Dhook/beta merge conflict resolution

Alaska Airlines Pull Request
Please include a summary of the change and which issue is fixed. Please also include relevant motivation and context. List any dependencies that are required for this change.
Resolves: # (issue, if applicable)
Summary:
Please summarize the scope of the changes you have submitted, what the intent of the work is and anything that describes the before/after state of the project.
Type of change:
Please delete options that are not relevant.

[x] Other (fix beta -> master merge conflicts)

Checklist:

[x] My update follows the CONTRIBUTING guidelines of this project
[x] I have performed a self-review of my own update

By submitting this Pull Request, I confirm that my contribution is made under the terms of the Apache 2.0 license.
Pull Requests will be evaluated by their quality of update and whether it is consistent with the goals and values of this project. Any submission is to be considered a conversation between the submitter and the maintainers of this project and may require changes to your submission.
Thank you for your submission!
-- Auro Design System Team

 Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you all sign our Contributor License Agreement before we can accept your contribution.2 out of 3 committers have signed the CLA.:white_check_mark: jordanjones243:white_check_mark: jason-capsule42:x: semantic-release-botYou have signed the CLA already but the status is still pending? Let us recheck it.

:tada: This PR is included in version 7.3.0-beta.7 :tada:
The release is available on:

npm package (@beta dist-tag)
GitHub release

Your semantic-release bot :package::rocket:


Multiple Pages Feature

Hello,
I've done a modification that uses a single long list of resistor values (rather than the original 2D array) and outputs to multiple pages where required. If you're interested I can fork & make a pull request.
My update still uses the same three label layouts, but adds a column & row to the layout type. Then uses numpy to pad & rearrange the list into a 2D array, which are rendered and exported as before. I'm not a big python programmer so it may not be the most elegant but it seems to work well.

In general I like the idea. There is one usecase, though, which requires a 2D layout: if you want to print on sticker pages that have stickers removed already. For example, you printed all your stickers and need another new value. You have a half used sticker page, so you want to position the new value on the next unused sticker.
I specifically did the 2d layout for this usecase, because I didn't know from the beginning which resistor types I will have in the bags and printed new ones as I bought them.

Of course! I definitely did it more for my specific use case which was just "making a new set, no regard for previous prints," but that's something I'll expand upon a little more to see if there's a user friendly (esp wrt non-programmers) for it to work. Either way I'm happy to leave it just as a personal fork if you don't think it's necessary.
And yeah numpy was not my ideal - it's a lot for some simple array maths, it was more chosen for simplicity of programming. But also something I will investigate replacing with a couple loops instead.
Here's the pastebin if you'd like to take a look though: https://pastebin.com/LafCNFM8

In general, I think this is not a bad idea, but it would need wie some cleanup. I don't want to add any extra complexity in main(). That includes the comments inside of it, and the README.md file. I spent a lot of time to structure the project in a way that the readme file and in general the entire usage of the script is as simple as possible. Don't underestimate the effect such a change would have on those.

All good points. I'll have a think and see what I can come up with that work with the existing methods. And even then, no dramas if you prefer not to incorporate any changes, as I said I'm happy to leave it as a fork. Thanks!

After merging #18  and #16, it is now supported that either a 1D or 2D array can get specified, and it will get automatically broken down into rows, columns and pages.
Does this satisfy your usecase?
Greetz

@azrieltomas Without further activity, I will close this issue in a couple of days because I assume that the recent changes solved your problem.

Sorry for the delay - yeah that's fantastic. Thanks

Sorry for the delay - yeah that's fantastic. Thanks

No problem, glad to hear :)
Didn't mean to pressure you, just weren't sure if you are still active on github and see my message :)


CAMEL-21477 - Camel-Google-Storage: Add prefix option to consumer

Description

Target

[x] I checked that the commit is targeting the correct branch (note that Camel 3 uses camel-3.x, whereas Camel 4 uses the main branch)

Tracking

[ ] If this is a large change, bug fix, or code improvement, I checked there is a JIRA issue filed for the change (usually before you start working on it).

Apache Camel coding standards and style

[x] I checked that each commit in the pull request has a meaningful subject line and body.

[x] I have run mvn clean install -DskipTests locally from root folder and I have committed all auto-generated changes.

/component-tests google


How to prevent types from overflowing?

🤔 Question
ts-toolbelt has been a revelation for me. I always felt typescript had great potential but fell short on tooling for its type system and ts-toolbelt delivers on that. As a result I've been more adventurous with my type programming, so thank you!
As a result of my newfound adventurousness, I find myself coming up against performance problems in type computation, resulting in poor intellisense and compiler errors such as: Type instantiation is excessively deep and possibly infinite...
Describe your question
You must have had to battle with these issues developing ts-toolbelt. Can you share with us some of your experience on how you diagnosed and solved type computation performance issues?
Specifically, I'm interested in any tools, techniques or rules of thumb you might be able to share.
Search tags, topics
typescript, type resolution, type computation, performance, type debugging

Usually  you don't hit these kind of errors with simple types. But this is likely to happen with recursive types, which are not officially supported type TypeScript but by ts-toolbelt instead.
TypeScript is smart and it forces you to keep a type count before it tells you Type instantiation is excessively deep and possibly infinite. This should force you to:

Keep your types short and neat
Keep your type count under 50
Prevent infinite loop for recursive types

Since recursive types are not directly supported by ts, it is your responsibility to make sure that your type won't overflow. In other words, it MUST have a proper terminating condition. This should be tested by you. The toolbelt enables you to do tests, check this out on the README.
If your (recursive) type overflows, it can be because:

Of no terminating condition
Type is too complex for TypeScript

It is important to note that the type system was not designed to do scripting.
However, like you pointed out, there is a need for a more modular type system.
It's is good to (always) ask yourself if the computation is worth it, or could it be narrowed down to something simpler? If not, then use ts-toolbelt.
So, a good rule of the thumb is: "are there more than 50 instructions within my type?"
There is one trick that I use for the recursive types described here https://github.com/pirix-gh/ts-toolbelt/issues/5. This one will prevent TS from evaluating heavy recursive types immediately, especially when they are combined together and prevent that instantiation error. You can check this out in the codebase, look for extends infer X.

Wow! Thanks for the write up!
I understand the 50 instruction limit okay, it makes sense... in my case my types are complex, involving higher-kinded types but at least in theory they shouldn't be recursive.
The difficulty for me is tracing typescript's computation logic... it COULD be that I've introduced a recursion somewhere unexpectedly... but how can I discover this?
Also, what counts as a single 'instruction'...? e.g. is it a single type declaration, or a branch of logic in a type alias?
And is there a way I can evaluate the 'instruction count' for a particular type's instantiation?
Also, that defer syntax looks extremely useful. It would be useful to have a 'recipe book' of these kind of manipulation that force the typescript compiler to do something 'out of the ordinary'... Computer, Clean and Cast are good example also.

I also noticed that in 3.9.0, my excessively deep type error goes away... I'm speculating that this is to do with the optimisations they introduced (https://devblogs.microsoft.com/typescript/announcing-typescript-3-9-beta/#speed-improvements)
Any insight into whether the new version changes the game?

I agree, it is difficult to trace those errors. You can either start compiling your own version of TypeScript so that you can display useful info... Or, you can use the --extendedDiagnostics flag which will give you a somewhat clearer understanding of how your type is behaving. You'll be able to see your type count there.
What I call a single instruction is basically either a (naked) extends clause, mapped type, or simply a return. So if you'd nest such utilities in a parent type, it counts the branches of logic within it too... And if it hits that count before finishing, then it throws you that message. You see, it's your whole type that has to stay lightweight, all your logic branches within it.
And it's not always easy. Sometimes, you'd be better off rewriting the whole thing from scratch rather than using ts-toolbelt, just to save yourself from that count. A simple approach is to disable some of your logic with dummy data, then see which parts are under-performing. But maybe you're doing something wrong, and you can as well post your type in another question.
With the type system running on top of JavaScript, we clearly lose performance. IMHO, we would have been better off if the TS server had native performance so that we could have a more scripted (and faster) type system... But maybe, as TypeScript grows, this will become more obvious in the future.

Thanks for the info, I'm gland they've put effort into it :)


[FEATURE] A exponent calculator for large values through binary exponentiation

Detailed description
My contribution will make it easier and faster to calculate large exponents.
Context
The pow function in STL has a return type of double and gives wrong values at large scale thus we an use binary exponentiation to avoid this miscalculation.
Possible implementation
No response
Additional information
No response

Please Assign this to me

Hello, Can you please assign this issue to me?
Thanks in advance :)

Hello, I would like to work on this issue. Can you please assign it to me?

Can you assign this to me?


⚠ ClamAV has degraded performance

In 6725286, ClamAV (https://spamassassin.apache.org/) experienced degraded performance:

HTTP code: 200
Response time: 466 ms

Resolved: ClamAV performance has improved in b661e21.


Added removeRoles function that removes all existing UserRoles for th…

Added removeRoles function that removes all existing UserRoles for the provided user that are not in the given list of roles. Replaced removing all roles for userUpdate. Added check for addRoles, if the user role already exists
#89

@AlexBoulyga thank-you so much for this PR!
I've used this PR for inspiration and created a new one at https://github.com/grails-plugins/grails-spring-security-ui/pull/95
I've also verified that User updates work with this PR ☝ and included an additional bug fix.
Thanks again!


Output one CSS file per line

well that's odd... because I issued a PR exactly for that a while ago.

Already fixed. I first worked with version 0.3 and proposed this PR without checking version 0.4 and master.


SCSSLint::Location error linting Compass file

When I run scss-lint out of the box like this, it works great:
$ scss-lint public/assets/web2/scss

When I add this configuration file, adding the path to our SCSS files:
scss_files: 'public/assets/web2/scss/**/*.scss'

