Client logging to CloudWatch

🗒 Summary
This branch adds a logging utility module to the DUM codebase which supports submission of all logged messages to AWS CloudWatch Logs via an API Gateway endpoint. Submission to the endpoint leverages the same Cognito authentication credentials as the endpoint used to request S3 ingress.
⚙ Test Data and/or Report
A unit test module has been added for the new log_utils.py module.
♻ Related Issues
Resolves #21

@nutjob4life Thanks for the reminder about adding the command-line argument for log level. It's been added and hopefully the branch is ready to merge now.

Thanks @collinss-jpl! 🎉


Custom Field not getting mapped from Jira to ADO

Describe the problem
I have a Jira field Component/s (in Details) and want to map into custom field tF Components into ADO but is not getting mapped.
Tool version

3.0.115

Attachments
Please attach the following files:
config-agile.json
jira-export-log-231124-191934.txt
wi-import-log-231124-191955.txt
Screenshots

The entry in your config looks weird: "source": "Component/s"
Confirm that this is the correct name of the field? You might need to do a Rest API query to find the correct key of the issue field.

Hi @Alexander-Hjelm I checked in the rest response and I could see different name like below -
"components": [
{
"self": "https://xxxxrest/api/2/component/xxx",
"id": "16163",
"name": "comp"
}
]
but after changing the name in config still it didnt get map
{
"source": "components",
"target": "tF Components",
"mapper": "MapArray",
"for":"Epic,Feature,Task,User Story,Bug"
}
Is there something I am missing here

Are you sure that the reference name of the field in ADO is actually "tF Components"? This looks strange. Are you maybe using the field name instead? Usually spaces are not allowed in the reference name.

Field consolidation is a PRO feature only. You can read more about the PRO version, which is currently in an early adopter evaluation phase, here: https://github.com/solidify/jira-azuredevops-migrator#jira-azure-devops-migrator-pro
You can also use the contact information there to inquire about purchasing the PRO version :)

Got it, thanks.


This documentation and the demo no longer work

To make this work, you have to invoke .WithRedirectUri("msal<client id>://auth") when creating the AuthenticationClient in the main app.

Document Details
⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

ID: 11f5b457-d99a-06d4-d203-f9eeaa27e0d9
Version Independent ID: b23b3a5d-b63b-dfe1-bb46-94f57c907be5
Content: Authenticate Users with Azure Active Directory B2C - Xamarin
Content Source: docs/xamarin-forms/data-cloud/authentication/azure-ad-b2c.md
Product: xamarin
Technology: xamarin-forms
GitHub Login: @davidbritch
Microsoft Alias: dabritch

@n8allan it looks like the sample is built against v4.0.0 of the MSAL library. The current version is 4.7.1. Can you clarify:

Which Microsoft.Identity.Client Nuget package you had this issue with?
Which platform you had the issue with?

I tested this across platforms and it worked at the time so I'm curious if a minor revision update introduced breaking changes or if there's some other issue I missed. I'd like to repro with the same version and platform you used.

@n8allan Disregard the questions in my last comment. I just found this thread, which has more detail:
https://github.com/Azure-Samples/active-directory-b2c-xamarin-native/issues/28
I'm still investigating this. Our doc/sample relied on setting a custom redirect URI in the Azure portal, which should redirect control back to the application without requiring the WithRedirectUri method call. I want to understand this change so I can note it in the doc for future users.

Hi @n8allan I have updated our sample and docs changes will be rolling out shortly. Thanks for bringing this to our attention.
One thing I found was that our sample worked for me, without specifying the WithRedirectUri. I'm relatively sure this is because my Azure test instance only had a single redirect URI and so it redirected back to that by default when auth was completed. However, if you have multiple Redirect URIs and do not supply the WithRedirectUri clause, Azure does not know where to redirect the request after auth is complete. I have updated the docs with a note about this!
Thanks again.


Incorrect comparisons against result of len() function

This script should print "true":
BEGIN
{
  @[1] = 1;
  @[2] = 2;

  $count = len(@);
  // Uncomment this line and it works
  //$count = 2;

  printf("count: %d\n", $count);

  if ($count > 1) {
    print("true");
  } else {
    print("false");
  }

  printf("count: %d\n", $count);

  clear(@);
  exit();
}

Output:
Attaching 1 probe...
count: 2
false
count: 2

We can see that $count holds the value 2 (as expected), but this value does not evaluate as greater than 1 for some reason.
If we use the literal 2 instead of the result of len(@), then we get the expected result.

Hm, my output on latest master (unless I did some mistake):
# src/bpftrace test.bt
[...]
BPF program is too large. Processed 1000001 insn
processed 1000001 insns (limit 1000000) max_states_per_insn 65 total_states 75003 peak_states 25025 mark_read 5

ERROR: Loading BPF object(s) failed.

Hm, my output on latest master (unless I did some mistake):
# src/bpftrace test.bt
[...]
BPF program is too large. Processed 1000001 insn
processed 1000001 insns (limit 1000000) max_states_per_insn 65 total_states 75003 peak_states 25025 mark_read 5

ERROR: Loading BPF object(s) failed.

That's odd - my bpftrace compiles the script down to 168 instructions and I don't think there are any loops in there (except the for-each-map-elem).
Things that could be relevant are that I'm on LLVM 17 and my kernel is 5.19 but with lots of newer BPF features backported.
Here's my full --info:
System
  OS: Linux 5.19.0-0_fbk11_hardened_11538_g61e82533119f #1 SMP Wed Oct 4 09:20:00 PDT 2023
  Arch: x86_64
Build
  version: v0.21.0-33-g32ca
  LLVM: 17.0.6
  unsafe probe: no
  bfd: yes
  liblldb (DWARF support): yes
  libsystemd (systemd notify support): no
Kernel helpers
  probe_read: yes
  probe_read_str: yes
  probe_read_user: yes
  probe_read_user_str: yes
  probe_read_kernel: yes
  probe_read_kernel_str: yes
  get_current_cgroup_id: yes
  send_signal: yes
  override_return: yes
  get_boot_ns: yes
  dpath: yes
  skboutput: yes
  get_tai_ns: yes
  get_func_ip: yes
  jiffies64: yes
  for_each_map_elem: yes
Kernel features
  Instruction limit: 1000000
  Loop support: yes
  btf: yes
  module btf: yes
  map batch: yes
  uprobe refcount (depends on Build:bcc bpf_attach_uprobe refcount): yes
Map types
  hash: yes
  percpu hash: yes
  array: yes
  percpu array: yes
  stack_trace: yes
  perf_event_array: yes
  ringbuf: yes
Probe types
  kprobe: yes
  tracepoint: yes
  perf_event: yes
  kfunc: yes
  kprobe_multi: yes
  uprobe_multi: no
  raw_tp_special: yes
  iter: yes

Strange, I'm using the same LLVM with pretty much the same features:
# bpftrace --info
System
  OS: Linux 6.8.8-200.fc39.x86_64 #1 SMP PREEMPT_DYNAMIC Sat Apr 27 17:42:13 UTC 2024
  Arch: x86_64

Build
  version: v0.21.0-33-g32ca
  LLVM: 17.0.6
  unsafe probe: no
  bfd: yes
  liblldb (DWARF support): yes
  libsystemd (systemd notify support): no

Kernel helpers
  probe_read: yes
  probe_read_str: yes
  probe_read_user: yes
  probe_read_user_str: yes
  probe_read_kernel: yes
  probe_read_kernel_str: yes
  get_current_cgroup_id: yes
  send_signal: yes
  override_return: no
  get_boot_ns: yes
  dpath: yes
  skboutput: yes
  get_tai_ns: yes
  get_func_ip: yes
  jiffies64: yes
  for_each_map_elem: yes

Kernel features
  Instruction limit: 1000000
  Loop support: yes
  btf: yes
  module btf: yes
  map batch: yes
  uprobe refcount (depends on Build:bcc bpf_attach_uprobe refcount): yes

Map types
  hash: yes
  percpu hash: yes
  array: yes
  percpu array: yes
  stack_trace: yes
  perf_event_array: yes
  ringbuf: yes

Probe types
  kprobe: yes
  tracepoint: yes
  perf_event: yes
  kfunc: yes
  kprobe_multi: yes
  uprobe_multi: yes
  raw_tp_special: yes
  iter: yes

By a brief look, it seems that the for-loop callback body is expanded and inlined way too many times.

I'm seeing the same thing as @viktormalik but I'm on llvm12
$ sudo ./src/bpftrace --info
System
  OS: Linux 6.4.3-0_fbk11_2563_g44ec95f7d7f4 #1 SMP Thu Apr 18 16:09:12 PDT 2024
  Arch: x86_64

Build
  version: v0.21.0-33-g32ca
  LLVM: 12.0.1
  unsafe probe: no
  bfd: yes
  liblldb (DWARF support): yes
  libsystemd (systemd notify support): no

Kernel helpers
  probe_read: yes
  probe_read_str: yes
  probe_read_user: yes
  probe_read_user_str: yes
  probe_read_kernel: yes
  probe_read_kernel_str: yes
  get_current_cgroup_id: yes
  send_signal: yes
  override_return: yes
  get_boot_ns: yes
  dpath: yes
  skboutput: yes
  get_tai_ns: yes
  get_func_ip: yes
  jiffies64: yes
  for_each_map_elem: yes

Kernel features
  Instruction limit: 1000000
  Loop support: yes
  btf: yes
  module btf: yes
  map batch: yes
  uprobe refcount (depends on Build:bcc bpf_attach_uprobe refcount): yes

Map types
  hash: yes
  percpu hash: yes
  array: yes
  percpu array: yes
  stack_trace: yes
  perf_event_array: yes
  ringbuf: yes

Probe types
  kprobe: yes
  tracepoint: yes
  perf_event: yes
  kfunc: yes
  kprobe_multi: yes
  uprobe_multi: yes
  raw_tp_special: yes
  iter: yes

I had a closer look at the issue that I'm observing.
From verifier log:
[...]
31: (85) call bpf_for_each_map_elem#164       ; R0_w=scalar() R7=0 R10=fp0 fp-24=0 fp-32=mmmmmmmm
[...]
from 31 to 169: frame1: R1=map_ptr(map=AT_,ks=8,vs=8) R2=map_key(map=AT_,ks=8,vs=8) R3=map_value(map=AT_,ks=8,vs=8) R4=fp[0]-24 R10=fp0 cb
169: frame1: R1=map_ptr(map=AT_,ks=8,vs=8) R2=map_key(map=AT_,ks=8,vs=8) R3=map_value(map=AT_,ks=8,vs=8) R4=fp[0]-24 R10=fp0 cb
;
169: (79) r1 = *(u64 *)(r4 +0)        ; frame1: R1_w=0 R4=fp[0]-24 cb
170: (07) r1 += 1                     ; frame1: R1_w=1 cb
171: (7b) *(u64 *)(r4 +0) = r1        ; frame1: R1_w=1 R4=fp[0]-24 cb
172: (b7) r0 = 0                      ; frame1: R0_w=0 cb
173: (95) exit
mark_precise: frame1: last_idx 173 first_idx 31 subseq_idx -1
mark_precise: frame1: regs=r0 stack= before 172: (b7) r0 = 0
returning from callee:
 frame1: R0_w=0 R1_w=1 R2=map_key(map=AT_,ks=8,vs=8) R3=map_value(map=AT_,ks=8,vs=8) R4=fp[0]-24 R10=fp0 cb
to caller at 31:
 R0=scalar() R1=map_ptr(map=AT_,ks=8,vs=8) R2=func() R3=fp-24 R4=0 R7=0 R10=fp0 fp-24_w=1 fp-32=mmmmmmmm

from 173 to 31: R0=scalar() R1=map_ptr(map=AT_,ks=8,vs=8) R2=func() R3=fp-24 R4=0 R7=0 R10=fp0 fp-24=1 fp-32=mmmmmmmm
;
31: (85) call bpf_for_each_map_elem#164       ; R0_w=scalar() R7=0 R10=fp0 fp-24=1 fp-32=mmmmmmmm
[...]

