SSO auth not working

Describe the bug
I am currently working on implementing SSO authentication with Okta in my Next.js application, but I can't make it work.
The code I'm using:
const { data, error } = await supabase.auth.signInWithSSO({
    domain: "mydomain.com",
})

 if (data?.url) {
    window.location.href = response.url
}

This part of the code is functioning correctly. When I run it, I am redirected to Okta where I am able to successfully log in with my Okta account.
However, after being redirected back to my application: "http://localhost:3000/#access_token=CCCC&expires_at=1696000000&expires_in=604800&refresh_token=YYY,", the session (that I get from supabaseClient.auth.getSession() ) is not automatically set in my application and remains as null.
Additionally, I can confirm that the user has been created in my Authentication dashboard on Supabase (https://supabase.com/dashboard/project/XXX/auth/users ).
To Reproduce
Steps to reproduce the behavior, please provide code snippets or a repository:
Try implementing SSO with Okta (I haven't tried other providers) and notice the session remains null after being redirected to the application.
Expected behavior
The session should be automatically set in the application after redirecting from Okta.
Screenshots
System information

OS: macOS
Browser: chrome, safari
Version of supabase-js:
"next": "^13.4.1",
"react": "^18.2.0",
"@supabase/auth-helpers-nextjs": "0.8.1",
"@supabase/auth-helpers-react": "0.4.2",
"@supabase/supabase-js": "2.36.0",
Version of Node.js: v18.14.0

Additional context

I am facing the same issue with azure as saml provider

Having the same issue with the latest version, using inviteUserByEmail.

Had the same issue for setting the session for user who is sent a password reset email for supabase dashboard, and not from my app itself (i.e not using the PKCE flow)
My dirty solution for that issue was to

parse the access token and refresh token from the anchor tag. (you must be in a client component to get access to window.location.hash)

use

const { data, error } = await supabase.auth.setSession({
                access_token,
                refresh_token
            });

to set the session.

session is set, i then update the user password with

const { data, error } = await supabase.auth.updateUser({ password })

------------------- more code here ------------------
type SessionParameters = {
    access_token?: string;
    refresh_token?: string;
}

function getSubstring(s: string, char1: string, char2: string): string {
    return s.slice(
        s.indexOf(char1) + 1,
        s.lastIndexOf(char2),
    );
}

function parseHashParameters(hash: string): SessionParameters {
    const parameters = hash.split('&');
    const parsedParamters: SessionParameters = {};
    parameters.map((parameter) => {
        const [key, value] = parameter.split('=');
        parsedParamters[key] = value;
        return 0;
    });

    return parsedParamters;
}

function ResetPasswordForm(): JSX.Element {
    const supabase = createClientComponentClient<Database>();
    const [hash, setHash] = useState('');
    const [parameters, setParameters] = useState({});

    useEffect(() => {
        const fetchSession = async () => {
            const { access_token, refresh_token } = parseHashParameters(hash.substring(1));
            const { data, error } = await supabase.auth.setSession({
                access_token,
                refresh_token
            });
        }
        if (hash) {
            fetchSession();
        }

    }, [hash]);

    useEffect(() => {
        setHash(window.location.hash);
    }, []);
    ```

Hey team,
These sound like separate issues:

If you're using SSO, we've recently merged in SSO (PKCE) do give that a spin and let us know
For inviteUserByEmail we don't support this flow with PKCE so if you're using Auth Helpers you may need to parse the access token and set the session.

for user who is sent a password reset email for supabase dashboard
This looks like a slightly different flow. Do you mind sharing more details about the steps in the flow?

Thanks
Joel

@J0 can you ask supabase devs to add that to the documentation of inviteUserByEmail, cause it is not mentioned clearly anywhere

@k-daw Gotcha. Opened a PR. Thanks for flagging this!

@kangmingtay i don't think there is a bug, rather the docs need to mention the token parsing issue from the anchor tag
cause the code provided in the docs supports PKCE
check https://github.com/supabase/gotrue-js/issues/789#issuecomment-1774060703

Hi @kangmingtay , thanks for the update, signInWithSSO and Azure as saml provider is working now.

gonna close this issue since it doesn't seem like a bug?
@k-daw you shouldn't need to parse the anchor tag in the url on your own. The client library is supposed to handle this for you. If you are being redirected to your app with the #access_token=xxx&refresh_token=xxx still in the query fragments, you should check your browser network tab to see if the session is being stored in local storage correctly. If it's not, then we'll need to investigate why this is happening further.


Update model from server side

Hello,
I have drop-down control that is used for filtering collection of custom location items in my view model (this items represent pins on map). Initially, when my collection is not filtered map is rendered as it should be and everything works fine. However when I select some value from drop-down which returns filtered collection from server, even if item collection count changes in binding part of control, location items are not filtered on map. How can I update map/pins?
This is how I bind markers to my model.
	Html.GoogleMap() 			.Name("map") 			.ApiKey("AIzaSyBQ3IWXop8QdYoh33And-O37MEmSOHPjR0") 			.MapTypeControlVisible(false) 			.StreetViewControlVisible(true) 			.FitToMarkersBounds(true) 			.MapTypeId(MapType.Roadmap) 			.Zoom(3) 			.MinZoom(3) 			.MaxZoom(20) 			.OverviewMapControlVisible(false) 			.PanControlVisible(false) 			.Height(600) 			.Center(c => c.Latitude(23).Longitude(-82)) 			.EnableMarkersClustering(options => 			{ 				options.MaxZoom = 8; 				options.GridSize = 60; 				options.AverageCenter = true; 				options.ZoomOnClick = true; 				//options.HideSingleGroupMarker = false; 				options.CustomStyles(style => style.Add().ImageUrl("~/Images/logo.png").Height(70).Width(180).FontSize(1).FontColor(Color.White)); 			}) 			.BindTo<ContactInfo, Marker> 					(Model.Locations, mappings => mappings.For<ContactInfo> 							( 									binding => binding.ItemDataBound 									( 												(marker, contactInfo) => 												{ 													marker.Latitude = contactInfo.Latitude; 													marker.Longitude = contactInfo.Longitude; 													marker.Address = contactInfo.Address; 													//marker.Icon = new MarkerImage(Url.Content("~/Images/flag-icon.png", true), new Size(48, 48), new Point(0, 0), new Point(0, 12)); 													marker.Window = new InfoWindow(marker) 													{ 														Template = 														{ 															Content = () => ViewContext.Writer.Write(string.Format("{0}
{1}
{2}
{3}", contactInfo.Address, contactInfo.Country, contactInfo.Email, contactInfo.Phone)) 														} 													}; 												} 									) 							) 					) 					.ClientEvents(events => events.OnMapLoaded("onMapLoadHandler") 															.OnZoomChanged("onZoomChangedHandler"))
After selecting some value from drop-down list, item count in (Model.Locations
.BindTo<ContactInfo, Marker>(Model.Locations, mappings => mappings.For is changed as it should be, but it doesn't filter pins on the map accordingly.
Can you please help me?
Thanks,
Bojan

I have updated the code for .net6.
Please try the new version and reopen this issue if it still exists.


dependencies for aarch64-apple-darwin via homebrew incorrect arch by default

With a cfg like this
[workspace.metadata.dist.dependencies.homebrew]
zstd = { stage = ["build", "run"], targets = ["aarch64-apple-darwin"] }

With the default settings will actually generate an action that will end up downloading zstd compiled for x86 and not aarch64. I am wondering if the brew install script should follow the guidance from this SO answer?
# Cross install aarch libs for macos-12
brew fetch --force --bottle-tag=arm64_sonoma <bottle-name>
brew install $(brew --cache --bottle-tag=arm64_sonoma <bottle-name>)

If not be default, potentially driven by a new property on the SystemDependencyComplex?

We're in a somewhat complex situation with dependencies because there's two different things you may want to install them for: either as a commandline tool that you need to run, or as a library you need to link against. In the former case, installing the cross-arch version would actually break the build by providing an executable the host can't execute. (The same package could also contain both an executable and a library, further complicating things.)
While, as you note, it's technically possible to force cross-platform binary installation, this is a bit brittle and could break without notice in future versions of Homebrew. It could also lead to issues with executables as I mentioned. Our preferred solution in this case is to run the build natively - I recommend using the runner config to set your runner for aarch64 builds to macos-14.
It looks like this is partially, but not fully, documented. I'll make sure to fully document this.

What if there was a configuration option for these dependencies like this
[workspace.metadata.dist.dependencies.homebrew]
zstd = { stage = ["build", "run"], targets = ["aarch64-apple-darwin"], force_bottle_tag = "arm64_sonoma" }

That would result in an output like I listed in my initial comment? This would allow users to opt into arch specific library installs? Potentially with the --no-binaries option?


Update README

Change the license's name to the specification's.
https://spdx.org/licenses/Apache-2.0.html

Thanks!


Add pre-commit hook for McCabe max complexity check and fix errors

Description
Opening this up as a draft to work through the code that have been flagged as too complex given the default threshold of 10 below:
❯ pre-commit run flake8 --all-files
flake8...................................................................Failed
- hook id: flake8
- exit code: 1

cosmos/dbt/graph.py:134:5: C901 'DbtGraph.load_via_dbt_ls' is too complex (16)
cosmos/dbt/parser/project.py:136:5: C901 'DbtModel.__post_init__' is too complex (18)
cosmos/dbt/parser/project.py:346:5: C901 'LegacyDbtProject._handle_config_file' is too complex (15)
cosmos/dbt/selector.py:87:1: C901 'select_nodes_ids_by_intersection' is too complex (16)

I'm happy to do this since it will help be get more familiar with some inner workings of cosmos, but if someone from the team wants to take over they're welcome.
If its lowered to 6 as mentioned in the issue, there are more errors that could be fixed:
❯ pre-commit run flake8 --all-files
flake8...................................................................Failed
- hook id: flake8
- exit code: 1

cosmos/airflow/graph.py:196:1: C901 'build_airflow_graph' is too complex (9)
cosmos/config.py:66:5: C901 'ProjectConfig.__init__' is too complex (7)
cosmos/dbt/graph.py:134:5: C901 'DbtGraph.load_via_dbt_ls' is too complex (16)
cosmos/dbt/parser/project.py:63:5: C901 'DbtModelConfig._config_selector_ooo' is too complex (7)
cosmos/dbt/parser/project.py:98:1: C901 'extract_python_file_upstream_requirements' is too complex (7)
cosmos/dbt/parser/project.py:136:5: C901 'DbtModel.__post_init__' is too complex (18)
cosmos/dbt/parser/project.py:262:5: C901 'LegacyDbtProject.__post_init__' is too complex (10)
cosmos/dbt/parser/project.py:346:5: C901 'LegacyDbtProject._handle_config_file' is too complex (15)
cosmos/dbt/selector.py:52:5: C901 'SelectorConfig.load_from_statement' is too complex (7)
cosmos/dbt/selector.py:87:1: C901 'select_nodes_ids_by_intersection' is too complex (16)
cosmos/dbt/selector.py:170:1: C901 'select_nodes' is too complex (9)
cosmos/hooks/subprocess.py:34:5: C901 'FullOutputSubprocessHook.run_command' is too complex (8)
cosmos/operators/base.py:137:5: C901 'DbtBaseOperator.get_env' is too complex (7)
cosmos/operators/base.py:186:5: C901 'DbtBaseOperator.add_global_flags' is too complex (7)
cosmos/operators/local.py:136:5: C901 'DbtLocalBaseOperator.store_compiled_sql' is too complex (7)
cosmos/profiles/base.py:160:5: C901 'BaseProfileMapping.get_dbt_value' is too complex (8)
dev/dags/dbt_docs.py:45:1: C901 'which_upload' is too complex (7)

Related Issue(s)
Closes: #525
Breaking Change?

