Pass-core: Investigate issues with running pass-core in docker in a Windows environment

Issue: Running pass-core with an image built in a Windows environment produces the following errors when trying to run the container:
Windows OS:
OS Name:                   Microsoft Windows 10 Enterprise
OS Version:                10.0.19044 N/A Build 19044
Java:
java 11.0.17 2022-10-18 LTS
Java(TM) SE Runtime Environment 18.9 (build 11.0.17+10-LTS-269)
Maven
Apache Maven 3.8.1
Error response from daemon: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: exec: "/entrypoint.sh": stat /entrypoint.sh: no such file or directory: unknown
Error invoking remote method 'docker-start-container': Error: (HTTP code 400) unexpected - OCI runtime create failed: container_linux.go:380: starting container process caused: exec: "./entrypoint.sh": permission denied: unknown
Adding the following line to the Dockerfile will resolve the issue, but this line should not be required and is not required when running in a Linux environment: RUN chmod +x entrypoint.sh
Steps Performed to Investigate Issue
Test Permissions Between Local and Published Images
Published image:
REPOSITORY                            TAG              IMAGE ID       CREATED       SIZE
ghcr.io/eclipse-pass/pass-core-main   0.2.0-SNAPSHOT   57f9ed491913   13 days ago   318MB
Getting permissions of entrypoint.sh
ls -l
total 92972
-rwxr-xr-x 1 root root       63 Nov 29 18:50 entrypoint.sh
-rw-r--r-- 1 root root 95198498 Nov 29 18:51 pass-core-main.jar
Image created locally:
REPOSITORY                            TAG              IMAGE ID       CREATED          SIZE
ghcr.io/eclipse-pass/pass-core-main   local-image      3a262e4e0584   14 minutes ago   329MB
ghcr.io/eclipse-pass/pass-core-main   0.2.0-SNAPSHOT   57f9ed491913   13 days ago      318MB
docker run -it --entrypoint /bin/bash ghcr.io/eclipse-pass/pass-core-main:local-image
root@b0cdcaaf7f71:/app# ls -l
total 103396
-rwxr-xr-x 1 root root        63 Dec 12 14:14 entrypoint.sh
-rwxr-xr-x 1 root root 105870474 Dec 13 15:10 pass-core-main.jar
Permissions of the entrypoint.sh match between the published and locally built images.
Docker-compose build vs Maven Install
When building the image using docker-compose build will run, but when the image is created from the maven install it will fail and give the error message:  Error invoking remote method 'docker-start-container': Error: (HTTP code 400) unexpected - OCI runtime create failed: container_linux.go:380: starting container process caused: exec: "./entrypoint.sh": permission denied: unknown
Image created from Maven Install:
REPOSITORY                            TAG              IMAGE ID       CREATED          SIZE
ghcr.io/eclipse-pass/pass-core-main   0.2.0-SNAPSHOT   9f3fb59c3dde   35 seconds ago   329MB
openjdk                               11-jre-slim      764a04af3eff   4 months ago     223MB
docker run ghcr.io/eclipse-pass/pass-core-main:0.2.0-SNAPSHOT
docker: Error response from daemon: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: exec: "./entrypoint.sh": permission denied: unknown.
Image create from docker-compose build locally
[+] Building 1.5s (9/9) FINISHED
=> [internal] load build definition from Dockerfile                                                                                0.0s
=> => transferring dockerfile: 32B                                                                                0.0s
=> [internal] load .dockerignore                                                                                0.0s
=> => transferring context: 2B                                                                                0.0s
=> [internal] load metadata for docker.io/library/openjdk:11-jre-slim                                                                                0.0s
=> [1/4] FROM docker.io/library/openjdk:11-jre-slim                                                                                0.0s
=> [internal] load build context                                                                                0.7s
=> => transferring context: 105.90MB                                                                                0.7s
=> CACHED [2/4] WORKDIR /app                                                                                0.0s
=> [3/4] COPY target/pass-core-main.jar .                                                                                0.3s
=> [4/4] COPY entrypoint.sh .                                                                                0.0s
=> exporting to image                                                                                0.4s
=> => exporting layers                                                                                0.4s
=> => writing image sha256:b019dd8b16a7b0dee185e6e25505f83579d73fd0beff06ef48867d1ac7db25fb                                                                          0.0s
=> => naming to ghcr.io/eclipse-pass/pass-core-main:local-image                                                                                0.0s
Running the ghcr.io/eclipse-pass/pass-core-main:local-image image
docker ps -a
CONTAINER ID   IMAGE                                                COMMAND             CREATED          STATUS         PORTS     NAMES
c5025ed04a7d   ghcr.io/eclipse-pass/pass-core-main:local-image      "./entrypoint.sh"   3 minutes ago    Up 3 minutes             keen_hopper
Final Summary
The image that was created by the docker-compose build runs without error, whereas the image that is created by maven install produces the error. More investigation needs to be done in order to understand why the maven install on a windows machine causes the error.

In summary there were two issues with running the docker image produced by mvn clean install on a windows machine:

Entrypoint.sh needed permissions as they were removed on a windows system. Adding a chmod in the dockerfile resolved this issue:

chmod +x entrypoint.sh

EOL issue with these two files: entrypoint.sh and init_postrgres.sh

This was resolved by adding a .gitattributes file:
entrypoint.sh text eol=lf
init_postgres.sh text eol=lf
However after discussing with Tim Martin some more the EOL character should not be an issue in bash. When we changed over the entrypoint.sh to start in bash as opposed to sh the EOL characters did not cause an error.
entrypoint.sh:
#! /bin/bash
java $PASS_CORE_JAVA_OPTS -jar pass-core-main.jar
A related ticket for writing documentation on this issue #406 should be updated accordingly, or should the documentation in the developer documentation be removed?

Upon further testing switching from #! /bin/sh to #! /bin/sh did not make a difference in how the line endings were interpreted in docker. The current solution for this is:

Keep the .gitattributes and have the line *.sh text eol=lf. This will make shell scripts in the future LF for windows dev.
Keep the #! /bin/sh in the Dockerfile
The chmod +x entrypoint.sh in the Dockerfile was still necessary


DAP support

https://github.com/mfussenegger/nvim-dap allows us to debug code inside of neovim. It'd be cool if we could automatically create configurations for competitive programming testcases (possibly by language) and maybe run those on failed cases.

Cool idea

I completely forgot about this, I'll get to this in some time

You might want to look into neotest, which would make this alot easier.


fix(error-focus-closed): Catching the error from the promise

try { ... } catch ... doesn't work for these cross-domain functions. Doh.

In zoid, actions.close is explicitly defined as a ZalgoPromise<void>. I could do a check just in case, though.

@bluepnume I ended up using ZalgoPromise.try since that catches thrown errors and rejected promises 👍


replace seeAlso with term tracker item

close #5315

Its generally correct, but seems to me there are still seeAlso in there

property_value: seeAlso https://github.com/monarch-initiative/hpo-annotation-data/issues/260 xsd:anyURI

Maybe its because xsd:anyURI?

ah, thanks for catching that! I think I got them all now

did you also run NORM again?

no, I'll do it now!


Fixed jump pluging to display the right mark name on 'mark . '

Nothing earth-shattering.

Thanks!


error in getDefault() method

hi,
I'm using this api to get pictures from a webcam but when I run the code i get this error

and the code is here
http://stackoverflow.com/questions/28019944/github-webcam-caputure-does-not-work

Hi @aak0012,
I tested your code on my PC and it works well, so your stack trace would be helpful here.

@aak0012 any news on this?

@aak0012 I'm closing this ticket due to inactivity and no response for the time.


SQL server support

Get Sql server RDS connection and retrieve data
I'm interested in aws data  wrangler for interacting with SQL Server RDS. Doo you plan to release methods for connection and data retrieval ?

I will try to create a PR for this the next days 👍

Released on version 2.3.0 🚀

Released on version 2.3.0 🚀


Error: was not able to get a directory for the global cache (Windows)

On a Windows machine, I installed spago using npm
> npm -g i spago
> spago init
> spago install react-basic

I get this error with spago install or spago build
Error: was not able to get a directory for the global cache. Set either `HOME` or `XDG_CACHE_HOME`
spago.exe: user error (mzero)

Hi @sharno! This is a normal error condition, and in fact the error message is telling you that you should define either the HOME or the XDG_CACHE_HOME environment variable, and point it to a path where Spago can put its global cache
If this makes sense, how can we make this error message clearer?
In any case you should be able to disable the global cache with --no-global-cache

Hi @f-f , thanks for your reply
I think on Windows the environment variable is called HomePath instead of just HOME. Which points generally to \Users\{username} where I find most of the tools' cache folders like .sbt or .stack
http://environmentvariables.org/HomePath
Otherwise maybe the error should specify explicitly that HOME or XDG_CACHE_HOME or HomePath (if added) are environment variables.

@sharno thanks! Fix up in #314 🙂

@f-f  Thanks a lot for the quick fix :)
Just one more thing, everything worked fine after I added the environment variable. But when I tried without it but with --global-cache=skip or --global-cache skip it still throws the same error. Thought I'd mention in case if it's a different bug?

@sharno you're welcome! 🙂

Thought I'd mention in case if it's a different bug?
Yeah it's a known problem. I looked into disabling the whole logic for global cache (which is probably the right thing to do) if this failed, but at this point there are too many code changes in flight that touch nearby code, so what I did in #314 was to always make this operation succeed, so we shouldn't encounter this error ever again :)


Implement ConstExpr distinct from Expr

This is the subset of expressions that are allowed to be used in array lengths and enum discriminants. The authoritative list is in eval_const_expr_partial.

Fixed in 3cb23a97d65f778b4b8520ba9f7910d0a80361f8.


Fix tooltip text #45108037

#45108037

Pull Request Test Coverage Report for Build<PHONE_NUMBER>8
Details

0 of 0   changed or added relevant lines in 0 files are covered.
No unchanged relevant lines lost coverage.
Overall coverage increased (+0.05%) to 99.679%

Totals

Change from base Build<PHONE_NUMBER>1:
0.05%

Covered Lines:
13446

Relevant Lines:
13448

💛  - Coveralls


LogP files missing

Hi, I'm trying to work on the example notebooks included in the package. Working on the LogP notebook, I noticed that:

File paths are pointing to wrong directories:
/data/masha/generative_model/chembl_22_clean_1576904_sorted_std_final.smi
/home/mariewelt/Notebooks/gan_oracle/oracle_data/logP_labels.csv
This I could easily change the prefix to ./data/

There is a file still missing: /home/mariewelt/Notebooks/PyTorch/Model_checkpoints/generator/checkpoint_lstm
I looked into the ReLeaSE/checkpoints/generator/ folder, but this file is not there. Should it be possible to generate this file prior to running this notebook? How? Or is it just missing from the tree?

Thanks!

