Certificate creation is stuck with Order having no state and no challenges are created for a specific URL

Describe the bug:
Certificate creation is stuck for a specific host URL
Order has no state and no challenges are created.
No api rate limit exceeded for letsencrypt in cert-manager logs
Expected behaviour:
Certificate creation either succeeds for the previously mentioned URL or Fails with a status on the order.
Anything else we need to know?:
If we change to a new host URL the certificate is created successfully and site is secure.
Environment details:

Cloud-provider/provisioner: AWS(EKS)
Kubernetes version: v1.15.10-eks-bac369
cert-manager version: v0.14

DNS01: Route53
letsencrypt prod URL is used

ExternalDNS: v0.7.0
ingress-nginx v0.29.0
Install method: static manifests

/kind bug

cert-manager logs upon creation of the ingress rule for the aforementioned specific URL

I0325 11:27:47.506645       1 controller.go:138] cert-manager/controller/ingress-shim "msg"="syncing item" "key"="pp/hybris-ingress"
I0325 11:27:47.518624       1 controller.go:144] cert-manager/controller/ingress-shim "msg"="finished processing work item" "key"="pp/hybris-ingress"
I0325 11:27:47.518907       1 controller.go:138] cert-manager/controller/certificates "msg"="syncing item" "key"="pp/cert-manager-bug-tls"
I0325 11:27:47.519001       1 controller.go:138] cert-manager/controller/ingress-shim "msg"="syncing item" "key"="pp/hybris-ingress"
I0325 11:27:47.519079       1 sync.go:170] cert-manager/controller/ingress-shim "msg"="certificate already exists for ingress resource, ensuring it is up to date" "related_resource_kind"="Certifi
cate" "related_resource_name"="cert-manager-bug-tls" "related_resource_namespace"="pp" "resource_kind"="Ingress" "resource_name"="hybris-ingress" "resource_namespace"="pp"
I0325 11:27:47.519108       1 sync.go:183] cert-manager/controller/ingress-shim "msg"="certificate resource is already up to date for ingress" "related_resource_kind"="Certificate" "related_resou
rce_name"="cert-manager-bug-tls" "related_resource_namespace"="pp" "resource_kind"="Ingress" "resource_name"="hybris-ingress" "resource_namespace"="pp"
I0325 11:27:47.519151       1 controller.go:144] cert-manager/controller/ingress-shim "msg"="finished processing work item" "key"="pp/hybris-ingress"
I0325 11:27:47.892231       1 conditions.go:155] Setting lastTransitionTime for Certificate "cert-manager-bug-tls" condition "Ready" to 2020-03-25 11:27:47.89221986 +0000 UTC m=+76155.571811337
I0325 11:27:47.900712       1 controller.go:144] cert-manager/controller/certificates "msg"="finished processing work item" "key"="pp/cert-manager-bug-tls"
I0325 11:27:47.900749       1 controller.go:138] cert-manager/controller/certificates "msg"="syncing item" "key"="pp/cert-manager-bug-tls"
I0325 11:27:47.901039       1 sync.go:368] cert-manager/controller/certificates "msg"="no existing CertificateRequest resource exists, creating new request..." "related_resource_kind"="Secret" "r
elated_resource_name"="cert-manager-bug-tls" "related_resource_namespace"="pp" "resource_kind"="Certificate" "resource_name"="cert-manager-bug-tls" "resource_namespace"="pp"
I0325 11:27:47.901079       1 controller.go:138] cert-manager/controller/ingress-shim "msg"="syncing item" "key"="pp/hybris-ingress"
I0325 11:27:47.901169       1 sync.go:170] cert-manager/controller/ingress-shim "msg"="certificate already exists for ingress resource, ensuring it is up to date" "related_resource_kind"="Certifi
cate" "related_resource_name"="cert-manager-bug-tls" "related_resource_namespace"="pp" "resource_kind"="Ingress" "resource_name"="hybris-ingress" "resource_namespace"="pp"
I0325 11:27:47.901197       1 sync.go:183] cert-manager/controller/ingress-shim "msg"="certificate resource is already up to date for ingress" "related_resource_kind"="Certificate" "related_resou
rce_name"="cert-manager-bug-tls" "related_resource_namespace"="pp" "resource_kind"="Ingress" "resource_name"="hybris-ingress" "resource_namespace"="pp"
I0325 11:27:47.901216       1 controller.go:144] cert-manager/controller/ingress-shim "msg"="finished processing work item" "key"="pp/hybris-ingress"
I0325 11:27:47.913015       1 controller.go:138] cert-manager/controller/certificaterequests-issuer-selfsigned "msg"="syncing item" "key"="pp/cert-manager-bug-tls-1268926097"
I0325 11:27:47.913062       1 controller.go:144] cert-manager/controller/certificaterequests-issuer-selfsigned "msg"="finished processing work item" "key"="pp/cert-manager-bug-tls-1268926097"
I0325 11:27:47.913073       1 controller.go:138] cert-manager/controller/certificaterequests-issuer-vault "msg"="syncing item" "key"="pp/cert-manager-bug-tls-1268926097"
I0325 11:27:47.913103       1 controller.go:138] cert-manager/controller/certificaterequests-issuer-ca "msg"="syncing item" "key"="pp/cert-manager-bug-tls-1268926097"
I0325 11:27:47.913135       1 controller.go:144] cert-manager/controller/certificaterequests-issuer-vault "msg"="finished processing work item" "key"="pp/cert-manager-bug-tls-1268926097"
I0325 11:27:47.913146       1 controller.go:144] cert-manager/controller/certificaterequests-issuer-ca "msg"="finished processing work item" "key"="pp/cert-manager-bug-tls-1268926097"
I0325 11:27:47.913073       1 controller.go:138] cert-manager/controller/certificaterequests-issuer-acme "msg"="syncing item" "key"="pp/cert-manager-bug-tls-1268926097"
I0325 11:27:47.913111       1 controller.go:138] cert-manager/controller/certificaterequests-issuer-venafi "msg"="syncing item" "key"="pp/cert-manager-bug-tls-1268926097"
I0325 11:27:47.913255       1 controller.go:144] cert-manager/controller/certificaterequests-issuer-venafi "msg"="finished processing work item" "key"="pp/cert-manager-bug-tls-1268926097"
I0325 11:27:47.913651       1 sync.go:380] cert-manager/controller/certificates "msg"="created certificate request" "related_resource_kind"="Secret" "related_resource_name"="cert-manager-bug-tls"
 "related_resource_namespace"="pp" "resource_kind"="Certificate" "resource_name"="cert-manager-bug-tls" "resource_namespace"="pp" "request_name"="cert-manager-bug-tls-1268926097"
I0325 11:27:47.913845       1 conditions.go:155] Setting lastTransitionTime for Certificate "cert-manager-bug-tls" condition "Ready" to 2020-03-25 11:27:47.913834394 +0000 UTC m=+76155.593425877
E0325 11:27:47.921984       1 controller.go:140] cert-manager/controller/certificates "msg"="re-queuing item  due to error processing" "error"="Operation cannot be fulfilled on certificates.cert-
manager.io \"cert-manager-bug-tls\": the object has been modified; please apply your changes to the latest version and try again" "key"="pp/cert-manager-bug-tls"
I0325 11:27:47.922018       1 controller.go:138] cert-manager/controller/certificates "msg"="syncing item" "key"="pp/cert-manager-bug-tls"
I0325 11:27:47.922241       1 sync.go:386] cert-manager/controller/certificates "msg"="validating existing CSR data" "related_resource_kind"="CertificateRequest" "related_resource_name"="cert-man
ager-bug-tls-1268926097" "related_resource_namespace"="pp" "resource_kind"="Certificate" "resource_name"="cert-manager-bug-tls" "resource_namespace"="pp"
I0325 11:27:47.922338       1 sync.go:511] cert-manager/controller/certificates "msg"="CertificateRequest is not in a final state, waiting until CertificateRequest is complete" "related_resource_
kind"="CertificateRequest" "related_resource_name"="cert-manager-bug-tls-1268926097" "related_resource_namespace"="pp" "resource_kind"="Certificate" "resource_name"="cert-manager-bug-tls" "resour
ce_namespace"="pp" "state"=""
I0325 11:27:47.923574       1 conditions.go:200] Setting lastTransitionTime for CertificateRequest "cert-manager-bug-tls-1268926097" condition "Ready" to 2020-03-25 11:27:47.923570016 +0000 UTC m
=+76155.603161475
I0325 11:27:47.932128       1 controller.go:138] cert-manager/controller/ingress-shim "msg"="syncing item" "key"="pp/hybris-ingress"
I0325 11:27:47.932203       1 sync.go:170] cert-manager/controller/ingress-shim "msg"="certificate already exists for ingress resource, ensuring it is up to date" "related_resource_kind"="Certifi
cate" "related_resource_name"="cert-manager-bug-tls" "related_resource_namespace"="pp" "resource_kind"="Ingress" "resource_name"="hybris-ingress" "resource_namespace"="pp"
I0325 11:27:47.932223       1 sync.go:183] cert-manager/controller/ingress-shim "msg"="certificate resource is already up to date for ingress" "related_resource_kind"="Certificate" "related_resou
rce_name"="cert-manager-bug-tls" "related_resource_namespace"="pp" "resource_kind"="Ingress" "resource_name"="hybris-ingress" "resource_namespace"="pp"
I0325 11:27:47.932243       1 controller.go:144] cert-manager/controller/ingress-shim "msg"="finished processing work item" "key"="pp/hybris-ingress"
I0325 11:27:47.932887       1 controller.go:144] cert-manager/controller/certificates "msg"="finished processing work item" "key"="pp/cert-manager-bug-tls"
I0325 11:27:47.932918       1 controller.go:138] cert-manager/controller/certificates "msg"="syncing item" "key"="pp/cert-manager-bug-tls"
I0325 11:27:47.933139       1 sync.go:386] cert-manager/controller/certificates "msg"="validating existing CSR data" "related_resource_kind"="CertificateRequest" "related_resource_name"="cert-man
ager-bug-tls-1268926097" "related_resource_namespace"="pp" "resource_kind"="Certificate" "resource_name"="cert-manager-bug-tls" "resource_namespace"="pp"
I0325 11:27:47.933227       1 sync.go:511] cert-manager/controller/certificates "msg"="CertificateRequest is not in a final state, waiting until CertificateRequest is complete" "related_resource_
kind"="CertificateRequest" "related_resource_name"="cert-manager-bug-tls-1268926097" "related_resource_namespace"="pp" "resource_kind"="Certificate" "resource_name"="cert-manager-bug-tls" "resour
ce_namespace"="pp" "state"=""
I0325 11:27:47.933401       1 controller.go:144] cert-manager/controller/certificates "msg"="finished processing work item" "key"="pp/cert-manager-bug-tls"
I0325 11:27:47.933605       1 controller.go:144] cert-manager/controller/certificaterequests-issuer-acme "msg"="finished processing work item" "key"="pp/cert-manager-bug-tls-1268926097"
I0325 11:27:47.933633       1 controller.go:138] cert-manager/controller/certificaterequests-issuer-acme "msg"="syncing item" "key"="pp/cert-manager-bug-tls-1268926097"
I0325 11:27:47.933899       1 conditions.go:200] Setting lastTransitionTime for CertificateRequest "cert-manager-bug-tls-1268926097" condition "Ready" to 2020-03-25 11:27:47.933895024 +0000 UTC m
=+76155.613486485
I0325 11:27:47.933933       1 acme.go:201] cert-manager/controller/certificaterequests-issuer-acme/sign "msg"="acme Order resource is not in a ready state, waiting..." "related_resource_kind"="Or
der" "related_resource_name"="cert-manager-bug-tls-1268926097-245966590" "related_resource_namespace"="pp" "resource_kind"="CertificateRequest" "resource_name"="cert-manager-bug-tls-1268926097" "
resource_namespace"="pp"
I0325 11:27:47.934463       1 controller.go:138] cert-manager/controller/certificaterequests-issuer-selfsigned "msg"="syncing item" "key"="pp/cert-manager-bug-tls-1268926097"
I0325 11:27:47.934535       1 controller.go:138] cert-manager/controller/certificaterequests-issuer-vault "msg"="syncing item" "key"="pp/cert-manager-bug-tls-1268926097"
I0325 11:27:47.934565       1 controller.go:138] cert-manager/controller/certificaterequests-issuer-venafi "msg"="syncing item" "key"="pp/cert-manager-bug-tls-1268926097"
I0325 11:27:47.934609       1 controller.go:138] cert-manager/controller/certificaterequests-issuer-ca "msg"="syncing item" "key"="pp/cert-manager-bug-tls-1268926097"
I0325 11:27:47.934741       1 controller.go:138] cert-manager/controller/certificates "msg"="syncing item" "key"="pp/cert-manager-bug-tls"
I0325 11:27:47.934821       1 controller.go:144] cert-manager/controller/certificaterequests-issuer-ca "msg"="finished processing work item" "key"="pp/cert-manager-bug-tls-1268926097"
I0325 11:27:47.934651       1 controller.go:144] cert-manager/controller/certificaterequests-issuer-selfsigned "msg"="finished processing work item" "key"="pp/cert-manager-bug-tls-1268926097"
I0325 11:27:47.934666       1 controller.go:144] cert-manager/controller/certificaterequests-issuer-venafi "msg"="finished processing work item" "key"="pp/cert-manager-bug-tls-1268926097"
I0325 11:27:47.934741       1 controller.go:144] cert-manager/controller/certificaterequests-issuer-vault "msg"="finished processing work item" "key"="pp/cert-manager-bug-tls-1268926097"
I0325 11:27:47.935016       1 sync.go:386] cert-manager/controller/certificates "msg"="validating existing CSR data" "related_resource_kind"="CertificateRequest" "related_resource_name"="cert-man
ager-bug-tls-1268926097" "related_resource_namespace"="pp" "resource_kind"="Certificate" "resource_name"="cert-manager-bug-tls" "resource_namespace"="pp"
I0325 11:27:47.935175       1 sync.go:511] cert-manager/controller/certificates "msg"="CertificateRequest is not in a final state, waiting until CertificateRequest is complete" "related_resource_
kind"="CertificateRequest" "related_resource_name"="cert-manager-bug-tls-1268926097" "related_resource_namespace"="pp" "resource_kind"="Certificate" "resource_name"="cert-manager-bug-tls" "resour
ce_namespace"="pp" "state"="Pending"
I0325 11:27:47.935308       1 controller.go:144] cert-manager/controller/certificates "msg"="finished processing work item" "key"="pp/cert-manager-bug-tls"
E0325 11:27:47.943164       1 controller.go:140] cert-manager/controller/certificaterequests-issuer-acme "msg"="re-queuing item  due to error processing" "error"="Operation cannot be fulfilled on
 certificaterequests.cert-manager.io \"cert-manager-bug-tls-1268926097\": the object has been modified; please apply your changes to the latest version and try again" "key"="pp/cert-manager-bug-t
ls-1268926097"
I0325 11:27:47.943196       1 controller.go:138] cert-manager/controller/certificaterequests-issuer-acme "msg"="syncing item" "key"="pp/cert-manager-bug-tls-1268926097"
I0325 11:27:47.943514       1 acme.go:201] cert-manager/controller/certificaterequests-issuer-acme/sign "msg"="acme Order resource is not in a ready state, waiting..." "related_resource_kind"="Or
der" "related_resource_name"="cert-manager-bug-tls-1268926097-245966590" "related_resource_namespace"="pp" "resource_kind"="CertificateRequest" "resource_name"="cert-manager-bug-tls-1268926097" "
resource_namespace"="pp"
I0325 11:27:47.955958       1 controller.go:138] cert-manager/controller/certificaterequests-issuer-selfsigned "msg"="syncing item" "key"="pp/cert-manager-bug-tls-1268926097"
I0325 11:27:47.956105       1 controller.go:144] cert-manager/controller/certificaterequests-issuer-selfsigned "msg"="finished processing work item" "key"="pp/cert-manager-bug-tls-1268926097"
I0325 11:27:47.956130       1 controller.go:138] cert-manager/controller/certificaterequests-issuer-ca "msg"="syncing item" "key"="pp/cert-manager-bug-tls-1268926097"
I0325 11:27:47.956185       1 controller.go:138] cert-manager/controller/certificaterequests-issuer-vault "msg"="syncing item" "key"="pp/cert-manager-bug-tls-1268926097"
I0325 11:27:47.956329       1 controller.go:144] cert-manager/controller/certificaterequests-issuer-vault "msg"="finished processing work item" "key"="pp/cert-manager-bug-tls-1268926097"
I0325 11:27:47.956381       1 controller.go:144] cert-manager/controller/certificaterequests-issuer-ca "msg"="finished processing work item" "key"="pp/cert-manager-bug-tls-1268926097"
I0325 11:27:47.956384       1 controller.go:138] cert-manager/controller/certificates "msg"="syncing item" "key"="pp/cert-manager-bug-tls"
I0325 11:27:47.956717       1 controller.go:138] cert-manager/controller/certificaterequests-issuer-venafi "msg"="syncing item" "key"="pp/cert-manager-bug-tls-1268926097"
I0325 11:27:47.956918       1 controller.go:144] cert-manager/controller/certificaterequests-issuer-venafi "msg"="finished processing work item" "key"="pp/cert-manager-bug-tls-1268926097"
I0325 11:27:47.956933       1 sync.go:386] cert-manager/controller/certificates "msg"="validating existing CSR data" "related_resource_kind"="CertificateRequest" "related_resource_name"="cert-man
ager-bug-tls-1268926097" "related_resource_namespace"="pp" "resource_kind"="Certificate" "resource_name"="cert-manager-bug-tls" "resource_namespace"="pp"
I0325 11:27:47.958240       1 controller.go:144] cert-manager/controller/certificaterequests-issuer-acme "msg"="finished processing work item" "key"="pp/cert-manager-bug-tls-1268926097"
I0325 11:27:47.958274       1 controller.go:138] cert-manager/controller/certificaterequests-issuer-acme "msg"="syncing item" "key"="pp/cert-manager-bug-tls-1268926097"
I0325 11:27:47.958941       1 sync.go:511] cert-manager/controller/certificates "msg"="CertificateRequest is not in a final state, waiting until CertificateRequest is complete" "related_resource_
kind"="CertificateRequest" "related_resource_name"="cert-manager-bug-tls-1268926097" "related_resource_namespace"="pp" "resource_kind"="Certificate" "resource_name"="cert-manager-bug-tls" "resour
ce_namespace"="pp" "state"="Pending"
I0325 11:27:47.959273       1 controller.go:144] cert-manager/controller/certificates "msg"="finished processing work item" "key"="pp/cert-manager-bug-tls"
I0325 11:27:47.960713       1 acme.go:201] cert-manager/controller/certificaterequests-issuer-acme/sign "msg"="acme Order resource is not in a ready state, waiting..." "related_resource_kind"="Or
der" "related_resource_name"="cert-manager-bug-tls-1268926097-245966590" "related_resource_namespace"="pp" "resource_kind"="CertificateRequest" "resource_name"="cert-manager-bug-tls-1268926097" "
resource_namespace"="pp"
I0325 11:27:47.960780       1 controller.go:144] cert-manager/controller/certificaterequests-issuer-acme "msg"="finished processing work item" "key"="pp/cert-manager-bug-tls-1268926097"
I0325 11:27:52.922082       1 controller.go:138] cert-manager/controller/certificates "msg"="syncing item" "key"="pp/cert-manager-bug-tls"
I0325 11:27:52.922345       1 sync.go:386] cert-manager/controller/certificates "msg"="validating existing CSR data" "related_resource_kind"="CertificateRequest" "related_resource_name"="cert-man
ager-bug-tls-1268926097" "related_resource_namespace"="pp" "resource_kind"="Certificate" "resource_name"="cert-manager-bug-tls" "resource_namespace"="pp"
I0325 11:27:52.922457       1 sync.go:511] cert-manager/controller/certificates "msg"="CertificateRequest is not in a final state, waiting until CertificateRequest is complete" "related_resource_
kind"="CertificateRequest" "related_resource_name"="cert-manager-bug-tls-1268926097" "related_resource_namespace"="pp" "resource_kind"="Certificate" "resource_name"="cert-manager-bug-tls" "resour
ce_namespace"="pp" "state"="Pending"
I0325 11:27:52.922737       1 controller.go:144] cert-manager/controller/certificates "msg"="finished processing work item" "key"="pp/cert-manager-bug-tls"
I0325 11:27:52.943345       1 controller.go:138] cert-manager/controller/certificaterequests-issuer-acme "msg"="syncing item" "key"="pp/cert-manager-bug-tls-1268926097"
I0325 11:27:52.943768       1 acme.go:201] cert-manager/controller/certificaterequests-issuer-acme/sign "msg"="acme Order resource is not in a ready state, waiting..." "related_resource_kind"="Or
der" "related_resource_name"="cert-manager-bug-tls-1268926097-245966590" "related_resource_namespace"="pp" "resource_kind"="CertificateRequest" "resource_name"="cert-manager-bug-tls-1268926097" "
resource_namespace"="pp"
I0325 11:27:52.943828       1 controller.go:144] cert-manager/controller/certificaterequests-issuer-acme "msg"="finished processing work item" "key"="pp/cert-manager-bug-tls-1268926097"
I0325 11:28:11.512141       1 controller.go:138] cert-manager/controller/webhook-bootstrap "msg"="syncing item" "key"="cert-manager/cert-manager-webhook-tls"
I0325 11:28:11.512170       1 controller.go:138] cert-manager/controller/webhook-bootstrap "msg"="syncing item" "key"="cert-manager/cert-manager-webhook-ca"
I0325 11:28:11.512537       1 controller.go:194] cert-manager/controller/webhook-bootstrap/webhook-bootstrap/ca-secret "msg"="ca certificate already up to date" "resource_kind"="Secret" "resource
_name"="cert-manager-webhook-ca" "resource_namespace"="cert-manager"
I0325 11:28:11.512558       1 controller.go:144] cert-manager/controller/webhook-bootstrap "msg"="finished processing work item" "key"="cert-manager/cert-manager-webhook-ca"
I0325 11:28:11.512791       1 controller.go:246] cert-manager/controller/webhook-bootstrap/webhook-bootstrap/ca-secret "msg"="serving certificate already up to date" "resource_kind"="Secret" "res
ource_name"="cert-manager-webhook-tls" "resource_namespace"="cert-manager"
I0325 11:28:11.512811       1 controller.go:144] cert-manager/controller/webhook-bootstrap "msg"="finished processing work item" "key"="cert-manager/cert-manager-webhook-tls"

