Embedded Stories not loading

Bug Description

When stories are embedded to Wordpress sites they have an infinity load screen. But work completely fine when loaded as individual URLS i.e site.com/web-stories/test-story works fine but once embedded using the plugin it doesn't work
Expected Behaviour

Embeded stories should work with latest version of Wordpress and Gutenberg blocks
Steps to Reproduce

Any Wordpress installation paired with Gutenberg should replicate this issue
Screenshots

Here's it working without the embed

Additional Context

Plugin Version: V.1.0,0
Operating System:
Browser: Tested on Chrome and Safari

Do not alter or remove anything below. The following sections will be managed by moderators only.
Acceptance Criteria

Implementation Brief

Hi @tahanzania
Embeds work fine here on multiple sites. Do you perhaps any other plugins or chrome extensions active?
If you could share the URL to a blog post with the block in it that'd be helpful.

Doesn't load on this URL https://www.tahadharamsi.com/uncategorized/my-first-web-story/
Also I don't have AMP enabled, is that the reason why? I assume it works without AMP enabled.

@tahanzania Thank you!
No, you don't need AMP enabled. The error on your site seems to be that you have mixed content (HTTPS vs HTTP).
In Gutenberg, you entered http://www.tahadharamsi.com/web-stories/my-first-web-story/, but your story is available at https://www.tahadharamsi.com/web-stories/my-first-web-story/. Notice the difference between https:// and http://.
To fix this, edit the block (or remove it and create a new one) in Gutenberg and use the https://www.tahadharamsi.com/web-stories/my-first-web-story/ URL with https in it to embed the story.
This should fix this issue immediately.
In the meantime, we'll try to come up with a good way to fix this automatically for you.

@swissspidy  worked perfectly! I used the feature from the plugin that auto embedded the story to the post, it looks like the auto post creator embeds as HTTP.  Thanks for your help!

@tahanzania Awesome, glad to hear that! And thanks for the additional info.
We use whatever URL is provided by WordPress. I recommend checking your URL settings under Settings -> General to make sure they start with https://.
PS. If you like the plugin so far, please consider adding a review for it at https://wordpress.org/support/plugin/web-stories/reviews/#new-post 🙂

@swissspidy  I just left a review. Also since I use GCP for hosting so I have to do the URL settings from the SSH (thanks tho forgot to change that)

Hi @swissspidy
I am having the same issue, although my story URL is starting with https. It never worked even when I let the plugin create a post automatically for me. Here is the test page https://stories.naveeraashraf.com/2020/10/21/sea-fever-test/


