Attack modeling with Cartography

Hey all,
I was thinking about the CapitalOne breach.  They had an instance that was vulnerable to SSRF and internet accessible. The instance was running with an IAM Role that had access to the S3 bucket containing the customer PII that was leaked.
I was hoping I could model this attack in Cartography. It's only slightly more complicated than the typical "bucket left open to the world".
I was hoping that I could build a query that would help me find the shortest routes from internet accessible infrastructure (ec2:EC2Instance{exposed_internet: true}) to an IAM Role that had access to a given S3 bucket.
Unfortunately, neither EC2Instance, nor AutoScalingGroup have any mapping to either InstanceProfile or IAM Roles, and LaunchConfig doesn't seem to exist either.
Further, there's not currently a mapping of S3Bucket to IAMRole either. (I understand this would be difficult, even with PolicyUniverse's whos_allowed()
policy = Policy(policy05)
assert policy.whos_allowed() == set([
    PrincipalTuple(category='principal', value='arn:aws:iam::*:role/Hello'),
    PrincipalTuple(category='principal', value='arn:aws:iam::012345678910:root'),
    ConditionTuple(category='cidr', value='<IP_ADDRESS>/0'),
    ConditionTuple(category='account', value='012345678910')
])

Is this kind of attack modeling the idea behind Cartography? Is the end goal to be able to build these kind of queries? I can see a future where we're mapping the shortest (weakest) routes from our sensitive data through AWS to our internet exposed infrastructure, and then mapping the inspector findings on those AMI's to find the most likely routes an attacker may take. That's the power of the graphdb, right?
Is Lyft running any cool complex queries beyond what's in the documentation?  If so, I'd friggin love to read about them.  Thank you.

This is one of our favorite questions and I'm so glad you asked about it :-).
Here's a quick, fun starting point:
MATCH (a1:AWSAccount)-[:AWS_ROLE]->(r1:AWSRole)-[:STS_ASSUMEROLE_ALLOW]->(r2:AWSRole)<-[:AWS_ROLE]-(a2:AWSAccount) WHERE a1 <> a2 RETURN * limit 100

This shows opportunities to move between different AWS accounts by assuming IAM roles.

Very cool @achantavy

I'll close this ticket now, but I'm very interested in building out these kind of capabilities.
Thank you so much for this tool.


write a script to test all command lines in the documentation works

We have several markdown files in our doc folder, those will be casted into html file by a python package, we need to check everything we wrote in the markdown file works, this has been down for doc_examples.md already, see below
#!/bin/bash -x -v
set -e  # exit upon first error
sed 's/`//g' docs/doc_examples.md > ./sh_temp.sh   # this line will extract all the commandline from a markdown file, here named docs/doc_examples.md,  to a new file called sh_temp.sh
bash -x -v -e sh_temp.sh    # then we just execute this sh_temp.sh to check if the command there works.
The task here is to provide a similar script file like https://github.com/marrlab/DomainLab/blob/master/ci_run_examples.sh

@smilesun
Can you test if the skript in ci_run_examples.sh does work?
Because if so, then I think this issue is completed

oh, i did not test, but i will do later.

@Car-la-F , it does not work yet. Could you annotate some script not to be shell? For example for our slurm benchmark script, it is not possible to test locally if slurm is not installed.
I have splited each markdown file extracted shell, could you test them one by one?

@smilesun
looking at the examples, it seems like it will take forever to test them on my Laptop. Isn't it more eficient to test it in the cluster?

Also my installation may deviate from what is on the cluster. E.g. I do have snakemake installed as I did run some of the benchmarks on the laptop

Additionally I think we need to add > ./sh_temp_example.sh after executing the examples to empty the files. Othervise it seems like they will be extended each time one likes to test


Pointilistic Private Partition UCAN Capabilities

We have this written in detail... somewhere. I'll dig it up. In the meantime:
Currently UCANs include the entire bare namefilter. This is both space inefficient, and leaks more information than it strictly needs to. We're doubling the size of namefilters (#312) to solve related challenges, but that makes the space problem worse.
The optimization is to list only the hash of the current highest directory that you're given access to. This operates recursively, so if the parent UCAN has hash A, and the child UCAN has hash B, then you must have both in the filter. This moves us from a straight line bare namefilter to a pointalistic view.
Multiple hashes may eventually be required per layer (ANDed), but the belief right now is that it won't be necessary, so putting that off.

Currently UCANs include the entire bare namefilter.

I think that's not the case right now:

These are the 3 UCANs from my drive.fission.codes.
Apparently, fct: []. Perhaps that's a bug?

Apparently, fct: []. Perhaps that's a bug?

fct: [] can be omitted, but it's not a semantic bug I guess

Hm. I'm trying to understand what the system should look like. Above you say

Currently UCANs include the entire bare namefilter

But I can't find where that bare namefilter is in my ucans. I thought it should be in the fct field, and I thought, maybe it's a bug that it's not in there?


Changing notes should set the dirty flag

The dirty flag is used to start the synchronisation flag.
It should be set whenever a note is changed.

Done in https://github.com/fmoliveira/tantalus/commit/49929526266d5b28c99134e6d9cf72fbe56061af.


Sending and receiving messages not working.

Sending message from client app not working.

I found potential solution at this url: https://docs.microsoft.com/en-us/dotnet/api/system.net.sockets.tcplistener?msclkid=a397de24c51911eca47c1340a047f681&view=net-6.0

there is a problem:
public AdmonteClient()
        {
            _socket = new Socket(AddressFamily.InterNetwork, SocketType.Stream, ProtocolType.Tcp);
        }

        public void ConnectTo(string hostAddress, string portNumber)
        {
            if (!IPAddress.TryParse(hostAddress, out _hostAddress))
                throw new ArgumentException("Given argument HostAddress is not valid.");

            if (!Int32.TryParse(portNumber, out _portNumber))
                throw new ArgumentException("Given argument PortNumber is not valid.");

            this._endPoint = new IPEndPoint(_hostAddress, _portNumber);
            this._socket.Bind(this._endPoint); // THERE IS THTOWN EXCEPTION -> Only one usage of each socket address (protocol/network address/port) is normally permitted.
            _socket.Connect(_endPoint);

            if (_socket.Connected)
                ClientConnected?.Invoke(this, new EventArgs());
        }

Issue fixed.


No module named " No module named 'hvac.heat_exchanger.recuperator'"

Great library, thank you for sharing! I was able to install the python package, but when I can the example code from air cooling coil example 1, I get the error about the heat_exchanger.recuperator module not being available.
Could you please help?
Code snippet below:
import warnings
from hvac import Quantity
from hvac.fluids import HumidAir, Fluid, CoolPropWarning
from hvac.heat_exchanger.recuperator.fintube.continuous_fin import (
PlainFinTubeAirToWaterCounterFlowHeatExchanger
)
warnings.filterwarnings('ignore', category=CoolPropWarning)
Q_ = Quantity

I've tried to reproduce your problem, but I haven't encountered any problem. Below are the steps that I took. You need the program Poetry installed on your computer to set up the project's virtual environment. The Python IDE I use, is PyCharm Professional (version 2024.2).

From the project main page on GitHub, download the project in a ZIP file on your computer (see the green button "<> Code"). The ZIP file will be named "python-hvac-master.zip".
Unzip the ZIP-file "python-hvac-master.zip" on your computer. This should create a folder "python-hvac-master" on your computer, within it another folder which is also called "python-hvac-master".
Copy (or cut) this last folder into your own projects directory.
Open the project folder "python-hvac-master" in your projects directory with PyCharm. Normally, PyCharm will automatically detect that there is a "pyproject.toml" file present in the project folder and it will propose to setup the Poetry virtual environment for you.
Accept this and when PyCharm is ready, you should be able to run the Python scripts and Jupyter notebooks in the projects docs/examples-folder.

Another possibility (after unzipping), that doesn't need Poetry (or PyCharm), could be to only copy the wheel-file "python_hvac-0.1.2-py3-none-any.whl" (i.e. the most recent version) from the "dist" folder. Create your own new project folder with an associated virtual environment and then copy-paste the wheel-file into this project folder. After activating the associated virtual environment, run "pip install python_hvac-0.1.2-py3-none-any.whl" in this folder. This will install all the dependencies in the virtual environment. After that, you can copy-paste the examples into your project folder. Normally, they should run (at least they do on my computer).

Hi, Tom:
Thank you so much for your response. I don't have Pycharm, but I was able
to upgrade Anaconda and use Spyder to install the package. I was able to
run the example without any hitches. I really appreciated the feedback you
provided.
A few follow up questions on the example itself:

The use case in "air_cooling_coil_01.ipynb" is focused on using water
to cool air. For my use case, I also want to use air to cool water. I tried
to simply update the water inlet temperature to be higher (40C) than the
air inlet temperature (27C). but that did not work. The script gave me this
error: "ValueError: Humid air state cannot be determined: parameter h is
NaN or None." It seems this is because the script is using "humid air",
whereas in a case where the water temperature is higher than the air
temperature, the air would essentially be dry. Any suggestions on how to
make the reverse case work?

For my use case, I know the heat load as an input, along with the water
inlet and outlet temperature. My unknowns are the mass flowrate and the
corresponding air temperature. Do you have a script that does this version?
If not, I can use your script iteratively to make it do the analysis.

Regards,
Mudasir
On Fri, Aug 16, 2024 at 3:14 AM Tom Christiaens @.***>
wrote:

I've tried to reproduce your problem, but I haven't encountered any
problem. Below are the steps that I took. You need the program Poetry
installed on your computer to set up the project's virtual environment. The
Python IDE I use, is PyCharm Professional (version 2024.2).

From the project main page on GitHub, download the project in a ZIP
file on your computer (see the green button "<> Code"). The ZIP file will
be named "python-hvac-master.zip".
Unzip the ZIP-file "python-hvac-master.zip" on your computer. This
should create a folder "python-hvac-master" on your computer, within it
another folder which is also called "python-hvac-master".
Copy (or cut) this last folder into your own projects directory.
Open the project folder "python-hvac-master" in your projects
directory with PyCharm. Normally, PyCharm will automatically detect that
there is a "pyproject.toml" file present in the project folder and it will
propose to setup the Poetry virtual environment for you.
Accept this and when PyCharm is ready, you should be able to run
the Python scripts and Jupyter notebooks in the projects
docs/examples-folder.

Another possibility (after unzipping), that doesn't need Poetry (or
PyCharm), could be to only copy the wheel-file
"python_hvac-0.1.2-py3-none-any.whl" (i.e. the most recent version) from
the "dist" folder. Create your own new project folder with an associated
virtual environment and then copy-paste the wheel-file into this project
folder. After activating the associated virtual environment, run "pip
install python_hvac-0.1.2-py3-none-any.whl" in this folder. This will
install all the dependencies in the virtual environment. After that, you
can copy-paste the examples into your project folder. Normally, they should
run (at least they do on my computer).
—
Reply to this email directly, view it on GitHub
https://github.com/TomLXXVI/python-hvac/issues/9#issuecomment-2293236059,
or unsubscribe
https://github.com/notifications/unsubscribe-auth/AHNSKBZI5GN22N67GWJB3MLZRXGJNAVCNFSM6AAAAABMRHETUCVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZDEOJTGIZTMMBVHE
.
You are receiving this because you authored the thread.Message ID:
@.***>


⚠ Bofrost.es has degraded performance

In 6bf586a, Bofrost.es (https://www.bofrost.es) experienced degraded performance:

HTTP code: 200
Response time: 1638 ms

Resolved: Bofrost.es performance has improved in 721252d after 11 minutes.


