Stats have been broken for 72 hours

In the ongoing saga of broken stats, we’re now in a spot where package download counts haven’t updated since Saturday.
https://docs.google.com/spreadsheets/d/1aPisoc9KQDlggyfuFjo8AePuKkQD5tVonZpdmCzU1SE

/cc on-call @agr @loic-sharma

Yeah, the statistic page shows some sad results.

same problem

Hello, we've mitigated the issue and we are now processing downloads from the last few days. Thank you for your patience.

Closing this issue now. Please let us know if you have any additional issues!


Use V2 API

Looks like the Analytics site now uses a V2 API and we get errors with V1

What a shame! Not sure if you saw Netlify's post on the V1 deprecation schedule:-
https://answers.netlify.com/t/analytics-v1-api-deprecation/46760

Damn. Thank your for this information. I did not see it yet just had a failed request recently.
We need to switch to v2 quickly. Any help welcome!
/cc @DavidM42

Looks like the V2 has the exact same data structure as V1. I will release a new version of this action tomorrow.


Basic implementation

This is an initial, still sketchy, implementation of Klyshko based in Golang made available to allow for early feedback. No tests at all yet.

Fixes #5.

Workflows for auto labelling and stale issue handling have been added.

Workflows for auto labelling and stale issue handling have been added.

These have been removed again as they are available in master already.


Trezor Safe 5 not opening wallet with passphrase

I have tried multiple times to connect my new Trezor Safe 5 to Wasabi.
I plug in, add the wallet, type my passphrase on the device, and then Wasabi recognizes that it is a Trezor. But it never loads the passphrase wallet, it loads my empty "standard" wallet.
Have deleted the wallet, reimported multiple times, never loads the passphrase wallet.
Wasabi Version
Wasabi Version <IP_ADDRESS> downloaded directly from the Wasabi website and with signature verified. Mac OSX Sequoia 15.1.1

Hello @gitlappi
You’re experiencing a synchronization error.
This will be review by the support team. Visit the live support page to initiate a chat with an agent for further assistance via Wasabi Support live chat.
Regards

I have tried multiple times to connect my new Trezor Safe 5 to Wasabi.
I plug in, add the wallet, type my passphrase on the device, and then Wasabi recognizes that it is a Trezor. But it never loads the passphrase wallet, it loads my empty "standard" wallet.
Have deleted the wallet, reimported multiple times, never loads the passphrase wallet.
Wasabi Version
Wasabi Version <IP_ADDRESS> downloaded directly from the Wasabi website and with signature verified. Mac OSX Sequoia 15.1.1

Hello @gitlappi ,
I hope your issue has been resolved. If not, I apologize for the delay. It seems you’re experiencing a transcript error, likely caused by a system glitch or incorrect recording of the message history.
To resolve this, I recommend reaching out to the support team for specialized assistance with the recovery process. I’ve already created a support ticket for you with ID WSA7638. Please have this ID handy when contacting them.
You can find recovery guidelines and further assistance here: Wasabi Wallet Dapps Support Ticket Requests. Once on the page, click the live chat bubble in the bottom right corner to connect with a support agent who will work to resolve your issue quickly.
For the fastest resolution, live chat is highly recommended.
Thank you for your patience, and I hope this gets resolved for you soon!

It is sad to see scammers in Github.
Hope somebody from the actual team takes this issue.

First time this happens with the scammers, sorry about that
I just tested and it seems to work.
You need to select the passphrase wallet on Trezor Suite, and wasabi detects your currently selected wallet.
It doesn't ask for the passphrase right away, it will ask while sending

Thanks for the answer. I tried it again and you are right, it is the passphrase wallet. I got confused because it kept showing me an empty wallet.
I now realize that the reason is because Wasabi only shows the default Segwit account on Trezor Suite which is in fact empty (that is Trezor's default wallet type). On Trezor Suite in order to use Taproot, you need to add it.
I am using Taproot and I have balance there, so I was expecting to use it with Wasabi. No issue, I'll just send my coinjoined funds into a fresh new address generated by Trezor Suite.
Hope this would be supported in the future.

I am not sure about what you are trying to do because I don't use Trezor, but you can add all your wallets by just changing the default in Trezor suite then launch Wasabi's detection again.

It is unfortunate that you closed this, the wallet is loaded but only displays Segwit balances and generates Segwit receiving addresses, but it does NOT support Taproot balances or addresses. I checked the fingerprint of the wallet and it is the right wallet, the problem is that Wasabi is not handling correctly the Taproot (even when the derivation path under the "Wallet Info" on Wasabi does show both and they are the correct derivation paths.
So it is still an issue. Should I open a new one?


C++: force include for types in vector and map

Fix #2402

@dvdsgl can we merge this?

Thank you!


className is not undefined in BlotFormatter.js

After packaging, “this.options” have an object of “default” in “BlotFormatter.js” ,“this.options” can not direct access “overlay“ and “specs” ,  Access is only through “default”, for example: “this.options.default.overlay.className”, “this.options.default.overlay.style”.

Just started getting this as well after migrating to Vite and compiling for production.


clamp motion of drag preview?

Is it possible to clamp the motion of the drag preview? I have draggable, horizontal tabs and I want the preview to move horizontally but not vertically. In addition, I want the preview to only move horizontally the width of the tab bar rather being moved over other things. I think I just need a way to manually set the position of the preview. Is that possible? If so, how?

I think that you could tweak the custom drag layer example to do what you want.
(Note: I haven't experimented with the custom drag layers in my own app yet, so I'm not fully aware of any limitations that it might have.)

Yup, that’s the example you should be looking for.


Adding ChatLiteLLM model

Description: Adding a langchain integration for the LiteLLM library
Tag maintainer: @hwchase17, @baskaryan
Twitter handle: @krrish_dh / @Berri_AI

fixed some lint issues in #9098 if you wanna merge that in here

done @baskaryan any remaining blockers?

@baskaryan done - let me know if there's anything else needed on my end

oh the only other thing is it'd be great to add some documentation! can add a notebook to docs/extras/integrations/chat_models/...

Ok sounds good - I'll make a doc

Hey @baskaryan just added a tutorial

looks awesome, thanks @krrishdholakia!


Icon pack issues with Synchronization

Describe the bug
We've received a high volume of Obsidian Sync issues related to this plugin generating icon packs with many files, causing Sync to get clogged up.

Ok it seems like this plugin basically download the icon pack as individual files in the plugin folder - I would recommend using a place outside of the vault, or at the very least, pack all the icons together into a single file.

Ah yes, that should fix it as well.
Would it be set like that as default?

Awesome! Then I will write an extra section again in the readme file and close this issue :)

I'm using the Sync and I have the same issue. I followed the instruction and set the path to .obsidian/icons, but this still doesn't work for me and Sync logs are empty. It looks like Sync doesn't see those files. Furthermore, I've emailed to Obsidian support, so let's see what they are going to say.

I've got a reply from Obsidian support. They are disabling sync for .obsidian/icons and similar folders on purpose because of your plugin. I believe you shall consider repacking icons into tar/zip file and extract them on demand into the RAM to avoid clogging up the Sync.

So that's why it stopped working? Wow, I hope the core devs notified @FlorianWoelki when they did that

@FlorianWoelki it would be nice to enhance plugin's behavior to not extract all icons to the file system by keeping them in zip and extract only necessary on demand.

@FlorianWoelki if you'll be so kind to enhance plugin's behavior to not extract all icons to the file system but keep them in zip and extract only necessary on demand, those who are using Sync would appreciate you.

Did it help, if the iconpacks are zipped?
I can not really test it because I am not using Obsidian Sync.

Did it help, if the iconpacks are zipped?

Here is my conversation with Obsidian support:
Me: Will it be helpful to Obsidian Sync if all icons will reside only in 3-5 zip files instead of thousands of small files in a file system which is the case now?
Support: Yes, that should work(I can't comment on the internals of the plugin).
As Licat mentions in this comment packing the icons together should solve this issue.

I can not really test it because I am not using Obsidian Sync.

I gladly can do that. Just let me know.
I also tried another approach to sync my files using open source Syncthing app which is p2p sync solution but it also was struggling to deal with a bunch of small files resulted in 30 min sync of my Obsidian folder which is barely 30 ㎆ of data.
From my experience, putting thousands of tiny (less than ㎅) files is rare a good idea because it leads to a disk usage overhead as well as higher loads to storage's subsystem. For instance:

Four thousand icons with a total size of roughly 3 ㎆ are occupying 17 ㎆ of physical disk space. This is because physically on a disk the smallest allocated block for a single file is 4 ㎅ even if the file itself is 100 bytes only. If you'll put 1 million files 100 bytes each, the file system will allocate 40 ㎇ of a physical disk to store them rather than expected 1 ㎇.
To break this overhead the good practice is always to put tiny files into a zip/tar archive. You even don't need to compress them as you anyway will gain the immediate benefit for the file system i/o and allocation. The simple rule of thumb: whenever it's possible avoid storing tiny files on the file system barely. Some server-grade file systems can cope with that, but common file systems do not.

This still doesn't seem to work for me. I use the .obsidian/icons folder. I manually add one icon pack and I enable background check. Yet, while synchronizing across devices I get the message that missing icons where detetected. I use the same icon pack on all devices. Just one font-awesome-solid.

This still doesn't seem to work for me. I use the .obsidian/icons folder. I manually add one icon pack and I enable background check. Yet, while synchronizing across devices I get the message that missing icons where detetected. I use the same icon pack on all devices. Just one font-awesome-solid.

Could you check if it is just an issue with FontAwesome? Also would be perfect, if you could provide a minimal reproduction vault.

Sure. I've setup a minimal reproduction vault with this icon pack. I have seen this with other icons packs too and that's why I first moved to one. I also used the Tabler Icons and see the same there. I did not add these yet to the minimal repo vault. I sent you an invite on the email connected to your account here on GitHub.

P.s. I seems inconsistent between different vaults. In some cases the same icon used in different vaults is found and in another the same icon is not found.

I'm still seeing synching issues. Recently reinstalled to give it another go. Icons will work fine on the source machine (i.e. my macbook) but on iOS only about 50% of the icons appear. I have followed all the suggestions in the documentation. https://florianwoelki.github.io/obsidian-iconize/guide/syncing.html

@FlorianWoelki Please consider re-opening this issue. It's not specific to Obsidian sync. I get massive syncing problems with Proton Drive and - to lesser extent - with Nextcloud due to the icon packs. Basically it's clogging up the sync queue and makes it impossible to sync a vault with Proton Drive.
I'm currently waiting for answer from Protons support but for some reason each one of the thousands of *.svg files (each file ~1 kb or even smaller) takes several minutes to hours to sync. I think it's due to encryption but I have no technical knowledge about how any of this works.
I'm pretty sure this issue would be solved if the icon packs would be somehow packed in single archive files as suggested by lishid.