Checklist

[ ] I have made corresponding changes to the documentation (if required)
[ ] I have added tests that prove my fix is effective or that my feature works

Apologies for the follow-up commits, I finally was able to get the integration tests to run completely in my local dev environment with hatch run tests.py3.10-2.6:test-integration and fixed some errors.

This is outstanding work, @jbandoro. We're very grateful for this!


Update FAQ

Add a question about removing access to dataset.
Does it look good to you @chrisalexandrepena?

Thank you @bowni for you contribution! Much appreciated!


Redirector With Explicit git_url From GitHub Loses Param

I have a repo that hard codes the git_repo and revision params in the button:
https://github.com/jamesward/hello-java/tree/jdk15
But the redirector gets confused because it sees the referer as https://github.com and so it asks the user to still specify the repo.

I am OOO but can review a patch if you create. Should be as easy as fixing the if stmt.

Thanks! Here is the PR: https://github.com/GoogleCloudPlatform/cloud-run-button/pull/199


Minecraft Downloadable world - Nether won't extract

I'm using the "Downloadable world" feature, hosting my world in a zip file for the container to grab on start.  The problem is the zip contains the directories:

world
world_nether

Only "world" extracts, so I don't get to preserve the nether.

That's strange it did that. To debug things can you try this command except setting the WORLD=... to your actual download URL:
docker run -it --rm -e WORLD=... \
  --entrypoint bash itzg/minecraft-server \
  -c 'curl -sSL -o /data/world.zip $WORLD; unzip -l /data/world.zip'


Report cannot be approved if an attendee's position is changed during the approval process

On 13 December 2018, a report could not be approved because the assigned position of a principal attendee was changed during the approval process.

In my opinion, we should save the organization of the primary attendee at the time of submission (or ideally at the time of engagement, but not sure how to do that ;) ) and use that to determine which approval process to use.
We should also use this to determine to which org the report belongs


Minor help text updates

Description
Minor grammatical updates to help content.
Type of change
Documentation change only
How Has This Been Tested?
By generating the oc-mirror binary and running help commands.
Checklist:

[ ] My code follows the style guidelines of this project
[ ] I have performed a self-review of my own code
[ ] I have commented my code, particularly in hard-to-understand areas
[ ] I have made corresponding changes to the documentation
[ ] My changes generate no new warnings
[ ] I have added tests that prove my fix is effective or that my feature works
[ ] New and existing unit tests pass locally with my changes
[ ] Any dependent changes have been merged and published in downstream modules

CC @afflom here are the help updates I mentioned. Let me know if any of the changes are incorrect that I should revert, or any updates you need me to make. Thanks!


Selecting Log Level

I am missing feature to select a log level for ThinDownloadManager or just ability to remove logs.

Agreed - log is pretty noisy

I create this PR for this Issue, link: https://github.com/smanikandan14/ThinDownloadManager/pull/89

This is available in version 1.3.0


Showing logout notification while performing actual IDP logout.

Purpose

Showing logout notification while performing actual IDP logout.

Codecov Report

Merging #161 into master will increase coverage by 0.13%.
The diff coverage is 57.14%.

@@            Coverage Diff             @@
##           master     #161      +/-   ##
==========================================
+ Coverage   13.83%   13.96%   +0.13%
==========================================
  Files          59       59
  Lines        2277     2284       +7
  Branches      426      426
==========================================
+ Hits          315      319       +4
- Misses       1774     1777       +3
  Partials      188      188

Impacted Files
Coverage Δ

components/portal/src/utils/api/authUtils.js
38.59% <57.14%> (+2.59%)
:arrow_up:

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update 7306f6c...cae4fc4. Read the comment docs.


Add views master and detail

Hello @Muchiachio
Hi, I'm excited with this template, i very like , I'm new worked with asp net, already  have various controllers functioned.
Now i need create one view master /details with options create, edit ,and delete.
Can you help me with an example of how I can do this?
vey thanks for collaboration , what your haved with this open source.
Thanks.

Is there anything preventing you from doing that or it's just your first project?
If you are still learning asp net, I would recommend not using this template and doing things from scratch using all the available tutorials and learning material online. This template is targeted towards more experienced developers who have already wrote a few projects and want to have a base for faster development.

Sorry, I had not been able to answer before.
No, it's not my first project, I just wanted saber and you had some example, the truth, I think you have very well organized the code of the project, and I want to continue, with the order that you have.
Thank you very much, if I am using the project, as a basis for a personal project, thank you very much for your contributions.


Possible bug in EEPROM format example

I have only just come across this library so I may have misunderstood.
However in one of the examples;  I2C_EEPROM/examples/I2C_eeprom_format/I2C_eeprom_format.ino
it looks like there may be a bug. I assume this is suppose to write a fixed value to every address on the EEPROM. The following loop looks suspicious,
for (uint32_t i = 0; i < size; i += 128)
{
if (i % 1024 == 0) Serial.print('.');
ee.setBlock(0, 0xFF, 128);
}
Assuming I am understanding it correctly this writes the value 0xFF to 128 places always starting at address 0.
I would assume the line should be:
ee.setBlock(i, 0xFF, 128);
Apologies if I have misunderstood something, I have not had a chance to look at this library in detail yet.

You caught a real bug!

Fixed the example in master,
I will not create a new release for this as it is not in the core.

Cool, I have made that same sort of bug myself many times in the past :-)


Release 0.8.2+1.1.2#f28ab1c

Updated MoltenVK to f28ab1c

Any idea on CI build errors?

Any idea on CI build errors?

Those were some errors from the old pre-builts. Should be fixed now. But we still have the issue with the github api rate limit.

Looks like the github API had a quite day today and CI succeeded.


feat!: Drop support for CommonJS

Pull Request Test Coverage Report for Build<PHONE_NUMBER>
Details

0 of 0   changed or added relevant lines in 0 files are covered.
No unchanged relevant lines lost coverage.
Overall coverage remained the same at 99.677%

Totals

Change from base Build<PHONE_NUMBER>:
0.0%

Covered Lines:
245

Relevant Lines:
245

💛  - Coveralls


Add request data in response interceptor's error callback

Hello! I've created a response interceptor with the main purpose of catch globally the errors and notify them to bugsnag.
The problem I'm facing is that I've not access to the request which generated the response error, so I lack precious data to analyze the errors on bugsnag.
Is there another way to achieve this or do you think that adding that data could be useful and included in a future release?
Thank you.

+1 I can't get error status at all

The error.config property should contain the request config.
Hope this helps!

Yeah, there it is (if anyone still got the problem check your version).
But i am wondering, that something is missing (or documentation, or implementation) or it is unclear.
For example, when i follow documentation, and want to log error:
axios.interceptors.response.use(function (response) {     return response; }, function (error) {     console.log(error);     return Promise.reject(error); });
It returns only Error message "Error: Request failed with status code 405". So the last thing it would be trying to call error properties error.response.
So it should be more elaborated in docs, or for me more clear and straightforward solution is to just provide this heck error object, because i belive, any web dev would be handling his error with this message "Error: Request failed with status code 405".

Thanks @nickuraltsev for the insights, I also agree with @damianprzygodzki that this feature should be better documented, great work with axios anyway!


example failed for web [bug]

Describe the bug
example failed for web.
To Reproduce
Copy livekit_client-1.3.5/example to a new place.
cd into the new example
modify pubspec.yaml: livekit_client: ^1.3.5
run: flutter run -d chrome
then got: Failed to compile application.
Expected behavior
the web login page
Platform information

Flutter version: 1.3.5

Flutter assets will be downloaded from https://mirrors.tuna.tsinghua.edu.cn/flutter. Make sure you trust this source!
[✓] Flutter (Channel master, 3.12.0-3.0.pre.4, on Ubuntu 22.04.2 LTS 5.19.0-45-generic, locale zh_CN.UTF-8)
    • Flutter version 3.12.0-3.0.pre.4 on channel master at /home/user/soft/Flutter/flutter-sdk
    • Upstream repository https://mirrors.tuna.tsinghua.edu.cn/git/flutter-sdk.git
    • FLUTTER_GIT_URL = https://mirrors.tuna.tsinghua.edu.cn/git/flutter-sdk.git
    • Framework revision 3f7531db33 (2 周前), 2023-06-07 19:54:05 -0400
    • Engine revision a5f7d5d75f
    • Dart version 3.1.0 (build 3.1.0-171.0.dev)
    • DevTools version 2.24.0
    • Pub download mirror https://mirrors.tuna.tsinghua.edu.cn/dart-pub
    • Flutter download mirror https://mirrors.tuna.tsinghua.edu.cn/flutter

[✓] Android toolchain - develop for Android devices (Android SDK version 33.0.2)
    • Android SDK at /home/user/Android/Sdk
    • Platform android-33-ext5, build-tools 33.0.2
    • ANDROID_SDK_ROOT = /home/user/Android/Sdk
    • Java binary at: /home/user/soft/android-studio/jbr/bin/java
    • Java version OpenJDK Runtime Environment (build 11.0.15+0-b2043.56-8887301)
    • All Android licenses accepted.

[✓] Chrome - develop for the web
    • CHROME_EXECUTABLE = /snap/bin/chromium

[✓] Linux toolchain - develop for Linux desktop
    • Ubuntu clang version 14.0.0-1ubuntu1
    • cmake version 3.22.1
    • ninja version 1.10.1
    • pkg-config version 0.29.2

[✓] Android Studio (version 2022.1)
    • Android Studio at /home/user/soft/android-studio
    • Flutter plugin can be installed from:
      🔨 https://plugins.jetbrains.com/plugin/9212-flutter
    • Dart plugin can be installed from:
      🔨 https://plugins.jetbrains.com/plugin/6351-dart
    • Java version OpenJDK Runtime Environment (build 11.0.15+0-b2043.56-8887301)

[✓] VS Code (version 1.79.0)
    • VS Code at /usr/share/code
    • Flutter extension version 3.36.0

[✓] Connected device (2 available)
    • Linux (desktop) • linux  • linux-x64      • Ubuntu 22.04.2 LTS 5.19.0-45-generic
    • Chrome (web)    • chrome • web-javascript • Chromium 114.0.5735.106 snap

[✓] Network resources
    • All expected network resources are available.

• No issues found!