I get the following error:
$ scss-lint
SCSSLint::Linter::SpaceAfterComma raised unexpected error linting file vendor/bundle/ruby/2.0.0/gems/compass-0.12.2/frameworks/compass/stylesheets/compass/css3/_text-shadow.scss: 'Length must be more than 0, passed 0'
/usr/local/var/rbenv/versions/2.1.5/lib/ruby/gems/2.1.0/gems/scss-lint-0.32.0/lib/scss_lint/location.rb:14:in `initialize'
/usr/local/var/rbenv/versions/2.1.5/lib/ruby/gems/2.1.0/gems/scss-lint-0.32.0/lib/scss_lint/linter.rb:57:in `new'
/usr/local/var/rbenv/versions/2.1.5/lib/ruby/gems/2.1.0/gems/scss-lint-0.32.0/lib/scss_lint/linter.rb:57:in `location_from_range'
/usr/local/var/rbenv/versions/2.1.5/lib/ruby/gems/2.1.0/gems/scss-lint-0.32.0/lib/scss_lint/linter.rb:149:in `extract_location'
/usr/local/var/rbenv/versions/2.1.5/lib/ruby/gems/2.1.0/gems/scss-lint-0.32.0/lib/scss_lint/linter.rb:40:in `add_lint'
/usr/local/var/rbenv/versions/2.1.5/lib/ruby/gems/2.1.0/gems/scss-lint-0.32.0/lib/scss_lint/linter/space_after_comma.rb:81:in `block in check_commas_after_args'
/usr/local/var/rbenv/versions/2.1.5/lib/ruby/gems/2.1.0/gems/scss-lint-0.32.0/lib/scss_lint/linter/space_after_comma.rb:68:in `each'
/usr/local/var/rbenv/versions/2.1.5/lib/ruby/gems/2.1.0/gems/scss-lint-0.32.0/lib/scss_lint/linter/space_after_comma.rb:68:in `check_commas_after_args'
/usr/local/var/rbenv/versions/2.1.5/lib/ruby/gems/2.1.0/gems/scss-lint-0.32.0/lib/scss_lint/linter/space_after_comma.rb:50:in `check_invocation'
/usr/local/var/rbenv/versions/2.1.5/lib/ruby/gems/2.1.0/gems/scss-lint-0.32.0/lib/scss_lint/linter/space_after_comma.rb:22:in `visit_script_funcall'
/usr/local/var/rbenv/versions/2.1.5/lib/ruby/gems/2.1.0/gems/sass-3.4.9/lib/sass/tree/visitors/base.rb:36:in `visit'
/usr/local/var/rbenv/versions/2.1.5/lib/ruby/gems/2.1.0/gems/scss-lint-0.32.0/lib/scss_lint/linter.rb:127:in `visit'
/usr/local/var/rbenv/versions/2.1.5/lib/ruby/gems/2.1.0/gems/scss-lint-0.32.0/lib/scss_lint/linter.rb:138:in `block in visit_children'
/usr/local/var/rbenv/versions/2.1.5/lib/ruby/gems/2.1.0/gems/scss-lint-0.32.0/lib/scss_lint/linter.rb:136:in `each'
/usr/local/var/rbenv/versions/2.1.5/lib/ruby/gems/2.1.0/gems/scss-lint-0.32.0/lib/scss_lint/linter.rb:136:in `visit_children'
/usr/local/var/rbenv/versions/2.1.5/lib/ruby/gems/2.1.0/gems/sass-3.4.9/lib/sass/tree/visitors/base.rb:38:in `visit'
/usr/local/var/rbenv/versions/2.1.5/lib/ruby/gems/2.1.0/gems/scss-lint-0.32.0/lib/scss_lint/linter.rb:127:in `visit'
/usr/local/var/rbenv/versions/2.1.5/lib/ruby/gems/2.1.0/gems/scss-lint-0.32.0/lib/scss_lint/linter.rb:138:in `block in visit_children'
/usr/local/var/rbenv/versions/2.1.5/lib/ruby/gems/2.1.0/gems/scss-lint-0.32.0/lib/scss_lint/linter.rb:136:in `each'
/usr/local/var/rbenv/versions/2.1.5/lib/ruby/gems/2.1.0/gems/scss-lint-0.32.0/lib/scss_lint/linter.rb:136:in `visit_children'
/usr/local/var/rbenv/versions/2.1.5/lib/ruby/gems/2.1.0/gems/sass-3.4.9/lib/sass/tree/visitors/base.rb:36:in `block in visit'
/usr/local/var/rbenv/versions/2.1.5/lib/ruby/gems/2.1.0/gems/scss-lint-0.32.0/lib/scss_lint/linter/space_after_comma.rb:8:in `visit_mixindef'
/usr/local/var/rbenv/versions/2.1.5/lib/ruby/gems/2.1.0/gems/sass-3.4.9/lib/sass/tree/visitors/base.rb:36:in `visit'
/usr/local/var/rbenv/versions/2.1.5/lib/ruby/gems/2.1.0/gems/scss-lint-0.32.0/lib/scss_lint/linter.rb:127:in `visit'
/usr/local/var/rbenv/versions/2.1.5/lib/ruby/gems/2.1.0/gems/scss-lint-0.32.0/lib/scss_lint/linter.rb:138:in `block in visit_children'
/usr/local/var/rbenv/versions/2.1.5/lib/ruby/gems/2.1.0/gems/scss-lint-0.32.0/lib/scss_lint/linter.rb:136:in `each'
/usr/local/var/rbenv/versions/2.1.5/lib/ruby/gems/2.1.0/gems/scss-lint-0.32.0/lib/scss_lint/linter.rb:136:in `visit_children'
/usr/local/var/rbenv/versions/2.1.5/lib/ruby/gems/2.1.0/gems/sass-3.4.9/lib/sass/tree/visitors/base.rb:38:in `visit'
/usr/local/var/rbenv/versions/2.1.5/lib/ruby/gems/2.1.0/gems/scss-lint-0.32.0/lib/scss_lint/linter.rb:127:in `visit'
/usr/local/var/rbenv/versions/2.1.5/lib/ruby/gems/2.1.0/gems/scss-lint-0.32.0/lib/scss_lint/linter.rb:21:in `run'
/usr/local/var/rbenv/versions/2.1.5/lib/ruby/gems/2.1.0/gems/scss-lint-0.32.0/lib/scss_lint/runner.rb:58:in `run_linter'
/usr/local/var/rbenv/versions/2.1.5/lib/ruby/gems/2.1.0/gems/scss-lint-0.32.0/lib/scss_lint/runner.rb:39:in `block in find_lints'
/usr/local/var/rbenv/versions/2.1.5/lib/ruby/gems/2.1.0/gems/scss-lint-0.32.0/lib/scss_lint/runner.rb:37:in `each'
/usr/local/var/rbenv/versions/2.1.5/lib/ruby/gems/2.1.0/gems/scss-lint-0.32.0/lib/scss_lint/runner.rb:37:in `find_lints'
/usr/local/var/rbenv/versions/2.1.5/lib/ruby/gems/2.1.0/gems/scss-lint-0.32.0/lib/scss_lint/runner.rb:21:in `block in run'
/usr/local/var/rbenv/versions/2.1.5/lib/ruby/gems/2.1.0/gems/scss-lint-0.32.0/lib/scss_lint/runner.rb:20:in `each'
/usr/local/var/rbenv/versions/2.1.5/lib/ruby/gems/2.1.0/gems/scss-lint-0.32.0/lib/scss_lint/runner.rb:20:in `run'
/usr/local/var/rbenv/versions/2.1.5/lib/ruby/gems/2.1.0/gems/scss-lint-0.32.0/lib/scss_lint/cli.rb:52:in `scan_for_lints'
/usr/local/var/rbenv/versions/2.1.5/lib/ruby/gems/2.1.0/gems/scss-lint-0.32.0/lib/scss_lint/cli.rb:46:in `act_on_options'
/usr/local/var/rbenv/versions/2.1.5/lib/ruby/gems/2.1.0/gems/scss-lint-0.32.0/lib/scss_lint/cli.rb:25:in `run'
/usr/local/var/rbenv/versions/2.1.5/lib/ruby/gems/2.1.0/gems/scss-lint-0.32.0/bin/scss-lint:6:in `<top (required)>'
/usr/local/var/rbenv/versions/2.1.5/bin/scss-lint:23:in `load'
/usr/local/var/rbenv/versions/2.1.5/bin/scss-lint:23:in `<main>'
Report this bug at https://github.com/causes/scss-lint/issues

There's a few things going on here, I'm not sure what the issue is.
Thank you for creating scss-lint — it's exactly what we needed. So great.

Nevermind. It's working. I was in a funky out-of-date Gem situation.

@moubry do you remember how you fixed this? we just upgraded to rails4 and seeing this again.
#yourFormarbuddy... :)

@mmuneer I honestly have no idea. Maybe make sure you're running it in the context of the bundle bundle exec scss-lint. If that doesn't work, perhaps uninstalling all gems gem uninstall --all and trying again?


python sdk: fix several bugs regarding avto <-> beam schema conversion

attempts to fix several issues regarding avro <-> beam schema conversion in the python sdk

https://github.com/apache/beam/issues/30750
VarInt.java expects ints and longs to be unsigned, however the current implementation just returns the signed number, which causes an IOException("varint overflow " + r) exception to get thrown when using the converted beam schema with a SqlTransform

NOTE: I'm not entirely sure about my logic here, since the resulting beam.Rows have the converted 2's complement number will get returned if the user doesn't apply a SqlTransform to their pipeline, but the previous implementation was also causing errors, so I'll need some help here

in avroio.py's beam_value_to_avro_value function, it recurses on avro_value_to_beam_value, rather than the beam_value_to_avro_value function. I'm 99% sure this should be the other way around, however since the two functions are so similar this previously wasn't causing issues. I only noticed it when I added the custom logic to convert to/from signed and unsigned numbers.

Thank you for your contribution! Follow this checklist to help us incorporate your contribution quickly and easily:

[x] Mention the appropriate issue in your description (for example: addresses #123), if applicable. This will automatically add a link to the pull request in the issue. If you would like the issue to automatically close on merging the pull request, comment fixes #<ISSUE NUMBER> instead.
[ ] Update CHANGES.md with noteworthy changes.
[ ] If this contribution is large, please file an Apache Individual Contributor License Agreement.

See the Contributor Guide for more tips on how to make review process smoother.
To check the build health, please visit https://github.com/apache/beam/blob/master/.test-infra/BUILD_STATUS.md
GitHub Actions Tests Status (on master branch)

See CI.md for more information about GitHub Actions CI or the workflows README to see a list of phrases to trigger workflows.

CC: @robertwb , mentioned in the description but I'm not entirely sure about my logic for converting between signed and unsigned 2's complement numbers to satisfy VarInt.java. Would you be able to assist me here?

tests failing due to the SqlTransform shadowJar not being available in the test environment. Building the jar locally via  ./gradlew :sdks:java:extensions:sql:expansion-service:shadowJar makes the tests pass. Not sure how to set this up in the CI environment.

assign set of reviewers
see comment above about the failing tests.

@ahmedabu98 could you take another look at this PR?

@benkonz thanks for making the changes. will try to take a look next week

@ahmedabu98 thanks for taking another look at my PR! I've been pretty busy lately, but I'll try to find some time this week to address your comments.

@ahmedabu98 I addressed your review comments, could you take another look? Thanks!

This breaks validatesCrossLanguageRunnerPythonUsingSql  test:
e.g. https://github.com/apache/beam/actions/runs/8820828279/job/24215280605
FAILED apache_beam/io/avroio_test.py::TestFastAvro::test_avro_schema_to_beam_schema_with_nullable_atomic_fields - OSError: No files found based on the file pattern /tmp/tmphd4i_w_b*


🐛 formatOnSave does not respect formatter.ignore

VS Code version
1.89.0
Extension version
2.2.2
Biome version
1.7.2
Operating system

[X] Windows
[ ] macOS
[X] Linux

Description
This issue is identical to #189 which has been fixed for files.ignore.

If 'format on save' is turned on, using formatter.ignore the Biome.js extension will format files that should be ignored.
// .vscode/settings.json
"settings": {
  "editor.formatOnSave": true
}

Using files.ignore the issue is fixed.
// biome.json
{
  "files": {
    "ignore": ["node_modules", "no-format.js"]
  }
}

Using formatter.ignore the issue still persists.
// biome.json
{
  "formatter": {
    "ignore": ["node_modules", "no-format.js"]
  }
}

Steps to reproduce

Clone the repo:

git clone https://github.com/jrson83/biome-ignore-issue.git
cd biome-ignore-issue
pnpm install

Open packages/core/src/no-format.js and save the file, you see it formats.

Expected behavior

Since the issue is identical to #189 which has been fixed for files.ignore, I expect the same behaviour using formatter.ignore.
If you run biome.js in the terminal, e.g. pnpm run format the files are NOT formatted.

Does this issue occur when using the CLI directly?
No
Logs
No response

Moving this to the main repo, because it appears to be related to the LSP.


Replacing ACS on existing Sharepoint Azure Extranet

Kirk - We are attempting to cut over an existing Azure enterprise application using SharePoint 2013 (using ACS) to a new enterprise application using this documentation. I am in the process of creating the new enterprise application in Step 3. Our existing Sharepoint site is public facing at a URL of https://www.site.com. Do I need to delete this enterprise application before I create the new one? The new one needs to have the same URL, so deleting the old one would make sense. Also, since the ACS tools are no longer available I am fearful that if this new method you describe in the documentation does not work for whatever reason I will not be able to restore our old site. Thoughts?

Migrating from ACS to AzureAD and migrating users is out of scope for this document. In theory (I haven't tested), you set the realm in AAD the same as you did in ACS. Then you should only need to update the existing SPTrustedIdentityProvider to set the properties for the reply URL and update the cert similar to the steps at the end of the article, assuming the claims mapping remains the same. There should be no need to delete the SharePoint Web Application.