Promise Rejection Due to Failed Background Page Response

An uncaught promise rejection occurs with the message: "Failed to get response after sending message FETCH_IN_BACKGROUND_PAGE." This suggests that a message sent to fetch data in a background page did not receive a response. Potential causes include timeouts, errors in the background script, or the background process being terminated prematurely.

Hi @A-4-Atom , you can have a look at the hosted website(url in 'About' section of this repository) and inspect the page. The errors will show up there.


Computer: Delete existing AD Computer object when joining Computer to Domain

Pull Request (PR) description
When joining a computer to a domain, if a computer object with the same name already exists in the domain it will be deleted.
This Pull Request (PR) fixes the following issues

Fixes #55
Fixes #58

Task list

[x] Added an entry to the change log under the Unreleased section of the
file CHANGELOG.md. Entry should say what was changed and how that
affects users (if applicable), and reference the issue being resolved
(if applicable).
[ ] Resource documentation added/updated in README.md.
[ ] Resource parameter descriptions added/updated in README.md, schema.mof
and comment-based help.
[x] Comment-based help added/updated.
[x] Localization strings added/updated in all localization files as appropriate.
[ ] Examples appropriately added/updated.
[ ] Unit tests added/updated. See DSC Community Testing Guidelines.
[ ] Integration tests added/updated (where possible). See DSC Community Testing Guidelines.
[ ] New/changed code adheres to DSC Community Style Guidelines.

This change is

@nickgw Please change use of backticks in your code to us splatting instead as per https://docs.microsoft.com/en-us/powershell/module/microsoft.powershell.core/about/about_splatting?view=powershell-7.2

@nickgw Please change use of backticks in your code to us splatting instead as per https://docs.microsoft.com/en-us/powershell/module/microsoft.powershell.core/about/about_splatting?view=powershell-7.2

@kilasuit Should be all set now now

Hi @nickgw - I've merged your other PR (Awesome, thank you), but it's caused some conflicts. Can you resolve?

Hi @nickgw - I've merged your other PR (Awesome, thank you), but it's caused some conflicts. Can you resolve?

Hey @PlagueHO , thanks! I've resolved the merge conflicts.

@PlagueHO I didn't link the issue I was resolving on the other PR correctly. You can close this out: https://github.com/dsccommunity/ComputerManagementDsc/issues/234


lib/streams/OrderBookStream.js fails to handle default case of BTC to USD

const key = ${topic}_${currency}; doesn't account if user wants to use just BTC to USD.

Has been fixed in @1.4.0 :)


Disable last login field

We try to make a read-only OS instance, so no writing to the database is permitted. On login, the last_login field for the user is updated. Because the DB raises an error, the user cannot log in.
@normanjaeckel Whats about not to delete this field in the DB, but just to disconnect this signal? If this is ok for you, I'll make a PR.

+1

Ok for me. Maybe use a settings option to we can opt-in to disconnect the signal.


Update shared-experiences-in-mixed-reality.md

updating Shared Experience guidance with GitHub links to offerings

Docs Build status updates of commit a7a8b63:
:warning: Validation status: warnings

File
Status
Preview URL
Details

mixed-reality-docs/shared-experiences-in-mixed-reality.md
:warning:Warning
View
Details

mixed-reality-docs/shared-experiences-in-mixed-reality.md

Line 154: [Warning] Invalid file link: 'mrlearning-sharing(photon)-ch1'.

For more details, please refer to the build report.
Note: If you changed an existing file name or deleted a file, broken links in other files to the deleted or renamed file are listed only in the full build report.

Docs Build status updates of commit 241fa3d:
:white_check_mark: Validation status: passed

File
Status
Preview URL
Details

mixed-reality-docs/shared-experiences-in-mixed-reality.md
:white_check_mark:Succeeded
View

For more details, please refer to the build report.
Note: If you changed an existing file name or deleted a file, broken links in other files to the deleted or renamed file are listed only in the full build report.


Set FocalLoss to DETR

I would like to set and/or change the loss function to FocalLoss, so i looked at the config
{'cfg_options': {'model.bbox_head.loss_cls.type': 'FocalLoss'}})
but i get the following error
TypeError: DETR: DETRHead: FocalLoss: init() got an unexpected keyword argument 'class_weight'
so it seems that the default function is not overwritten.

@fabiogeraci
I guess the reason of your error is that you modified the configuration file incorrectly
You might directly change the type 'CrossEntropyLoss' of loss_cls in DETR to 'Focal Loss', but this would cause other parameters not matching the FocalLoss class. For example, FocalLoss.init() has not the class_weight parameter but CrossEntropyLoss.init() has.
You can refer to Deformable DETR to configure your Focal loss.
loss_cls=dict(
    type='FocalLoss',
    use_sigmoid=True,
    gamma=2.0,
    alpha=0.25,
    loss_weight=2.0),

I understand now, I need to pass all the arguments of the loss_cls. Thank you


React useThreads incorrect usage of useSyncExternalStoreWithSelector triggers infinite re-renders

Describe the bug
The useThreads component passes a new selector to useSyncExternalStoreWithSelector on each render. This function is used here packages/liveblocks-react/src/comments/CommentsRoom.tsx line 488.
This makes it so that every time useThreads is called, the referenced threads binding will be a new object.
To Reproduce
const { threads } = useThreads()
const [visibleThreads, setVisibleThreads] = useState([])

// this particular case could be avoided with useMemo but not all cases can be solved that way.
useEffect(() => {
  setVisibleThreads(threads.filter(thread => thread.metadata.visible))
}, [threads])

The re-render triggered by the setVisibleThreads will trigger an infinite re-render since threads will always have a new reference.
Workaround
Use deep equals for any state depending on threads.
Fix
To fix this the following needs to be updated to use memoized functions:
    return useSyncExternalStoreWithSelector(
      store.subscribe,

      // Change the below to be memoized / useCallback functions.
      () => store.getThreads(),
      () => store.getThreads(),
      (state) => {

Environment (please complete the following information):

liveblocks-react

Introduced in 1.9.3 by this PR - https://github.com/liveblocks/liveblocks/pull/1385

Solved in [1.10.0-beta2](https://github.com/liveblocks/liveblocks/releases/tag/v1.10.0-beta2).
If it does not solve your issue, don't hesitate to leave a comment and I'll reopen it. Thank you!


Can't create a service principle and getting cryptic error.

Describe the bug
Can't create a sp and getting cryptic error.
Command Name
az ad sp create-for-rbac -n "test" --role Contributor --scopes /subscriptions/<subscription_id>
Errors:
The command failed with an unexpected error. Here is the traceback:
'RoleAssignmentsOperations' object has no attribute 'config'
Traceback (most recent call last):
  File "/usr/lib/python3/dist-packages/knack/cli.py", line 231, in invoke
    cmd_result = self.invocation.execute(args)
  File "/usr/lib/python3/dist-packages/azure/cli/core/commands/__init__.py", line 663, in execute
    raise ex
  File "/usr/lib/python3/dist-packages/azure/cli/core/commands/__init__.py", line 726, in _run_jobs_serially
    results.append(self._run_job(expanded_arg, cmd_copy))
  File "/usr/lib/python3/dist-packages/azure/cli/core/commands/__init__.py", line 718, in _run_job
    return cmd_copy.exception_handler(ex)
  File "/usr/lib/python3/dist-packages/azure/cli/command_modules/role/commands.py", line 54, in graph_err_handler
    raise ex
  File "/usr/lib/python3/dist-packages/azure/cli/core/commands/__init__.py", line 697, in _run_job
    result = cmd_copy(params)
  File "/usr/lib/python3/dist-packages/azure/cli/core/commands/__init__.py", line 333, in __call__
    return self.handler(*args, **kwargs)
  File "/usr/lib/python3/dist-packages/azure/cli/core/commands/command_operation.py", line 121, in handler
    return op(**command_args)
  File "/usr/lib/python3/dist-packages/azure/cli/command_modules/role/custom.py", line 1255, in create_service_principal_for_rbac
    _create_role_assignment(cmd.cli_ctx, role, sp_oid, None, scope, resolve_assignee=False,
  File "/usr/lib/python3/dist-packages/azure/cli/command_modules/role/custom.py", line 196, in _create_role_assignment
    assignments_client.config.subscription_id)
AttributeError: 'RoleAssignmentsOperations' object has no attribute 'config'

To Reproduce:
Steps to reproduce the behavior. Note that argument values have been redacted, as they may contain sensitive information.
Run the following command:
az ad sp create-for-rbac -n "test" --role Contributor --scopes /subscriptions/<subscription_id>
Expected Behavior
Create a new sp, or provide an error message to why the operation has failed
Environment Summary
Linux-5.18.0
Python 3.9.13
Installer: DEB

azure-cli 2.38.0

Extensions:
account 0.2.3

Dependencies:
msal 1.18.0b1
azure-mgmt-resource 21.0.0

Additional Context

@jiasli for awareness

@yoavweber Thank you for reaching out, we are looking into it.

@yoavweber We are unable to reproduce this issue. Upgrade to the latest version of CLI 2.39.0 and check again, though i am also using the same 2.38.0 from a windows machine.
az ad sp create-for-rbac -n "issue23382new" --scopes /subscriptions/<subscriptoin_id> --role Contributor
Creating 'Contributor' role assignment under scope '/subscriptions/<subscription_id>'
The output includes credentials that you must protect. Be sure that you do not include these credentials in your code or check the credentials into your source control. For more information, see https://aka.ms/azadsp-cli
{
"appId": "2fc8745d-7d8e-4d73--",
"displayName": "issue23382new",
"password": "",
"tenant": "<tenant_id>"
}
Similar environment too.
az version
{
"azure-cli": "2.38.0",
"azure-cli-core": "2.38.0",
"azure-cli-telemetry": "1.0.6",
"extensions": {
"account": "0.2.3"
}
}

Duplicate of #19640


How to remove "CMS Plugins" used in text editor

This section explains how some plugins can be added
to a text plugin using the 'CMS Plugins' menu within the text editor.
How can this 'CMS Plugins' be removed?

Good question: Click it on in the editor and hit the backspace or delete key. But you have to remove it in the editor. Do you want to add this clarification as a PR?

Once I click on 'EDIT', the CMS Plugin (Icon) stops showing.

With icons, this could be a CSS issue: You typically need to load an icon font to see the icon. Editing happens in the modal, which without additional config does not automatically load the icon font. So, this could be an artefact.
This is something on my to-do list for djangocms-text.

With icons, this could be a CSS issue

I was able to remove it by editing the source.

You typically need to load an icon font to see the icon. Editing happens in the modal, which without additional config does > not automatically load the icon font. So, this could be an artefact.

I don't understand.

Icons on websites typically have an HTML code like <i class"icon icon-thumbs-up"></i>. The icon libraries' CSS adds styling to those classes to actually show the icon. Without the CSS the icon remains invisible. This CSS the editor does not know about, hence the <i> tag remains invisible.

The icon libraries' CSS adds styling to those classes to actually show the icon. Without the CSS the icon remains invisible. This CSS the editor does not know about, hence the <i> tag remains invisible.