Insn 31 is the call to bpf_for_each_map_elem. It has a jump to insn 169 which is where the callback function starts. Then, the callback function is analysed, ending with insn 173 which jumps back to 31. The problem here is that the state changed, fp-24=1 as opposed to fp-24=0 in the first visit to insn 31. This should be the counter value which we store on the stack.
I'm not sure if this is our problem or a verifier bug.
@ajor could you perhaps attach the output of your run with -d verifier option? That could shed some light on this issue.

This gets weirder...
This is my output with -d verifier, bearing in mind that the script runs for me without verifier complaints normally:
Attaching 1 probe...
BPF verifier log for BEGIN_1:
--------------------------------------

ERROR: Unknown BPF object load failure. Try using the "-d libbpf" option to see the full loading log.
ERROR: Loading BPF object(s) failed

With just -d libbpf (no -d verifier) I get:
[DEBUG] libbpf: loaded kernel BTF from '/sys/kernel/btf/vmlinux'
[DEBUG] libbpf: loaded kernel BTF from '/sys/kernel/btf/vmlinux'
[DEBUG] libbpf: loading object 'd0e150-1940' from buffer
[DEBUG] libbpf: elf: section(2) .text, size 40, link 0, flags 6, type=1
[DEBUG] libbpf: sec '.text': found program 'map_len_cb' at insn offset 0 (0 bytes), code size 5 insns (40 bytes)
[DEBUG] libbpf: elf: section(3) s_BEGIN_1, size 1352, link 0, flags 6, type=1
[DEBUG] libbpf: sec 's_BEGIN_1': found program 'BEGIN_1' at insn offset 0 (0 bytes), code size 169 insns (1352 bytes)
[DEBUG] libbpf: elf: section(4) .rels_BEGIN_1, size 256, link 20, flags 40, type=9
[DEBUG] libbpf: elf: section(5) license, size 4, link 0, flags 3, type=1
[DEBUG] libbpf: license of d0e150-1940 is GPL
[DEBUG] libbpf: elf: section(6) .maps, size 80, link 0, flags 3, type=1
[DEBUG] libbpf: elf: section(13) .BTF, size 798, link 0, flags 0, type=1
[DEBUG] libbpf: elf: section(15) .BTF.ext, size 120, link 0, flags 0, type=1
[DEBUG] libbpf: elf: section(17) .eh_frame, size 80, link 0, flags 2, type=1
[INFO] libbpf: elf: skipping unrecognized data section(17) .eh_frame
[DEBUG] libbpf: elf: section(18) .rel.eh_frame, size 32, link 20, flags 40, type=9
[INFO] libbpf: elf: skipping relo section(18) .rel.eh_frame for section(17) .eh_frame
[DEBUG] libbpf: elf: section(20) .symtab, size 648, link 1, flags 0, type=2
[DEBUG] libbpf: looking for externs among 27 symbols...
[DEBUG] libbpf: collected 0 externs total
[DEBUG] libbpf: map 'AT_': at sec_idx 6, offset 0.
[DEBUG] libbpf: map 'AT_': found type = 1.
[DEBUG] libbpf: map 'AT_': found key [8], sz = 8.
[DEBUG] libbpf: map 'AT_': found value [8], sz = 8.
[DEBUG] libbpf: map 'AT_': found max_entries = 4096.
[DEBUG] libbpf: map 'ringbuf': at sec_idx 6, offset 32.
[DEBUG] libbpf: map 'ringbuf': found type = 27.
[DEBUG] libbpf: map 'ringbuf': found max_entries = 262144.
[DEBUG] libbpf: map 'event_loss_counter': at sec_idx 6, offset 48.
[DEBUG] libbpf: map 'event_loss_counter': found type = 2.
[DEBUG] libbpf: map 'event_loss_counter': found key [20], sz = 4.
[DEBUG] libbpf: map 'event_loss_counter': found value [8], sz = 8.
[DEBUG] libbpf: map 'event_loss_counter': found max_entries = 1.

[DEBUG] libbpf: object 'd0e150-1940': failed (-22) to create BPF token from '/sys/fs/bpf', skipping optional step...
[DEBUG] libbpf: prog 'BEGIN_1': added 5 insns from sub-prog 'map_len_cb'
[DEBUG] libbpf: prog 'BEGIN_1': insn #28 relocated, imm 140 points to subprog 'map_len_cb' (now at 169 offset)
[DEBUG] libbpf: map 'AT_': created successfully, fd=3
[DEBUG] libbpf: map 'ringbuf': created successfully, fd=4
[DEBUG] libbpf: map 'event_loss_counter': created successfully, fd=5

With -d libbpf -d verifier I additionally see this at the end of the above log:
[WARN] libbpf: prog 'BEGIN_1': BPF program load failed: Invalid argument
[WARN] libbpf: prog 'BEGIN_1': failed to load: -22
[WARN] libbpf: failed to load object 'd0e100-1940

same problem as BPF program is too large. Processed 1000001 insn
The kernel version is our company's internal version ,but we didn't modify the verifier.c.
System
  OS: Linux 6.6.0-47.001-rc1-xxxxxx
  Arch: x86_64

Build
  version: v0.21.0-153-g6782
  LLVM: 18.1.3
  unsafe probe: no
  bfd: yes
  liblldb (DWARF support): yes
  libsystemd (systemd notify support): no

  skboutput: yes
  get_tai_ns: yes
  get_func_ip: yes
  jiffies64: yes
  for_each_map_elem: yes

Kernel features
  Instruction limit: 1000000
  Loop support: yes
  btf: yes
  module btf: yes
  map batch: yes
  uprobe refcount (depends on Build:bcc bpf_attach_uprobe refcount): yes

Map types
  hash: yes
  percpu hash: yes
  array: yes
  percpu array: yes
  stack_trace: yes
  perf_event_array: yes
  ringbuf: yes

Probe types
  kprobe: yes
  tracepoint: yes
  perf_event: yes
  kfunc: yes
  kprobe_multi: no
  uprobe_multi: yes
  raw_tp_special: yes
  iter: yes

I have traced the verifier code:
static int do_check(struct bpf_verifier_env *env)
...
				if (state->curframe) {
					/* exit from nested function */
					err = prepare_func_exit(env, &env->insn_idx);
					if (err)
						return err;
					do_print_state = true;
					continue;
				}
...

prepare_func_exit prints the returning from callee ...... log, and it didn't return an error so the code continue, but somehow the state->curframe hadn't changed, so it went into a dead loop.

FWIW I'm now also seeing the "BPF program is too large. Processed 1000001 insn" verifier error after upgrading from that 5.19 kernel to 6.9.

Sounds like a potential verifier bug then?

The verifier cannot complete the loop, since there is precise check after the loop 'if r2 s> r1'. It makes fp-8 in the caller stack frame precise and the widening logic doesn't happen and all loop iterations look different, so it never converges.
I don't think we can do much about it.
It's best to post such issues at bpf @ vger to have a thread there and hopefully somebody can propose a workaround.
The workaround:
volatile u64 glob_var;

s_BEGIN_1(..)
{
  u64 ctx = 0;

  bpf_for_each_map_elem(... &ctx);
  glob_var = ctx;
  if (glob_var > 1)
    ...
}

in other words obfuscate loop callback ctx data via global variable.

As the verifier log for the minimal repro:
returning from callee:
 frame1: R0_w=0 R1_w=0xc820 R2=map_key(map=AT_,ks=8,vs=8) R3=map_value(map=AT_,ks=8,vs=8) R4=fp[0]-8 R10=fp0 cb
to caller at 21:
 R0=scalar() R1=map_ptr(map=AT_,ks=8,vs=8) R2=func() R3=fp-8 R4=0 R6=1 R7=0 R10=fp0 fp-8_w=0xc820 fp-16=mmmmmmmm

It seems that the for_map_each_elem keeps calling the cb function but cannot break. Cannot understand why.
@ajor @4ast

Store the len() value in the map, that works fine in 6.8.0-45. Seems to be a workaround.
BEGIN
{
  @[1] = 1;
  @[2] = 2;

  $count = len(@);
  @glob["count"] = $count;

  // Uncomment this line and it works
  // $count = 2;

  printf("count: %d\n", $count);

  if (@glob["count"] > 1) {
    print("true");
  } else {
    print("false");
  }

  printf("count: %d\n", $count);

  clear(@glob);
  clear(@);
  exit();
}

Output:
Attaching 1 probe...
count: 2
true
count: 2


Missing auto merge options in a forked repo that I have permissions on

In a forked repo, eg https://github.com/microsoft/vscode-proxy-agent:

Start to create a PR
Notice there's no auto-merge button, since there are no permissions to write on the default upstream repo
Switch to the forked upstream, where there are permissions to write to

:bug: The auto merge button should appear

I was about to file an issue for what I believe is this same scenario - I'll just paste it here in case it's helpful or actually different

Start to create a PR on my local repo I have push access on
GHPRI suggests I merge changes into the default upstream, which I don't have push access on. I assume this is why I don't see the checkbox for auto-merge
Switch the destination to my repo I do have push access on, but I still don't see the checkbox
Try setting the auto merge setting, but this doesn't seem to make a difference

😅
https://github.com/microsoft/vscode-pull-request-github/blob/7a4f4d6f168d48a1f7a4b2b58e1fca0037117506/src/github/createPRViewProvider.ts#L390-L391


Sample code for face signature?

Hello,
i'd try face sig created on rest api (https://signature.centralus.cts.speech.microsoft.com/UI/index.html) , but no findings in https://docs.microsoft.com/en-us/java/api/com.microsoft.cognitiveservices.speech.conversation?view=azure-java-stable either.
Would be better if any sample provided, thanks.

Document Details
⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

ID: 166f57df-05f7-aacf-3a93-a11e688bd144
Version Independent ID: c62ef65b-049b-e231-e728-3d2a8f4ddd97
Content: Transcribe multi-participant conversations with the Speech SDK - Speech Services - Azure Cognitive Services
Content Source: articles/cognitive-services/Speech-Service/how-to-use-conversation-transcription-service.md
Service: cognitive-services
Sub-service: speech-service
GitHub Login: @jhakulin
Microsoft Alias: jhakulin

Thanks for feedback.
Speech SDK APIs for Conversation Transcription support only voice signature currently.
Support for face/image signature will be added to SDK APIs in the  future releases.

@jhakulin Thank you Jarno.
@wukun2015
We will now proceed to close this thread. If there are further questions regarding this matter, please respond here and @YutongTie-MSFT and we will gladly continue the discussion.


[Visual Studio Code - Project Manager] Even after installing Project Manager the extension doesn't work

Extension
https://www.raycast.com/MarkusLanger/vscode-project-manager
Description
Hey 👋
Maybe some weird caching going on. After installing Project Manager into VS Code I still get the following warning:

To use this extension, the Visual Studio Extension Project Manager is required.

Steps To Reproduce

Ensure you don't have Project Manager installed in VS Code
Install Visual Studio Code to Raycast
Search code into Raycast
You get this warning To use this extension, the Visual Studio Extension [Project Manager](https://marketplace.visualstudio.com/items?itemName=alefragnani.project-manager) is required.
Install Project Manager in VS Code
Search code into Raycast
Same warning 🤔

I have reset my PR and reset VS Code.
Current Behaviour
No response
Expected Behaviour
Id expect it to have picked up the VS Code changes?

Hello @sambowenhughes,
do you have any projects saved in the "Project Manger" of VSCode?
Could you check the path and the structure of the project.json of the VS Code Project Manger Extension in VS Code?