Pods get stuck in ContainerCreating status with repeating agent errors: "rlock failed: endpoint is in the process of being removed"

Bug report

General Information

Cilium version: 1.4.1
Kernel version: Linux ccp-server-5-11 4.15.0-45-generic #48-Ubuntu SMP Tue Jan 29 16:28:13 UTC 2019 x86_64 x86_64 x86_64 GNU/Linux
Orchestration system version in use: Kubernetes 1.12.5 - fresh 3 master 5 worker cluster initialized via kubeadm
Deployment script:

apiVersion: apps/v1
kind: Deployment
metadata:
  name: simple-nginx
spec:
  strategy:
    type: Recreate
  replicas: 1
  selector:
    matchLabels:
      app: simple-nginx
  template:
    metadata:
      labels:
        app: simple-nginx
    spec:
      containers:
      - image: nginx:stable-alpine
        name: simple-nginx

System dump:
cilium-sysdump-20190227-173006.zip

Cilium Config: Drop-in cilium.yaml: https://github.com/cilium/cilium/blob/1.4.1/examples/kubernetes/1.12/cilium.yaml .

BPF fs is mounted to the nodes via systemd method. They report active&mounted on systemctl status sys-fs-bpf.mount.

How to reproduce the issue

Start with a freshly installed cluster, with no workload.
Apply the deployment script above, wait for it to run the initial pod.
Scale it to a high number, in our case 500 - kubectl scale deployment simple-nginx --replicas 500 (Note: We have max-pods number configured to be 512 per node, not the default 110).
Track the number of pods that are in ContainerCreating status via kubectl get pod | grep ContainerCreating | wc -l. It will get stuck at a number and won't go down (in our case it is stuck at 108)
kubectl describe pod <ANY_STUCK_POD> shows repeated events like:

  Normal   SandboxChanged          13m (x14 over 33m)  kubelet, ccp-server-5-35  Pod sandbox changed, it will be killed and re-created.
  Warning  FailedCreatePodSandBox  89s (x13 over 19m)  kubelet, ccp-server-5-35  (combined from similar events): Failed create pod sandbox: rpc error: code = Unknown desc = failed to set up sandbox container "248c77b7b40d09439af32863050ebf51c7155287106642909ccd3fe34794d9fc" network for pod "simple-nginx-f6d45564f-zvh8z": NetworkPlugin cni failed to set up pod "simple-nginx-f6d45564f-zvh8z_default" network: Unable to create endpoint: Cilium API client timeout exceeded

Tailing/grep-ing "error" in any of the cilium pod logs that are on a node with stuck pods shows the repeated errors like:

level=error msg="Endpoint cannot be created" containerID=0821f0aa9cd1d6fa7a39fa5caf4dcbff592e830515fb258a423b3cc15c08996d error="aborting endpoint 414 join due client connection closed" eventID=241fb156-3ab2-11e9-8c32-02a962f32133 subsys=daemon
level=error msg="before regeneration" containerID=0821f0aa9c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=414 error="rlock failed: endpoint is in the process of being removed" identity=35147 ipv4= ipv6= k8sPodName=default/simple-nginx-f6d45564f-27ckn subsys=endpoint
level=warning msg="Aborting endpoint join due client connection closed" error="context canceled" subsys=daemon
level=warning msg="Ignoring error while deleting endpoint" endpointID=2969 error="Unable to delete key <IP_ADDRESS> from /sys/fs/bpf/tc/globals/cilium_lxc: Unable to delete element from map cilium_lxc: no such file or directory" subsys=daemon
level=error msg="Endpoint cannot be created" containerID=c2764295371c743cbc2f63d6297d08ec52960db90395598330d163ee8155f033 error="aborting endpoint 2969 join due client connection closed" eventID=24619b48-3ab2-11e9-8c32-02a962f32133 subsys=daemon
level=error msg="before regeneration" containerID=c276429537 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2969 error="rlock failed: endpoint is in the process of being removed" identity=35147 ipv4= ipv6= k8sPodName=default/simple-nginx-f6d45564f-lfw5l subsys=endpoint

Update - After discussing and debugging the issue in Slack,
https://cilium.slack.com/archives/C1MATJ5U5/p1551289535072900
we tried passing --container-runtime=none to the cilium-agent and it helped as a workaround.
Seems Cilium was hitting the go client QPS limit when too many endpoints are requested at once.

We ran into the same issue, when we deployed cilium in a very very busy cluster. The aforementioned flag worked.


[auth] Appliance Console summary screen for Non-IPA external auth

Updated the Appliance Console summary screen to also show Non-IPA
external authentication domains if manually configured outside the
appliance console. i.e. manually configuring External Auth against
LDAP or Active Directory.

@kbrock Please review

I expected  fetch_sssd_domain to look more like fetch_ipa_configuration. I noticed that one of them can handle a missing file, but the other can not.
Almost feel like much of fetch_ipa_configuration could be moved into config_file_read.
Is there any way to put some specs around this?

they both handle missing files, fetch_ipa_configuration just happens to be doing it via another method.  Wanted this to be surgical.  We can refactor when revamping external auth to help support SSSD based Ldap/AD as well as SAML.  Thanks.

:+1: LTGM :shipit:


[WIP] Support for multiple reporters

This PR adds support for multiple reporters.
Summary/justification of changes:

This is a not a BC break, unless you count setting the default value of the reporter command-line option in peridot.php.
Multiple reporters can now be specified on the command line with multiple --reporter options.

The docs will need a minor update to reflect this.

When multiple reporters are specified, they are composed into a 'composite' reporter.

The first reporter gets the "real" output interface, and subsequent reporters get a buffered output interface. Once the runner.end event fires, any buffered output is displayed after the primary reporter's output, separated by a single newline. This prevents interlaced output, while retaining streaming output for the primary reporter.

Retains support for getReporter() and setReporter().

We can deprecate them with the next major release, and remove them in the one after that. I'm not sure how we want to handle deprecations though.

I'm not sure what the PERIDOT_REPORTER environment variable is used for, but I also retained support for it, and added a similar PERIDOT_REPORTERS environment variable, which contains all the reporter names, separated by comma.

Closes #186.

Current coverage is 97.14% (diff: 100%)

Merging #202 into master will increase coverage by 0.18%

@@             master       #202   diff @@
==========================================
  Files            20         21     +1
  Lines           690        735    +45
  Methods         172        184    +12
  Messages          0          0
  Branches          0          0
==========================================
+ Hits            669        714    +45
  Misses           21         21
  Partials          0          0

Powered by Codecov. Last update 19c73bd...dcc5db5

For the record, it looks like a change broke the concurrency plugin. I am cool leaving it be for now. If someone opens an issue I will look into it. I don't think many people are using it anymore, so I'm not expecting a problem

@brianium I tried to find a dependent package for the concurrency stuff so that I could try it out for myself, but there's only one listed in Packagist dependents that isn't peridot-jumpstart, and actually has any specs.
How did you figure out that it broke?

Yeah. I did the same thing. I think it has been broken for a while. I haven’t seen any issues coming in, so either people are using pinned versions - or it never quite took off :) You ok with punting on it for a while? Concurrency might be a cool feature to add to the core library at some point.

@brianium Yeah, I'm happy to let it go for now. At some point I probably need to go through all the repos and do some maintenance anyway. Hopefully I can get it working when I do that.

I also have some docs for this on a branch of the website: https://github.com/peridot-php/peridot-php.github.io/tree/multiple-reporters


is it possible to block scroll for only one way? disable for to right?

disable for to right?

How it should work? You can scroll to the left, but can't scroll back? 🤔

i want to be able to scroll left (i mean able to see old data) but not right

Duplicate of #218


Https redirect not working with Kestrel hosted server when using ports.

Describe the bug
I am trying to run a console application that hosts a kestrel server.
I set up my server to listen to http and https on different ports.
I've setup https redirection to test that a controller which requires https will be redirected if a call is made to http only.
But currently the redirect is made, but the port is discarded.
Strangely, i have a unit test using TestServer with the same scenario, and it works fine.
To Reproduce
Steps to reproduce the behavior:

Using this version of ASP.NET Core '2.2'
My Program.cs looks like this:

    public class Program     {         public static void Main(string[] args)         {             new WebHostBuilder().UseStartup<Startup>()              .UseKestrel()              .UseUrls("https://localhost:5000", "http://localhost:5005")              .Build()              .Run();         }     }
3. My Startup.cs:
public class Startup     {         public void ConfigureServices(IServiceCollection services)         {             services.AddMvcCore();             services.AddHttpsRedirection(options =>             {                 options.HttpsPort = 5000;             });         }         public void Configure(IApplicationBuilder app, IHostingEnvironment env)         {             app.UseMvc();             app.UseHttpsRedirection();         }     }

My controller:
[Route("basic")]  public class BasicController  {      [Route("test1")]      public IActionResult Test1()      {          return new OkObjectResult("Ok, it works");      }      [Route("test2")]      [RequireHttps]      public IActionResult Test2()      {          return new OkObjectResult("Ok, it works");      }  }

Expected behavior
I expect to browse to http://localhost:5005/basic/test2 and be redirected to
https://localhost:5000/basic/test1
Actual behavious:
I am redirected to https://localhost/basic/test2.
The port number is removed completely.
Additional context
dotnet --info give me this:

.NET Core SDK (reflecting any global.json):
Version:   2.2.103
Commit:    8edbc2570a
Runtime Environment:
OS Name:     Windows
OS Version:  10.0.17134
OS Platform: Windows
RID:         win10-x64
Base Path:   C:\Program Files\dotnet\sdk\2.2.103
Host (useful for support):
Version: 2.2.1
Commit:  878dd11e62
.NET Core SDKs installed:
1.0.0-preview2-003131 [C:\Program Files\dotnet\sdk]
1.0.0 [C:\Program Files\dotnet\sdk]
2.1.104 [C:\Program Files\dotnet\sdk]
2.1.200 [C:\Program Files\dotnet\sdk]
2.1.202 [C:\Program Files\dotnet\sdk]
2.1.402 [C:\Program Files\dotnet\sdk]
2.1.503 [C:\Program Files\dotnet\sdk]
2.2.103 [C:\Program Files\dotnet\sdk]
.NET Core runtimes installed:
Microsoft.AspNetCore.All 2.1.4 [C:\Program Files\dotnet\shared\Microsoft.AspNetCore.All]
Microsoft.AspNetCore.All 2.1.7 [C:\Program Files\dotnet\shared\Microsoft.AspNetCore.All]
Microsoft.AspNetCore.All 2.2.1 [C:\Program Files\dotnet\shared\Microsoft.AspNetCore.All]
Microsoft.AspNetCore.App 2.1.4 [C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App]
Microsoft.AspNetCore.App 2.1.7 [C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App]
Microsoft.AspNetCore.App 2.2.1 [C:\Program Files\dotnet\shared\Microsoft.AspNetCore.App]
Microsoft.NETCore.App 1.0.1 [C:\Program Files\dotnet\shared\Microsoft.NETCore.App]
Microsoft.NETCore.App 1.0.4 [C:\Program Files\dotnet\shared\Microsoft.NETCore.App]
Microsoft.NETCore.App 1.1.1 [C:\Program Files\dotnet\shared\Microsoft.NETCore.App]
Microsoft.NETCore.App 2.0.6 [C:\Program Files\dotnet\shared\Microsoft.NETCore.App]
Microsoft.NETCore.App 2.0.7 [C:\Program Files\dotnet\shared\Microsoft.NETCore.App]
Microsoft.NETCore.App 2.0.9 [C:\Program Files\dotnet\shared\Microsoft.NETCore.App]
Microsoft.NETCore.App 2.1.4 [C:\Program Files\dotnet\shared\Microsoft.NETCore.App]
Microsoft.NETCore.App 2.1.7 [C:\Program Files\dotnet\shared\Microsoft.NETCore.App]
Microsoft.NETCore.App 2.2.1 [C:\Program Files\dotnet\shared\Microsoft.NETCore.App]
To install additional .NET Core runtimes or SDKs:
https://aka.ms/dotnet-download

PS. Sorry i couldn't get the formatting for the sample code right. Not sure what to do here.