Oh... I understand now. Thanks

This is something on my to-do list for djangocms-text.

What you meant here was that you are working on making the editor
understand the icon's CSS?


[RFC] Email System

Additions:

Adds the EmailHeaders and EmailRead game commands
Adds the EmailHeaders, EmailMessageStatus, and EmailRead events
Support the sending of multiple headers or a single email header

Current functionality is just sending a test email header and email read with the same ID.
TODO:

Add emails to the database with EmailSend (This will likely require some input sanitizing)
Ex. /emailsend "\q[Name]\q " "Subject" "Content"
Send EmailMessageStatus event on Success/Failure of Send, rather than using a InfoMessageCmd
Add timestamp generation as the client does not send this information - This is the number of seconds elapsed since Y2K relative to the server's defined timezone (Currently 0, -12 GMT).
Send emails related to the client ID upon login, rather than just when the Emails button is clicked to force the EmailHeaders command
Remove emails from database with EmailDelete (Will need to check that the entity ID is the owner, as EmailDelete only sends "emaildelete [id]")

Addressed the reviews.
Also, removed the m_valid flag and just set it to always be true. Ideally, we just wouldn't send anything marked for deletion if we weren't updating rows on every delete. This flag doesn't serve much of a purpose otherwise, unless it was changed in later issues.


It doesn't support UIBarButtonItem ?

Are there plans to add support for UIBarButtonItem ?

I am updating this pod with version 0.1.2, which supports UIBarButtonItems


Add xcode linker flag to main project

Hello,
My react-native package have xcode library project and need to add linker flag to main project:
-framework CFNetwork -framework Security -licucore
How to do it automatic with rnpm.
Thanks,

Hey,
This is out of scope for rnpm.
Please check the below link:
http://docs.millennialmedia.com/ios-ad-sdk/adding-objc-linker-flag-xcode.html


Adds feature tests (Cucumber)

Changes

Adds feature tests and Cucumber to run them
Improves test structure and coverage of existing unit tests
Minor improvements to existing code

GitHub

Closes #7

Roadmap

[x] Assert that MSW is running in a feature test
[ ] Write and structure feature tests

Closed in favor of #56.
I've found Cucumber as an overkill for testing this library. Instead, I went with the WDS + Puppeteer + Jest approach.


Multithreaded Link disconnected

Please answer these questions before submitting your issue.

Why do you submit this issue?
[ ] Question or discussion
Multithreaded link dow

Question

What do you want to know?
what do i need to do?

Bug

Which version of SkyWalking, OS and JRE?

Which company or project?

What happen?
If possible, provide a way for reproducing the error. e.g. demo application, component version.

Requirement or improvement

Please describe about your requirements or improvement suggestions.

Please read the optional plugins, including @Trace or one more plugin in the optional plugin in 6.6


invalid feedback stays hidden when use in a form group with a custom checkbox

I have a custom checkbox which gets a validation error and the invalid-feedback div stays with display-none.
Below is the code generated. A message explaining why the checkbox must be checked is sometimes important.

      <input class="custom-control-input is-invalid" type="checkbox" name="agree_terms" id="agree_terms" value="1">
      I agree to the terms and conditions

Terms and conditions must be carefully read and accepted. You cannot access our service otherwise.

Your invalid-feedback div needs to be inside the the custom-control div

Whops. My bad :/ I had skipped that part of the docs. Thanks.

This Bootstrap 4 form validation error messages feature is insanely confusing and frustrating. I know so many people who have issues with it. It doesn't seem very intuitive. It was much simpler under BS3.

To fix this issue use        class="invalid-feedback d-block"
it works perfect.

sorry if my comment a little bit late... just solved it by myself... u need to put form-control class in the input


what method to use when link objects use operationRef

i may just not be able to find it, but it seems to me that when link objects use operationRef (instead of operationId), it is not specified which method to use for the request? i am looking at the examples ar https://github.com/OAI/OpenAPI-Specification/blob/master/versions/3.0.1.md#operationref-examples and wonder how an actual request would look like. i don't know how to figure out which method to use.

The operationRef is a reference into an OAS document which points at an operation object. The key of that object (the last component of the operationRef) is the HTTP method to use.
links:
  UserRepositories:
    # returns array of '#/components/schemas/repository'
    operationRef: '#/paths/~12.0~1repositories~1{username}/get'
    parameters:
      username: $response.body#/username

here the method is get.

@dret does this answer your query?

not quite, but thanks for looking into this. i am still wondering: clients are expected to parse the URI and extract the last component of the path in the fragment identifier? if that's the logic they're supposed to use, that should be documented. if there's a different way (this way seems sort of brittle and not easy to implement, in particular given that the URI syntax has no concept of paths in fragments identifiers, and thus URI parsers wouldn't help with implementing this), that should be documented instead.

It's not the URI format which dictates the way fragments are interpreted. As I'm lead to understand, it is the mediatype. Here that is (effectively) application/json so JSON reference rules are used.
It is the tooling interpreting the OAS document which needs to parse and follow the operationRef (not a runtime client interpreting a response), so it is relatively simple for that tool to recognise it has reached an operation object where (in this case) get is the last component of the ref - and thus the method to use.

On 2018-10-27 12:40, Mike Ralphson wrote:

It's not the URI format which dictates the way fragments are
interpreted. As I'm lead to understand, it is the mediatype. Here that
is (effectively) |application/json| so JSON reference rules are used.

very true. but then you have to parse the fragment identifiers
themselves. btw, there are no fragment identifiers defined for JSON, so
what you're referring to here is the way in which OpenAPI defines and
uses them.

It is the tooling interpreting the OAS document which needs to parse and
follow the |operationRef| (not a runtime client interpreting a
response), so it is relatively simple for that tool to recognise it has
reached an |operation| object where (in this case) |get| is the last
component of the ref - and thus the method to use.

ok. maybe i was misled by my hope that OpenAPI would not be as closed as
it seems to be: you can only link to other OpenAPI descriptions, and not
to other URIs out there that may not be described by OpenAPI.
anyway, maybe i was misreading this because i hoped to find something
that resembles actual hyperlinking.
i suggested a small tweak to make the text a bit easier to parse, but i
think now i finally do understand how the mechanism works. thanks!

Thanks for the PR!

Sounds like there was a PR and this was resolved - closing.


Update changelog for v2.0.3

Coverage increased (+0.04%) to 75.644% when pulling f525ee7995f9282c82314063d7d939927d9ea976 on rastislavszabo:master into 6edbb5528744c829f4b2a87a659dd36b0feff511 on contiv:master.


Fixed links in README.md

We would need to update the links again once the repo has been moved to kubernetes-sigs org.
CC: @dims

thanks @sreeram-venkitesh


[SPARK-47841][BUILD] Upgrade postgresql to 42.7.3

What changes were proposed in this pull request?
The pr aims to upgrade postgresql from 42.7.2 to 42.7.3.
Why are the changes needed?
The version 42.7.3 full release notes:
https://jdbc.postgresql.org/changelogs/2024-03-14-42.7.3-release/

fix: boolean types not handled in SimpleQuery mode PR #3146 *make sure we handle boolean types in simple query mode
support uuid as well
handle all well known types in text mode and change else if to switch
fix: released new versions of 42.2.29, 42.3.10, 42.4.5, 42.5.6, 42.6.2 to deal with NoSuchMethodError on ByteBuffer#position when running on Java 8

Does this PR introduce any user-facing change?
No.
How was this patch tested?
Pass GA.
Was this patch authored or co-authored using generative AI tooling?
No.

Thank you, @panbingkun .


keylime_tenant tracebacks when verifier config is not available

Is your issue a feature request? If so, please raise it as an enhancement
Environment

OS / version: C9S
Processor architecture: x86_64
TPM Manufacturer: virtual swtpm
Keylime version: current upstream 4720332

Description
keylime_tenant tracebacks when verifier configuration is not available. This is a regression introduced recently most likely by this MR
https://github.com/keylime/keylime/pull/1255/files
Expected behavior vs. actual behavior
keylime_tenant should not require config files of the verifier, registrar or agent
Steps to reproduce problem
Run keylime_tenant cmf on a system with other config files deleted. E.g. when running all services on localhost
# rm -rf /etc/keylime/{agent,registrar,verifier}*
# keylime_tenant -v <IP_ADDRESS> -t <IP_ADDRESS> -u d432fbb3-d2f1-4a97-9ef7-75bd81c00000 --verify --allowlist allowlist.txt --exclude excludelist.txt --include payload-module --cert default -c add

Relevant logs
Reading configuration from ['/etc/keylime/logging.conf']
Config file not found in ['/etc/keylime/verifier.conf', '/usr/etc/keylime/verifier.conf']. Please see /usr/lib/python3.9/site-packages/keylime/config.py for more details.
Traceback (most recent call last):
  File "/usr/bin/keylime_tenant", line 33, in <module>
    sys.exit(load_entry_point('keylime==6.5.2', 'console_scripts', 'keylime_tenant')())
  File "/usr/bin/keylime_tenant", line 25, in importlib_load_entry_point
    return next(matches).load()
  File "/usr/lib64/python3.9/importlib/metadata.py", line 86, in load
    module = import_module(match.group('module'))
  File "/usr/lib64/python3.9/importlib/__init__.py", line 127, in import_module
    return _bootstrap._gcd_import(name[level:], package, level)
  File "<frozen importlib._bootstrap>", line 1030, in _gcd_import
  File "<frozen importlib._bootstrap>", line 1007, in _find_and_load
  File "<frozen importlib._bootstrap>", line 986, in _find_and_load_unlocked
  File "<frozen importlib._bootstrap>", line 680, in _load_unlocked
  File "<frozen importlib._bootstrap_external>", line 850, in exec_module
  File "<frozen importlib._bootstrap>", line 228, in _call_with_frames_removed
  File "/usr/lib/python3.9/site-packages/keylime/cmd/tenant.py", line 3, in <module>
    from keylime import keylime_logging, tenant
  File "/usr/lib/python3.9/site-packages/keylime/tenant.py", line 20, in <module>
    from keylime.cli import options, policies
  File "/usr/lib/python3.9/site-packages/keylime/cli/policies.py", line 4, in <module>
    from keylime import config, keylime_logging, measured_boot
  File "/usr/lib/python3.9/site-packages/keylime/measured_boot.py", line 8, in <module>
    from keylime.elchecking import tests
  File "/usr/lib/python3.9/site-packages/keylime/elchecking/__init__.py", line 9, in <module>
    from . import example
  File "/usr/lib/python3.9/site-packages/keylime/elchecking/example.py", line 4, in <module>
    from . import policies, tests
  File "/usr/lib/python3.9/site-packages/keylime/elchecking/policies.py", line 106, in <module>
    imports = config.getlist("verifier", "measured_boot_imports")
  File "/usr/lib/python3.9/site-packages/keylime/config.py", line 236, in getlist
    read = get_config(component).get(section, option)
  File "/usr/lib64/python3.9/configparser.py", line 781, in get
    d = self._unify_values(section, vars)
  File "/usr/lib64/python3.9/configparser.py", line 1152, in _unify_values
    raise NoSectionError(section) from None
configparser.NoSectionError: No section: 'verifier'

Attach any relevant log files that can help to debug your issue.