Plugin version:
Flutter target OS: Web
Flutter target OS version:
Flutter console log:

Launching lib/main.dart on Chrome in debug mode...
../../../../.pub-cache/hosted/mirrors.tuna.tsinghua.edu.cn%2547dart-pub%2547/js_bindings-0.1.2+1/lib/bindings/compute_p
ressure.dart:77:48: Error: External extension members with the keyword 'static' on JS interop and @Native types are
disallowed.
Try putting the member in the on-type instead.
  external static Iterable<PressureSource> get supportedSources;
                                               ^
../../../../.pub-cache/hosted/mirrors.tuna.tsinghua.edu.cn%2547dart-pub%2547/js_bindings-0.1.2+1/lib/bindings/performan
ce_timeline.dart:66:40: Error: External extension members with the keyword 'static' on JS interop and @Native types are
disallowed.
Try putting the member in the on-type instead.
  external static Iterable<String> get supportedEntryTypes;
                                       ^
../../../../.pub-cache/hosted/mirrors.tuna.tsinghua.edu.cn%2547dart-pub%2547/js_bindings-0.1.2+1/lib/bindings/notificat
ions.dart:50:46: Error: External extension members with the keyword 'static' on JS interop and @Native types are
disallowed.
Try putting the member in the on-type instead.
  external static NotificationPermission get permission;
                                             ^
../../../../.pub-cache/hosted/mirrors.tuna.tsinghua.edu.cn%2547dart-pub%2547/js_bindings-0.1.2+1/lib/bindings/notificat
ions.dart:52:27: Error: External extension members with the keyword 'static' on JS interop and @Native types are
disallowed.
Try putting the member in the on-type instead.
  external static int get maxActions;
                          ^
../../../../.pub-cache/hosted/mirrors.tuna.tsinghua.edu.cn%2547dart-pub%2547/js_bindings-0.1.2+1/lib/bindings/push_api.
dart:47:40: Error: External extension members with the keyword 'static' on JS interop and @Native types are disallowed.
Try putting the member in the on-type instead.
  external static Iterable<String> get supportedContentEncodings;
                                       ^
../../../../.pub-cache/hosted/mirrors.tuna.tsinghua.edu.cn%2547dart-pub%2547/js_bindings-0.1.2+1/lib/bindings/media_sou
rce_2.dart:101:28: Error: External extension members with the keyword 'static' on JS interop and @Native types are
disallowed.
Try putting the member in the on-type instead.
  external static bool get canConstructInDedicatedWorker;
                           ^
Waiting for connection from debug service on Chrome...             41.0s
Failed to compile application.

It should be caused by your pub dev mirror,
You can try to change it to pub.dev or pub.flutter-io.cn and delete ~/.pub-cache and run flutter pub get again,

Also Failed
flutter doctor
Doctor summary (to see all details, run flutter doctor -v):
[!] Flutter (Channel dev, 3.13.0-3.0.pre.55, on Ubuntu 22.04.2 LTS 5.19.0-46-generic, locale zh_CN.UTF-8)
    ! Upstream repository unknown source is not a standard remote.
      Set environment variable "FLUTTER_GIT_URL" to unknown source to dismiss this error.
[✓] Android toolchain - develop for Android devices (Android SDK version 33.0.2)
[✓] Chrome - develop for the web
[✓] Linux toolchain - develop for Linux desktop
[✓] Android Studio (version 2022.1)
[✓] VS Code (version 1.79.2)
[✓] Connected device (3 available)
[!] Network resources
    ✗ A network error occurred while checking "https://maven.google.com/": Connection timed out

! Doctor found issues in 2 categories.

example_1_4_0$ flutter run -d chrome
Launching lib/main.dart on Chrome in debug mode...
../../../../.pub-cache/hosted/pub.dev/js_bindings-0.1.2+2/lib/bindings/compute_pressure.dart:77:48: Error: External
extension members with the keyword 'static' on JS interop and @Native types are disallowed.
Try putting the member in the on-type instead.
  external static Iterable<PressureSource> get supportedSources;
                                               ^
../../../../.pub-cache/hosted/pub.dev/js_bindings-0.1.2+2/lib/bindings/performance_timeline.dart:66:40: Error:
External extension members with the keyword 'static' on JS interop and @Native types are disallowed.
Try putting the member in the on-type instead.
  external static Iterable<String> get supportedEntryTypes;
                                       ^
../../../../.pub-cache/hosted/pub.dev/js_bindings-0.1.2+2/lib/bindings/notifications.dart:50:46: Error: External
extension members with the keyword 'static' on JS interop and @Native types are disallowed.
Try putting the member in the on-type instead.
  external static NotificationPermission get permission;
                                             ^
../../../../.pub-cache/hosted/pub.dev/js_bindings-0.1.2+2/lib/bindings/notifications.dart:52:27: Error: External
extension members with the keyword 'static' on JS interop and @Native types are disallowed.
Try putting the member in the on-type instead.
  external static int get maxActions;
                          ^
../../../../.pub-cache/hosted/pub.dev/js_bindings-0.1.2+2/lib/bindings/push_api.dart:47:40: Error: External
extension members with the keyword 'static' on JS interop and @Native types are disallowed.
Try putting the member in the on-type instead.
  external static Iterable<String> get supportedContentEncodings;
                                       ^
../../../../.pub-cache/hosted/pub.dev/js_bindings-0.1.2+2/lib/bindings/media_source_2.dart:101:28: Error: External
extension members with the keyword 'static' on JS interop and @Native types are disallowed.
Try putting the member in the on-type instead.
  external static bool get canConstructInDedicatedWorker;
                           ^
Waiting for connection from debug service on Chrome...             42.0s
Failed to compile application.

Also Failed
flutter doctor
Doctor summary (to see all details, run flutter doctor -v):
[!] Flutter (Channel dev, 3.13.0-3.0.pre.55, on Ubuntu 22.04.2 LTS 5.19.0-46-generic, locale zh_CN.UTF-8)
    ! Upstream repository unknown source is not a standard remote.
      Set environment variable "FLUTTER_GIT_URL" to unknown source to dismiss this error.
[✓] Android toolchain - develop for Android devices (Android SDK version 33.0.2)
[✓] Chrome - develop for the web
[✓] Linux toolchain - develop for Linux desktop
[✓] Android Studio (version 2022.1)
[✓] VS Code (version 1.79.2)
[✓] Connected device (3 available)
[!] Network resources
    ✗ A network error occurred while checking "https://maven.google.com/": Connection timed out

! Doctor found issues in 2 categories.

example_1_4_0$ flutter run -d chrome
Launching lib/main.dart on Chrome in debug mode...
../../../../.pub-cache/hosted/pub.dev/js_bindings-0.1.2+2/lib/bindings/compute_pressure.dart:77:48: Error: External
extension members with the keyword 'static' on JS interop and @Native types are disallowed.
Try putting the member in the on-type instead.
  external static Iterable<PressureSource> get supportedSources;
                                               ^
../../../../.pub-cache/hosted/pub.dev/js_bindings-0.1.2+2/lib/bindings/performance_timeline.dart:66:40: Error:
External extension members with the keyword 'static' on JS interop and @Native types are disallowed.
Try putting the member in the on-type instead.
  external static Iterable<String> get supportedEntryTypes;
                                       ^
../../../../.pub-cache/hosted/pub.dev/js_bindings-0.1.2+2/lib/bindings/notifications.dart:50:46: Error: External
extension members with the keyword 'static' on JS interop and @Native types are disallowed.
Try putting the member in the on-type instead.
  external static NotificationPermission get permission;
                                             ^
../../../../.pub-cache/hosted/pub.dev/js_bindings-0.1.2+2/lib/bindings/notifications.dart:52:27: Error: External
extension members with the keyword 'static' on JS interop and @Native types are disallowed.
Try putting the member in the on-type instead.
  external static int get maxActions;
                          ^
../../../../.pub-cache/hosted/pub.dev/js_bindings-0.1.2+2/lib/bindings/push_api.dart:47:40: Error: External
extension members with the keyword 'static' on JS interop and @Native types are disallowed.
Try putting the member in the on-type instead.
  external static Iterable<String> get supportedContentEncodings;
                                       ^
../../../../.pub-cache/hosted/pub.dev/js_bindings-0.1.2+2/lib/bindings/media_source_2.dart:101:28: Error: External
extension members with the keyword 'static' on JS interop and @Native types are disallowed.
Try putting the member in the on-type instead.
  external static bool get canConstructInDedicatedWorker;
                           ^
Waiting for connection from debug service on Chrome...             42.0s
Failed to compile application.

Can you switch flutter to stable channel (3.10.6)?
Using the stable channel in our CI can be compiled correctly https://github.com/livekit/client-sdk-flutter/actions/runs/5549686013/jobs/10134041272

Thanks @cloudwebrtc ! It works!

Thanks @cloudwebrtc ! It works!


[WIP] Efficient IO

A high-level design question I'm thinking about is that the Slice type looks, from its interface, to be more general than it really is. The key way it is used seems to be using the ptr and mptr functions to get the arguments for calls to Posix.read and Posix.write. Those uses mean that the Slice type instances have an obligation to ensure that their memory representation is a contiguous array of bytes starting at the value returned by ptr, and that the other operations like get must be implemented in a way that is compatible with the underlying memory being assigned via that pointer.

While you are right that the current main use is for IO, it can also be used to handle sub-sequences without copying objects (for instance some_array.as_slice().subslice(i, j) should be substituable to some_array.slice(i, j) saving an allocation + copy). I am not sure it makes sense to generalize the concept of "sub-sequence without copy" to containers with non-contiguous memory representations.

I wonder if it might be just as feasible to introduce a type, say Bytes, that corresponds to Slice. This could be used for the args of the Posix read and write functions, and might be less likely to be mistakenly misused later. Modules like Array, String, and Vector would need to provide unsafe functions returning Bytes values referring to their internal representations, but those modules need to do similar things for Slice as well. Do you see what I mean? The Bytes approach seems like it would be a more limited and explicit introduction of unsafety.

As far as IO is concerned, this would indeed be sufficient. One caveat to keep in mind is that any Array<T> would expose a bytes(): Bytes, whereas currently only Array<UInt8> exposes slice(): Slice<UInt8> (which prevents calling Posix.read on an array of non-value classes for instance).

So I maintain that conceptually the notion of a subsequence of a sequence that is defined by a range of indices/keys is a distinct concept from the notion of a byte sequence view of the underlying representation of some higher-level sequence.

Makes sense. I would design this as a bunch of types that implement each original data structure's interface. e.g. a 'subset map' type that implements map and works in terms of a key range making use of the original underlying persistent datastructure. The original map can hand out a 'subset map' that references the node structure.
And I think this is what slice is to array?

So I maintain that conceptually the notion of a subsequence of a sequence that is defined by a range of indices/keys is a distinct concept from the notion of a byte sequence view of the underlying representation of some higher-level sequence. [...] So perhaps the most expressive path is to have Slice that is like what is in this PR, but without ptr and so would be safe, with a specialization for those cases that the slice is a subsequence of the byte array memory representation, with additional ptr operation, and only this specialized subtype would need to be unsafe. WDYT?

Yup, that makes perfect sense. Will update the PR.

I guess that to make CI happy you need to do some bootstrap dance, or are there other known issues?


Multiple instances in one page.

Normally you can't use 2 zuck.js instance in one page, because zuck.js use same id to get model div.
This can be fixed by following.

give "zuck_model_perfix" in options
use this prefix to make unique ids
use only html classes to style elements in css
😜👈👌😉

Hallow please how do i add the perfix in options?