Some questions about fine-tuning model

Traceback (most recent call last):
File "train.py", line 418, in
generator.load_state_dict(ckpt["g"], strict=False)
File "/root/anaconda3/lib/python3.6/site-packages/torch/nn/modules/module.py", line 839, in load_state_dict
self.class.name, "\n\t".join(error_msgs)))
RuntimeError: Error(s) in loading state_dict for Generator:
size mismatch for to_rgb1.bias: copying a param with shape torch.Size([1, 12, 1, 1]) from checkpoint, the shape in current model is torch.Size([1, 3, 1, 1]).
size mismatch for to_rgb1.conv.weight: copying a param with shape torch.Size([1, 12, 512, 1, 1]) from checkpoint, the shape in current model is torch.Size([1, 3, 512, 1, 1]).
size mismatch for to_rgbs.0.bias: copying a param with shape torch.Size([1, 12, 1, 1]) from checkpoint, the shape in current model is torch.Size([1, 3, 1, 1]).
size mismatch for to_rgbs.0.conv.weight: copying a param with shape torch.Size([1, 12, 512, 1, 1]) from checkpoint, the shape in current model is torch.Size([1, 3, 512, 1, 1]).
size mismatch for to_rgbs.1.bias: copying a param with shape torch.Size([1, 12, 1, 1]) from checkpoint, the shape in current model is torch.Size([1, 3, 1, 1]).
size mismatch for to_rgbs.1.conv.weight: copying a param with shape torch.Size([1, 12, 512, 1, 1]) from checkpoint, the shape in current model is torch.Size([1, 3, 512, 1, 1]).
size mismatch for to_rgbs.2.bias: copying a param with shape torch.Size([1, 12, 1, 1]) from checkpoint, the shape in current model is torch.Size([1, 3, 1, 1]).
size mismatch for to_rgbs.2.conv.weight: copying a param with shape torch.Size([1, 12, 512, 1, 1]) from checkpoint, the shape in current model is torch.Size([1, 3, 512, 1, 1]).
size mismatch for to_rgbs.3.bias: copying a param with shape torch.Size([1, 12, 1, 1]) from checkpoint, the shape in current model is torch.Size([1, 3, 1, 1]).
size mismatch for to_rgbs.3.conv.weight: copying a param with shape torch.Size([1, 12, 512, 1, 1]) from checkpoint, the shape in current model is torch.Size([1, 3, 512, 1, 1]).
size mismatch for to_rgbs.4.bias: copying a param with shape torch.Size([1, 12, 1, 1]) from checkpoint, the shape in current model is torch.Size([1, 3, 1, 1]).
size mismatch for to_rgbs.4.conv.weight: copying a param with shape torch.Size([1, 12, 256, 1, 1]) from checkpoint, the shape in current model is torch.Size([1, 3, 256, 1, 1]).
Traceback (most recent call last):
File "train.py", line 418, in
generator.load_state_dict(ckpt["g"], strict=False)
File "/root/anaconda3/lib/python3.6/site-packages/torch/nn/modules/module.py", line 839, in load_state_dict
self.class.name, "\n\t".join(error_msgs)))
RuntimeError: Error(s) in loading state_dict for Generator:
size mismatch for to_rgb1.bias: copying a param with shape torch.Size([1, 12, 1, 1]) from checkpoint, the shape in current model is torch.Size([1, 3, 1, 1]).
size mismatch for to_rgb1.conv.weight: copying a param with shape torch.Size([1, 12, 512, 1, 1]) from checkpoint, the shape in current model is torch.Size([1, 3, 512, 1, 1]).
size mismatch for to_rgbs.0.bias: copying a param with shape torch.Size([1, 12, 1, 1]) from checkpoint, the shape in current model is torch.Size([1, 3, 1, 1]).
size mismatch for to_rgbs.0.conv.weight: copying a param with shape torch.Size([1, 12, 512, 1, 1]) from checkpoint, the shape in current model is torch.Size([1, 3, 512, 1, 1]).
size mismatch for to_rgbs.1.bias: copying a param with shape torch.Size([1, 12, 1, 1]) from checkpoint, the shape in current model is torch.Size([1, 3, 1, 1]).
size mismatch for to_rgbs.1.conv.weight: copying a param with shape torch.Size([1, 12, 512, 1, 1]) from checkpoint, the shape in current model is torch.Size([1, 3, 512, 1, 1]).
size mismatch for to_rgbs.2.bias: copying a param with shape torch.Size([1, 12, 1, 1]) from checkpoint, the shape in current model is torch.Size([1, 3, 1, 1]).
size mismatch for to_rgbs.2.conv.weight: copying a param with shape torch.Size([1, 12, 512, 1, 1]) from checkpoint, the shape in current model is torch.Size([1, 3, 512, 1, 1]).
size mismatch for to_rgbs.3.bias: copying a param with shape torch.Size([1, 12, 1, 1]) from checkpoint, the shape in current model is torch.Size([1, 3, 1, 1]).
size mismatch for to_rgbs.3.conv.weight: copying a param with shape torch.Size([1, 12, 512, 1, 1]) from checkpoint, the shape in current model is torch.Size([1, 3, 512, 1, 1]).
size mismatch for to_rgbs.4.bias: copying a param with shape torch.Size([1, 12, 1, 1]) from checkpoint, the shape in current model is torch.Size([1, 3, 1, 1]).
size mismatch for to_rgbs.4.conv.weight: copying a param with shape torch.Size([1, 12, 256, 1, 1]) from checkpoint, the shape in current model is torch.Size([1, 3, 256, 1, 1]).
Traceback (most recent call last):
File "train.py", line 418, in
generator.load_state_dict(ckpt["g"], strict=False)
File "/root/anaconda3/lib/python3.6/site-packages/torch/nn/modules/module.py", line 839, in load_state_dict
self.class.name, "\n\t".join(error_msgs)))
RuntimeError: Error(s) in loading state_dict for Generator:
size mismatch for to_rgb1.bias: copying a param with shape torch.Size([1, 12, 1, 1]) from checkpoint, the shape in current model is torch.Size([1, 3, 1, 1]).
size mismatch for to_rgb1.conv.weight: copying a param with shape torch.Size([1, 12, 512, 1, 1]) from checkpoint, the shape in current model is torch.Size([1, 3, 512, 1, 1]).
size mismatch for to_rgbs.0.bias: copying a param with shape torch.Size([1, 12, 1, 1]) from checkpoint, the shape in current model is torch.Size([1, 3, 1, 1]).
size mismatch for to_rgbs.0.conv.weight: copying a param with shape torch.Size([1, 12, 512, 1, 1]) from checkpoint, the shape in current model is torch.Size([1, 3, 512, 1, 1]).
size mismatch for to_rgbs.1.bias: copying a param with shape torch.Size([1, 12, 1, 1]) from checkpoint, the shape in current model is torch.Size([1, 3, 1, 1]).
size mismatch for to_rgbs.1.conv.weight: copying a param with shape torch.Size([1, 12, 512, 1, 1]) from checkpoint, the shape in current model is torch.Size([1, 3, 512, 1, 1]).
size mismatch for to_rgbs.2.bias: copying a param with shape torch.Size([1, 12, 1, 1]) from checkpoint, the shape in current model is torch.Size([1, 3, 1, 1]).
size mismatch for to_rgbs.2.conv.weight: copying a param with shape torch.Size([1, 12, 512, 1, 1]) from checkpoint, the shape in current model is torch.Size([1, 3, 512, 1, 1]).
size mismatch for to_rgbs.3.bias: copying a param with shape torch.Size([1, 12, 1, 1]) from checkpoint, the shape in current model is torch.Size([1, 3, 1, 1]).
size mismatch for to_rgbs.3.conv.weight: copying a param with shape torch.Size([1, 12, 512, 1, 1]) from checkpoint, the shape in current model is torch.Size([1, 3, 512, 1, 1]).
size mismatch for to_rgbs.4.bias: copying a param with shape torch.Size([1, 12, 1, 1]) from checkpoint, the shape in current model is torch.Size([1, 3, 1, 1]).
size mismatch for to_rgbs.4.conv.weight: copying a param with shape torch.Size([1, 12, 256, 1, 1]) from checkpoint, the shape in current model is torch.Size([1, 3, 256, 1, 1]).
Traceback (most recent call last):
File "train.py", line 418, in
generator.load_state_dict(ckpt["g"], strict=False)
File "/root/anaconda3/lib/python3.6/site-packages/torch/nn/modules/module.py", line 839, in load_state_dict
self.class.name, "\n\t".join(error_msgs)))
RuntimeError: Error(s) in loading state_dict for Generator:
size mismatch for to_rgb1.bias: copying a param with shape torch.Size([1, 12, 1, 1]) from checkpoint, the shape in current model is torch.Size([1, 3, 1, 1]).
size mismatch for to_rgb1.conv.weight: copying a param with shape torch.Size([1, 12, 512, 1, 1]) from checkpoint, the shape in current model is torch.Size([1, 3, 512, 1, 1]).
size mismatch for to_rgbs.0.bias: copying a param with shape torch.Size([1, 12, 1, 1]) from checkpoint, the shape in current model is torch.Size([1, 3, 1, 1]).
size mismatch for to_rgbs.0.conv.weight: copying a param with shape torch.Size([1, 12, 512, 1, 1]) from checkpoint, the shape in current model is torch.Size([1, 3, 512, 1, 1]).
size mismatch for to_rgbs.1.bias: copying a param with shape torch.Size([1, 12, 1, 1]) from checkpoint, the shape in current model is torch.Size([1, 3, 1, 1]).
size mismatch for to_rgbs.1.conv.weight: copying a param with shape torch.Size([1, 12, 512, 1, 1]) from checkpoint, the shape in current model is torch.Size([1, 3, 512, 1, 1]).
size mismatch for to_rgbs.2.bias: copying a param with shape torch.Size([1, 12, 1, 1]) from checkpoint, the shape in current model is torch.Size([1, 3, 1, 1]).
size mismatch for to_rgbs.2.conv.weight: copying a param with shape torch.Size([1, 12, 512, 1, 1]) from checkpoint, the shape in current model is torch.Size([1, 3, 512, 1, 1]).
size mismatch for to_rgbs.3.bias: copying a param with shape torch.Size([1, 12, 1, 1]) from checkpoint, the shape in current model is torch.Size([1, 3, 1, 1]).
size mismatch for to_rgbs.3.conv.weight: copying a param with shape torch.Size([1, 12, 512, 1, 1]) from checkpoint, the shape in current model is torch.Size([1, 3, 512, 1, 1]).
size mismatch for to_rgbs.4.bias: copying a param with shape torch.Size([1, 12, 1, 1]) from checkpoint, the shape in current model is torch.Size([1, 3, 1, 1]).
size mismatch for to_rgbs.4.conv.weight: copying a param with shape torch.Size([1, 12, 256, 1, 1]) from checkpoint, the shape in current model is torch.Size([1, 3, 256, 1, 1]).
Traceback (most recent call last):
File "/root/anaconda3/lib/python3.6/runpy.py", line 193, in _run_module_as_main
"main", mod_spec)
File "/root/anaconda3/lib/python3.6/runpy.py", line 85, in _run_code
exec(code, run_globals)
File "/root/anaconda3/lib/python3.6/site-packages/torch/distributed/launch.py", line 253, in
main()
File "/root/anaconda3/lib/python3.6/site-packages/torch/distributed/launch.py", line 249, in main
cmd=cmd)
subprocess.CalledProcessError: Command '['/root/anaconda3/bin/python', '-u', 'train.py', '--local_rank=3', '--batch', '16', 'dataset', '--ckpt', 'checkpoint/100000.pt']' returned non-zero exit status 1.
How can I deal with these questions?