@kkaarreell thank you for finding this. It has to do with that loading of the measured_boot module causes the elchecking code to import the configured modules because it is part of __init__.py. This is due to type hints, maybe we find a better way to load it.


Guid in a Map can not compare value

Doing this gives different results:
var map = Map<Guid, int>();
var key = Guid("472139f8-6cfe-4687-a3e6-1dc37cf6331c");
var key2 = Guid("472139f8-6cfe-4687-a3e6-1dc37cf6331c");
map[key] = 2;
print(map[key]); // returns 2
print(map[key2]); // returns null

Is it a flutter Map issue or flutter_guid?

I have similar issues. I believe it's an issue with how the hashcode is implemented. I opened a PR to address Friday.


italian version

added the italian version

Brief Information
I just added the italian translation
This pull request is in the type of:

[ ] bug fixing
[x] new feature
[ ] others

What does this PR do?
Now the users can switch the language in italian
Fixed issues

Details
Before: What was the problem?

After: How does it behave after the fixing?

Document Info
One of the following should be checked.

[X] This PR doesn't relate to document changes
[ ] The document should be updated later
[ ] The document changes have been made in apache/echarts-doc#xxx

Misc
ZRender Changes

[ ] This PR depends on ZRender changes (ecomfe/zrender#xxx).

Related test cases or examples to use the new APIs
N.A.
Others
Merging options

[ ] Please squash the commits into a single one when merging.

Other information

Hi @napo, thanks for your contribution to i18n! You only need to add the Italian language file to the src/i18n folder. Please refer to the changes in #17244.

It seems the Italian language file has been submitted. You can edit the following file if you hope to correct something.
https://github.com/apache/echarts/blob/master/src/i18n/langIT.ts

@plainheart  Thanks a lot! Ill' proceed

@napo Hi, I'd like to know if you are working or planning to work on this?

I'm sorry to close this PR as it is not active for some time and there is no response from the author.


WYSIWYG can't translate internal links

Winter CMS Build: 1.2.2
Pages Plugin Version: 2.1.2
PHP Version: 8.1.21
Translate 2.1.3

Description:
I have different translated Pages.
Sometimes, I need to add a link between two of these Pages in the content with the editor by the "Link" icon.
When I am in the main language, everything works.
When I switch to the translated version of the content and click the "Link" icon, the search field is able to find only the page in the original language, not the right translated version.
Steps To Reproduce:

select the main language (IT)
add a second language (EN)
create a Page in the main language ( page-italian)
translated this page (page-english)
create in the same way another page (page-italian-bis, page-english-bis)
re-open "page-italian", select a word and add a link to "page-italian-bis"
switch to the english version and try to add a link to "page-english-bis"

Thanks in advanced.

I would help to know what you see and what you actually expect to happen.

Hi @mjauvin ,
thank you for your first comment.
When I am in the translated content (in english) and I want to insert a link to a Page, I would like to find the translated version of that link, not only the original one (in italian).

I hope these screenshots could help:

Here, I am writing in italian and I am looking for the link in the original language...

...and the search field is able to find it, perfect!

Then, after having switched to english (my second language), the search field finds again only italian version of the Pages...

... and the link is in italian, instead of in english.

So, I need to edit the content in the "Code" visualisation and edit the link manually (in order to have "/en/page-english-bis").
I would expect the link to be in English.
Thank you again.

Oh, nice, much more clear now!

@mjauvin anything further we can do on this issue?


Upgrade to Angular 7 and its dependencies

PR Checklist
Please check if your PR fulfills the following requirements:

[x] The commit message follows our guidelines: https://github.com/graycoreio/daffodil/blob/master/CONTRIBUTING.md#commit
[x] Tests for the changes have been added (for bug fixes / features)
[x] Docs have been added / updated (for bug fixes / features)

PR Type
What kind of change does this PR introduce?

[ ] Bugfix
[x] Feature
[ ] Code style update (formatting, local variables)
[ ] Refactoring (no functional changes, no api changes)
[ ] Build related changes
[ ] CI related changes
[ ] Documentation content changes
[ ] Other... Please describe:

What is the current behavior?
We're currently running ng6.
What is the new behavior?
This upgrades to ng7. There are a few breaking changes as a result on underlying dependency modifications (karma runs tests in random order now). I've patched the existing tests after running the test suite several hundred times, but there may be a few outstanding that I didn't catch.
Does this PR introduce a breaking change?
[x] Yes
[ ] No

@lderrickable I've rebased this off develop


Error on custom component for the calendar with tooltip

Hi,
thank you so much for ract-big-calendar : nice job 👍
I would like to create a custom component for the calendar with tooltip ()
import { Calendar } from 'react-big-calendar';
import { Tooltip, OverlayTrigger } from 'react-bootstrap';

event({ event }) {
        return (
            <span className="event-title">
                <OverlayTrigger overlay={<Tooltip id="tooltip-disabled">Tooltip Message</Tooltip>}>
                    {event.title}
                </OverlayTrigger>
            </span>)
    }

<Calendar
   ...
   components={{
      event: this.event
   }}
/>

But I have an error when I use OverlayTrigger in the custom component :

Uncaught Invariant Violation: React.Children.only expected to receive a single React element child.
Uncaught Invariant Violation: React.Children.only expected to receive a single React element child.
index.js:1446 The above error occurred in the  component:
in OverlayTrigger (at Home.js:24)

Home.js: line 24 is :
<OverlayTrigger overlay={<Tooltip id="tooltip-disabled">Tooltip Message</Tooltip>}>
I use the tooltip in my project and it's ok, but if I include the tooltip in the custom component in Calendar : crash.
I use react-bit-calendar (0.22.0) and react-bootstrap (1.0.0-beta.9)

Hi @jechazelle Is this still  a problem for you? The new version uses new react-overlays.

Ah, I see. You use react-bootstrap here. Not sure how this can be related to react-big-calendar package.

Could you provide codesandbox example?


Unable to add guest users to M365 group after setting AllowAddGuests policy to True

I created a M365 group in my demo tenant with the following settings:

My application is set as the owner of this group. When I try to add guest users programmatically, I see the following error:
Response - StatusCode:Forbidden - Content:{
"error": {
"code": "Authorization_RequestDenied",
"message": "Guests users are not allowed to join this Unified Group due to policy setting. paramName: Members, paramValue: , objectType: Microsoft.Online.DirectoryServices.Group",
}
}

However, when I manually add as an owner of the group via Azure Portal, I can add successfully.
What am I missing?
Ref: https://learn.microsoft.com/en-us/microsoft-365/solutions/per-group-guest-access?view=o365-worldwide

@ilantom Thank you for your feedback. Ideally, it should work, this could be a bug in the tenant and I'd suggest reporting the issue via the need help section on the admin center so that the support team can fix this internally.
Hope this helps!
Thanks
Sri

This is Microsoft tenant

@ilantom Since we are from the document team, we do not have access to the tenant to troubleshoot. I'd recommend you work internally with the messaging team to fix the bug.
Hope this helps!
Thanks
Sri


Implement the documentation structure

Discussed in https://github.com/keptn/lifecycle-controller/discussions/141

Originally posted by oleg-nenashev October 11, 2022
Hello,
I propose to rework the documentation structure in the following way

README files - top level overviews and quick-start bits. The rest will go to special pages under “/doc” (see below)

Top-level README

“KLC in a nutshell” - short overview
Getting started - Installing and trying out

Function Runtime README
KLC Operator README

ROADMAP.md - Overview of the project’s direction and state. Most of the content should be on the linked GitHub project dashboard
CONTRIBUTING.md - Top-level contributing overview. How to get started, how to find issues, process and governance. The rest will be linked to developer guidelines
“/doc” - Main holder for the documentation. The documentation will be written in Markdown and grouped by the persona

“spec/” - formal specifications associated with the project, including CRDs
“admin-guide/” - content for administrators who install and maintainKeptn Lifecycle Controller: Installation guide, Upgrading Keptn, Architecture, Troubleshooting, etc.
“user-guide/” - content specific for teams working on projects operated by Keptn, including using Keptn and integrations. Defining Keptn projects, Integrating with KLC, Writing Keptn pre- and post-deployment tasks., eveloping Keptn functions
“developer-guide/” - Set of wiki-ish documentation specific to development of the Keptn Lifecycle Controller itself. Acts as CONTRIBUTING.md extension

See this google doc for the detailed content of each section: https://docs.google.com/document/d/1eVMwZ6EqIKlmui3c7suz_pt9hSDfq_5eiwR8KT9Acw4/edit?usp=sharing

superseded by #683


Forcing a schema version

The Readme.md states that "You can force to use specific version, when $schema is missing, as follows".
What if I want to ignore the $schema key completely and always compile against a specific version?

The library has no option to achieve this.
You can remove  '$schema' attribute before feeding to the library, to achieve the behavior you described


Proposal for V2.0 Documentation

This PR is draft PR which suggests a huge overhaul to the existing Substrate Documentation, following the layout of our new Contribution Guidelines. #247
At a high level, we want to make sure our documentation provides:

A common voice (each doc reads like the others)
A more friendly tone
Easier navigation between information

Our docs/ folder has two sub-folders:

Conceptual
Development

From there, I have created an aspirational table of contents for all the content I think we should document. It looks like this:
Overview
-Overview
-Getting Started
-Glossary

Conceptual
-Conceptual Documentation
-Substrate Core
--Parity Scale Codec
--Consensus
--Executor
--Networking
--Storage
-Substrate Nodes
--Client
--Light Client
--Extrinsics
--RPC
--Transaction Pool
-Substrate Runtime
--Runtime Overview
--Substrate Runtime Module Library
--Substrate Smart Contracts
--Runtime Primitives
-Keyring
--Cryptography
--Session Keys
--Subkey

Development
-Developer Documentation
-Runtime Modules
--Overview
--Runtime Execution
--Runtime Macros
--Runtime Storage
--Runtime Events
--Runtime Errors
--Runtime Origin
--Runtime Configuration Traits
--Transaction Weight
--Runtime Tests
-Build
--Prerequisites
--Purge Chain
--Runtime Upgrades
-Front End
--Polkadot-JS
--JSON RPC
-Deployment
--Chain Specification
--Account Prefix
--Boot Nodes
--Disabling Features of Your Runtime

Each one of these files in this PR has suggested information which should be covered by this doc.

almost everything in the Substrate Core section already has reference docs which are better suited for the target audience (protocol devs building with Substrate) -- doesn't seem to make a lot of sense in the short-term to repeat these docs (anyone trying to understand the design of the system will read the w3f papers and look at the reference docs)
should the keyring section be in conceptual or development? subkey should probably be in Development
Runtime Configuration Traits should be Runtime Types because the Trait is used for specifying the required form when configuring types for the module in the runtime
don't think we should document Transaction Weight, at least not at first. The relay chain is using the current transaction weight design to manage costs, but this may not be the appropriate model for every parachain (consider the motivation behind the feeless token tutorial)
is Developer Documentation the docs on the docs? I feel like this could be kept separately, but I don't have a strong opinion. The longer this table of contents is, the harder it will be to find what they're looking for (and the easier it is to get distracted and give up)

Otherwise, this looks good. We should discuss prioritization soon. It would be nice to identify (agree on)

what sections need to be done first
who wants to do which sections
establish links between conceptual - documentation so the quality (linking norms?) are consistent across all docs instead of some docs linking frequently and others neglecting to do so

I'd prefer to focus on runtime configuration and module development, the Development/Runtime Modules section. I am also open to helping with Conceptual/Substrate Node section and can pick up other spare tasks as needed.