I figured out a workaround.
If I change my call services.AddMvcCore()
to this:
services.AddMvcCore(x => x.SslPort = 5000);
Then the https redirection is working.
This seems redundant. I'm setting the same setting on more than 1 place and it also seems to be ignored in one place.
Should one or the other setting not be removed then?
And since this is the issue, the call to app.UseHttpsRedirection(); also seems to not do anything.
The https redirection works with and without it.

Remove [RequireHttps], that's not needed with UseHttpsRedirection. Check your application logs to see what's going on in UseHttpsRedirection.

Removing [RequireHttps] does nothing but break the https redirection, and doesn't enforce an https url on my route.
I've got one method which i want to expose over http and a different one over https.
If i accidentally enter http in my url for the https-only method, it should redirect.
It currently works as is, the problem is that there is an undocument (seemingly unrelated) setting I have to add to get it all working. And that is the SslPort thing.

I've created a test project on github explaining and showing this issue:
https://github.com/quintonn/httpsredirectiontest

You cannot use UseHttpsRedirection if you want to expose any http endpoints, it applies site wide redirection.
Endpoint specific HTTPS restrictions are discouraged in favor of site wide redirection.
If you're having trouble with UseHttpsRedirection you need to check your app logs.

Endpoint specific https is somewhat secondary.
The call UseHttpsRedirection seems to not work.
The main issue is with the sslport setting inside UseMvcCore which is required to get https redirect to work at all.
Where/how do I see app logs?

https://docs.microsoft.com/en-us/aspnet/core/fundamentals/logging/?view=aspnetcore-2.2
Note UseHttpsRedirection is a new system unrelated to the old RequireHttps & SslPort system.

UseHttpsRedirection is a new system?
How does one use it then? It seems the old RequireHttps & SslPort is taking precedence over UseHttpsRedirection.

Ok, i've got logging and if I remove the SslPort inside AddMvcCore i see the following when I browse to the URL using HTTP and get redirected to https but without a port number.

info: Microsoft.AspNetCore.Hosting.Internal.WebHost[1]
Request starting HTTP/1.1 GET http://localhost:5020/basic/test2
info: Microsoft.AspNetCore.Mvc.Internal.ControllerActionInvoker[1]
Route matched with {action = "Test2", controller = "Test"}. Executing action HttpsRedirectionTest.Controllers.TestController.Test2 (HttpsRedirectionTest)
info: Microsoft.AspNetCore.Mvc.Internal.ControllerActionInvoker[3]
Authorization failed for the request at filter 'Microsoft.AspNetCore.Mvc.RequireHttpsAttribute'.
info: Microsoft.AspNetCore.Mvc.Infrastructure.RedirectResultExecutor[1]
Executing RedirectResult, redirecting to https://localhost/basic/test2.
info: Microsoft.AspNetCore.Mvc.Internal.ControllerActionInvoker[2]
Executed action HttpsRedirectionTest.Controllers.TestController.Test2 (HttpsRedirectionTest) in 0.195ms
info: Microsoft.AspNetCore.Hosting.Internal.WebHost[2]
Request finished in 0.3972ms 302

This shows me nothing i didn't know.
The request is getting redirected without a port number.
All I'm trying to do is figure out what is the correct way to set up https redirection.
And based on what i've found so far, is that the documentation does not match with what i have to do.

I've updated my test repository with the 2 scenarios i'm running.
So to recap, there seems to be 2 problems:

In scenario 1, https redirection works as i expect, except for the fact that I have to explicitly add the ssl port required for https redirection.
In scenario 2, just http endpoints don't work, at all.

In theory, i guess http shouldn't be used really, so it would make both scenarios irrelevant.
But, from a functional point of view, this should be possible using .net, should it not?
So if a user insists on having both http and https endpoints, one can go with scenario 1. But the fact that one has to explicitly set the sslport seems incorrect.
If I want to change my ports using "UseUrls()", i could read that value from a config file, but changing the sslport setting becomes unnecessary overhead i believe.
Also, what if I want to use more than 1 port for each of http/https. I just did a test and using scenario 1 (from my repo), all http redirections are redirected only to the port set using SslPort setting.
Which I believe is wrong.

Scenario 2 is the recommended one and it seems like you've gotten it working as expected?
Yes, scenario 1 required setting SslPort, that's how the old system was designed. We're not planning any improvements here since scenario 2 is the recommended one.
For any further questions please pick a scenario and stick to it, mixing confusing and unsupported.

Thanks,
But the problem with scenario 2 is i can't have both http and https endpoints.

So you're using Scenario 1 and everything works except you have to set SslPort?

yes.

Then it's working as intended. I understand not wanting to hardcode the port in code, but setting it from config is the only other suggestion I have for you.
We don't plan to make changes here as Scenario 2 is our official guidance.

The main reason i raised this issue is that it was unclear which of the code to use.
There could maybe be a deprecated warning or something like that then?
Also, you mentioned scenario 2 is the way going forward. So that means it will become impossible to have both https and http endpoints, with redirection on the https endpoints?

Mixing http and https is discouraged but not deprecated, we're aware of a few cases where you might need to do it. The docs and templates give strong guidance towards scenario 2 already, but maybe we could update the doc comments on RequireHttps to indicate the preference as well.


flexvolume driver should read creds from the secret, not /root/.dotmesh

https://docs.dotmesh.com/install-setup/gke/#dotmesh-config

This wrinkle is caused by the fact that the flexvolume driver doesn't read creds to talk to dotmesh from the kubernetes secret.

http://gitlab.dotmesh.io:9999/dotmesh/dotmesh/blob/7e22e1fa39ecc45f5b0d263b5fa39c0529cf8876/cmd/dotmesh-server/pkg/flexvolume/flexvolume.go#L72

Gone from the docs!

Made redundant due to having a unix-domain socket for flexvolume to talk to the DM server!


feat: use objection error types in error-handler

This PR changes the errorHandler function to use the error classes created by objection.  This removes the need to parse individual error types by db type, since it's already handled by objection.
Inspired by this objection recipe: https://vincit.github.io/objection.js/recipes/error-handling.html#examples
This should close #130.

Thanks! I'll check it out tomorrow.
בתאריך יום ה׳, 19 בנוב׳ 2020, 19:59, מאת Rob Phillips <
<EMAIL_ADDRESS>
This PR changes the errorHandler function to use the error classes
created by objection. This removes the need to parse individual error types
by db type, since it's already handled by objection.
Inspired by this objection recipe:
https://vincit.github.io/objection.js/recipes/error-handling.html#examples
This should close #130
https://github.com/feathersjs-ecosystem/feathers-objection/issues/130.
You can view, comment on, or merge this pull request online at:
https://github.com/feathersjs-ecosystem/feathers-objection/pull/131
Commit Summary

new error handler
feat: use objection errors in error-handler
cleanup commented out lines

File Changes

M package-lock.json
https://github.com/feathersjs-ecosystem/feathers-objection/pull/131/files#diff-053150b640a7ce75eff69d1a22cae7f0f94ad64ce9a855db544dda0929316519
(10125)
M src/error-handler.js
https://github.com/feathersjs-ecosystem/feathers-objection/pull/131/files#diff-0a502163240ffc42be6784b74dc879742fb2273986a469867b79889b64b36ffa
(151)
M test/index.test.js
https://github.com/feathersjs-ecosystem/feathers-objection/pull/131/files#diff-af95cb6f5f65fe70216ddce70325e785438d5aaff956a0666ebf46ef6402f526
(240)

Patch Links:

https://github.com/feathersjs-ecosystem/feathers-objection/pull/131.patch
https://github.com/feathersjs-ecosystem/feathers-objection/pull/131.diff
—
You are receiving this because you are subscribed to this thread.
Reply to this email directly, view it on GitHub
https://github.com/feathersjs-ecosystem/feathers-objection/pull/131, or
unsubscribe
https://github.com/notifications/unsubscribe-auth/ABB5E3LAFYSFHJW6BWFJVODSQVMIRANCNFSM4T3XLPQQ
.

This worked well and solved my problem. I am getting an appropriate error now and am no longer getting a 500 for my unique violation error that I described in my issue (#130). However, the error message still isn't great. It's exposing the actual DB query. I suppose this should be handled by an app level error hook. Unless we feel like writing a parser to give good human readable error messages for all of these different errors 😆
insert into "users" ("created_on", "email", "isVerified", "name", "password", "updated_on", "verifyChanges", "verifyExpires", "verifyShortToken", "verifyToken") values ($1, $2, $3, $4, $5, $6, $7, $8, $9, $10) returning "id" - duplicate key value violates unique constraint "users_email_unique"

You can use the FeathersJS error hook to handle server errors before they
sent out the client and after you logged them in your system.
https://docs.feathersjs.com/api/errors.html#error-handling
בתאריך יום ו׳, 20 בנוב׳ 2020, 4:01, מאת Gerrit VanderLugt <
<EMAIL_ADDRESS>
This worked well and solved my problem. I am getting an appropriate error
now and am no longer getting a 500 for my unique violation error that I
described in my issue (#130
https://github.com/feathersjs-ecosystem/feathers-objection/issues/130).
However, the error message still isn't great. It's exposing the actual DB
query. I suppose this should be handled by an app level error hook. Unless
we feel like writing a parser to give good human readable error messages
for all of these different errors 😆
insert into "users" ("created_on", "email", "isVerified", "name", "password", "updated_on", "verifyChanges", "verifyExpires", "verifyShortToken", "verifyToken") values ($1, $2, $3, $4, $5, $6, $7, $8, $9, $10) returning "id" - duplicate key value violates unique constraint "users_email_unique"
—
You are receiving this because you commented.
Reply to this email directly, view it on GitHub
https://github.com/feathersjs-ecosystem/feathers-objection/pull/131#issuecomment-730797049,
or unsubscribe
https://github.com/notifications/unsubscribe-auth/ABB5E3MFEXLFKBD7FIZILQ3SQXEXNANCNFSM4T3XLPQQ
.

@robbyphillips It looks great! It seems like a breaking-change version. can you please add a migration section in the bottom of the README for migrating to v7.x? Also, the Error handling section might need an update.

Perfect! I'll release it tomorrow. Thank you for your contribution.

v7.0.0 is released

Thanks!