Facing the same issues, most certificates are getting created but a few just don't create a challenge at all.

Same thing is happening to me

Seeing the same thing in our cluster on v0.14.0. Most certs work, some don't.
Environment details:
Cloud-provider/provisioner: AWS (Kops)
Kubernetes version: v1.15.7
cert-manager version: v0.14.0
http01 with Traefik v2.1.3
letsencrypt prod URL is used
Install method: static manifests

@richstokes We are seeing the same thing. Did you ever get a resolution?

Afraid not.

@coreycollins we changed the url because it was a development environment, so its just a workaround and probably not viable for production.

We are just using for review environments and not for production so changing the URL worked for us as well. I should note that I was creating and tearing down this certificate about 10 times for testing, so maybe it is some sort of garbage collection problem?

I got the feeling it is because the generated CSR for the CertificateRequest is always the same, but didnt found a way to verify it.

@coreycollins Feels like it could be a GC problem to me too - as I first noticed this happened when I deleted a namespace containing a certificate, and then recreated it.
It feels like cert-manger doesn't "notice" the cert was delete and thinks its still hanging around somewhere. I've dug around as best I cant but cant find any trace of the original cert however.

Ran into this same bug, for the same reason @richstokes described - I deleted a namespace containing a cert, then created it in another namespace.

@ericflo I spent some time digging around in etcd on my cluster and couldn't find anything leftover after removing the request/secret/etc.  Clearly something is left hanging somewhere though.  I'm hitting the same issue.

I tried deleting all cert-manager resources (which were previously installed using the helm chart) and re-installed it. Didn't solve the problem. I tried both 13.1 and 14.2.

Could you confirm that you only see this when using an ingress-shim?
If you get this do you see anything listed on kubectl get certificates?

Could this also be related to the issue described in https://github.com/jetstack/cert-manager/issues/2494 ?

@meyskens - when i was having the issue the certificate was not getting issued (output from kubectl get certificates showed false).  The behavior that i saw was that the challenge was not getting created.  Unfortunately i don't have the previous logs, but they mirrored the already reported behavior from @AlaaMansourTW.
Interestingly enough - after ~72 hours or so (left for the weekend) the certificate was issued for the FQDN that was not working.