Do you recommend wiping out my Azure/ACS settings (keeping my SharePoint web app as-is) and then building out a new enterprise application to point to my old SharePoint site? I imagine I will need to redo permissions on each site? Thanks, I'm having a hard time planning how I can accomplish this.

The only part that matters is the SPTrustedIdentityTokenIssuer in SharePoint as it is the thing that decides which service (AAD or ACS) to go to based on the login URL and the signing certificate. I'd leave the existing settings in AAD and ACS as-is. Follow the doc to create a new application registration, but make sure to use the same realm string value as you did previously with ACS. Download the new signing certificate and add to SharePoint as shown in the doc. Then update (don't delete and replace) the SPTrustedIdentityTokenIssuer with the new logon URL and certificate. The user identity should remain the same, no need to change permissions or anything. By using the same SPTrustedIdentityTokenIssuer, the user identifier in the database remains unchanged:
<EMAIL_ADDRESS>If, instead, you created a new SPTrustedIdentityTokenIssuer according to the article, it would look like:
<EMAIL_ADDRESS>By reusing the same SPTrustedIdentityTokenIssuer, the string isn't changed. If we create a new one, the string is changed and the user identities in the database won't match.
If, by some unfortunate reason, you deleted the SPTrustedIdentityTokenIssuer, you could create a new one and migrate the users using the Move-SPUser command in a script similar to what is in the following blog post:
https://blogs.msdn.microsoft.com/sambetts/2014/09/03/how-to-migrate-sharepoint-users-to-adfs/
Hope this helps!

Thanks for the response. I will give it a shot to see what happens. I really appreciate your help with this.


Pubsub with embedded js-ipfs not working

I was trying to demo https://github.com/tableflip/ipfs-pubsub-chat-example at the dev meetings but wasn’t able to as it wasn’t working. Building a dev build ‘npm run watch’ fixed the issue.

FYI I was seeing the error mentioned here: https://github.com/ipfs/aegir/pull/214


161 Add ontological modules generation

Signed-off-by: Rafał Trójczak<EMAIL_ADDRESS>

If I took the pizza ontology and used it in the viewer would it generate the modules by itself? Or test it in another way?

If I took the pizza ontology and used it in the viewer would it generate the modules by itself? Or test it in another way?

Yes, indeed. It should display all loaded ontologies as a flat list of modules. The only requirement is that this ontology should have a defined ontology label.

I am testing this PR using docker and IDMP set of ontologies (in /docker/runtime/server/ontologies) folder
There seems to be a problem with the tree of ontologies displayed in the left-hand site.

I was not able to find ISO11240-IdentificationAndExchangeOfUnitsOfMeasure ontology although the ontology is loaded.
Also the tree structure seems to include only FIBO domain, modules, and ontologies.

onto-viewer seems to ignore all files with the ttl extension - it loads only .rdf files.
For example, I was not able to find SubstanceIdentifier resource, although it is defined in iso11238.ttl file

@mereolog Yes, indeed Turtle files are ignored but this was always the case. If we want to support other types of serialization I propose to create a separate issue for that matter.

@mereolog Yes, indeed Turtle files are ignored but this was always the case. If we want to support other types of serialization I propose to create a separate issue for that matter.

@mereolog Yes, indeed Turtle files are ignored but this was always the case. If we want to support other types of serialization I propose to create a separate issue for that matter.

See: https://github.com/edmcouncil/onto-viewer/issues/168.

For the GAO ontology, a module is created that contains the ontology and an empty module named "owl".
I checked several ontologies such as urbanOnto, ontoghis, bdotk10k, pizzaOntology and ontologies from https://bioportal.bioontology.org/ontologies.
The pizza and urbanoOnto ontologies do not load. In the others only the owl module is created with nothing in it.

I am testing this PR using docker and IDMP set of ontologies (in /docker/runtime/server/ontologies) folder There seems to be a problem with the tree of ontologies displayed in the left-hand site.  I was not able to find ISO11240-IdentificationAndExchangeOfUnitsOfMeasure ontology although the ontology is loaded. Also the tree structure seems to include only FIBO domain, modules, and ontologies.

With the same setup I have this:

@patrycjamia Ontologies have to have .rdf or .owl extensions for now. That's why the OntoUrban ontologies do not load. I don't know why the Pizza ontology doesn't load but it doesn't have anything to do with the new generation of modules.

Details of some ontologies can't be displayed because the IRIs of these ontologies don't end with / which is the OV requirement...

@mereolog I propose to create a new issue to change the way how ontologies are looked for within the application. For now, the logic is as follows: there is one endpoint for obtaining both ontologies and different types of entities; it is assumed that an ontology has an IRI ending with /. This, obviously, is not correct for many ontologies. I think we should create two separate endpoints: one for ontologies and one for other types of entities.

Different icons are displayed for "modularized ontologies":

Perhaps this one is for @dasawanaka or @patrycjamia

@mereolog, @patrycjamia, @dasawanaka I've updated PR.

Modules are generated but are empty. When clicked, all the ontology resources should appear. classes etc.

@dasawanaka @patrycjamia Your problems are related to the fact that in the current form the OV can only find an ontology when its IRI ends with /. We already have a task for this: https://github.com/edmcouncil/onto-viewer/issues/171


bug: rollback when something get wrong

In case of error while creating a task I end up with a partially loaded template on Todoist.com.
As work around I have to manually delete all created objects on Todoist.com
Expected behavior
The application should:

keep track of new objects and automatically delete them on failure
keep previous status of modified tasks and undo the changes

OS (please complete the following information):

OS: Windows
Python version: 3.10.4

Linked issue #16


[prtester.py] tolerate failed termpad.com uploads

termpad.com is down for a few hours now (hopefully not permanently). The "Generate HTML" check of any pull requests will fail, because the preview upload would run into a timeout.
In my opinion, termpad.com being down should not cause the pipeline to fail, preventing it from generating the "Pull request artifacts" comment.
This PR will catch the timeout exception, log it and continue. The "Pull request artifacts" comment will look the same including the warnings and errors. Only the "Context" column will not be linked to preview on termpad.com.
Additionally a new argument --termpad-instance gets add, which allows to use a different termpad instance like e.g. termpad.planethawleywood.com.

looks good
@Bockiii

user1234... has reworked the prtester file quite substantially since I created it, so I dont really have an opinion tbh.
I would however suggest to maybe host "our own" instance of pastebin for all the PR tests. You can host one that only allows users to upload something (its the default for pastebin.com for example), so you can create only one user (the pr tester user), have their API key in the repo secrets and use that to host the tests.
This would make sure that we have control over the tests (could be deleted after x months or after PR closure etc), closing registration and only allowing the one user will avoid random people uploading nasty stuff into it etc.
So @dvikan if you have the capacity, maybe setup that and then we reconfigure the prtester to send the tests to that pastebin

The "Generate HTML" check now failed for the first PR !4270 because termpad.com is still down.
Sadly the owner of termpad.com confirmed that its intentionally down and "won't be back anytime soon": https://github.com/SpyrosRoum/termpad/issues/14

@dvikan are you planning on setting up your own termpad instance or not? If not, instead of changing the code, you could just deactivate the test until someone finds an alternative

I have a new idea, which makes it even easier:
You can use github to get a github.io website for projects ( https://pages.github.com/ ). We could use this for two things, one would be this (instead of uploading the html files to a pastebin, just add it to the repo that is hosted by github and it will automatically render, see a quick example here: https://bockiii.github.io/prs/1234/before.html ), another would be to show status of current bridges (the bridge-tester that I worked on before, I would pick that thread up again).
Setup of the github.io site should be easy, adding the files is easy (theres a workflow module for it, requires little work) and we will have full control over the files (e.g. remove the files after the PR is closed etc). Win-win for all involved.

Looks like @dvikan has been afk for a month. @Mynacol do you want to set up said extra repo and github.io url?
If you want, you can add me as a maintainer again and I'll come back to set this up.

yes I afk a bit.
i invited you to be maintainer.
feel free to try out your idea @Bockiii

hey @User123698745 , the test storage has been reworked and should not fail again since we are now relying on github pages instead of termpad. Thanks for the trigger to do this!


[CI SKIP] Fix. Migration userguide parameter error

Fix. Migration userguide parameter error
Checklist:

[x] Securely signed commits
[ ] Component(s) with PHPdocs
[ ] Unit testing, with >80% coverage
[x] User guide updated
[ ] Conforms to style guide

Thank you! Good catch.


Publish Current updates as 11.0.0-pre5

The current version of Maplibre  11.0.0-pre4 still uses mapbox under the wood.
I start working on updating the android plugins to be used with Maplibre instead of Mapbox.
I would need the android-geojson plugin 6.0.0 which has the correct imports/updates but current version( 11.0.0-pre4) uses 5.9.0 which still uses Mapbox under the wood.
Upon checking source code, I can see that maplibre android has been correctly updated to reflect these changes, however they have not been published hence I diont have access to them in order to work on the plugins.
I'm simply requesting to publish current state as 11.0.0-pre5 so we can move on.
Thanks

Sure.

Version 11.0.0-pre4 still uses con.mapbox.geojson instead of org.maplibre.geojson.
Upon checking the repository code, I can see it's been updated to use org.maplibre... but the published version on Maven Central doesn't include that update.
I'm looking to update all the android plugins to use org.maplibre, however most of them will depends on mapLibre.android and its dependencies but current version 11.0.0-pre4 still uses mapbox instead of maplibre when it comes to package naming.

It's released! 👍  https://github.com/maplibre/maplibre-native/releases/tag/android-v11.0.0-pre5

Beautiful!
It looks good on my end as well, thank you !


FIX: when request full url, make the url itself query string valid

I want to use a full link(with query string) send request
$client->send($request, [ 'query' => [] ]);
When using GuzzleHttp/Client as the client, this code will remove the query string on my original link

Get the next page through the Shopify Link headers,  I want to use this link directly.  thanks~


rw_image_access_qualifier incorrect check for optional feature

// test_rw_image_access_qualifier.cpp
// Support for read-write image arguments is required for an
// or 2.X device if the device supports images. In OpenCL-3.0
// read-write images are optional. This test is already being skipped
// for 1.X devices.
if (get_device_cl_version(device_id) >= Version(3, 0))
{
cl_uint are_rw_images_supported{};
test_error(
clGetDeviceInfo(device_id, CL_DEVICE_MAX_READ_IMAGE_ARGS, <= should be   CL_DEVICE_MAX_READ_WRITE_IMAGE_ARGS
sizeof(are_rw_images_supported),
&are_rw_images_supported, nullptr),
"clGetDeviceInfo failed for CL_DEVICE_MAX_READ_IMAGE_ARGS\n");
if (0 == are_rw_images_supported)
{
return TEST_SKIPPED_ITSELF;
}
}

Most of these checks were replaced with checkForReadWriteImageSupport as part of https://github.com/KhronosGroup/OpenCL-CTS/pull/965/. Looks like this was missed out.

fixed by #1072


Add Cere Network

Added Cere Network to the registry.

Hello @bkchr @BenWhiteJam
How long does a business review usually take?

Sorry for the late response, there is not really a timeline. It depends on how much information is public, how much has been built and what the testnet looks like, etc.


Add information to template id_rsa.sample

Add information in template to know if private or public id_rsa

@Lycisca
I try build image with id_rsa.pub but it failed with
Enter passphrase for /root/.ssh/id_rsa: ERROR

This docker image it's for development but if you think it's insecure copy your id_rsa in the development container, you can try add the id_rsa in a volume like this.
services:
  web:
    volumes:
      - ~/.ssh/id_rsa:/root/.ssh/id_rsa:ro


Metainfo file has faulty and wrong links to set the Flathub ones

Referenced here: https://github.com/flathub/com.yubico.yubioath/issues/1

Me commented
The website link is pointing to the "Issues" manager (to create a new ticket to be exact) and seems that any other link was added.
Check at the bottom of the following image to see the preview link in which the button will redirect an user.

bilelmoussaoui commented
This comes from the upstream metainfo file https://github.com/Yubico/yubioath-desktop/blob/master/resources/com.yubico.yubioath.appdata.xml#L11 and should be fixed there.