Thanks @robbyphillips!

To add above the UniqueViolation error has the columns key undefined:

Due to columns key being undefined it's only throwing this:

Trying to work on this and create a separate pull request. How would you proceed? Anybody affected with similar issue?  This is going to be my first PR if I go ahead with this. The naïve solution for now is not include the columns affected just show the underlying 'sqlMessage' or better yet show the 'constraint' key in the message as a column.

To add above the UniqueViolation error has the columns key undefined:

Due to columns key being undefined it's only throwing this:

Trying to work on this and create a separate pull request. How would you proceed? Anybody affected with similar issue?  This is going to be my first PR if I go ahead with this. The naïve solution for now is not include the columns affected just show the underlying 'sqlMessage' or better yet show the 'constraint' key in the message as a column.

@OMFG5716  --
Objection gets the errors from the underlying sql drivers with this lib: https://github.com/Vincit/db-errors, and in the tests I just mocked the object we should be getting from that lib.
So first step would be to see if we can figure out why we're not getting what's expected, possibly because that db-errors lib returns a different shape for mysql or whatever.  If that's true, then the solution is to add a different conditional to check for error.columns before making the error message.

@OMFG5716  --
Objection gets the errors from the underlying sql drivers with this lib: https://github.com/Vincit/db-errors, and in the tests I just mocked the object we should be getting from that lib.
So first step would be to see if we can figure out why we're not getting what's expected, possibly because that db-errors lib returns a different shape for mysql or whatever.  If that's true, then the solution is to add a different conditional to check for error.columns before making the error message.

The error parser for mysql definitely returns a different shape:  https://github.com/Vincit/db-errors/blob/6ed1975c135484e127643250e1e64b2bd8fc35a8/lib/parsers/mysql/DBError/ConstraintViolationError/UniqueViolationError/parser.js#L20
My test was based on the error constructor defined here: https://github.com/Vincit/db-errors/blob/master/lib/errors/UniqueViolationError.js, but it was a bad assumption on my part that all those keys would actually exist for every parser.

The error parser for mysql definitely returns a different shape:  https://github.com/Vincit/db-errors/blob/6ed1975c135484e127643250e1e64b2bd8fc35a8/lib/parsers/mysql/DBError/ConstraintViolationError/UniqueViolationError/parser.js#L20
My test was based on the error constructor defined here: https://github.com/Vincit/db-errors/blob/master/lib/errors/UniqueViolationError.js, but it was a bad assumption on my part that all those keys would actually exist for every parser.

@OMFG5716 Issue is fixed in v7.1.2


Dependency on<EMAIL_ADDRESS>which has security vulnerability

A new build would pull in the patched version of marked.
https://nodesecurity.io/advisories/531

Thanks for your feedback!
Currently this package uses<EMAIL_ADDRESS>which should automatically be updated to 0.3.19.
Do you use some kind of lockfile like package.json.lock or yarn.lock? In that case you just need to update marked.


VCs not working properly.

if I'm in a voice chat, no matter what I do, the client just cuts sound and mic after a few secs, and but I can't disconnect. I need to restart the app all the time.

Same as shef3r.
I confirmed this on my PC(Win11 24H2 arm64) and Lumia 950(1709).
Surely I can join the voice chat but I can't hear anything.


Increase the address vector limit from 100 to 1000

magic number. Let's make a #define or const while we're here?

The only issue with that is that the error message needs to have the same value. One might change the const or #define and forget to change the error message.


Add abiility to run Quick and Slow benchmarks

Some benchmarks might run faster than others and it might be useful for the pipeline to report the Quick benchmarks and report that and run Slow benchmarks in the background as well.

This may be easier to implement in the UI when we get support for the github checks API in ocurrent. This is planned, but work has not started yet. This could allow us to e.g. run quick benchmarks by default on PRs to make it faster to iterate, then have a button on the github PR that enables a slower version (which could also optionally be required for merging).


Please add support for FreeBSD 10 pkg install

At the moment the package install assumes that the apt repo needs to be added.
How hard would it be to add freebsd pkgng support?

Did you manage it? Would you mind providing a PR?

Nope, got busy with other stuff, acctually seting up a reciepe now for ubuntu, but I can certainly have a look and try ;)

Thanks for opening this issue. Just today we merged the changes from the chef_nginx fork of this cookbook back to master here. It’s a pretty huge change set and includes over a year of active development that resulted in several major releases. I think there’s a very high chance that this issue has been resolved with that work and at this point I’m going to close this issue out. I’d encourage you to checkout the master branch and please open this issue back up if you’re still having the problem there.
Here’s the changes that were just merged in: https://github.com/chef-cookbooks/nginx/pull/435


Don't put dockerfiles in one continuous code block

Fixes the confusion at the bottom of https://docs.docker.com/reference/builder/#dockerfile-examples with multiple dockerfiles merged into one.

/ping @thaJeztah @moxiegirl

Thanks @aidanhs, this change itself looks good; readability is better with this change.
However, I think these examples really need a overhaul. Do you want to make additional changes in this PR, or want me to take care of those in a follow up?

To be honest I think these probably fine as examples of Dockerfile syntax (which is all I'd use them for).
I've added a reference to the examples page (https://docs.docker.com/examples/) for people interested in something more serious.
(don't worry about the broken links on there, they're fixed in 15c24db9a59bf2c3eb02f7a18ffd501284893ed3)

To be honest I think these probably fine as examples of Dockerfile syntax (which is all I'd use them for)

I think the examples may need a bit of touching up, e.g. to make them follow our best-practices. If we want these examples just for showing the syntax, they may not be "abstract" enough (i.e., they suggest to be functional Dockerfile examples), and we may need more examples to show all syntax variations (e.g. line-continuation etc.)
Anyway, I'm good with this PR, and leaving updating the examples for another time.
LGTM, thanks @aidanhs!

@aidanhs Nice catch on doc UX. Thank you. LGTM


Shared directories and files is not getting called in Laravel recipe

Seems like the deploy:shared was forgotten from the Laravel recipe.

Thanks!


Animation in AE and web players differ than in app

Description
There is a difference between the animation in AE and the web player and how it is displayed in the app
(To reproduce I can send the lottie json privately)
Expected behavior:
Designer has provided lottie animation. When loading on a plateform like lottiefiles.com, it looks as it should :

Actual behavior:
But when added to the app, half of the dots of the outer circle have disappeared :

The code is nothing special, I put it in a screen containing just that Lottie, almost exactly like in the docs :
<LottieView
  source={require('../../assets/lotties/loadingSpinner.json')}
  autoPlay
  loop
  style={{
    height: 60,
    width: 60,
  }}
/>

I have loaded a bunch of Lotties off lottiefiles.com and they all appear correctly.
Versions
"react-native": "0.63.2"
"lottie-ios": "3.1.8"
"lottie-react-native": "^3.5.0"
And info from the designer :
AE 2019 with 5.5.7 Bodymovin'
AE 2020 with 5.7.4 Bodymovin'
AE 2020 with 0.1.20 LottieFiles

Update : The designer "replaced nulls with transparent shapes" and this fixed the issue. Closing issue.


zbc_error missing a newline at the end

Looks like you fixed this issue in another diff of yours. Thanks.


IndexError: list index out of range

The buildnumber isn't compiling.
IndexError: list index out of range

updating...

fixed... please update


Dianbei Miao characters show incorrectly in Storage Explorer

Storage Explorer Version: 1.30.0
Build Number: 20230609.2
Branch: 1.30.0
Platform/OS: Windows 10
GB18030 Language: Dianbei Miao
Architecture: x64
How Found: From running test cases
Regression From: Not a regression
Steps to Reproduce

Launch Storage Explorer.
Paste some Dianbei Miao characters to the Search box. (such as: 𖼁𖼤𖼬𖼶𖼵𖼇)
Check whether Dianbei Miao characters show correctly.

Expected Experience
Dianbei Miao characters show correctly.
Actual Experience
Dianbei Miao characters show incorrectly.

Issue with Windows/Font.


SentinelOne: PAPP-29324 Update Ingestion and test connectivity actions

Please ensure your pull request (PR) adheres to the following guidelines:

Please refer to our contributing documentation for any questions on submitting a pull request, link: Contribution Guide

Pull Request Checklist
Please check if your PR fulfills the following requirements:

[ ] Testing of all the changes has been performed (for bug fixes / features)
[ ] The readme.html has been reviewed and added / updated if needed (for bug fixes / features)
[ ] Use the following format for the PR description: <App Name>: <PR Type> - <PR Description>
[ ] Provide release notes as part of the PR submission which describe high level points about the changes for the upcoming GA release.
[ ] Verify all checks are passing.
[ ] Do NOT use the next branch of the forked repo. Create separate feature branch for raising the PR.
[ ] Do NOT submit updates to dependencies unless it fixes an issue.

Pull Request Type
Please check the type of change your PR introduces:

[ ] New App
[x] Bugfix
[ ] Feature
[ ] Code style update (formatting, renaming)
[ ] Refactoring (no functional changes, no api changes)
[ ] Documentation
[ ] Other (please describe):

Security Considerations (REQUIRED)

[ ] If you are exposing any endpoints using a REST handler,
please document them in the readme.html.
[ ] If this is a new connector or you are adding new actions

[ ] Please document in the readme.html all methods (eg, OAuth) used to authenticate
with the service that the connector is integrating with.
[ ] If any actions are unable to run on SOAR Cloud, please document this in the readme.html.

[ ] Are you introducing any new cryptography modules? If yes, please elaborate their purpose:
[ ] Are you are accessing the file system? If yes, please verify that you are only accessing paths returned through
the Vault API.
[ ] Are you are marking code to be ignored by Semgrep with nosemgrep?
If yes, please provide justification in an additional comment next to the ignored code.

Release Notes (REQUIRED)

Provide release notes as part of the PR submission which describe high level points about the changes for the upcoming GA release.

What is the current behavior? (OPTIONAL)

Describe the current behavior that you are modifying.

What is the new behavior? (OPTIONAL)

Describe the behavior or changes that are being added by this PR.

Other information (OPTIONAL)

Any other information that is important to this PR such as screenshots of how the component looks before and after the change.

Pay close attention to (OPTIONAL)

Any specific code change or test case points which must be addressed/reviewed at the time of GA release.

Screenshots (if relevant)
This PR updates SentinelOne based on customer integration tests:

Update test connectivity using generic endpoint as the previous endpoint did not work with service account
Update Ingestion to better handle pagination
Expose max-container-count at the asset configuration level for better usability along with limit set per API.

Test results showing various scenarios of the new asset parameters (negative, too large, correct range) are shown below:

Thanks for contributing!

One question about the test connectivity screenshot @gary-phantom , they are all authentication failed. Could we config the correct authentication and run test connectivity with different parameters? Thxs!