Hey @MarkusLanger
So I've just checked my projects.json file. I hadn't configured any projects which is why ray cast wasn't picking them up.
My bad, first time using Project Manager so hadn't realized I needed to manually configure them. After setting up Project Manager correctly Raycast is working perfectly. Closing this issue 🙏


Upgrade to 0.2.3

Demo: https://s3.amazonaws.com/vitessce-data/demos/2020-08-04/9a53b08/index.html.
I'll do Firefox, Safari, and then Chrome.  If you see this and can take one, please do.

I will do chrome


Dns zone creation should support private dns zones

including ZoneType, ResolutionVirtualNetworkId, RegistrationVirtualNetworkId
see powrshell options
Environment summary
Install Method (e.g. pip, interactive script, apt-get, Docker, MSI, edge build) / CLI version (az --version) / OS version / Shell Type (e.g. bash, cmd.exe, Bash on Windows)

azure-cli-network 2.0.26


Recording setup for Storage test cases.

Currently blocked by https://github.com/Azure/azure-sdk-for-cpp/issues/768.


Figure out demo layout in workspace

Currently - our demo layout is just a full page with no navigation back/forward into the regular workspace.  It's a bit jarring and not intuitive.
Figure out what should be done and implement in the workspace

@dgutride Demos (if we continue to call them that) will need a similar level of documentation as Components. For example, if the Login Page is presented as a demo, there may be a significant amount of documentation that is required to provide guidance on things like authentication, how to handle errors, and various options available, etc. Today that's captured on our website here: http://www.patternfly.org/pattern-library/application-framework/login-page/#overview  My take is that we need a layout similar to our component pages that allows for launching the full screen demo in a new window and also allows for users to get the code for that demo page and provides usage guidelines.
Would be glad to help by wireframing something out.

Closed via https://github.com/patternfly/patternfly-next/pull/226


Fix things after bzlmod migration

Second attempt at bzlmod migration. This time there's almost no naming changes and I verified that it works in IntelliJ 2023.3 on Linux.
One thing which certainly requires explanation is the introduction of files non_module_deps.bzl, tools/BUILD and tools/java_grpc_library.bzl.
Previously grpc-java was a source dependency - it was built from ground up and we had to add its dependencies to our maven dependencies. Some of them had non-standard names. In WORKSPACE one can set up aliases to be able to satisfy this naming scheme. AFAIK in bzlmod there's no such functionality. Perhaps it could be done with module extensions or something like that, but I think it was easier to simply copy the two .bzl files from grpc-java we used and download the compiled compiler (sic) from maven.
Fixes #5432.
TODO:

[x] Fix test com.google.idea.blaze.base.qsync.DependencyTrackerImplTest.getPendingExternalDeps_followJavaDeps_allBuilt(DependencyTrackerImplTest.java:201)
[ ] Figure out how to regenerate the module lockfile for all systems/configurations at once (cc @tpasternak)
[ ] Test on non-Linus OSes

https://github.com/bazelbuild/rules_jvm_external/issues/1016 the problem with grpc-java dependency names seems to have been fixed now, so I can revert that part if you consider it problematic @mai93

Yes, I think it will be better if we removed the extra files: non_module_deps.bzl, tools/BUILD and tools/java_grpc_library.bzl.

bazelbuild/rules_jvm_external#1016 the problem with grpc-java dependency names seems to have been fixed now, so I can revert that part if you consider it problematic @mai93

Unfortunately as I mentioned in Slack it turned out that grpc-java dependency names are still incompatible with names used in this repository. So we have to either

change the names used in this repo (so we'd be back to 100 BUILD file changes)
use this solution which removes the source dependency on grpc-java
wait until grpc-java migrates to bzlmod (which can take a lot of time)

@Wyverald we are trying to migrate the plugin to use bzlmod and we have a problem with the lock file. the plugin has a dependency on rules_go which adds an entry in the lock file that is specific to the architecture on which it is created, this causes a problem when the plugin is built on a different OS/architecture. Is there a way around this? @tpasternak for more details

@tpasternak FYI, the response from bazel team about bzlmod lock file question

I addressed the comments I had and manually tested it. I will merge it tomorrow if no one has a problem.


[WIP] Replaced PhantomJS with Chrome Headless

PhantomJS was never fully compatible; Chrome is an actual browser.
PhantomJS has been abandoned too. It's a relic.
Fixes #887

Don't merge yet. Needs a fix in teaspoon first.

Coverage decreased (-0.7%) to 98.476% when pulling 891339c3c953b2a059588ec67e56c84557520745 on scrollytelling:headless-chrome into 40cda2b30048e8af271c2257a224210a5c2667d3 on codevise:master.

Coverage decreased (-0.7%) to 98.476% when pulling 891339c3c953b2a059588ec67e56c84557520745 on scrollytelling:headless-chrome into 40cda2b30048e8af271c2257a224210a5c2667d3 on codevise:master.

Not that https://github.com/codevise/teaspoon/pull/2 is merged, is this still blocked by something?

Now that codevise/teaspoon#2 is merged, is this still blocked by something?

Available time :)
Feel free to take this one over; I don't have available time in the coming weeks.

see #952


Error with permissions. UID/GID are correct.

I am experiencing an issue with permission, using encryption.sh --gen-key
I get this error:
docker exec -ti mailserver encryption.sh --gen-key

Change (N)ame, (E)mail, or (O)kay/(Q)uit? O
We need to generate a lot of random bytes. It is a good idea to perform
some other action (type on the keyboard, move the mouse, utilize the
disks) during the prime generation; this gives the random number
generator a better chance to gain enough entropy.
gpg: agent_genkey failed: Permission denied
Key generation failed: Permission denied

Even though, UID and GID are correct.
Here is the list
 ls -lat /var/mail
total 48
drwxr-xr-x  2 root    root    4096 Feb  5 16:53 dovecot
drwxr-xr-x  3 clamav  clamav  4096 Feb  5 16:33 clamav
drwxr-xr-x  2 vmail   vmail   4096 Feb  5 11:39 sieve
drwxr-x---  2 _rspamd _rspamd 4096 Feb  4 16:24 rspamd
drwxr-xr-x 12 vmail   vmail   4096 Feb  2 19:20 .
drwxr-xr-x  3 zeyple  zeyple  4096 Feb  2 19:20 zeyple
drwxr-xr-x  5 vmail   vmail   4096 Feb  2 19:19 dkim
drwxr-xr-x  5 vmail   vmail   4096 Feb  2 16:11 vhosts
drwxr-xr-x  1 root    root    4096 Jan 31 20:39 ..
drwxr-x---  4<PHONE_NUMBER> Dec 28 17:54 amavis
drwxr-xr-x  3 root    root    4096 Dec 28 17:54 postfix
drwxr-xr-x  3 vmail   vmail   4096 Dec 28 17:51 ssl

zeyple.pl has correct UID/GID as well.
here is the list
# ls -lat /usr/local/bin
total 68
drwxr-xr-x 1 root   root    4096 Feb  4 16:24 .
-rwxr-xr-x 1 root   root    3965 Feb  4 16:24 fetchmail.pl
-rwxr-xr-x 1 root   root     244 Feb  4 16:24 quota-warning.sh
drwxr-xr-x 1 root   root    4096 Jan 31 20:42 ..
-rwxr-xr-x 1 root   staff    376 Jan 31 20:42 envtpl
-rwxr-xr-x 1 root   root    5815 Jan 31 20:39 dumpcerts.sh
-rwxr-xr-x 1 root   root    1193 Jan 31 20:39 encryption.sh
-rwxr-xr-x 1 root   root   21981 Jan 31 20:39 run.sh
-rwxr-xr-x 1 zeyple zeyple  8337 Jan 31 20:39 zeyple.py

I am using the latest version of your mailserver
What am I doing wrong?
Looking forwarding hearing from you soon
Regards

Because zeyple user don't have permission to use TTY ls -l $(tty), so you can't use GPG --gen-key with interactive mode.
But you can create your key with batch mode :
docker exec -i mailserver encryption.sh --batch --generate-key <<EOF
  %echo Generating John Doe GPG key
  Key-Type: default
  Key-Length: 1024
  Subkey-Type: default
  Subkey-Length: 1024
  Name-Real: John Doe
  Name-Comment: test key
  Name-Email<EMAIL_ADDRESS>  Expire-Date: 0
  Passphrase: xxxxxxxxxxxxxxx
  %commit
  %echo done
EOF

But I do not see why you need to generate your GPG key with my docker image. You private key must be on your computer gpg home dir not server side. Zeyple needs your public key only to encrypt your mails.

I was doing it just for an experimental purpose. I had no intention to keep private keys on server.
Thank you for your quick help. It is solved now.


[RPMLint] A lot of warings when compiling code on openSUSE

Compiling Godot 2.0.3 on openSUSE Tumbleweed (gcc6).
I get following warnings when comping godot:
1 - Undefined behavior of statements:
I: Program causes undefined operation
   (likely same variable used twice and post/pre incremented in the same expression).
   e.g. x = x++; Split it in two operations.
W: godot sequence-point scene/animation/tween_interpolaters.cpp:260, 265, 271, 288, 293, 299, 367, 373, 375
W: godot sequence-point scene/gui/line_edit.cpp:455, 459

An example is:
return c * (t /= d) * t * t + b;

What I think should result in:
return c * (t / d) ^ 3 + b;

But I think it is also possible the compiler interprets it as:
return c * t * t * (t / d) + b;

2 - strict-aliasing warnings:
 I: Program is likely to break with new gcc. Try -fno-strict-aliasing.
  Please port the code to use getaddrinfo().

Gethostbyname should not be used because it does not support IPv6, and in v6 becomes more and more popular (e.g. my provider only gives me an IPv6 range and IPv4 only as carrier grade nat).
EDIT: Regarding the sequence-point error: It seems godot is compiled without specific -std=c++XXX so it will use c++98 on gcc < 6, which will result in undefined behavior (execution order undefined), but starting with gcc6 c++14 is the default c++ flavor so the Sequenced Before/After is used. Which may result in defined behavior (I am not sure at the moment), so in that case builds with gcc < 6 might be broken.

GCC 6 has known issues with Godot, does it not?


Ability to pass a proxy to requestMatchDetails

Hey!
Regarding documentation:
requestMatchDetails() - There is a server-side rate-limit of 100 requests per 24 hours on this method.

So i am thinking if it's doeble/realistic to add proxy-server option for this method call, or somewhere else?

That doesn't sound like something that should be part of the library. You should look at making logic within your bot to handle this. I should warn you though, that there are various IP restrictions set too, so you won't simply be able to run dozens of bots on the same IP.

@jimmydorry great. If you can tell me some restrictions you faced with - it would be really helpful ?

Be careful as well, this is an issue which has popped up in the past on the node-steam pages as well. See here for more information. Basically using proxies is against the Stea Subscriber Agreement, so you shouldn't be using one. Since node-dota2 does not do any networking, and relies on node-steam for that, we basically just follow their policy

Basically, if you're planning on trying to circumvent the rate-limiting on the methods by using proxies, you'll probably get your account banned. The 'proper' way to do things is having multiple accounts running from multiple IP's.

You will know when you are rate limited. Just design with scaling kept in mind. It violates the spirit of it all if it was easy to know where the limits sit.

@Crazy-Duck @jimmydorry thank you guys both for answers and for great library. Closing this issue.


[BUG] sparse-tools ci test is failed due to race condition

Describe the bug

https://github.com/longhorn/sparse-tools/actions/runs/9755401075
To Reproduce

Expected behavior

Support bundle for troubleshooting

Environment

Longhorn version:
Impacted volume (PV):
Installation method (e.g. Rancher Catalog App/Helm/Kubectl):
Kubernetes distro (e.g. RKE/K3s/EKS/OpenShift) and version:

Number of control plane nodes in the cluster:
Number of worker nodes in the cluster:

Node config

OS type and version:
Kernel version:
CPU per node:
Memory per node:
Disk type (e.g. SSD/NVMe/HDD):
Network bandwidth between the nodes (Gbps):

Underlying Infrastructure (e.g. on AWS/GCE, EKS/GKE, VMWare/KVM, Baremetal):
Number of Longhorn volumes in the cluster:

Additional context

Close this ticket as the issue resolved after fix merged

https://github.com/longhorn/sparse-tools/actions/runs/9770054062
https://github.com/longhorn/sparse-tools/actions/runs/9770195279


Expose mongoose module so applications can use ObjectId type

Want to isolate as much as possible from Mongoose. See https://github.com/NateFerrero/amna/blob/master/src/lib/types.js - if we absolutely need access to the ObjectId type, we should put it here.


