs
Report id: UFDYE8U2
Bypass payloads:

email=admin@juice-sh.op'or?--
email=admin@juice-sh.op'or:a--

Alternative payloads:

<EMAIL_ADDRESS>rowid*?--
<EMAIL_ADDRESS>rowid*$a--

Explanation:
SQLite Parameters (Section 4) can be used to bypass MANY of the existing rules as they can be placed almost everywhere. For example, or? will expand to or null if there were no parameters bind.
The added regular expression [\"'`]\s*?or\b aims to protect against all 'or'-based basic authentication bypasses.
The current rules don't even seem to protect against the simplest possible payload a'or'a which only gets blocked by libinjection but it has many known bypasses.
Fix caveats
The fix only aims to protect against simple injection just after the injection point. The fix won't protect against more complex attacks such as<EMAIL_ADDRESS>or?-- as it combines different bypass techniques. This seems to align with how other expressions are written in other rules.
One of the false-positives that could trigger is is this your parents' or yours?, but it shouldn't yield too many. If the expression was to be changed to [\"'`].*?\bor\b I guess it could have trigger many more.

As there were no updates on this PR, I decided to merge most of my authentication reports into this one. This PR patches the following reports:

PORZHQ6P
UFDYE8U2
NFDHLJJE
ZKD2XA25
1K3P6A0D
05OX8BY7

Base request:
POST /juiceshop/rest/user/login HTTP/1.1
Host: sandbox.coreruleset.org
Content-Length: 27
Content-Type: application/x-www-form-urlencoded
User-Agent: curl
Connection: close
x-crs-paranoia-level: 3
x-format-output: txt-matched-rules
x-crs-version: nightly
accept: text/jss

email=

PORZHQ6P
Payloads:

email=email' is not-rowid--

UFDYE8U2
Dupes: 7NLGEWUC, TOCN7W2Y, SKAB478C
Payloads:

<EMAIL_ADDRESS>or?--
email=' is not?--
<EMAIL_ADDRESS>or:a--
email=' is not:a--
email=asd'*null is?--

NFDHLJJE
Payloads:

email=email' mod id--
email=email' div id--

ZKD2XA25
Payloads:

email' sounds like rowid--

1K3P6A0D
Payloads:

email=email' is not email--
email=email' not like email--

05OX8BY7
Payloads: 942370

email=a'|email--
email=a'*email--
email=a'%2bemail--

CRS Bug Bounty PR assessment

Rules affected (list rules): FIXME
Paranoia Level addressed (1, 2, 3, 4, full or explain): FIXME
FTW passes (yes or no) : FIXME
Rule(s) picked for solution (correct or not-correct or explain) : FIXME
Risk for false positives (irrelevant, adequate, substantial or explain) : FIXME
Regular expression quality (inspirational, decent base, needs work, adequate or explain) : FIXME
Documentation (needs work, adequate or explain) : FIXME
Tests (none or some or adequate) : FIXME

Verdict (Unusable, inspirational, usable, almost perfect or perfect) : FIXME

This is not meant to be final. As a CRS dev, feel free to comment below and edit this form directly. As committer or observer, feel free to comment below with feedback and we will think about updating the assessment accordingly.

@lifeforms I added more tests in general.
For the risk of false positives, my research shows that the risk of false-positives should fit well PL2. I downloaded wikipedia 2016 1M and ran the expressions against the senteces and these are the results:
9156/1M for:
[\"'`]\s*?or\b
[\"'`]\s*?and\b
[\"'`]\s*?is\s+not\b
[\"'`]\s*?not\s+(like|glob|between|null|in|regexp|match)\b
[\"'`]\s*?[|&<>*/%=^+-]
[\"'`]\s*?(mod|div)\b
[\"'`]\s*?sounds\s+like\b

where 693/1M for:
[\"'`]\s*?is\s+not\b
[\"'`]\s*?not\s+(like|glob|between|null|in|regexp|match)\b
[\"'`]\s*?[|&<>*/%=^+-]
[\"'`]\s*?(mod|div)\b
[\"'`]\s*?sounds\s+like\b