@mpan-splunk this is a community app so we don't have working asset.
one of the test conn screenshots return the values at the spawn.log which corresponds to the asset/ingestion container value


[Magellan] data-offset KO // data-bar-offset OK

Hi,
This might not be the best example as I use foundation with grav and some inherited templated, however that's how I bump into it, and foud a solution on the forum.
Basically foundation documentation is not right
How to reproduce this bug:

add data-offset="xx" to a navigation bar combining data-magelan and sticky

What should happen:
According to the doc, there should be an offset of xx pixels
What happened instead:
as if the option wasn't set
Browser(s) and Device(s) tested on:
firefox dev edition up to date, macbook pro 15"
Foundation Version(s) you are using:
6.2.4
solution
use data-bar-offset instead of data-offset ; it work's

The docs are for the latest 6.x release which is 6.4.3

https://github.com/zurb/foundation-sites/blob/v6.2.4/js/foundation.magellan.js
https://github.com/zurb/foundation-sites/blob/v6.4.3/js/foundation.magellan.js

Related to https://github.com/zurb/foundation-sites/issues/9512

Hi,
yes I had seen that the documentation was for 6.4.3, but how are we supposed to know that a given parameter name has changed !
I had seen that data-magelan was updated between 6.2.4 to  6.4.3, but we can't expect users to assume changes and check the code for every changes from version to version, especially since certain changes are mentionned in the documentation and some others aren't, for instance tooltip doc precises that absolute positioning is only usable with 6.4.3.
I totally advocate for multiple version documentation.
Good to see it's on it's way
Thank's for your answers !

I had seen that data-magelan was updated between 6.2.4 to 6.4.3, but we can't expect users to assume changes and check the code for every changes from version to version, especially since certain changes are mentionned in the documentation and some others aren't, for instance tooltip doc precises that absolute positioning is only usable with 6.4.3.

In short, we have changelogs ;-)


if I use NavController class   'remove' method, pop and push is not use

if I use NavController class   'remove' method, pop and push is not use
ionic version:3.5

Please fill the issue template fully.
The Ionic team is aware of this issue, I can not find the original issue though. I believe @danbucholtz is working on a fix.

Hello! Thanks for opening an issue with us. This issue has actually already been fixed and will be in the next release. If you would like to try it now you can get the latest nightly by running npm install ionic-angular@nightly --save. Thanks for using Ionic!

I am still facing this issue. Ionic-angular 3.5.3.
isTransitioning is still true after remove

What about 3.6.0?

I can't upgrade to the 3.6.0 in the current project due to other business requirements.

Same here on<EMAIL_ADDRESS>


"DiskFS must use absolute paths" error when running all DT tests locally

I cloned the main DT repo and made some changes, then tried to run pnpm run test-all.  The result is the following error:
AssertionError [ERR_ASSERTION]: DiskFS must use absolute paths
    at DiskFS (C:\Workspace\DefinitelyTyped\node_modules\.pnpm\@definitelytyped+utils@0.0.184\node_modules\@definitelytyped\utils\src\fs.ts:175:11)
    at getDefinitelyTyped (C:\Workspace\DefinitelyTyped\node_modules\.pnpm\@definitelytyped+definitions-parser@0.0.189_typescript@5.4.0-dev.20231107\node_modules\@definitelytyped\definitions-parser\src\get-definitely-typed.ts:38:10)
    at process.processTicksAndRejections (node:internal/process/task_queues:95:5)
    at prepareAffectedPackages (C:\Workspace\DefinitelyTyped\node_modules\.pnpm\@definitelytyped+dtslint-runner@0.0.194_@octokit+core@5.0.1_typescript@5.4.0-dev.20231107\node_modules\@definitelytyped\dtslint-runner\src\prepareAffectedPackages.ts:16:14)
    at runDTSLint (C:\Workspace\DefinitelyTyped\node_modules\.pnpm\@definitelytyped+dtslint-runner@0.0.194_@octokit+core@5.0.1_typescript@5.4.0-dev.20231107\node_modules\@definitelytyped\dtslint-runner\src\main.ts:51:7)
    at <anonymous> (C:\Workspace\DefinitelyTyped\node_modules\.pnpm\@definitelytyped+dtslint-runner@0.0.194_@octokit+core@5.0.1_typescript@5.4.0-dev.20231107\node_modules\@definitelytyped\dtslint-runner\src\index.ts:111:22)

I haven't seen anybody else running into this, but I don't think I have a very unusual environment -- running directly in Git Bash on Git For Windows (Win11), installed Node 20.9.0 via fnm, then pnpm v8.9.0 via corepack.  Testing just the package I changed (node) via pnpm run test node works fine.

I don't know if it's related but it looks like Azure dev pipelines for changes to @types/node might be all be failing?

https://dev.azure.com/definitelytyped/DefinitelyTyped/_build/results?buildId=167529&view=results
https://dev.azure.com/definitelytyped/DefinitelyTyped/_build/results?buildId=167671&view=results
https://dev.azure.com/definitelytyped/DefinitelyTyped/_build/results?buildId=167890&view=results (mine)

This path issue is most certainly unrelated and is more likely some Windows specific thing that we've missed (as we don't often check that).

Most likely those failures are related to https://github.com/microsoft/DefinitelyTyped-tools/pull/812; for example, that first one fails at es-abstract, but that shouldn't have been tested at all because only its scripts dir actually uses node.

This path issue is most certainly unrelated to the above failures and is more likely some Windows specific thing that we've missed (as we don't often check that).

Totally understand, but I get an honest chuckle out of Microsoft employees who don't test on Windows -- I hope the irony is not lost here 😂

I just merged the script PR linked above; once it's released (shortly) you should be able to rerun some of these PRs.
Believe me the irony is not lost; Andrew and Nathan are on macOS and I nearly only use Linux (albeit in WSL).

One other theory in case it helps: is it possible that accidentally running install or run test-all with npm, before running them with pnpm, could put the repo in a bad state?

I would doubt it, but it'd be easy to test by git cleaning (or rather on windows, using pnpm clean-node-modules since recursive symlinks are... iffy in git for windows).
I'll test this out when I get a chance. If this is very much breaking, I would consider using WSL to be honest (going to have the least friction with it).


SPICE-0009: External Readers

This SPICE is currently in the early stages. The detailed design is not yet finalized; I have posted it here to solicit feedback from the core team before beginning major implementation work.

Thanks for the review @bioball!

Using a persistent process with message passing isn't a bad idea--for processes with a higher startup cost (e.g. JVM-based processes), you pay that penalty once for the life of the evaluator, rather than every time a read() happens. However, there's an argument to be made for having the external reader binary be short-lived. For example, this makes it possible to write an external reader that's simply a bash script.

I definitely agree that there's utility in enabling the super simple scripting route! My primary motivation for a persistent subprocess is, as you've identified, startup cost.
Here's a real world example: I would like to be able to use an external reader to mediate access to a secret store in a large monorepo. I'd estimate that there are 80+ unique resource URIs that would be read during a "world eval". The process that would implement the external reader currently takes ~0.25 seconds to invoke from the command line (in the happy path), which would add ~20 seconds to the overall evaluation time. Most of that quarter second is process and initialization overhead and the actual read takes ~0.05 seconds, so if the reader process were persistent it would save ~15 seconds from the total evaluation time.
If persistent reader processes are implemented, it also becomes fairly trivial to implement one-shot readers. Spitballing, it might look something like this:
pkl eval <module.pkl> --external-reader 'pkl-cmd ldap=path/to/pkl-ldap.sh ldaps=path/to/pkl-ldap.sh' --allowed-resources ...

Where the pkl-cmd executable implements the external reader message passing API and registers a ResourceReader for each specified scheme->script mapping. I'd be interested in shipping pkl-cmd as part of the Pkl project.

If it's a persistent process, it should probably be spawned the first time a module or resource is read, then kept alive while the evaluator session is alive (e.g. until it is closed).
I don't know if we need a DiscoverReadersRequest and DiscoverReadersResponse? Wouldn't the evaluator already know about the external readers it needs?

The ergonomic motivation for spawning a persistent process on startup and having the readers be discovered at runtime would be to decouple which reader binaries are used from which schemes they provide. If one-shot reader processes are used, the scheme->binary registration is unavoidable, but persistent readers may implement many schemes. Having to perform the same mapping for persistent processes would be very verbose (since setting allowed modules is also required), but would be able to spawn the process on first use instead of during evaluator initialization. Another consideration here is user error: if a user registers a reader for a scheme that it does not provide, how should pkl respond?

Thanks for the review @stackoverflow!

I'm missing an example that shows the whole process. Your example just shows a Pkl file using the reader and a cli call, but it's not clear to me how these things glue together.

I think I've addressed this in other comments, but please let me know if you still have questions.

Also think having the processes being long-running would put too much hurdles for people who want to contribute a reader, so let's keep that as a future improvement.

My main concerns with only targeting "one-shot" reader processes at this time are:

It's not clear how to support globbing (i.e. ListResourcesRequest/ListModulesRequest)
It may make "persistent" readers more complicated to implement in the future from a configuration/CLI perspective
Performance, as outlined above

Above I proposed a pkl-cmd persistent external reader that could function as an "adapter" of sorts to simpler one-shot reader processes. I definitely agree that the simplicity of writing a simple script should be a goal here, and I don't think the more involved persistent reader design rules that out.

For the package support: That seems to complicated the design quite a bit. Now Pkl has to understand how to properly process packages-as-readers.

I may be misinterpreting this concern, but I'm not sure this is so complicated. Reader executables would need to be supplied as package file URIs including the fragment #/path/to/binary.

If my reader is a Ruby script and I want to deploy it as a package, do I have to bundle the script together?

My thought here is to primarily target languages for which (message-passing) bindings already exist. Both Golang and Swift (at least on linux) can produce statically linked binaries that can be packaged dependency-free. If there are bindings for interpreted languages in the future, distribution would likely need to be via the language package manager, which this design does not rule out.

Gets even more complicated with executables and multiplatform support.

Definitely agree, but I think pkl:platform makes this reasonable. I show what this might look like in a PklProject here: https://github.com/apple/pkl-evolution/pull/10#discussion_r1708244384

I think I've addressed this in other comments, but please let me know if you still have questions.

You addressed it in the comments, but someone reading the SPICE shouldn't have to read comments to understand it, so it would be nice if that was clear in the SPICE itself.

About having readers being persistent:
I think you are approaching this from the wrong side. For Pkl, the reader should just be a process it spawns once it finds a read. If you want it to be persistent (which I consider an edge case) you can run a persistent background process and write a simple script for Pkl to call which would pipe the reads.
This would simplify your proposal and there wouldn't be a need for a pkl-cmd.
Also it's not clear to me how errors and the communication happens. I imagine we can keep the unix tradition of using return codes so 0 would mean success and other numbers would be errors. stderr could contain the error message in case things went wrong and stdout would contain the actual result of the read. But anyway, all of this should be in the SPICE.

Josh actually brings up a good point--the process of resolving a read can involve multiple calls to a reader, which can make a short-lived execution quite complicated. For example, resolving a glob star import (e.g. import*("foo:/**.pkl") is linear to the number of directories needed to read.
Additionally, Pkl wants to know three facts about each scheme:

Is it globbable?
Is it hierarchical?
Is it local?