I think you used swagan checkpoints for stylegan2.


Change protocol in AIO oneliner

Despite the fact we're doing temporary redirect to https source, we still receiving this redirect through insecure channel. And from what I can tell, curl won't upgrade the connection automatically.

I'm sorry, Dave. I'm afraid I can't do that.
The reason we had to switch to plain HTTP is that RHEL6 is stupid: its version of curl doesn't support any of the ciphers CloudFlare uses, and we can't really configure that list, CloudFlare gives no control over it.
In the end we decided to use http instead of having a separate docs entry for RHEL6. After all, the request does end up with an https connection to github.

After all, the request does end up with an https connection to github.

Unless it will get intercepted before and then we'll just running an arbitrary script with sudo.

I feel your pain, honestly, so I don't mind leaving it up for discussion. When everyone's back next week, we can decide what to do, but simply changing the protocol to https will not work: we still need to support RHEL6 somehow.

Gosh. Old operating systems :/

publish the MD5 and use something like http://jbenet.github.io/hashpipe/ in our command. This way atleast there is some security about what is being run is what StackStorm expects to run.
Btw, we should publish the checksum for sure.

I guess we should*, though serving the installer from another host supporting RHEL6 ciphers is probably a better way (providing this ciphers are actually more secure than md5 :stuck_out_tongue_winking_eye:)

I advice on SHA since it is relatively easy to forge the collision with md5

can we close this yet?

Nothing have changed really, we still have a potential for MITM right there. We need to find a way to enable proper ciphers on el6 or move redirect outside of CloudFlare on a separate host.

Can we just post the hashes as previously agreed? Both moving outside of CloudFlare and changing RHEL cipherlist aren't really worth the effort, tbh.
Let me prove my point here. If I'm able to change someone's incoming traffic during stackstorm's installation, I can:

Change the link in the docs to whatever I need, including plain http or my own gist.
Change some of the OS/pip dependency downloads.
Make StackStorm instance into a phishing login form, because hardly anybody even gets post-install root CA messages now, let alone actually uses one, people ignore warnings anyway.
And that's just off the top of my head.
Try to intercept any other insecure communication to/from server.

I'm in no way saying that we should abandon security here, just that cost of moving from CloudFlare or trying to bless an outdated OS with a new cipherlist is too much, given there are many other possible attack vectors if you can do a MITM attack on someone's machine.
And there's always good old thermorectal cryptanalysis.

And if someone cares about security a lot, they will notice hashes and will use them. It's really enough.

After some raging (mostly from my side) and a discussion with @enykeev, I think a good solution would be moving the link to a separate domain like https://install.stackstorm.com, which will not be controlled by CloudFlare. This way we can maintain our own cipherlist compatible with RHEL6 (and any other outdated systems should we decide to support them in the future), address the security concerns and still keep operational overhead to a minimum. Wdyt?

@emedvedev Let's do it!

Installer endpoint is now https://install.stackstorm.com/. The redirect is managed by cPanel at our hosting, and I modified the cipherlist for compatibility, so RHEL6 is working. Safe to merge now.
The old redirect is also working, of course.

@emedvedev Would you type up some very small docs on what is setup and where? I'd like to ensure all this is documented so it's not SPOF on you.


Check for previous/existing GitHub issues/module proposals

[X] I have checked for previous/existing GitHub issues/module proposals.

Check this module doesn't already exist in the module indexes

[X] I have checked for that this module doesn't already exist in the module indexes.

Bicep or Terraform?
Bicep
Module Classification?
Pattern Module
Module Name
avm/ptn/azd/api-container-app
Module Details
Please add a Pattern Module named avm/ptn/app/api-container-app, this module will create the following four resources:

Container App.
User Assigned Identity.
Azure Container Registry (ACR).
Key Vault.

For details, please refer to azd:
https://github.com/Azure/azure-dev/blob/main/templates/todo/common/infra/bicep/app/api-container-app.bicep
CC: @jongio
Do you want to be the owner of this module?
No
Module Owner's GitHub Username (handle)
jongio
(Optional) Secondary Module Owner's GitHub Username (handle)
No response

@Menghua1, thank you for proposing this module and thank you for your patience on triaging it! Many of us on the AVM core team have been OOF in the last couple of weeks, but we're back now! 😊
As this is categorized as a pattern module, its approval will require a more thorough assessment. We'll reach out to @jongio internally for more context and details as this proposal may require some adjustments to fit AVM's pattern definition and intent. The AVM core team will get back to you soon. Thank you for your patience!