I think we will have the same confusion behavior in Snap and other catalogs.

Thanks, yes, this should probably just be a link to yubico.com. Will fix.

Thanks, yes, this should probably just be a link to yubico.com. Will fix.

Don't forget that other links are also needed. This report was not just to solve that wrong link but also to point that other links like that one to the "issues manager" should be too separated.


Error applying shop.0004_ckeditor31 migration.

I get this error trying to run shop.0004_ckeditor migration, using MySQL:
django.db.utils.OperationalError: (1093, "You can't specify target table 'cms_cmsplugin' for update in FROM clause")

Maybe has to do with this?
http://stackoverflow.com/questions/4429319/you-cant-specify-target-table-for-update-in-from-clause
When I Changed:
"SELECT id FROM  cms_cmsplugin WHERE plugin_type='AcceptConditionFormPlugin');"

to:
"SELECT id FROM (SELECT * FROM cms_cmsplugin) AS plugins WHERE plugin_type='AcceptConditionFormPlugin');"

the migrations ran fine.

Thanks for reporting.
Could you please create a pull request.
@rfleschenberg shall we add mysql and postgres to the testing matrix, currently django-shop does not use raw SQL statements, except for migrations.

Testing on Postgres and MySQL seems like a good idea.
I am surprised that this error only pops up now. Nobody ran this migration on MySQL before? Anyway, thanks for the PR!


Allow customers to parse certificate, key, and secret IDs from URLs

We had an internal customer request to allow customers to pass a URI to methods instead of just a name, since, for example, customers can copy the URI from the portal and wouldn't otherwise have to parse the name out themselves.
Things to consider,

Do we provide method overloads to take a Uri, or just expose (through abstraction, perhaps) our existing internal APIs that parse it for them?
If the methods to take a full Uri, do we assert that it has the same base Uri for which the client class was instantiated?

@heaths, perhaps this could be solved by making KeyVaultIdentitifier public to allow people to parse the Id? I agree it's a bit more awkward than just having the method take a uri.
The other possibility is we could create classes similar to the KeyResolver, which is vault agnostic, for Secrets and Certificates.

+1 on the idea of a KeyResolve-like helper.

Yeah, the resolver helper can work.
But its implementation details are not quite straight,
as with Key Resolver we have the Crypto client tied to a Key.
In Secret, Key and Certificate cases clients are tied to vault.
We will need to validate that key vault identifers are of the vault to which client is configured for too.

Note: based on guidelines, we should also provide a throwing variant of the TryParse method.


Refactor container activities

#254

Again, #357 should be merged first.
There's one major roadblock that's preventing me from proceeding: Twitter only lets you receive onActivityResults from an activity so there are three options:

Make more breaking api changes 😞 that would require devs to send us the onActivityResult from their activity.
Make two IdpSignInContainers: one that's an activity for SignInDelegate and one that's a fragment for AuthMethodPickerActivity. (This means that when people are restoring their phones they will see grossness because smart lock will probably be enabled, but other than that, normal sign-in will be pretty) Prefered option?
Don't refactor IdpSignInContainerActivity at all (probably a bad idea)

Thoughts?

Done refactoring EmailHintContainerActivity. It turned out kinda gross so any thoughts would be appreciated.

I just realized #418 replaces this PR.


New plugin created via swc cli is broken

Describe the bug

swc plugin new --target-type wasm32-unknown-unknown test-swc
rustup target add wasm32-unknown-unknown
cd test-swc
cargo build-wasm32 --release

Input code
No response
Config
No response
Playground link
No response
Expected behavior
Can build
Actual behavior
error: the wasm*-unknown-unknown targets are not supported by default, you may need to enable the "js" feature. For more information see: https://docs.rs/getrandom/#webassembly-support
   --> getrandom-0.2.10/src/lib.rs:285:9
    |
285 | /         compile_error!("the wasm*-unknown-unknown targets are not supported by \
286 | |                         default, you may need to enable the \"js\" feature. \
287 | |                         For more information see: \
288 | |                         https://docs.rs/getrandom/#webassembly-support");
    | |________________________________________________________________________^

error[E0433]: failed to resolve: use of undeclared crate or module `imp`
   --> getrandom-0.2.10/src/lib.rs:341:9
    |
341 |         imp::getrandom_inner(dest)?;
    |         ^^^ use of undeclared crate or module `imp`

Version
latest
Additional context
No response

If I add this, it can pass the build but crashes at runtime

getrandom = { version = "0.2", features = ["js"] }

Error: failed to handle: failed to invoke plugin: failed to invoke plugin on 'Some("virtual-module.js")'

Caused by:
    0: failed to invoke `swc_transformer_static_module_record.wasm` as js transform plugin at swc_transformer_static_module_record.wasm
    1: Error while importing "__wbindgen_placeholder__"."__wbg_crypto_c48a774b022d20ac": unknown import. Expected Function(FunctionType { params: [I32], results: [I32] })


External link needs input validation

Users can bring down a site by entering an invalid external link to the home page.

go to the sitemap

select the home page

select add external link

enter a URL fragment such as #test

save

get the following error:
Exception Occurred: vendor/league/url/src/AbstractUrl.php:262 The given URL: //#test could not be parse (0)

For the record, if you do get in this situation, you can edit the external URL by requesting this URL:
https://<site>/index.php/ccm/system/dialogs/page/edit_external?cID=<cID> and changing <cID> to the cID of the newly created external link and <site> to the domain of your website. The cID can be found in the database:
SELECT COUNT(*) FROM Collections;

Assuming the result is 100, then:
SELECT cID FROM Collections LIMIT 99,1;

This should be the cID since it's the most recently created.
That should bring up the form used to edit the external link. Change it to a valid URL, then you need to edit the DOM to make the save button type="submit" so that you can submit the form.

I can't reproduce this on the latest develop. I expect this has something to do with the site's custom theme.

Site renders fine:

and amazingly enough even appears to do what you'd expect, linking to the current page with the hash of #test


Azure SDK Review - [Health Data DeIdentification]

New SDK Review meeting has been requested.
Service Name: Health Data DeIdentification
Review Created By: Graham Thomas
Review Date: 10/23/2024 02:05 PM PT
Release Plan:1429
Hero Scenarios Link: here
Architecture Diagram Link: Not Provided
Core Concepts Doc Link: here
APIView Links: .NET, Javascript, Python, Java,
Description: A few pending API Spec Changes from public preview to review before GA.
Detailed meeting information and documents provided can be accessed here

Meeting updated by Graham Thomas
Service Name: Health Data DeIdentification
Review Created By: Graham Thomas
Review Date: 10/23/2024 02:05 PM PT
Hero Scenarios Link: here
Architecture Diagram Link: Not Provided
Core Concepts Doc Link: here
APIView Links: .NET, Javascript, Python, Java,
Description: A few pending API Spec Changes from public preview to review before GA.
GA PR: https://github.com/Azure/azure-rest-api-specs/pull/30518
Detailed meeting information and documents provided can be accessed here

Meeting updated by Graham Thomas
Service Name: Health Data DeIdentification
Review Created By: Graham Thomas
Review Date: 10/23/2024 02:05 PM PT
Hero Scenarios Link: here
Architecture Diagram Link: Not Provided
Core Concepts Doc Link: here
APIView Links: .NET, Javascript, Python, Java,
Description: A few pending API Spec Changes from public preview to review before GA.
GA PR: https://github.com/Azure/azure-rest-api-specs/pull/30518
Samples:

[C#] https://github.com/Azure/azure-sdk-for-net/tree/healthdataaiservices/initial-ga-release/sdk/healthdataaiservices/Azure.Health.Deidentification/tests/samples
[Python] https://github.com/Azure/azure-sdk-for-python/tree/healthdataaiservices/initial-ga-release/sdk/healthdataaiservices/azure-health-deidentification/samples

Detailed meeting information and documents provided can be accessed here


ISPN-6200 Fix remote iterators in compatibility mode

https://issues.jboss.org/browse/ISPN-6200

Pushed, thanks


Published version of usdt-macro v0.3.3 is pulling in usdt-impl v0.1.14, possibly breaking stable builds

I'm trying to build Propolis and have just started seeing build failures in builds that have picked up usdt v0.3.3. The failures are of the form
error: cannot find macro `asm` in this scope
   --> /home/greg/.cargo/registry/src/github.com-1ecc6299db9ec823/usdt-impl-0.1.14/src/record.rs:193:13
    |
193 |             asm!(
    |             ^^^
    |
    = note: consider importing one of these items:
            std::arch::asm
            core::arch::asm

error[E0554]: `#![feature]` may not be used on the stable release channel
 --> /home/greg/.cargo/registry/src/github.com-1ecc6299db9ec823/usdt-impl-0.1.14/src/lib.rs:5:38
  |
5 | #![cfg_attr(feature = "asm", feature(asm))]
  |                                      ^^^

For more information about this error, try `rustc --explain E0554`.

(This also occurs in Buildomat runs against branches in the repo that shouldn't have any dependency changes.) I'm guessing the problem here is that usdt-impl v0.1.14 doesn't have #52 and so is generally unhappy about being built by a stable compiler but haven't dug into that angle at all.
I did a little digging and suspect (but haven't proven) that the issue here is that crates.io is replacing the path dependencies in the repo with registry dependencies and supplying a default version number in the absence of one in the checked-in Cargo.tomls. (The checked-in dependencies used to have version specifiers, but they were removed in #60; this aligns with crates.io's representation that the dependent version numbers were propagated in v0.3.2 but not in v0.3.3.) I'm not sure if the right solution here is just to bring back the version specifiers (it looks like it might be, since that seems to implement the "multiple locations" solution mentioned here) or if it's to do something else.

Ugh, sorry @gjcolombo! Thanks for filing this. I'll yank the latest versions to help get things moving. It does look like we need the solution you mentioned. I did something similar to publish the packages, but forgot some of the history there of why they were removed in the first place.

@gjcolombo's analysis seems accurate. The "right" way to solve this is really to specify both a path dependency and by version. The former is used when building from source, in the workspace, and the latter when publishing to crates.io. It seems an error for us to have removed that previously, so I'll start drafting a PR that pulls those back into place. I'm still not sure how to generally improve the publishing process (see #8), since we need to specify the versions in multiple locations now. Not ideal, but tools like cargo-release have been less than helpful in the past.

Thanks @bnaecker! Yanking v0.3.3 seems to have righted the ship on my local machine. I'm doing another Propolis CI build of the change that hit this to verify the problem's gone there too (I expect it to be).


Fixed only lowercase searches in CL issue

Description:
right now searching any CL if you start your search using a capital letter for example Halloween.. no results show.   but when you type halloween all the halloween results show. this should fix that.
Changes:

changed (value) to (value.toLowerCase)

Other checks:

[ ] I have tested all my changes thoroughly.

What were you trying to accomplish here exactly? /cl name: already isn't case sensitive and you can do /cl name: nex or /cl name: Nex or even /cl name: NeX and all three return the Nex collection log.

This change is for the autocomplete function, if you type /cl name: nex, nothing will come up at the moment in the search

This change is for the autocomplete function, if you type /cl name: nex, nothing will come up at the moment in the search

Ah I see that now, thanks for clarifying.