@munnerz @meyskens I believe I have figured this out, now that I have seen it happen. The common thread here is using the Let's Encrypt production issuer and deleting namespaces, which means deleting secrets/TLS certificates as well.
The fundamental issue is that this causes us to exceed Let's Encrypt's Duplicate Certificate Limit of 5 per week. Every time the namespace or secret is deleted, the certificate is renewed. (Side question I've been trying to figure out for a long time: how do I get cert-manger to "adopt" an existing TLS secret containing a Let's Encrypt certificate? Everything I have tried to date has failed, with cert-manager requesting a new certificate even if the existing one is valid.)
Despite #1098, it appears that cert-manager does not create a special RetryBackoff function or set a Deadline in the context.Context object.
https://github.com/jetstack/cert-manager/blob/1f3b883cfd1a7a4fb5f00fcdb9e608fc0158d3bc/pkg/controller/acmeorders/sync.go#L199
This leaves the default behavior of AuthorizeOrder (via post), which is to keep retrying the request until either success or failure, with Too Many Requests (a.k.a. rate limiting) explicitly considered retryable.
So cert-manager just gets the new order stuck in this retry loop without any visibility to the cluster. This is why @jkoyle's certificate just showed up after 72 hours. Once the 7 day rate limit window slid open, that retry loop was there to get the certificate right away.
The behavior I would like to see is

Log the rate limit error
Create an event regarding the rate limit
Back off retries for new orders hitting rate limits to something like once an hour

@munnerz I hope I have given you enough evidence that you can remove the  priority/awaiting-more-evidence label. If not, please let me know what more you need.

Also got this with cert-manager v1.0.0-alpha.0.
The main problem is the order stuck without any state.
And there are no errors in logs. And even orders for other 'clean' domains also stuck. Cert-manager completely dies.
But time after time we can found something in logs like
"error"="429 urn:ietf:params:acme:error:rateLimited: Error creating new order :: too many certificates already issued for: _DOMAIN_._NAME_: see https://letsencrypt.org/docs/rate-limits/"
And "error"="ACME client for issuer not initialised/available".
But not for every certificate, just for ~1% of requests.
As workaround switched to https://api.buypass.com/acme/directory.

I have dug into this, the Go ACME library sees 429 too many certificates already issued  as a retryable error, which in some way is true... However this will cause the controller to hang on waiting for the ACME functions to return.
While fully agreeing with @Nuru the library doesn't expose these errors to us yet :disappointed:
I made a PR to for now limit this in time: https://github.com/jetstack/cert-manager/pull/3212
But it's not a full fix for the issue.

I had similar issue.
TL;DR- I restarted deployment
kubectl rollout restart deployment -n cert-manager cert-manager

Here is what I was doing:

Deployed Cert-Manager (helm.sh/chart: cert-manager-v0.16.0)
Created ClusterIssuer for LetEncrypt
Created ClusterIssuer for SelfSigned certs
Deployed contour ingress controller
Updated Sample application that used Let Encrypt ca certs for TLS traffic
Deployed Dex for authentication with ingress resource.

Ingress resource used Let Encrypt issuer for cert creation

Here is what I experienced

Sample app (Step 6) ran perfectly. Certificate was issued and app was accessible over HTTPS.
On step 7, Certificate, CertificateRequest and Order object were created
Order object had <none> in events.
No Challenge objects was created
Logs on cert-manager pod were moving moving but no clear indication of any error.

I did step 1 to 7 twice to ensure that I was not missing anything really. But same result. Finally, I just restarted the cert-manager (after reading this issue), and  it picked up the order,  created challenge and cert was issued.

We are running into this issue with v0.16 and v1.0.0, where no new ACME challenges are being created. Reverting cert-manager-controller to 0.15.2 fixes the issue.

I have similar issue with 0.16.2, restarting (i.e. rolling out) cert-manager does nothing. I have upgraded to 1.0.4 and order finally got their "fine" Error status. Found nothing in previous logs but after upgrade, it shows me rate limiting issues.

I just ran into this issue.  I upgraded from v0.16.2 to v1.0.0 and the order updated to acme:error:rateLimited: Error creating new order :: too many certificates already issued for exact set of domains.  Thx @loganmzz for pointing this out.

I just ran into this issue.  I upgraded from v0.16.2 to v1.0.0 and the order updated to acme:error:rateLimited: Error creating new order :: too many certificates already issued for exact set of domains.  Thx @loganmzz for pointing this out.

Today our certificates expired with pending orders which blocked the certificate renewal. We had to recreate the certificates to fix the problem.

This is indeed an annoying issue that gets rate limited by letsencrypt without any intuitive logs be found from cert-manager. Considering the limit from letsencrypt is by Certificates per Registered Domain, so a simple hack workaround is to change from
your-cert

domain A
to

your-cert

domain A
domain B

Of course, this is a non-standard way to use permanently but hope this helps you guys to have a quick fix on your business-critical service if it is already on fire.

so we shouldn't use kubectl delete namespace to cleanup a release with a cert manager, correct? if i understand correctly, if we did this, we could only recreate the release 5 times a week due to letsencrypt limits, right? so all releases including cert manager should have it in a separate namespace, or i can just use a different tag to nuke all the release resources. any suggestions for cleaning up? namespace deletion seemed like the simplest way until now

I had similar issue. TL;DR- I restarted deployment
kubectl rollout restart deployment -n cert-manager cert-manager

Here is what I was doing:

Deployed Cert-Manager (helm.sh/chart: cert-manager-v0.16.0)

Created ClusterIssuer for LetEncrypt

Created ClusterIssuer for SelfSigned certs

Deployed contour ingress controller

Updated Sample application that used Let Encrypt ca certs for TLS traffic

Deployed Dex for authentication with ingress resource.

Ingress resource used Let Encrypt issuer for cert creation

Here is what I experienced

Sample app (Step 6) ran perfectly. Certificate was issued and app was accessible over HTTPS.
On step 7, Certificate, CertificateRequest and Order object were created
Order object had <none> in events.
No Challenge objects was created
Logs on cert-manager pod were moving moving but no clear indication of any error.

I did step 1 to 7 twice to ensure that I was not missing anything really. But same result. Finally, I just restarted the cert-manager (after reading this issue), and it picked up the order, created challenge and cert was issued.

thanks man ! that solved it for me


Camel 16609 rest dsl - Add more security models for JWT bearer tokens etc

Added security scheme types mutualTLS (no parameters) and openIdConnect with required parameter "openIdConnectUrl".
Security scheme type oauth2:

former flow "application" is now "clientCredentials", and "accessCode" is now "authorizationCode".
We accept old and new names for both flows and set the flow appropriately based on the version at schema generation.
added parameter "refreshUrl", applicable to all flows.
Security scheme type apiKey: added "in" option "cookie".
Security scheme type http: added scheme "bearer" with optional parameter "bearerFormat".

This PR has other commits that is not relevant for this. Can you clean this up, so its only commits about this feature in this PR

I am merging this manually, as I can cherry-pick the commit that has this feature.

Merged manually, many thanks for the quick work on this


Portscan

Enhanced the project README and wrote a simple port scanner using Bash!

Please rename the repo form QURYIES to QUERIES so it can be easier to search.

please add the hacktoberfest-accepted label, thanks :)

[ :+1: ]  [:100: ]


Fixed lint and css

I fixed the lint and css according to the comment reviews.

It's equivalent to PR #4, closing this one.

Rebased via b0cac2d2afea


Fix control casing

This PR fixes this issue.
For example, if the competitor that is passed in is "Apple" and we are validating the text Fun fact about apple is that apple is both a fruit and company. apples come in many different colors and flavors. What if apple is a tech company that makes phones, computers, and tablets? apple is headquartered in Cupertino, California, it properly identifies lowercase apple as a competitor.
Curl command to test with fastapi setup running on localhost:
curl -X POST "http://localhost:8000/validate" \
-H "Content-Type: application/json" \
-d '{
    "inputs": [
        {
            "name": "text",
            "shape": [1],
            "data": [
                "Fun fact about apple is that apple is both a fruit and company. apples come in many different colors and flavors. What if apple is a tech company that makes phones, computers, and tablets? apple is headquartered in Cupertino, California."
            ],
            "datatype": "BYTES"
        },
        {
            "name": "competitors",
            "shape": [1],
            "data": ["Apple"],
            "datatype": "BYTES"
        }
    ]
}'

gives output:
{"modelname":"en_core_web_trf","modelversion":"1","outputs":[{"name":"result0","shape":[1],"data":[["apple","apple","apple"]],"datatype":"BYTES"}]}

We should add the same fixes for local inference to the validator's main.py.

@aaravnavani that's only the initial filter.  It also needs to be handled here and potentially in filtering methods.
As a side note, the fact that it's listing competitors as an Array<Array<String>> seems off.

@CalebCourier from the tests that I ran, it seems to detect apple as a competitor with local inference. This script for example:
# Import Guard and Validator
from guardrails import Guard
from guardrails.hub import CompetitorCheck

# Setup Guard
guard = Guard().use(
    CompetitorCheck, ["Apple", "Samsung"], "exception", use_local=True,
)
response = guard.validate("apple just released a new iPhone.")  # Validator fails

print(response)

prints guardrails.errors.ValidationError: Validation failed for field with errors: Found the following competitors: [['Apple']]. Please avoid naming those competitors next time It seems to be handled in this line.

I'm not seeing that behaviour locally. If I try to run that exact code snippet this is what I get:
ValidationOutcome(
    call_id='14844740304',
    raw_llm_output='apple just released a new iPhone.',
    validated_output='apple just released a new iPhone.',
    reask=None,
    validation_passed=True,
    error=None
)


Minor fixes after the changes from previous PRs

/sig multicluster
Divided into three commits, each descriptively named. This is a clean-up PR.
/cc @madhusudancs @pmorie @font

/lgtm


Update MACSima reader when stitching is supported

Talking with @m-albert at the ome-ngff hackathon, he has support for stitching using SpatialImage. We agreed to work together on adding the API for this in SpatialData. Once this work has been completed the MACSima reader as added with #224 should be revisited. This would also allow pipelines such as MCMICRO to use SpatialData throughout the pipeline. cc @kbestak

Here's some example code for obtaining a stitched SpatialImage using multiview-stitcher.
Just leaving a message here that I'm afk for the next two weeks and looking forward to discuss and work on a stitching API together after that @melonora.


Basic DB functions

@orelgueta, as we discussed last week, I implemented the basic functions in db_handler, still using the system based on yml files. Please, have a look and merge it if everything is fine.
Use this branch to test and implement the DB reading functionalities, please.

Thanks! This is very useful.
I went over it quickly, without going through the details, and it looks OK. Would you like me to do a thorough review so we can merge already with the Yaml DB, or do you want me to implement MongoDB stuff first?

Ok, thanks. I prefer to merge this first version now.

No problem, I will try to go over it today, latest tomorrow. (I really want to fix an issue with MongoDB which is driving me crazy first...)

Ok, no rush.
One question: is it too much trouble to change MST-optics to MST-Structure? (In order to be consistent with the SST's names)

It's a bit of trouble, yes. Not impossible at all, but would take a bit of time/coding. If it isn't urgent, I suggest we open an issue, assign it to me and I will do it when I get a chance. Just remember that sim_telarray uses MST-optics instead of MST-Structure, so for now we will have to live with both options somewhere in the code anyway.

Ah ok, thanks. It's not worth the trouble then. Forget it =)

Please, see my replies.
I already commited the fixes that I mentioned.

Thanks! I resolved everything and will let you merge whenever you want (you mentioned in your replies you want to fix something, not sure if before or after the merge).

Ok.
I created an issue for the one thing that I didn't fix yet.


Pages: Sorting and Pagination

Rules

Sort by title, path, status
Paginate by page, 20 records by page
Use query params to preserve state as ?query=FOO&page=INT&sort=NAME
Searching should reset pagination to page 1 and preserve sort query param and current state
Paginating should preserve search query and sort params and their current state
Display a navigation bar like this one below:

Related code
https://github.com/BeaconCMS/beacon_live_admin/blob/f774eaae7f31ce88b81db1d6c61788bef7d29acf/lib/beacon/live_admin/content.ex#L96
https://github.com/BeaconCMS/beacon/blob/cbe3bf7445cc559c96310593105e710366ed2cea/lib/beacon/content.ex#L757

@ChristianTovar thank you so much, amazing job


when contracts-console = true, nodoes prints too many "misaligned reference" messages

On EOS Mainnet, 5 million "misaligned reference"  messages per hour are sent to the log. This is really not helpful.
grep "misaligned reference" /var/log/syslog | cut -d\:  -f1 | uniq -c
5656679 Dec 18 00
6015364 Dec 18 01
6043497 Dec 18 02
5445104 Dec 18 03

(v1.8.7)

There is no logging.json

Maybe this should be a flag in the action trace; but eos-vm doesn't currently track this at all.