Hi @jongio,
Thanks for requesting/proposing to be an AVM module owner!
We just want to confirm you agree to the below pages that define what module ownership means:

Team Definitions & RACI
Shared Specification (Bicep & Terraform)
Module Support

Any questions or clarifications needed, let us know!
If you agree, please just reply to this issue with the exact sentence below (as this helps with our automation 👍):
"I CONFIRM I WISH TO OWN THIS AVM MODULE AND UNDERSTAND THE REQUIREMENTS AND DEFINITION OF A MODULE OWNER"
Thanks,
The AVM Core Team
#RR


A bad FVariable config will prevent the server from loading.

So I've spent the last 10 minutes trying to figure out why the LSP wasn't starting, and it turns out there was somehow an FFlag with no assigned name or value, and I dont know how it got there?
It should probably be a good idea to ignore these "bad" fflags, if that's not possible, it could just warn to the user of the extension that there's bad flags in the config.

Can you explain further? What was your settings? We do already warn and ignore unknown FFlags

So, if you create an FFlag setting with the following config:
"luau-lsp.fflags.override": {
	"": ""
}

The debug console will throw:

After this error has happened, the language server does not start, and the user is not informed of said failure


[packagers] Update sdkman endpoints

See https://github.com/sdkman/sdkman-vendor-maven-plugin/pull/10 for more information

🎉 This issue has been resolved in v1.8.0 (Release Notes)


Issue: Failed to load plugin obsidian-checklist-plugin

When I try to enable the plugin, I receive the following error:

Failed to load plugin obsidian-checklist-plugin

OS: Windows 10 Enterprise N (Version 1909)
Obsidian version: v0.12.19
Plugin version: 1.2.3

Hmm, I'm probably going to need more details than that. Any errors in the console?

Wondering if maybe Obsidian didn't install the files properly or there was an issue with iCloud sync that either deleted or didn't properly sync one of the source files.

Tried removing and adding again once before but didn't help, but just tried there now after reading this and.. voilà? Enabled! Cheers. Wonder why it messed up in the first place? Guess you're right, iCloud Drive could well be the suspect.


feat: general implement

@Zxilly why close?

@hsluoyz Development is still in progress, I want to merge some commits from dev branch to master branch. But I make it wrong and send a PR to main repo.


2.0 Update fundamentals/app-state

2.0 changed the defaults for Temp Data in MVC
Cookie is now the default, using session requires additional service registration.

@rynowak  can you point me to a ConfigureServices sample that does this?


kubefirst local connect in a post-ingress world

i'm not clear on the need for go run . local connect in a post ingress world - is the command still needed for edge case connectivity?
the docs talk about losing connections and using this command to restore, is this still relevant with ingress? perhaps ngrok but i didn't think we restore that yet.
if we need to keep the command, the output format got a little careless on this release - shifting from

to

good point!
on a next release we should allow the user to use ngrok + atlantis when connect is called. wdty about this follow up ticket? https://github.com/kubefirst/kubefirst/issues/1115

agreed, logs are also pointing to misleading information:
log.Info().Msg("Kubefirst port forward done")
log.Info().Msg("hanging port forwards until ctrl+c is called")


Epic Games

Make the epic games version, please!

This is a PoC, it's not meant to be used

Duplicates #10

See https://github.com/QuickNET-Tech/GTAO_Booster_PoC


typo fix in docs example

A typo in a code example. I assume info in lines just above my fix is correct:
    [   -> &bl;     ]   -> &br;     &   -> &

Thanks


Caddy Reverse Proxy Config

Is there a Caddy reverse-proxy template available?  It would be extremely helpful to have one.  Thank you!

there isn't. However you can look in infrastructure_files/getting-started-with-zitadel.sh for an example.
I've modified it for my own usage:
netbird.example.net {
	reverse_proxy /* netbird-dash:80
	reverse_proxy /signalexchange.SignalExchange/* h2c://netbird-signal
	reverse_proxy /api/* netbird-mgmt
	reverse_proxy /management.ManagementService/* h2c://netbird-mgmt
	header * {
		Strict-Transport-Security "max-age=3600; includeSubDomains; preload"
		X-Content-Type-Options "nosniff"
		X-Frame-Options "DENY"
		X-XSS-Protection "1; mode=block"
		-Server
		Referrer-Policy strict-origin-when-cross-origin
	}
}

Thank you so much for pointing out that helpful source!
So then, the docker-compose.yml file would need this section added under "services":
  caddy:
    image: caddy
    restart: unless-stopped
    networks: [ netbird ]
    ports:
      - '443:443'
      - '80:80'
    volumes:
      - netbird_caddy_data:/data
      - ./Caddyfile:/etc/caddy/Caddyfile

Is that correct?
Thank you so much for your help!  I really appreciate your input.

Thank you so much for pointing out that helpful source!
So then, the docker-compose.yml file would need this section added under "services":
  caddy:
    image: caddy
    restart: unless-stopped
    networks: [ netbird ]
    ports:
      - '443:443'
      - '80:80'
    volumes:
      - netbird_caddy_data:/data
      - ./Caddyfile:/etc/caddy/Caddyfile

And under "volumes" add:
 netbird_caddy_data:
Besides that, are there any other config changes you made for caddy to work?
Thank you so much for your help! I really appreciate your input.