Hey, @gmseabra thanks for stress-testing this repo:) I think you could just use checkpoint_biggest generator and use hidden_size, stack_width, stack_depth, lr and other parameters from this big model.


sap.ui.table.TreeTable rowSelectionChange Infinite Loop

OpenUI5 version:

latest
Browser/version (+device/version):
chrome latest, firefox latest
Any other tested browsers/devices(OK/FAIL):

URL (minimal example if possible):

JSFiddle: https://jsfiddle.net/er7618qp/

User/password (if required and possible - do not post any confidential information here):

No

Steps to reproduce the problem:

Select the first row
Open the console

What is the expected result?

Selecting the root row of the table, the sub element should be selected as well since it is child of the first row

What happens instead?

Infinite Loop with RowIndex always 0 and UserInteraction always to true

Any other information? (attach screenshot if possible)

I would have expected, after calling the method setSelectedIndex that the RowIndex would be the new one and the parameter UserInteraction would be false

Hi @adrian-zguri ,
thanks for the reported issue! I've created a internal ticket<PHONE_NUMBER>) and dispatched it to the responsible colleagues.
You can check its status on GitHub.
Regards, Clemens

Thank you Clemens.
Best Regards, Adrian

the provided JSFiddle has bad code in lines 32-33.
Never change a value in a value change event - this is a cause of all possible infinite loops.
Example: change the scroll position of a scroll container during the scroll event and see what happens.
Selection of a complete sub tree of a tree table is not implemented.
Kind regards,
Sergej

Hello Sergej,
Thank you for your explanation. I will try another way since this feature is really important for us.
Best Regards, Adrian


Removed

Hi,  it seems you removed some keys
according to https://docs.microsoft.com/en-us/graph/changelog#january-2019 :
"Removed the localSecurityOptionsEnableAdministratorAccount, localSecurityOptionsEnableGuestAccount and lanManagerWorkstationEnableInsecureGuestLogons properties from the windows10EndpointProtectionConfiguration entity".
Why are these keys (like localSecurityOptionsEnableAdministratorAccount) then still populated in this article?
And does it make sense to say that "Default: Disabled." when the key is a boolean, that tells me if the account is disabled or not? If this is sth being "queried" as opposed to "set", then there should be no default value, correct?

Document Details
⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

ID: 773b74b2-7dc2-d0e5-1e3b-bd6445bceda4
Version Independent ID: 34b55057-9078-6bd0-a9ac-2f6403b84be7
Content: Policy CSP - LocalPoliciesSecurityOptions
Content Source: windows/client-management/mdm/policy-csp-localpoliciessecurityoptions.md
Product: w10
Technology: windows
GitHub Login: @MariciaAlforque
Microsoft Alias: maricia

From what I can see, that is the beta version of Microsoft Intune API, indicating that not even the documentation may be complete yet.

You are correct...
As 99,99% of the API calls made by Intune portal (at time of writing) are made against /beta/ endpoint anyway, customers have no choice than to deal permanently with beta features ;-).
But now that MS announced the removal of "localSecurityOptionsEnableAdministratorAccount" in their Change Log, then I suggest to no longer document this (now) non-existing feature, as it is also not existing in the /v1.0/ endpoint.

Very well. I will leave your additional information to be followed up by the Docs team members (I don't have the required skill to provide the necessary information).

@officedocsbot assign @e0i

@billgatesfan
We are investigating this issue and will follow-up with updates.
Thank you for your feedback.

@billgatesfan
Upon your feedback, We have updated the content with relevant changes accordingly. Thanks.

@officedocsbot close


Typecheck explicit casts

Right now explicit casts raise an error. The rules for casts are described in section 8.9.1 of the spec.

Fixed in https://github.com/cornell-netlab/petr4/commit/2943be25facdfd6b6e36fc93d4fa8febc9d540bf


Is it possible to jump to a wrong spell word?

Thank you for great plugin. I love it.
I have a question.
Is there any command or shortcut to jump to a wrong spell word?
Thanks.

Hi, @AtsushiSakai
This plugin don't have jump function for now, but I think that it is probably not a difficult implementation.
If I could find the time, I'll add jump function to this plugin. But now it may be necessary to add whitelist of other programming language.

@kamykn OK. Thank you.


Categorise routes

As this project progresses, there are more routes added. I'm afraid this will be even a bigger issue on later 2.x releases.

Decided to do group them as Site Routes and API Routes, since I don't have a clear category for each site's routes.


Google Step Internship

Add the details about Google step internship in readme.md.

@avinash201199 I would like to work on this. Assign it to me.


DNM: Allow configuration of image pull secret during namespace init

This will allow users to run functions from private registries.
See https://github.com/pivotal-cf/pfs/issues/159.

The various secret options start to become confusing in my opinion.
Shall we rename some of them and maybe alias them to their former name for backwards compatibility?

Some of my €.02:

Push to registry is handled by knative (according to this). Pull from registry is handled by k8s PullSecrets, using the special docker-registry type. So it is technically possible for an SA to be configured to do one, but not both
per the above, somewhat unrelated
secret -> user -> role
Depending on the registry used, there are many out-of-the-box magical tricks it seems: https://kubernetes.io/docs/concepts/containers/images/#using-a-private-registry

Using an imagePullSecret feels like the wrong approach since we'd need to add the secret to every service account, in every namespace, past, present and future. It would be better to configure this within the cluster itself to all pods can pull from the registry.

This needs to be done for private registries as many times as namespace init is needed and affects only the default namespace's service account as @trisberg says.


Can't Acess global variables inside preview/preloader lua functions

What system are you running Yazi on?
Linux Wayland
What terminal are you running Yazi in?
foot  1.18.1
yazi --debug output
Yazi
    Version: 0.3.3 (Arch Linux 2024-09-05)
    Debug  : false
    OS     : linux-x86_64 (unix)

Ya
    Version: 0.3.3 (Arch Linux 2024-09-05)

Emulator
    Emulator.via_env: ("foot", "")
    Emulator.via_csi: Ok(Foot)
    Emulator.detect : Foot

Adapter
    Adapter.matches: Sixel

Desktop
    XDG_SESSION_TYPE           : Some("wayland")
    WAYLAND_DISPLAY            : Some("wayland-1")
    DISPLAY                    : Some(":0")
    SWAYSOCK                   : None
    HYPRLAND_INSTANCE_SIGNATURE: Some("9a09eac79b85c846e3a865a9078a3f8ff65a9259_1726583606_854248493")
    WAYFIRE_SOCKET             : None

SSH
    shared.in_ssh_connection: false

WSL
    WSL: false

Variables
    SHELL              : Some("/bin/zsh")
    EDITOR             : Some("nvim")
    VISUAL             : None
    YAZI_FILE_ONE      : None
    YAZI_CONFIG_HOME   : None

Text Opener
    default: Some(Opener { run: "${EDITOR:-vi} \"$@\"", block: true, orphan: false, desc: "$EDITOR", for_: None, spread: true })
    block  : Some(Opener { run: "${EDITOR:-vi} \"$@\"", block: true, orphan: false, desc: "$EDITOR", for_: None, spread: true })

Multiplexers
    TMUX               : false
    tmux version       : No such file or directory (os error 2)
    ZELLIJ_SESSION_NAME: None
    Zellij version     : No such file or directory (os error 2)

Dependencies
    file             : 5.45
    ueberzugpp       : No such file or directory (os error 2)
    ffmpegthumbnailer: 2.2.3
    magick           : No such file or directory (os error 2)
    fzf              : 0.55.0
    fd               : 10.2.0
    rg               : 14.1.1
    chafa            : No such file or directory (os error 2)
    zoxide           : 0.9.5
    7z               : 17.05
    7zz              : No such file or directory (os error 2)
    jq               : 1.7.1

--------------------------------------------------

Did you try the latest nightly build to see if the problem got fixed?
No, and I'll explain why below
Describe the bug
Related to the previous issue, the preloader/preview lua functions cannot access global vartiables. This means i cannot add my condition logic to ps.sub's cd kind, and have to Instead execute the directory matching logic for each file being preloaded/previewed.
Checked commits since 0.3.3 release and nothing indicates this has been addressed.
Minimal reproducer
exclude_dir = true
local function preload(self)
	if exclude_dir then return 1 end
	return preloader(self) and 1 or 2
end
return { preload = preload }

exclude_dir is inaccessible and therefore always nil. I have made a separate plugin to check if exclude_dir is being set correctly, and it is.
Anything else?
No response

This is expected behavior - global variables are discouraged and considered undefined behavior, so Yazi doesn't provide any guarantees about them.
If you want to sync the state, please use ya.sync(), which creates its own state for each plugin and prevents conflicts between multiple plugins. See https://yazi-rs.github.io/docs/plugins/overview#async-context


Directory import deep-memo-app/node_modules/@ionic/pwa-elements/loader' is not supported resolving ES modules imported from<EMAIL_ADDRESS>

Directory import deep-memo-app/node_modules/@ionic/pwa-elements/loader' is not supported resolving ES modules imported from<EMAIL_ADDRESS>

https://github.com/ionic-team/pwa-elements/issues/128

- info Linting and checking validity of types
- info Creating an optimized production build
- info Compiled successfully
- info Collecting page data .Error [ERR_UNSUPPORTED_DIR_IMPORT]: Directory import '/home/freephoenix888/Programming/deep/deep-memo-app/node_modules/@ionic/pwa-elements/loader' is not supported resolving ES modules imported from<EMAIL_ADDRESS>Did you mean to import @ionic/pwa-elements/loader/index.cjs.js?
    at new NodeError (node:internal/errors:405:5)
    at finalizeResolution (node:internal/modules/esm/resolve:317:17)
    at moduleResolve (node:internal/modules/esm/resolve:943:10)
    at defaultResolve (node:internal/modules/esm/resolve:1129:11)
    at nextResolve (node:internal/modules/esm/loader:163:28)
    at ESMLoader.resolve (node:internal/modules/esm/loader:835:30)
    at ESMLoader.getModuleJob (node:internal/modules/esm/loader:424:18)
    at ModuleWrap.<anonymous> (node:internal/modules/esm/module_job:77:40)
    at link (node:internal/modules/esm/module_job:76:36) {
  code: 'ERR_UNSUPPORTED_DIR_IMPORT',
  url: 'file:///home/freephoenix888/Programming/deep/deep-memo-app/node_modules/@ionic/pwa-elements/loader'
}

> Build error occurred
Error: Failed to collect page data for /camera
    at /home/freephoenix888/Programming/deep/deep-memo-app/node_modules/next/dist/build/utils.js:1161:15 {
  type: 'Error'
}

@Menzorg can you help with this issue?

https://discord.com/channels/739430470345031692/1095252006077202472/1147230717043015710
await imports in use effect helped


feat: retry generic controller startup even if its resources are not discovered

ProblemStatement: As a DevOps admin, I want to use metac for backward compatibility usecases. I want Metac to retry discovering CRDs & respective custom resources that are not yet available in the kubernetes clusters till certain other upgrade path(s) is complete. In certain cases upgrade might take few hours to few weeks or more. There might be cases where few teams want to keep using older CRDs & custom resources even after upgrading their metac controllers.
On the whole, I want metac to understand new as well as old versions of resources & even if they are not available in the kubernetes cluster.