Address in 2.1, should no longer be an issue.


Recommended wording for check boxes converted to toggle switches

What wording changes are recommended for situations where UI elements are converted from check boxes to toggle switches? For example, What do you recommend the wording for "Select the ABC check box." or "Clear the ABC check box." be changed to?

Document Details
⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

ID: 83ad46ad-342d-da22-47a6-504ce7a06a95
Version Independent ID: 3f8c7233-e250-e7f7-faff-c90b91ff03c7
Content: Describing interactions with UI - Microsoft Style Guide
Content Source: styleguide/procedures-instructions/describing-interactions-with-ui.md
Product: non-product-specific
GitHub Login: @pallep
Microsoft Alias: pallep

Hi,
Good question. The toggle topic says to "use switch, turn on, or turn off with the name of the toggle key or command to describe what the customer must do."
We've also found that including the word "toggle" can be helpful for users who are blind or have low vision. So, for example, we would be more likely to say, "To keep all applied filters, turn on the Pass all filters toggle" rather than "To keep all applied filters, turn on Pass all filters."
You raise a good point--that guidance should also be in the Describing interactions with UI topic. We'll work on adding this.


Endpoints with pagination don’t show counter for all items

Endpoints with pagination don’t show counter for all items. With this info, we don’t know how many pages there are and we cannot paginate it. We need endpoints that return something like { counter: number, items: Array }

We have the following use cases, from this mocked transactions table where can show up to 10 items per page

You can see that the paginator component below has some pages being represented by these dots.
We need the counter which contains number of all items in the transactions or blocks to navigate, and needed to automatize this action, for example:
Total transactions: 50
Limit: 10
In this case we will have a maximum offset of 5, because there are 50 transactions
offset = current page * limit
we will use counter to stop going through offset 6, 7, 8... where there is no records.
I think there are no changes in current offset and limit, only by adding counter will solve the issue


Missing 'no-label-float' property like in vaadin-combo-box

Starting to use the vaadin-date-picker today i recognized that it is missing the 'no-label-float' property for hiding the float label placeholder.
As your vaadin-combo-box has the 'no-label-float' property, it would be just stringent if all your input controls would feature it.

Thanks for the request!
We've deliberately tried not to couple ourselves with the <paper-input> API in case we move away from, but we'll definitely consider this.
Meanwhile as a workaround, you can use <vaadin-combo-box-light> to apply a <paper-input> which you can fully control: https://cdn.vaadin.com/vaadin-components/master/vaadin-combo-box/demo/advanced.html

I don't get your explanation Saulis. Could you detail a little bit more the proceedure?
this said, I agree we definitely need a 'no-label-float'

Hi @Skemeth!
We're currently working on making our own input element, namely <vaadin-input> – the idea behind having an input with similar features that <paper-input> has, but with more flexibility on the theming side.
As no-label-float and other floating label related properties in <paper-input> are only related to Material Design, <vaadin-input> won't have those properties, but instead, we'll try to implement a way which allows you to have a similar floating label with a themed <vaadin-input> using CSS.
So, in the likely event of replacing the default input field in <vaadin-combo-box> with <vaadin-input> all the <paper-input> related properties will/would become obsolete.
That said, however, will be a major upgrade which probably includes API changes in any case, so I'm not saying it would be totally out of the question to add no-label-float to 1.x versions of <vaadin-combo-box>.

I think this is a wontfix for version 1.x. The workaround of using vaadin-date-picker-light is hopefully enough.
Also, you can achieve the same effect by using the placeholder instead of the label attribute.
Same applies to v2.0.
If you ever want to do always-float-label, that’s going to be more difficult to pull off without resorting to vaadin-date-picker-light. I can’t think of other workarounds or proper solutions right now.


Ports changes from #20258 to v4

Brings in the change to our Gruntfile from #20258 to fix #19063 in v4.

 Need to dig in again before reopening this.


Updates Power Automate commands to use new API endpoint. Closes #5715

Closes #5715
For the other clouds we have a separate issue to check out what this means for the API.

ready to merge 🚀

merged manually. 👏


Spell Mind Blast

Problem with spell Mind Blast, if 2 chars have same INT, iDiff=0 and will use on spelleffect 0, and not make dmg.
CCharSpell.cpp

  	case SPELL_Mind_Blast:
  		if (pObj->IsChar())
  		{
  			CChar * pChar = dynamic_cast <CChar*> (pObj);
  			ASSERT(pChar);
  			int iDiff = (Stat_GetAdjusted(STAT_INT) - pChar->Stat_GetAdjusted(STAT_INT)) / 2;

  			if (iDiff < 0)
  			{
  				pChar = this;	// spell revereses !
  				iDiff = -iDiff;
  			}
  			int iMax = pChar->Stat_GetMaxAdjusted(STAT_STR) / 2;
  			pChar->OnSpellEffect(spell, this, minimum(iDiff, iMax), nullptr);
  		}
  		break;

CCharSpell.cpp:

if ( iSkillLevel <= 0 )		// spell died or fizzled
return false;

Honestly I think about that much, but I haven't sure if it's bug. Because this skill works like;
if attacker int bigger than attacked player:
damage attacked player half of the difference
if attacker in lower than attacked player:
damage attacker with half of the difference
So seems like if there is no difference noone can manage to blask other's mind. If we return it as fizzle it can let player think the spell doesn't working when ints are equal. It's really strange I agree, as the default way of the spell is very different on OSI. But I can't change the spell at all without asking developers about it, so I just left that note here.

Perhaps it is not considered a bug. But if you want to do it other than OSI, there is no option to modify that diff either.

I like Renaissance way to get Highest Skill and lowest skill of the attacker and divide it to 2. That cause huge amount of damage but when int&dex&str is equal to 100 it causes bug again, so it's not for a global use.  So the best way to use OSI style or improve sphere custom code. Maybe the difference can get rand from diff-5 to diff+5 so damage can be more random and there only %9 chance to get "0" damage when difference equals zero.

So, through UO eras, the way how this spell works has changed? Right now, does it work in a totally custom way or does it match a specific UO era?

Long time happened, but I remember that the way in the sphere is totally custom (or maybe get somewhere else), I checked Renaissance and Uo.com mind blass spells but;
UO:

Mind Blast (Por Corp Wis)
Black Pearl, Mandrake Root, Nightshade, Sulfurous Ash
Makes a mind blast hit your target for max 40 to 42 points of Cold damage. Damage level depends on Magery and Intelligence. Has a small delay.

Seems like UO.com get the magery and intelligence and add 40-42 damage I guess magery + int / 50 or something like this.
Renaissance:
Mind blast checks the targets stats and determines which stat is the highest and lowest then determines the difference between the two. This number is halved and checked to make sure it is not more than 40 damage. Should the target player pass a resist check the damage would be halved.
Example 1: Str: 100: Dex:25 Int:100, Highest Stat 100, Lowest Stat 25, Difference:75
Result 1: Damage:37, Resisted Damage:18
Example 2: Str: 100: Dex:25 Int:110, Highest Stat 110, Lowest Stat 25, Difference:85
Result 2: Damage:40, Resisted Damage:20
Example 3: Str: 90: Dex:45 Int:90, Highest Stat 90, Lowest Stat 45, Difference:45
Result3: Damage:22, Resisted Damage:11
As you can see balanced stats are critical when mitigating the damage from the mind blast spell.
Formula: (Highest Stat - Lowest Stat) / 2
This formula get highest stat from str/int or dex and lowest stat then get difference between them and make a damage depends on it, if i understand correctly.
Sphere Custom:
Get Attacker's Intelligence then get difference between Attacker's Intelligence and Attacked Player's Intelligence and cause damage depends on this.

https://cdn.discordapp.com/attachments/488892196096049163/786705987531702293/unknown.png

Yes in sphere custom it works like this, where did you find that picture?

under the spelldef you can make the spell work like any era or in any custom way you would like:
local.Effect | IO | Changes the EFFECT value of the spell (For changing EFFECT_ID see Local.CreateObject1).


Set default DB passwords to empty

just so that there is no chance that anyone will use these.
Fixes #20 (Technically not, but we can't do anything else here)

To be honest, I'm never sure what to do about secrets in Helm charts.
Some charts generate random secrets, e.g. https://github.com/bitnami/charts/blob/master/bitnami/mariadb/templates/secrets.yaml#L19
Some charts use default credentials and expect users to overwrite them, e.g. https://github.com/nextcloud/helm/blob/master/charts/nextcloud/values.yaml#L69
In my opinion, these approaches are suboptimal, so I'm in favor of removing the default credentials.
However, in this case I would actually unset the values (null), and use a {{ requiredValue ... } in the template to ensure the value is actually set (and not just empty).

TIL about the required function. Yeah makes sense.

The required function allows you to declare a particular values entry as required for template rendering. If the value is empty, the template rendering will fail with a user submitted error message.

https://helm.sh/docs/howto/charts_tips_and_tricks/

Ok I updated the values.yaml the passwords are now set to null.
If the externalDatabase.password is required and not set the user will receive an error. The Bitnami MariaDB Chart will to the same with the passed values.
I extended the PR to also include the Limesurvey Admin password. Either the user provides one extracts the random password from the Secret.


update to swift3

As mentioned in https://github.com/madebybowtie/FlagKit/pull/35, we will not move master to Swift 3 before Apple releases the GM of Xcode 8.

No problem, can you create a swift3 branch ?

There is now a migrated branch: https://github.com/madebybowtie/FlagKit/tree/swift3


[jvm-packages]  unsupported option '-fopenmp'

i pulled the newest git repository.
I got error when run 'mvn clean package' command.
Then i run export CXX=clang-omp++ before compile, the error still occurs.
The error is as follow:

[INFO] Building xgboost4j 0.5
[INFO] ------------------------------------------------------------------------
[INFO]
[INFO] --- maven-clean-plugin:2.5:clean (default-clean) @ xgboost4j ---
[INFO] Deleting /Users/universe/Code/xgboost/jvm-packages/xgboost4j/target
[INFO]
[INFO] --- scalastyle-maven-plugin:0.8.0:check (checkstyle) @ xgboost4j ---
Processed 7 file(s)
Found 0 errors
Found 0 warnings
Found 0 infos
Finished in 747 ms
[INFO]
[INFO] --- maven-checkstyle-plugin:2.17:check (checkstyle) @ xgboost4j ---
[INFO]
[INFO] --- exec-maven-plugin:1.5.0:exec (native) @ xgboost4j ---
build java wrapper
clang++ -std=c++0x -Wall -O3 -msse2  -Wno-unknown-pragmas -funroll-loops -Iinclude   -Idmlc-core/include -Irabit/include -fPIC -fopenmp -MM -MT build/learner.o src/learner.cc >build/learner.d
clang: error: unsupported option '-fopenmp'
make: *** [build/learner.o] Error 1
move native lib
mv: rename lib/libxgboost4j.so to xgboost4j/src/main/resources/lib/libxgboost4j.dylib: No such file or directory
complete
[INFO]

i remove line 47 in xgboost/Makefile, then run export CXX=clang-omp++ before compile.
And it works!


just: Reduce docs commands

cargo --doc works from the workspace root, no need to run the docs builds individually.
More context
cargo test does not run docs tests if run from the workspace root as it does when run in a crate directory.

Pull Request Test Coverage Report for Build<PHONE_NUMBER>

0 of 0   changed or added relevant lines in 0 files are covered.
No unchanged relevant lines lost coverage.
Overall coverage remained the same at 84.309%

Totals

Change from base Build<PHONE_NUMBER>:
0.0%

Covered Lines:
19316

Relevant Lines:
22911

💛  - Coveralls


Rust tools breaks support for nvim-navic

nvim-navic is a simple statusline/winbar component that uses LSP to show the current node context. It uses lsp's document_symbol which is provided by rust-analyzer.
Without rust-tools, nvim-navic works as expected.
When using rust-tools in combination with nvim-navic, it is unavailable where the following reports false:
:lua print(require("nvim-navic").get_location())

Is there a mechanism of rust-tools that could explain this behavior?