Is this conf working with caddy ?

@sfnemis As far as the Compose file, yes that works with Caddy.  I've pasted my sanitized Compose file below.  I also pasted the CaddyFile config I'm using.  Everything is working with this setup, except that all my peers are getting an identical private IP set as their "Public IP" (like <IP_ADDRESS>).  I'm not sure why, and I have an open bug submission here on it.   Anyway, here's what I've got so far!  I'll post again when we get the IP issue figured out.
Here is my Caddyfile, from NetBird's default configs:
{
  debug
	servers :80,:443 {
    protocols h1 h2c
  }
}

(security_headers) {
    header * {

        Strict-Transport-Security "max-age=3600; includeSubDomains; preload"
        X-Content-Type-Options "nosniff"
        X-Frame-Options "DENY"
        X-XSS-Protection "1; mode=block"
        -Server
        Referrer-Policy strict-origin-when-cross-origin
    }
}

:80, REDACTED.REDACTED.com:443 {
    import security_headers
    reverse_proxy /signalexchange.SignalExchange/* h2c://signal:10000
    reverse_proxy /api/* management:80
    reverse_proxy /management.ManagementService/* h2c://management:80
    reverse_proxy /* dashboard:80
}

And here's my compose.yml, again just built on NetBird's default:
version: "3"
services:
 # Caddy reverse proxy
  caddy:
    image: caddy:latest
    restart: unless-stopped
    networks:
      - netbird
    ports:
      - '443:443'
      - '80:80'
    volumes:
      - netbird_caddy_data:/data
      - ./Caddyfile:/etc/caddy/Caddyfile

  #UI dashboard
  dashboard:
    image: netbirdio/dashboard:latest
    restart: unless-stopped
    networks:
      - netbird
    environment:
      # Endpoints
      - NETBIRD_MGMT_API_ENDPOINT=https://REDACTED.REDACTED.com:443
      - NETBIRD_MGMT_GRPC_API_ENDPOINT=https://REDACTED.REDACTED.com:443
      # OIDC
      - AUTH_AUDIENCE=REDACTED
      - AUTH_CLIENT_ID=REDACTED
      - AUTH_CLIENT_SECRET=
      - AUTH_AUTHORITY=https://REDACTED.okta.com
      - USE_AUTH0=false
      - AUTH_SUPPORTED_SCOPES=openid profile email
      - AUTH_REDIRECT_URI=/auth
      - AUTH_SILENT_REDIRECT_URI=/silent-auth
      - NETBIRD_TOKEN_SOURCE=idToken

  # Signal
  signal:
    image: netbirdio/signal:latest
    restart: unless-stopped
    networks:
      - netbird

  # Management
  management:
    image: netbirdio/management:latest
    restart: unless-stopped
    networks:
      - netbird
    depends_on:
      - dashboard
    volumes:
      - netbird-mgmt:/var/lib/netbird
      - ./management.json:/etc/netbird/management.json
    command: [
      "--port", "80",
      "--log-file", "console",
      "--log-level", "info",
      "--disable-anonymous-metrics=false",
      "--single-account-mode-domain=REDACTED.REDACTED.com",
      "--dns-domain=netbird.selfhosted",
      "--idp-sign-key-refresh-enabled"
]

  # Coturn
  coturn:
    image: coturn/coturn:latest
    restart: unless-stopped
    domainname: REDACTED.REDACTED.com
    volumes:
      - ./turnserver.conf:/etc/turnserver.conf:ro
    network_mode: host
    command:
      - -c /etc/turnserver.conf

volumes:
  netbird-mgmt:
  netbird_caddy_data:

networks:
  netbird:

Maybe it helps somebody
Using Azure AD as IdP and the Safari Browser i got the error
AADSTS50011: The reply url specified in the request does not match the reply
because Safari calles /auth using http.
I added a rule catching all http requests and redirecting /auth to https manually and
also needed to do the same for the dashboard otherwise the screen would just be blank.
http://<YOUR_DOMAIN> {
@http protocol http
handle_path /auth {
	redir @http https://{host}{uri} html
}

handle_path / {
	redir @http https://{host}{uri}
}

}
:80, :443 {
import security_headers
reverse_proxy /signalexchange.SignalExchange/* h2c://signal:10000
reverse_proxy /api/* management:80
reverse_proxy /management.ManagementService/* h2c://management:80
reverse_proxy /* dashboard:80
}

@pomology, I've been banging my head against this for some time now. I tried to replicate what you did but to no avail. I get either a blank screen or the dashboard is hung on loading... Did you have to change any ports in the setup.env or base.setup.env files? I have a feeling the settings in there are conflicting with the docker-compose.yml and Caddyfile. Also, I don't see anything in your files referencing the relay service... are you not using it ?
Any help is greatly appreciated, thanks !!!