:tada: This issue has been resolved in version 0.4.0 :tada:
The release is available on GitHub release
Your semantic-release bot :package::rocket:


[5.6] Framework does not use a latest version of the Carbon

In the dependencies of the framework, the version of the package nesbot/carbon 1.25.* is required. While the latest version is 1.27.0

This has been changed on master.
Laravel 5.7 will require carbon "^1.26.3" but 5.6 will continue to restrict it to 1.25.*.

Okay, I understand. Thanks!


add google_id and name in response for iOS

This code was not tested.
However, the code was based in https://developers.google.com/places/ios-api/placepicker

Nice catch!


Invalid path error after gitnu add

I installed gitnu and then tried gitnu status and I got the following message:
$ gitnu status
On branch main
Your branch is up to date with 'origin/main'.

Changes not staged for commit:
  (use "git add <file>..." to update what will be committed)
  (use "git restore <file>..." to discard changes in working directory)
  (commit or discard the untracked or modified content in submodules)
1       modified:   content/posts/maths/pce-1.md
2       modified:   themes/hugo-PaperMod (modified content)

Untracked files:
  (use "git add <file>..." to include in what will be committed)
3       LICENSE
4       content/posts/maths/pce-2.md
5       matlab/
6       static/pce-variance-convergence.jpg
7       static/pdf-xi-example.jpg

I then tried gitnu add 1, but got the following error message:
xyz123456:am-press.github.io myUserName$ gitnu add 1
fatal: Invalid path '/Users/anonymous/Documents/Development/am-press.github.io
': No such file or directory

Thanks for spotting this. The fix is up in version 0.0.6.


nethack: 3.6.1 -> 3.6.2

Motivation for this change
Updating to latest version.
Notes:

libXpm added as a new dependency for nethack-x11.
moc path fixed for nethack-qt.

Things done

[X] Tested using sandboxing (nix.useSandbox on NixOS, or option sandbox in nix.conf on non-NixOS)
Built on platform(s)

[X] NixOS
[ ] macOS
[ ] other Linux distributions

[ ] Tested via one or more NixOS test(s) if existing and applicable for the change (look inside nixos/tests)
[X] Tested compilation of all pkgs that depend on this change using nix-shell -p nix-review --run "nix-review wip"
[X] Tested execution of all binary files (usually in ./result/bin/)
[ ] Determined the impact on package closure size (by running nix path-info -S before and after)
[ ] Assured whether relevant documentation is up to date
[X] Fits CONTRIBUTING.md.

Release notes: https://nethack.org/v362/release.html

@GrahamcOfBorg build nethack

builds with nix-review pr on NixOS


Use a middleware example for use with Warden

The original example would give 404 when you are not authorised, which is not what you'd expect.
Using middleware we can return a 403.

Hi there! Really appreciate you taking the time to both read, think about and update the docs.
I'd be good with showing this as an example in addition, but I like the original. 404 is intentional as it hides where flipper is mounted.
The thought process is akin to how github does repos. If you go to a private repo that you don't have access to, you get a 404 status.
If you return 403 instead of 404, people can use that to determine if (and where) flipper is mounted and try to attack. If you return 404 then they have less of an idea.
Closing this to keep things clean, but if you want to add that example as another section on the doc page, I'd be happy to merge it for those that want to do it that way and are curious how.


Container doesn't run when using rootless docker

I am trying to run the postgresql using rootless docker with $PGDATA mounted over NFS. Unfortunately, the entrypoint script tries to do a find -exec chown to the postgres user within the container, which when running rootless, gets mapped to a privilege-less user on the host. The command fails, and so the container never starts:
https://github.com/docker-library/postgres/blob/2f0ed0c7e8f8b05b294740f150397eec0af8dc50/docker-entrypoint.sh#L56-L60
I'm guessing that restarting the entrypoint as the user will also cause some issues:
https://github.com/docker-library/postgres/blob/2f0ed0c7e8f8b05b294740f150397eec0af8dc50/docker-entrypoint.sh#L306-L309
I think it's a good security practice to do the chown and privilege dropping, but it would be nice to have an override for people already running rootless. It could be as simple as changing the conditional to if [[ "$(id -u)" = '0' && -z "$RUN_AS_ROOT" ]]

Oof. Guess the postgres binary won't let you run as root. That's painful... Guess there would have to be an override there too


Password

When i try and clone the Git project it asks for a username and password ?

Use the following command:
git clone https://github.com/alexellis/phototimer

There's no reason for you to receive that error - but it sometimes appears with typos.


Parking Lot

Post any questions you may have here during the training.

@beardofedu  👋

@lzhang-adesa :wave:

@beardofedu


Chrome Plugin

Would it be possible to have localsend as an Chrome Browser Plugin?

I have no idea about Browser plugins so unfortunately I cannot help you. Maybe someone else can answer this question as the Protocol itself is open source.


move & improve note about choosing between the two kinds of instructions

@brianhlin Please re-review

I've pushed a few commits. If we're going to mention unpriv singularity in RPM installs, we should provide instructions. Probably as a sub-section under "Optional configuration"

I am OK with dropping the applicable versions note, but not with dropping the part of the note about following both sets of instructions.  That note is all about helping people to decide which set of instructions to follow, and I think that doing both is an important option.
If we add another set of instructions on modifying the rpm to work unprivileged, it will not make this note any less complicated because then it will also need to refer to that option.  I thought it would be better to just say it was not recommended.  However if you think we need that third set of instructions, let me know and I will add it and update the note.

I didn't see any note for following both instructions (both being RPM and CVMFS installations), just a note about unpriv singularity with an RPM installation. I don't see why we would need to mention it if we're not recommending it or providing instructions for it.

The part about following both which you deleted was

You may additionally want to enable unprivileged singularity for testing.

The reason for mentioning using the rpm unprivileged is because that is an option that people are likely to think of on their own and I want to warn about the downsides and say why we don't list the option.  Fermilab is already doing it and others may want to as well.

If people want to mess around with RPM-owned files that aren't %config(noreplace) and [possibly] shoot themselves in the foot, that's their prerogative. We don't provide that sort of disclaimer anywhere else in our docs and I don't see why we need to start here.

In this case it isn't necessarily obvious, because there is a config option in the rpm that allows disabling setuid, and that does not require modifying the rpm.  However doing only that gives no security advantage because the setuid binaries are still present and so the risk is still there.  I think there should be a warning somewhere.  It could be at the end of the rpm section instead if that's better for you, but I thought it was appropriate to be up front where people are deciding which instructions to follow.

So, there's quite a bit of things we could warn people not to do -- the list is likely longer with HTCondor-CE, for example, than Singularity.  Let's look at existence proofs first rather than second-guess what people may potentially do wrong.  [FWIW - I disagree with the assertion that disabling setuid in the config file gives "no security advantage".  It provides less advantage as it removes certain avenues of attack but leaves others.  That's an important distinction!]
Let's write the document to have two audiences:

The "normal sysadmin" who has been asked to install Singularity in support of their VO.  They should be able to read the introduction and clearly see they should install the privileged version.
The "beta tester" sysadmin who has self-selected as interested in enabling unprivileged mode as part of their VO's testing program.  Assume they need to learn how to make the kernel changes, then follow directions from their VO.  We still don't know how VOs will deploy this.

I do not want the "normal sysadmin" to read this page and try to follow both as they end up increasing their security risks -- they're now vulnerable to both Singularity CVEs and kernel CVEs.
Once we're to the point where VOs use unprivileged mode in production, we can update the recommendations.

@bbockelm OK, what does that mean practically?  How does it affect what we should put in this PR?  I think it already does a pretty good job of addressing the normal sysadmin, but probably not the beta tester.  Maybe you could push your own updates to the PR.

I don't want to let this languish for a long time, leaving the instruction page as-is with no guidance about the two different types of install instructions.  How about we merge this PR and later have a separate one for the differences that @bbockelm would like to see.


Calculation area under curve for shifu-0.2.6 evaluation

Add AUC computation for roc / weight roc / pr / weight pr curve in shifu eval step. Auc values result will be saved in the "EvalPerformancePath".

Use trapezoidal rule to estimate the AUC.

Find a potential bug.  I'll create a new pull request after I fix it.


🐛 Bug Report: Errors in Storybook's Groups Members List Card

📜 Description
There are errors on 2 pages in Storybook instead of components

https://backstage.io/storybook/?path=/story/plugins-org-group-members-list-card--aggregate-members-toggle
https://backstage.io/storybook/?path=/story/plugins-org-group-members-list-card--default

👍 Expected behavior
Component should be shown
👎 Actual Behavior with Screenshots
On some pages in Story there are errors like this

👟 Reproduction steps
Visit: https://backstage.io/storybook/?path=/story/plugins-org-group-members-list-card--aggregate-members-toggle
📃 Provide the context for the Bug.
No response
🖥 Your Environment
No response
👀 Have you spent some time to check if this bug has been raised before?

[X] I checked and didn't find similar issue

🏢 Have you read the Code of Conduct?

[X] I have read the Code of Conduct

Are you willing to submit PR?
None

@vinzscam @piatkiewicz I would like to work on this issue, please assign this to me.

@vinzscam I have forked the repository and was beginning to go through the code space, is there any reference that I can look at or read up?
Would be great to know a starting point.

@Arup-Chauhan maybe that could be useful https://backstage.io/docs/dls/contributing-to-storybook

@piatkiewicz I was caught up with academic work, will start working on it, thanks!

@Arup-Chauhan maybe that could be useful https://backstage.io/docs/dls/contributing-to-storybook

Also this https://github.com/backstage/backstage/blob/master/CONTRIBUTING.md

@Arup-Chauhan maybe that could be useful https://backstage.io/docs/dls/contributing-to-storybook

Also this https://github.com/backstage/backstage/blob/master/CONTRIBUTING.md

This seems a good place to start, thanks @vinzscam , will keep you posted!

I mentioned this on my draft PR as well:
I'm currently working on setting up routing for some components within a tag. Specifically, I'm trying to provide the correct routing context for the AggregateMembersToggle and Default
While it makes sense to use GroupProfileCard as an element within the route, it leads to issues with permission hooks
Any feedback or direction on:
The appropriate routing tags and structure within to provide context.
Is it the right to integrate GroupProfileCard? If yes how we do it without permission issues.
Any additional components or mock implementations needed to resolve these issues.
@Rugvip  @camilaibs  @iamEAP  @vinzscam, I would really appreciate any sort of help on this.