I answered this myself.
As rust-tools spawns the LSP for you, make sure to add modifications of on_attach to the setup of rust-tools.
E.g.

local function on_attach(client, bufnr)
    require("nvim-navic").attach(client, bufnr)
end

require("rust-tools").setup({
    server = {
        on_attach = on_attach,
    }
})


Expose isEqual options to the user

See https://github.com/dethcrypto/earl/pull/165#discussion_r784140229.
Currently, the options documented in https://earljs.dev/docs/advanced/equality-algorithm#algorithm are not exposed to the user. While I personally wouldn't set uniqueNaNs or minusZero to true, some advanced Earl users might need it, especially when migrating from other assertion libraries.

Closing this as this is not in scope for the foreseeable future. The options are available if the user wishes to call toEqual directly, but otherwise we prefer to keep the matchers simple.


2.3.x getting started code example issues

Great work on this library!
There are several issues with the  code example provided in the docs.
Besides the semantic issues, the example will not work with the default installation, because the table hotel will conflict between the projection and the event store.
This would require either, change the projection table name, or set the project to use a single event store (I'd say easier to start with anyway, but a bit less out-of-the-box).

@DanielBadura what shall we do with the Store type?

I just read it now, sorry.
I would say we update the projection table name in the example, it is less invasive. Also, multitable store will be removed in 3.0.

I just read it now, sorry.

No worries.

I would say we update the projection table name in the example, it is less invasive. Also, multitable store will be removed in 3.0.

What? Why?!
also: it's not what the documentation of 3.x says (updated several years ago)...

Hey, sorry for the confusion.
First about the MultiTable Store:
It's really difficult to implement a mutli table store, but we managed to do it. The main challenge here was that the events always had to be in the correct order, even if they were reloaded from the DB across all aggregates. This is important for the pipeline as well as for the projectionist (async projections). We solved this by having a table for each aggregate, but also a meta table that is filled at the same time. Every event is always written in two tables. When you read, the “magic” happens. We fetch across all aggregates and the meta table. We always work with a cursor so as not to load all the data into memory. First we load the first row from the meta table to know which table we have to read for the first event. Then we load the corresponding next line in the aggregate table, where the payload from the event can also be found. And this happens for every event in the meta table. At the same time there are checks to make sure that the tables are in sync.
In summary, we always write to multiple tables and have to read multiple tables to build a stream.
What do we gain? Nothing, except developer experience when looking at the data in the database.
What price do we pay? Negative effect on the read/write speed. A good index is just as fast as a separate table. More memory consumption because some data is duplicated. Complicated procedure and potential errors. And above all, why we threw out this feature: It's difficult to filter without actually duplicating the data 100%.
That's why we decided to drop the Multi Table Store because we no longer use it ourselves.
Can you think of a reason to keep the Multi Table Store?
Regarding the documentation in the bundle:
Yes, it is outdated for 3.0 and not yet updated, but the version is not released yet. We work primarily library-centered and the bundle is currently being updated enough so that we can use it in our own project. Before we release the bundle to the latest version, we will deprecate things, write upgrade documentation and update the documentation.


proposal: net/url: provide AllowQuerySemicolons functionality for net/url rather than net/http

https://github.com/golang/go/issues/25192 was a breaking change and https://github.com/golang/go/issues/45973 sought to alleviate that change with AllowQuerySemicolons.  Implementing it as an http handler however ignores any other use case for parsing urls.
My understanding is that anything parsing doubleclick urls, which explicitly use semicolons, would still break.
https://support.google.com/richmedia/answer/117426?hl=en
It would be great if we could have some mechanism to allow for backward compatibility in net/url rather than net/http, so that all use cases can be accommodated.

CC @FiloSottile

Not saying that we necessarily shouldn’t do this, but it’s worth noting that if you have a URL, getting the original behavior back is a single call to strings.Replace(u, “;”, “&”, -1).

One suggestion might be viable would be to simply return an error, such as url.ErrLegacyQuerySep or something to denote that it was parsed correctly, but contained semicolons.  This would likely make all existing clients ignore the returned value, and bubble up the error.
Another option would be to make a function that takes a set of valid separators to use.

Using strings.Replace seems simpler than adding additional API surface to url.Parse. Sent a CL to add this suggestion to the release notes, since it isn't immediately obvious that it's a valid workaround.

Given updated docs, it doesn't seem like we need to put this API in.

Based on the discussion above, this proposal seems like a likely decline.
— rsc for the proposal review group


Failed sync

Failed to resolve: com.github.100rabhkr:GetJSON:1.0
What the matter with this ? I'm using number of other libs but this one can't go further.

Did you try adding maven { url 'https://jitpack.io' } to your build.gradle and then compile 'com.github.100rabhkr:GetJSON:1.0' to your app.gradle .


c++ amp on arm64

It seems C++ AMP on ARM64 is supported in Visual Studio 2019 16.8.0 preview 2.1

Document Details
⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

ID: e58e07cc-2b1b-668a-5d9d-73afd80ce1c6
Version Independent ID: 2b3cbb85-9f6c-2ef2-285a-5af0dc64e31d
Content: C++ AMP Overview
Content Source: docs/parallel/amp/cpp-amp-overview.md
Product: visual-cpp
Technology: cpp-parallel
GitHub Login: @TylerMSFT
Microsoft Alias: twhitney

Hi @fobrs. Unfortunately, C++ AMP isn't and won't be supported on ARM64.


Dead mod?

hey is this mod still active or have you moved on to other things

Same question @itsdeadfrosty @dags-

Mod is discontinued, development is carrying on through ReTerraForged https://github.com/racoonman2/ReTerraForged


一个绕过方法&A bypass method

点击五次shift键，然后点击弹出窗口的链接，就可以跳转到系统设置，实现绕过
Click the shift key five times, and then click the link in the pop-up window to jump to the system setting to bypass

Neat trick, I hadn't thought about that :) Would indeed be good to fix this, thanks for your report!

@bitsadmin glad that you are still updating this super cool project
I wish someone would  add the password verification part to wifiphisher
So it works remotely on local devices on the same network :(
Windows Lock Screen Senario

Interesting idea, to show a fake logonscreen in a browser when a client connects to a rogue access point. However, because the browser is probably not full screen, users will be less prone to fall for entering their password.
Also, password verification of the password entered in the browser window is challenging, as you will somehow need to find a server/port to validate the password. For example in case of a domain-joined machine the Domain Controller to test the password against SMB (445/TCP) or LDAP (389/TCP). In case it is not a domain-joined machine, you can try the password against the host itself, if ports like SMB or RPC (135/TCP) are reachable. As mentioned, it is challenging, but could be possible to automate, at least the 2nd case.

Interesting idea, to show a fake logonscreen in a browser when a client connects to a rogue access point.

@bitsadmin  Yeah thanks  .... It can also be done in local network with some spoofing which is where it would be actually meaningful ... as for grabbing passwords from random devices doesn't make sense

However, because the browser is probably not full screen, users will be less prone to fall for entering their password.

Yeah you are right .... but it can be done using some quicky click jacking or something
Images of the tricks used these days
I can't find the one i fall for ... but it went like this .... an ad showed up on a page on my phone .... i tried closing while clicking that X an allow nonfiction pop showed the exact second that i wasn't even able to notice that i clicked it ... it was really done right
Anyway i think you don't even need to display anything on the page .... just the phishing page will do ... user will typically click on it to see what it's about ...and the full screen will kick (as it requires any click by the user || addEventListener & Chrome Fullscreen API )
Moreover I think you could monitor a certain target device network traffic and then when inactivity detected .... You launch the scam so when the users come back and see it they will input the password without double thought as it would look like the typical Sleep screen lock

Also, password verification of the password entered in the browser window is challenging, as you will somehow need to find a server/port to validate the password. For example in case of a domain-joined machine the Domain Controller to test the password against SMB (445/TCP) or LDAP (389/TCP). In case it is not a domain-joined machine, you can try the password against the host itself, if ports like SMB or RPC (135/TCP) are reachable. As mentioned, it is challenging, but could be possible to automate, at least the 2nd case.

Hmmm ...  I don't know if this would work  for domain-joined machine or not ... but this what i suggested in the comments of the pull request mentioned

From EAPHammer
Hostile Portal Attacks are a weaponization of the captive portals typically used to restrict access to open networks in environments such as hotels and coffee shops. Instead of redirecting HTTP traffic to a login page, as with a captive portal, the hostile portal redirects HTTP traffic to an SMB share located on the attacker's machine. The result is that after the victim is forced to associate with the attacker using a rogue access point attack, any HTTP traffic generated by the victim will cause the victim's device to attempt NTLM authentication with the attacker. This is, in essence, an assisted Redirect To SMB attack. The attacker also performs LLMNR/NBT-NS poisoning against the victim.

Regards


Edits to commentary log

Further editing of commentary log for grammar and consistent formatting.

many thanks for this.

quite welcome.


[Crash] Crash when loading chunks in the world after installing  the latest version

i used to use the old version "Harvest-Festival-1.10.2-0.5.25". After i installed the latest version "Harvest-Festival-1.10.2-0.6.0-219", minecraft started to crash every time i entered the world.
My forge version is the latest one, provided in Hello Minecraft Launcher,  <IP_ADDRESS>1，JAVA 8 is available.
It's okay to enter main menu, and also it's okay to run successfully after creating a new world without noticing me "missing blocks".
But once I open the old worlds, which will notice me "missing blocks", it will crash while loading the chunks,  just CRASHES and CRASHES repeatedly after i installed the new version, so i have to re-use the old version in the mod pack, which is 0.5.25.
i think it may not be the problem of my computer or settings.
So sad i wanna enjoy the festival!
Urgent ! could someone help?
Thanks so much! It's the best mod i've ever seen and i hope it can bring me more fun

Now i've tried all the versions of 0.6, none of them works. only 0.5x versions work. Could someone explain it? I may show the crash report if needed.