It's quite a rough experience to provide all this to Pkl as CLI args: this is quite long: --external-reader ldap=pkl-ldap --globbable-reader=pkl-ldap --hierarchical-reader=pkl-ldap --local-reader=pkl-ldap.
I echo Islon's concerns about distributing binaries using Pkl packages. I see the value here, but this isn't what packages are designed for. Besides, there are already many ways to distribute binaries; languages typically already offer their own mechanisms for installing executables (go install, npm isntall -g, pip install, etc), and so do OS-level tools (apt-get, rpm, winget, yum, brew). Also: a tarball isn't a sufficient way to distribute executables; some executables need to link to libraries (e.g. glibc), and others require a runtime (e.g. Node.js). It's better to delegate this task to something else.
Some additional thoughts:

Right now, the message passing API is held outside of pkl-core. We did this to reduce the number of dependencies (no msgpack), and to minimize the amount of core that gets shipped in our core library. This feature implies that much of our message passing logic (e.g. MessageTransport) gets moved to pkl-core. However, I think we want this anyway--we've talked about moving BinaryEvaluator into pkl-core, and providing a serializer/deserializer to our Java library users (and perhaps even in-language).
I don't know if we want shelling out to executables to become the norm for Pkl. This feature makes sense to bring feature parity to the CLI, but library users may not want Pkl to spawn executables. However, it still makes sense that library users should be able to configure Pkl to do this if the CLI can do this too.

I've taken another pass on this. Here are the major changes:

Moved URI-based reader executables to future directions
Addressed exec-per-read and up-front scheme->reader registration under alternatives considered
Added significant detail to the detailed design section


Dev

Hi. Did you intend to submit this as a PR on the repo for the book?

Hi Allen, I did not. My mistake.
I can’t tell you much I appreciate that you have made your book available
on GitHub in notebook format. I am a retired developer tools product exec
trying to learn probabilistic programming and causal inference modelling.
The book has been incredibly useful to give me a solid foundation in
Bayesian analysis.
Cheers,
Kieran
On Wednesday, June 14, 2023, Allen Downey @.***> wrote:

Hi. Did you intend to submit this as a PR on the repo for the book?
—
Reply to this email directly, view it on GitHub
https://github.com/AllenDowney/ThinkBayes2/pull/66#issuecomment-1591187388,
or unsubscribe
https://github.com/notifications/unsubscribe-auth/AHI7OOVYGS6CPO56QWI2CFLXLG2JJANCNFSM6AAAAAAZFYKIEE
.
You are receiving this because you authored the thread.Message ID:
@.***>


BREAD Need Help

Laravel Version: 5.5
Voyager Version: 1.0.1
PHP Version:7.1.7
Database Driver & Version:10.1.25-MariaDB

Hi
I Have created a BREAD
http://localhost/admin/countries
its working great but i was wondering if its possible to access http://localhost/countries  directly  without admin directory for normal user  or i must create a custom blade and controller  for this
Thank you

That would be part of your site, not part of voyager, so you would have to build it yourself (new route/controller/view/etc).


python38Packages.django_contrib_comments: 2.0.0 -> 2.1.0

Automatic update generated by nixpkgs-update tools. This update was made based on information from passthru.updateScript.
meta.description for python38Packages.django_contrib_comments is: "The code formerly known as django.contrib.comments"
meta.homepage for python38Packages.django_contrib_comments is: "https://github.com/django/django-contrib-comments"
meta.changelog for python38Packages.django_contrib_comments is: ""
Updates performed

Ran passthru.UpdateScript

To inspect upstream changes
Impact

Checks done (click to expand)

built on NixOS

Warning: a test defined in passthru.tests did not pass

0 of 0 passed binary check by having a zero exit code.

0 of 0 passed binary check by having the new version present in output.

found 2.1.0 with grep in /nix/store/nmnyag46rymcl4pajgk0jb4nkmy6laz6-python3.8-django-contrib-comments-2.1.0

directory tree listing: https://gist.github.com/7c0b1e242ed26488fb0234e2750af8d8

du listing: https://gist.github.com/2f2d580f5290739849a8e3c0a6771711

Rebuild report (if merged into master) (click to expand)

8 total rebuild path(s)

2 package rebuild(s)

2 x86_64-linux rebuild(s)
2 i686-linux rebuild(s)
2 x86_64-darwin rebuild(s)
2 aarch64-linux rebuild(s)

First fifty rebuilds by attrpath
python38Packages.django_contrib_comments
python39Packages.django_contrib_comments

Instructions to test this update (click to expand)

Either download from Cachix:
nix-store -r /nix/store/nmnyag46rymcl4pajgk0jb4nkmy6laz6-python3.8-django-contrib-comments-2.1.0 \
  --option binary-caches 'https://cache.nixos.org/ https://nix-community.cachix.org/' \
  --option trusted-public-keys '
  nix-community.cachix.org-1:mB9FSh9qf2dCimDSUo8Zy7bkq5CX+/rkCWyvRCYg3Fs=
  cache.nixos.org-1:6NCHdD59X431o0gWypbMrAURkbJ16ZPMQFGspcDShjY=
  '

(The Cachix cache is only trusted for this store-path realization.)
For the Cachix download to work, your user must be in the trusted-users list or you can use sudo since root is effectively trusted.
Or, build yourself:
nix-build -A python38Packages.django_contrib_comments https://github.com/r-ryantm/nixpkgs/archive/3d91abbbbdf0e77655adccea8722a440e5d053a0.tar.gz

After you've downloaded or built it, look at the files and if there are any, run the binaries:
ls -la /nix/store/nmnyag46rymcl4pajgk0jb4nkmy6laz6-python3.8-django-contrib-comments-2.1.0
ls -la /nix/store/nmnyag46rymcl4pajgk0jb4nkmy6laz6-python3.8-django-contrib-comments-2.1.0/bin

Pre-merge build results
We have automatically built all packages that will get rebuilt due to
this change.
This gives evidence on whether the upgrade will break dependent packages.
Note sometimes packages show up as failed to build independent of the
change, simply because they are already broken on the target branch.
Result of nixpkgs-review run on x86_64-linux 1

2 packages built:

python38Packages.django_contrib_comments
python39Packages.django_contrib_comments

Maintainer pings

Result of nixpkgs-review pr 116077 at 3d91abbb run on aarch64-linux 1

2 packages built successfully:

python38Packages.django_contrib_comments
python39Packages.django_contrib_comments

1 suggestion:

warning: maintainers-missing
Package does not have a maintainer. Consider adding yourself?
Near pkgs/development/python-modules/django_contrib_comments/default.nix:18:3:
   |
18 |   meta = with lib; {
   |   ^


Best practices TODO

Code

[x] Proper readable and maintable code with consistent spacing and indentation
[x] Functions follow the "Do One Thing" rule (single-responsibility)
[x] Followed DRY (Don’t Repeat Yourself)
[x] Added comments wherever required
[x] Proper naming conventions
[x] Avoided deep nesting

Readme

[x] Badges (similar to the Gitter badge. You can maybe use: https://shields.io/)
[x] Description (why this project exists)
[x] Features (working of the project)
[x] Setup (Quick start instructions with how to download and use your project)
[x] Contributing (How can others contribute?)
[x] License ("This project is licensed under the ")

Tests

[ ] Wrote tests

@sankarvinayak and @MUHAMMEDRIZALKE, great work and thanks for contributing! You're just left with one item in your TODO! Also, do you wish to rename your project and repo?
 Please replace 'Discussions about P2P-file-transfer is placed on our Gitter Chat Anybody is welcome to join these conversations.' with: 'Discussions about P2P-file-transfer take place on our Gitter Chat. Anyone is welcome to join the conversations.'

I'm trying to run your project but python peer.py command isn't working. Can you please look into it? Thanks!


Unit tests?

Are there any? So scary to see such an important library existing with no tests or am I blind?

@prabhu
I have some manual / visual acceptance tests here: https://github.com/msand/RNSvgTests
Which I've used to compare the ios and android output to all the evergreen browsers, and fixed all the text and text on a path, matrix transforms, viewbox, ligatures, kerning, etc. related issues I've found.
There are several collections of unit tests for the various SVG spec versions. What is needed, is to implement and expose the proper getters, setters, and methods, of the DOM, which are required for the unit tests to compare the actual values to the expected values in the assertions.
In practice, the tests I've collected into that repo, require almost all parts relating to text rendering to be implemented correctly, as almost everything is both tested in isolation, and in ways such that all the properties depend on each other, and affect the output together. This even allowed me to discover that only Edge renders text on a path according to spec, all other ever-green browsers implement something which is nowhere to be found in the spec.
https://github.com/w3c/svgwg/issues/337
https://developer.microsoft.com/en-us/microsoft-edge/platform/issues/13518804/
The Edge team wants it to be handled by the w3c, I haven't contacted the other browser vendors yet.
Also, Adobe Illustrator has invented their own interpretation of startOffset, where the percentage value p gives p = ( m / n ) , where m is the m:th control point in the bezier curve, and n is the number of control points, while everybody else calculates a percentage of the total pathLength of the entire curve.
If you're interested in fixing and helping with the unit tests, you can look at the SVG DOM api spec, and just implement the getters required by the tests you consider most important. This would allow many thousands of the existing unit tests to be run already. Then, implementing the other missing methods and we should be golden. What do you think?


Invariant Violation: View config getter callback for component RemoteVideoView must be a function (received undefined)

I use React Native 0.68.1 on my Android device.
Follow README.md make
<View style={display ? styles.videoContainer : styles.noDisplay}>
  <RemoteVideoView />
</View>

But got this error:
 LOG  RegisterNativeScenarioMarkerInitiated
 LOG  [VoiceVideoCallingProxy][askPermissions]
 LOG  [VoiceVideoCallingProxy][constructor]
 LOG  Running "TestRN" with {"rootTag":441}
 ERROR  Invariant Violation: View config getter callback for component `RemoteVideoView` must be a function (received `undefined`).

This error is located at:
    in RemoteVideoView (at src/index.tsx:87)
    in RemoteVideoView (at App.js:208)
    in RCTView (at View.js:32)
    in View (at App.js:207)
    in RCTView (at View.js:32)
    in View (at App.js:185)
    in RCTView (at View.js:32)
    in View (at ScrollView.js:1682)
    in RCTScrollView (at ScrollView.js:1800)
    in ScrollView (at ScrollView.js:1826)
    in ScrollView (at App.js:181)
    in RCTView (at View.js:32)
    in View (at SafeAreaView.js:41)
    in SafeAreaView (at App.js:179)
    in App (at renderApplication.js:50)
    in RCTView (at View.js:32)
    in View (at AppContainer.js:92)
    in RCTView (at View.js:32)
    in View (at AppContainer.js:119)
    in AppContainer (at renderApplication.js:43)
    in TestRN(RootComponent) (at renderApplication.js:60)
 ERROR  Invariant Violation: View config getter callback for component `RemoteVideoView` must be a function (received `undefined`).

@elopezanaya How could I run it on React Native? Follow README.md does not work...

Are you trying to run the sample app?