Globs not working...?

Hi, thank you for this plugin.  I'm trying to run it in my project and the following works for a single file:
return gulp.src('./frontend/src/sass/components/_Alert.scss')
    .pipe(stylelint({
        syntax: 'scss',
        debug: true,
        reporters: [{
            formatter: 'string',
            console: true
        }]
    }));

I have an error in _Alert.scss that outputs properly.
However, if I try to run it on a glob of all the Sass files in that directory, as this, I get no errors and it seems as though it's passed properly when it shouldnt because of the error in _Alert.scss.
return gulp.src('./frontend/src/sass/components/*.scss')
    .pipe(stylelint({
        syntax: 'scss',
        debug: true,
        reporters: [{
            formatter: 'string',
            console: true
        }]
    }));

Am I missing something stupid here?
Thanks in advance.

Hello. This is weird, I've just run a test and it seems to be working fine.

Hmm, I can definitely confirm it's not running. Is there anything I can do to help troubleshoot? Would love to get this working. When I use stylelint directly through the CLI it works as expected on that path with the glob.

Can you provide a small example which reproduces the issue? I have a test repository with several scss files and it's working fine. Actually, I have never tried running gulp without globs...

Awesome, I am finishing my work day but will look at this tomorrow afternoon when I'm back in the office (have a doctor's appointment in the AM). I'll try my code in the test repo and see if it works. I suppose its worth nothing I'm using Gulp 3.9.1 rather than 4 but we'll see if that makes any difference.

This should work the same in Gulp 3.x and 4.x (just tested).
Take care :)

Good to know. Of note as well is I just ran stylelint CLI on frontend/src/sass/**/*.scss and I'm getting this:
./node_modules/.bin/stylelint "frontend/src/sass/**/*.scss"
TypeError: Cannot read property 'isCalculationEnabled' of undefined
    at findOperators (/Users/mprzybylski/Work/SpotHero/SpotHero-Django/node_modules/stylelint-scss/dist/utils/sassValueParser/index.js:79:36)
    at /Users/mprzybylski/Work/SpotHero/SpotHero-Django/node_modules/stylelint-scss/dist/rules/operator-no-unspaced/index.js:192:47
    at /Users/mprzybylski/Work/SpotHero/SpotHero-Django/node_modules/stylelint/node_modules/postcss/lib/container.js:148:26
    at AtRule.each (/Users/mprzybylski/Work/SpotHero/SpotHero-Django/node_modules/stylelint/node_modules/postcss/lib/container.js:114:22)
    at AtRule.walk (/Users/mprzybylski/Work/SpotHero/SpotHero-Django/node_modules/stylelint/node_modules/postcss/lib/container.js:147:21)
    at /Users/mprzybylski/Work/SpotHero/SpotHero-Django/node_modules/stylelint/node_modules/postcss/lib/container.js:150:32
    at AtRule.each (/Users/mprzybylski/Work/SpotHero/SpotHero-Django/node_modules/stylelint/node_modules/postcss/lib/container.js:114:22)
    at AtRule.walk (/Users/mprzybylski/Work/SpotHero/SpotHero-Django/node_modules/stylelint/node_modules/postcss/lib/container.js:147:21)
    at /Users/mprzybylski/Work/SpotHero/SpotHero-Django/node_modules/stylelint/node_modules/postcss/lib/container.js:150:32
    at AtRule.each (/Users/mprzybylski/Work/SpotHero/SpotHero-Django/node_modules/stylelint/node_modules/postcss/lib/container.js:114:22)

I haven't used stylelint-scss before, so I'm not sure about the origin of the issue there.
As for the issue with gulp-stylelint, if you can create a small repository (you can just fork gulp-stylelint-test) I will definitely take a look.

Alright, I just took some time to play with the test repo. Here are my findings:

On initial run as I just followed the instructions, I had 501 errors, not 0 like the repo says. They were for I believe max-indentation in each file. Not sure why that happened.
The plugin will not exclude globs that look like this (which was working correctly for me when I was using scss-lint): !./frontend/src/sass/vendor/* I'm not a globbing expert so I can't tell you which is correct but all I know is the prior plugin we used did exclude that. I had to convert it to this: !./frontend/src/sass/vendor/**/*.scss
And finally, here was my issue. Given the following lint method:

const sassLint = src => {
    return gulp.src(src)
        .pipe(stylelint({
            syntax: 'scss',
            reporters: [{
                formatter: 'string',
                console: true
            }],
            failAfterError: false
        }));
};

This was my actual task(s):
gulp.task('lint:sass:spothero', () => {
    sassLint([
        `${config.spothero.sass}/**/*.scss`,
        `${config.frontend.sass}/**/*.scss`,
        `!${config.spothero.sass}/desktop/jobs/_greenhouse.scss`,
        `!${config.spothero.sass}/utils/sprites/**/*.scss`,
        `!${config.frontend.sass}/vendor/**/*.scss`,
        `!${config.frontend.sass}/common/_icomoon.scss`,
        `!${config.frontend.sass}/utils/**/*.scss`
    ]);
});

Notice that the task itself does not return sassLint, it just runs it. With the prior linter that worked fine. By just adding a return to the front, it now works as expected.


Remove BitcoinBeachMarketing from contacts

An account with the username BitcoinBeachMarketing does a lot of transactions with users because it pays out quiz rewards. Having BitcoinBeachMarketing as a contact isn't desirable because it can lead to accidental payments and take up space in users' contacts list. We should filter out "BitcoinBeachMarketing" from displayed contacts.

note: long term we could have a property in the backend to avoid a user being added as a contact


Use index.php for routing instead of framework/main.php

Overview
Follow up after moving modules into vendor folder, and a precondition to run webroot in public subfolder.
We've previously relied on a custom url query parameter for routing, which is clunky at best: It means you can't use this as a query parameter in your own payloads, and has security implications around route spoofing. Webservers seem to consistently set REQUEST_URI now, or at least there's various ways to get to this information without relying on mod_rewrite (see symfony's Request.php for the amount of variations - we should probably support more of them...)
Acceptance Criteria

Serve SilverStripe with only a minimal index.php file in the webroot
Support operation on various webservers (incl. ones without rewrite rule support)
Upgrading is documented, and as automated as possible
Server installation docs are upgraded

Tasks

[x] Fix framework tests
[x] Test installer in webroot and subfolder of webroot
[x] Fix Installer.php references to files
[x] Update index.php in installer
[ ] Test and fix IIS operation
[ ] Test installer and routing without rewrite support (index.php based routing)
[ ] Test protected assets operation
[x] Server installation docs
[x] Upgrading docs

Notes

Need to adjust staticpublisher module to new routing

Test
git clone -b pulls/4/request-uri https://github.com/open-sausages/silverstripe-installer.git 4.clean
cd 4.clean
composer config repositories.framework vcs https://github.com/open-sausages/silverstripe-framework.git
composer config repositories.assets vcs https://github.com/open-sausages/silverstripe-assets.git
composer require "silverstripe/framework:dev-pulls/4/request-uri as 4.0.x-dev" "silverstripe/assets:dev-pulls/1/remove-base-path-autodetect as 1.0.x-dev"

+1 for having debugger working in phpstorm without additional setup


Set Process Priority Advanced Option?

Technically setting the process priority (at least on Windows) could result in better performance especially in terms of video playback.
Would it be possible to use one of the mentioned API's and implement a process priority settings in the advanced settings? Can be Windows only, the majority of users will probably be on Windows anyway.
Link: https://github.com/electron/electron/issues/2101

This won't matter anymore. Twitch Support responded to both me (private email) and to the Chromium Team that they are aware of the CPU problems and are working on it.
Active Bugtracker:
https://bugs.chromium.org/p/chromium/issues/detail?id=877836&q=&colspec=ID Pri M Stars ReleaseBlock Component Status Owner Summary OS Modified


Github workflow folder and files

 Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.You have signed the CLA already but the status is still pending? Let us recheck it.


Restart process if Node crashes

Running the same process all day can case the runner's process to crash, we should listen for this kind of output and restart the process from scratch.

Similar issue


Removing even more code smells.

Short description outlining key changes/additions
Removing even more code smells.
JIRA Ticket Number
Type of change

[ ] Bug fix
[ ] New feature
[ ] Breaking change
[ ] Infrastructure change

Pull request checklist

[ ] I have added unit tests for new code that I have added
[ ] I have added/updated functional tests where appropriate
[ ] The code follows our coding standards

An exhaustive list of peer review checks can be read here

CI: No security warnings found


Add mentor resources

Fixes #5

Needs formatting, but looks good!

Thanks for adding these! But it needs a gif :)

✨


update lesson plan

maybe talk a little about having an anonymous function inside an event listener. we see an example of that under the timing function section, but it's never explained in the lesson what that is.

the transition between event listeners and timing functions seems awkward to me. the way it's set up, it doesn't seem clear as to why we're going into timing functions at this point. maybe add a sentence or two connecting the concepts?

you're definitely not gonna get to the additional topics section so maybe take out everything that says you do since it really is all you do. Also, most of the topics in this section are stuff they definitely should know so maybe explicitly tell them they should go through the section on their own time.

@nayana487 Awesome, thx for the comments.


middleware/firewall

Make a middleware that allows to filter address (or on anything basically). This should make it easy to allow some IPs to recurse and block others for instance.

https://github.com/CZ-NIC/knot-resolver/wiki/HTTP-2-interface-&-DNS-firewall#dns-firewall
rename this middleware to firewall?

Would help with hidden/stealth master/primary setups.
Currently I am using an external firewall to blacklist every request except for the AXFR/IXFR transfer IPs.
If one could add that to coredns itself, it would simplify our current setup.

[ Quoting<EMAIL_ADDRESS>in "Re: [miekg/coredns] middleware/fire..." ]

Would help with hidden/stealth master/primary setups.
Currently I am using an external firewall to blacklist every request except for the AXFR/IXFR transfer IPs.
If one could add that to coredns itself, it would simplify our current setup.

Yes, that would be the plan. First we need to invent some kind of firewall
language - or better yet - steal a good one from other servers.

Preliminary suggestion:
firewall [ZONES... ] {
    block/forbid [IP or IP range]
    block/forbid [IP or IP range]
    allow [IP or IP range]
    allow [IP or IP range]
}

Per zone firewall.
If only block is used everything else is allowed by default.
If only allow is used everything else is blocked by default.
If both are used everything is blocked by default and allow whitelists as usual. <- another option would be to disallow both as block then doesn't really make sense anyway.

[ Quoting<EMAIL_ADDRESS>in "Re: [miekg/coredns] middleware/fire..." ]

Preliminary suggestion:
firewall [ZONES... ] {
   block/forbid [IP or IP range]
   block/forbid [IP or IP range]
   allow [IP or IP range]
   allow [IP or IP range]
}

Per zone firewall.
If only block is used everything else is allowed by default.
If only allow is used everything else is blocked by default.
If both are used everything is blocked by default and allow whitelists as usual. <- another option would be to disallow both as block then doesn't really make sense anyway.

Thanks for the suggestion, something like this looks sane. Still want to see
some prior art on other impl (if possible).
Also if we're doing ranges and ACLing we should look at the AXFR/transfer stuff
as or make a decision this happens in the firewall layer - we needs TSIG stuff
here as well, me thinks
/Miek
--
Miek Gieben

How about RPZ in bind9?
https://dnsrpz.info

Talking about AXFR etc. it might lead to the firewall supporting the allowed/blocked types. Aka, but not sure, if that is actually needed.