Time: 6/27/18 2:52 PM
Description: Exception ticking world
java.lang.IllegalArgumentException: Cannot get property PropertyEnum{name=croptype, clazz=class joshie.harvest.crops.block.BlockHFCrops$CropType, values=[FRESH, WITHERED, FRESH_DOUBLE, WITHERED_DOUBLE]} as it does not exist in BlockStateContainer{block=minecraft:farmland, properties=[moisture]}
at net.minecraft.block.state.BlockStateContainer$StateImplementation.func_177229_b(BlockStateContainer.java:203)
at joshie.harvest.core.base.block.BlockHFEnum.getEnumFromState(BlockHFEnum.java:90)
at joshie.harvest.crops.block.BlockHFCrops.func_176221_a(BlockHFCrops.java:357)
at joshie.harvest.crops.block.BlockHFCrops.getPlant(BlockHFCrops.java:376)
at net.minecraft.block.Block.canSustainPlant(Block.java:1607)
at net.minecraft.block.BlockFarmland.func_176529_d(BlockFarmland.java:86)
at net.minecraft.block.BlockFarmland.func_180650_b(BlockFarmland.java:62)
at net.minecraft.block.Block.func_180645_a(Block.java:480)
at net.minecraft.world.WorldServer.func_147456_g(WorldServer.java:471)
at net.minecraft.world.WorldServer.func_72835_b(WorldServer.java:220)
at WorldServerOF.func_72835_b(WorldServerOF.java:37)
at net.minecraft.server.MinecraftServer.func_71190_q(MinecraftServer.java:698)
at net.minecraft.server.MinecraftServer.func_71217_p(MinecraftServer.java:613)
at net.minecraft.server.integrated.IntegratedServer.func_71217_p(IntegratedServer.java:240)
at net.minecraft.server.MinecraftServer.run(MinecraftServer.java:471)
at java.lang.Thread.run(Unknown Source)
A detailed walkthrough of the error, its code path and all known details is as follows:
-- Head --
Thread: Server thread
Stacktrace:
at net.minecraft.block.state.BlockStateContainer$StateImplementation.func_177229_b(BlockStateContainer.java:203)
at joshie.harvest.core.base.block.BlockHFEnum.getEnumFromState(BlockHFEnum.java:90)
at joshie.harvest.crops.block.BlockHFCrops.func_176221_a(BlockHFCrops.java:357)
at joshie.harvest.crops.block.BlockHFCrops.getPlant(BlockHFCrops.java:376)
at net.minecraft.block.Block.canSustainPlant(Block.java:1607)
at net.minecraft.block.BlockFarmland.func_176529_d(BlockFarmland.java:86)
at net.minecraft.block.BlockFarmland.func_180650_b(BlockFarmland.java:62)
at net.minecraft.block.Block.func_180645_a(Block.java:480)
at net.minecraft.world.WorldServer.func_147456_g(WorldServer.java:471)
at net.minecraft.world.WorldServer.func_72835_b(WorldServer.java:220)
at WorldServerOF.func_72835_b(WorldServerOF.java:37)
-- Affected level --
Details:
Level name: 10
All players: 1 total; [EntityPlayerMP['NONO'/249, l='10', x=49.65, y=67.00, z=383.86]]
Chunk stats: ServerChunkCache: 334 Drop: 0
Level seed:<PHONE_NUMBER>288124318
Level generator: ID 06 - BIOMESOP, ver 0. Features enabled: true
Level generator options:
Level spawn location: World: (28,64,256), Chunk: (at 12,4,0 in 1,16; contains blocks 16,0,256 to 31,255,271), Region: (0,0; contains chunks 0,0 to 31,31, blocks 0,0,0 to 511,255,511)
Level time: 4277470 game time, 5724905 day time
Level dimension: 0
Level storage version: 0x04ABD - Anvil
Level weather: Rain time: 0 (now: false), thunder time: 0 (now: false)
Level game mode: Game mode: survival (ID 0). Hardcore: false. Cheats: false
Stacktrace:
at net.minecraft.server.MinecraftServer.func_71190_q(MinecraftServer.java:698)
at net.minecraft.server.MinecraftServer.func_71217_p(MinecraftServer.java:613)
at net.minecraft.server.integrated.IntegratedServer.func_71217_p(IntegratedServer.java:240)
at net.minecraft.server.MinecraftServer.run(MinecraftServer.java:471)
at java.lang.Thread.run(Unknown Source)
-- System Details --
Details:
Minecraft Version: 1.10.2
Operating System: Windows 10 (amd64) version 10.0
Java Version: 1.8.0_171, Oracle Corporation
Java VM Version: Java HotSpot(TM) 64-Bit Server VM (mixed mode), Oracle Corporation
Memory: 198877688 bytes (189 MB) /<PHONE_NUMBER> bytes (1024 MB) up to<PHONE_NUMBER> bytes (1024 MB)
JVM Flags: 11 total; -XX:+UnlockExperimentalVMOptions -XX:+UseG1GC -XX:G1NewSizePercent=20 -XX:G1ReservePercent=20 -XX:MaxGCPauseMillis=50 -XX:G1HeapRegionSize=16M -XX:-UseAdaptiveSizePolicy -XX:-OmitStackTraceInFastThrow -Xmn128m -Xmx1024m -XX:HeapDumpPath=MojangTricksIntelDriversForPerformance_javaw.exe_minecraft.exe.heapdump
IntCache: cache: 0, tcache: 0, allocated: 4, tallocated: 105
FML: MCP 9.32 Powered by Forge <IP_ADDRESS>1 Optifine OptiFine_1.10.2_HD_U_E7_pre 42 mods loaded, 42 mods active
States: 'U' = Unloaded 'L' = Loaded 'C' = Constructed 'H' = Pre-initialized 'I' = Initialized 'J' = Post-initialized 'A' = Available 'D' = Disabled 'E' = Errored
UCHIJAAAA	mcp{9.19} [Minecraft Coder Pack] (minecraft.jar)
UCHIJAAAA	FML{<IP_ADDRESS>} [Forge Mod Loader] (forge-1.10.2-<IP_ADDRESS>1.jar)
UCHIJAAAA	Forge{<IP_ADDRESS>1} [Minecraft Forge] (forge-1.10.2-<IP_ADDRESS>1.jar)
UCHIJAAAA	continousmusic{1.0.0} [Continous Music] ([ÎÞÏÞÒôÀÖ][1.10.x]infinitemusic-1.10.2-1.0.0.jar)
UCHIJAAAA	ashenwheat{<IP_ADDRESS>} [Ashenwheat] (ashenwheat-1.10.2-<IP_ADDRESS>.jar)
UCHIJAAAA	babymobs{1.5.4} [Baby Mobs] (BabyMobs-1.10.2-1.5.4.jar)
UCHIJAAAA	betterfoliage{2.1.3} [Better Foliage] (BetterFoliage-MC1.10.2-2.1.3.jar)
UCHIJAAAA	BiomesOPlenty{<IP_ADDRESS>5} [Biomes O' Plenty] (BiomesOPlenty-1.10.2-<IP_ADDRESS>5-universal.jar)
UCHIJAAAA	carryon{1.1} [Carry On] (CarryOn_MC1.10.2_v1.1.jar)
UCHIJAAAA	cfm{4.1.2} [MrCrayfish's Furniture Mod] (cfm-4.1.2-mc1.10.2.jar)
UCHIJAAAA	Chameleon{1.10-2.2.2} [Chameleon] (Chameleon-1.10-2.2.2.jar)
UCHIJAAAA	chineseworkshop{<IP_ADDRESS>} [ChineseWorkshop] (ChineseWorkshop_1.10.2-<IP_ADDRESS>.jar)
UCHIJAAAA	FastLeaveDecay{1.2.3} [Fast Leave Decay] (FastLeaveDecay-MC1.10.2-1.2.3.jar)
UCHIJAAAA	forgelin{1.4.1} [Forgelin] (Forgelin-1.4.1.jar)
UCHIJAAAA	harvestfestival{0.6.0-219} [Harvest Festival] (Harvest-Festival-1.10.2-0.6.0-219.jar)
UCHIJAAAA	Waila{1.8.12-B26_1.10.2} [Waila] (Hwyla-1.8.12-B26_1.10.2.jar)
UCHIJAAAA	infinitylib{1.10.2-0.10.0} [InfinityLib] (infinitylib-0.10.0.jar)
UCHIJAAAA	inventorytweaks{1.61-58-a1fd884} [Inventory Tweaks] (inventorytweaks-1.61-58.jar)
UCHIJAAAA	JEI{<IP_ADDRESS>6} [Just Enough Items] (jei_1.10.2-<IP_ADDRESS>6.jar)
UCHIJAAAA	journeymap{1.10.2-5.4.6} [JourneyMap] (journeymap-1.10.2-5.4.6.jar)
UCHIJAAAA	llibrary{1.7.4} [LLibrary] (llibrary-1.7.4-1.10.2.jar)
UCHIJAAAA	literalascension{1.10.2-<IP_ADDRESS>} [Literal Ascension] (literalascension-1.10.2-<IP_ADDRESS>.jar)
UCHIJAAAA	shear{1.1.2} [More Shearables] (MoreShearables1.2.1-1.10.2.jar)
UCHIJAAAA	mousetweaks{2.8} [Mouse Tweaks] (MouseTweaks-2.8-mc1.10.2.jar)
UCHIJAAAA	mtlib{@VERSION@} [MTLib] (MTLib-1.0.2.jar)
UCHIJAAAA	Neat{1.3-12} [Neat] (Neat 1.3-12.jar)
UCHIJAAAA	NyankoMod{1.3.0} [NyankoMod] (NyankoMod_1.10.2_1.3.0.jar)
UCHIJAAAA	snad{1.10.2-<IP_ADDRESS>a} [Snad] (Snad-1.10.2-<IP_ADDRESS>a.jar)
UCHIJAAAA	StorageDrawers{1.10.2-3.6.3} [Storage Drawers] (StorageDrawers-1.10.2-3.6.3.jar)
UCHIJAAAA	superminer_core{<IP_ADDRESS>0} [SuperMiner] (superminer-[1.10.2]-<IP_ADDRESS>0.jar)
UCHIJAAAA	superminer_captivator{[1.10.2]-<IP_ADDRESS>0} [SuperMiner Captivator] (superminer-[1.10.2]-<IP_ADDRESS>0.jar)
UCHIJAAAA	superminer_cropinator{[1.10.2]-<IP_ADDRESS>0} [SuperMiner Copinator] (superminer-[1.10.2]-<IP_ADDRESS>0.jar)
UCHIJAAAA	superminer_excavator{[1.10.2]-<IP_ADDRESS>0} [SuperMiner Excavator] (superminer-[1.10.2]-<IP_ADDRESS>0.jar)
UCHIJAAAA	superminer_illuminator{[1.10.2]-<IP_ADDRESS>0} [SuperMiner Illuminator] (superminer-[1.10.2]-<IP_ADDRESS>0.jar)
UCHIJAAAA	superminer_lumbinator{[1.10.2]-<IP_ADDRESS>0} [SuperMiner Lumbinator] (superminer-[1.10.2]-<IP_ADDRESS>0.jar)
UCHIJAAAA	superminer_shaftanator{[1.10.2]-<IP_ADDRESS>0} [SuperMiner Shaftanator] (superminer-[1.10.2]-<IP_ADDRESS>0.jar)
UCHIJAAAA	superminer_substitutor{[1.10.2]-<IP_ADDRESS>0} [SuperMiner Substitutor] (superminer-[1.10.2]-<IP_ADDRESS>0.jar)
UCHIJAAAA	superminer_veinator{[1.10.2]-<IP_ADDRESS>0} [SuperMiner Veinator] (superminer-[1.10.2]-<IP_ADDRESS>0.jar)
UCHIJAAAA	expforce{<IP_ADDRESS>2} [Experience Force] (TeaStory-<IP_ADDRESS>4-1.10.2.zip)
UCHIJAAAA	teastory{<IP_ADDRESS>4} [Tea: The Story] (TeaStory-<IP_ADDRESS>4-1.10.2.zip)
UCHIJAAAA	ToughAsNails{@MOD_VERSION@} [Tough As Nails] (ToughAsNails-1.9.4-1.1.1.jar)
UCHIJAAAA	wolfarmor{1.3.1} [Wolf Armor and Storage] (wolfarmor-<IP_ADDRESS>.jar)
Loaded coremods (and transformers):
BetterFoliageLoader (BetterFoliage-MC1.10.2-2.1.3.jar)
mods.betterfoliage.loader.BetterFoliageTransformer
literalascension (literalascension-1.10.2-<IP_ADDRESS>.jar)
com.jamieswhiteshirt.literalascension.core.patcher.LiteralAscensionRuntimePatcher
llibrary (llibrary-1.7.4-1.10.2.jar)
net.ilexiconn.llibrary.server.core.plugin.LLibraryTransformer
net.ilexiconn.llibrary.server.core.patcher.LLibraryRuntimePatcher
ForgelinPlugin (Forgelin-1.4.1.jar)
HFTransformer (Harvest-Festival-1.10.2-0.6.0-219.jar)
joshie.harvest.asm.HFTransformer
FMLPlugin (inventorytweaks-1.61-58.jar)
invtweaks.forge.asm.ContainerTransformer
TANLoadingPlugin (ToughAsNails-1.9.4-1.1.1.jar)
toughasnails.asm.transformer.BlockCropsTransformer
toughasnails.asm.transformer.EntityRendererTransformer
toughasnails.asm.transformer.WorldTransformer
GL info: ERROR RuntimeException: No OpenGL context found in the current thread.
Profiler Position: N/A (disabled)
Player Count: 1 / 8; [EntityPlayerMP['NONO'/249, l='10', x=49.65, y=67.00, z=383.86]]
Type: Integrated Server (map_client.txt)
Is Modded: Definitely; Client brand changed to 'fml,forge'
OptiFine Version: OptiFine_1.10.2_HD_U_E7_pre
Render Distance Chunks: 6
Mipmaps: 1
Anisotropic Filtering: 1
Antialiasing: 0
Multitexture: false
Shaders: Chocapic13+V6+Lite.zip
OpenGlVersion: 4.4.0 - Build <IP_ADDRESS>50
OpenGlRenderer: Intel(R) HD Graphics 520
OpenGlVendor: Intel
CpuCount: 4


Eloquent API Resource with loaded relation

I used the whenLoaded for load the relation in Resources, but the apidoc:generate don't load the relations and don't load the resource correctly:
return [      'id'  => $this->id,      'contacts' => $this->whenLoaded('contacts', function(){         return  ContactResource::collection($this->contacts);      }), ];

What strategy are you using? The Api Resource strategy does not execute your code, and so does not know of those conditions.
Closing this in favour of #663 (you can add your answers there)

We could potentially add a with parameter to the annotation. Something like @apiResource App\User with=contacts,pets to indicate that the model should be loaded with those relations. However, depending on how the model instance is generated (see second paragraph in https://laravel-apidoc-generator.readthedocs.io/en/latest/documenting.html#apiresource-apiresourcecollection-and-apiresourcemodel), this may not be guaranteed. It's not a priority now, though. PRs welcome.

awaiting, thanks

This is now supported in Scribe 🙂.


go to presets by default when not full days

"right now, when you open the time filter menu, if the current filter matches one of the presets, it opens the presets tab, and otherwise, it opens the calendar tab.
really, it should open the presets tab in the case where you are not looking at full days, too. probably."

gr 🎱


@conda-forge-admin,please add bot automerge

@conda-forge-admin,please add bot automerge

Hi! This is the friendly automated conda-forge-webservice.
I just wanted to let you know that I added bot automerge in conda-forge/gfal2-util-feedstock#6.