Hi @Arup-Chauhan, to resolve the issue you can wrap the stories with a test app, the test app will mock the routing context for you. You can do it by using story decorators, see the Link story as an example:

Add the decorator to the story default export.export default {
  title: 'Plugins/Org/Group Members List Card',
  component: MembersListCard,
+ decorators: [
+    (Story: ComponentType<PropsWithChildren<{}>>) =>
+      wrapInTestApp(
+        <div>
+          <Story />
+        </div>,
+        // The "entityRouteRef" is imported from "@backstage/plugin-catalog-react"
+        { mountedRoutes: { '/': entityRouteRef } },
+      ),
+  ],
};

Remove the MemoryRouter from all stories in the file (it is necessary because the test app already add a router too)export const Default = () => (
- <MemoryRouter>
    <TestApiProvider apis={[[catalogApiRef, catalogApi([alice, bob])]]}>
      <EntityProvider entity={defaultEntity}>
        <Grid container spacing={4}>
          <Grid item xs={12} md={6}>
            <MembersListCard />
          </Grid>
        </Grid>
      </EntityProvider>
    </TestApiProvider>
- </MemoryRouter>
);

Hi @camilaibs, thank you for the help! I will do this and update accordingly, this means a lot!


Add James and Tim to dev team

cc @leios @maleadt Hope this is okay with you guys!

Pull Request Test Coverage Report for Build 707

0 of 0   changed or added relevant lines in 0 files are covered.
No unchanged relevant lines lost coverage.
Overall coverage remained the same at 62.429%

Totals

Change from base Build 698:
0.0%

Covered Lines:
550

Relevant Lines:
881

💛  - Coveralls


Issues of User/Role/ApiTokens

If we fix checkboxGroup problem #2036, There is another problem when removing all roles:
Unknown: Must contain at least 1 request. (Parameter 'requests')

User.Locked is not updatable

Cannot update Role's name and description


New package CONZEInformatik.Vistrax

Checklist for Pull Requests

[X] Have you signed the Contributor License Agreement?
[X] Is there a linked Issue?

Manifests

[X] Have you checked that there aren't other open pull requests for the same manifest update/change?
[X] This PR only modifies one (1) manifest
[ ] Have you validated your manifest locally with winget validate --manifest <path>?
[ ] Have you tested your manifest locally with winget install --manifest <path>?
[X] Does your manifest conform to the 1.6 schema?

Note: <path> is the directory's name containing the manifest you're submitting.

Follow-Up PR to #151950
Microsoft Reviewers: Open in CodeFlow

Manual Validation ended with:

Hi @FaserF,
Is another installer switch needed to complete this installation without interaction?

Hi @stephengillie
I am not able to reproduce the issue. On my machine everrything installs fine without (tested in passive and silent mode):

Is there an issue with the test machine?

Hi @stephengillie
I am not able to reproduce your issue from here https://github.com/microsoft/winget-pkgs/pull/168830#issuecomment-2307299334. On my machine everrything installs fine without (tested in passive and silent mode):

Is there an issue with the test machine?


Support for use on server.

How would one use this on the server? Using the:
<script ...
method is not an option.
Attempting to  require it throws a file not found exception.

Have a look at the showdown wiki

Yeah, I wasn't clear enough on this. I don't actually want it to work on the server, I want it to work with webpack. Rewriting issue.

What version of showdown are you using? From 1.2.0 and onward, github extension is bundled with core. You can check the options section in showdown docs for more info


Fix SCS requirement issue (Issue #1474)

Issue Link: #1474
MWE to trigger retry
import numpy as np
import cvxpy as cp

n_sec = 20
np.random.seed(315)
mu = np.random.random(n_sec)
random_mat = np.random.rand(n_sec, n_sec)
C = np.dot(random_mat, random_mat.transpose())

x = cp.Variable(n_sec)
prob = cp.Problem(cp.Minimize(cp.QuadForm(x, C)), [cp.sum(x) == 1, 0 <= x, x <= 1, x @ mu >= np.max(mu) - 1e-6])
prob.solve(cp.SCS)

Tested under SCS version 2.1.4 and 1.2.6.

Looks great! Thanks @phschiele !


Fix import error

based on sunpy version.  See issue #55

Codecov Report
Base: 66.95% // Head: 66.83% // Decreases project coverage by -0.12% :warning:

Coverage data is based on head (67e3ce1) compared to base (709bd78).
Patch coverage: 50.00% of modified lines in pull request are covered.

Additional details and impacted files
@@            Coverage Diff             @@
##           master      #56      +/-   ##
==========================================
- Coverage   66.95%   66.83%   -0.13%
==========================================
  Files          10       10
  Lines         802      805       +3
==========================================
+ Hits          537      538       +1
- Misses        265      267       +2

Impacted Files
Coverage Δ

stixpy/net/client.py
96.47% <50.00%> (-2.31%)
:arrow_down:

Help us with your feedback. Take ten seconds to tell us how you rate us. Have a feature suggestion? Share it here.

:umbrella: View full report at Codecov.
:loudspeaker: Do you have feedback about the report comment? Let us know in this issue.

this is probably good for now, in future I guess STIXpy will just require sunpy >=4.1


jpeg images send to edgex

I wanted to send images jpeg format which is taken by embedded boards like raspberry pi and esp32-cam to edgex via devicemqtt using mqtt protocol. Can you tell the process of doing it. From edgex those images are sent to AI/ML applications.

What kind of AI/ML application? What is its interface? Give me more details, please.

MQTT Device Service doesn't support the binary data for now.
Also, it's not a good idea to send the large binary data via MQTT protocol.


Fix packagist name in docs

Package name in docs fixed.
fixes #5

@MaximumRGB can you also update the fos_rest: in the example codes?

Done, if i understood you right.

@MaximumRGB Thank you!


About modal won't exit in IE and Edge

Just tested in IE and Edge on Windows 10.

Fixed through ^


Some libvirt XML modifications:

Removed VNC. The VM can happily run without it.
Removed serial on boot - not needed.
Remove memory balloon device - unused.
Ensure boot is always done from the 1st disk (useful when I'll later add additional disks)

Fixed all review comments (I hope).

I think I've resolved all review comments (unsure why Github doesn't believe me). Let me know if I need to do anything else here.

I think we should keep VNC as it's useful to have when getting VM boot issues.

@mykaul Can you please adjust https://github.com/code-ready/machine-driver-libvirt/pull/50#issuecomment-692119606 and we can merge it?

@mykaul Can you please adjust #50 (comment) and we can merge it?

All my patch does is get rid of the unused balloon device then... not worth the hassle.


Add a function somewhere to force-focus an element

  local finder = GUI.findElementByName("finder")
  window.state.focusedElm = finder

  -- Start the main loop
  GUI.Main()

this snippet worked for me if anyone stumbles on this. it autofocuses an element on window start.

Update in case I ever get back to this:
Right now there's no way for an event handler to set the focus, only to lose it. This might just be a matter of:
  -- window.lua @ window:updateInputEvents
  if state.shouldLoseFocus then elementToLoseFocus = state.shouldLoseFocus end
+ if state.elementToFocus then elementToFocus = state.elementToFocus end


🐛 [firebase_crashlytics] Handler has been deprecated

Bug report
Describe the bug
Build is throwing warnings. compiling with details shows it is Handler has been deprecated within FlutterFirebaseCrashlyticsPlugin.java
/Users/Applications/flutter/.pub-cache/hosted/pub.dartlang.org/firebase_crashlytics-2.7.2/android/src/main/java/io/flutter/plugins/firebase/crashlytics/FlutterFirebaseCrashlyticsPlugin.java:72: warning: [deprecation] Handler() in Handler has been deprecated
    new Handler()

Steps to reproduce
Steps to reproduce the behavior:

Compiled with android studio on mac

Flutter doctor
Run flutter doctor and paste the output below:
Click To Expand
Doctor summary (to see all details, run flutter doctor -v):
[✓] Flutter (Channel stable, 2.10.5, on macOS 12.2.1 21D62 darwin-x64, locale en-US)
[✓] Android toolchain - develop for Android devices (Android SDK version 31.0.0)
[✓] Chrome - develop for the web
[✓] Android Studio (version 2021.1)
[✓] Android Studio (version 4.1)
[✓] VS Code (version 1.66.2)
[✓] Connected device (2 available)
[✓] HTTP Host Availability

Flutter dependencies
using:
firebase_core: ^1.16.0
firebase_analytics: ^9.1.7
firebase_auth: ^3.3.17
cloud_firestore: ^3.1.14
firebase_crashlytics: ^2.7.2
firebase_messaging: ^11.3.0
firebase_performance: ^0.8.0+11

Hi, this has been fixed by using a non-deprecated constructor as documented here. Thanks.


Add files via upload

uploaded slides and code export

The twx file is an export from BPM

PowerPoint slides have video demos.


Escaped sample urls

PR Summary
Escaped sample URLs identified as broken links in the OPS report.
PR Checklist

[x] Descriptive Title: This PR's title is a synopsis of the changes it proposes.
[x] Summary: This PR's summary describes the scope and intent of the change.
[x] Contributor's Guide: I have read the contributors guide.
[x] Style: This PR adheres to the style guide.

Learn Build status updates of commit 783d65a:
:white_check_mark: Validation status: passed

File
Status
Preview URL
Details

azps-9.1.0/Az.Functions/Get-AzFunctionAppSetting.md
:white_check_mark:Succeeded
View (azps-9.1.0)

azps-9.1.0/Az.Functions/Remove-AzFunctionApp.md
:white_check_mark:Succeeded
View (azps-9.1.0)

azps-9.1.0/Az.Functions/Remove-AzFunctionAppSetting.md
:white_check_mark:Succeeded
View (azps-9.1.0)

azps-9.1.0/Az.Functions/Restart-AzFunctionApp.md
:white_check_mark:Succeeded
View (azps-9.1.0)

azps-9.1.0/Az.Functions/Start-AzFunctionApp.md
:white_check_mark:Succeeded
View (azps-9.1.0)

azps-9.1.0/Az.Functions/Stop-AzFunctionApp.md
:white_check_mark:Succeeded
View (azps-9.1.0)

azps-9.1.0/Az.Functions/Update-AzFunctionApp.md
:white_check_mark:Succeeded
View (azps-9.1.0)

azps-9.1.0/Az.Functions/Update-AzFunctionAppSetting.md
:white_check_mark:Succeeded
View (azps-9.1.0)

For more details, please refer to the build report.
Note: Broken links written as relative paths are included in the above build report. For broken links written as absolute paths or external URLs, see the broken link report.
For any questions, please:Try searching the learn.microsoft.com contributor guidesPost your question in the Learn support channel


Support trueValue and falseValue

Please add the ability to override the values sent by this component within the form.
Example implementation: https://github.com/vueform/toggle
Example code:
<Toggle bind:status label="Toggle" trueValue="on" falseValue="off" />

Hey there, this seems to be supported by switch descriptors: https://github.com/metonym/svelte-toggle?tab=readme-ov-file#switch-descriptors
<Toggle on="On" off="Off" />

I solved it this way:
  <Toggle bind:toggled />
  <input type="hidden" {name} bind:value={toggled} />


No cloring for fields type in typescript interface.