What were you trying to accomplish here exactly? /cl name: already isn't case sensitive and you can do /cl name: nex or /cl name: Nex or even /cl name: NeX and all three return the Nex collection log.
If there is a certain cl that isn't working properly then it is more likely an issue with it's aliases.

sorry I am just now seeing this comment. idk why but github mobile has never notified for comments :( so thank you @DayV-git for responding :)
but not sure if this has gone live yet or not haven't had chance to check but here are screen shots of what I'm hoping to achieve.

this is with capital H (just like the cl is labeled) nothing shows.

now I retype it with lowercase h and here's all halloweens.. thats just the example I choose to use.

so I'm guessing this didn't fix anything because the issue I'm trying to fix still exists.
maybe somebody will know the answer? @nwjgit @gc
the issue is that I've noticed only in /cl the searching is case sensitive
because anywhere else capitals don't matter
what's causing this?


Tools bucket verify must validate chunks

Is your proposal related to a problem?

After an S3 outage, some data has been corrupted or removed and caused compactor and store errors because some chunk files was missing.

Error log :
level=error ts=2021-11-15T09:15:25.252549999Z caller=main.go:157 err="group 0@15489514322847869503: compact blocks [/thanos/compact/0@15489514322847869503/01FK83WSKRS741JPZSH3ANQMM2 /thanos/compact/0@15489514322847869503/01FKD8JX9S4ZGTJSZ4EDMGKPD8 /thanos/compact/0@15489514322847869503/01FKJDE2TC0PEZM5PEMB31AWZS /thanos/compact/0@15489514322847869503/01FKQJ7TNQEKSBNXWBHPMTG6AC /thanos/compact/0@15489514322847869503/01FKWQ2R1AB4GJ1WRSDF2TM7QM /thanos/compact/0@15489514322847869503/01FM1VV3XXPB2DB305W3WCTAZN /thanos/compact/0@15489514322847869503/01FM7133CXJBKXTC0JJDZNWE53]: populate block: chunk iter: cannot populate chunk<PHONE_NUMBER>8: checksum mismatch expected:58b36271, actual:95f3491d\ncompaction\nmain.runCompact.func7\n\t/app/cmd/thanos/compact.go:416\nmain.runCompact.func8\n\t/app/cmd/thanos/compact.go:465\ngithub.com/oklog/run.(*Group).Run.func1\n\t/go/pkg/mod/github.com/oklog/run@v1.1.0/group.go:38\nruntime.goexit\n\t/usr/local/go/src/runtime/asm_amd64.s:1371\ncompact command failed\nmain.main\n\t/app/cmd/thanos/main.go:157\nruntime.main\n\t/usr/local/go/src/runtime/proc.go:225\nruntime.goexit\n\t/usr/local/go/src/runtime/asm_amd64.s:1371"

Describe the solution you'd like

The S3 datacenter has been fixed, but I need to check if all blocks of buckets are valid. To validate all my blocks I used the command thanos tools bucket verify but it just validates the index. A missing chunk or a corrupted chunk is not detected. The thanos tools bucket verify must validate the hash of the chunk file. The Prometheus TSDB already do that https://github.com/prometheus/prometheus/blob/main/tsdb/chunks/chunks.go#L549 and the promtool cli to https://github.com/prometheus/prometheus/blob/main/cmd/promtool/tsdb.go#L602 but we need to download all the chunks and the index file and It could be very expensive and slow on large blocks (size++, duration++). I like your proposal @bwplotka  https://github.com/thanos-io/thanos/issues/1787 to store the hash of the chunks into metadata file. Like that we can just request to the remote storage the metadata of the chunk to retrieve the hash and compare it. With this solution we don't have to download chunks files. Maybe this implementation could be done at this line https://github.com/thanos-io/thanos/blob/main/pkg/block/index.go#L319  ?
Describe alternatives you've considered

Wait for error from the store or compactor, but It will affect end users.
Download all blocks (chunks, index + metadata) and use promtool cli to validate blocks but it is very expensive...

Additional context

RAS

https://github.com/thanos-io/thanos/pull/3031 This pr already supports storing hashes in the metadata file.
But it is for each file, not for each chunk.
It is also possible to read each chunk data on the fly from the object store.

Thanks for your reply @yeya24 :+1:
So if this feature is enabled we can check if chunks files are correct. I will take a look when I have the time.

Still needed. We don't have a good way to fix (or at least identify) corrupted chunks.


ETA on v3 release?

It seems v3 as been on the works for some time and hasn't had much activity? Any eta on release date or maybe if an alpha version can be released?

ne

You could check out this. Looks like someone took this library and converted to Vue 3. I just tried it out and works great!

Hello, i made a vue3 port of vue-color : https://lk77.github.io/vue3-color/


Missing data is valid even if multiple values are expected

@tcezard Wondering if we should add tests for the specific use-case that we are fixing here...


Add svelte-web-fonts/google

I also noticed that a heading for Internationalisation is missing, so I added that

Thanks :+1:


Use system pricing calculation system option

I have just had a call with my partner and they noticed that Price Quote button will always sync the FnO to CE prices if the  Use system pricing calculation system option is set to "No". The documentation mentions that this parameter should be set to "Yes"
Can you please confirm if partner is correct and then the documentation should be updated?
Also, if the parameter is set to "No" will there be any side effect to it?
thank you!

Document Details
⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

ID: dc903201-84fc-ebac-9c31-78b0310f52ec
Version Independent ID: 44c60119-d2c0-f1f6-77fa-47b3d98c1fea
Content: Prospect-to-cash in dual-write - Finance & Operations | Dynamics 365
Content Source: articles/fin-ops-core/dev-itpro/data-entities/dual-write/dual-write-prospect-to-cash.md
Service: dynamics-365-cross-app
GitHub Login: @RamaKrishnamoorthy
Microsoft Alias: ramasri

We need a confirmation from the product team on the following. When you use the pricing engine (and not static pricing), you have to set “Use system price calculation “ to “No”. Otherwise, it fails. Review this:

This description implies that when using custom pricing by using a plug-in (such as dual write pricing engine can be regarded), this must (not may) be set to “No”. Do you agree? If you do, we need someone from the product team to verify this. This is paramount for our project.


Adding client auth to SslContextBuilder

Motivation:
To simplify the use of client auth, we need to add it to the SslContextBuilder.
Modifications:
Added a ClientAuth enum and plumbed it through the builder, down into the contexts/engines.
Result:
Client auth can be configured when building an SslContext.

@normanmaurer PTAL
/cc @ejona86

@nmittler I like the idea :+1:

@nmittler ship it... into 4.0, 4.1 and master please

Committed to 4.0 (3670898), 4.1 (a1d0207), and master (94bf412)


go modules update 20230523

Update go modules with 'go get -u ./...' and fix the fallout from the module updates.
Signed-off-by: Prarit Bhargava<EMAIL_ADDRESS>

This is great! I have a local build that updates go-gitlab to 0.74 (I think ... I did that to support some local customizations that add support for --assignee=none and a few others), but I never got around to sharing. It looks like you've already got it, though!


Update cypress image to the commit that has the cypress update to 7.2

Description
This updates the git commit hash on the milmove cypress image tag so that it's using this commit: https://github.com/transcom/circleci-docker/commit/c5ab4711080339a97b749254d3926ebee498bab4 which updates cypress to 7.2

Warnings

:warning:
Please add the JIRA issue key to the PR title (e.g. MB-123)

  Generated by :no_entry_sign: dangerJS against 6cc8427e84d886b019d9de120d596eb2549b1a33


Integrity constraint violation: 1048 Column 'body' cannot be null

Possible Bug - maybe i can fix it the next days but today im running low in time ;)
Steps to reproduce:

Write a Email to support from extern
Cron Job will pull Email
Cron Job will fail s. Stack-Trace

Possible Solution:
App\Jobs\CreateTicketsFromNewEmails while process uses $message-text but
with php-imap library it will be ->textPlain or ->textHtml s. Mailbox.php in vendor folder
 if($partStructure->type == 0 && $data) {
                                if(strtolower($partStructure->subtype) == 'plain') {
                                        $mail->textPlain .= $data;
                                }
                                else {
                                        $mail->textHtml .= $data;
                                }
                        }
                        elseif($partStructure->type == 2 && $data) {
                                $mail->textPlain .= trim($data);
                        }

Stack-Trace:
Next Illuminate\Database\QueryException: SQLSTATE[23000]: Integrity constraint violation: 1048 Column 'body' cannot be null (SQL: insert into `tickets` (`title`, `body$
Stack trace:
#0 /home/forge/handesk.vikinks.com/vendor/laravel/framework/src/Illuminate/Database/Connection.php(607): Illuminate\Database\Connection->runQueryCallback('insert into $
#1 /home/forge/handesk.vikinks.com/vendor/laravel/framework/src/Illuminate/Database/Connection.php(450): Illuminate\Database\Connection->run('insert into `ti...', Arra$
#2 /home/forge/handesk.vikinks.com/vendor/laravel/framework/src/Illuminate/Database/Connection.php(404): Illuminate\Database\Connection->statement('insert into `ti...'$
#3 /home/forge/handesk.vikinks.com/vendor/laravel/framework/src/Illuminate/Database/Query/Processors/Processor.php(32): Illuminate\Database\Connection->insert('insert $
#4 /home/forge/handesk.vikinks.com/vendor/laravel/framework/src/Illuminate/Database/Query/Builder.php(2133): Illuminate\Database\Query\Processors\Processor->processIns$
#5 /home/forge/handesk.vikinks.com/vendor/laravel/framework/src/Illuminate/Database/Eloquent/Builder.php(1251): Illuminate\Database\Query\Builder->insertGetId(Array, '$
#6 /home/forge/handesk.vikinks.com/vendor/laravel/framework/src/Illuminate/Database/Eloquent/Model.php(688): Illuminate\Database\Eloquent\Builder->__call('insertGetId'$
#7 /home/forge/handesk.vikinks.com/vendor/laravel/framework/src/Illuminate/Database/Eloquent/Model.php(653): Illuminate\Database\Eloquent\Model->insertAndSetId(Object($
#8 /home/forge/handesk.vikinks.com/vendor/laravel/framework/src/Illuminate/Database/Eloquent/Model.php(522): Illuminate\Database\Eloquent\Model->performInsert(Object(I$
#9 /home/forge/handesk.vikinks.com/vendor/laravel/framework/src/Illuminate/Database/Eloquent/Relations/HasOneOrMany.php(284): Illuminate\Database\Eloquent\Model->save()
#10 /home/forge/handesk.vikinks.com/vendor/laravel/framework/src/Illuminate/Support/helpers.php(950): Illuminate\Database\Eloquent\Relations\HasOneOrMany->Illuminate\D$
#11 /home/forge/handesk.vikinks.com/vendor/laravel/framework/src/Illuminate/Database/Eloquent/Relations/HasOneOrMany.php(285): tap(Object(App\Ticket), Object(Closure))
#12 /home/forge/handesk.vikinks.com/app/Ticket.php(33): Illuminate\Database\Eloquent\Relations\HasOneOrMany->create(Array)
#13 /home/forge/handesk.vikinks.com/app/Jobs/CreateTicketsFromNewEmails.php(34): App\Ticket::createAndNotify(Object(App\Requester), 'New ticket: #1:...', NULL, Array)
#14 /home/forge/handesk.vikinks.com/app/Jobs/CreateTicketsFromNewEmails.php(26): App\Jobs\CreateTicketsFromNewEmails->processMessage(Object(PhpImap\IncomingMail))
#15 /home/forge/handesk.vikinks.com/vendor/laravel/framework/src/Illuminate/Support/Collection.php(287): App\Jobs\CreateTicketsFromNewEmails->App\Jobs\{closure}(Object$
#16 /home/forge/handesk.vikinks.com/app/Jobs/CreateTicketsFromNewEmails.php(28): Illuminate\Support\Collection->each(Object(Closure))
#17 [internal function]: App\Jobs\CreateTicketsFromNewEmails->handle(Object(App\Services\Pop3\Mailbox))

I cannot find that $message->text usage, I think it uses the textPlain everywhere, did you try the last commit?