If we want to contribute to this effort (eg by writing docs) how should we do it? Make another PR against shawntabrizi:v2.0?

Closed in favor of #252


Q: transactional producer configs for mulit-broker(cluster) behind load balancer

Description
I am trying following:

Setup Two brokers behind a load balancer(which will route traffic based on availability, load, etc).
Create a producer(with transaction support) by setting load balancer host address as bootstrap server.
It works fine fine till there are no disconnects, but one fine day following happens:

%6|1591244167.286|FAIL|app-trx#producer-2| [thrd:sasl_plaintext://load-balanacer-host:9092/bootstrap]: sasl_plaintext://load-balanacer-host:9092/bootstrap: Disconnected (after 1516513ms in state UP)
%3|1591244167.286|ERROR|app-trx#producer-2| [thrd:sasl_plaintext://load-balanacer-host:9092/bootstrap]: sasl_plaintext://load-balanacer-host:9092/bootstrap: Disconnected (after 1516513ms in state UP)
%3|1591244453.733|FAIL|app-trx#producer-2| [thrd:sasl_plaintext://broker-1-ip:9092/1001]: sasl_plaintext://broker-1-ip:9092/1001: Connect to ipv4#broker-1-ip:9092 failed: No route to host (after 3006ms in state CONNECT)
%3|1591244453.733|ERROR|app-trx#producer-2| [thrd:sasl_plaintext://broker-1-ip:9092/1001]: sasl_plaintext://broker-1-ip:9092/1001: Connect to ipv4#broker-1-ip:9092 failed: No route to host (after 3006ms in state CONNECT)
%3|1594301839.904|ADDPARTS|app-trx#producer-2| [thrd:main]: TxnCoordinator/1002: Failed to add partition "topic-name" [0] to transaction: Broker: Producer attempted to use a producer id which is not currently assigned to its transactional id
%1|1594301839.904|TXNERR|app-trx#producer-2| [thrd:main]: Fatal transaction error: Failed to add partitions to transaction: Broker: Producer attempted to use a producer id which is not currently assigned to its transactional id (INVALID_PRODUCER_ID_MAPPING)
%3|1594301839.904|ERROR|app-trx#producer-2| [thrd:main]: Fatal error: Broker: Producer attempted to use a producer id which is not currently assigned to its transactional id: Failed to add partitions to transaction: Broker: Producer attempted to use a producer id which is not currently assigned to its transactional id

Did I configure something wrong, please advice?
I did get on zkCli for /brokers/topics/topic-name, it gave following:
{"version":1,"partitions":{"1":[1001,1002],"0":[1002,1001]}}

How to reproduce
Not an issue.
Checklist
Please provide the following information:

[ ] A complete (i.e. we can run it), minimal program demonstrating the problem. No need to supply a project file.
[x] Confluent.Kafka nuget version. 1.4.0
[ ] Apache Kafka version.
[ ] Client configuration.
[ ] Operating system.
[ ] Provide logs (with "debug" : "..." as necessary in configuration).
[ ] Provide broker log excerpts.
[ ] Critical issue.

Setup Two brokers behind a load balancer(which will route traffic based on availability, load, etc).

Kafka + protocol take care of availability / load balancing for you already - you shouldn't try to use a load balancer for this purpose. The .net client expects to maintain connections directly to brokers as it requires. I'm aware of some people using a level of indirection on the bootstrap servers to allow them to switch out broker addresses (if all other connections fail, the bootstrap server addresses will be used to find the cluster again), but I haven't done this personally, and I believe there is some devil in the detail here.


As unit tests will fail - auto merge should not be done

since failure in allowed conclusions is removed

Explanation

Essential Checklist

[ ] The PR title and explanation each start with "Fix #bugnum: " (If this PR fixes part of an issue, prefix the title with "Fix part of #bugnum: ...".)
[ ] Any changes to scripts/assets files have their rationale included in the PR explanation.
[ ] The PR follows the style guide.
[ ] The PR does not contain any unnecessary code changes from Android Studio (reference).
[ ] The PR is made from a branch that's not called "develop" and is up-to-date with "develop".
[ ] The PR is assigned to the appropriate reviewers (reference).

For UI-specific PRs only

If your PR includes UI-related changes, then:

Add screenshots for portrait/landscape for both a tablet & phone of the before & after UI changes
For the screenshots above, include both English and pseudo-localized (RTL) screenshots (see RTL guide)
Add a video showing the full UX flow with a screen reader enabled (see accessibility guide)
For PRs introducing new UI elements or color changes, both light and dark mode screenshots must be included
Add a screenshot demonstrating that you ran affected Espresso tests locally & that they're passing

Nice as unit tests fail, the cc check unit test failed -> cr check failed - failing comment and cc result


1x1 aspect ratio

Environment
Flutter version:
Plugin version:
Android version:
iOS version:
Xcode version:
Device information:
Description
What you'd like to happen:
add 1x1 aspect ratio for squire image and force it in ios camera and album pick
thanks
Alternatives you've considered:
Images:

Any idea how to do this? Thanks

aspectRatio: CropAspectRatio(1, 1)

I forked it and edited code


hass.http.register_static_path which is deprecated

What happened?
Detected that custom integration 'smart_irrigation' calls hass.http.register_static_path which is deprecated because it does blocking I/O in the event loop, instead call await hass.http.async_register_static_paths([StaticPathConfig("/api/panel_custom/smart-irrigation", "/config/custom_components/smart_irrigation/frontend/dist/smart-irrigation.js", False)]); This function will be removed in 2025.7 at custom_components/smart_irrigation/panel.py, line 32: hass.http.register_static_path(PANEL_URL, view_url, False)
How to reproduce
On restart
Relevant log output
Detected that custom integration 'smart_irrigation' calls hass.http.register_static_path which is deprecated because it does blocking I/O in the event loop, instead call `await hass.http.async_register_static_paths([StaticPathConfig("/api/panel_custom/smart-irrigation", "/config/custom_components/smart_irrigation/frontend/dist/smart-irrigation.js", False)])`; This function will be removed in 2025.7 at custom_components/smart_irrigation/panel.py, line 32: hass.http.register_static_path(PANEL_URL, view_url, False)

Which version are you running?
2024.9.3
Diagnostics file

[X] I have attached a diagnostics file

Additional information
No response

Duplicate of #429


Switch between files and refactorings

Everything as it is shown on the mockup:

@anchouls awesome!! Thank you Anna, I will test it and merge then.


Misusing Schnorr signatures causes leakage of the Validator's private key

An attacker can easily calculate any validator's private key by

observing signatures on any 2 blocks from the same validator during the 1008 block enrollment cycle AND
observing preimages on the same 2 blocks AND
observing the block hashes on the same 2 blocks

All those information above are publicly available to anyone.
After observing those information, the following 2 modular equations can be created:
s10 = rc + p10 + (c10*v)
s11 = rc + p11 + (c11*v)
s10 = signature on block at height 10
p10 = preimage for block at height 10
c10 = block hash for block at height 10
v = private key
rc = unknown constant for the 1008 block enrollment cycle
those 2 equations can be solved for rc and v
here is a D problem to demostrate
unittest
{
    import agora.consensus.data.genesis.Test: GenesisBlock;
    import agora.crypto.ECC: Scalar, Point;
    import agora.crypto.Schnorr;
    import agora.utils.Test;
    import std.format;
    Hash random_seed1 = "seed10".hashFull();
    Hash random_seed2 = "seed11".hashFull();
    Hash preimage10 = "preimage10".hashFull();
    Hash preimage11 = "preimage11".hashFull();
    const TimeOffset = 1;
    const Validators = genesis_validator_keys.length;
    // Generate two blocks
    auto block10 = GenesisBlock.makeNewBlock(
        genesisSpendable().take(1).map!(txb => txb.sign()), TimeOffset, random_seed1, Validators);
    auto block11 = block10.makeNewBlock(
        genesisSpendable().take(1).map!(txb => txb.sign()), TimeOffset, random_seed2, Validators);
    Scalar v = genesis_validator_keys[0].secret;
    assert(v.isValid(), "v is not a valid Scalar!");
    Point V = v.toPoint();
    const Scalar rc = Scalar(hashMulti(v, "consensus.signature.noise", 0));
    const Scalar r10 = rc + Scalar(preimage10);
    const Point R10 = r10.toPoint();
    const Scalar r11 = rc + Scalar(preimage11);
    const Point R11 = r11.toPoint();
    // Two messages
    Scalar c10 = block10.hashFull();
    Scalar c11 = block11.hashFull();
    assert(c10 != c11);
    Signature sig10 = block10.header.createBlockSignature(v, preimage10);
    Signature sig11 = block11.header.createBlockSignature(v, preimage11);
    // Verify signatures
    assert(verify(sig10, c10, V));
    assert(verify(sig11, c11, V));
    // Calculate the private key
    // v = (s10 - s11 + p11 - p10) / (c10 - c11)
    Scalar inverseBlockDiff = c10 - c11;
    inverseBlockDiff = inverseBlockDiff.invert();
    Scalar private_key_calculated = (sig10.s - sig11.s + Scalar(preimage11) - Scalar(preimage10)) * inverseBlockDiff;
    assert(private_key_calculated == v,
        format!"Key %s is not matching key %s"
        (private_key_calculated.toString(PrintMode.Clear), v.toString(PrintMode.Clear)));
}

The suggested solution to this is that each validator should commit to 1008 public random numbers during the enrollment. The secret random numbers corresponding to the commited public random numbers can be generated by h(v, "blocksig", height)
Those public numbers should be part of our block headers, but after validator of the block signature, light clients might choose to discard them to save space or memory. This is similar how seggregated witnesses are discarded in Bitcoin after validation.

The test looks valid. Good find.
However, I think the best solution might be to use a new secret (never shared) for the noise of each block and go back to passing (R, s) instead of just s. This will prevent the ability to subtract away the repeated unknown as shown in your test.
The combined signature is then (R1 + R2 + ... , s1 + s2 + ...) and can be validated also.

The test looks valid. Good find.
However, I think the best solution might be to use a new secret (never shared) for the noise of each block and go back to passing (R, s) instead of just s. This will prevent the ability to subtract away the repeated unknown as shown in your test.
The combined signature is then (R1 + R2 + ... , s1 + s2 + ...) and can be validated also without storing each individual R.

I was suggesting storing the R1, R2 in the header, so we can punish validators signing the same block twice, otherwise our solution and mine is the same

The test looks valid. Good find.
However, I think the best solution might be to use a new secret (never shared) for the noise of each block and go back to passing (R, s) instead of just s. This will prevent the ability to subtract away the repeated unknown as shown in your test.
The combined signature is then (R1 + R2 + ... , s1 + s2 + ...) and can be validated also without storing each individual R.

I was suggesting storing the R1, R2 in the header, so we can punish validators signing the same block twice (they are commited to use R1, R2...), otherwise our solution and mine is the same.

The test case is valid and it's an issue. I am looking into ways to tweak the algorithm so that the issue can be fixed without adding more data.
For reference, a key property of the R derivation is that it makes the signature protocol non-interactive. Remember that for the Schnorr multisig scheme to work, all validators must sign using the same R, which in typical scheme requires a setup phase.