This issue might be related to: https://github.com/Microsoft/TypeScript-TmLanguage/issues/44
There is no coloring for interface field types when user select Light (Visual Studio) there in VSCode.
When I am changing the theme then types are highlighted properly so it is just a matter with Light (Visual studio) theme.

https://github.com/Microsoft/TypeScript-TmLanguage/issues/162


Make the readme international

As we all know ,English is a global general language ,so for developers they always treated the English as the first language ,so making it international is so momentous .
Perhaps it's not for the non-english developers ,make the readme more languages and then it works well...

Thx for issue! We do it after major update


Array trait is private

So I'm using this to implement an optimization of the LRUCache in Servo servo/servo#17054, but I need a small change making mod array and use array::Array both public, so I can guarantee the trait being held.
I can submit the pull request needed for it.

New version is 0.2.3


Bug when loading some models

Some models gives a "vector::_M_range_check: __n (which is 1) >= this->size() (which is 1)." error (n might change)
http://graphics.cs.williams.edu/data/meshes/mitsuba.zip is one of them

I believe that was fixed by commit b7c69b4


Deprecated calls

Deprecation cop is not happy with color-picker in the latest Atom.

keymaps/color-picker.cson
Use the atom-workspace tag instead of the workspace class.

Thanks, this is fixed here: https://github.com/thomaslindstrom/color-picker/pull/46


Auto-accept proposals where requestor is also approver

User Story
Sometimes I like to talk to myself

T-shirt size:

User Story
"As a user of NexT I find that sometimes I need to ask myself for permission.  In such cases, Next should just remove a few clicks and go ahead and do my bidding."

Description
There are a few scenarios where the requester and the approver are the same.  In those cases, Next should recognize this and automatically accept the proposal without requiring the approver to act.

when a role/pack creator adds members at creation time (requires on_behalf_of functionality)
when role/pack creator asks to become a member of the role/pack that they own.

Acceptance Criteria/Tests

any scenario that would normally result in the approver being asked to accept/reject their own request should instead be auto-approved.
since proposal are still being created and processed, the ledger should still show that a proposal was made and it was approved.
no alerts get generated for such proposals

Currently when I try to join a role that I own, I'm blocked because the buttons don't paint and don't function.  This same build works for others joining my role but not me joining my own.  I suspect that we will still need these buttons even in the "join my own role" scenario.

migrated to new tmobile/sawtooth-next-directory repo

migrated to new tmobile/sawtooth-next-directory repo

migrated to new tmobile/sawtooth-next-directory repo


Fix erroneous test logic in test_dt_tz_translation, test_dt_tz_naive

This PR fixes the failed test_dt_tz_translation and test_dt_tz_naive tests as seen in PR #41.
The old testing logic assert d1.hour - d2.hour == 5 worked under the assumption that d1.hour is always greater than d2.hour, but this isn't the case from 7 PM to 11 PM (hours 19 - 23) EST, during which the GMT conversion is wrapped back to hours 12 AM to 4 AM (hours 0 - 4).
Hence, the current tests will only succeed 19 out of 24 hours in a day! Now they will pass at any time of day 🎉  🎉  🎉

✨🍰✨


Fix syntax warning over comparison of literals using is.

Fixes #364

Codecov Report

Merging #365 into master will not change coverage.
The diff coverage is 100.00%.

@@           Coverage Diff           @@
##           master     #365   +/-   ##
=======================================
  Coverage   78.76%   78.76%
=======================================
  Files          34       34
  Lines        2256     2256
=======================================
  Hits         1777     1777
  Misses        479      479

Impacted Files
Coverage Δ

flax/optim/weight_norm.py
90.12% <100.00%> (ø)

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update a5dfa29...bfa5801. Read the comment docs.

Thanks @levskaya :)

Thank you!


🐞 - Textfield open input doesn't work as expected

Reproduction url
https://stackblitz.com/edit/angular-3dfsuh?file=src%2Fapp%2Fapp.template.html
Description
Textfield dropdown opens even when textfield's open input is set to false.
[Might also be an issue with TuiDropdownOpen directive.]
Check the stackblitz link for reproduction.
Issue is also present in the Taiga demo app:
https://github.com/taiga-family/taiga-ui/blob/d2c4a998e6ab640e386d2150994e2ceaee4a98c0/projects/addon-doc/components/navigation/navigation.template.html#L6
Maybe as a workaround tuiDropdownEnabled could be exposed from the Textfield component?
Taiga UI version
4.15.0
Browser Used
Chrome
OS Used
Windows

Yes, that would be not a workaround but a proper fix — open is a two way binding and can be internally updated, tuiDropdownEnabled is there to control built-in opening mechanic like clicks on buttons or arrows on inputs. We need to expose it with TuiWithDropdownOpen and add to the docs. We do not need to add aliasing to the name in this case because it is not used in the directive selector.


Document administration of groups

We have three categories:

*: Top level, points of contact, such as support or workshop or registration or officers etc. (even for higher positions)
*-list: Mailing lists such as community-list
*-noreply: Internal, not intended for external access.

Besides Calendar event management nuances, we should clearly document when to remove people from specific groups (such as officers and its counterpart) but honor into an alumni group.
We should also note that meetings start only and only if an officer is present (moderation of meet events, add officers-noreply as invited in all cases but not community-list so that redundant notifications are avoided).

(Additional: management settings of individual events and making sure no one can invite all members of lists)


Mac compat

Allows for basic Mac compatibility through:

Reorganizing the background object to prevent serializing complex objects into the process_images workers (by initializing the objects within the run function)
Commenting out print("QUEUE SIZE", self.images_queue.qsize()) as multiprocessing queue.qsize() is not implemented for Mac
When on Mac utils.get_active_window() always returns None. I couldn't find a simple Mac python replacement. The best lead involved calling AppleScript through subprocess

Thanks for your contribution !
As soon as I can get my hands on a Mac, I will test and review.
Can you include your Mac's config in the PR text ? (CPU and OS version mainly)


Clean-up batch scripts

use call :{{label}} instead of goto {{label}}
terminate all procedures with exit /b 0
use variables where appropriate
reduce spaghetti code
existing variable names and label names were not changed

This is a first PR aiming to clean-up script related stuff.
⚠ Please check whether scripts work yourself, edits were based on my Batch script knowledge but were not tested as I have no Windows machine.

Hello Emily @EmilySeville7cfg thank you for this pull request and the other one accompanying it.

⚠ Please check whether scripts work yourself, edits were based on my Batch script knowledge but were not tested as I have no Windows machine.

I appreciate your efforts very much, but I must decline.  Several reasons:

This solves a problem we don't have.
This is a popular repo and literally countless numbers rely on what we do here. We don't make changes without considering our substantial legacy installed base.
Thank you for being forthright and disclosing you didn't test these changes. I also notice you've submitted dozens (or more?) similar pull requests across GitHub.

Therefore I respectfully decline this PR, and the other one accompanying this one.  But thank you!
Closing.


[Feature]: Unauthenticated users should not be able to call the API

Background
While we work to make sure that all our endpoints move from using privileged clients to user-authenticated clients, we want to introduce a basic layer of security to the API. Let's start by checking if the user calling is authenticated at all, even if the requests we'll make to Kubernetes will still be performed as a privileged user instead of the calling user.
Acceptance Criteria
GIVEN I am logged in
WHEN I hit any* endpoint of the API shim
THEN I see the request has been accepted
GIVEN I am not logged in
WHEN I hit any* endpoint of the API shim
THEN I see the request has been denied with a response like this:
HTTP/1.1 401 Unauthorized
Content-Type: application/json

{
  "errors": [
    {
      "code": 10002,
      "title": "CF-NotAuthenticated",
      "detail": "Authentication error"
    }
  ]
}

GIVEN I am logged in
BUT my token or cert is not valid on the cluster
WHEN I hit any* endpoint of the API shim
THEN I see the request has been denied with a response like this:
HTTP/1.1 403 Forbidden
Content-Type: application/json

{
  "errors": [
    {
      "code": 10003,
      "title": "CF-NotAuthorized",
      "detail": "You are not authorized to perform the requested action"
    }
  ]
}

*Whitelisted endpoints
We want the following endpoints to always be accessible:

/
/v3

Dev Notes

Given we want to protect the whole API using the same logic, we could use a gorilla/mux middleware.
To verify if a user is authenticated or not, the simplest thing to do is probably to try performing a request to Kubernetes on their behalf. Ideally, the request shouldn't necessarily be one the user is authorised for, all we want is to distinguish users who are authenticated from users who aren't (regardless of wether they're authorized, for now).

k8s.io/apimachinery/pkg/api/errors.IsUnauthorized and k8s.io/apimachinery/pkg/api/errors.IsForbidden could help here

This is temporary, until we add authentication to all our endpoints.
The distinction between unauthenticated (401) and unauthorised (403) is one that we probably want to maintain.

As discussed today at IPM, we should be able to use the IndentityProvider for this once we fix #240.

We have found two ways to tell authenticated users (and signed certificates) apart:

Perform any action (e.g. listing namespaces, or even listing Pods in the default namespace) and check the response.

If 401 (IsUnauthorized), the user is not authenticated, so the cert is invalid.
If 403 (IsForbidden), the user is authenticated but not permitted to perform the action.

Try to create a SelfSubjectAccessReview (or a SelfSubjectRulesReview), which are the resources created by the kubectl auth can-i command (see _ Authorization Overview_).

If 201, the user is authenticated and the cert is valid. Every user can create these resources.
If not, the user is not authenticated and so the cert is invalid.

The latter option feels a lot more elegant and safe.