I tried the latest commit.
I guess i found the problem.
The Job is using
App\Jobs\CreateTicketsFromNewEmails->processMessage(Object(PhpImap\IncomingMail))
I did a  Log::info('+++++++++++ '.print_r($message,true));
and from the print_r i saw in the message object the textPlain is empty and the textHtml contains the html part of the new email.
So the   App\Ticket::createAndNotify will have a empty body and this brings the sql constrain violation.
(
    [id] => 42
    [date] => 2017-08-22 13:10:59
    ....
        [messageId] =><EMAIL_ADDRESS>    [textPlain] =>
    [textHtml] =>


update: add link to Vite

More and more browsers support ESM and Vite is also support creating new React app.

Hello @padunk!
As Vite is already mentioned here or here, let me close this PR as outdated, moreover considering the fact that we mention it "inline" without special toolchains section.


Feature/81-Navbar suggestions

Created the Suggestions screen with a form.

Punctual donations work fine, but I can't make recurring donations:

@fracalrod3 there might have been a little confusion, this task is about the Suggestions screen and not the Donations one.


model_checkpoint.best_model_path not set when fast_dev_run=True

🐛 Bug
When using fast_dev_run=True, it looks like the no model is serialized and pl.callbacks.ModelCheckpoint.best_model_path is not set.
This is unfortunate, because it makes testing scripts relying on pl.callbacks.ModelCheckpoint harder, since you need to special-case the fast_dev_run to handle things differently.
To Reproduce
import pytorch_lightning as pl
import torch.nn as nn
import torch

class BoringModel(pl.LightningModule):
    def __init__(self):
        super().__init__()
        self.linear = nn.Linear(1, 1)
        self.loss = nn.MSELoss()

    def configure_optimizers(self):
        return torch.optim.Adam(self.linear.parameters())

    def training_step(self, batch, batch_idx):
        X, y = batch
        return self.loss(self.linear.forward(X), y)

    def validation_step(self, batch, batch_idx):
        X, y = batch
        loss = self.loss(self.linear.forward(X), y)
        self.log("val_loss", loss)

data = [
    (torch.tensor([X]), 5 * torch.tensor([X]) + 1) for X in torch.linspace(0, 100, 24)
]
dataloader = torch.utils.data.DataLoader(dataset=data, batch_size=2)

model_checkpoint = pl.callbacks.ModelCheckpoint(monitor="val_loss", mode="min")
trainer = pl.Trainer(fast_dev_run=True, callbacks=[model_checkpoint], max_epochs=10)
trainer.fit(BoringModel(), dataloader, dataloader)
assert model_checkpoint.best_model_path != ""   # this fails when `fast_dev_run=True`

Environment
* CUDA:
	- GPU:
	- available:         False
	- version:           None
* Packages:
	- numpy:             1.19.5
	- pyTorch_debug:     False
	- pyTorch_version:   1.8.1
	- pytorch-lightning: 1.2.7
	- tqdm:              4.60.0
* System:
	- OS:                Linux
	- architecture:
		- 64bit
		- ELF
	- processor:         x86_64
	- python:            3.6.10
	- version:           #1 SMP Wed Apr 14 15:25:53 UTC 2021

Additional context

Hi, this is intended and actually a feature :)) fast_dev_run does not log and not save any artifacts. fast dev run is meant to test the loop / hooks for any obvious runtime errors in user code, but we don't want it to create files that pollute the workspace unnecessarily, because users may run several times before the get the fix right. And because it does not save any files, the best model path is not known.

For anyone else who came here I achieved the desired effect by doing something like:
pl.Trainer(
    limit_train_batches=1 if debug else 1.0,
    limit_val_batches=1 if debug else 1.0,
)


z3: 4.8.7 -> 4.8.8

Motivation for this change
z3 4.8.8 released on may 9th
Things done

[ ] Tested using sandboxing (nix.useSandbox on NixOS, or option sandbox in nix.conf on non-NixOS linux)
Built on platform(s)

[x] NixOS
[x] macOS
[ ] other Linux distributions

[ ] Tested via one or more NixOS test(s) if existing and applicable for the change (look inside nixos/tests)
[ ] Tested compilation of all pkgs that depend on this change using nix-shell -p nixpkgs-review --run "nixpkgs-review wip"
[ ] Tested execution of all binary files (usually in ./result/bin/)
[ ] Determined the impact on package closure size (by running nix path-info -S before and after)
[ ] Ensured that relevant documentation is up to date
[x] Fits CONTRIBUTING.md.

Anything I can do to help get this PR merged?

@ofborg build z3-tptp isabelle cppcheck


Revert "Due to stability issues, changed back to use AgentNoRedefNoRetrans.jar."

Reverts cloudfoundry/ibm-websphere-liberty-buildpack#521

I reverted this change because of these spec errors:
[exec] Failures:
[exec]
[exec]   1) CA APM Agent  release should return java command line options for the introscope service
[exec]      Failure/Error: expect(java_opts).to include("-javaagent:./#{ca_apm_home}/wily/Agent.jar")
[exec]        expected ["-javaagent:./.ca_apm/wily/AgentNoRedefNoRetrans.jar", "-Dorg.osgi.framework.bootdelegation=com.wily...engard.postofficehub.link.net.DefaultSocketFactory", "-Dcom.wily.introscope.agent.startup.mode=neo"] to include "-javaagent:./.ca_apm/wily/Agent.jar"
[exec]      # ./spec/liberty_buildpack/framework/ca_apm_agent_spec.rb:159:in block (3 levels) in <module:Framework>'      [exec]       [exec]   2) CA APM Agent  release should return java command line options for the introscope service and have the agent manager credential if present      [exec]      Failure/Error: expect(java_opts).to include("-javaagent:./#{ca_apm_home}/wily/Agent.jar")      [exec]        expected ["-javaagent:./.ca_apm/wily/AgentNoRedefNoRetrans.jar", "-Dorg.osgi.framework.bootdelegation=com.wily...Factory", "-DagentManager.credential=test1234abcdf", "-Dcom.wily.introscope.agent.startup.mode=neo"] to include "-javaagent:./.ca_apm/wily/Agent.jar"      [exec]      # ./spec/liberty_buildpack/framework/ca_apm_agent_spec.rb:178:in block (3 levels) in module:Framework'
[exec]
[exec] Finished in 4 minutes 20.9 seconds (files took 0.53474 seconds to load)
[exec] 798 examples, 2 failures
[exec]
[exec] Failed examples:
[exec]
[exec] rspec ./spec/liberty_buildpack/framework/ca_apm_agent_spec.rb:151 # CA APM Agent  release should return java command line options for the introscope service
[exec] rspec ./spec/liberty_buildpack/framework/ca_apm_agent_spec.rb:170 # CA APM Agent  release should return java command line options for the introscope service and have the agent manager credential if present


Replace gRPC dependency

Replaces legacy Grpc.Core package with Grpc.Net.Client.
In my testing with access.devnet.nodes.onflow.org:9000  I could only get the client to work in insecure mode.
SSL connections seem to fail every time. Am I missing something or are all the onflow connections unencrypted?
Fixes #74

Thanks for the PR!
From memory, SSL uses port 9001. I'm trying to find some documentation around this but I have had no luck. Perhaps someone on discord knows where to find it.


Fix tests

Codecov Report

Merging #326 into master will increase coverage by 0.02%.
The diff coverage is n/a.

@@            Coverage Diff             @@
##           master     #326      +/-   ##
==========================================
+ Coverage   94.37%   94.39%   +0.02%
==========================================
  Files          31       31
  Lines        9488     9488
==========================================
+ Hits         8954     8956       +2
+ Misses        534      532       -2


full repo man test

Repoman Generation Results
Repoman pushed changes to remotes for the following projects:
Project: azd-starter-bicep
Remote: azure-samples-staging
Branch: pr/4083
You can initialize this project with:
azd init -t Azure-Samples/azd-starter-bicep -b pr/4083

View Changes | Compare Changes

Project: todo-csharp-cosmos-sql
Remote: azure-samples-staging
Branch: pr/4083
You can initialize this project with:
azd init -t Azure-Samples/todo-csharp-cosmos-sql -b pr/4083

View Changes | Compare Changes

Project: todo-csharp-sql-swa-func
Remote: azure-samples-staging
Branch: pr/4083
You can initialize this project with:
azd init -t Azure-Samples/todo-csharp-sql-swa-func -b pr/4083

View Changes | Compare Changes

Project: todo-csharp-sql
Remote: azure-samples-staging
Branch: pr/4083
You can initialize this project with:
azd init -t Azure-Samples/todo-csharp-sql -b pr/4083

View Changes | Compare Changes

Project: todo-java-mongo-aca
Remote: azure-samples-staging
Branch: pr/4083
You can initialize this project with:
azd init -t Azure-Samples/todo-java-mongo-aca -b pr/4083

View Changes | Compare Changes

Project: todo-java-mongo
Remote: azure-samples-staging
Branch: pr/4083
You can initialize this project with:
azd init -t Azure-Samples/todo-java-mongo -b pr/4083

View Changes | Compare Changes

Project: todo-nodejs-mongo-aca
Remote: azure-samples-staging
Branch: pr/4083
You can initialize this project with:
azd init -t Azure-Samples/todo-nodejs-mongo-aca -b pr/4083

View Changes | Compare Changes

Project: todo-nodejs-mongo-aks
Remote: azure-samples-staging
Branch: pr/4083
You can initialize this project with:
azd init -t Azure-Samples/todo-nodejs-mongo-aks -b pr/4083

View Changes | Compare Changes

Project: todo-nodejs-mongo-swa-func
Remote: azure-samples-staging
Branch: pr/4083
You can initialize this project with:
azd init -t Azure-Samples/todo-nodejs-mongo-swa-func -b pr/4083

View Changes | Compare Changes

Project: todo-nodejs-mongo
Remote: azure-samples-staging
Branch: pr/4083
You can initialize this project with:
azd init -t Azure-Samples/todo-nodejs-mongo -b pr/4083

View Changes | Compare Changes

Project: todo-python-mongo-aca
Remote: azure-samples-staging
Branch: pr/4083
You can initialize this project with:
azd init -t Azure-Samples/todo-python-mongo-aca -b pr/4083

View Changes | Compare Changes

Project: todo-python-mongo-swa-func
Remote: azure-samples-staging
Branch: pr/4083
You can initialize this project with:
azd init -t Azure-Samples/todo-python-mongo-swa-func -b pr/4083

View Changes | Compare Changes

Project: todo-python-mongo
Remote: azure-samples-staging
Branch: pr/4083
You can initialize this project with:
azd init -t Azure-Samples/todo-python-mongo -b pr/4083

View Changes | Compare Changes


average or median age for those patients over 89

Hi~
For those patients over 89, what is their average or median age?
Thank you for any information!

Hi @Martin950204
Unfortunately, we do not have this information.  It's a HIPAA requirement.

OK! Thank you for your reply.


Wire not providing block updates to attached blocks on state change

Forge: <IP_ADDRESS>9
Charset: 0.0.3-build 1
Edit: Upon further testing it appears to be whatever block the wire is placed on isn't getting an update, rather than just the block below it. Test 3 shows this.
Test 1:

Test 2:

Test 3:

https://github.com/asiekierka/CharsetMC/commit/7c119924a23452c604349fe81bb01ee8bed7c17b


[feat] window picker action for file / buf selection

it would be nice to have a fzf-lua action which can be passed to commands like lsp_definitions and buffers, which trigger a window-selection after an entry is chosen. something like the window-picker in nvim-tree or using a lib like nvim-window-picker.

What would be the use case for this? Pick a window where the reference should be opened?
In any event, I don’t think I wish to maintain such a relatively open ended action with many config options especially when such options like nvim-window-picker exists, which brings me to the second question: why not create a simple custom action and call nvim-window-picker?

Hello @ViRu-ThE-ViRuS,
This is also a feature I am interested in. Could please the custom action you wrote to make this work ?
Thanks a lot.