Normally you can't use 2 zuck.js instance in one page, because zuck.js use same id to get model div. This can be fixed by following.

give "zuck_model_perfix" in options
use this prefix to make unique ids
use only html classes to style elements in css
😜👈👌😉

Hallow please how do i add the perfix in options?

I have modified the original library and it works. If you, anyone need, I can upload it.👍.

@ChathuraGH would you mind to create a pull request?

Ok @ramonszo . I will create a pull request 👍.

@ramonszo I created a pull request 😊. I am new to pull requests. So if there is any inconvenience, help me.💪.

What is going on @ramonszo .. 👀👀 I created the pull request. If you can marge it or why it is not been? 🙏🙏.

Hallow please how do i add the perfix in options?

Did you get it to work?

@ramonszo, what is the problem here friend?

Hello  👈👈?

Hey @ChathuraGH I made a comment on your PR, thanks for the contribution


No API documentation if installing Apigility in an existing ZF app

Creating a new  apigility  project from scratch, I do see 3 options in the top menu:  settings | APIs | API Docs
If I use the documentation to include a new module in my existing app (https://www.apigility.org/documentation/recipes/apigility-in-an-existing-zf2-application) , then I don't see the "documentation" link
nor does it work if I follow the http://localhost/apigility/documentation

I know this is 3 months old but I have the exact same problem. I'm using v1.0.4.

This repository has been closed and moved to laminas-api-tools/api-tools-admin; a new issue has been opened at https://github.com/laminas-api-tools/api-tools-admin/issues/39.


More doc/man1 fixes

A number of replacables were still bold.
A few literals were not bold(!)
Some options were given without the initial dash
Some ellipses (especially for the -rand argument) were confusing
There was a mix of L<cmd(1)> and L<openssl-cmd(1)> references
Some references to other sections weren't in link form
All file names or parts of file names are now all wrapped with F<>
More literal input / output is now wrapped with C<>
A few engine names fixed
Corrected tsget.pod (including its file name, which was misrepresenting the command)

@richsalz, feel free to give me hell :wink:

With the find-doc-nits fixes that were recently merged, this should run fine on Travis

please also see https://github.com/openssl/openssl/pull/10065/files#r330322810

Please also see my comment (wrong link before) https://github.com/openssl/openssl/pull/10065#discussion_r330322810

Okie, all comments answered, I hope.  As for ..., another PR if at all.  The space before isn't absolutely necessary, but looks nicer in my opinion.

I'll assume good faith and due diligence :)  Not planning to re-read this unless you ask me.
This is nice, tedious, work.  Good job!

I won't ask anyone to read this PR again, but I do hope that a few of us will take the time to read through the man-pages and fix what needs fixing.  It can be done one page at a time, or several, as it pleases each of us.

(I've worked as proofreader...  and quite frankly, I don't like me in that mode, I can be very unkind...  so I've avoided doing that with the man-pages)

I want to start working on missing content and refactoring common flags to a common manpage, and I'd rather start from this base than have either Richard or I go through a gnarly rebase.  Can this get approved and merged soon?

I should rebase it first...

Done

Unfortunately the find-doc-nits fails after the rebase.

Merged.
b1c0cc24564e7c8d3cd8a437585c230259584bb7 Command docs: fix ellipses, the easy cases
fed8bd90e4cf02066eeed9426e29d709e3630cc9 Command docs: remove ellipses for '-rand'
2f0ea9365806895c313b6d8e2ce33428260e856c Command docs: replacables are in italics, options always start with a dash
35a810bb1d6af5a71170c5c4b506f7665d573a3e Command docs: fix up command references
f5c14c63226b12e10a9404604657f2860dcfcdee Command docs: fix links to other sections (sometimes in other manuals)
1948394d0e8a8dbffa62c3125fc0aaf9ef187b70 Command docs: wrap literal file names with F<>
a43384fde39261adc86f0c3f2d67fb4c0efb4e57 Command docs: wrap literal input/output with C<>
bc9564c2f9fdce250b804210bc866b2bf9820f0d Command docs: fix some engine references
b2bdfb63eb16431aabe93ef59364d41125db255e Command docs: diverse small fixes
0503f08d6f6b94c5a985b47671acb124915c82f9 Command docs: rename openssl-tsget.pod to tsget.pod, and fix it
8bc93d2f220de9750c6934d8d2f2346d14616180 Command docs: more reference fixes
6f02932edba62186a6866e8c9f0f0714674f6bab util/find-doc-nits: ignore tsget.pod name

@richsalz, I believe you have some rebasing to do...

yes. :)  Or is that :(
working on it, will push updated PR's soon.


Navbar menu not shown

Describe the bug
None of the elements defined in menu.yaml are rendered in the navbar-content div:

To Reproduce
Steps to reproduce the behavior:

Create new repo from https://github.com/wowchemy/starter-hugo-academic using "Use this Template" button.
Clone repo locally.
Serve with Hugo:hugo serve

Expected behavior
All menu elements should be rendered:

Technical details:

Wowchemy Version: v0.0.0-20210606130713-db4dcf6541e5
Hugo Version: hugo v0.84.0+extended linux/amd64 BuildDate=unknown
Browser/OS: Chrome on Arch Linux
Wowchemy Template: Academic

Duplicate. See https://github.com/wowchemy/wowchemy-hugo-modules/discussions/2352#discussioncomment-894754

Sorry for the duplicate, couldn't find any issue; didn't think about checking the discussions as well.


Use safetensors by default for PyTorchModelHubMixin

Switches PyTorchModelHubMixin to use safetensors.
To do discussed:

[x] Should PyTorchModelHubMixin stay backward compatible and keep reading the pickle format via _from_pretrained? Not being sure if the model we're loading is safe is certainly a concern. Do you think the old way should continue working but issue a warning?

Fixes #1989

What you can do is create a new PYTORCH_SAFE_WEIGHTS_NAME constant as done in transformers

or drop the pytorch entirely as those weights are not pytorch-specific

check if the local folder or remote repository contains a .safetensors file => if it's the case, load it
check if the local folder or remote repository contains a pytorch_model.bin file => if it's the case, load it
otherwise => raise exception

@Wauplin  Good call, I've implemented the fallback for now. We can still look into whether we should issue a warning later down the road.

thanks for working on this
drop the PYTORCH entirely as those weights are not pytorch-specific

@julien-c My pleasure. I've reused the constants for safetensors that were already present, no PYTORCH in the name anymore.

The docs for this PR live here. All of your documentation changes will be reflected on that endpoint. The docs are available until 30 days after the last update.

Failing tests are unrelated so I'm merging this PR. Very nice contribution here :fire:

Thanks a lot for your contribution! 🙌
FYI there was a comment by Meta authors as PyTorch was used previously: https://github.com/facebookresearch/hiera/pull/26#issuecomment-1971323034. Perhaps we can add an explicit flag to allow users to still do this, as in the Transformers library: https://github.com/huggingface/transformers/blob/15f8296a9b493eaa0770557fe2e931677fb62e2f/src/transformers/modeling_utils.py#L2182. It can then default to True.

@NielsRogge I don't think it's worth adding back support for saving to pytorch_model.bin. Saving to safetensors should be the default anyway in the future. For the record, the newest version always save as safetensors but can load from both .bin and .safetensors files. The only problem is if the model owner uploaded with the newest version of huggingface_hub -e.g. as safetensors- but the users still have an outdated version of huggingface_hub -e.g. not loading from safetensors-. I think it's fine given only newly uploaded models are impacted.

Ok @Wauplin, sounds good to me!


Incorrect bytecode from cache when no change to abi but change to bytecode

When only the bytecode contract gets updated and not the abi signature, the bytecode field in the resulted generated file is incorrect due to caching. This makes the bytecode field in the generated file outdated, and also breaks using the deploy function from the generated contracts.

Not an issue, user error due to having old abis in dir


New R library rpivotTable: R wrapper for pivottable (with the help of htmlwidgets)

Hi
If anybody is interested in using the pivottable library with R a starting point is the new library rpivotTable here.
Nicolas Krutchen acknowledged directly in the DESCRIPTION file (as per CRAN norms). Please let me know if OK.
Thanks for this great library!

This is really cool, I'll definitely play with it later today :)
Well done!


[Ubuntu] Adding Bicep CLI

Description
PR with bicep cli installation for Ubuntu images. Includes changes from #3600 for Windows.
Related issue:
#3461
Check list

[x] Related issue / work item is attached
[x] Tests are written (if applicable)
[x] Documentation is updated (if applicable)
[x] Changes are tested and related VM images are successfully generated

@MarcusFelling please remove the windows changes

@MarcusFelling Marcus Felling FTE please remove the windows changes

@miketimofeev Cool if I just wait for that PR to be completed?

@MarcusFelling I guess there will be conflicts then. It's better to create different branch for ubuntu

@MarcusFelling Marcus Felling FTE I guess there will be conflicts then. It's better to create a different branch for ubuntu

@miketimofeev There should be conflicts, but I rebased and dropped Windows commits. Take a look and let me know if you need anything else.

@MarcusFelling great, thanks! I'll push the builds

/azp run ubuntu1804, ubuntu2004


[FEATURE] Build a dynamic project page with GitHub API

Detailed description
Our current project page is a temporary one :

Goal ✨

[ ] Update the src/pages/project.js and add a getServerStaticProps data fetching strategy
[ ] Add this query to retrieve the list of all our repository: https://api.github.com/orgs/WebXDAO/repos
[ ] Display the list of repository as cards (See details above)

Repository Cards Design 🎨
We aim to display the repos like this example:

Context
Don't forget to use a bg-transparency in the parent div to get the background gradient, and use text-white/80 for the text-color!
Possible implementation
This is the code snippet for the card exemple mentionned above :

src/components/Projects/RepoCard.js :

        facebook/
        react

      A declarative, efficient, and flexible JS library for building user...

Additional information
No response
Code of Conduct

[X] I agree to follow this project's Code of Conduct

heyy 👋🏽
happy hacking

Hello @abhikrishnaram ! Sure, i assigned you ☺

@Anuran12 Hello! Yep unfortunately it's already taken! But don't worry, we will open many more issue for this repos. :)
Good to see collaboration ✨


[python/r/c++] Bulk-sync main to release-1.15

Brings main to release-1.15 en masse, excepting (as usual) apis/r/NEWS.md and apis/r/DESCRIPTION.

This won't work -- since we reverted C++ 20 changes. I'll need to run individual backport PRs, or (messily) re-apply #3389.