and 8509/1M for:
[\"'`]\s*?or\b
[\"'`]\s*?and\b

By grepping valid SQL auth bypasses in form of foo' or 'oof it yields 4194/1M results,
'\s*?or\s+*'
'\s*?and\s+*'
"\s*?or\s+*"
"\s*?and\s+*"
`\s*?or\s+*`
`\s*?and\s+*`

which leaves the potential of ~4000/1M false positives from the wikipedia.
The more specific rule yields 5833 results but it might be prone to various bypasses:
'\s*?or[^\n]*('|--|/\*|#|;)
'\s*?and[^\n]*('|--|/\*|#|;)
"\s*?or[^\n]*("|--|/\*|#|;)
"\s*?and[^\n]*("|--|/\*|#|;)
`\s*?or[^\n]*(`|--|/\*|#|;)
`\s*?and[^\n]*(`|--|/\*|#|;)
[\"'`]\s*?is\s+not\b
[\"'`]\s*?not\s+(like|glob|between|null|in|regexp|match)\b
[\"'`]\s*?[|&<>*/%=^+-]
[\"'`]\s*?(mod|div)\b
[\"'`]\s*?sounds\s+like\b

The improvement over false-positives and complexity of the rule doesn't seem to be worth it.
Please also note, that most of the payloads that potentially yield false-positives would be already cacthed by different rules by both libinjection and CRS.
See for example:
POST /juiceshop/rest/user/login HTTP/1.1
Host: sandbox.coreruleset.org
Content-Length: 105
Content-Type: application/x-www-form-urlencoded
User-Agent: curl
Connection: close
x-crs-paranoia-level: 2
x-format-output: txt-matched-rules
x-crs-version: nightly
accept: text/jss

email=According to Eric S. Raymond, it "nicely illustrates the difference between 'hacker' and 'cracker'.

blocked by:
942400 PL2 SQL Injection Attack
949110 PL1 Inbound Anomaly Score Exceeded (Total Score: 5)
980130 PL1 Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=5,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 0, 5, 0, 0

While libinjection is a bit smarter and perform counts on the number of quotes, etc. it's not possible to achieve the same with regular expressions.
Pushing or and and to PL3 means that trivial bypasses such as admin'or? could be used in a vulnerable application and then other authentication-bypasses will not make much sense.
less than 1% of false-positives seems like a fair tradeof for PL2.

Please not that the purposely chosen set wikipedia has a higher chance of quotes detected than other sets. The same rules ran against eng-uk_web-public_2018_1M-sentences.txt only yield 1610/1M hits.

TODO CRS: Finalize rating with new information about FP.

One more update. Keyword and is added as a bonus patch, not reported as a bypass as it is harder to pull off than or-based attack, like:  user'and~?; doesn't bypass the WAF while user'or~?; does. It also makes for the majority of potential false-positives  (6139 vs 2481) so it might be reasonable to drop it from auth bypasses. CRS won't block user"and"foo but it gets blocked by libinjection and I wasn't able to easily bypass it.
Without and addition, the rules yield 3155/1M hits against eng_wikipedia_2016_1M-sentences.txt and 572 against eng-uk_web-public_2018_1M-sentences.txt which is a major improvement over the original rules.
If the false-positive concern remains valid, the line [\"'`]\s*?and\b could be removed. If that is still too false-positive prone, then:
'\s*?or\b[^\n]*?('|--|/\*|#|;)
"\s*?or\b[^\n]*?("|--|/\*|#|;)
`\s*?or\b[^\n]*?(`|--|/\*|#|;)
'\s*?is\s+not\b[^\n]*?('|--|/\*|#|;)
"\s*?is\s+not\b[^\n]*?("|--|/\*|#|;)
`\s*?is\s+not\b[^\n]*?(`|--|/\*|#|;)
'\s*?not\s+(like|glob|between|null|in|regexp|match)\b[^\n]*?('|--|/\*|#|;)
"\s*?not\s+(like|glob|between|null|in|regexp|match)\b[^\n]*?("|--|/\*|#|;)
`\s*?not\s+(like|glob|between|null|in|regexp|match)\b[^\n]*?(`|--|/\*|#|;)
'\s*?[|&<>*/%=^+-][^\n]*?('|--|/\*|#|;)
"\s*?[|&<>*/%=^+-][^\n]*?("|--|/\*|#|;)
`\s*?[|&<>*/%=^+-][^\n]*?(`|--|/\*|#|;)
'\s*?(mod|div)\b[^\n]*?('|--|/\*|#|;)
"\s*?(mod|div)\b[^\n]*?("|--|/\*|#|;)
`\s*?(mod|div)\b[^\n]*?(`|--|/\*|#|;)
'\s*?sounds\s+like\b[^\n]*?('|--|/\*|#|;)
"\s*?sounds\s+like\b[^\n]*?("|--|/\*|#|;)
`\s*?sounds\s+like\b[^\n]*?(`|--|/\*|#|;)