No, I create a totally new React Native project. Follow README.md steps.
omnichannel-chat-sdk works.
voice-video-calling-react-native-sdk fails.
Here's my project.
https://github.com/jie-meng/TestRN
The code is in App.js.
Could you help me to check what's wrong with the code? Thanks!


Add option to set chrome timeout

Fixes #209
Adding a timeout option for the chrome tests

Thanks for the PR!
Hmm... instead of making the global timeout configurable here it'd probably just prefer to increase it significantly, and perhaps just add a warning if/when there is nothing printed out by the tests for a minute or two (kinda similar to what cargo itself does). Does that sound good to you?

sounds good. increasing the amount is fairly simple, to how long?

How does, I don't know, 10 minutes sound? (We can always increase it further if anyone complains.)

Closing since #212 was merged!


"First argument to DataView constructor must be an ArrayBuffer"

When attempting to open database in Chrome I receive the following error:
"First argument to DataView constructor must be an ArrayBuffer"
Error Message
Google Chrome | 61.0.3163.100 (Official Build) (64-bit) (cohort: Stable)
Revision | 57c9d07b416b5a2ea23d28247300e4af36329bdc-refs/branch-heads/3163@{#1250}
CKP Version: 2017.5.30

Hey there @TheAlmightyOS - I think the original CKP project may have lost some steam. I encourage you to try https://github.com/subdavis/CKPX available @ https://chrome.google.com/webstore/detail/ckpx-chrome-keepass-exten/fmhmiaejopepamlcjkncpgpdjichnecm?hl=en-US&gl=US
If the issue persists there, could you open this issue on my fork? Cheers!


Bot needs to handle ongoing votes after a restart

Currently, the bot loses track of what the message for voting is, despite it being stored in the database. Need to look into why the bot no longer accepts votes or end vote emojis on the ongoing vote message after a restart.

Fixed by commit 2415b60


nbd: add nbd service and test

Motivation for this change
This PR adds services.nbd which generates the nbd-server systemd service and configuration.
Changes:

add programs.nbd which adds the nbd package and also the nbd module,
add services.nbd which creates nbd-server.service from the given configuration,
add nixos/tests/nbd.nix which exercises the above,
add the above test to passthru.tests so that it's run automatically.

Things done

Built on platform(s)

[X] x86_64-linux
[ ] aarch64-linux
[ ] x86_64-darwin
[ ] aarch64-darwin

[ ] For non-Linux: Is sandbox = true set in nix.conf? (See Nix manual)
[X] Tested, as applicable:

NixOS test(s) (look inside nixos/tests)
and/or package tests
or, for functions and "core" functionality, tests in lib/tests or pkgs/test
made sure NixOS tests are linked to the relevant packages

[ ] Tested compilation of all packages that depend on this change using nix-shell -p nixpkgs-review --run "nixpkgs-review rev HEAD". Note: all changes have to be committed, also see nixpkgs-review usage
[ ] Tested basic functionality of all binary files (usually in ./result/bin/)
22.05 Release Notes (or backporting 21.11 Release notes)

[ ] (Package updates) Added a release notes entry if the change is major or breaking
[ ] (Module updates) Added a release notes entry if the change is significant
[x] (Module addition) Added a release notes entry if adding a new NixOS module
[x] (Release notes changes) Ran nixos/doc/manual/md-to-db.sh to update generated release notes

[ ] Fits CONTRIBUTING.md.

@peti Hi! I'm trying to upstream the nbd service I've been using.  Could you review the changes, please?
The service isn't fancy, and it doesn't expose all the nbd-server options.  I think it's the minimal configuration to get the server running.

Thank you for the review!
I'm going to make a bunch more commits to address the problems, and I'll squash them later before merging.

Since we were making changes to the options, I also added services.nbd.server.extraOptions and services.nbd.server.exports.<name>.extraOptions to allow configuring other options.  The default values are what I thought was reasonable (i.e. don't allow listing of exports, and support flushing the disks).
Still todo: hardening the systemd service.

The service is somewhat hardened now: [1]
The remaining warnings are:

✗ PrivateNetwork=                                             Service has access to the host's network
✗ RestrictAddressFamilies=~AF_(INET|INET6)                    Service may allocate Internet sockets
✗ IPAddressDeny=                                              Service does not define an IP address allow list

I think the above are unavoidable because it's a server.  We could lock down IPAddressDeny, but the server should be doing this itself.

User=/DynamicUser=                                          Service runs as root user

I think this is necessary because it will work with real block devices.

✗ DeviceAllow=                                                Service has a device ACL with some special devices

There is a device ACL, but we also have DevicePolicy=closed instead of strict.  With strict, the server fails to start with Failed to set up standard input: Operation not permitted.

✗ PrivateDevices=                                             Service potentially has access to hardware devices

I think this unavoidable.

✗ ProtectProc=

The option is set to noaccess, so I don't know why this has an ✗.  If I don't set it, there's a warning message, but if I set it, there's no warning like we see above.

✗ RootDirectory=/RootImage=                                   Service runs within the host's root directory

I have not attempted to get the server running in a chroot.  I imagine that would be a deep rabbit hole.

✗ SystemCallFilter

I have not attempted to figure out which syscalls the server needs.
[1]:
  NAME                                                        DESCRIPTION                                                                   EXPOSURE
✗ PrivateNetwork=                                             Service has access to the host's network                                           0.5
✗ User=/DynamicUser=                                          Service runs as root user                                                          0.4
✓ CapabilityBoundingSet=~CAP_SET(UID|GID|PCAP)                Service cannot change UID/GID identities/capabilities
✓ CapabilityBoundingSet=~CAP_SYS_ADMIN                        Service has no administrator privileges
✓ CapabilityBoundingSet=~CAP_SYS_PTRACE                       Service has no ptrace() debugging abilities
✗ RestrictAddressFamilies=~AF_(INET|INET6)                    Service may allocate Internet sockets                                              0.3
✓ RestrictNamespaces=~CLONE_NEWUSER                           Service cannot create user namespaces
✓ RestrictAddressFamilies=~…                                  Service cannot allocate exotic sockets
✓ CapabilityBoundingSet=~CAP_(CHOWN|FSETID|SETFCAP)           Service cannot change file ownership/access mode/capabilities
✓ CapabilityBoundingSet=~CAP_(DAC_*|FOWNER|IPC_OWNER)         Service cannot override UNIX file/IPC permission checks
✓ CapabilityBoundingSet=~CAP_NET_ADMIN                        Service has no network configuration privileges
✓ CapabilityBoundingSet=~CAP_SYS_MODULE                       Service cannot load kernel modules
✓ CapabilityBoundingSet=~CAP_SYS_RAWIO                        Service has no raw I/O access
✓ CapabilityBoundingSet=~CAP_SYS_TIME                         Service processes cannot change the system clock
✗ DeviceAllow=                                                Service has a device ACL with some special devices                                 0.1
✗ IPAddressDeny=                                              Service does not define an IP address allow list                                   0.2
✓ KeyringMode=                                                Service doesn't share key material with other services
✓ NoNewPrivileges=                                            Service processes cannot acquire new privileges
✓ NotifyAccess=                                               Service child processes cannot alter service state
✗ PrivateDevices=                                             Service potentially has access to hardware devices                                 0.2
✓ PrivateMounts=                                              Service cannot install system mounts
✓ PrivateTmp=                                                 Service has no access to other software's temporary files
✓ PrivateUsers=                                               Service does not have access to other users
✓ ProtectClock=                                               Service cannot write to the hardware clock or system clock
✓ ProtectControlGroups=                                       Service cannot modify the control group file system
✓ ProtectHome=                                                Service has no access to home directories
✓ ProtectKernelLogs=                                          Service cannot read from or write to the kernel log ring buffer
✓ ProtectKernelModules=                                       Service cannot load or read kernel modules
✓ ProtectKernelTunables=                                      Service cannot alter kernel tunables (/proc/sys, …)
✗ ProtectProc=                                                                                0.1
✓ ProtectSystem=                                              Service has strict read-only access to the OS file hierarchy
✓ RestrictAddressFamilies=~AF_PACKET                          Service cannot allocate packet sockets
✓ RestrictSUIDSGID=                                           SUID/SGID file creation by service is restricted
✗ SystemCallArchitectures=                                    Service may execute system calls with all ABIs                                     0.2
✗ SystemCallFilter=~@clock                                    Service does not filter system calls                                               0.2
✗ SystemCallFilter=~@debug                                    Service does not filter system calls                                               0.2
✗ SystemCallFilter=~@module                                   Service does not filter system calls                                               0.2
✗ SystemCallFilter=~@mount                                    Service does not filter system calls                                               0.2
✗ SystemCallFilter=~@raw-io                                   Service does not filter system calls                                               0.2
✗ SystemCallFilter=~@reboot                                   Service does not filter system calls                                               0.2
✗ SystemCallFilter=~@swap                                     Service does not filter system calls                                               0.2
✗ SystemCallFilter=~@privileged                               Service does not filter system calls                                               0.2
✗ SystemCallFilter=~@resources                                Service does not filter system calls                                               0.2
✓ AmbientCapabilities=                                        Service process does not receive ambient capabilities
✓ CapabilityBoundingSet=~CAP_AUDIT_*                          Service has no audit subsystem access
✓ CapabilityBoundingSet=~CAP_KILL                             Service cannot send UNIX signals to arbitrary processes
✓ CapabilityBoundingSet=~CAP_MKNOD                            Service cannot create device nodes
✓ CapabilityBoundingSet=~CAP_NET_(BIND_SERVICE|BROADCAST|RAW) Service has no elevated networking privileges
✓ CapabilityBoundingSet=~CAP_SYSLOG                           Service has no access to kernel logging
✓ CapabilityBoundingSet=~CAP_SYS_(NICE|RESOURCE)              Service has no privileges to change resource use parameters
✓ RestrictNamespaces=~CLONE_NEWCGROUP                         Service cannot create cgroup namespaces
✓ RestrictNamespaces=~CLONE_NEWIPC                            Service cannot create IPC namespaces
✓ RestrictNamespaces=~CLONE_NEWNET                            Service cannot create network namespaces
✓ RestrictNamespaces=~CLONE_NEWNS                             Service cannot create file system namespaces
✓ RestrictNamespaces=~CLONE_NEWPID                            Service cannot create process namespaces
✓ RestrictRealtime=                                           Service realtime scheduling access is restricted
✗ SystemCallFilter=~@cpu-emulation                            Service does not filter system calls                                               0.1
✗ SystemCallFilter=~@obsolete                                 Service does not filter system calls                                               0.1
✓ RestrictAddressFamilies=~AF_NETLINK                         Service cannot allocate netlink sockets
✗ RootDirectory=/RootImage=                                   Service runs within the host's root directory                                      0.1
  SupplementaryGroups=                                        Service runs as root, option does not matter
✓ CapabilityBoundingSet=~CAP_MAC_*                            Service cannot adjust SMACK MAC
✓ CapabilityBoundingSet=~CAP_SYS_BOOT                         Service cannot issue reboot()
✓ Delegate=                                                   Service does not maintain its own delegated control group subtree
✓ LockPersonality=                                            Service cannot change ABI personality
✓ MemoryDenyWriteExecute=                                     Service cannot create writable executable memory mappings
  RemoveIPC=                                                  Service runs as root, option does not apply
✓ RestrictNamespaces=~CLONE_NEWUTS                            Service cannot create hostname namespaces
✓ UMask=                                                      Files created by service are accessible only by service's own user by default
✓ CapabilityBoundingSet=~CAP_LINUX_IMMUTABLE                  Service cannot mark files immutable
✓ CapabilityBoundingSet=~CAP_IPC_LOCK                         Service cannot lock memory into RAM
✓ CapabilityBoundingSet=~CAP_SYS_CHROOT                       Service cannot issue chroot()
✓ ProtectHostname=                                            Service cannot change system host/domainname
✓ CapabilityBoundingSet=~CAP_BLOCK_SUSPEND                    Service cannot establish wake locks
✓ CapabilityBoundingSet=~CAP_LEASE                            Service cannot create file leases
✓ CapabilityBoundingSet=~CAP_SYS_PACCT                        Service cannot use acct()
✓ CapabilityBoundingSet=~CAP_SYS_TTY_CONFIG                   Service cannot issue vhangup()
✓ CapabilityBoundingSet=~CAP_WAKE_ALARM                       Service cannot program timers that wake up the system
✓ RestrictAddressFamilies=~AF_UNIX                            Service cannot allocate local sockets
✓ ProcSubset=                                                 Service has no access to non-process /proc files (/proc subset=)