Dataflow inconsistency related to reassignment and subcalls

For the following source code:
oid reassignThenFree(char * ptr)
{
    ptr = malloc(0x80);
    free(ptr);
    return;
}

void reassign(char * ptr)
{
    ptr = malloc(0x80);
    return;
}

int case0()
{
    char * data = malloc(0x100);
    free(data);
    free(data);

    return 0;
}

int case1()
{
    char * data = malloc(0x100);
    free(data);
    data = malloc(0x80);
    free(data);

    return 0;
}

int case2()
{
    char * data = malloc(0x100);
    free(data);
    reassignThenFree(data);

    return 0;
}

int case3()
{
    char * data = malloc(0x100);
    free(data);
    reassign(data);
    free(data);

    return 0;
}

The following queries and results are:
joern> importCode("./test")
...
joern> run.ossdataflow
...
joern> def sink = cpg.call("free").argument(1)
defined function sink

joern> def source = cpg.call("free").argument(1)
defined function source

joern> sink.reachableByFlows(source).filter(path => path.elements.size > 1).p
res166: List[String] = List(
  """________________________________________________________________________________________________________________
| tracked        | lineNumber| method| file                                                                     |
|===============================================================================================================|
| free(data)     | 45        | case3 | /Users/jryerby/Documents/Query dev/RES-489/simple/called_func_behavior.c |
| reassign(data) | 46        | case3 | /Users/jryerby/Documents/Query dev/RES-489/simple/called_func_behavior.c |
| free(data)     | 47        | case3 | /Users/jryerby/Documents/Query dev/RES-489/simple/called_func_behavior.c |
""",
  """____________________________________________________________________________________________________________
| tracked    | lineNumber| method| file                                                                     |
|===========================================================================================================|
| free(data) | 17        | case0 | /Users/jryerby/Documents/Query dev/RES-489/simple/called_func_behavior.c |
| free(data) | 18        | case0 | /Users/jryerby/Documents/Query dev/RES-489/simple/called_func_behavior.c |
""",
  """_________________________________________________________________________________________________________________________________________
| tracked                      | lineNumber| method           | file                                                                     |
|========================================================================================================================================|
| free(data)                   | 36        | case2            | /Users/jryerby/Documents/Query dev/RES-489/simple/called_func_behavior.c |
| reassignThenFree(data)       | 37        | case2            | /Users/jryerby/Documents/Query dev/RES-489/simple/called_func_behavior.c |
| reassignThenFree(char * ptr) | 1         | reassignThenFree | /Users/jryerby/Documents/Query dev/RES-489/simple/called_func_behavior.c |
| ptr = malloc(0x80)           | 3         | reassignThenFree | /Users/jryerby/Documents/Query dev/RES-489/simple/called_func_behavior.c |
| free(ptr)                    | 4         | reassignThenFree | /Users/jryerby/Documents/Query dev/RES-489/simple/called_func_behavior.c |
"""
)

So case 0 returns a result, while case 1 does not, presumably due to the reassignment. However in case 2, reassignment doesn't "break" the dataflow in the called function and despite the fact that case 2 prove that the dataflow engine is tracking the flow through subcalls, the dataflow originating in case 3 neither shows the reassignment in the subcall nor "breaks" the dataflow as suggested by case 1. I would expect that either the entire dataflow should be returned including reassignment or that the reassignment "breaks" the dataflow in all cases. Is this a use/option that needs to be enabled issue on my end or a true inconsistency?

Nice example. The flow for case 2 is incorrect.
A reduced reproducer is the following:
void sink(char* p);
void taint1(char* p);
void taint2(char* p);

void outer(char* ptr){
  taint1(ptr);
  inner(ptr);
  return;
}

void inner(char * ptr)
{
    taint2(ptr);
    ptr = malloc(0x80);
    sink(ptr);
    return;
}

You can observe that (correctly!) there exist no flows from taint2 (neither cpg.call.name("taint2").argument not cpg.method.fullName("taint2").parameter.asOutput) to sink (neither cpg.call.sink.argument not cpg.method.fullName("sink").parameter).
Then we observe that (correctly!) there exists no flow from cpg.method.fullName("taint1").parameter.asOutput to sink (in either representation).
However, we get an incorrect flow from cpg.call("taint1").argument to sink (in either representation):
_____________________________________________________________________________________________________________
| tracked            | lineNumber| method| file                                                              |
|============================================================================================================|
| taint1(ptr)        | 8         | outer | /tmp/semanticcpgtest7155610028977944934/Test3553749843102992678.c |
| inner(ptr)         | 9         | outer | /tmp/semanticcpgtest7155610028977944934/Test3553749843102992678.c |
| inner(char * ptr)  | 13        | inner | /tmp/semanticcpgtest7155610028977944934/Test3553749843102992678.c |
| ptr = malloc(0x80) | 16        | inner | /tmp/semanticcpgtest7155610028977944934/Test3553749843102992678.c |
| sink(ptr)          | 17        | inner | /tmp/semanticcpgtest7155610028977944934/Test3553749843102992678.c |
| sink(char* p)      | 2         | sink  | /tmp/semanticcpgtest7155610028977944934/Test3553749843102992678.c |

Now, I'm not very knowledgeable about the open source dataflow engine -- I'm working on the commercial engine, which is a different beast. @fabsx00 is the main author of the open source engine, but he's currently on vacation. @itsacoderepo are you knowledgeable about the OSS engine internals?
This will take a week until fabs is back. Then he will either take this over, or I can at least force him to explain the code to me while I debug this.

Yep, I can reproduce this. Let me take a look.

I've tracked it down to an overtainting for method parameters in DDG calculation but I'll need some more time tomorrow for this one.

https://github.com/joernio/joern/pull/1031

There was a bug in the data flow for functions that redefined their parameters. I fixed that now and I hope this also fixes your problem. If you could give it a try, that would be much appreciated.

After I upgraded to the latest joern bbrehm's mrp example is now fixed. Curiously however when running my original test cases, including cordoning off case2 and reassignThenFree to their own file to more closely track bbrehm's example, I still get the results I reported in the original issue post. So I'm not sure what's up.

Ok, then I guess I'll actually have to read your original report :) Putting it onto my stack, should find some time this week for it.

Is there any update on this one? Thanks.

I've done some more digging into this issue and what I have discovered is that when the call to taint2(ptr) is removed from the inner function in @bbrehm 's example, the incorrect flow returns. Example:
void sink(char* p);
void taint1(char* p);
void taint2(char* p);

void outer(char* ptr){
  taint1(ptr);
  inner(ptr);
  return;
}

void inner(char * ptr)
{
    //taint2(ptr);
    ptr = malloc(0x80);
    sink(ptr);
    return;
}

Joern result:
joern> def source = cpg.call("taint1").argument
defined function source

joern> def sink = cpg.call("sink").argument
defined function sink

joern> sink.reachableByFlows(source).p
res10: List[String] = List(
  """________________________________________________________________________________________________________
| tracked            | lineNumber| method| file                                                         |
|=======================================================================================================|
| taint1(ptr)        | 7         | outer | /Users/jryerby/Documents/Query dev/RES-489/simple/sls_test.c |
| inner(ptr)         | 8         | outer | /Users/jryerby/Documents/Query dev/RES-489/simple/sls_test.c |
| inner(char * ptr)  | 12        | inner | /Users/jryerby/Documents/Query dev/RES-489/simple/sls_test.c |
| ptr = malloc(0x80) | 15        | inner | /Users/jryerby/Documents/Query dev/RES-489/simple/sls_test.c |
| sink(ptr)          | 16        | inner | /Users/jryerby/Documents/Query dev/RES-489/simple/sls_test.c |
"""
)

I ran additional test cases with accessing the passed in ptr and also a functional call that doesn't use ptr as an argument before the reassignment of pointer and all those cases also returned the incorrect flow.


Install.sh does not seem to install correctly (Ubuntu 15.10)

These are the steps I took:
git clone https://github.com/mmstick/systemd-manager
cd systemd-manager
./install.sh

which seems to install. But when trying to open systemd-manager nothing happens. Could you advise me where to get appropriate logs from?

How are you opening systemd-manager? systemd-manager-pkexec is the file you want to open, which is what the desktop shortcut points to.

Well then. This might explain it?
systemd-manager-pkexec
Error accessing /usr/bin/systemd-manager: No such file or directory

Do you have any build issues with cargo build --release?

Ah. I dont have cargo installed. I wrongly assumed that install.sh does not need it once it completed without issue.

I'll close off the issue as it obviously not really an issue.


CI: We are not building non Google.Cloud packages on PRs

The regex for non Google.Cloud packages is not matching anything (see #7579):
https://github.com/googleapis/google-cloud-dotnet/blob/05ce39e0de6c568841a42a0019bc919e52196fb6/.github/workflows/build-pr.yml#L13
Seems that the negative lookahead assertion is ?!.

Fixed by #8164


[enhancement] [no-implicit-dependencies] - nested packages checks (#3980)

PR checklist

[x] Addresses an existing issue: #3980
[x] New feature, bugfix, or enhancement

[x] Includes tests

[ ] Documentation update

Overview of change:
This updates the check to find package.json to exclude any package.json that don't declare any dependencies at all. These can sometimes be used for organizational purposes. In this case, it's very possible that dependencies are appropriately declared in a package.json higher up in the directory structure, but this is missed if there is any package.json at all lower in the file system structure.
This is at least a partial fix to #3980, although the ability to specify the location of dependencies would ultimately be better. This is a less intrusive change.
CHANGELOG.md entry:
[enhancement] [no-implicit-dependencies] skip package.json with no dependencies.

@ajcrites I don't buy the use case here. You're doing something very non-standard with nested package.json files. Typically a package.json defines an NPM package that must depend on all packages it wants to use at runtime. Your nested package seems like it is not a real NPM package and so you probably should not use this rule at all.

I can speak to my specific use-case where I have src/package.json as well as package.json -- the former is used with baseUrl to allow us to do import ... from 'src/...', so src/package.json only has {"name": "src"}. This is quite possibly non-standard, but it's a recommendation I have seen in some library documentation, so I'm not the only one using it and it's a public recommendation.
As for not using this rule at all, this would allow someone to npm install a package without saving it, so it's not available as a dependency and would break other builds even though the package is available for the developer locally. At the same time if they install to the nested package.json this rule will kick in for them locally too.

@ajcrites can you find that library that suggested this pattern? primary sources please.
this just feels fishy: a workaround so you can have nicer import paths. in my work, i rely on VS Code to auto-import symbols and I rarely care about how attractive or pithy my import paths are.

I appear to have offended you, and I apologize for that. I'm glad that you have a setup that allows you to rarely care about import paths. I frequently care about import paths. I also don't know if this is necessarily a workaround for import paths, unless you are saying that the update to this linter rule is a workaround. See: https://github.com/ds300/react-native-typescript-transformer#react-native
See also: https://www.typescriptlang.org/docs/handbook/module-resolution.html#how-nodejs-resolves-modules which doesn't explicitly indicate having multiple package.json outside of node_modules, but does list an example for module resolution.
This can also be done with webpack aliasing, but that's not always a simple option, particularly if your project isn't using webpack.
There may be another way to do this without package.json as well, which I have tried, but I haven't had success yet. I'm not asking you to provide that, though.
On the other hand can you point out the disadvantages to the update to this rule? There may be other cases for having a package.json that should otherwise be ignored. If it's non-standard it could result in fragmentation of the rule.

I have this exact same setup. I have a nested "package.json" which allows me to import modules at an absolute path specified in my nested package.json. My nested package.json just looks like this;
{
"name": "src"
}

Closing this as per #3980. Thanks folks!