@PapaZigE
The issue I was having was that I was trying to run this in rootless docker which requires a lot of extra config to make work.  As long as you run SELinux, there is dubious benefit to rootless docker in this case, as long as you don't have other containers running other services on the machine.
What IDP are you using?  This setup above uses Okta, if you are using Zitadel, the install works out of the box on rootfull Docker.  For an Okta setup, there are also additional changes needed in the Management.json file, beyond anything in the setup.env config.
You can SANITIZE your code and upload it to ChatGPT for feedback as well.  Just upload your sanitized management.json, caddyfile, and compose.yml and ask for feedback.  It works amazingly well.


Android Geolocator will timeout returning a location if Location Information set to Phone Only (GPS)

When using the Geolocator in an Android application, if the location information setting is set to only use Phone Only (GPS), the locator will eventually timeout and return a null geoposition.
When using WiFi/Mobile or the high accuracy option, the position is returned immediately.
Raised via face-to-face communication.

I've done some testing around this and it isn't actually a bug. The user was indoors. Testing this same functionality but outdoors worked as expected.


Http2Adapter will not receive the full response

This is an appendum to #317 with a 100% reproducible test file and also a fix, that worked at least for me.
Issue Info

Info
Value

Platform Name
Dart VM

Platform Version
2.7.1

Dio Version
3.0.9, master

Repro rate
100%

Repro with our demo prj
yes

Demo project link
see test file below

Issue Description and Steps
~> dart test.dart
Unhandled exception:
DioError [DioErrorType.DEFAULT]: FormatException: Unterminated string (at character 149204)
..."Nuss Makronen","Eierschwämmchen","Pilaw","Seeberger Soft-Aprikosen","Klein
                                                                              ^

#0      DioMixin._dispatchRequest (package:dio/src/dio.dart:963:7)
<asynchronous suspension>
#1      DioMixin._request._interceptorWrapper.<anonymous closure>.<anonymous closure>.<anonymous closure> (package:dio/src/dio.dart:849:37)
#2      DioMixin.checkIfNeedEnqueue (package:dio/src/dio.dart:1117:22)
#3      DioMixin._request._interceptorWrapper.<anonymous closure>.<anonymous closure> (package:dio/src/dio.dart:846:22)
#4      new Future.<anonymous closure> (dart:async/future.dart:176:37)
#5      Timer._createTimer.<anonymous closure> (dart:async-patch/timer_patch.dart:23:15)
#6      _Timer._runTimers (dart:isolate-patch/timer_impl.dart:384:19)
#7      _Timer._handleMessage (dart:isolate-patch/timer_impl.dart:418:5)
#8      _RawReceivePortImpl._handleMessage (dart:isolate-patch/isolate_patch.dart:174:12

The server is HTTP2 compatible and the backend correctly provides a Content-Length header. The received bytes is usually ~30-60 kilobytes less of what is expected. Total response size is around 200kb.
Test file
import 'package:dio/dio.dart';
import 'package:dio_http2_adapter/dio_http2_adapter.dart';

void main() async {
  final dio = Dio()
    ..httpClientAdapter = Http2Adapter(ConnectionManager());

  await dio.get('https://au3.de/reduce-food-waste/ingredients/list');
}

Possible fix
I've checked the example setup for http2 (https://github.com/dart-lang/http2/blob/master/example/display_headers.dart) and noticed that this example worked fine.
After a few tries, I noticed that http2_adapter used endStream: false. With the original true value from the http2 example, the request is completely received.

I mean it is still an unfixed issue lol.

This issue is still reproducible in latest version, please try to prioritise it.

still an issue

Please create a reproducible example.

The previous condition, either endStream: false or every provided link is outdated. We cannot proceed with outdated information. Please submit new issues if a new reproducible example works.


🐛 Bug Report: plugins/user-settings with default auth provider settings shouldn't render providers that are irrelevant to the current environment

📜 Description
The plugin user-settings with default auth provider settings shouldn't render providers that are irrelevant to the current environment.
Config file:
auth:
  environment: development
  providers:
    guest:
      development: {}

Environment variables:
APP_CONFIG_auth_providers_okta_staging_clientId=<REDACTED>
APP_CONFIG_auth_providers_okta_staging_clientSecret=<REDACTED>

👍 Expected behavior
Configured providers:

guest

👎 Actual Behavior with Screenshots
Configured providers:

guest
okta

👟 Reproduction steps
Steps to reproduce are described above - use the provided configuration to run backstage.
📃 Provide the context for the Bug.
Affected plugin: https://github.com/backstage/backstage/tree/master/plugins/user-settings
🖥 Your Environment
No response
👀 Have you spent some time to check if this bug has been raised before?