Yosys  output and input design equivalence is inconsistent

Steps to reproduce the issue
Consider the following piece of code:
module top  ( var_ah, var_ab, var_ac );
output var_ah ;
input var_ab, var_ac ;
assign var_ah  = var_ac ? var_ab : 1'bz ;
endmodule
Run with yosys version
Generated by Yosys 0.9+4081,Yosys 0.15 (git sha1 UNKNOWN, clang 10.0.0-4ubuntu1 -fPIC -Os)
and the following command
yosys -p 'read_verilog  rtl.v; synth; write_verilog  syn.v'
Expected behavior
When passing the input var_ac=0; I would expect the output to give1'bz.
Actual behavior
*The synthesised output is the following, which when given var_ac=0, gives var_ab as output.At the same time, symbiyosys also found that the output and input are not equivalent when checking their equivalence  .
yosys output is as following：
/* Generated by Yosys 0.15 (git sha1 UNKNOWN, gcc 9.4.0-1ubuntu1~20.04 -fPIC -Os) */
(* src = "rtl.v:2.2-7.11" )
module top(var_ah, var_ab, var_ac);
( src = "rtl.v:4.11-4.17" )
input var_ab;
wire var_ab;
( src = "rtl.v:4.19-4.25" )
input var_ac;
wire var_ac;
( src = "rtl.v:3.13-3.19" *)
output var_ah;
wire var_ah;
assign var_ah = var_ab;
endmodule
there is a script that compares the RTL to the synthesised Verilog. to run sby proof.sby.
test_bug.zip

Can you help me solve this problem? I want to know the cause of this problem

Neither Yosys nor the formal solvers can use tristate logic, so this is not expected to work.


Can this library be used for new project without any security issues

Is there possibility of security issues by directly using this library and all of the variables without changing to custom ones.
I am new to ZKP.

Hi! It is not audited so use at your own risk.


Reorder quickpick menu and add list sub-menu

AB#373087

Codecov Report

Merging #809 (83c372e) into master (93df6ed) will increase coverage by 26.70%.
The diff coverage is 45.83%.

@@             Coverage Diff             @@
##           master     #809       +/-   ##
===========================================
+ Coverage   23.73%   50.44%   +26.70%
===========================================
  Files           5       77       +72
  Lines         198     5337     +5139
  Branches       26      897      +871
===========================================
+ Hits           47     2692     +2645
- Misses        151     2256     +2105
- Partials        0      389      +389

Impacted Files
Coverage Δ

...down/src/controllers/quick-pick-menu-controller.ts
72.17% <30.00%> (ø)

...s/docs-markdown/src/controllers/list-controller.ts
49.60% <57.14%> (ø)

...rticle-templates/src/helper/unit-module-builder.ts

...docs-article-templates/src/helper/user-settings.ts

...kages/docs-article-templates/src/helper/cleanup.ts

...templates/src/controllers/quick-pick-controller.ts

packages/docs-article-templates/src/strings.ts

...c/controllers/redirects/removeDefaultJsonValues.ts
23.52% <0.00%> (ø)

packages/docs-markdown/src/helper/metadata.ts
85.71% <0.00%> (ø)

...ocs-markdown/src/controllers/preview-controller.ts
54.34% <0.00%> (ø)

... and 74 more

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update 93df6ed...83c372e. Read the comment docs.


FragPipe v.19.1 combined_protein output not working with prolfqua::tidy_FragPipe_combined_protein

Hello and thank you for the open access package. Quick question about a problem I'm running into.
Describe the bug
FragPipe v.19.1 combined_protein.tsv output gives the error when prolfqua::tidy_FragPipe_combined_protein is called:
Warning: argument is not being debuggedError in 1:which(cnam == "Combined Total Spectral Count") :
  argument of length 0

To Reproduce
library(tibble)
library(dplyr)
library(prolfqua)

datadir<- file.path(find.package("prolfquadata"),"quantdata")

#read input annotation
annotation <- readxl::read_xlsx("myannotationfile.xlsx")
#read input protein
protein <- tibble::as_tibble(read.csv("~combined_protein.tsv", header=TRUE, sep="\t", stringsAsFactors = FALSE))

undebug(prolfqua::tidy_FragPipe_combined_protein)
protein <- prolfqua::tidy_FragPipe_combined_protein(protein)
protein <- protein |> dplyr::filter(unique.stripped.peptides > 1)
merged <- dplyr::inner_join(annotation, protein)

Additional context
FragPipe v19.1 only includes one type of Intensity per experimental replicate and LFQ; could this be the reason for the error? I am including my combined TSV file for your reference.
Thanks again for any help.
combined_protein.tsv.txt

"FragPipe v19.1 only includes one type of Intensity per experimental replicate and LFQ; could this be the reason for the error? I include my combined TSV file for your reference."
Yes, indeed, this is the reason for the problem. I got the "tidy_FragPipe_combined_protein" function working with the FP 19.1 output format.
You will need to reinstall the prolfqua package. Then you can read the file:
res <- tidy_FragPipe_combined_protein("combined_protein.tsv",
                               intnames = "Razor Intensity",
                               maxlfqnames = "MaxLFQ Razor Intensity")

You will find the abundances stored in the "RMAHA1 Intensity" columns than in the "razor.intensity" column.
If you want to read the data first into a data frame and then pass them to the function, then read it by passing the check.names = FALSE options to read.csv.
tmp <- read.csv("combined_protein.tsv",
         header = TRUE,
         sep = "\t",
         stringsAsFactors = FALSE,
         check.names = FALSE)


Accept inline splunk ca bundle

What is this PR About?
There are two changes in this PR, both for openshift-logforwarding-splunk:

Added a checksum/config annotation to the pods in the StatefulSet to make the pods restart when the ConfigMap is updated, so the new values become active in the cluster. I used Automatically Roll Deployments from the Helm docs as inspiration.
Replaced the optional forwarding.splunk.caFile value with forwarding.splunk.ca_bundle variable. This provides the feature to keep using the published chart and specify a custom CA bundle for connecting to the Splunk heavy forwarder with a helm install logforwarding-splunk redhat-cop/openshift-logforwarding-splunk -f override-values-with-custom-ca-bundle.yaml. I was not able to find a way to pass a file reference when deploying a chart.

How do we test this?
For the annotation:

Deploy the chart
Change a value that is specified in the ConfigMap. For example, switch forwarding.splunk.insecure to false.
Upgrade the helm chart
Note the pods in the StatefulSet restarting with the changed configuration

For the custom ca bundle:

Given a Splunk heavy forwarder with self-signed certificate or one from a custom CA
Add a values file and specify a custom ca bundle
Install helm chart with the custom value file
Note the connection to the heavy forwarder being established without SSL validation errors

cc: @redhat-cop/day-in-the-life

@johankok ; i dont really see any difference in the changes for part 2. it just renames a variable and removes a fail check if the ca is not set.
why can't you use the chart as-is, with the caFile to accomplish what you need?

why can't you use the chart as-is, with the caFile to accomplish what you need?

For example, with this values file:
---
forwarding:
  splunk:
    token: blah-blah-blah
    protocol: https
    hostname: splunk.example.com
    insecure: false
    caFile: cabundle.pem

and then deploy the chart:
$ helm repo add redhat-cop https://redhat-cop.github.io/helm-charts
$ helm install logforwarding-splunk redhat-cop/openshift-logforwarding-splunk -n openshift-logging -f values.yaml
Error: INSTALLATION FAILED: execution error at (openshift-logforwarding-splunk/templates/log-forwarding-splunk-certs-secret.yaml:4:4): Could not locate Splunk Certificate

As I understand https://github.com/helm/helm/issues/3276, Helm cannot locate the cabundle.pem because it's outside the chart. I could clone the repo, add cabundle.pem to the chart and deploy from there, but I would like to reuse the one that is published.

I understand that you want to point this chart but provide the values from outside like via Argo CD or something. Sounds good to me 🙂


fuchsia os support

Hello, everyone!
I've heart that Samsung is planning to move to fuchsia os for all devices (including TVs).
Does anybody know something about it?
Will flutter-tizen native app work on fuchsia os?

I'm pretty sure that's NOT a fact and I can confirm that Samsung TVs will continue to use Tizen OS.
Even if it's true, your existing app should work on any platform because Flutter is cross-platform (unless the app depends on platform-specific plugins). I don't know if Google will open source and release their Flutter plugins for Fuchsia.


xorg.freedesktop.org 403 Forbidden using latest crouton

Just trying to install Kali Sana via the following command
sudo sh -e crouton -r sana -t xfce
Everything goes through fine until this:
--2016-02-15 14:58:37--  http://xorg.freedesktop.org/releases/individual/driver//xf86-video-dummy-0.3.7.tar.gz
Resolving xorg.freedesktop.org (xorg.freedesktop.org)... failed: Name or service not known.
wget: unable to resolve host address 'xorg.freedesktop.org'
Failed to complete chroot setup.
Unmounting /mnt/stateful_partition/crouton/chroots/sana...
Sending SIGTERM to processes under /mnt/stateful_partition/crouton/chroots/sana...
Have tried browsing to http://xorg.freedesktop.org/releases/ on another computer/network and get the same 403 so I am going to guess it isn't a bug or anything. But is there a workaround available?

Works fine from here. Try again?

Thanks. I tried again a few hours later and it was working.


UNOMI-379_support_addValues

Hello, thanks for the PR, it looks good to me. Any chance we could add some integration tests for this ?

I will merge now but it would be really good to add some integration tests soon.


coverage is broken -- pending revised CQL annotations

replaced https://github.com/projecttacoma/bonnie/pull/737

CQL does not show coverage
QDM-based logic measures do
tests no longer broken

Tested locally. Looks good.


Demo 0.1.0

Perform demo of Living Documentation.

Get CI job working in aqueduct-docs repository

### Tasks
- [ ] #50
- [ ] #51
- [x] Create solo repository to host AqueDuct documentation issues
- [ ] #52

I am closing this Epic.

Solo repository has been already created - see https://github.com/absa-group/aqueduct-living-documentation
The CI job for data mining will be implemented with future release. Not with 0.1.0.


[FEATURE] Integrate IBM Watsonx Model

Is your feature request related to a problem? Please describe.

Add integration of Watsonx ai in langchain4j
https://python.langchain.com/docs/integrations/llms/ibm_watsonx/

@langchain4j you can assign it to me

@omarmahamid thank you!
Please note that there is a WatsonX implementation in Quarkus LangChain4j Extension, perharps is could help.
cc @geoand

cc @andreadimaio

The watsonx documentation can be found at this link.


Switch history/replication to internal types

What changed?

Switch all replicator.*types to internal equivalents within service/history/replication.
Add corresponding conversion mappers for related usages in history engine.

Why?
To propagate internal types throughout Cadence codebase.

How did you test it?

Potential risks

Coverage decreased (-0.05%) to 59.965% when pulling ec17a7a4c358017ccff3026d78679a2db54425ad on vytautas-karpavicius:replication-stack-internal-types into a6edb2401fc0e99c36f6d8190808d75e07d39914 on uber:master.


Show callout kotlin sample

This PR is for the kotlin sample of show callout. Straightforward, the only thing I changed from the Java version was how we set the text (I moved it to the strings.xml file instead of concatenating in the code). Hopefully this renders ok on other devices. @hud10837 could you take a first review please? Thanks!

@sorenoid could you take a second look please?


Add Acronis

Added the information for Acronis after searching for it and finding it not there.
Deletion is easy to find in account settings, just hit the button and click through the menu.

Hello @Hime0698
This repo has been abandoned for years. We keep an active version of it here https://github.com/jdm-contrib/jdm , feel free to contribute there!