Header rendering delay after changing tab on TabNavigator

Maybe I have the same problem with header janking of #1013.
When I select any tabs on TabNavigator, top header renders with delay. I think, that problem in redux action Navigation/NAVIGATE, which dispatches after screen changing and then changes header.
See below:

How to solve it? Who knows?
// TabNavigator config
{
	animationEnabled: false,
	swipeEnabled: false,
	// lazyLoad: true,
	tabBarPosition: "bottom",
	tabBarComponent: TabView.TabBarBottom,
	initialRouteName: "Search"
}

<EMAIL_ADDRESS><EMAIL_ADDRESS>Android API 23

Yeah, this looks like the same problem as #1013


GitHub templates inconsistent

The C# template for GitHub is called "GitHub WebHook", and the Node template is called "GitHub Webhook". The capitalization elsewhere is consistent so this caught my eye and annoyed me.

"Generic Webhook" is how it appears elsewhere.

Wrong repo - @christopheranderson move this

fixed in here
https://github.com/Azure/azure-webjobs-sdk-templates/commit/17712eb3c9ed6b36e7d147a856b500234ab324da


Restart app from tray context menu

It should be easier than #31

The CoreApplication.RequestRestartAsync doesn't work if not in the foreground.


Update boolean parameters to Swift 3 naming?

Or is there a reason why you didn't do this, @rnystrom? I am talking about locked -> isLocked and merged -> isMerged et al. (See point 5 here)

Haven’t given it any thought, easy refactor if someone wants to
Sent with GitHawk


[MODEL] [PVT] Failed to execute training command

涉及的URL：https://github.com/mindspore-lab/mindcv/tree/main/configs/pvt
执行如下训练脚本报错：TypeError: Select GPU operator[FusedWeightApplyMomentum] fail! Unsupported data type!

@The-truthh, Please fix this issue as we discussed yesterday.


Using custom breakpoints with equalizer

Does anyone know if this is possible? Trying to use a custom break point (which was super-easy to create btw!) with equalizer. My custom breakpoint has all the classes generated too using the grid-html-classes mixin. I want to be able to do this with equalizer <div class="row" data-equalizer data-equalizer-mq="myCustomBreakpoint-up">
That possible?

Should work the same way as the default breakpoints. What was your experience?

The Foundation forum would be a great place to seek some help with troubleshooting what might be going on here. If it turns out to be a defect, you'll have some more info to provide here which will help prioritize and get it fixed.
We're trying to keep the issue list focused on confirmed defects in Foundation, so any help everyone can provide to differentiate between usage / troubleshooting and actual defects is appreciated!
http://foundation.zurb.com/forum


[bug] End-to-end integration tests are failing

Describe the bug
All of the cloud provider end-to-end tests are currently failing with following error message:
[terraform]: │ Error: error initializing keycloak provider
[terraform]: │
[terraform]: │   with provider["registry.terraform.io/mrparkers/keycloak"],
[terraform]: │   on kubernetes.tf line 140, in provider "keycloak":
[terraform]: │  140: provider "keycloak" {
[terraform]: │
[terraform]: │ error sending POST request to
[terraform]: │ https://qhub-integration-test-aws.qhub.dev/auth/realms/master/protocol/openid-connect/token:
[terraform]: │ 401 Unauthorized
[terraform]: ╵

As for local https://github.com/Quansight/qhub/issues/908, I got the same on a Linux deployment recently

I've attempted deploying QHub on AWS using a similar setup to that of the qhub-integration-test-aws :
Initialize qhub-config.yaml
export QHUB_GH_BRANCH=main

python -m qhub init aws \
--domain eaeaws.qhub.dev \
--project eaeaws \
--auth-provider password \
--repository github.com/iameskild/eaeaws \
--repository-auto-provision \
--ci-provider=none

Update default AWS region and deploy.
python -m qhub deploy -c qhub-config.yaml \
--dns-provider cloudflare \
--dns-auto-provision \
--disable-prompt

And resulting deployment fails with the following error message:
[terraform]: │ Error: Kubernetes cluster unreachable: Get "https://D10AB8EE7842463A17356A352652EF2E.gr7.us-east-1.eks.amazonaws.com/version?timeout=32s": dial tcp: lookup D10AB8EE7842463A17356A352652EF2E.gr7.us-east-1.eks.amazonaws.com on <IP_ADDRESS>:53: write udp <IP_ADDRESS>:49396-><IP_ADDRESS>:53: write: network is down
[terraform]: │
[terraform]: │   with module.kubernetes-keycloak-helm.helm_release.keycloak,
[terraform]: │   on modules/kubernetes/keycloak-helm/main.tf line 1, in resource "helm_release" "keycloak":
[terraform]: │    1: resource "helm_release" "keycloak" {
[terraform]: │
[terraform]: ╵
[terraform]: Releasing state lock. This may take a few moments...

Problem encountered: Terraform error

More investigating is required.

I've been using Digital Ocean and Google Cloud this week without any problems.
But I have always used HTTPS with genuine Let's Encrypt certs.
While most of qhub deploy can work to a 'fake' domain, or one that isn't really accessible locally (maybe due to outdated DNS or cert problems), the Terraform Keycloak provider needs to communicate directly with the Keycloak API on a valid domain.
This is the kind of problem that will result in 'error initializing keycloak provider' (the first one eskild reported above). The code aims to tell it not to verify TLS if the qhub-config.yaml specifies a self-signed cert or if it is a 'local' deployment - but it's possible that's the bit that's broken as I've only done genuine Let's Encrypt deployments recently.
As for your more recent message (Kubernetes cluster unreachable) that doesn't look like a Keycloak problem as such - just a Helm one. But Keycloak is the first thing to be installed of course, so it's likely that JupyterHub (and maybe everything else) would also fail for the same reason.

I tried redeploying on AWS with a signed SSL cert from Lets Encrypt and got the following error:
[terraform]: │ Error: error configuring Terraform AWS Provider: error validating provider credentials: error calling sts:GetCallerIdentity: RequestError: send request failed
[terraform]: │ caused by: Post "https://sts.amazonaws.com/": read tcp <IP_ADDRESS>:57197-><IP_ADDRESS>:443: read: connection reset by peer
[terraform]: │
[terraform]: │   with provider["registry.terraform.io/hashicorp/aws"],
[terraform]: │   on aws.tf line 1, in provider "aws":
[terraform]: │    1: provider "aws" {
[terraform]: │
[terraform]: ╵
[terraform]: Releasing state lock. This may take a few moments...

I did successfully deploy to Digital Ocean when using a signed cert.

Closed here https://github.com/Quansight/qhub-integration-test/pull/26


AppServiceLoginHandler CreateToken lifeTime not respected

For some expiring token tests I've setup the lifetime of my token to 20 sec. However, after more than 20 sec being logged in, I still don't get Unauthorized access to my api requests.
It does happen but It takes longer (a few minutes).

I believe that App Service Authentication has a window of several minutes for honoring the timeouts. @cgillum may be able to give you the exact answer.

My issue is that tokens don't expire as soon as they should. My request do return. No timeouts, no 401.

There is a 5 minute grace period for expired tokens to account for clock skew. That would be why your tokens are still being accepted after the 20 seconds.

Ok makes sense now.
Tks @cgillum


Add create-app to e2e

Hey, I just made a Pull Request!
Fixes https://github.com/spotify/backstage/issues/495
Work in progress still.
I ran into all sorts of issues, but I see that two of them has already been addressed: https://github.com/spotify/backstage/pull/527, https://github.com/spotify/backstage/pull/528.

Great work!


Add codec support

This PR picks up on work from #2 which adds codec support to this output. This PR further makes the following changes on top of that PR:

Uses newer on_event codec callback that passes the event so we can sprintf on the event - required since the key setting has historically supported sprintf.
Fixes the broken specs. This also included removing some unnecessary specs (that were testing unrelated integration with other plugins) as well as refactoring the specs to use shared_examples.
Small refactoring in the output itself.
Add necessary dev dependencies to the gemspec so the tests can run.

On my workstation, tests pass: bundle exec rspec -t redis under JRuby 1.7.23 (requires redis to be running):
3 examples, 0 failures

@jordansissel I get an error when I try to run the tests:
$ bundle exec rspec -f d -c -t redis
Using Accessor#strict_set for specs
Run options:
  include {:redis=>true}
  exclude {:socket=>true, :performance=>true, :couchdb=>true, :elasticsearch=>true, :elasticsearch_secure=>true, :export_cypher=>true, :integration=>true, :windows=>true}

LogStash::Outputs::Redis
  ship lots of events to a list
    agent(/Users/buh/WORK/logstash-plugins/logstash-output-redis/spec/outputs/redis_spec.rb:30:in) runs (FAILED - 1)
  converts US-ASCII to utf-8 without failures
    agent(/Users/buh/WORK/logstash-plugins/logstash-output-redis/spec/outputs/redis_spec.rb:119:in) runs (FAILED - 2)
  batch mode
    agent(/Users/buh/WORK/logstash-plugins/logstash-output-redis/spec/outputs/redis_spec.rb:74:in) runs (FAILED - 3)

Failures:

  1) LogStash::Outputs::Redis ship lots of events to a list agent(/Users/buh/WORK/logstash-plugins/logstash-output-redis/spec/outputs/redis_spec.rb:30:in) runs
     Failure/Error: pipeline = LogStash::Pipeline.new(config)
     LogStash::PluginLoadingError:
       Couldn't find any input plugin named 'generator'. Are you sure this is correct? Trying to load the generator input plugin resulted in this error: no such file to load -- logstash/inputs/generator

It looks like a dependency is missing in the gemspec.

Hmm, are you sure you checked out the right branch? I don't use the agent spec block in any specs in this anymore (I removed them from master and replaced with another mechanism)

facepalm

This is working:
bundle exec rspec -f d -c -t redis
Using Accessor#strict_set for specs
Run options:
  include {:redis=>true}
  exclude {:socket=>true, :performance=>true, :couchdb=>true, :elasticsearch=>true, :elasticsearch_secure=>true, :export_cypher=>true, :integration=>true, :windows=>true}

LogStash::Outputs::Redis
  when batch_mode is true
    should have batch mode enabled
    should successfully send all events to redis
  when batch_mode is false
    should successfully send all events to redis

Finished in 6.86 seconds (files took 1.32 seconds to load)
3 examples, 0 failures

Randomized with seed 42995

Are there only 3 tests?

LGTM™

Yeah, some of the tests I removed were more related to integration and regression tests for other bits and bobs (generator input, json parsing, etc) and not specific to this plugin.
The two main tests right now will test both batch and non-batch modes and ensure we send in-order and receive all events that were output. Good enough :)


Engage Weekly - April 24th, 2022

This is a weekly public meeting to discuss the engagement across different areas of the Postman API Network, coordinating and planning around the advocacy, education, and community building work occurring within Postman Open Technologies.
Agenda:

Administrative - Taking care of administrative aspects of running this meeting.

Intake

Github
Slack - #api-network-partnerships and #api-network-wins
Airtable -- Just for master index.

Public - This meeting will be open to the network, partners, and general public.

Trending - What teams, APIs, and collections are trending lately on the network.

Power BI (Workspace) - Spruce up the workspace.