[ Quoting<EMAIL_ADDRESS>in "Re: [miekg/coredns] middleware/fire..." ]

How about RPZ in bind9?
https://dnsrpz.info

Ack. I was also considering local ACL-ing to be fw issue. Maybe that requires
another middleware. Anyway nice things to think about after k8s is fixed and
current middleware stabilizes :-)


DOM Exception, Failed to execute 'insertBefore' on 'Node': for inline:true

flatpickr.js:2091 DOMException: Failed to execute 'insertBefore' on 'Node': The node before which the new node is to be inserted is not a child of this node.
at build (http://<IP_ADDRESS>/uxds/webroot/bootstrap/examples/flatpickr/flatpickr.js:446:36)
at init (http://<IP_ADDRESS>/uxds/webroot/bootstrap/examples/flatpickr/flatpickr.js:45:23)
at FlatpickrInstance (http://<IP_ADDRESS>/uxds/webroot/bootstrap/examples/flatpickr/flatpickr.js:1785:2)
at _flatpickr (http://<IP_ADDRESS>/uxds/webroot/bootstrap/examples/flatpickr/flatpickr.js:2088:26)
at n.fn.init.jQuery.fn.flatpickr (http://<IP_ADDRESS>/uxds/webroot/bootstrap/examples/flatpickr/flatpickr.js:2317:10)
Chrome/IE11, EasyPHP localhost
Inline option fails to open on load.

@ssdstech
What is your flatpickr version ?
Can you share the sample code that is causing this issue ?

flatpickr v3.0.6 - using it as a jquery instance in static html page
$jq(".flatpickr4").flatpickr(optional_config4); where optional _config4 contains the inline: true option as per the Inline Calendar doco
all other configs working well, just looks like this one has a glitch
cheers
Anthony

@ssdstech
I could not re-produce this, see, it works fine for me
Can you setup a jsfiddle ?

You have to set the wrap property to false.

I am experiencing the same issue in Angular

component.html
<ng2-flatpickr [config]="inlineDateOptions" name="formControlName"></ng2-flatpickr>
component.ts
  inlineDateOptions: FlatpickrOptions = {
    inline: true,
    wrap: false
  };

ISSUE : unable to get date in input filed.

Can anyone help ??

In ANGULAR somehow solved by its own
https://github.com/mezoistvan/ng2-flatpickr/issues/91#issuecomment-673913858


Add the ability to identify and set traits in 1 call

Users are currently doing multiple calls.

#59


Make sure ABR state stays in sync with DB state

The DB recieved code was only updating a single owner, however an ABR can have many owners. For the 'happy path' this was covered by a reconciliation with state Building which would move the state to complete.
If the AB had failed due to contamination however only a single AB would be updated to complete, which is why a lot of the Netty ABs are reported as failing even though the build has completed.

/test jvm-build-service-in-repo-apicurio-e2e

/test jvm-build-service-in-repo-apicurio-e2e

Looking at the resulting report all Netty ABs now end up in the correct state.

I rebased this on the just merged periodic fix of yours @stuartwdouglas
/test jvm-build-service-in-repo-apicurio-e2e
but if that flakes in unrelated ways, I'll merge anyway based on your prior findings at https://github.com/redhat-appstudio/jvm-build-service/pull/298#issuecomment-1269366838 and https://github.com/redhat-appstudio/jvm-build-service/pull/298#issuecomment-1269368044


[Google Meet] ...

Extension
https://www.raycast.com/vitoorgomes/google-meet
Description
its copied this link https://meet.google.com/landing, instead the link with the meet code so i can easily paste it to coworker
Who will benefit from this feature?
better flow using create gmeet in raycast
Anything else?
No response

@luckyand7, it should open - https://meet.google.com/new, and this link will create a meeting.
I can't say why you are redirected to https://meet.google.com/landing.

yes its redirected correctly, but copied to my clipboard is this url: https://meet.google.com/landing

What is you browser?
Could you please record screen with this bug?

https://github.com/user-attachments/assets/06e98206-2713-4384-9f83-dc2cf7d744d9
im using chrome

Here is PR for your problem
https://github.com/raycast/extensions/pull/13532

Thank you🙏

@luckyand7 please check

@raycastbot close this issue


SSL certificate expired for source: zh.dmzj

Source information
DMZJ 1.4.42
Source language
Chinese/zh
Steps to reproduce
Open any chapter of any manga
Expected behavior
I should see manga content
Actual behavior
I saw error message "SSLHandshakeException: Unacceptable certificate:
CN=DigiCert Global Root CA,
OU=www.digicert.com, O=DigiCert Inc, C=US"

Mihon/Tachiyomi version
0.16.3
Android version
Android 13/MIUI 14.0.8
Other details
The SSL certificate for *.dmzj.com has expired since 2023.11.9
However, certificate for *.idmzj.com still works. Maybe change the API URL to "nnv4api.idmzj.com" instead?
Acknowledgements

[X] I have searched the existing issues and this is a new ticket, NOT a duplicate or related to another open or closed issue.
[X] I have written a short but informative title.
[X] I have updated the app to version 0.15.3.
[X] I have updated all installed extensions.
[X] I have tried the troubleshooting guide.
[ ] I have admitted that I am a clown by having checked this box, as I have not read these acknowledgements.
[X] If this is an issue with the app itself, I should be opening an issue in the app repository.
[X] I will fill out all of the requested information in this form.

Source certificate misconfiguration, already resolved.


LocalTrack doesn't remove event listener when unpublished

https://github.com/livekit/client-sdk-js/blob/ae849e477a8a20f07f362313af057262badc0455/src/room/track/LocalTrack.ts#L19
Adds an 'ended' event to the underlying mediatstreamtrack that doesn't get removed.
Maybe a dispose function for the track that (for now) only removes this event listener and is called on track unpublish?

The 'ended' listener is supposed to be there as long as the LocalTrack claims ownership over the MediaStreamTrack.
I think the only thing missing is this line in your PR
track.off(TrackEvent.Ended, this.onTrackUnpublish);

When unpublished, the Publication object should no longer care about events that LocalTrack is firing.

There is currently one situation in which that line gets called and that's the unpublishTrack function of the LocalParticipant:
https://github.com/livekit/client-sdk-js/blob/f5e69ed6255aff01af1b900f6fb5f1d78ecc5e7f/src/room/participant/LocalParticipant.ts#L453
I used an override on the LocalTrack to subscribe and unsubscribe to the underlying mediatrack 'ended' event when the livekit TrackEvent.Ended is being subscribed/unsubscribed
https://github.com/livekit/client-sdk-js/blob/f5e69ed6255aff01af1b900f6fb5f1d78ecc5e7f/src/room/track/LocalTrack.ts#L127-L141

I see that line.. but not convinced why this is necessary. A LocalTrack, even when unpublished, should listen to the underlying MediaStreamTrack events.

Hm, I guess you are right.
Then the only question remains when to actually remove the event listener from the mediaStreamTrack.
Should I reconsider adding a dispose function to LocalTrack?

I still think we'd only need to update listener to TrackEvent.Ended inside LocalTrackPublication.setTrack and LocalParticipant.unpublishTrack:
i.e.
track.off(TrackEvent.Ended, this.onTrackUnpublish);

MediaStreamTrack isn't supposed to be reused across other LocalTracks, as long as the LocalTrack itself is re-usable.

I still think we'd only need to update listener to TrackEvent.Ended inside LocalTrackPublication.setTrack and LocalParticipant.unpublishTrack

Maybe I'm misunderstanding something.
What would you want to do with TrackEvent.Ended inside LocalTrackPublication?
But TrackEvent.Ended event on the Track itself should persist independently from the TrackPublication, right?
My understanding is:
LocalTrack:

holds mediaStreamTrack and listens to mediaStreamTrackEvents
emits TrackEvents
lives independently from publications

LocalTrackPublication

subscribes to TrackEvents
unpublishing doesn't affect the underlying LocalTrack

I'll update my PR to remove unnecessary changes and will try to address the reasoning for the remaining ones in code comments.


Kannada(kn) language support

Looks like Kannada language is not working,
\begin[papersize=a4]{document}
Hello SILE! \font[family=Noto Sans Kannada,size=10pt,language=kn]{ನಮಸ್ಕಾರ :)}
\end{document}

ISO639-1 code is kn
Using Libreoffice

Using Sile

Hello! Thanks for reporting. The problem is that SILE distinguishes between language and script, but at the moment it doesn't set the script appropriately when setting the language. I will get this fixed. In the meantime, a workaround is to set the script explicitly:
Hello SILE! \font[family=Noto Sans Kannada,size=10pt,language=kn,script=Knda]{ನಮಸ್ಕಾರ :)}


Weird fade animation bug

I guess there are some hidden elements there?
https://user-images.githubusercontent.com/5887929/151699979-e1a61677-7524-4841-bc6e-de1a06322478.mov
ref

https://github.com/kodadot/nft-gallery/pull/2084

hmm I'll check it out


missing module

from mhcpredict import base,genome,analysis
is genome.py not included in the package?
Thanks!

The import was written wrong. It should be
from mhcpredict import base,sequtils,analysis

You might find a few more bugs. I will add a few unit tests to check basic things are working.

Thnaks for your reply, Damien!
What is this line about? Appreciate if you can show me how to get the data.
#get data
df = Genome.genbank2Dataframe(genbankfile, cds=True)
On Mon, Sep 7, 2015 at 7:10 AM, Damien Farrell<EMAIL_ADDRESS>wrote:

The import was written wrong. It should be
from mhcpredict import base,sequtils,analysis
You might find a few more bugs. I will add a few unit tests to check basic
things are working.
—
Reply to this email directly or view it on GitHub
https://github.com/dmnfarrell/mhcpredict/issues/1#issuecomment-138272329
.

Yes the examples are probably a bit incomplete but I have updated them.
I have added some unit tests in tests.py and they can also serve as examples. You can run the tests from the package directory using python tests.py
The line df = sequtils.genbank2Dataframe(genbankfile) loads protiens from a genbank file into a dataframe format. You can also use fasta files with df = sequtils.fasta2Dataframe(fastafile)
There are sample files in the testing folder. genbank is more reliable than fasta because they use locus_tags for identifiers.

thanks, works great now.
On Tue, Sep 8, 2015 at 9:39 AM, Damien Farrell<EMAIL_ADDRESS>wrote:

Yes the examples are probably a bit incomplete but I have updated them.
I have added some unit tests in tests.py and they can also serve as
examples. You can run the tests from the package directory using python
tests.py
The line df = sequtils.genbank2Dataframe(genbankfile) loads protiens from
a genbank file into a dataframe format. You can also use fasta files with df
= sequtils.fasta2Dataframe(fastafile)
There are sample files in the testing folder. genbank is more reliable
than fasta because they use locus_tags for identifiers.
—
Reply to this email directly or view it on GitHub
https://github.com/dmnfarrell/mhcpredict/issues/1#issuecomment-138561348
.


Upgrade go to 1.23

Is your feature request related to a problem?
No
Describe the feature you'd like
Upgrade golang to version 1.23
Describe alternatives you've considered
No response
Teachability, Documentation, Adoption, Migration Strategy
No response

Go 1.23 is released! Release notes https://go.dev/doc/go1.23.
In order to be able to use some new features introduced in go1.23 and  obtain subsequent security vulnerability fixes. We plan to upgrade go version to 1.23.1 on master branch( from version v8.4.0 use the go1.23).


Testing

Hi, I have a question on test. What is the command to test the results on the Test (unseen)? I am a newbie still do not understand, I hope to get your reply. Thank you so much.

Hi,
You should use the argument: opts.test_submission.
Check the code here:
https://github.com/chihyaoma/regretful-agent/blob/master/tasks/R2R-pano/main.py#L209
Make sure you properly resume from a pre-trained checkpoint using the argument: opts.resume as well.