yields 2173 results, but is hard to maintain and ugly.

@lifeforms I split the fix into two separate rules: 942520 and 942521. Please score all fixes (to corresponding reports) separately. I followed with how other false-positive prone rules are commented but purposely haven't followed the guideline of marking the score as warning/notice. I am pretty sure that the vast majority of false-positives will occur in free-text forms, but those will already yield many false-positives from other rules. This should be critical as this is the most common auth-bypass technique and warning/notice doesn't make much sense imo.

I experimented with having and/or only after an odd number of quotes in https://github.com/terjanq/coreruleset/tree/patch-new-crazy-rule-942520 but it seems that it could cause performance issues and one test seems to be bypassing backtracking (?!)

Thank you, and we will see how it goes on live traffic! :)

@lifeforms, any news about real world behaviour here?
@terjanq would like us to adjust the verdict on the PR.


The tense is wrong, reverting back to original

The tense was changed so it reads very strangely, and it is too formal and doesn't sound like it's written by me. I am changing it back to the original text to fix this.
Signed-off-by: vsoch<EMAIL_ADDRESS>

I appreciate the editor taking the time to change, but I want to suggest that this process really needs to be a collaboration with the original author, and done (again) via a pull request to discuss changes. In this case, even though I went through peer review to have my original draft approved, these changes were done without any kind of discussion, and unfortunately the article was really re-written incorrectly and changed to be so formal it was no longer in my voice.
So I would like to suggest in the future requiring all technical editors/writers to also participate in opening a PR to discuss changes, and then having a conversation with the author. This "revert back at the last minute because OMG what happened" method isn't really so great... it's very stressful because the evening is the tiny amount of time I can try to relax, not work, and not be stressed, but receiving a piece that I didn't fully write, that is supposed to go out the next morning and that I absolutely wouldn't want my name under as author is incredibly stressful. Thank you for receiving and understanding this feedback! I look forward to previewing this when these changes are integrated.

@vsoch  I agree that this is a case where the editor probably went further than usual in changing things.  Thanks for taking the time to restore the parts you feel are important to your voice.

Thank you so kindly for fixing it up! Let me know if you'd like a PR to add a CircleCI preview for the site.


Support auto install python module.

Add a new feature to support automatic detection of imported modules in python code to achieve automatic installation.

Sorry for that, but I can not approve this PR for followings reasons:

using pattern to match packages is not a good way, the package name we imported is not always the same the it's real name, for example, like Pillow, we use pip install Pillow to install it but use import PIL to use it.
it increases risks, when installing a package, setup.py in this package will be executed, however, we can make some malicious code there.

But what you have made real amazed me, it's crazy!


Question: Simple python filtering between the steps of the pipeline.

Hi! I am having a hard time understanding from the docs:
How do I do some simple filtering between two steps? Let's say I've got this thing
datasets:
  unprocessed:
    path: input.json
    type: file

default_model: bedrock/anthropic.claude-3-5-sonnet-20240620-v1:0

pipeline:
  steps:
    - name: cool
      input: unprocessed
      operations:
        - cool_thing_1
        - cool_thing_2

  output:
    type: file
    path: result.json
    intermediate_dir: intermediate_results

operations:
   - name: cool_thing_1
    type: map
    output:
      schema:
        processed: str
    prompt: |
      Look at this thing:
      {{ input.unprocessed }}
      Do something that outputs a few paragraphs of text. If the thing is invalid, output just the word False.