[WebServer] IStateControl -> IConfigure

In the end the IStateControl was there for another reason than just the Configure call. See https://jira.rdkcentral.com/jira/browse/METROL-489


Adjust topMargin on resize

This is an issue when using with WordPress and other applications with a toolbar.
The topMargin can change depending on screen size.
Would be great if there was a way to update it, or even a destroy method so we could destroy the current instance and re-initialize using the updated topMargin setting.

Hi,
I got the point. So you want topMargin to be somehow dynamic or at least a control over reinitialization, right?
Can you make up a mockup or something so one could dive in with development right into this specific case? This request sounds useful.

It's not that difficult, we just need a destroy function so we don't re-initialize on resize:
function getOffset( el ) {
    return ( jQuery( el ).length > 0 && jQuery( el ).css( 'position' ) == 'fixed' ) ? jQuery( el ).outerHeight() : 0;
}

resizeEvent = 'onorientationchange' in window ? 'orientationchange' : 'resize'

var myEfficientFn = debounce(function() {
    // Detroy/unstick here
    el.stickUp({
        topMargin: getOffset( '#wpadminbar' ),
    });
}, 250);

window.addEventListener( resizeEvent, myEfficientFn );

StickyKit has the detach trigger which works: https://github.com/leafo/sticky-kit/blob/master/dist/sticky-kit.js

Hi,
thanks for your contribution. Actually the best solution would be to update just the margin and recalculate, right?
Please take note that controbution for adding an API for event emmission and listening would be highly appreciated. (See Contribution in Readmy)


Support uploading properties in KGTK format

Currently, properties must be uploaded in JSON. We need support to upload properties in KGTK TSV format as in the attached file. The idea is that the T2WML backend will scan the uploaded file to select rows of the form:
	P2006050001	data_type	quantity
	P2006050002	data_type	quantity

The set of property types are, the following, using the terminology in the KGTK command to generate triples. We may need to change or add aliases to this list:
item
time
globe-coordinate
quantity
monolingualtext
string
external-identifier
url
property

This command is working, close?

sure


Update ZAP vs. Benchmark Tests

Signed-off-by: ricekot<EMAIL_ADDRESS>

Do we really want to maintain our own copy of their yaml?
How do we monitor it for changes?

That's a good point, doesn't the benchmark serve that so that it can be grabbed as needed?

Thank you!


LIME discretization?

Why does LIME uses discretization?

Discretization is the default for numerical data, but you can disable it if you want.
It is harder to interpret explanations for numerical features for the following reasons:

The values may be in different ranges. We can always standardize the data, but then the meaning of the coefficients changes
It's hard to think about double negatives (i.e. negative weight for a negative feature = positive contribution)

See #113


[WebAPI] History API docs tasks, Firefox 70 (Irene)

Trello: https://trello.com/c/r3ruThJ3/44-history-api-fx-70
Acceptance criteria

[ ] Make history navigations asynchronous

[ ] Check the other tasks listed on the trello card, to  make sure they have been done, as required.

Assigning to @irenesmith , as she just did some work on the History API.

Updated the Fx 70 release notes to mention that the back, forward, and go methods are asynchronous.
Updated the History page to mention that go, back, and forward methods are asynchronous.
Added a discussion on each of the method's pages to mention that it is asynchronous and that the popstate method needs to be handled to determine when the navigation has completed.

See also section for each of the back, forward, and go methods includes a link to the popstate event.


Fibonacci using recursion

Is your feature request related to a problem? Please describe.
The problem is to print Fibonacci series using recursion.
Describe the solution you'd like
In the above problem , the Fibonacci series will be printed. The implementation of the code will be done using recursion.
N will be the input from the user , N is the number of integers that will be printed in the fibonacci series.
Fibonacci series is such that every third integer is the sum of the  second last and last  integer.
Do you want to work on it
I want to code this program in java language. Please assign it to me.

please Assign this to me

I have created this Issue . @plazzy99  Please assign this to me.
Thanks.

Hi,
I am GSSOC'21 participant,
My code will be in python with proper comments and test cases.
@tarun26091999 @rudrakshi99 Please assign me this. Thankyou!!

I have created this Issue .
I will code this in java with proper test cases and comments.
@plazzy99 @tarun26091999 @rudrakshi99 Please assign this to me.
Thanks.


Improve conflicts audit

[x] Have you followed the guidelines in our Contributing document?
[x] Have you checked to ensure there aren't other open Pull Requests for the same change?
[x] Have you added an explanation of what your changes do and why you'd like us to include them?
[x] Have you written new tests for your changes? Here's an example.

[x] Have you successfully run brew typecheck with your changes locally?
[x] Have you successfully run brew tests with your changes locally?

This PR adds a couple of more checks for conflict audit:

a formula shouldn't conflict with itself
if a formula conflicts with another one, the second formula should have a conflict with the first one

We have several formulae (23 when I've check it last time) with asymmetric conflicts_with statement. PR for them are coming

Review period will end on 2021-06-16 at 12:53:06 UTC.

Nice work! Some suggested, optional tweaks.

Thanks for the suggestions, incorporated them all with some additional tweaks for formula comparison (instead of comparing by name, I compare formula themself now, it allows to handle correctly formula renames).
And here's a PR with formulae fixes https://github.com/Homebrew/homebrew-core/pull/79446

Review period ended.

Looks good to me.
I like that it handles possible renames but I wonder if there should be another audit requiring that the formula name specified in the conflicts_with block is the "main name" of the formula. That way, changing the formula name also requires updating all of the conflicts_with references to that formula

Probably I've got an idea how we can do it, let me check 🙂

Thanks for the help @Rylan12 & @MikeMcQuaid 🎉


[DOCFIX] Update Configuring-Alluxio-with-Swift.md of Chinese version

Merged build triggered.

Merged build started.

Test PASSed.
Refer to this link for build results (access rights to CI server needed):
https://amplab.cs.berkeley.edu/jenkins//job/Alluxio-Pull-Request-Builder/13383/
Test PASSed.

Merged build finished. Test PASSed.

@yupeng9 Hi, I have addressed your left comment.

Merged build finished. Test PASSed.

Test PASSed.
Refer to this link for build results (access rights to CI server needed):
https://amplab.cs.berkeley.edu/jenkins//job/Alluxio-Pull-Request-Builder/13469/
Test PASSed.


deprecated alerts while following instructions

[Enter feedback here]
I got 21 "deprecated" alerts while running the one-line install code on this page on 7/26/2022.
PS C:\Users\username> npm install gulp-cli yo @microsoft/generator-sharepoint --location=global
npm WARN config global `--global`, `--local` are deprecated. Use `--location=global` instead.
npm WARN deprecated<EMAIL_ADDRESS>this library is no longer supported
npm WARN deprecated<EMAIL_ADDRESS>Please upgrade  to version 7 or higher.  Older versions may use Math.random() in certain circumstances, which is known to be problematic.  See https://v8.dev/blog/math-random for details.
npm WARN deprecated<EMAIL_ADDRESS>request has been deprecated, see https://github.com/request/request/issues/3142
npm WARN deprecated<EMAIL_ADDRESS>See https://github.com/lydell/source-map-url#deprecated
npm WARN deprecated<EMAIL_ADDRESS>Please see https://github.com/lydell/urix#deprecated
npm WARN deprecated<EMAIL_ADDRESS>https://github.com/lydell/resolve-url#deprecated
npm WARN deprecated<EMAIL_ADDRESS>See https://github.com/lydell/source-map-resolve#deprecated
npm WARN deprecated<EMAIL_ADDRESS>Chokidar 2 does not receive security updates since 2019. Upgrade to chokidar 3 with 15x fewer dependencies
npm WARN deprecated<EMAIL_ADDRESS>See https://github.com/lydell/source-map-url#deprecated
npm WARN deprecated<EMAIL_ADDRESS>Please see https://github.com/lydell/urix#deprecated
npm WARN deprecated<EMAIL_ADDRESS>https://github.com/lydell/resolve-url#deprecated
npm WARN deprecated<EMAIL_ADDRESS>See https://github.com/lydell/source-map-resolve#deprecated
npm WARN deprecated<EMAIL_ADDRESS>The querystring API is considered Legacy. new code should use the URLSearchParams API instead.
npm WARN deprecated<EMAIL_ADDRESS>Please upgrade  to version 7 or higher.  Older versions may use Math.random() in certain circumstances, which is known to be problematic.  See https://v8.dev/blog/math-random for details.
npm WARN deprecated<EMAIL_ADDRESS>Modern JS already guarantees Array#sort() is a stable sort, so this library is deprecated. See the compatibility table on MDN: https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Global_Objects/Array/sort#browser_compatibility
npm WARN deprecated<EMAIL_ADDRESS>This SVGO version is no longer supported. Upgrade to v2.x.x.
npm WARN deprecated<EMAIL_ADDRESS>Package renamed to @opentelemetry/api, see https://github.com/open-telemetry/opentelemetry-js
npm WARN deprecated<EMAIL_ADDRESS>Please upgrade  to version 7 or higher.  Older versions may use Math.random() in certain circumstances, which is known to be problematic.  See https://v8.dev/blog/math-random for details.
npm WARN deprecated<EMAIL_ADDRESS>The functionality that this package provided is now in @npmcli/arborist
npm WARN deprecated<EMAIL_ADDRESS>Chokidar 2 does not receive security updates since 2019. Upgrade to chokidar 3 with 15x fewer dependencies
npm WARN deprecated<EMAIL_ADDRESS>Please upgrade  to version 7 or higher.  Older versions may use Math.random() in certain circumstances, which is known to be problematic.  See https://v8.dev/blog/math-random for details.

added 2507 packages, and audited 2508 packages in 2m

34 vulnerabilities (14 moderate, 20 high)

Document Details
⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

ID: 5bee09a8-022e-1b5a-4aab-d6e7c6216808
Version Independent ID: 49edce1e-f2be-e989-917f-c6b389363e2f
Content: Set up your SharePoint Framework development environment
Content Source: docs/spfx/set-up-your-development-environment.md
Product: sharepoint
Technology: sharepoint-framework
GitHub Login: @VesaJuvonen
Microsoft Alias: vesaj

@jason-fsb some of the modules used in the generator are deprecated.
It's a common situation for front-end project with lots of dependencies.
We're focused on removing vulnerabilities, but not keeping all the dependencies up to date.


Support kylin os to deploy ceph cluster through ceph-deploy

Can one of the admins verify this patch?


Use repo assignable / mentionable users in finder

Describe what this PR does / why we need it
Use repo's assignable / mentionable users to populate finder instead of general GitHub search.
TODO:

[x] Add a configuration option so that the previous behavior can be used if desired
[ ] Implement for the other pickers / refactor user list logic to separate file. Thoughts on this @pwntester?
[ ] Update any documentation

Does this pull request fix one issue?