This attack can be prevented by multiplying the secret commitment made when enrolling by the pre-image rather than adding them together.


Fix #104: sim.plot handles user-specified dictionary with result:label pairs

Small PR with a bugfix for #104
Brief description
Issue #104
Either of these options now work
sim.plot(to_plot={'cpr':'CPR (contraceptive prevalence rate)'}) # produces a figure with one plot
sim.plot(to_plot='cpr') # produces a figure with multiple subplots (based on a dict specified internally in sim.plot)

If to_plot is not str or dict, sim.plot throws a TypeError, ie:
TypeError: to_plot can be a dictionary or a string. A <class 'list'> is not a valid option.

Type(s) of change

[x] Bugfix
[ ] Refactor
[ ] New feature
[ ] Other

Checklist

My code follows the style guide

[x] Yes
[ ] N/A

I've commented my code

[ ] Yes
[x] N/A

I've incremented the version number

[ ] Yes
[x] N/A

I've updated the changelog

[ ] Yes
[x] N/A

I've added tests and checked code coverage

[ ] Yes
[x] N/A

cc @avictorious

@pausz beautiful, thanks for circling back to this :-)


Allow docker image for cephfs provisioner to build the provisioner itself

I've added a pre-step to build the cephfs-provisioner binary within docker, so this dockerfile could be used in e.g. quay automated builds.
Due to how vendoring is set up, the context of docker build has to be the root of the repository itself.

can you make a separate dockerfile for this? it is good thing to have a portable way to build but bad if we just want to deploy the binary when we already have a good build.

Done.

/lgtm


fix truncate messages with more than 300 chars

Should fix issue #2 because of max length of 300 chars for a Bluesky message.

Each Mastodon post over 300 chars will be truncated to 299 chars and an ellipsis ('…') will added at the end.
added error-handling for Bluesky: newTimestampId will only set if Bluesky post was successful
added more console logs

Thank you. I am thinking about splitting up longer posts into several bsky posts, what do you think?

:tada: This PR is included in version 1.1.0 :tada:
The release is available on GitHub release
Your semantic-release bot :package::rocket:

Thank you. I am thinking about splitting up longer posts into several bsky posts, what do you think?

Hey that's a good idea. I don't know Bluesky supporting threads (like Twitter). Otherwise each part as reply to the main post?
We should also add support for images. Currently they not included in our Bluesky message.


Improve isvg

Make the isvg output correct XML so the output can be rendered.

I found that bug. Oddly they kinda rendered anyway.

I found that bug. Oddly they kinda rendered anyway.


What happens with user name in audits if user is deleted?

Audit items stays in the database with the non-existing user id


Toggle Regex hint is not shown if the Find Widget is not visible.

VSCode Version: 1.13-Insiders
OS Version: macOS

Right now we only show hint for toggle case and word.

@rebornix Those 2 are relevant for cmd+d, but the regex switch isn't. Should it be toggleable and shown without the find widget?

@roblourens isn't the idea that you're just setting the find widget's settings while the find widget isn't visible? Would seem weird to be able to set only 2 of the 3 main settings.

Yeah but why do you want to change the regex setting when the find widget isn't visible? Maybe the shortcut should only be enabled when the find widget is visible or focused.
It makes sense for the other two since they impact cmd+d.

I'll defer to @rebornix as I don't use cmd+d so don't feel I'm knowledgable enough to comment. I will say though that it was not obvious that it impacted cmd+d to me and that would probably be a source of confusion if I were using cmd+d.


Add multi-buy button

Button to toggle purchase quantity between 1x, x10, x100, and Max.

added 1x 10x 100x options.
without max option


Remove borrow of RobotBase in DriverStation

Need a better way to release the DS Mutex, but other than that this should work fine and make things much more ergonomic.

I personally think we should get rid of RobotBase altogether. It's not really doing anything; everything will initialise the HAL.


Use offline model to stream online

Hi ! First of all, thank you for you great work. Now I'm confusing whether I can use a model which trained offline to inference in online manner i.e streaming web socket server or not ? Please let me know. Thank you very much !

Sorry, you cannot and vice versa.


Add internationalization for a Rails Application

Hello,
First thanks for your awesome date picker, I open an issue because I want to convert Flapickr in French for a project.

Your date picker is in English in my rails project and it work well ! I have a folder "l10n" with fr.js that I want to use to translate all months and days in French but I don't find a documentation about this. I found a link that you provided in a closed issue ( https://chmln.github.io/flatpickr/#locales ) but there is no documentation. ( It's probably my fault )
In my application JS I have :
//= require flatpickr/flatpickr.js
//= require flatpickr/l10n/fr
//= require_self
document.addEventListener('turbolinks:load', function () {
flatpickr('.form-datepicker',{
 altInput: true,
  altFormat: 'j F Y'
})
})
Thanks.
PS : Sorry For this question, I'm new i Dev's World

Reproduction Link
https://jsfiddle.net/aj6k3f1v/
Your Environment

flatpickr version used: The last
Browser name and version: Mozilla Firefox
OS and version: Ubuntu 16.04

You can use Flatpickr.localize(Flatpickr.l10ns.fr).
To set defaults like the first day of week, use e.g. Flatpickr.l10ns.default.firstDayOfWeek = 1.
To set the default configuration of other options, use e.g. Flatpickr.defaultConfig.dateFormat = 'd.m.Y'.

S-hoff thanks a lot for your help it's work !!! :D


Error: cannot acces PagerAdopter

error: cannot access PagerAdapter
class file for androidx.viewpager.widget.PagerAdapter not found

This version 1.3.2 need androidX implementation in your project!

what if don't want to implement AndroidX +do you have any demo here


RUSTSEC-2024-0320 - Unmaintained yaml-rust crate from config crate

Either:

Migrate to another crate, e.g. figment
Get config crate to resolve the advisory

Looks like config fixed this a while ago but only just released a new version with the fix a few days ago.


update emacs-lisp outline regexp to fold defs

Allows outline-mode to also fold defs, which can be useful when developing large emacs-lisp files. I've had this in my config for a while and find it useful, was wondering if upstream would like to have it as well:

Hi! Thanks for the PR but I cannot accept it. It is redundant with hideshow which the :editor fold module configures, and will handle folding lisp blocks, while outline-minor-mode is relegated to handling comment headings, and vimish-fold handling arbitrary folds.

I see, thanks! I don't use evil, so there weren't any accessible bindings, which was probably why I didn't notice.


cmd/compile: floating-point broken on android-arm-corellium builder

--- FAIL: TestFloat32 (0.11s)
    rand_test.go:360: Float32() should be in range [0,1). ct: 2274285 f: 0.27337575
FAIL
FAIL	math/rand	0.548s

Seems to have started after Jan. 19.
Have there been recent changes in this builder image or configuration? Otherwise, the only major changes over that interval have been @4a6f656c's RISC-V changes.
CC @cagedmantis @dmitshur @toothrot @zenly
2020-01-28T02:40:44-a858d15/android-arm-corellium
2020-01-28T02:39:28-d8e0526/android-arm-corellium
2020-01-27T23:23:00-22f09ce/android-arm-corellium
2020-01-27T20:45:39-74d366f/android-arm-corellium
2020-01-27T14:34:16-4615b39/android-arm-corellium
2020-01-25T16:34:18-73d2137/android-arm-corellium
2020-01-24T19:19:16-e35876e/android-arm-corellium
2020-01-24T17:36:44-1f9f88b/android-arm-corellium
2020-01-23T23:07:10-8d7be1e/android-arm-corellium
2020-01-23T21:01:12-ace25f8/android-arm-corellium
2020-01-23T20:44:44-8453844/android-arm-corellium
2020-01-23T19:11:41-39ea3d0/android-arm-corellium
2020-01-23T16:52:00-64378c2/android-arm-corellium
2020-01-23T07:39:53-9f07cdd/android-arm-corellium
2020-01-22T18:10:42-895b7c8/android-arm-corellium
2020-01-22T15:24:05-6718cb6/android-arm-corellium

Looks like this was fixed by an update on Corellium's part on our about 2/17.


Fixed issue with LE/DI not showing up if both on same set of days

Ex: CAT 2 with both LE & DI on TuTh (see image below). When it gets to the second line, it ends up overwriting the lecture. This happened because the days property was an object, with the key being "TuTh". I changed it to use an array, so both the LE and DI will be included.

lgtm

Thanks for your PR


return statement formatted with wrong place

function cartesian(a,b, selectorP, res, i, j) {
    res = []
    for (j in b) if(own.call(b, j))
      for (i in a) if(own.call(a, i))
        res.push(concat(a[i], b[j], selectorP))
    return res
  }

After format, the code:
function cartesian(a, b, selectorP, res, i, j) {
    res = [];
    for (j in b) {
      if (own.call(b, j)) for (i in a) {
        if (own.call(a, i)) res.push(concat(a[i], b[j], selectorP));
      }
    }return res;
  }

This is not part of this preset, but rather due to a specific transform.
Specifically, I believe this is done to maintain line numbers as best as possible.
More specifically, transpiler output is not meant for humans, so it doesn't matter what it looks like as long as it functions properly.


Changes search from property to method in readme

Fixes the first numbered bullet in this issue:
https://github.com/redis/redis-om-node/issues/122
Due note this does not attempt to resolve the second numbered bullet which deals with the use of .return.all() in Chaining Searches

Thanks for submitting this!


Add support for .ruby-variant

Solves #4

I have made the requested changes. Let me know what you think.


Go back button

add a "go back" button and persist query on home page

@mok4ry  can we make the search bar not editable so that its obvious that the user needs to return home to perform another search.

LGTM


Fixing squid: S00117 Local variable and method parameter names should comply with a naming convention

This pull request is focused on resolving occurrences of Sonar rule
squid:S00117- “Local variable and method parameter names should comply with a naming convention”.
You can find more information about the issues here:
https://dev.eclipse.org/sonar/rules/show/squid:S00117
Please let me know if you have any questions.
Fevzi Ozgul

I wonder when  you could possibly merge this PR?
Thanks

This PR can not be accepted because of the project


Allow xctool to build with Buck

This doesn't yet build the mobile-installation-helper.app, but that's next.
I'm thinking about how we might want to run xctool tests via Buck. Maybe directly with xctest?
I tested this with:
% buck build :xctool-zip
% unzip -l buck-out/gen/xctool.zip
Archive:  buck-out/gen/xctool.zip
  Length     Date   Time    Name
 --------    ----   ----    ----
        0  05-27-15 21:28   bin/
   690468  05-27-15 21:28   bin/xctool
        0  05-27-15 21:28   lib/
    59004  05-27-15 21:28   lib/otest-query-lib-ios.dylib
    62868  05-27-15 21:28   lib/otest-query-lib-osx.dylib
   102496  05-27-15 21:28   lib/otest-shim-ios.dylib
   106360  05-27-15 21:28   lib/otest-shim-osx.dylib
    39668  05-27-15 21:28   lib/sim-shim.dylib
        0  05-27-15 21:28   libexec/
        0  05-27-15 21:28   libexec/mobile-installation-helper.app/
    24896  05-27-15 21:28   libexec/otest-query-ios
    63020  05-27-15 21:28   libexec/otest-query-osx
        0  05-27-15 21:28   reporters/
    35600  05-27-15 21:28   reporters/json-compilation-database
    25292  05-27-15 21:28   reporters/json-stream
    43844  05-27-15 21:28   reporters/junit
    35804  05-27-15 21:28   reporters/phabricator
    83356  05-27-15 21:28   reporters/plain
    83356  05-27-15 21:28   reporters/pretty
    39392  05-27-15 21:28   reporters/teamcity
    31088  05-27-15 21:28   reporters/user-notifications
 --------                   -------
  1526512                   21 files

I also ran the compiled xctool by hand to run a few tests for iOS, it worked fine.