  - name: cool_thing_2
    type: map
    output:
      schema:
        processed: str
    # Note that this prompt is taking as input the output from the first operation
    prompt: |
      Look at this thing:
      {{ input.processed }}
      Do something

If I want to filter out all the outputs from cool_thing_1 that just have False before cool_thing_2, what's the right way to do that? I'm reading about the filter step via https://ucbepic.github.io/docetl/operators/filter/ but it's unclear to me how I do something that doesn't require an LLM for filtering.

Check out code filtering: https://ucbepic.github.io/docetl/operators/code/#code-reduce-operation


Add min/maximumInclusive properties to RangeFilter

Allow one to configure RangeFilters to be able to exclude the
minimum and/or maximum values in the range.
Defaults to including both minimum and maximum values, leaving prior
behavior unchanged.

Nice PR, thanks !


Add an 'Issues' link below the 'Homepage' link

Make it easier for package consumers to file issues.
Ideas for realization:

Add a new field to pubspec.yaml
If field is unset: Deduce the Issue tracker link for the case where we have a GitHub link

Aqueduct, for instance, is hosted on github but has its homepage set to its actual homepage. We should consider adding a 'Repository' field to the pubspec.yaml while we're doing this, so the issue tracker can be deduced in such cases.

The pub client could at upload time check if there is a git remote, if so, suggest the pubspec.yaml contains the right repository value.

One note for #1675: I've prepared the issue tracker link pointing to the list of issues, and not to the "new issue page". Both GitHub and GitLab would ask the user to authenticate, and I thought that it is better UX to point to a page that won't redirect immediately.

Known issue trackers are now exposed on the UI. However, IIRC, adding a new keyword to pubspec.yaml may require a bit more coordination. @nex3 @kevmoo: what's the process there?

We should create a (short) doc and socialize it a bit. We should be clear about what this field is for, valid values, etc
It requires updates to (at least) docs (cc @kwalrath ) and https://pub.dartlang.org/packages/pubspec_parse
We might want to consider some minimal validation in the pub client, too – at least during publish
@nex3 – can you think of any other place?

Not off the top of my head.

When do we want to update the docs?

Two new fields:
repository: Optional field to specify the source code repository of the package. Useful when a package has both a home page and a repository.
report_issue: Optional field to a web page where developers can report new issues.

I think I expected issue_tracker, not report_issue. Tha is, I expected a link to the issue tracker (e.g. https://github.com/dart-lang/angular/issues), not specifically a new-issue page (e.g. https://github.com/dart-lang/angular/issues/new).

Sure, but isn't the 'report' issue link/action pretty clear (and will do the redirect) once you have made it to the issue tracker?

Sure. On last thing to defend it on our page: 'Report an issue [with the package]' is more straightforward than 'issue tracker' for people that have issues using a package. This goes back to the mis-filed issues we did got on our issue tracker, because of the 'Report an issue' link in the footer (which should be extended with 'with the pub site') string soon.

I think we could consider using a link called 'View/report issues [with the package]' even if that just linked to the issue tracker

sgtm. I'll remove the extra one.

'View/report issues with the package' is a bit too long, we are hitting a word-wrap with it (see image):

Maybe just 'View issues with the package'?

Maybe just 'View/report issues' (the package part is kinda given in the box with the context)?

That looks good:

We should make the capitalization consistent. Sentence caps (instead of Title Caps) are all the rage: https://developers.google.com/style/capitalization

The two pending PRs will change the labels to:

Homepage (or Repository if it is recognized as a GitHub or GitLab repo)
View/report issues
API reference

The change has been deployed. Back to the naming, how does this look (merged content from @mit-mit and @kwalrath and extended a bit):

repository: Optional field to specify the source code repository of the package. Useful when a package has both a home page and a repository.

issue_tracker: Optional field to a web page where developers can report new issues or view existing ones.