Partnerships - Intake from partner program.

dbtLabs (API) - Need someone to jump on call with them.
DrugBank (Workspace

Priorities - What priorities requests have come in from internal and external stakeholders.
Campaigns - What are the areas we are focusing on with campaigns and components.

Producer API Lifecycle
Consumer API Lifecycle

Opportunities - Identifying where the opportunities are for focusing our attention.

Web3 - Anything in this area would be cool.
Google Maps
Kroger - experimental!
Discord - Relationships with them.
International

Blueprints - Formalizing the guidance we provide as part of these meetings.

https://github.com/postman-open-technologies/engage/issues/22 - The numbers that matter to partners.
Workspace Linter - Baseline for all workspaces.

Please add any agenda items you’d like to discuss below, and we will meet weekly, and push forward projects, productions, stories, collections, and tools to support our work.

Shopify - Commerce

Netlify - GraphQL

Vonage

Bitly

LinkedIn

Autodesk

Introducing The Good Documentation Checklist - https://blog.postman.com/postman-good-documentation-checklist/
How to Set Up Your First Public Workspace in 5 Easy Steps - https://blog.postman.com/how-to-set-up-public-workspaces/
Increasing Adoption of an API with a Public Workspace - https://blog.postman.com/increasing-adoption-of-an-api-with-a-public-workspace/
The Most Important API Metric Is Time to First Call - https://blog.postman.com/the-most-important-api-metric-is-time-to-first-call/
Link Your Docs to a Public Workspace for a Better Developer Experience - https://blog.postman.com/link-docs-to-public-workspace-for-better-developer-experience/

OpenAPI LInting - https://blog.postman.com/design-your-style-guide-public-workspace-linter/

Developer Experience workspace checklist and examples: https://www.postman.com/devrel/workspace/developer-experience/overview


Provide and implement interface enabling browsing the knowledge base structure

For #25 and #56.

Not needed as the solutions are either browser based or dealt with in other repositories.


Fix for UIApplicationDidReceiveMemoryWarningNotification not being obeyed on iOS

Summary:
Prior to 0.69, an RN app receiving the UIApplicationDidReceiveMemoryWarningNotification notification resulted in RN performing a GC on the JSC. Since 0.69 this has not worked, this PR fixes the issue.
Before 0.69 this was handled via a hardcoded memory pressure level: https://github.com/facebook/react-native/blob/c5c17985dae402725abb8a3a94ccedc515428711/React/CxxBridge/RCTCxxBridge.mm#L362
(It seems like the levels are an Android concept - see https://developer.android.com/reference/android/content/ComponentCallbacks2#constants_1)
In commit https://github.com/facebook/react-native/commit/0916df99511d6918ea905c2a9df45bccc1fd332a it was changed to run from a constant which could be reconfigured but a mistake (return type of BOOL rather than int) was resulting in the intended default memory pressure level of 15 (same as the old hardcoded value) being changed to 1 when it was passed on to handleMemoryPressure.
Changelog:
[IOS] [FIXED] - UIApplicationDidReceiveMemoryWarningNotification has not been obeyed on iOS since RN 0.69
Test Plan:
Tested manually via the Simulator using Debug -> Simulate Memory Warning and monitoring the console output of the app.
Before fix:
WARNING: Logging before InitGoogleLogging() is written to STDERR
W0620 11:21:42.824463 257294336 JSIExecutor.cpp:377] Memory warning (pressure level: 1) received by JS VM, unrecognized pressure level

With fix (and also the same output for the latest 0.68 tag in the repo):
WARNING: Logging before InitGoogleLogging() is written to STDERR
I0620 11:25:47.479444 79212544 JSIExecutor.cpp:370] Memory warning (pressure level: TRIM_MEMORY_RUNNING_CRITICAL) received by JS VM, running a GC

Thanks for the fix! I'm surprised this actually was causing issues, since BOOL (and bool) are actually defined as char and are perfectly capable of representing 15

I'm surprised this actually was causing issues, since BOOL (and bool) are actually defined as char and are perfectly capable of representing 15

Yeah, I was confused by that too. I only picked up on it when trying to debug a memory usage issue and saw the "unrecognized pressure level" message in the console. 🤷


Memos changed there branding again

Icon Name
memos
Icon(s)
You can look at logos on the new brand page and take files on the github repo.
I would probably take logo-rounded.png but that's a matter of taste I guess.
Here is the Svg version  converted with this website

Hi, this has been added with PR #488


Null RemoteIpAddress

Hi All,
I'm using RC1. When running under IIS Express locally or under IIS on Windows Server 2012 R2 the value for HttpContext.Connection.RemoteIpAddress is always null. Any clues? Also, I've seen [somewhat older] comments about using the following to access the remote ip address value:
string clientIpAddress;
var connection = context.HttpContext.GetFeature();
if (connection != null) {
clientIpAddress = connection.RemoteIpAddress.ToString();
}
// Do something with clientIpAddress
The weird thing is that I can't get this to work... GetFeature doesn't resolve. I probably need some extension method in some package I don't have, but I have no idea what package contains GetFeature.
Thanks in advance for any help.
-Brian Eriksen

https://github.com/aspnet/KestrelHttpServer/issues/632


!HERE'S WAY TO WATCH Jake Paul vs Mike Tyson LIVE STREAMs ON TV CHANNEL 15 November 2024

How to watch Jake Paul v Mike Tyson and more pre-fight questions, answered
How to watch Jake Paul vs. Mike Tyson fight: Time, streaming and fight card
➡🥊🔴🥊🔍JAKE PAUL VS MIKE TYSON LIVE🥊🔴🥊
➡🥊🔴🥊🔍JAKE PAUL VS MIKE TYSON LIVE🥊🔴🥊
What time does it start? Why Netflix? And what about that 31-year age difference? We (mostly) have the answers
Mike Tyson is returning to professional boxing for the first time in nearly two decades on Friday night in Texas. The 58-year-old former undisputed heavyweight champion is fighting YouTuber-turned-boxer Jake Paul in a made-for-Netflix showdown expected to draw a global audience of around 300m viewers.
But is that all you really need to know? What about the rules, how much they’re getting paid and the checks notes 31-year age difference. Read on for all the answers ...
The seven-fight card is being held at the 80,000-capacity AT&T Stadium, the $1.2bn home of the NFL’s Cowboys in Arlington, about 20 miles west of Dallas. It’s hard to pin down an exact time for the main event, but Paul and Tyson will not make their entrances before 11pm ET (4am GMT).
A robust live gate is expected but there were plenty of tickets available at press time with the cheapest starting at $67 plus fees. Higher rollers can purchase something called the MVP Owner’s Experience that will seat two people less than six feet from ringside in premium leather chairs. Also included: eight additional tickets in the first two rows, a pre-fight locker room visit with Tyson and Paul, a chance to be onstage during the weigh-in, autographed gloves from both fighters, in addition to a personal concierge and security detail throughout the week, all for the princely sum of $2m (£1.58m). And you thought egg-flation was bad.
The broadcast will stream live globally on Netflix starting at 8pm ET (1am GMT) at no additional cost to subscribers. There will be three televised preliminary fights, including Katie Taylor and Amanda Serrano in a hotly anticipated rematch of their 2022 classic, leading up to the main event. The stream will feature options for live commentary in English, Spanish, Brazilian Portuguese, French and German.
The first three undercard bouts not carried by the Netflix stream will be available free on Most Valuable Promotions’ YouTube, Netflix Sports YouTube and Tudum starting at 5.30pm ET (10.30pm GMT).
In a media landscape where TV ratings are falling off across the board, live sports continue to buck the trend. That’s caught the attention of media and tech giants like Amazon (who bought into the NFL) and Apple (who bought Messi), among other billion-dollar bets on sports programming as a driver for subscriptions. Paul v Tyson will mark Netflix’s third foray into live sports after last year’s The Netflix Cup (a golf pro-am with F1 drivers) and March’s The Netflix Slam (a tennis exhibition between Carlos Alcaraz and Rafael Nadal in Las Vegas).
When you consider that Netflix reported 282.7m worldwide subscribers as of last year’s third quarter, and the enormous popularity of Paul and Tyson with divergent age demographics, and the vanishingly low cost relative to usual boxing pay-per-view events (typically $80 in the US), it’s practically guaranteed to be the most-watched fight in years, if not ever.
The 27-year-old Paul, who has managed to develop into a competent boxer since taking up the sport and turning professional in 2020, winning 10 of 11 bouts against mostly faded MMA fighters and fellow YouTubers, insists it’s another step toward his quixotic goal of winning a world title, saying: “My sights are set on becoming a world champion, and now I have a chance to prove myself against the greatest heavyweight champion ever, the baddest man on the planet and the most dangerous boxer of all time.”
True as that may be, the short money is no small incentive. Paul closed a lucrative deal with Netflix last November to stream one of his upcoming fights before Tyson was even in the frame. The interest (and money) only ballooned with the addition of the former heavyweight champion, who had not fought in an official bout since quitting on his stool after six rounds against Irish journeyman Kevin McBride in June 2005.
Unlike many of the similar novelty bouts throughout boxing history, the fight between Paul and Tyson is not an exhibition. Despite concerns over the fighters’ three-decade age difference, along with Tyson’s inactivity and track record of health issues, the Texas Department of Licensing and Regulation (TDLR) determined the former champion’s physical condition met the criteria for the fight to be officially sanctioned. That means there will be three judges at ringside, an official winner will be declared and the result will count on their records. (It also means that sportsbooks can taking betting action on it, although at least six US states have deemed the event too untraditional to allow wagering.)
The Texas commission has taken some precautions. The fight will be scheduled for eight rounds instead of the typical 10 or 12, with two-minute rounds instead of the customary three. Tyson and Paul will also use 14oz gloves instead of the usual 10oz in order to lessen the power of the punches.
The TDLR denied a request from the Guardian under the Texas Public Information Act (PIA) regarding the purse information. But it has been reported that Paul will earn $40m (£31.6m) for Friday’s event while Tyson is said to be making $20m (£15.8m). Taylor will reportedly bring in $6.1m (£4.8m) for her co-feature rematch with Serrano, whose takehome is thought to be around $8m (£6.3m). That’s an extraordinary come-up for the Nuyorican seven-weight champion, who once was paid $1,500 for a world title defense.
  Nice.
Honestly, maybe! The 31-year age gap between the fighters is thought to be the largest in the history of professional boxing, eclipsing the 24 years that separated Archie Moore, who was 49, and Mike DiBiase, who was 25, when they met as light heavyweights in 1963. While Tyson continues to trade on his Baddest Man on the Planet image, the reality is he’s a 58-year-old man with a history of health issues who lost 26lbs in May after an ulcer flare-up that left him throwing up blood and defecating tar, prompting the postponement of the fight from July to November. He’s admitted to sciatica outbreaks that have left him unable to talk and was photographed getting pushed in a wheelchair and using a walking stick at Miami International Airport two years ago. Several other states wouldn’t sanction this bout.
Boxers don’t have an old-timers’ day for a reason. There’s a danger at hand any time a fighter climbs through the ropes into the prizering, the only venue in society, with the exception of war, where a person can be killed but not legally murdered. Eddie Hearn, the Matchroom Sport chairman who promotes Taylor, told BBC Sport last month that he will be at ringside to support his champion but will leave immediately after because he doesn’t want to endorse a main event with a fighter of Tyson’s advanced age.
“The reality is that 20 years ago when Mike Tyson retired from the sport he was shot, completely finished,” Hearn said. “If I was Jake Paul I’d just feel a little bit embarrassed to be honest with you. ... This is dangerous, irresponsible and, in my opinion, disrespectful to the sport of boxing.”
Hearn isn’t alone in calling it a circus. But with two world title fights on the TV undercard, there’s plenty of value on offer for viewers who aren’t keen on watching two men with more than 30 years between them exchange blows. The order of play is as follows:

c vcxv xx

vcbcv
ALLSPpp

.
.
.
.
.