→ Overall exposure level for nbd-server.service: 3.4 OK :-)

Commits squashed.
I think this PR is ready for review again.

I've made more changes and squashed again.  Open for review.

Thank you for the careful review!

Thank you!


position: sticky -> position: -webkit-sticky

Hi,
I use node-sass via the Visual Studio Code extension https://github.com/yutent/scss-to-css
When I have position: sticky; in .scss than it compiles to:
position: -webkit-sticky;
position: sticky;

As I see position: -webkit-sticky; is not needed anymore.
See: https://caniuse.com/?search=position%3A sticky (the prefix -webkit is needed for Safari 7.1-12.1. Last release of Safari 12.1 was in 2019 (see: https://en.wikipedia.org/wiki/Safari_version_history#Safari_12)
I would say, that -webkit-sticky is not used anymore.
(CC: @yutent)

This is not a mistake.
What you need is to place a file .scssrc.

That plugin is probably using something like PostCSS to add the prefixes, that isn't anything to do with this library


radarr tag

I'm having issue to get radarr tags it's not adding movie with the desired tag below is example
Oscars:
imdb_list: https://www.imdb.com/search/title/?title_type=feature&groups=oscar_winner
sort_title: ++++_1Oscars
sync_mode: sync
summary: Oscar Winning Movies
collection_order: release
radarr_tag: Oscars
url_poster: https://theposterdb.com/api/assets/10049/
Config File
radarr:                                         # Can be individually specified per library as well
url: http://192.168.0.******/
token: ****************
version: v3
add: true
root_folder_path: /Movies/
monitor: true
availability: announced
quality_profile: Any
tag:
search: false
it add movie without tag in radarr

can you find that collection in your meta.log file and send me the output for the whole section

fix is in develop

ok it might look as stupid question but how to install develop version by docker I'm using Synology

instead of using the latest tag use the develop tag


No Longer Able to Set Python Editor for different file extensions in VS2022

In past versions of the software I have always been able to set the Python Editor for a given file extension
[The Python Editor is no longer in the "Editor" dropdown]
Steps to Reproduce

Tools -->
Options -->
Text Editor -->
File Extension -->
Enter new extension that you want to be treated like a py file
View the "Editor" dropdown list and the Python Editor is no longer there

I installed all the Python packages during installation as well as the Data Science Stuff.

The option of Python Editor can be found in VS2019 but is not in the list in VS2022.

duplicate of #6797


feat: add support for Angular 5.1

remove empty metadata workaround
The issue is fixed in Angular 5.1 (angular/angular@a1d4c2d).

tests-ios


Can I use as an MVC client an application on .net framework 4.5.1 with identityserver4 v4.0.4

Hi, can you please tell me Can I use as an MVC client an application on .net framework 4.5.1 with identityserver4 v4.0.4.
Client support on .net framework 4.5.1, is it only through Ws federation or are there any other options?
I want to build identityserver4 server on .net core 3.1
Will I have to revert to old versions of identityserver4 in this case? to connect client applications written in .net framework 4.5.1
Thanks!

WS-Federation would be one options - or using OWIN + OIDC.

@leastprivilege could you provide any examples or sample repo with it working?

@mirusky Well - you could browse the old IdentityServer3 samples....there's an archived repo in this org.

I've tried some sample and they work, but when I need to run IdentityServer client with your own user ( because some layout colors, custom buttons etc ... ) I can't make this work, I didn't see any client sample with Owin + Database / AspNet Identity


Add TALL stack preset

There's the official front-end preset already, but I've recently made a tool dedicated to presets. This is the TALL preset for this tool, which can be installed with just one command.
Note that the content of the preset is mostly the same as the front-end one.
npx use-preset laravel-tall

Is there a way we can differentiate the title with the one above it?

Ah, I thought it would be problematic, too. The tool is called Preset so it doesn't help. Maybe call mine Laravel TALL Preset, and the official one Laravel TALL Front-end Preset or something along those lines?

Is the difference that yours is a JS library? If so we could add (PHP) and (JS) respectively.

Hmm, that would be confusing, people could think it's installing something JavaScript-related.
I think the best way would be to mention front-end in the official one's name, since it's the name of the organisation it's hosted on? Or just not change the name, since they're both actually the same preset, but use different tools—their description differentiate them.
We actually have a few duplicate names on awesome-tailwindcss, I don't think that's a big deal.
If you really want a name change, I'll think about something later tonight and update the PR

Yeah you're right. It's probably not that big of a deal. Thanks for the PR!


Support phoenix 1.7

Added the phoenix_view package to mix.exs to support Phoenix.View inside 1.7+ Phoenix apps.
This package is also mentioned in the Phoenix 1.6.x-1.7 upgrade guide
Update the phoenix dependency to 1.7

Commit has been removed, and the stray comma.

Thanks!

@GeorgeRDBuckley can you reference the git repo for your mix dep? Once you confirm it's working on your fresh phoenix 1.7 app, I will be happy to submit a release to hex


Aborting query execution in the WebUI should actually cancel the query on the server

as mentioned in #1571 the Aardvark webui uses synchroneous REST calls to send AQL-queries to the server.
Therefore the  button will just abort the HTTP request waiting for the server reply with the result, the Query will continue to be executed on the server.
Since the webui didn't get a response, it can't know the Query ID and thus not attempt to cancel its execution on the server.
Using Asynchroneous execution on the server this can be achieved.
The webinterface then can react to the cancel button by sending a cancel operation to the server.
To fetch the actual results of the query it has to poll for them.

added into devel branch.
ffbf9d57e8823de6cae09dd075b388c98604f1b1


Support for carrying forward gRPC request headers through service implementation

Provide support for selectively making gRPC request headers available in Service implementation. For e.g. an Authenticated Principal sent via Headers is made available to the service implementation.

Implemented and available 1.3-SNAPSHOT release. Filters can now specify headers that need to be forwarded - see sample usage in AuthFilter and GreeterService and HelloBeanService for access via ApplicationHeaders.


Update to JDK 8 u202

I confirmed that centos6-presto-admin-tests-runtime builds, but no further testing.

@electrum Would you like to port this PR to https://github.com/prestosql/docker-images?

@sopel39 is there any caveat related to centos6-presto-admin-tests-runtime?

Hard to tell, but I don't think simple java update should break anything.


Issue with transformer for sentence classification notebook

When using https://github.com/keras-team/keras-io/blob/master/examples/nlp/text_classification_with_transformer.py. I am getting the following error, How to solve it?
**TypeError: tf__call() missing 1 required positional argument: 'training'**

I am having this issue back again.  I am running in Colab, tensorflow version 2.17.  Did it reapper by any chance?


A new project can't run on the android emulator, it will flash back

PS E:\flutter\flutter-project\myapp_test> flutter run --debug
Using hardware rendering with device Android SDK built for x86. If you get graphics artifacts, consider enabling software rendering
with "--enable-software-rendering".
Launching lib/main.dart on Android SDK built for x86 in debug mode...
Initializing gradle...                                              0.9s
Resolving dependencies...                                           4.7s
Running Gradle task 'assembleDebug'...
Running Gradle task 'assembleDebug'... Done                         2.8s
Built build\app\outputs\apk\debug\app-debug.apk.
E/flutter ( 5868): [ERROR:flutter/runtime/dart_vm_data.cc(19)] VM snapshot invalid and could not be inferred from settings.
E/flutter ( 5868): [ERROR:flutter/runtime/dart_vm.cc(238)] Could not setup VM data to bootstrap the VM from.
E/flutter ( 5868): [ERROR:flutter/runtime/dart_vm_lifecycle.cc(89)] Could not create Dart VM instance.
F/flutter ( 5868): [FATAL:flutter/shell/common/shell.cc(218)] Check failed: vm. Must be able to initialize the VM.

PS E:\flutter\flutter-project\myapp_test> flutter doctor -v
[√] Flutter (Channel stable, v1.7.8+hotfix.3, on Microsoft Windows [Version 10.0.17134.885], locale zh-CN)
    • Flutter version 1.7.8+hotfix.3 at E:\flutter\flutter_windows_v1.7.8+hotfix.3-stable\flutter
    • Framework revision b712a172f9 (10 days ago), 2019-07-09 13:14:38 -0700
    • Engine revision 54ad777fd2
    • Dart version 2.4.0

[√] Android toolchain - develop for Android devices (Android SDK version 29.0.1)
    • Android SDK at C:\Users\xfj\AppData\Local\Android\sdk
    • Android NDK location not configured (optional; useful for native profiling support)
    • Platform android-29, build-tools 29.0.1
    • Java binary at: E:\Adroid install\jre\bin\java
    • Java version OpenJDK Runtime Environment (build 1.8.0_152-release-1343-b01)
    • All Android licenses accepted.

[√] Android Studio (version 3.4)
    • Android Studio at E:\Adroid install
    • Flutter plugin version 37.1.1
    • Dart plugin version 183.6270
    • Java version OpenJDK Runtime Environment (build 1.8.0_152-release-1343-b01)

[√] Connected device (1 available)
    • Android SDK built for x86 • emulator-5554 • android-x86 • Android 7.0 (API 24) (emulator)

• No issues found!

@despacito2 Do you experience it using current stable v1.9.1+hotfix.2 or master? There were issues about release building #40770 which were fixed from dart side, but I'm not sure if that's related to your issue.

Without additional information, we are unfortunately not sure how to resolve this issue. We are therefore reluctantly going to close this bug for now. Please don't hesitate to comment on the bug if you have any more information for us; we will reopen it right away!
Thanks for your contribution.