Use genomes from full v4.1 for v4 non-UKB subset

@rileyhgrant yes I'd thought I could re-open the PR and merge into main but apparently re-opening a PR isn't actually possible


add a sample client/testcase that use profile signing (or require paranoid mode)

@andres-erbsen or @daniel-ziegler , can you please help with that? Thanks :)

See https://github.com/yahoo/coname/pull/45


cf-lint throws an error on valid values for Elasticache Readenpoint address

CloudFormation Lint Version
v1.11.0
What operating system are you using?
Windows
Describe the bug
Below is the yaml I am using for CLoudwatch alarm
Type: AWS::CloudWatch::Alarm
DependsOn: ElasticacheRedis
Properties:
Dimensions:
- Name: CacheClusterId
Value: !Select [ 0, !Split [ "." , !Select [ 1, !Split [ "[", !Select [ 0, !Split [ " " , !GetAtt ElasticacheRedis.ReadEndPoint.Addresses ] ] ] ] ] ]
cfn-lint throws an error that
E1017 {'Fn::GetAtt': ['ElasticacheRedis', 'ReadEndPoint.Addresses']} is not of type 'string'
I am sure this was working a while back
Note: I have trimmed the content and just left the problematic line
Expected behavior
There should not be any lint errors
Reproduction template
Type: AWS::CloudWatch::Alarm
DependsOn: ElasticacheRedis
Properties:
Dimensions:
- Name: CacheClusterId
Value: !Select [ 0, !Split [ "." , !Select [ 1, !Split [ "[", !Select [ 0, !Split [ " " , !GetAtt ElasticacheRedis.ReadEndPoint.Addresses ] ] ] ] ] ]

This should work and is a bug in cfn-lint.  Oddly enough !Select [ 1 , !GetAtt ElasticacheRedis.ReadEndPoint.Addresses ] fails with Template error: Fn::Select requires a list argument with two elements: an integer index and a list
Even though that attribute is an array of strings its combined on the GetAtt to a string with spaces and a comma and brackets.
[aaaaa-001.aaaaa.aaaaa.use1.cache.amazonaws.com, aaaaa-002.aaaaa.aaaaa.use1.cache.amazonaws.com]


token-js: Support metadata pointer extension

Problem
With #4549, token-2022 can also store a pointer to a metadata account, but this isn't exposed in the JS bindings.
Solution
Support the following instructions:

initializing a mint with a metadata pointer: https://github.com/solana-labs/solana-program-library/blob/0a3686805d396f2ea8387758cf8ed7347c8fbc0a/token/program-2022/src/extension/metadata_pointer/instruction.rs#L77-L95
updating the metadata pointer address: https://github.com/solana-labs/solana-program-library/blob/0a3686805d396f2ea8387758cf8ed7347c8fbc0a/token/program-2022/src/extension/metadata_pointer/instruction.rs#L98-L122

Support deserializing the extension data: https://github.com/solana-labs/solana-program-library/blob/0a3686805d396f2ea8387758cf8ed7347c8fbc0a/token/program-2022/src/extension/metadata_pointer/mod.rs#L17-L22
This is a good example to follow, based on a different extension: https://github.com/solana-labs/solana-program-library/pull/3833

@joncinque Can I work on it?

Go for it! I've updated the issue description to be more helpful

I'm on it! Thank you!

I installed the solana cli, when I try to execute cargo command I get the following message:
ubuntu@ubuntu-16gb-nbg1-1:~/solana-program-library$ cargo build-bpf
info: syncing channel updates for '1.69.0-x86_64-unknown-linux-gnu'
info: latest update on 2023-04-20, rust version 1.69.0 (84c898d65 2023-04-16)
info: downloading component 'cargo'
info: downloading component 'clippy'
info: downloading component 'rust-docs'
info: downloading component 'rust-std'
info: downloading component 'rustc'
info: downloading component 'rustfmt'
info: installing component 'cargo'
info: installing component 'clippy'
info: installing component 'rust-docs'
info: installing component 'rust-std'
info: installing component 'rustc'
info: installing component 'rustfmt'
[2023-07-07T17:37:28.456416664Z ERROR cargo_build_sbf] Failed to execute /home/ubuntu/.cache/solana/v1.37/platform-tools/rust/bin/rustc: No such file or directory (os error 2)
ubuntu@ubuntu-16gb-nbg1-1:~/solana-program-library$ solana --version
solana-cli 1.16.2 (src:02d5647b; feat:2891131721, client:SolanaLabs)
Any ideas how to proceed?