I got it. Thanks so much !

Hi,
I have another question. The installation of simulator in my system is successful and can run. And then how to present the training results on the Matterport3D simulator? There are only instructions for testing the Matterport3D simulator in Readme, I don't know how to visualize my training results.
I hope to get you reply again. Thanks again!

Hi,
I also have the same question. I don't know how to test on the project and visualize my training results on the Matterport3D simulator.I hope to get your reply. Thank you so much!!


Unable To Open Backup Wallet

Hello Sir! I have 759 RTM In My Wallet And Have more than 5 backup wallets. As I Installed New Windows due to some reasons. After Installation When I Tried To Open Backup Wallet It Is Showing Error that this File Is "Payment Request File Cannot Be Read. This Can Be Cause By Invalid File".

how do u open this. please go to discord for question like this?

As this is not an issue with the code it is better to help you on either Telegram or Discord. Please join one of those and ask for support.
Discord: https://discord.gg/2T8xG7e
Telegram: https://t.me/raptoreum


Set up CI with Azure Pipelines

[skip ci]

This pipeline configuration builds the application and produces a build for the Release configuration.


Quick switch project should restart language server

It currently re-uses the existing client for a given language, as the window hasn't changed.

After watching the logs with sublime.log_commands(True), I am not sure how this event can be observed directly.

Related question on the forum: https://forum.sublimetext.com/t/is-there-an-on-project-load-event/29660/2

Thanks for the tips, #95 should solve this.


python3Packages.defcon: rework packaging

properly handle optional-dependencies
Description of changes

Things done

Built on platform(s)

[x] x86_64-linux
[ ] aarch64-linux
[ ] x86_64-darwin
[ ] aarch64-darwin

[ ] For non-Linux: Is sandbox = true set in nix.conf? (See Nix manual)
[ ] Tested, as applicable:

NixOS test(s) (look inside nixos/tests)
and/or package tests
or, for functions and "core" functionality, tests in lib/tests or pkgs/test
made sure NixOS tests are linked to the relevant packages

[ ] Tested compilation of all packages that depend on this change using nix-shell -p nixpkgs-review --run "nixpkgs-review rev HEAD". Note: all changes have to be committed, also see nixpkgs-review usage
[ ] Tested basic functionality of all binary files (usually in ./result/bin/)
23.05 Release Notes (or backporting 22.11 Release notes)

[ ] (Package updates) Added a release notes entry if the change is major or breaking
[ ] (Module updates) Added a release notes entry if the change is significant
[ ] (Module addition) Added a release notes entry if adding a new NixOS module

[x] Fits CONTRIBUTING.md.

Result of nixpkgs-review pr 217953 run on x86_64-linux 1

27 packages built:

deltachat-desktop
noto-fonts-emoji
python310Packages.afdko
python310Packages.booleanoperations
python310Packages.cu2qu
python310Packages.defcon
python310Packages.fontmake
python310Packages.fontparts
python310Packages.glyphslib
python310Packages.mutatormath
python310Packages.nototools
python310Packages.statmake
python310Packages.ufo2ft
python310Packages.ufoprocessor
python311Packages.afdko
python311Packages.booleanoperations
python311Packages.cu2qu
python311Packages.defcon
python311Packages.fontmake
python311Packages.fontparts
python311Packages.glyphslib
python311Packages.mutatormath
python311Packages.nototools
python311Packages.statmake
python311Packages.ufo2ft
python311Packages.ufoprocessor
twitter-color-emoji


Re-export commonly used Automerge core types through Automerge Repo

In order to avoid problems created by importing mismatched versions of automerge's core CRDT library (and just the annoyance of having an extra import statement), in this PR I'm re-exporting "commonly used" Automerge types and functions.
Arguably some of these should just be better baked into DocHandle or something but I didn't want to let perfect be the enemy of good here and this is definitely an improvement.
Rarely used or more "internal" types and functions are also reexported via the AutomergeCore export which simply forwards on everything in next for now.
Questions for reviewers: did I miss any functions or types you commonly use? (We can always add more later.) Is there a better way to re-export this stuff? Do you hate AutomergeCore as the re-exported name? (I am leaning towards rebranding the existing automerge-js library to "core" as repo matures and making it the main "Automerge" export in a future release to hopefully reduce some confusion for new users.)

I don't love "AutomergeCore" - I think it's confusing.

Me either! Discussion of that below.

If it's important to curate which parts of the library you reexport, could we just export the individual methods without namespacing them?

I am indeed doing that, unless I've made a mistake? The types & methods exported will be in the Automerge-Repo namespace.

Alternatively, is there a reason not to just reexport Automerge as-is and with the same name?

The AutomergeCore is meant to be slightly awkward and should be unnecessary for almost everyone unless you're doing some kind of weird hackery like decoding binary network messages to inspect or bypassing the automerge-repo APIs for some reason.
I wanted to avoid using the name Automerge for the export because we intend to rename automerge-repo to automerge in an upcoming release (or conceptually, merge repo into Automerge core if you prefer to think of it that way.) In basically all cases, what we call automerge-repo now is what people should be using for any new project that doesn't want to specifically reimplement its features.
As to why re-export it at all, I've received reports a few times that folks importing both automerge-repo and automerge can wind up with mismatched versions and experience confusing bugs as a result. This guarantees you get a matching version.
So the options I can see are:

don't re-export the core library
splat Automerge into Repo's namespace (when I saw how much this would clutter the namespace with duplicate functionality i shied away from this)
export it as Automerge (i feel this is even more confusing for new users)
export it under some other name (which as we've discussed is kind of gross)

Of all of these not-great options I figured (4) was the most reasonable: we don't want to advertise or encourage the use of that re-export but it's there if you need it. We could name it something else like AutomergeInternals, or Automerge_DONT_USE_THIS or something.
But before we bikeshed any further on names would you agree that (4) is the least objectionable option? I have relatively weakly opinions here. I also hate exporting a bunch of bare functions -- it's hard to get away from with the string manipulation stuff because JS strings aren't objects -- but maybe I've missed something.
What do you think?

I am indeed doing that, unless I've made a mistake? The types & methods exported will be in the Automerge-Repo namespace.

aha sorry I was responding on my phone earlier and didn't catch that.
At any rate I do think that option 4 is more objectionable than any of options 1-3.

Could the problem of mismatched versions be solved by making Automerge a peer dependency instead of a direct dependency? Or some other way - surely we're not the first library in the JS ecosystem to need to do this.
Pretty sure this would be my preference. The mess of mashing the two namespaces together is unfortunate, but if they're going to be merged eventually anyway then that's our reality and we need to start dealing with it.
I would not be confused at all by an Automerge export, because there's only one thing that it could possibly be. Whereas any other name makes me think that it is something other than Automerge.

As for peer dependencies and such... I don't think anyone should ever have to import both @automerge/automerge and @automerge/automerge-repo. If you need something to work with Automerge Repo it should be exported from Automerge Repo! (Also, just pragmatically figuring out this dependency stuff is an endless tarpit of changing bundlers and standards and the people who have reported problems have definitely been experienced and knowledgeable JS devs so I don't think this is a trivial fix.)
I'm not comfortable with (2) because I don't want to export functions that you shouldn't use as part of Repo's namespace. For example, having handle.change() and also exporting the underlying doc = change(doc, callback) function in Repo's namespace... seems like a recipe for disaster.
Broadly speaking, I'm trying to prioritize legibility of the library for new users. It's not about me or you...
I guess the closest thing we have to common ground is (1). I think exporting an object called Automerge full of things you shouldn't touch is a DX landmine (as would be dumping everything into the root namespace) and you think renaming the export is a non-starter.
I strongly believe it would be a mistake to defer making improvements on the status quo until / unless we can schedule a redesign of the relationship between repo/core so... I think that just leaves (1).
WDYT?

Okay -- I'm going with (1) for now and only reexporting the specific types & functions above. Thanks for your thoughts all, the patch is better for 'em.


Run solution in VPC without Internet gateway and on-premises proxy

Hi,
we have a setup with a on-premises ntml proxy solution through a VPN connection. We have no Internet gateway in our VPC. I have spent days trying to get the solution to work in this situation and have solved all but one issue now.
My biggest problem has been to get the proxy environment variables to work everywhere for the AWS CLI command to work. For most of the things I have solved it by creating VPC endpoints in the VPC but for aws autoscaling command there is no endpoint available.
My final problem no is in the ssm.sh script that is sent to the EC2 instance when the backup is done. It can run all but the last aws autoscaling command, hence the instance is not shutdown directly, it has to wait until the stop_backup rule is triggered. Not a major problem but something I would love to solve.
The problem with the ssm.sh script seems to be that it's executed in a shell which dosen't pick up the proxy enviornments that I have configured in the UserData that is executed when the instance starts up. I have tried to insert variables in /etc/profile, /etc/bashrc, /etc/bash.bashrv and so on but it seems they are not picked up when the ssm.sh is executed.
I can of course go in to the lambda function and edit the ssm.sh file manually, but I would like to automate the installation fully and then that will not work since the file is downloaded from AWS when the solution is built, I can't see any way to edit it in yaml file.
Please advice how I should solve this issue.
Best regards,
Staffan

Hello,
Apologies for delayed response. As per my understanding you want to make proxy environment variables available to the ssm.sh script and automate the deployment. If you are still encountering the issue, there are couple of things that can be done here:

You can customize the ssm script and stage the artifacts locally in your account. When you do this, the solution would no longer download the scripts from AWS, rather use your customized artifacts. For modifying solution and using custom built assets in solution please refer to readme instructions.
Additionally, to use environment variable in your deployment, you can leverage lambda environment variables or ssm parameter store.

Let us know if this helps.

Hi @StaffanOlofsson - Closing this due to inactivity but please let us know if you still need assistance.


add verify cosign for run command

Signed-off-by: ye.sijun<EMAIL_ADDRESS>fixed: https://github.com/containerd/nerdctl/issues/611

Thanks, LGTM after rebase


Creating complex graphs in Grafana - CMK raw

Hi, I'm using Grafana with CheckMK Raw 2.0.0p6 and I haven't had any luck when it comes to complex graphs, it doesn't seem like I am the only one: https://forum.checkmk.com/t/checkmk-raw-with-grafana-combined-graph-graph-field-not-selectable/25181/14
The graph preview always seems to stay empty even though I have multiple weeks worth of data on my checkmk server, everything else seems to work, including predefined graphs and single metrics.
In case it might be useful, whatever combination of host and service regex I use, the graph field seems to stay empty. Is there something I'm forgetting or does it work for anyone else?

Thank you!

I'm having the same problem on CMK Raw2.0.0p9, even trying to set it on the JSON doesn't work

I tried using the same hosts and same grafana server but created a free checkmk instance (Enterprise edition but 10 hosts max) on docket and that worked.
I feel like it's a limitation of the raw edition which is annoying but understandable. It would be nice to have confirmation though.

It's weird because checkmk always points it out if the feature is only available for Enterprise.
I'm thinking of trying it using an older Grafana version...

Exactly what I thought at first. Let me what happens if you end up testing it. I might start looking into it at some point since I have other things to add to our grafana.
Télécharger Outlook pour Androidhttps://aka.ms/ghei36

From: ronaldocz @.>
Sent: Monday, August 30, 2021 4:29:16 PM
To: tribe29/grafana-checkmk-datasource @.>
Cc: Doneven2012 @.>; Author @.>
Subject: Re: [tribe29/grafana-checkmk-datasource] Creating complex graphs in Grafana - CMK raw (#41)
It's weird because checkmk always points it out if the feature is only available for Enterprise.
I'm thinking of trying it using an older Grafana version...
—
You are receiving this because you authored the thread.
Reply to this email directly, view it on GitHubhttps://github.com/tribe29/grafana-checkmk-datasource/issues/41#issuecomment-908670798, or unsubscribehttps://github.com/notifications/unsubscribe-auth/AJAPWFUHCYJR25COEQJZWLDT7PSZZANCNFSM5BNODI3A.
Triage notifications on the go with GitHub Mobile for iOShttps://apps.apple.com/app/apple-store/id1477376905?ct=notification-email&mt=8&pt=524675 or Androidhttps://play.google.com/store/apps/details?id=com.github.android&referrer=utm_campaign%3Dnotification-email%26utm_medium%3Demail%26utm_source%3Dgithub.