@ibhagwan maybe you could help me understand why my custom action does not work.
local actions = require("fzf-lua.actions")
local function pick_window_and_edit(selected, opts)
    local fallback = vim.api.nvim_get_current_win()
    local window_id = require('window-picker').pick_window() or fallback
    vim.api.nvim_set_current_win(window_id)
    actions.file_edit(selected, opts)
end

When using this custom action for files fzf-lua picker, the pick_window() ui rapidly appears on screen then disappears, the picked file is open, and some characters are printed in the newly opened file.


ResponseUI: Implement new method, getRouter(), which will return the Router assigned tot he ResponseUI

ResponseUI: Implement new method, ResponseUI::getRouter(), which will return the Router assigned tot he ResponseUI
This change will make it easier to interact with the Router being used by a given ResponseUI instance. This will make it easier, for instance, to deretmine the current Request:
$responseUI->export['router']->getRequest()
// will become
$responseUI->getRouter()->getRequest()`

The following is the refactored interface:
<?php

namespace DarlingDataManagementSystem\interfaces\component\UserInterface;

use DarlingDataManagementSystem\interfaces\component\OutputComponent as CoreOutputComponent;
use DarlingDataManagementSystem\interfaces\component\Web\Routing\Router as RouterInterface;

interface ResponseUI extends CoreOutputComponent
{
    /**
     * Returns the Router instance used by the ResponseUI.
     * @return RouterInterface The Router used by the ResponseUI.
     * /
    public function getRouter(): Router;
}

Resolved in 66535ae8a6041ff72eb82d7c6b18b13afb885c56


Authorization rule on egress not working

Hi, how can configure authorization rules for egress gateway based on source principals? I've installed istio 1.5 with default profile with egress gateway enabled. I've set up sample app and configured istio as:
apiVersion: v1
kind: Namespace
metadata:
  name: team-blue
  labels:
    istio-injection: enabled
---
apiVersion: v1
kind: ServiceAccount
metadata:
  name: sa-blue
  namespace: team-blue
---
apiVersion: apps/v1
kind: Deployment
metadata:
  name: busybox
  namespace: team-blue
  labels:
    app: busybox
spec:
  replicas: 2
  selector:
    matchLabels:
      app: busybox
  template:
    metadata:
      labels:
        app: busybox
    spec:
      serviceAccountName: sa-blue
      containers:
      - name: busybux
        image: yauritux/busybox-curl
        command:
          - sleep
          - "3600"
---
apiVersion: v1
kind: Namespace
metadata:
  name: team-red
  labels:
    istio-injection: enabled
---
apiVersion: v1
kind: ServiceAccount
metadata:
  name: sa-red
  namespace: team-red
---
apiVersion: apps/v1
kind: Deployment
metadata:
  name: busybox
  namespace: team-red
  labels:
    app: busybox
spec:
  replicas: 2
  selector:
    matchLabels:
      app: busybox
  template:
    metadata:
      labels:
        app: busybox
    spec:
      serviceAccountName: sa-red
      containers:
      - name: busybux
        image: yauritux/busybox-curl
        command:
          - sleep
          - "3600"
---
apiVersion: networking.k8s.io/v1
kind: NetworkPolicy
metadata:
  name: test-network-policy
  namespace: team-red
spec:
  podSelector: {}
  policyTypes:
  - Ingress
  ingress:
  - from:
    - podSelector: {}
---
apiVersion: networking.k8s.io/v1
kind: NetworkPolicy
metadata:
  name: test-network-policy
  namespace: team-blue
spec:
  podSelector: {}
  policyTypes:
  - Ingress
  ingress:
  - from:
    - podSelector: {}
---
apiVersion: networking.istio.io/v1alpha3
kind: ServiceEntry
metadata:
  name: cnn
spec:
  hosts:
  - jsonplaceholder.typicode.com
  ports:
  - number: 80
    name: http-port
    protocol: HTTP
  - number: 443
    name: https
    protocol: HTTPS
  resolution: DNS
---
  apiVersion: networking.istio.io/v1alpha3
  kind: Gateway
  metadata:
    name: istio-egressgateway
  spec:
    selector:
      istio: egressgateway
    servers:
    - port:
        number: 80
        name: http
        protocol: HTTP
      hosts:
      - jsonplaceholder.typicode.com
---
  apiVersion: networking.istio.io/v1alpha3
  kind: DestinationRule
  metadata:
    name: egressgateway-for-cnn
    namespace: team-blue
  spec:
    host: istio-egressgateway.istio-system.svc.cluster.local
    subsets:
    - name: cnn
---
  apiVersion: networking.istio.io/v1alpha3
  kind: DestinationRule
  metadata:
    name: egressgateway-for-cnn
    namespace: team-red
  spec:
    host: istio-egressgateway.istio-system.svc.cluster.local
    subsets:
    - name: cnn
---
  apiVersion: networking.istio.io/v1alpha3
  kind: VirtualService
  metadata:
    name: direct-cnn-through-egress-gateway
  spec:
    hosts:
    - jsonplaceholder.typicode.com
    gateways:
    - istio-egressgateway
    - mesh
    http:
    - match:
      - gateways:
        - mesh
        port: 80
      route:
      - destination:
          host: istio-egressgateway.istio-system.svc.cluster.local
          subset: cnn
          port:
            number: 80
        weight: 100
    - match:
      - gateways:
        - istio-egressgateway
        port: 80
      route:
      - destination:
          host: jsonplaceholder.typicode.com
          port:
            number: 80
        weight: 100
---
apiVersion: "security.istio.io/v1beta1"
kind: "AuthorizationPolicy"
metadata:
  name: "egress-teamblue"
  namespace: istio-system
spec:
  selector:
    matchLabels:
      app: istio-egressgateway
  rules:
  - from:
    - source:
        principals: ["cluster.local/ns/team-blue/sa/sa-blue"]
---

I want to let only app from team-blue namespace to access egress, but when exec command inside team-blue's pod like curl -i http://jsonplaceholder.typicode.com I get error 403 forbidden server envoy. How can I configure that properly?

any info?

@padzikm, We have experienced the same issue when using Authorization rules with egress gateways.
We came up with an alternative solution using the Sidecar resource, open-sourced an example repository which demonstrates a possible solution for this use case, and published a blog post on the subject.

cc @yangminzhu

I also have this problem. Will this be possible in 1.7?

I haven't tested the specific policies in this issue but it looks like the authorization policy is using the principal field on egress gateway which is not supported before 1.7.
This should be fixed by https://github.com/istio/istio/pull/25818 in 1.7.

Trying the example in the OP I get RBAC access denied from the team blue busybox with istio 1.7 RC1 when trying to curl jsonplaceholder.typicode.com.

I tested and I think it's due to you haven't enabled mTLS between the busybox and egress-gateway, it was using plaintext and that's why it gets rejected with RBAC access denied because the source principal is not matched with the authorization policy.
Use the following policies to enable mTLS between workloads and egress-gateway:
---
  apiVersion: networking.istio.io/v1alpha3
  kind: Gateway
  metadata:
    name: istio-egressgateway
    namespace: team-blue
  spec:
    selector:
      istio: egressgateway
    servers:
    - port:
        number: 443
        name: https
        protocol: HTTPS
      hosts:
      - "*"
      tls:
        mode: ISTIO_MUTUAL
---
  apiVersion: networking.istio.io/v1alpha3
  kind: DestinationRule
  metadata:
    name: egressgateway-for-cnn
    namespace: team-red
  spec:
    host: istio-egressgateway.istio-system.svc.cluster.local
    subsets:
    - name: cnn
    trafficPolicy:
      tls:
        mode: ISTIO_MUTUAL
---
  apiVersion: networking.istio.io/v1alpha3
  kind: DestinationRule
  metadata:
    name: egressgateway-for-cnn
    namespace: team-blue
  spec:
    host: istio-egressgateway.istio-system.svc.cluster.local
    subsets:
    - name: cnn
    trafficPolicy:
      tls:
        mode: ISTIO_MUTUAL
---
  apiVersion: networking.istio.io/v1alpha3
  kind: VirtualService
  metadata:
    name: direct-cnn-through-egress-gateway
    namespace: team-blue
  spec:
    hosts:
    - jsonplaceholder.typicode.com
    gateways:
    - istio-egressgateway
    - mesh
    http:
    - match:
      - gateways:
        - mesh
        port: 80
      route:
      - destination:
          host: istio-egressgateway.istio-system.svc.cluster.local
          subset: cnn
          port:
            number: 443
        weight: 100
    - match:
      - gateways:
        - istio-egressgateway
        port: 443
      route:
      - destination:
          host: jsonplaceholder.typicode.com
          port:
            number: 80
        weight: 100
---

And you should find that only the busybox from namespace team-blue can have the access now.
@dmarkey  @padzikm Also note this will only work for ISTIO_MUTUAL mode (will not work for MUTUAL mode)

@rshriram please let me know if there are better ways to enable mTLS between workloads and egress gateway, thanks.

With yours manifest applied I now get:
/home # curl jsonplaceholder.typicode.com
upstream connect error or disconnect/reset before headers. reset reason: connection failure/home #

from all namespaces.

@dmarkey I finally get sometime to look into this, I get both HTTP and HTTPS working, please see the example config here: https://gist.github.com/yangminzhu/2123c6614825aeadba38279110450b62

I'm closing this as the original issue is solved. The authorization policy is working as expected on egress gateway, the real problem is to tunnel TLS in mTLS between sidecar and gateway. See the above gist for the workaround I found, it has some limitations but that's the best I can find so far. I think this probably can be best answered in networking WG.


"No data" after upgrade to 1.27.0

Is there an existing issue for this?

[X] I have searched the existing issues

What happened?
Upgraded docker installation of teslamate from 1.26.1 to 1.27 after first adding an encryption key in the docker-compose.yml.
After upgrade all queries in Grafana seems to get a HTTP 403 Response code with "origin not allowed" as error message.

docker-compose logs reveals nothing. No errors or warnings only info with successful database migrations etc.
Expected Behavior
Well, my data :)
Steps To Reproduce
No response
Relevant log output
mosquitto_1  |<PHONE_NUMBER>: New connection from <IP_ADDRESS>:57926 on port 1883.
mosquitto_1  |<PHONE_NUMBER>: New client connected from <IP_ADDRESS>:57926 as TESLAMATE_302E3333393 (p2, c1, k60).
teslamate_1  | 2022-07-16 16:12:00.222 [info] Migrations already up
teslamate_1  | 2022-07-16 16:12:03.185 [info] System Info: Erlang/OTP 24 (jit)
teslamate_1  | 2022-07-16 16:12:03.185 [info] Version: 1.27.0
teslamate_1  | 2022-07-16 16:12:04.317 [info] POST https://auth.tesla.com/oauth2/v3/token -> 200 (1085.827 ms)
teslamate_1  | 2022-07-16 16:12:04.317 [info] Refreshed api tokens
teslamate_1  | 2022-07-16 16:12:04.321 [info] Scheduling token refresh in 6 h
teslamate_1  | 2022-07-16 16:12:04.323 [info] Running TeslaMateWeb.Endpoint with cowboy 2.9.0 at :::4000 (http)
teslamate_1  | 2022-07-16 16:12:04.324 [info] Access TeslaMateWeb.Endpoint at http://teslamate.billerby.com
teslamate_1  | 2022-07-16 16:12:04.833 [info] Starting logger for 'MyTesla'
teslamate_1  | 2022-07-16 16:12:04.841 [info] MQTT connection has been established
teslamate_1  | 2022-07-16 16:12:05.227 car_id=1 [info] Start / :online
teslamate_1  | 2022-07-16 16:12:05.244 car_id=1 [info] Connecting ...
teslamate_1  | 2022-07-16 16:12:05.331 [info] GET https://nominatim.openstreetmap.org/reverse -> 200 (75.451 ms)
teslamate_1  | 2022-07-16 16:12:05.348 car_id=1 [info] Charging / SOC: 84% / Theplacetobe
teslamate_1  | 2022-07-16 16:12:05.348 car_id=1 [info] Disconnecting ...
teslamate_1  | 2022-07-16 16:12:06.864 [info] tzdata release in place is from a file last modified Fri, 22 Oct 2021 02:20:47 GMT. Release file on server was last modified Wed, 16 Mar 2022 13:36:02 GMT.
teslamate_1  | 2022-07-16 16:12:08.873 [info] Tzdata has updated the release from 2021e to 2022a
grafana_1    | logger=http.server t=2022-07-16T13:59:17.1+0000 lvl=info msg="HTTP Server Listen" address=[::]:3000 protocol=http subUrl= socket=
grafana_1    | logger=ngalert t=2022-07-16T13:59:17.1+0000 lvl=info msg="warming cache for startup"
grafana_1    | logger=ngalert.multiorg.alertmanager t=2022-07-16T13:59:17.1+0000 lvl=info msg="starting MultiOrg Alertmanager"
grafana_1    | logger=grafanaStorageLogger t=2022-07-16T13:59:17.13+0000 lvl=info msg="storage starting"
[ec2-user@ip-172-26-7-85 ~]$

Screenshots
No response
Additional data
No response
Type of installation
Docker
Version
v1.27.0

Same issue. Twiddling with different values of CHECK_ORIGIN does not seem to help at all (true, false, comma-separated list.)