Can Buck support the concept of host/target platforms, so you can avoid some of the genrule()'s and hardcoding #macosx-x86_64?
Can you avoid the lipo genrules and assume that when that support is needed, Buck will handle fat binaries natively?

Can Buck support the concept of host/target platforms, so you can avoid some of the genrule()'s and hardcoding #macosx-x86_64?
Can you avoid the lipo genrules and assume that when that support is needed, Buck will handle fat binaries natively?

These are all awesome questions. Since Buck was written and designed to build Java, it doesn't have the concept of host/target platforms yet. I've been thinking about how to integrate those.

:tada:


✨ Show required prop in settings

@damianpumar, looks good. The Fields and Question UI seems a bit unaligned now.


Update AutoRest C# version to 3.0.0-beta.20240517.1

Update AutoRest C# version to 3.0.0-beta.20240517.1

close since it's covered by https://github.com/Azure/azure-sdk-for-net/pull/44105


feat(traffic_light_ssd_fine_detector): remove package

Description
See https://github.com/orgs/autowarefoundation/discussions/4136
https://github.com/autowarefoundation/autoware/pull/4161 should be merged after this

Tests performed

Not applicable
Effects on system behavior

Not applicable
Pre-review checklist for the PR author
The PR author must check the checkboxes below when creating the PR.

[ ] I've confirmed the contribution guidelines.
[ ] The PR follows the pull request guidelines.

In-review checklist for the PR reviewers
The PR reviewers must check the checkboxes below before approval.

[ ] The PR follows the pull request guidelines.

Post-review checklist for the PR author
The PR author must check the checkboxes below before merging.

[ ] There are no open discussions or they are tracked via tickets.

After all checkboxes are checked, anyone who has write access can merge the PR.

@miursh The test passed in my local environment :thinking:
Let me re-run the test to see if it resolves.


Threshold Ignored For 1 and 2 letter search terms.

First of all, thanks for a great gem! However, when I search like this:
FuzzyMatch.new(Organization.where("is_counsel = false"), :read => :name, find_all_with_score: true, threshold: 0.5).find("li")
I'll get back results like this.
[#<Organization:0x007fb000d15530
id: 67,
name: "Little Inc",
created_at: Wed, 14 Dec 2016 02:15:00 UTC +00:00,
updated_at: Wed, 14 Dec 2016 02:15:00 UTC +00:00,
is_counsel: false>,
0.25,
0.19999999999999996],
[#<Organization:0x007fb000cf4998
id: 95,
name: "Lindgren Inc",
created_at: Wed, 14 Dec 2016 02:15:00 UTC +00:00,
updated_at: Wed, 14 Dec 2016 02:15:00 UTC +00:00,
is_counsel: false>,
0.2,
0.16666666666666663],
[#<Organization:0x007fb000cd6128
id: 26,
name: "Grant-Little",
created_at: Wed, 14 Dec 2016 02:14:59 UTC +00:00,
updated_at: Wed, 14 Dec 2016 02:14:59 UTC +00:00,
is_counsel: false>,
0.16666666666666666,
0.16666666666666663],
[#<Organization:0x007fb000cd50c0
id: 36,
name: "Kessler-Kling",
created_at: Wed, 14 Dec 2016 02:14:59 UTC +00:00,
updated_at: Wed, 14 Dec 2016 02:14:59 UTC +00:00,
is_counsel: false>,
0.15384615384615385,
0.15384615384615385],
Obviously, the scores fall well below the threshold. I can get around be filtering afterward with select or something, but that's expensive, and it would be nice if I didn't have to do this.

This appears to be a deliberate (albeit peculiar) design choice for short search terms. The relevant code is under lib/fuzzy_match/similarity.rb:
def satisfy?(needle, threshold)
  best_score.dices_coefficient_similar > (threshold || 0) or
    ((record2.clean.length < 3 or needle.clean.length < 3) and best_score.levenshtein_similar > 0) or
    (threshold.nil? && (needle.words & record2.words).any?)
end

As you can see, the author(s) created a special case to both ignore the threshold and consider Levenshtein Distance (normalized as a similarity score between 0 – 1) rather than Dice Coefficient when either word in the comparison is less than 3 characters long.
To be honest, I'm curious as to the rationale behind this choice as well. I think I can understand switching from Dice to Levenshtein, but why remove the threshold? Perhaps they had a particular use case in mind? Unfortunately, it looks like this project has not been touched in over a year.
@seamusabshere, care to comment?

i think it's because the threshold is expressed in "dice distance," which is not directly comparable to levenshtein distance. still, i can see how this makes the threshold useless for short needles.
options:

add another option short_threshold that would be used for lengths < 3
just suck it up and apply threshold to both

Ah. How about Option 3: Stick with Dice for all search terms?
While I agree that levenshtein works better than dice for very short search terms
> FuzzyMatch::Score::PureRuby.new('tit','tat')
=> (dice=0.00000,lev=0.66667)

and obviously breaks for single-character terms, this problem can be mitigated by ‘padding’ search strings at the start and end with a single, non-letter character (analysis here):
> FuzzyMatch::Score::PureRuby.new('#tit#','#tat#')
=> (dice=0.50000,lev=0.80000)

The resulting Dice score (0.5) is now much closer to the original Levenshtein score (0.67).
This has the added benefit of reducing the number of conditional branches in the #satisfy? method from 3 to 2.

oh that's a great idea! i wish i had known about that before.
@rlue would you write a PR?

I regret to say I was not able to run rspec since bundler keeps throwing errors about not being able to install perftools. I did some cursory testing in irb, but please let me know if this breaks anything. :(


Inconsistency in ICA matrix shapes between ICA loaded from EEGLAB and fitted in MNE

I noticed this issue today, you can reproduce it below with a 32 channels raw and a 25 components ICA.
from mne.datasets import sample, testing
from mne.io import read_raw_eeglab, read_raw_fif
from mne.preprocessing import read_ica_eeglab, ICA

test_base_dir = testing.data_path(download=False)

# Load raw and ICA from EEGLAB
fname = testing.data_path(download=False) / "EEGLAB" / "test_raw.set"
raw1 = read_raw_eeglab(fname, preload=True)
ica1 = read_ica_eeglab(fname)
n_ch = len(raw1.ch_names)  # 32
n_components = ica1.n_components  # 25

# Fit an ICA with same n_ch and n_components
fname = sample.data_path(download=False) / 'MEG' / 'sample' / 'sample_audvis_raw.fif'
raw2 = read_raw_fif(fname)
raw2.pick_types(eeg=True)
raw2.pick_channels(raw2.ch_names[:n_ch])
raw2.load_data()
raw2.filter(1., 40.)
ica2 = ICA(n_components=n_components, method='picard')
ica2.fit(raw2)

# Compare
assert ica1.unmixing_matrix_.shape == ica2.unmixing_matrix_.shape
assert ica1.pre_whitener_.shape == ica2.pre_whitener_.shape
assert ica1.pca_mean_.shape == ica2.pca_mean_.shape

# fails:
assert ica1.pca_components_.shape == ica2.pca_components_.shape
# ica1: (25, 32) --- ica2: (32, 32)
assert ica1.pca_explained_variance_.shape == ica2.pca_explained_variance_.shape
# ica1: (25,)    --- ica2: (32,)

Probably a problem here: https://github.com/mne-tools/mne-python/blob/965521831b5ca8675becc0cc9716db0cfc8ad946/mne/preprocessing/ica.py#L2830-L2848

I don't have time to look in details but MNE does something specific:
it allows to run ICA after PCA but to put back the small PCA components
back into the data after rejection some components.
The example is this: EOG components are super easy and fast to pick up with
20 ICA
components but I don't want to work with data in rank 20 after cleaning the
EOG.
makes sense? does it help?
Message ID: @.***>

Yes, I'm familiar with this approach and it makes perfect sense. Are you saying that this is not the approach chosen by EEGLAB, and thus the small PCA components are missing from the loaded instance?
That would explain the shapes observed in the example above.

yes exactly. EEGLAB does not allow to put back the extra PCA components
that's why
It's smaller

Message ID: @.***>

OK, thanks a lot, so the shape mismatch is normal!


[Bug]: The read and write performance in the archive task details needs to be displayed in units

ODC version
ODC430
OB version
independent
What happened?
The read and write performance in the archive task details needs to be displayed in units

What did you expect to happen?
。
How can we reproduce it (as minimally and precisely as possible)?
。
Anything else we need to know?
No response

Fixed In Commit 062b0f234e2debe9408d924e796e477a722a9d16
------
畅晚
Thu Jun 6 16:18:36 2024 +0800


python312Packages.fastcore: 1.5.35 -> 1.5.38

Diff: https://github.com/fastai/fastcore/compare/refs/tags/1.5.35...1.5.38
Changelog: https://github.com/fastai/fastcore/blob/1.5.38/CHANGELOG.md
Description of changes

Things done

Built on platform(s)

[ ] x86_64-linux
[ ] aarch64-linux
[ ] x86_64-darwin
[ ] aarch64-darwin

For non-Linux: Is sandboxing enabled in nix.conf? (See Nix manual)

[ ] sandbox = relaxed
[ ] sandbox = true

[ ] Tested, as applicable:

NixOS test(s) (look inside nixos/tests)
and/or package tests
or, for functions and "core" functionality, tests in lib/tests or pkgs/test
made sure NixOS tests are linked to the relevant packages

[ ] Tested compilation of all packages that depend on this change using nix-shell -p nixpkgs-review --run "nixpkgs-review rev HEAD". Note: all changes have to be committed, also see nixpkgs-review usage
[ ] Tested basic functionality of all binary files (usually in ./result/bin/)
24.05 Release Notes (or backporting 23.05 and 23.11 Release notes)

[ ] (Package updates) Added a release notes entry if the change is major or breaking
[ ] (Module updates) Added a release notes entry if the change is significant
[ ] (Module addition) Added a release notes entry if adding a new NixOS module

[ ] Fits CONTRIBUTING.md.

Add a :+1: reaction to pull requests you find important.

Result of nixpkgs-review pr 313468 run on x86_64-linux 1

2 packages marked as broken and skipped:

python311Packages.openllm
python311Packages.openllm.dist

24 packages built:

ghdorker
ghdorker.dist
python311Packages.execnb
python311Packages.execnb.dist
python311Packages.fastai
python311Packages.fastai.dist
python311Packages.fastcore
python311Packages.fastcore.dist
python311Packages.fastdownload
python311Packages.fastdownload.dist
python311Packages.ghapi
python311Packages.ghapi.dist
python311Packages.nbdev
python311Packages.nbdev.dist
python312Packages.execnb
python312Packages.execnb.dist
python312Packages.fastcore
python312Packages.fastcore.dist
python312Packages.fastdownload
python312Packages.fastdownload.dist
python312Packages.ghapi
python312Packages.ghapi.dist
python312Packages.nbdev
python312Packages.nbdev.dist


Adds foreman fee counter for Blast Furnace under level 60 smithing

For players that are utilizing blast furnace and require to pay the
foreman fee every 10 minutes, this will assist in tracking the time
remaining before the next fee payment is required. This defaults to
disabled, but is bundled with the Blast Furnace plugin config.
Resolves #8769

Should be in pretty good shape now, let me know if you see anything else that could use some tweaking.