Closes #423
Describe how you did it
Pull out the finder creation logic
Describe how to verify it
Use Octo assignee add or Octo reviewer add to see the new behavior.
Special notes for reviews

@milogert just a heads up about a new implementation of the picker for choosing users in case you can port it to fzf-lua

Might be good to add to the readme before merge if you think this config change is reasonable @pwntester

Yep, please update the docs so users know the three options and the differences between them

I've added to the README. Let me know what you think about the location @pwntester

I've added to the README. Let me know what you think about the location @pwntester

That should be enough, thanks!

Tested the integration on my config. You guys rule! It is a banger and the documentation is crystal clear.

Thanks @wd60622!

@milogert just a heads up about a new implementation of the picker for choosing users in case you can port it to fzf-lua

Thanks! I can start taking a look at this 👌


Fixed a lot, went through and did a lot of optimizations.

Apparently, the progressbar on the splash screen was doing something like the fibonacci sequence, just to look busy. That's gone. Splash screen comes up right away. Marquee Progress animation.. Fixed the app opening in the background.
Fixed the Global Delete methods.
Changed tabSource, added a seperate ProgressBar for scanning directory.
This was an all nighter, and then some. But I think it was worthwhile.

bin.zip
I'm going to let you test this out first before I merge this into main... Please and thank you?

bin.zip
I'm going to ask you guys to test this out first before I merge this into main... I did, several iterations of scenarios, installing, deleting, intentionally trying to break things. Could've/should've used unit tests, but..
Please and thank you? @laetemn @jmynes @Brycey92 @DDinghoya Ugh.. There are a some unforseen things, after sleeping (napping for an hour?) that didn't show in debugging. Back at it...

Yup! I'll test it today! :)

So, that build needed more work... I'll upload what I have here in a little bit.
Thank you very much, it's super helpful and encouraging to get fresh/other eyes to test and break things. 😁
New build coming very soon.

bin.zip
I'm going to ask you guys to test this out first before I merge this into main... I did, several iterations of scenarios, installing, deleting, intentionally trying to break things. Could've/should've used unit tests, but..
Please and thank you? @laetemn @jmynes @Brycey92 @DDinghoya Ugh.. There are a some unforseen things, after sleeping (napping for an hour?) that didn't show in debugging. Back at it...

Yup! I'll test it today! :)

Sorry for the delay, wasted time having to backtrack because I didn't like the way some things were handled. This build should be testable. Might even just merge here in a day or two, barring anything major or based on feedback.
sjohnson1021-gcbm-build-8-31-22.zip

I tested your build from today and can confirm I do not have the issue listed in #79

Alright, I'm going to take a break for .. now.. sleep and whatnot. I like where this is at, but please do continue to report issues as they arise.
I'm aware that installing 1:1 , multiple files ( I tested a batch of 33) works, but locks the datagridview until you reload the list. Not ideal. and it's literally 1 line of code..
dgvSource.Enabled = true;
I just... Realllly.
Merging and dropping a release. Thanks again all, be back .. way too soon probably.

I've been testing it for a short time and haven't had any major problems. :)
There are some translation issues, but it's a very minor issue.
You've worked hard and get plenty of rest.


volsync migration off appsub

Signed-off-by: Erin Murphy<EMAIL_ADDRESS>issue: https://github.com/stolostron/backlog/issues/25586

Where do the CRDs come from? I don't see any in the volsync chart.

I got them from https://github.com/stolostron/volsync-addon-controller/tree/main/hack/crds , I assumed we needed to add those as well since it's a volsync-addon-controller repo?
Working on the tests and I'll get that cleanup code in too!


Support for formdata

The collection I was trying to convert was using multipart/form-data for the POST requests. The resulting YAML file didn't include any of the form data.
Is there any interest in added formdata support to the parseBody function? I've created a case in the switch statement to create the content object. May need some help with creating the test for this code. Let me know.

Hi @devNoiseConsulting  sure,
Any feature is always welcome, if you create a pull request with your code I can create a branch and merge for review code, add test, lint...
Best regards

Feature releases in version ´1.14.0´, thanks for the support @devNoiseConsulting


Updating to v5

Hey, so I recently saw that luckperms v5 was released and decided to update.
Upon updating, I was greeted by the following error: https://ghostbin.co/paste/yoje8
Our luckperms db is about 750mb (yes I made a backup).
Thanks.

Can you try running it by generating a new folder? Just rename your current LP folder to something else then restart the server.

It generates fine.

I'm going to assume your storage is corrupt.
You say you have a backup, did you run the /lp export <file> command? If so, you can just run /lp import <file> after putting the exported file into the new LP folder.

Oh, I assumed when updating it would be fine, weird, maybe add a spot for that somewhere in the upgrading to v5, you only guys only mention making a backup. It also runs fine on v4.2.58 :P so I don't think it's corrupt.
Also, after exporting the data from our v4 version I get a file with no extension.
When I try to import this into v5 I get the following error: http://i.iconictech.net/18.51.40-28.11.19.png

It does update just fine. You just happened to be unlucky and it corrupted at the same time you updated.
Regarding the error:
The export format did change.
So downgrade to v4, import the data and the upgrade again. Then everything should work.

I'm sorry I'm a little confused, you said downgrade to v4 then export, but I did export that on v4. v5 doesn't allow me to import whatever I exported from v4

No I did not.
I said downgrade, import, upgrade. Also wipe the storage before importing.


Unicode URL text, such as 'Ασφάλεια Υγείας' detection

First of all thanks for this great extension!
If you check the Ασφάλεια Υγείας Σύγκριση Τιμών Online και Προσφορές Ασφαλίσεων page you will see that when the innerText of some anchor doesn't contain English text, it gets detected as unclear.

Hi @datio,
Thank you for creating this issue and I am sorry for the late response. I will fix this problem in the next release most probably by the end of the week.
Regards,
Mateusz

Hi @datio,
Seems that the issue detection feature creates more problems than it solves. I am disabling this functionality for now, until I figure out how to do it properly.
A new version of ARIA DevTools with this functionality disabled has been released for Chrome and Firefox and should be available very soon.
Hope this helps,
Mateusz


Bugfix + Unify digraph and multidigraph behaviour

I noticed some issues where trying to do ORDER BY on edge attributes. This was due to the data structure of the edges specifically because they can support multi edges.
You can reproduce the error by (this PR fixes that):
from grandcypher import GrandCypher
import networkx as nx

host = nx.MultiDiGraph()
host.add_node("a", name="Alice", age=25)
host.add_node("b", name="Bob", age=30)
host.add_node("c", name="Carol", age=20)
host.add_edge("b", "a", __labels__={"paid"}, value=14)
host.add_edge("a", "b", __labels__={"paid"}, value=9)
host.add_edge("a", "b", __labels__={"paid"}, amount=96)
host.add_edge("a", "b", __labels__={"paid"}, value=40)

qry = """
MATCH (n)-[r:paid]->()
RETURN n.name, r.value
ORDER BY r.value ASC
"""
res = GrandCypher(host).run(qry)

print(res)

'''
TypeError: '<' not supported between instances of 'dict' and 'dict'
'''

Internally, GrandCypher now treats all graphs as MultiDiGraphs. I think this will make things clearer and require less special handling for future updates.
I also made some changes to the unit tests and added some more for these problematic cases.

sorry to re-request a review, but I ended up making some more changes :)
I noticed that when using ORDER BY on an edge attribute, the data structure changes:
from grandcypher import GrandCypher
import networkx as nx

host.add_node("a", name="Alice", age=25)
host.add_node("b", name="Bob", age=30)
host.add_node("c", name="Carol", age=20)
host.add_edge("b", "a", __labels__={"paid"}, value=14)
host.add_edge("a", "b", __labels__={"paid"}, value=9)
host.add_edge("a", "b", __labels__={"paid"}, value=40)

qry = """
MATCH (n)-[r]->()
RETURN n.name, r.value
ORDER BY r.value ASC
"""
res = GrandCypher(host).run(qry)

'''
res['r.value'] --> [
    [((0, 'paid'), 9), ((1, 'paid'), 40)],
    [((0, 'paid'), 14)]
]

without `order by` it would be
res['r.value'] --> [
    {(0, 'paid'): 9, (1, 'paid'): None, (2, 'paid'): 40},
    {(0, 'paid'): 14}
]
'''

also I added support for aliases:
from grandcypher import GrandCypher
import networkx as nx

host = nx.MultiDiGraph()
host.add_node("a", name="Alice", age=25)
host.add_node("b", name="Bob", age=30)
host.add_node("c", name="Carol", age=20)
host.add_edge("b", "a", __labels__={"paid"}, value=14)
host.add_edge("a", "b", __labels__={"paid"}, value=9)
host.add_edge("a", "b", __labels__={"paid"}, amount=96)
host.add_edge("a", "b", __labels__={"paid"}, value=40)

qry = """
MATCH (n)-[r]->(m)
RETURN n.name, SUM(r.value) as myvalue
ORDER BY myvalue DESC
"""

res = GrandCypher(host).run(qry)

print(res)

'''
{'n.name': ['Alice', 'Bob'], 'myvalue': [{'paid': 49}, {'paid': 14}]}
'''

Woahhh great improvements — always happy to re-review!

This is great @jackboyla  — good to merge?

cheers! good to merge😊


Coprocessor Cache is unsound

Bug Report
The Coprocessor cache works as follows, similar to HTTP cache:

TiDB sends a request to TiKV
TiKV returns the response, with current apply index.
TiDB caches the request, response, apply index.
Next time, before TiDB sending the same request, TiDB checks whether this request is cached.

If request exists in TiDB local cache, TiDB sends request to TiKV, carry with last apply_index.
If request not exists in TiDB local cache, TiDB sends request normally.

If TiKV receives a request with apply_index, TiKV checks whether latest apply_index matches the provided apply_index.

If apply_index is unchanged, it means the response in TiDB is valid, so TiKV returns empty response (with cache hit = true flag)
If apply_index is changed, TiKV returns normal response with current apply index.

If TiDB receives a response, with cache hit = true flag, TiDB fills the response from the local cache.

The "same request" concept is determined by the request payload without Timestamp, which means, sending request with different Timestamp but identical process payload is the same request. This is to make sure that in most cases the cache can work (since we almost never provide the same timestamp).
This process has a bug. If we send request use a old TS, cached response may not be safely used for a new TS. If old TS cannot scan latest data, then the response must not be cached.
The proposed change is as follows:

Add a field to Coprocessor response, indicating whether this response can be safely cached by TiDB.
When scanning data in MVCC, currently we skip (seek) directly to ${key}{start_ts}. We can change to skip to ${key}{max_ts}. If scanned key ts > start_ts, it means we found data newer than TS, so that this response must not be cached.
When we received locks, we also need to check the lock ts.

Start working on it