I have an old Grafana v5.3.1 () running so I just tested it, but sadly I got the same behaviour.

I'm going to assume this is a premium feature. Hopefully someone can confirm (or deny) that. Else we'll see if that becomes available one day.

From: ronaldocz @.>
Sent: Monday, August 30, 2021 9:33:45 PM
To: tribe29/grafana-checkmk-datasource @.>
Cc: Doneven2012 @.>; Author @.>
Subject: Re: [tribe29/grafana-checkmk-datasource] Creating complex graphs in Grafana - CMK raw (#41)
I have an old Grafana v5.3.1 () running so I just tested it, but sadly I got the same behaviour.
—
You are receiving this because you authored the thread.
Reply to this email directly, view it on GitHubhttps://github.com/tribe29/grafana-checkmk-datasource/issues/41#issuecomment-908825483, or unsubscribehttps://github.com/notifications/unsubscribe-auth/AJAPWFTMORQB55SE3H5IFX3T7QWPTANCNFSM5BNODI3A.
Triage notifications on the go with GitHub Mobile for iOShttps://apps.apple.com/app/apple-store/id1477376905?ct=notification-email&mt=8&pt=524675 or Androidhttps://play.google.com/store/apps/details?id=com.github.android&referrer=utm_campaign%3Dnotification-email%26utm_medium%3Demail%26utm_source%3Dgithub.

Combined graphs are not part of the RAW edition, thus the Grafana connector cannot query that endpoint.


fix: use system as the first message role instead of user

According to the OpenAI docs, you should use system for this type of message instead of user

LGTM

Actually good changes but OpenAI and OpenAPI are not the same thing

openAI is the company
openAPI is their api. openAI made openAPI. https://github.com/openai/openai-openapi

OpenAI and OpenAPI are not the same thing

Yeah I immediately went to bed after posting this PR and had a moment of realization that I may have mis-typed it but was too tired and lazy to check it

openAI made openAPI

OpenAPI is an API specification format and I'm almost entirely certain that OpenAI does not maintain the OpenAPI spec

Good catch, I forgot to update this in this app. Will upload the change on my end


Add Project Portfolio of Caijun7

Pull Request Test Coverage Report for Build 542

0 of 0 (NaN%) changed or added relevant lines in 0 files are covered.
No unchanged relevant lines lost coverage.
Overall coverage remained the same at 81.027%

Totals

Change from base Build 541:
0.0%

Covered Lines:
2951

Relevant Lines:
3642

💛  - Coveralls


Add and configure Webpack and Babel

Changes

Add Webpack and Babel
Configure them both
Update the directory structure to avoid using barrel files
Export each component individually

Multiple issues with Webpack are making me close this.


add support for unitdp=4 param

Xero API, by default, only support 2 decimal points.
?unitdp=4 param can be used to use unit price/amount with 4 decimal points e.g. POST invoices - https://api.xero.com/api.xro/2.0/Invoices?unitdp=4
See Rounding in Xero for more info

With release 2.0.0 https://github.com/XeroAPI/Xero-OpenAPI/releases/latest
We have addressed unit dp on all relevant endpoints and object datatypes.  This was tested and release in the Xero-Java 3.3.0 and will be included in next release of other language sdks


Guidelines for ssh

Thank for your work.
But after this audit, what are your guidelines for sshd_config ?
I've seen this one : https://wiki.mozilla.org/Security/Guidelines/OpenSSH#Modern_.28OpenSSH_6.7.2B.29 but your audit still show some warning.
Azlux

New version (already implemented in develop branch) will include "recommendations", based on detected sshd version and "best effort". Although, take into account, that some issues can't be resolved without upgrading to newer version.
If the output shows some warnings, it should also show description of those warnings. Care to elaborate with specific example? Otherwise, I can't really comment. But basically "my guideline" is to remove all failures and warnings, so that output is only "green".
Other than that, there are also other steps to harden SSHd configuration, like, generating Diffie-Hellman with higher bits, allowing only public-key authentication, etc. I've seen several of articles about that.

This software helps to adjust KexAlgorithms, Ciphers and MACs section in Your sshd_config. If You copy/pasted configuration from Mozilla guidelines, then just adjust it afterwards, according to ssh-audit output. Current version (1.5.0) output will show what to remove (warnings, failures), but new version (will be released next week) will have different section, called "recommendations", which will also show what to append to configuration.

Yes, sorry, forgot about HostKey section. Good catch! So, - that's HostKey setting in sshd_config. To get rid of this warning, You should remove HostKey /etc/ssh/ssh_host_ecdsa_key line. Can You verify that this helps?

Great I have now only warning.
So like I said, may be a small tutorial or some links for a better configuration will be usefull into your readme. The security change so fast, lot of popular documentations are outdated.
Second question. For weak ciphers like ecdsa, do there are a way to generate better cipher instead of remove the algorithm ?

For the second question, - short answer is "no". All one could add, one can see in "recommendations" section. Longer answer - ciphers are hard-coded into source of particular sshd software. There might be a reason why all of them are not available, e.g., disabled in compile-time or because of some missing crypto library. But the only way to "add" ciphers which aren't available by default, is to patch the source code, basically, writing the code yourself and recompiling the software.
For first question, - that's why I haven't linked any articles, because they are and get outdated (and are not controlled by me). And that's why I wrote this tool - to have up-to-date information. Also, for example, I and other people in their articles on the subject disagree with Your mentioned Mozilla guidelines. They are a generalized, a good starting point, but not as strict as one might want. And they don't explain the reasons behind their settings well. I've jet to see a "perfect" article in this field. Some come very, very close, but none of them combine everything. Currently, one can grab bits from one article and bits from other article to get the full picture. But I get why that is.
Writing a "small tutorial" will soon become a "large document", if one wants to cover everything. For example, in this thread, we are talking about OpenSSH and it's configuration. What about other sshd servers? They have different options how to configure them. Which version should such article cover? If it covers latest version, then some tuning options could be missing or completely different for people who can't upgrade to latest version. Also, there are differences depending on which OS the sshd server is running. For example, some security features for OpenSSH might be only available only on OpenBSD (as that's the base OS where it is being developed), which has been the case several times. Of course, other OS'es play catch-up. Then there are different thoughts - should one use public key authentication or certificates? I could go on...
Having said that, I agree that some better documentation or small article could be beneficial to newcomers, as currently this tool is mostly useful for people, who know what the output means and what to do about it, i.e., server administrators, pen-testers, etc Therefore, I should probably write such article, but I think this should go into wiki or as separate document, because it would overwhelm the readme. And to keep it "small", I should probably target latest OpenSSH version and it's specific configuration.

Perfect, Thank you for all yours explanations.
I let you close this issue if you want or keep it open if you think it's help people to find those explanations.
I'll keep an eye on this project.

I think simply including in the readme a short section on how to read the output would solve this issue.

Hi Arthepsy,
I am new to this and have just been given a task to check some ssh vulnerabilities on a few servers.
For example I am seeing the following output regarding diffie-hellman:
key exchange algorithms
[warn] using custom size modulus (possibly weak)
[info] available since OpenSSH 4.4
[fail] removed (in server) since OpenSSH 6.7, unsafe algorithm
[warn] using weak hashing algorithm
[info] available since OpenSSH 2.3.0
[warn] using weak hashing algorithm
[info] available since OpenSSH 3.9, Dropbear SSH 0.53
[fail] removed (in server) since OpenSSH 6.7, unsafe algorithm
[fail] disabled (in client) since OpenSSH 7.0, logjam attack
I kinda understand the reference to WARN & INFO... but what is the reference to FAIL? Does that indicate the functionality has been removed/disabled and isn't available for the ssh audit - or is it the otherway around and they have failed the audit and need to be resolved/investigated asap.
Any other quick tips on using this would be greatly appreciated. I did go looking for a WIKI... but I couldn't find anything.
Thanks and Kind Regards,
K.

[info]   --> good, you can keep this conf
[warn] --> still good, but not the best algorithm, it's can be better
[fail]    --> you have security problem, know attacks will work.

Hey Azlux,
Thanks for the update. Very much appreciated. :)

As of today (and last updated on 27-Oct-17), the Mozilla Security Guidelines continue to list the host key "ssh_host_ecdsa_key" and "ecdh-sha2-nistp521,ecdh-sha2-nistp384,ecdh-sha2-nistp256" among the recommended KexAlgorithms for the Modern Config (OpenSSH 6.7+).
ssh-audit, however, continues to issue red warnings for the KexAlgorithms above, including for the stronger and strongest ones of 384 and 521 bits.
Could you, if the Mozilla recommendations are wrong, tell us unequivocally that you believe they are wrong, i.e., make a strong statement. Or if they're not wrong, and ssh-audit would need updating (and I notice this ticket is still open), give us some indication as to by which date this discrepancy will be addressed in this repository?

I can attest to the problem of maintaining a document to keep SSH current and do advocate the ssh-audit approach as a form of auditable and verification and validation.
I maintain several bash scripts that produces various SSH setups and it is becoming easier now as times goes by, but I still refer to SSH-AUDIT to quickly boil down what is out there (as opposed to what I (and my scripts) need to push out there).
https://github.com/egberts/easy-admin/tree/main/490-net-ssh


feat(LinearAlgebra/Dual): generalize results from Free to Projective

Also show that:

A finite projective module is also finitely presented (generalized from Free)

A direct summand of a reflexive module is reflexive. In particular, a finite projective module is reflexive.

Thanks!
maintainer merge

bors merge


Bob answer array shortening fix

Fixes the Any Shortening section that was placed in the middle of the single-line-if Shortening section.

PR'd in the wrong place


Allow SSL for k8s audit endpoint

Allow enabling SSL for the Kubernetes audit log web server. This required adding two new configuration options: webserver.ssl_enabled and webserver.ssl_certificate. To enable SSL add the below to the webserver section of the falco.yaml config:
webserver:
  enabled: true
  listen_port: 8765s
  k8s_audit_endpoint: /k8s_audit
  ssl_enabled: true
  ssl_certificate: /etc/falco/falco.pem

Note that the port number has an s appended to indicate SSL for the port which is how civetweb expects SSL ports be denoted. We could change this to dynamically add the s if ssl_enabled: true.
The ssl_certificate is a combination SSL Certificate and corresponding key contained in a single file. You can generate a key/cert as follows:
$ openssl req -newkey rsa:2048 -nodes -keyout key.pem -x509 -days 365 -out certificate.pem
$ cat certificate.pem key.pem > falco.pem
$ sudo cp falco.pem /etc/falco/falco.pem

All the other changes look good. Let's just clean up the port handling for ssl.


resolve build issues for library project . update build.gradle to include test and webflux dependencies

IN vs code
"java.jdt.ls.java.home": "C:\Program Files\Java\jdk-21", needs to be mentioned compatible with source compatibility in project .


Wrong parameter name for user code in quickstart DeviceController

Issue / Steps to reproduce the problem

Make a device authorization request
Open the verification_uri_complete in the browser
The page ignores the user code in the query string and prompts the user to enter it

The problem is that the controller expects the parameter name to be named user_code, but it's actually named userCode in verification_uri_complete.
I realize that it's configurable, but the quickstart controller should match the default name, or use the name from the options. Maybe something like this:
         [HttpGet]
-        public async Task<IActionResult> Index([FromQuery(Name = "user_code")] string userCode)
+        public async Task<IActionResult> Index([FromServices] IOptions<IdentityServerOptions> options)
         {
+            string userCodeParamName = options.Value.UserInteraction.DeviceVerificationUserCodeParameter;
+            string userCode = Request.Query[userCodeParamName];
             if (string.IsNullOrWhiteSpace(userCode)) return View("UserCodeCapture");

             var vm = await BuildViewModelAsync(userCode);

Relevant parts of the log file
N/A

thanks! PR?