Fixed g-eval doc.

I was following the G-Eval guide for Correctness metric and could not get the evaluation to work correctly as it kept ignoring the expected_output in my LLMTestCase, despite the criteria or evaluation_steps explicitly stating to evaluate against the expected output (following exactly the example code). I realised that LLMTestCaseParams.EXPECTED_OUTPUT should be in the evaluation_params list, and after adding that, it worked correctly.

@zyuanlim Thanks so much! Didn't catch it previousluy :)


Min/max counting duplicates

Hello,
With this sample data:
http://www.sharecsv.com/s/9096d32f98aa0ac671a1cca16fa43be8/SalesJan2009.csv
It looks like :Max counts 7500 all ten times. I thought this would be like :Count distinct where it counts the value once and moves along to next max value.
This is also occurring for :Min:
[0.0, 250.0, 800.0, 1200.0, 1200.0, 1200.0, 1200.0, 1200.0, 1200.0, 1200.0]
Thanks!

Hi jungle-boogie!
On Mo, 17 Aug 2015, jungle-boogie wrote:

Hello,
With this sample data:
http://www.sharecsv.com/s/9096d32f98aa0ac671a1cca16fa43be8/SalesJan2009.csv
It looks like :Max counts 7500 all ten times. I thought this would be like :Count distinct where it counts the value once and moves along to next max value.
This is also occurring for :Min:
[0.0, 250.0, 800.0, 1200.0, 1200.0, 1200.0, 1200.0, 1200.0, 1200.0, 1200.0]
Thanks!

Should work now. Thanks for reporting!
Best,
Christian
Nur wer alt wird, erhält eine vollständige und angemessene Vorstellung
vom Leben.
-- Arthur Schopenhauer

Hi,

Should work now. Thanks for reporting!

I pulled new changes and I have e6fa0b855c67fdc621f42ca724fd85e12ee3db4f but using the sales file, I still see this:
[13000.0, 7500.0, 7500.0, 7500.0, 7500.0, 7500.0, 7500.0, 7500.0, 7500.0, 7500.0]
1200 value is repeated 8 times.
Do you think this is a problem with the CSV file?
Thanks!

Hi jungle-boogie!
On Mi, 19 Aug 2015, jungle-boogie wrote:

Hi,

Should work now. Thanks for reporting!

I pulled new changes and I have e6fa0b855c67fdc621f42ca724fd85e12ee3db4f but using the sales file, I still see this:
[13000.0, 7500.0, 7500.0, 7500.0, 7500.0, 7500.0, 7500.0, 7500.0, 7500.0, 7500.0]
1200 value is repeated 8 times.
Do you think this is a problem with the CSV file?

Use the distinct keyword, e.g. :MaxCol distinct
Best,
Christian
Wie man sein Kind nicht nennen sollte:
Knut Schfleck

Hello Chrisbra,

Use the distinct keyword, e.g. :MaxCol distinct

Now that works perfectly!
Thanks a million for your plug-in.
Best,
sean


ocamlPackages.janeStreet: add v0.16 of packages

Description of changes
https://github.com/ocaml/opam-repository/pull/23742

Things done

Built on platform(s)

[ ] x86_64-linux
[ ] aarch64-linux
[ ] x86_64-darwin
[ ] aarch64-darwin

[ ] For non-Linux: Is sandbox = true set in nix.conf? (See Nix manual)
[ ] Tested, as applicable:

NixOS test(s) (look inside nixos/tests)
and/or package tests
or, for functions and "core" functionality, tests in lib/tests or pkgs/test
made sure NixOS tests are linked to the relevant packages

[ ] Tested compilation of all packages that depend on this change using nix-shell -p nixpkgs-review --run "nixpkgs-review rev HEAD". Note: all changes have to be committed, also see nixpkgs-review usage
[ ] Tested basic functionality of all binary files (usually in ./result/bin/)
23.05 Release Notes (or backporting 22.11 Release notes)

[ ] (Package updates) Added a release notes entry if the change is major or breaking
[ ] (Module updates) Added a release notes entry if the change is significant
[ ] (Module addition) Added a release notes entry if adding a new NixOS module

[ ] Fits CONTRIBUTING.md.

Result of nixpkgs-review pr 230267 run on x86_64-linux 1

12 packages failed to build:

cmdstan
comby
coqPackages.coq-lsp
coqPackages.serapi
flow
libbap
ligo
python310Packages.bap
python310Packages.bap.dist
python311Packages.bap
python311Packages.bap.dist
stanc

37 packages built:

acgtk
advi
beluga
coccinelle
coqPackages.coq-elpi
coqPackages.hierarchy-builder
coqPackages.mathcomp-algebra-tactics
coqPackages.mathcomp-analysis
coqPackages.mathcomp-classical
coqPackages.trakt
cvehound
cvehound.dist
dune-release
easycrypt
eff
flitter
framac
fstar
glsurf
jackline
liquidsoap
ocamlformat (ocamlformat_0_24_1)
ocamlformat_0_19_0
ocamlformat_0_20_0
ocamlformat_0_20_1
ocamlformat_0_21_0
ocamlformat_0_22_4
ocamlformat_0_23_0
patdiff
reason
sail-riscv-rv32
sail-riscv-rv64
satysfi
soupault
stog
wayland-proxy-virtwl
why3


Exception raised despite consistent repr output

I'm new to Beartype with NumPy typing, but I don't think Beartype should be raising this exception. Here's the Python file. (Specifically, the issue seems to be the return type hint for the load_into_numpy function (NDArray[Shape["*"], Float]); removing it causes the exception to go away.)
from librosa import load
import numpy as np
import nptyping as npt
from nptyping import NDArray, Shape, Float
from typing import Any
from beartype import beartype

class SpectUtils:

    @beartype
    # Loads a single audio file into a floating-point Numpy "time series" vector.
    def load_into_numpy(self, path : str, sample_rate : float) -> NDArray[Shape["*"], Float]:
        audio_arr : NDArray[Shape["*"], npt.Float]
        returned_sample_rate : float
        audio_arr, returned_sample_rate = load(path=path, sr=sample_rate)

        return audio_arr

s = SpectUtils()
audionp: NDArray[Shape["*"], Float] = s.load_into_numpy(path="./example_file.wav" , sample_rate=2250.0)
print(audionp.shape)

Here's the resulting exception:
beartype.roar.BeartypeDecorHintPep604Exception: Type hint NDArray[Shape['*'], Float] inconsistent with respect to repr() strings. Since @beartype requires consistency between type hints and repr() strings, this hint is unsupported by @beartype. Consider reporting this issue to the third-party developer implementing this hint: e.g.,
    >>> repr(NDArray[Shape['*'], Float])
    NDArray[Shape['*'], Float]  # <-- this is fine
    >>> repr(NDArray[Shape['*'], Float] | int)
    nptyping.ndarray.NDArray | int  # <-- *THIS IS REALLY SUPER BAD*

    # Ideally, that output should instead resemble:
    >>> repr(NDArray[Shape['*'], Float] | int)
    NDArray[Shape['*'], Float] | int  # <-- what @beartype wants!

I get similar exceptions when I replace that problematic type hint with NDArray or NDArray[Any, Any]
...but when I check what repr prints for NDArray[Shape["*"], Float], I get:
>>> from nptyping import NDArray, Shape, Float
>>> repr(NDArray[Shape["*"], Float])
"NDArray[Shape['*'], Float]"

...which totally seems consistent with the format Beartype asks for. Am I missing something?
Here's the whole Traceback:
Traceback (most recent call last):
  File "/Users/spandansuthar/Projects/project487/spectrogram_utils.py", line 9, in <module>
    class SpectUtils:
  File "/Users/spandansuthar/Projects/project487/spectrogram_utils.py", line 12, in SpectUtils
    @beartype
     ^^^^^^^^
  File "/Users/spandansuthar/.julia/conda/3/aarch64/envs/project487/lib/python3.11/site-packages/beartype/_decor/decorcache.py", line 77, in beartype
    return beartype_object(obj, conf)
           ^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/Users/spandansuthar/.julia/conda/3/aarch64/envs/project487/lib/python3.11/site-packages/beartype/_decor/decorcore.py", line 83, in beartype_object
    _beartype_object_fatal(obj, conf=conf, **kwargs)
  File "/Users/spandansuthar/.julia/conda/3/aarch64/envs/project487/lib/python3.11/site-packages/beartype/_decor/decorcore.py", line 132, in _beartype_object_fatal
    beartype_nontype(obj, **kwargs)  # type: ignore[return-value]
    ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/Users/spandansuthar/.julia/conda/3/aarch64/envs/project487/lib/python3.11/site-packages/beartype/_decor/_decornontype.py", line 177, in beartype_nontype
    return beartype_func(obj, **kwargs)  # type: ignore[return-value]
           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/Users/spandansuthar/.julia/conda/3/aarch64/envs/project487/lib/python3.11/site-packages/beartype/_decor/_decornontype.py", line 242, in beartype_func
    func_wrapper_code = generate_code(bear_call)
                        ^^^^^^^^^^^^^^^^^^^^^^^^
  File "/Users/spandansuthar/.julia/conda/3/aarch64/envs/project487/lib/python3.11/site-packages/beartype/_decor/wrap/wrapmain.py", line 190, in generate_code
    code_check_return = _code_check_return(bear_call)
                        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/Users/spandansuthar/.julia/conda/3/aarch64/envs/project487/lib/python3.11/site-packages/beartype/_decor/wrap/wrapmain.py", line 690, in _code_check_return
    reraise_exception_placeholder(
  File "/Users/spandansuthar/.julia/conda/3/aarch64/envs/project487/lib/python3.11/site-packages/beartype/_util/error/utilerrorraise.py", line 215, in reraise_exception_placeholder
    raise exception.with_traceback(exception.__traceback__)
  File "/Users/spandansuthar/.julia/conda/3/aarch64/envs/project487/lib/python3.11/site-packages/beartype/_decor/wrap/wrapmain.py", line 590, in _code_check_return
    hint = sanify_hint_root_func(
           ^^^^^^^^^^^^^^^^^^^^^^
  File "/Users/spandansuthar/.julia/conda/3/aarch64/envs/project487/lib/python3.11/site-packages/beartype/_check/convert/convsanify.py", line 149, in sanify_hint_root_func
    hint = reduce_hint_pep484585_func_return(
           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/Users/spandansuthar/.julia/conda/3/aarch64/envs/project487/lib/python3.11/site-packages/beartype/_util/hint/pep/proposal/pep484585/utilpep484585func.py", line 82, in reduce_hint_pep484585_func_return
    hint_sign = get_hint_pep_sign_or_none(hint)
                ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/Users/spandansuthar/.julia/conda/3/aarch64/envs/project487/lib/python3.11/site-packages/beartype/_util/cache/utilcachecall.py", line 259, in _callable_cached
    raise exception
  File "/Users/spandansuthar/.julia/conda/3/aarch64/envs/project487/lib/python3.11/site-packages/beartype/_util/cache/utilcachecall.py", line 251, in _callable_cached
    return_value = args_flat_to_return_value[args_flat] = func(
                                                          ^^^^^
  File "/Users/spandansuthar/.julia/conda/3/aarch64/envs/project487/lib/python3.11/site-packages/beartype/_util/hint/pep/utilpepget.py", line 721, in get_hint_pep_sign_or_none
    die_if_hint_pep604_inconsistent(hint)
  File "/Users/spandansuthar/.julia/conda/3/aarch64/envs/project487/lib/python3.11/site-packages/beartype/_util/hint/pep/proposal/utilpep604.py", line 71, in die_if_hint_pep604_inconsistent
    raise BeartypeDecorHintPep604Exception(
beartype.roar.BeartypeDecorHintPep604Exception: Type hint NDArray[Shape['*'], Float] inconsistent with respect to repr() strings. Since @beartype requires consistency between type hints and repr() strings, this hint is unsupported by @beartype. Consider reporting this issue to the third-party developer implementing this hint: e.g.,
    >>> repr(NDArray[Shape['*'], Float])
    NDArray[Shape['*'], Float]  # <-- this is fine
    >>> repr(NDArray[Shape['*'], Float] | int)
    nptyping.ndarray.NDArray | int  # <-- *THIS IS REALLY SUPER BAD*

    # Ideally, that output should instead resemble:
    >>> repr(NDArray[Shape['*'], Float] | int)
    NDArray[Shape['*'], Float] | int  # <-- what @beartype wants!```

...heh. Audio DSP number crunching at CPSLO, huh? Sounds about right. I too once performed audio DSP number crunching at CPSLO. CSC 109 Dr. Staley Crew represent! The class so brutal the few lone survivors drew up T-shirts reading: "I survived Dr. Staley." Minna no Anime. Dr. Kurfess, the awesome German AI-ML-LLM guy. The memories all come flooding back like tears in the rain – which, of course, it never does in CPSLO. Rain is just a metaphor in Cali. Ah, to be youthful and idealistic and out of time on the latest project again!
Wait. What were we chatbotting about again? Oh, right. nptyping. I sigh. :face_exhaling:
Because you're Team CPSLO, you have no time. Life is "learn by doing," which mostly means pain, suffering, and tears in the rain that you only become thankful for later in life. Much later in life. Therefore, this is your five-second tl;dr:

nptyping is dead. Long live jaxtyping.