Found a similar problem regarding grafina.  Looks like you need to add a line in the Apache configuration file in the same area as the Proxy directives.  It solved the problem for my configuration:
ProxyPreserveHost On

Is there use nginx proxy? Grafana related configuration enable cross-origin settings

ProxyPreserveHost

For nginx reverse proxy, after 1.27.0 upgrade, needed to change nginx config as described here: https://grafana.com/tutorials/run-grafana-behind-a-proxy/

Thanks! Solved by adding ProxyPreserveHost On to the apache virtual hosts config

A bit fast, turned out I already hade ProxyPreserveHost on in my virtual hosts config file...

Sorry, that was only for TeslaMate configuration, now also for grafana and it works!


haskellPackages.wai-app-file-cgi: fix build

Fixes https://github.com/NixOS/nixpkgs/issues/19611
Fixes https://github.com/NixOS/nixpkgs/issues/19612
cc @changlinli

@joachifm Thanks! I didn't realize that nixpkgs already had other versions of those Cabal packages built-in. Is there a place I can find more information about which versions get pulled into nixpkgs? I realize now that nix-env -f "<nixpkgs>" -qaP -A haskellPackages would've helped here, but is there any documentation on how the Nix Haskell infrastructure decides which versions of Haskell packages to pull in? I linked to this presentation earlier, but I'm not sure how up-to-date that is.

We generally ship the latest version and the version mandated by LTS Haskell 7.x. Sometimes that's the same version.


Something wrong with the speed test

Hi, @NeonLeexiang,
First off, I'd like to thank you for your remarkable work. Your approach of using multi-head sliding windows as an alternative to shifted windows and sparse attention has truly been an inspiration.
However, I've noticed a potential oversight in the speed test.
In the speed test codes [Link], it seems there are no codes that switch the model into test mode. This is vital, especially since your model leverages TLC which performs local ensembles of Restormer's attention results, incurring a significant number of loops and additional computational overhead.
I've benchmarked your model on my server (rtx3090) in both training and testing states. Here are the results:
Scale 4 / SwinIR vs DLGSANet / Train vs Test state:
SwinIR (Train Mode):
avg = 275.6369
SwinIR (Test Mode):
avg = 259.4968
DLGSANet (Train Mode):
avg = 186.1960
DLGSANet (Test Mode):
avg = 291.5465
The results in train mode show almost the same results in your paper.
It might be beneficial to re-evaluate this.
Please let me know if there are any discrepancies or if further clarifications are needed.
Thank you for your time and dedication to this project.

Hiii,
We value your feedback.
Since we implement TLC in our SparseGSA, the model runs at various speeds with and without TLC.
While the model will have a faster inference time and similar performance in various benchmark datasets (Set5, Set14, B100), with a decrease in Urban100 and Manga109, without the use of the TLC. On the other side, The TLC enhances the performance in PSNR of some datasets while sacrificing the inference speed.
We will provide a thorough table of quantitative evaluations and the running time of our model with and without TLC in the supplementary. Additionally, we'll standardize our codes as soon as we can and deliver more thorough material (config file and pretrain models of lightweight models).


Chose which layers are included in the 3D Tiles output

This CLI option would allow a user to choose which layers in the CDB they'd like to include in the 3D Tiles output.
There are a couple use cases for this:

If two elevation datasets are present, chose just one of them (e.g primary elevantion and bathymetry)
Export vector layers separately from terrain/imagery/building layers
let client select the component selector for each layer to combine

Feedback from https://github.com/CesiumGS/cdb-to-3dtiles/pull/33

The converter will process all the datasets even if some of them will not be included in the combined tilesets. I think better behavior would be to only process those datasets that are needed. This will speed up processing time if someone is only concerned about one dataset.


adding trapping rainwater array problem in java

Is your feature request related to a problem? Please describe.
the feature request is related to the problem of solving the "Trapping Rainwater" array problem in Java.
Describe the solution you'd like
I would like a Java solution for the trapping rainwater array problem, where given an array of non-negative integers representing heights, the function calculates the total amount of trapped rainwater.

Please don't raise issue to solve leetcode, gfg or hackerrank questions


Switch to {{in-element}}

Would it make sense for this addon to switch to {{in-element}})?
Perhaps this addon serves another purpose and it doesn't make sense.

That would be nice, but it's not "yet" possible to simple switch to {{in-element}} because it doesn't accept/render ember variables.
{{in-element}} can only render plan HTML syntax.

@mpanic Are you sure?
These two articles seems to suggest otherwise:
https://balinterdi.com/blog/using-in-element-in-ember-js/
https://dev.to/shayanypn/ember-js-in-element-feature-273l

@mpanic it seems to work. Here's a demo.
What do you think about investigating any feature gaps with this code and after any fixes, merging it in to this repo and releasing a v1?

Yeah, and should this repo not be deprecated entirely, as we can almost replace {{in-element}} 1-1 with ember-wormhole?


ShaguTweaks not working without Gatherer (no dependancy information shown in the lobby either)

On 1.12.1 clients, ShaguTweaks stops working (and displays many LUA errors) if one doesn't have the p2p version of the Gatherer addon installed as well (the one which synchs nodes through guild chat). The ShaguTweak option window is empty (only bottom buttons are displayed). See the following screen for details:

I can't reproduce your Issue. I never used Gatherer at all.
Please disable all other addons beside ShaguTweaks and enable them again one by one to see which one is breaking it.

For the sake of clarity, I found there was an addon (one I had coded for me for my own personal usage) that was conflicting with ShaguTweaks, as I disabled all addons, re-enabled them one by one, and the error only reappeared after I enabled this other addon. Still weird that everything works, unless I use an older version of Gatherer. Oh well.


Merging stack with different CODEOWNERS approval requirement fails

One of the PR requirements in our repo is that a CODEOWNER needs to approve a PR changing code they are responsible for. I had a bunch of PRs which only modified files with MyOrg/devops codeowner, and in between them there was a  PR with MyOrg/backend codeowner.
Running git spr merge changes "top" PR target branch to master, merges it and the ncloases all remaining ones. The issue is that this PR now has a commit modifying files owned the MyOrg/backend, and thus GH rejects such merge:
$ git spr merge
2:45PM FTL ../../../../../../../../Users/eitan/Code/spr/github/githubclient/client.go:292 > pull request merge failed error="Waiting on code owner review from MyOrg/backend." id=oa428PUSP2Y3SuXgHgKdIReqvfrUuaGL number=123 title="My last PR in stack"

That's an unfortunate side effect of merging all the PRs in one shot.
Did this leave your branch in a funky state?
Did it leave your PRs in a funky state?
Not sure what to do about this case.
I guess as a work around, you need to get the approver to approve the top pr, which is annoying.
One potential idea might be to go up the stack until you reach a point that requires different owner approval, and only merge the prs until that point. Then you would have to call 'git spr merge' again to merge the next bunch and so on. This also isn't great.

@ejoffe it left all PRs open, the last one was pointed to master, all remaining ones were pointed to the branch/commit below. I didn't try mering it with spr merge after getting approval for that, closed everything manually.
What's the reason why aren't all PRs simply ff-merged? ff-merge lowest one, then get the one higher to point to master and ff-merge it and repeat that. Assuming all PRs are rebased, this will be no different from changing top PR target to master - all commit hashes remain the same etc.

I wish it was like that, but github always rewrites the commit no matter what, so you can't ff. see: https://stackoverflow.com/questions/48350294/why-does-the-rebase-and-merge-option-in-github-create-new-commit-shas-is-ther/48353808.
Because of this when the first pr in the stack merges, the other prs on top have mismatching commits. Also, the next PR needs to now rerun the checks, and you get into nasty conflicts with yourself. This is why I came up with the clever hack of only merging the top PR. Now I think we'll need a more clever hack to get the code ownership to work right.
One option is to move code ownership management into spr, I think this will require some work, is totally doable, but has the downside that you won't have code ownership protection at the github level. So if everyone is using spr, that's fine, but if it's only used as part of the org, then it won't work.
I'm open to other ideas.

Would regular no-ff merges work?

From my understanding no-ff merges will have the same issue.
The problem is that if we merge the bottom commit in the stack with no-ff, the commit gets rewritten, and then all the checks need to rerun before merging the next commit. This can make merging large stacks take a long time, and will also increase chances of merge conflicts with other stuff that's merging.
One other option that might make this a bit easier is to add a flag: git spr merge --upto 123 which will make git spr only merge part of the stack up to that pr. This way one can merge a batch of changes with the same reviewer in one call, then wait for actions to run, and merge the next batch.

The problem is that if we merge the bottom commit in the stack with no-ff, the commit gets rewritten, and then all the checks need to rerun before merging the next commit. This can make merging large stacks take a long time, and will also increase chances of merge conflicts with other stuff that's merging.

I tried  this with a stack D -> E and did a non-ff merge with a merge commit on D:

Then changed the base for E and merged that as well:

Resulting in this history:

It doesn't look like the commits get re-written. Or does changing the base automatically dismiss all checks?


Allow to set a percentage greater than 100% for isCloseToPercentage a…

…ssertions.
make javadoc reflect this change

thanks


Rendering subviews might override controller.model

<script src="js/serenade.0.1.1.min.js"></script>

<body>
  <script type="serenade">
  .app
    h1[event:click=alertName] @name
    - if @sub
      - in @sub
        - view "sub"
  </script>

  <script>
  Serenade.view('app', document.getElementsByTagName('script')[1].innerText.replace(/^\s*/, ''));
  Serenade.view('sub', 'h2 @title');

  function AppController() {}

  AppController.prototype.alertName = function() {
    alert(this.model.get('name'));
  }

  Serenade.controller('app', AppController);

  var app = new Serenade.Model({
    name: 'App'
  });

  document.body.appendChild(Serenade.render('app', app));
  </script>
</body>

Click the h1; see that "App" is alerted.
Run app.set('sub', { title: 'Testing' }) in the console.
The view is (as expected) updated.
Click the h1; an error is now thrown because this.model was overwritten by the subview-render call (it now points to  { title: 'Testing' }).

Ahh, that's no good. Will take a look at it!

I investigated this for a really long time, and I have honestly no idea what is causing this. I did however manage to fix it… I think… Try and see if you still have the problem after 7d474d939d72966753a184ecb298648feb1b90d0


Why disable Obsidian's built-in way to update links

I see this in 4.0.0 release note.
Have plan to support built-in way to update links?

This is done on purpose, because built-in way updates links asynchronously, often breaking the links in race condition scenarios. The plugin temporarily disables built-in ways for certain scenarios, but overall built-in way should work