.
.
.
.
.


SARS-COV-2 mutations and immunity

Where to find the issue
Concept
Describe the issue
Missing case reinfection with a new strain of Sars-Cov-2
The information system should be enabled to handle different SARS-COV-2 variants.
There have been cases, where a person with a SARS-COV-2 infection recovered and then reinfected himself. There are also several known mutated variants.
Therefore a diagnose key should include or at least be prepared to carry a version id for the virus.
Scenario:
Bob has been infected. Anne has been infected too. Both have recovered. Now Bob catches a mutated infection. Anne either doesn‘t use the app anymore or ignores a message because she thinks she recovered.
With a version system she could be informed that she  got reinfected with a different strain.
Suggested change
At least prepare the interfaces so that a version can be set even if this functionality will be implemented later or this will be an upgrade nightmare later on.

All involved parties (Apple, Google, us...) try to minimize the amount of data which is collected and processed to the absolute minimum. This also includes the format of the temporary exposure/diagnosis keys. We simply work with the format as it is currently defined in the Exposure Notification Framework. As we want to keep avoiding unnecessary data we won't engage in upfront discussions with Apple/Google about additional fields which might be needed in the future.
Moreover, as this a very volatile environment, incompatible changes will happen anyway and we are aware of the fact that we need to handle them when they actually happen.
Consequently, we will close this issue. Thank you for your understanding!
SW
Corona Warn-App Open Source Team


Support cli config .torus/config.json

fixes https://github.com/coreos/torus/issues/176

Usage example
write config file and view
$ ./bin/torusctl config

$ ./bin/torusctl config --view
{
	"etcd_config": {
		"default": {
			"etcd": "<IP_ADDRESS>:2379"
		}
	}
}

write config file with "production" profile and use it
$ ./bin/torusctl config --profile=production --etcd=https://<IP_ADDRESS>:2379 --etcd-ca-file=/path --etcd-cert-file=/path --etcd-key-file=/path

$ ./bin/torusctl config --view
{
	"etcd_config": {
		"default": {
			"etcd": "<IP_ADDRESS>:2379"
		},
		"production": {
			"etcd": "https://<IP_ADDRESS>:2379",
			"etcd-ca-file": "/path",
			"etcd-cert-file": "/path",
			"etcd-key-file": "/path"
		}
	}
}

$ ./bin/torusctl init --profile=production

command line flags win the config file
$ ./bin/torusctl init --etcd=<IP_ADDRESS>

This is great. Can the config file be YAML instead of JSON? Fewer user errors with YAML I think.

Thank you. I am prefer yaml to json.
However, coreos's projects use json for their configuration like rkt and flannel. That's the reason why I chose json. And it's up to coreos team.

Yeah, JSON for the config files -- that's why you have a torusctl config command. Less user error in doing it that way.


Don't assume paths are strings

Some parts of the code assume paths to be strings e.g. https://github.com/iterative/mlem/blob/4666de893967cdde41bf5ff605acf51a84bc9b68/mlem/utils/path.py#L8
If you pass a pathlib's path, then you'd get the following error:
...
      6 if not path:
      7     return path
----> 8 return path.replace("\\", "/")

TypeError: replace() takes 2 positional arguments but 3 were given

Is this really a bug though? Because the function signature clearly has make_posix(path: Optional[str]) i.e. Optional[str], so not really sure if this should be handled or not.
CC: @mike0sv

Yep, I guess it's not a bug, but an improvement we could implement. Let me update the label...


Added optional hint accept and content-type

Allow user to optional hint accept and content-type in resource definition.
For example:
resource String POST "/CustomContentType" {
   String body

   accept application/xml, application/json  // some comment here
   content-type application/json, application/xml, text/plain;

   expected OK;
   exceptions {
       ResourceError INTERNAL_SERVER_ERROR;
       ResourceError BAD_REQUEST;
       ResourceError UNAUTHORIZED;
       ResourceError FORBIDDEN;
   }
}

Thanks

I would prefer to not introduce the '-' in a "name", the definition of a name specifically avoids this so that names can be used as identifiers in target languages.
Better to use the terms "consumes" and "produces", also because the term "accepts" already means something in HTTP.
So, I'd prefer to see this:
resource String POST "/CustomContentType" {
   String body

   consumes application/xml, application/json  // some comment here
   produces application/json, application/xml, text/plain;

   expected OK;
   exceptions {
       ResourceError INTERNAL_SERVER_ERROR;
       ResourceError BAD_REQUEST;
       ResourceError UNAUTHORIZED;
       ResourceError FORBIDDEN;
   }
}

without changing the parser to allow dashes in a "name" type of token.

👍

I'll follow up with the ardielle-common/rdl.rdl change and re-codegen for ardielle-java

Thanks.  I might be able to help with ardielle-common/rdl.rdl part.

https://github.com/ardielle/ardielle-common/pull/3
https://github.com/ardielle/ardielle-java/pull/3


misc: use hyprutils for string replaceAll

Next we could rip out mtx.hpp and replace it with Mat3x3 from hyprutils right?

ya


GH-53: Export the version of NumPy used to build the project as a constant (via setuptools/cython preprocessor injecting the value during build)

Closes #53
Used the approach found on this SO. It basically injects np.__version__ during build time and defines as a constant in C/Python, available via a function imported in __init__. Then we export __numpy_version__ in __init__.py.
Tested by installing with pip install -e . which used numpy=2.1.0. Then created a new venv, and installed this version again, but installed also numpy=2.0.
(venv2) kinow@ranma:~/Development/python/workspace/crick$ pip install numpy==2.0
Collecting numpy==2.0
  Using cached numpy-2.0.0-cp312-cp312-manylinux_2_17_x86_64.manylinux2014_x86_64.whl.metadata (60 kB)
Using cached numpy-2.0.0-cp312-cp312-manylinux_2_17_x86_64.manylinux2014_x86_64.whl (19.0 MB)
Installing collected packages: numpy
  Attempting uninstall: numpy
    Found existing installation: numpy 2.1.0
    Uninstalling numpy-2.1.0:
      Successfully uninstalled numpy-2.1.0
Successfully installed numpy-2.0.0
(venv2) kinow@ranma:~/Development/python/workspace/crick$ python -c 'from crick import __numpy_version__; print(__numpy_version__)'
b'2.1.0'
(venv2) kinow@ranma:~/Development/python/workspace/crick$ pip list | grep numpy
numpy   2.0.0

(above it prints __numpy_version__ as 2.1.0 as that's the build-time version, and then numpy 2.0.0 as that's the version my venv is using)
Not sure if the most elegant way… tried different approaches, but I couldn't export/inject the np.__version__, as there was only a NPY_VERSION in C NumPy, but didn't appear to match the complete NumPy version (only major?, but also couldn't export that).
Added a simple unit test, that could in theory test __numpy_version__ == np.__version__, but I am not sure if that will be always true in CICD. Happy to change that. Also fixed a couple of typos I saw while changing the code, also happy to drop those if better.
Cheers,
Bruno

looks like pre-commit isn't happy

looks like pre-commit isn't happy

Sorry, hadn't seen that. Will fix it.

Applied linter proposed fixes manually, I think the workflow is waiting approval now (first time contributor here). Thanks!

seems still to be failing, you should be able to copy from the log of the pre commit job

thx


Add test timings

this is a replacement for the dask branch
it has all the code from the branch, but is rebased to bring in test timings.
This should now be able to be merged back onto master (one day, maybe)

@bjlittle tests are passing, if we could get this in so we can all rebase our open work onto it, that'd be super

@marqh Just confirmed that the dask_timed branch can now merge with master :+1:
Perhaps tomorrow we can arrange to delete the dask feature branch when it's safe to do so ...


Wrangler Tail Alpha testing feedback

If you've installed any of the 1.9.0 release candidates, we'd love to hear from you! Please comment on this issue with any feedback you have, big or small.

Hey!
Liking the idea of having the tail command a lot 😄
Currently trying to get it to work with my in-production worker, but I seem to be getting Error: Could not extract tunnel url from cloudflared. Any idea why that might be?

@arunesh90 no problem! that was going to be my first question, but this does highlight that missing cloudflared does not give a helpful error message so thank you!

Interesting! Is the ability to tail worker logs documented as part of the public API somewhere?  (without using wrangler)

@johnspurlock no it isn't, at the moment wrangler is the blessed implementation. that being said there is more work to be done around worker logs.

When a client's internet is messed up nice to have a better error message:
 wrangler tail --env dev | jq .
Setting up log streaming from Worker script "delete-gateway-dev" to Wrangler. This may take a few seconds...
Closing tail session...
Error: ⚠  Error: error sending request for url (https://api.cloudflare.com/client/v4/accounts/95e065d2e3f97a1e50bae58aea71df6d/workers/scripts/delete-gateway-dev/tails): error trying to connect: dns error: failed to lookup address information: nodename nor servname provided, or not known

One idea ❗DNS resolution error when connecting to api.cloudflare.com. Try checking your internet connection and run again

This looks nice! Will work on a Logflare integration soon. outcome looks especially useful. Only thing I can see is that people will want more than 10 events/second pretty quickly. Having that configurable would be useful I'm sure.

@chasers for sure the limitations are not practical for a production logging solution; wrangler tail is best suited for in the moment troubleshooting. additional work is required on the platform (where the limits are set) for more comprehensive solutions.

thanks everyone for your feedback! we've addressed some of it, and created issues for the rest to address in later releases.


Release a new version with the license

Could you please release a new version that includes the license addition that happened recently?
This is blocking us from being able to upgrade transitory dependencies in our project.
Related to https://github.com/streamich/tree-dump/issues/3
Thank you!

This is also needed by us to make our CI green.

It's also needed by us. Please add license information to npm package. It's still not done.

Hi @streamich , can you release a new version soon?

ping @streamich

It's also needed to us, our license compilation check failed all the time. Please release a new version with license 🙏

finito


eslintignore created with dist folder added

CHANGELOG :memo:

PRINTS(OPTIONAL) :framed_picture:
LABELS

Example: enhancement, wip etc

Thank you your your contribution @guilhermeorcezi ! I'll review it soon!


How do I parse the end result as HTML?

Was using markdown-it previously for the built in editor in Strapi but editorJS stores things differently (alot of json) leading it unable to parse. What would be the best method of doing so with this plugin? Kind of a noob to strapi so apologies if it's an awkward question to ask

Found an npm package that solves this issue after a bit more research.