Sorry, we don't provide developer support through GitHub -- be sure to ask on an appropriate Discord server or the Solana Stack Exchange https://solana.stackexchange.com/
You can try the help for the build command by running cargo build-sbf -h and see if anything looks helpful. I'm guessing --force-tools-install might be a good start.

The issue was with Solana-cli 1.16.2 after upgrading to newly released 1.16.3 all works

Hey, I would love to take this up if anyone is not working on this. :)

@dhruvdabhi101 go for it!

I think this can be closed now 😀
Was implemented in https://github.com/solana-labs/solana-program-library/pull/5805 and deployed with https://github.com/solana-labs/solana-program-library/pull/5813


Need an amp-bootstrap agent

To replace appcelerator/amp-swarm-deploy, we need a go binary that will take care of same operations:

make sure the Docker engine is up to date
initialize the Swarm cluster

Later if will be also used to register on the AMP portal

it also be used to start/stop amp remotely or to add/remove new swam node(s) to swarm cluster.

Obsolete based on InfraKit strategy.


Updated version for v.2.4.0 release of beacon-apis.

Update version for release, and referencing 1.3.0 of consensus-spec.

@michaelsproul if not busy...


Password change

Password change doesn't seem to work yet.

I think it works but the session gets invalided after the password change, is that possible? I think we have somewhere an open issue for it, not sure

The problem is that the signIn fails when using the new password after the password had been changed. So it doesn't seem to me like it could be related to the session.


JSON parse loses precision for large numbers

Bug Report
Saving a large integer to redis and retrieving it via the CLI works but retrieving it with hgetall returns a different result.
The issue is probably due to JSON.parse losing precision.

it's more likely due to javascript not being able to handle large numbers
https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Global_Objects/Number/MAX_SAFE_INTEGER
can you share an example where it failed?
would love to reproduce this

it's more likely due to javascript not being able to handle large numbers https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Global_Objects/Number/MAX_SAFE_INTEGER
can you share an example where it failed? would love to reproduce this

Here's an example:
HSET testKey name abc userId<PHONE_NUMBER>0006150715113082367

And here's the js code:
const results = await kv.hgetall(`testKey`)
console.log(results['userId'])
const id = await kv.hget<string>(`testKey`, 'userId')
console.log(id)

id returns the correct value and is different from results['userId']

For context, I was trying to store a google oauth payload

The fix won't work as redis will still store it as a number anyway. Tried it with the library and via CLI as well. Will just make an extra call for the time being, to retrieve the right value.

@timlrx, I believe the issue arises when you pass large numbers in JavaScript, like<PHONE_NUMBER>0006150715113082367. Since this number is greater than 1e21, JavaScript automatically converts it to scientific notation, represented as 1.076915035000615e+28. This conversion can result in a loss of precision. This is why you don't encounter the same problem when using the CLI and REST API, as they don't perform this automatic conversion.

HGET does the trick since it returns the id as a string rather than a js number. I think that's probably the best workaround for fields that might exceed Number.MAX_SAFE_INTEGER. Closing this issue since it is not a problem with the library.

Yeah, it seems like its the only option now.


update readme with some additional information / formatting

Use 4 spaces in Markdown to signify a sublist
Added extra instructions if you run into an npm install error
involving python or if you are upgrading an older version of mysql and
get an error complaining about the Column count

These are good debugging tips. I'm not sure the README is the best place for them (just to avoid any confusion). Maybe we can put them in a wiki?

Is there a jsperf wiki at the moment? I think sticking it in a wiki would be okay if it's actually used often otherwise it's not useful to anyone. The reason I stuck it the README is it makes it easier for developers to continue trying to setup a local development environment rather than have them stall during the process. Better to have it up front then having it being hidden somewhere and saves the developer a couple of trips to Google or Stackoverflow to find the issue.

I created a wiki and page for Local Development Debugging with the content from this PR. Want to add a link to it at the bottom of this section of the README?

Do you mean rewrite this PR to just add the link to the wiki? And what about changes to the markdown formatting? Right now in the README there's one line that just says, "install"