I think this would be better as a Timer than an overlay

I think this would be better as a Timer than an overlay

Oh wow. I didn't even realize that class existed. Assuming I would add an entry in GameTimer.java and then drop the config in TimersPlugin.java? Additionally, do you think the Coal bag would be a good image for this? Hover message would be something like "Foreman Fee" or similar for more clarity.

Refactored to utilize timers per feedback. Removed commits from prior approach to clean up the change history. Much cleaner! Thanks, @Adam-
The only thing I wasn't sure about a good approach for is Duration.between(Instant.now(), foremanTimer.getEndTime()).toMinutes() <= 5 which basically just stops checking for the NPC dialog to avoid removing and re-adding the timer until the user closes the dialogue. Something like this was required, to avoid the timer not restarting if paid before completely elapsing.

Reverted timer plugin changes and extended the timer within the blast furnace plugin per Adam's recommendation in Discord.


Programmatic control of rendering

I'd like to be able to control the render cycle for the SceneView model.
Actually my requirement is to selectively enable/disable animation, and avoid render work for power savings when it's disabled.
Currently the render cycle is driven directly by Lifecycle, coming from LocalLifecycleOwner.current.lifecycle.  This works for navigation or backgrounding.
But I'd like to use a Scene Composable mixed with other content. My test is currently using the damaged_helment mode with a rotation for testing. But it seems like it still spends as much power if I disable the rotation. Render is called on every frame, which the lifecycle is resumed.
I'd like to be selectively control when the model should be animated to save power. This might be only when the item is focused, and paused other wise.
Alternatively, is there something wrong with my code? Should the model avoid the cost of render per frame, if nothing is animated?
I have a POC that passes in a dummy lifecycle, and then drives the render myself.
    val lifecycle = object : Lifecycle() {
        override val currentState: State = State.CREATED

        override fun addObserver(observer: LifecycleObserver) {
        }

        override fun removeObserver(observer: LifecycleObserver) {
        }
    }

        LaunchedEffect(Unit) {
            val method = Class.forName("io.github.sceneview.SceneView").getDeclaredMethod("onFrame", java.lang.Long.TYPE).apply {
                isAccessible = true
            }

            while (isActive) {
                delay(1000)
                println(view)
                method.invoke(sceneView, System.nanoTime())
            }
        }

This appears to work, but obviously isn't an API and maybe not the best way to solve the problem.

You should take a look at the ModelNode class, in it you have functions like playAnimation and setCulling that I think can help you with what you are looking for.
ModelNode Class
I don't know how you have your scene configured but you can preload the models and render them whenever you want by adding them as children of the scene with the sceneView.addChildNode(myModelNode) function.

Thanks, I'll take a look. To be cleared I'm hoping for my model to be visible just static and not pay for per frame rendering.
Thanks


[Draft] Adding the new flag for enabling oidc issuer for workload identity

Adding the new flag for enabling oidc issuer creation for workload identity on connected cluster

This checklist is used to make sure that common guidelines for a pull request are followed.

For new extensions:

[ ] My extension description/summary conforms to the Extension Summary Guidelines.

About Extension Publish
There is a pipeline to automatically build, upload and publish extension wheels.
Once your pull request is merged into main branch, a new pull request will be created to update src/index.json automatically.
You only need to update the version information in file setup.py and historical information in file HISTORY.rst in your PR but do not modify src/index.json.

connectedk8s

@deeksha345 Could you please resolve the linter issues?


Invariant Violation: Module AppRegistry error

    "react-native-file-access": "^2.4.1",
    "react-native": "^0.67.3",
    "react-native-reanimated": "2.4.1",
    "@georstat/react-native-image-cache": "^2.1.0",

I am getting the following error while adding to my App.tsx
CacheManager.config = {
  baseDir: `${Dirs.CacheDir}/images_cache/`,
  blurRadius: 15,
  cacheLimit: 0,
  sourceAnimationDuration: 1000,
  thumbnailAnimationDuration: 1000,
};

TypeError: undefined is not a function, js engine: hermes
 ERROR  Invariant Violation: Module AppRegistry is not a registered callable module (calling runApplication). A frequent cause of the error is that the application entry file path is incorrect.

and also:
 ERROR  TypeError: undefined is not a function, js engine: hermes

Hi @scaraux, have you tried this? https://github.com/georstat/react-native-image-cache/issues/22

@efstathiosntonas yes I have! Also reanimated merged their PR to fix that issue so I doubt its that

That’s weird. Can you delete your node_modules folder, yarn.lock or package-lock.json and then reinstall everything?
you should also start react native start with —clear-cache just to be sure.

Tried it all, it still fails. By the way, worth mentioned that it fails also with nothing in my App.tsx and just adding the image like so:
      <CachedImage
        source="https://via.placeholder.com/3500x3500"
        style={{ height: 350, width: 150 }}
        thumbnailSource="https://via.placeholder.com/350x150"
      />

Can you create a repo with a minimum reproduction and share it here to take a look?
The screenshot above indicates that the module is not installed.

Sure I can do that!
And yes I ran pod install although this lib doesn't have native code so I don't think it would do anything. Its more for the file-access lib

@efstathiosntonas here it is a barebone js react-native project
https://github.com/scaraux/RNIC_Issue/tree/master

@scaraux took a quick look at package.json and you’re missing react-native-reanimated. This module requires it.

I thought that regardless you guys import it in your package.json. Yes I am 100% sure we use it all over across the app.
I just added it to my above project for you to see, doesn't change anything.

Okay it seems to be working now that I added reanimated... I don't have the same version of reanimated on our project. I will investigate.

@scaraux glad you figured it out, closing this and thanks for your patience in this one.

Thank you for assisting me and for the fast replies. Appreciate it 👍🏻

@efstathiosntonas I will reply here in case people run through the same issue.
I was able to fix it on my main project by bumping reanimated to 2.4.1 -> 2.8.0
Suggestion: It wasn't clear for me that both libs have to be installed (I thought that they would install automatically since your package requires it). You should probably add the yarn add reanimated & yarn add react-native-file-access in the installation section.
Thanks

You can use whatever version of react-native-reanimated you want as long as it aligns with the version this module is using, in your case you had 2.4.1 while this package requires 2.6.0, this mismatch caused the issue , that’s why I’ve proposed to use resolutions https://github.com/georstat/react-native-image-cache/issues/22.
I understand that this is an aggressive approach, we will loosen the requirement of using a specific version of reanimated as this causes troubles like yours so I think it might not be necessary to add instructions on README, we’ll see.


Fix MSFT_xDnsServerAddress error when setting address - Fixes #237

This PR fixes issue #237.
The problem was caused by Get-ItemPropertyValue ignoring the -ErrorAction SilentlyContinue if the required property value does not exist. This causes an error to be thrown regardless of the ErrorAction setting. However, the Get-ItemProperty cmdlet does not ignore this.
I also corrected one missing [Parameter()] block in the MSFT_xDefaultGatewayAddress resource that had already been updated to HQRM - this was identified in the new PSSA rule validation (yay! :grin:).
I also updated the LICENSE and manifest with 2017 as the year.

This change is

Codecov Report

Merging #240 into dev will not change coverage.
The diff coverage is n/a.

@@         Coverage Diff         @@
##            dev   #240   +/-   ##
===================================
  Coverage    97%    97%
===================================
  Files        17     17
  Lines      1321   1321
===================================
  Hits       1284   1284
  Misses       37     37

Hi @Johlju - would you mind having a look over this one if you get a moment? :grin:

Just a minor style comment.

Reviewed 6 of 6 files at r1.
Review status: all files reviewed at latest revision, 1 unresolved discussion.

Tests/Unit/NetworkingDsc.Common.tests.ps1, line 542 at r1 (raw file):

should

'Should'  - upper 'S'? This and throughout

Comments from Reviewable

Hi @johlju - I've made the change, but still can't get into Reviewable to sign this off. Could you give this a quick look over if you get a moment? Thank you! I've raised the issue with Reviewable BTW: https://github.com/Reviewable/Reviewable/issues/494

Reviewed 1 of 1 files at r2.
Review status: all files reviewed at latest revision, all discussions resolved.

Comments from Reviewable

Hope they solve your problem with Reviewable fast 😄
All looks good. You can merge as soon as the tests passes. 😄

Thanks @johlju !


Docs: Docker and changing nodegroups

I'd like us to start leaving traces for these changes - right now it is only in our head why we changed the host type. We should explain in a comment why this specific instance is picked and/or in the PR description


Fix typo

Q
A

Bug fix?
no

New feature?
no

BC breaks?
no

Deprecations?
no

Related tickets
N/A

Documentation
N/A

License
MIT

What's in this PR?
Fixes a typo I noticed in the README file.
Why?
Makes it easier for somebody to figure out what the heading actually means, especially if English is not their first language (I assume).
Example Usage
N/A
Checklist
N/A
To Do
N/A

Awesome. Thank you!


Added ConfigurationContainer.AllowMultipleReferences

Addresses #583

:white_check_mark: Build ExtendedXmlSerializer <IP_ADDRESS>-fgxvclej completed (commit https://github.com/ExtendedXmlSerializer/home/commit/9485cae4a8 by @Mike-E-angelo)
Install it by running the following command in Package Manager Console:
Install-Package ExtendedXmlSerializer -Version <IP_ADDRESS>-fgxvclej -Source https://ci.appveyor.com/nuget/extendedxmlserializer-preview

Problems with the above command?  You may be running into this known issue here:
https://github.com/NuGet/Home/issues/7189


Fixed Swift 4.2 warnings and updated deployment target to 10.3.

Thank you for providing a 4.2 version!
Why did you raise the Deployment Target to 10.3? Is there a technical reason for that?

@cafedeichi I agree with you - but for us as a company is common to support all versions of a major version (e.g. 10.0, 10.1) and not only the last one and my experience with CocoaPods shows me, that this is very common in the pods, too.
So when there is no technical reason I would stay with 10.0 - the developers of the apps can make the decision, if they only want 10.3 for better stability and security.

@iSkelzor Thanks a lot for ur kind answer to my such novice question . Make sense and i was able to know how the pods should be. Now I think 10.0 is appropriate.

+1 for this. Would love to have it merged soon as we're using this project in our Banking app. If there's anything I can help with let me know 😄

@iSkelzor @cafedeichi  Any feedback for this? Would love to have it soon to upgrade my app 😄

Thank you for your contribution.
After careful consideration, I am closing this PR in favor of #399.


Fix release process

Fixed a couple of bugs:

application and service agent images not add to control_plane manifest.
"null" in creationTimestamp field service agent manifest cause by bug in kustomize

Also added a parameter to the workflow to enable prevention of  image creation which is useful for testing the workflow.
Tested the new manifests created with primazactl and all was good.

@sadlerap @filariow fixed the linter issues - sorry was not aware of that check.