The five-minute which you don't have explanation of that tl;dr is as follows. Verily, and I do now quote myself from the most recent changelog for @beartype 0.17.0. I am nothing if not vain and given to self-congratulatory indulgence:
@patrick-kidger: If He Didn't Type It, You Shouldn't Use It
Lastly, @beartype 0.17.0 officially:

Supports @patrick-kidger's Equinox now. JAX + ML + @beartype = pretty sure you just got a raise.

Does not support nptyping, because (A) nptyping is dead and (B) nptyping is bad. Dead and bad are both bad. If you attempt to use nptyping-based type hints under @beartype ≥ 0.17.0, @beartype will raise fatal exceptions informing you that you are bad by association: e.g.,
beartype.roar.BeartypeDecorHintPep604Exception: Type hint
NDArray[Shape['N, N'], Float] inconsistent with respect to repr()
strings. Since @beartype requires consistency between type hints and
repr() strings, this hint is unsupported by @beartype. Consider
reporting this issue to the third-party developer implementing this
hint: e.g.,
        >>> repr(NDArray[Shape['N, N'], Float])
        NDArray[Shape['N, N'], Float]  # <-- this is fine
        >>> repr(NDArray[Shape['N, N'], Float] | int)
        nptyping.ndarray.NDArray | int  # <-- *THIS IS REALLY SUPER BAD*

        # Ideally, that output should instead resemble:
        >>> repr(NDArray[Shape['N, N'], Float] | int)
        NDArray[Shape['N, N'], Float] | int  # <-- what @beartype wants!

What @beartype is saying is that nptyping is currently unmaintained, suffers over 20 severe issues, and emits 7 severe NumPy deprecation warnings. nptyping is a ticking time bomb about to explode your codebase into radiating black bodies. Bear bros don't let bear bros import nptyping. Not even once.
Thankfully, @patrick-kidger exists. hard to prove, but likely true Everybody wants to transition from nptyping to @patrick-kidger's Google-adjacent jaxtyping package already. Unlike nptyping, jaxtyping provides well-maintained type hints covering NumPy, JAX, PyTorch, and TensorFlow. It's kinda intense. It's also @beartype's official FAQ recommendation for type-checking NumPy arrays.
The data science pipeline you save might just be your own. It's probably too late, though.

your codebase when you realize you used nptyping everywhere
"But the repr() Strings Don't Lie!", You Are Now Thinking
No, the repr() strings lie. Specifically, nptyping lies. What that verbose exception message is trying but failing to tell you is that nptyping is inconsistent with respect to repr() strings and PEP 604-style new unions.
Yes, it's true that the repr() for individual nptyping type hints is fine:
>>> repr(NDArray[Shape['*'], Float])
NDArray[Shape['*'], Float]  # <-- this is fine

Yet, it's also true that the repr() for PEP 604-style new unions containing nptyping type hints is not at all fine:
>>> repr(NDArray[Shape['*'], Float] | int)
nptyping.ndarray.NDArray | int  # <-- *THIS IS REALLY SUPER BAD*```

That's the bad part. In Python, the repr() should ideally be a string satisfying the following equality:
eval(repr(obj)) == obj

That is, repr() should ideally return a Python expression which, when dynamically evaluated via the eval() builtin, yields the same object. We see, therefore, that nptyping fails this simple heuristic:
>>> eval(repr(NDArray[Shape['*'], Float] | int)) == NDArray[Shape['*'], Float] | int
False

To my knowledge, nptyping is the only typing-oriented Python package broken in this way. It's also unmaintained. Honestly, nptyping being unmaintained is the worst part. If it was actively maintained, @beartype would probably go out of its way to try to support this sort of insanity. But... it's dead. :skull_and_crossbones:
CPSLO: Advice for the Ages
Grandpa @leycec shall now dispense wisdom from a geriatric keyboard in the Canadian wilderness:

If Dr. Kurfess is still there, tell him a skinny guy with long hair who always wore metal T-shirts and looked like an elf reject from The Lord of the Rings sent you. Then tell him you work on satellites. Then beg for a summer job. Before you can say "shadenfreude schweinhund," you'll be on the next Lufthansa flight to Das Technologie-Zentrum Informatik und Informationstechnik (TZI) der Universität Bremen. Good times.
If Clint Staley is still there, tell him the sane thing. His face may sour up into a rictus grimace. Do not be discouraged. This is common. Before you can say "bay area death mark crunch time," that saying will describe your promising new life as a junior devbro at one of Staley's many CPSLO tech startups. In a way, your life will now be over. In another way, your life will just be starting. Good times.
If Madoka W-Belzel is still there, tell her almost the same thing – except that you'd like to attend Waseda Daigaku (i.e., only the top private university in Japan) for a year. Attending Minna no Anime helps, assuming you had time, which you do not. This script almost writes itself.

Thanks for playing along, @spagdoon0411. May @beartype, jaxtyping, and CSC109 be with you always.

Noted--will switch to jaxtyping. I think I'll especially appreciate the Tensorflow type hints. Thank you!
I do know Dr. Kurfess! Haven't taken any classes with him (yet?), but I'll mention this thread if I see him.

and out of time on the latest project again!

I don't appreciate being called out like that.


fsType embedding values?

https://docs.microsoft.com/en-us/typography/opentype/spec/os2#fstype
I found myself pondering today why the fsType field in the OS/2 table is spec'd the way it is: in particular, why the embedding bit values are defined in as sub-field values 0, 2, 4, 8 instead of just directly defined in terms of the bits 0, 1, 2, 3?

Document Details
⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

ID: 1ae9457c-0d3d-c137-588b-81d54a086f07
Version Independent ID: 658c6d22-b9d1-1007-9cdb-6898911c9c75
Content: OS/2 - OS/2 and Windows metrics table (OpenType 1.8.4) - Typography
Content Source: typographydocs/opentype/spec/os2.md
Product: typography
GitHub Login: @PeterCon
Microsoft Alias: alib

The documentation was re-organized that way in 1.8.3 because bits 0 - 3 are a set, distinct from other bits in purpose and in rules for validity. In particular, bits 0 - 3 are mutually exclusive, and so only sub-field values 0, 2, 4 or 8 are valid.
Does making it a subfield help make that clearer? The same as in 1.8.2?

No further comments were received suggesting a need for revision to the 1.8.4 content, so closing.


Hg support

Hi,
I would like to know if there is any plan of giving support for mercurial (hg). Would it be difficult to implement this upgrade in a fork and then try to submit the code to the original project.
At my organization, we use Bitbucket + hg and we would love to introduce something like a pep8/coverage checked for a diff, and this is the most interesting tool I have seen so far.
Thanks

Ive considered hg support but as I don't really use HG I did not pursue it too far.
Ill try to investigate the work involved again. It should totally be possible.

yeah, this would be a decent amount of work but should be possible. I might be able to work on this but I cannot promise anything in the near term. PRs welcome if you or someone else takes this on.

Well, I havent really delve into code so I'm not sure how to change it right now. I guess I would have to add the hg diff part and maybe perform some little changes in other files. Can you give me more details about how it works and what files should be updated? thanks

Sure
So at a high level this is how diff cover works.
Using the subprocess module diff-cover runs git commands to get the diff and find out information the project.
By parsing that output and comparing it to the output of a quality command like pep8 or a coverage report it can give the status of the lines that changed by ignoring the lines that have not.
It relies on the following commands.
git rev-parse --show-toplevel --encoding=utf-8
git diff <branch>..head --no-ext-diff
git diff --no-ext-diff
git diff --cached --no-ext-diff
So to create a way to do this with merc you would have to figure out rough equivelents of hese commands and be able to parse the output of those commands ( you might save time with the --git flag when running hg diff)
At a code level you would need hg versions of the GitDiffReporter in diff_reporter.py some a hg version of the GitPathTool in git_path.py (or generalize it to work with hg and git) and an hg version of the GitDiffTool
Then I think you just need an -hg switch in the commands themselves and read that to decide what instances of these objects to use.
If you think you are up for that let me know. Obviously I can support.
If you don't think you will be able to thats totally ok :-)
At the very least, do you know what the equivalent versions of those git commands would be in hg? Im not even sure hg has the same staging idea that git does.
Here is what I came up with
git rev-parse --show-toplevel --encoding=utf-8 - > hg root
git diff <branch>..head --no-ext-diff -> hg diff -r "ancestor(<branch>, .)"
git diff --no-ext-diff ->  hg diff --git
git diff --cached --no-ext-diff -> ?
But I have not used hg very much.

What does git diff --cached do?

I believe it's the same as git diff --staged

Ah, gotcha. There's no direct equivalent in mercurial: but only in the sense there is no staging area: hg diff is (AIUI) the same. But I guess that makes it that there's no direct equivalent to git diff.
(I'm interested in doing some of this porting, although I'm not sure that our process will match up totally: hg doesn't yet have native squashing of commits, so it's likely that a diff-cover process will need to work at the PR level, rather than the commit level).

Makes sense. Go for it!
The most common use case I know of is basically diffing PRS anyway

Because of the lacking mercurial support I created an alternative tool, using Node.js, diff-test-coverage.


NDTiff.index is not properly closed if no events are acquired

When executing
events = multi_d_acquisition_events(num_time_points=10, time_interval_s=0)

def hook_fn(_events):

    return None

with Acquisition('D:\\temp', 'acq', show_display=False,
 pre_hardware_hook_fn=hook_fn) as acq:

    acq.acquire(events)

The NDTiff.index created by the acquisition engine remains open in the file system.

Fixed https://github.com/micro-manager/NDTiffStorage/pull/61


Create Registry Entries

"registry_entries": [
	{
		"root": "HKLM",
		"key": "SOFTWARE\\MyApplicationName",
		"action": "createAndRemoveOnUninstall",
		"name": "Install_Dir",
		"type": "string",
		"value": "[INSTALLDIR]",
		"key_path": "no"
	}
],

Looks good but needs a test project using this feature.

I tested this with a simple sample and the key gets installed under WOW6432Node and not directly under 'SOFTWARE`. Is this intentional?

But this was a fully 64 bit installer, built on 64 bit Windows and installed on a 64 bit Windows. It should not have any 32 bit things in it.

Merged manually.


Soooo... you don't support Linux????

Crate versions
bevy version: e.g. 0.10
bevy_hanabi version: e.g. 0.6.1
Describe the bug
When compiling any example: error: The platform you're compiling for is not supported by winit
Expected behavior
Compile....
To Reproduce
I guess try to compile on any Ubuntu based distro?
Screenshots

CI build on Ubuntu 22.04

I mean, that's cool and all, but my Bevy game compiles with no issue and it to relies on winit
So the ball is kind in your court

PS: If you don't have a Linux install I would be happy to help you test any changes you make to the Config.toml in order to fix the issue.
Also, let me know if you need more information

How did you compile the examples?

Like it's shown on the README.md and run_examples.sh
For Example:
cargo r --example portal --no-default-features --features="bevy/bevy_winit bevy/bevy_pbr 3d"

And
cargo run --example portal --features="bevy/bevy_winit bevy/bevy_pbr bevy/png 3d"

I've also tried other examples other than portal