Unable to get data from repetition field

When I try to get data from a repetition field from the results of a query, and I do not specify a repetition, I get an empty string.  When using the PHP API, I get data from the first repetition.
If repetition is unspecified, the getField() method should check to see if "field(1)" exists in the data results and get contents from that, otherwise grab data results from "field".

Fixed.

Awesome, thank you!


Call breakcheck less often when adding completions

There are many different ways to add completions to the popup menu, some
of which are slow (such as scanning the filesystem). However, a number
are very fast loops, such as the vimscript complete() function and
various ways to add completions from a predefined list or dict.
In the fast cases, the calls to breakcheck can start to dominate
performance as it can be quite slow to call select() on some platforms.
Solution: Call it less often in these cases.

I used a script to do some profiling. Script essentially:

displays a popup. I wanted to see if the presence of popups impacted performance.
sets up a completefunc which:

starts a 1 ms timer (because I wanted to mimic the behaviour of my actual plugin)
the timer callback calls complete() with a list of 120 items, all of 4 characters in length

3 the script runs feedkeys( "\<C-x>\<C-u>", 'xt!' ) in a loop and uses a CompleteDone autocmd to do feedkeys( "\<Esc>" ). Again this is not minimal, but I wanted to investigate a pattern similar to how a real async completion plugin works.
It does this loop 30,000 times.
Without this patch, the test takes (on my machine(TM)) 45 seconds, and after this patch, it takes 32 seconds.

Hottest path without this change, is mch_breakcheck (again, on My-machine(TM)):

With this change, the hottest path looks more relavant:

And completes more quickly

NOTE: These are not very scientific measurements, but the results are easily repeatable at least that mch_breakcheck is expensive when running in a tight loop.
Builds were done on macOS 11.3.2 with -g -O2 using master as of today.

I've not extensively tested this, but it seems fairly safe. Let me know what you think.

The profiling script:

" The code is taken directly from the example in the Vim documentation
function! s:FindStart() abort
  " locate the start of the word
  let line = getline('.')
  let start = col('.') - 1
  while start > 0 && line[start - 1] =~ '\a'
    let start -= 1
  endwhile
  return start
endfunction

let s:completions = []
for i in range( 10 )
  let s:completions += map(
        \ split('Jan Feb Mar Apr May Jun Jul Aug Sep Oct Nov Dec'),
        \ 'v:val . i' )
endfor

" The code is taken directly from the example in the Vim documentation
function! s:CompleteMonth( base ) abort
  " find months matching with "a:base"
  return filter(copy(s:completions), "v:val =~ '^' . a:base")
endfunction

let s:complete_timer = -1

function s:KillTimer() abort
  call timer_stop( s:complete_timer )
  let s:complete_timer = -1
  augroup ATestClear
    au!
  augroup END
endfunction

function! s:DoAsyncCompletion( start_col, base, id ) abort
  call complete( a:start_col, s:CompleteMonth( a:base ) )
endfunction

" See :help complete-functions
function! CompleteAsync( findstart, base ) abort
  if a:findstart
    " We will work out the start position later
    return s:FindStart()
  endif

  " Kill any existing request
  call s:KillTimer()

  " Kill the timer when leaving insert mode
  augroup ATestClear
    au InsertLeave * ++once call <SID>KillTimer()
  augroup END

  " Do something complicated that takes time. Pass the current column (actually
  " the start column) and the 'query' (a:base) to the callback using a partial.
  let s:complete_timer =  timer_start( 1,
                                     \ function( "s:DoAsyncCompletion",
                                               \ [ col( '.' ), a:base ] ) )

  return v:none
endfunction

set completefunc=CompleteAsync
set shortmess+=c

let g:attest_async_delay = 1

function ExitInsertMode()
  call feedkeys( "\<Esc>" )
endfunction

augroup Test_Async
  au CompleteDone * call ExitInsertMode()
augroup END

call popup_create( [ 'This is some text', 'and some more' ], {} )

let i = 0
while i < 30000
  call feedkeys( "o\<C-x>\<C-u>", 'xt!' )

  let i += 1
endwhile

augroup Test_Async
  au!
augroup END

call popup_clear()

delfunc! ExitInsertMode
%bwipe!
qa

Just to add one more piece, of the original run, 9s  (31%) of the runtime is used by mch_breakcheck:

With this change mch_breakcheck is just 1.3%.

did https://github.com/vim/vim/commit/440cf096fad7bf628974abc344343b823d79a006 really fix this? I don't see where CP_FAST is actually used.

It's used in three places, how can you not see that?

I think Bjorne is suggesting that we need something like this:
    if ( flags & CP_FAST )
	fast_breakcheck();
    else
	ui_breakcheck();

@brammool it is being set in three places but I don't see where it is being checked, like something like @puremourning  suggested.

@brammool it is being set in three places but I don't see where it
is being checked, like something like @puremourning  suggested.

Ah, now I see what you mean.  Yes, that part somehow went missing.
--
hundred-and-one symptoms of being an internet addict:
55. You ask your doctor to implant a gig in your brain.
/// Bram Moolenaar --<EMAIL_ADDRESS>-- http://www.Moolenaar.net   \
///                                                                      \
\\        sponsor Vim, vote for features -- http://www.Vim.org/sponsor/ ///
\\            help me help AIDS victims -- http://ICCF-Holland.org    ///


workflowStopped event enhancement

Both successful workflows and stopped workflows are generating similar kind of events with 'reason' as 'WorkflowSucceeded'. There is no way to differentiate successful vs stopped events to trigger different down streams based on the status.
What change needs making?
Would like to see reason as 'workflowStopped' for stopped workflows.
Use Cases
We are using Argo events architecture. We are using K8s Resource eventsource,  relying on these k8 events to trigger downstreams. Since we are relying on 'WorkflowSucceeded' , it is matching events for both successful and stopped workflows.

Message from the maintainers:
Love this enhancement proposal? Give it a 👍. We prioritise the proposals with the most 👍.

Can you please clarify what you mean by "workflow stopped"? Do you mean you ran "argo stop my-wf"?

Yes, but through the API call /api/v1/workflows/{namespace}/{my-wf}/stop

I was not able to replicate this issue. I get "workflow shutdown with strategy: Stop".
This corresponds to https://github.com/argoproj/argo-workflows/blob/95cd467c7e75c38548bf42a5f3c940ac61568e4b/workflow/controller/workflowpod.go#L145

@isubasinghe @uday-mandava please make sure you do NOT use Kubernetes events for any automation, they are not reliable:
https://blog.argoproj.io/maybe-dont-use-kubernetes-events-for-automation-53951bdfd602

Hello can I work on this issue?


Lnd Support

Cherry pick of #1719

Codecov Report

:exclamation: No coverage uploaded for pull request base (master@48c262a). Click here to learn what that means.
Patch coverage: 0.00% of modified lines in pull request are covered.

:mega: This organization is not using Codecov’s GitHub App Integration. We recommend you install it so Codecov can continue to function properly for your repositories. Learn more
Additional details and impacted files
@@            Coverage Diff            @@
##             master    #1907   +/-   ##
=========================================
  Coverage          ?   63.00%
=========================================
  Files             ?      138
  Lines             ?    26452
  Branches          ?        0
=========================================
  Hits              ?    16667
  Misses            ?     9785
  Partials          ?        0

Impacted Files
Coverage Δ

gateway/ln-gateway/src/bin/gatewayd.rs
1.09% <0.00%> (ø)

gateway/ln-gateway/src/lib.rs
69.82% <ø> (ø)

gateway/ln-gateway/src/lnd.rs
0.00% <0.00%> (ø)

Help us with your feedback. Take ten seconds to tell us how you rate us. Have a feature suggestion? Share it here.

:umbrella: View full report in Codecov by Sentry.
:loudspeaker: Do you have feedback about the report comment? Let us know in this issue.

@justinmoon, here is a clean cherry pick of core logic changes to support LND. It's hard for me to follow which of the test infra changes are still in progress, to be added to this change before we can activate PR. Do take a look...


Missing term in SOR matrix solve

The subroutine SOR_solver is missing a term in two different lines.
The value a(5,i,j) should instead be a(5,i,j) - freesurfFac/dt**2.
Given that this additional term doesn't change for the duration of the simulation, the additional term can be rolled into a in the derivatives_of_the_depth_field subroutine.
Confirming that this is affecting the results is a good test case for the automated tests described in #66.

General comment on filing tickets like this: A Github url involving the word master always points to the tip of the master branch; so, if someone commits something that changes the number of lines preceding line 1346, the line pointers are liable to shift (unless the Github takes great pains to prevent this).  More reliable (if more cumbersome) is pointing to a specific commit rather than the tip of the branch.

Thanks for the tip. I've updated it to point at a specific commit.


Throwing DoctrineBundle exception in HautelookAliceExtension

Hi, I'm trying to configure this bundle v2.0.0 in my project that only uses DoctrineMongoDBBundle. The HautelookAliceExtension is requesting for the ORM bundle that I don't intend to use at the moment.
If the persistence layer is responsibility of theofidry/alice-data-fixtures, why do the extension check this dependency?
Sorry if I misunderstood anything. Thanks!

Hi, right now HautelookAliceBundle 2.0 supports only Doctrine ORM and the support for MongoDB via DoctrineODM is still missing (see #324).
Also there is some DX issues at the moment that could be solved with a flex recipe (see #380).


Add Slovak translation

This translation is currently missing some strings, I’ll push an update a bit later.

 Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.Andrej Shadura seems not to be a GitHub user. You need a GitHub account to be able to sign the CLA. If you have already a GitHub account, please add the email address used for this commit to your account.You have signed the CLA already but the status is still pending? Let us recheck it.

It’s June now, any updates? Thanks!

@mmiszy, an explanation would be great?


Wizard sync editor

stolostron/backlog#21086
stolostron/backlog#20540
stolostron/backlog#13793
note--for 13793, the original policy wizard didn't have a toolbar
note--when editing an existing resource, the name/namespace are readonly

note--also on an existing resource, there's a new filter button that filters out managedFields, times etc:

/test lint-check-unittests-sonarcloud


RunnerInput/Output feedback/issues

Issue to collect feedback and bug reports for new experimental Runner IO
Bug reports
Bug 1: RunnerInput attributes require defaults
Describe the bug
A clear and concise description of what the bug is:
A RunnerInput like
class MyInput(RunnerInput):
    my_param: str

when building a yaml for a Workflow will give an error like:
...
  File "/Users/egunton/test-runner-input/.venv/lib/python3.11/site-packages/hera/workflows/io/v2.py", line 56, in _get_parameters
    parameters.append(Parameter(name=field, default=cls.model_fields[field].default))  # type: ignore
                      ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/Users/egunton/test-runner-input/.venv/lib/python3.11/site-packages/pydantic/v1/main.py", line 341, in __init__
    raise validation_error
pydantic.v1.error_wrappers.ValidationError: 1 validation error for Parameter
__root__
  Object of type PydanticUndefinedType is not JSON serializable (type=type_error)
make[1]: *** [build-yaml] Error 1

due to trying to create the default as default=cls.model_fields[field].default, when this is non-existent (PydanticUndefinedType).

Environment

Hera Version: 5.14.0
Python Version: 3.11.6
Argo Version: 3.4.16

Additional context
Add any other context about the problem here.

Also see #961

On the Hera dev side, the new RunnerIO code in runner.py has made it pretty difficult to understand/navigate. Needs some tidying up and refactoring.
cc @samj1912 @flaviuvadan