[X] I checked and didn't find similar issue

🏢 Have you read the Code of Conduct?

[X] I have read the Code of Conduct

Are you willing to submit PR?
Yes I am willing to submit a PR!

Hey @cecobask, thanks for the report!
I think the best thing to do is to make the user-settings plugin ask the auth-backend which providers are actually installed instead of trying to parse the configuration file as those can differ especially in split deployment scenarios.

Hi @jhaals, I agree with the suggested approach. Can I take a stab at this?

assigned to you @cecobask! Thanks for looking into it 🙏

Thanks! I'm a newbie here and was having trouble figuring out how to request this information from the auth-backend.
Could you provide an example of a plugin that communicates with the auth-backend and I will take it from there?

Sorry @cecobask,  we took a closer look, and at the moment it seems this would be tricky to achieve because the auth-backend knows the providers, but it doesn't know which environments each provider supports.

From my investigation, accessing the configuration from the frontend app is not helpful either.
It only has visibility of the auth providers list, but not its nested properties, which is where the auth envs are stored.
I will be happy to help, just need a little bit of guidance on understanding how it can be fixed.


Ad render ID not set on custom audiences

Hello, I am currently trying to run a complete b and a auction using the privacy sandbox apis but unfortunately can't complete it successfully. What baffles me is this. Running an on-device auction doesn't cause any issues and succeeds, but not so much with the same inputs when I tried to do a b and a one. Upon inspecting the logs I can see that during both auctions the ad-render-id of a custom audience isn't being inserted in the internal db, but in one case that doesn't make a difference and in the other it does.
I saw that there's a related issue but I couldn't find this pre-release image in the list of available images to download from using sdkmanager.
I have two questions

Why isn't the ad-render-id inserted ?
Why does an ondevice auction succeed without it but a ba doesn't ?

On-Device-Auction
--------------------------------------------------------------------------------
V  Joining custom audience
V  Requested CA to join: CustomAudience{
        mBuyer=remerge.sb,
        mName='53098,
        mActivationTime=2024-10-08T08:15:30.123Z,
        mExpirationTime=2024-11-18T10:15:30.123Z,
        mDailyUpdateUri=https://remerge.sb/daily-update?partner=remerge&token=encoded_token,
        mUserBiddingSignals={"budget__id":"11","events":[{"app_open":9,"purchase":1,"put_to_cart":3}],"last_seen":"1711099730","total_revenue":"100_000"},
        mTrustedBiddingData=android.adservices.customaudience.TrustedBiddingData@7b00073b,
        mBiddingLogicUri=https://remerge.sb/bidding/js,
        mAds=[
            AdData{mRenderUri=https://remerge.sb/ads/12345, mMetadata='{"h":540,"w":720}', mAdCounterKeys=[], mAdFilters=null, mAdRenderId='128699660'},
            AdData{mRenderUri=https://remerge.sb/ads/23456, mMetadata='{"h":120,"w":720}', mAdCounterKeys=[], mAdFilters=null, mAdRenderId='129653965'}
        ],
        mAuctionServerRequestFlags=0
    }
V  Inserting CA in the DB: DBCustomAudience{
        mOwner='com.remerge.step',
        mBuyer=remerge.sb,
        mName='53098',
        mExpirationTime=2024-11-18T10:15:30.123Z,
        mActivationTime=2024-10-16T14:52:08.154158Z,
        mCreationTime=2024-10-16T14:52:08.154158Z,
        mLastAdsAndBiddingDataUpdatedTime=2024-10-16T14:52:08.154158Z,
        mUserBiddingSignals={"budget__id":"11","events":[{"app_open":9,"purchase":1,"put_to_cart":3}],"last_seen":"1711099730","total_revenue":"100_000"},
        mTrustedBiddingData=DBTrustedBiddingData{mUri=https://remerge.sb/tbs/get, mKeys=[53098__is_bidding, 53098__rules, 53098__ads, 53098__use_aspect_ratio]},
        mBiddingLogicUri=https://remerge.sb/bidding/js,
        mAds=[
            DBAdData{mRenderUri=https://remerge.sb/ads/12345, mMetadata='{"h":540,"w":720}', mAdCounterKeys=[], mAdFilters=null, mAdRenderId='null'},
            DBAdData{mRenderUri=https://remerge.sb/ads/23456, mMetadata='{"h":120,"w":720}', mAdCounterKeys=[], mAdFilters=null, mAdRenderId='null'}
        ],
        mDebuggable=true,
        mAuctionServerRequestFlags=0
    }
V  Completed filtering and validation.
V  Beginning Ad Selection Orchestration
V  Start the bidding process.
V  The bidding process start timestamp is 5340880
V  With number of buyers requested: 1
V  End the get-buyers-custom-audience process.
V  The get-buyers-custom-audience process ends at 5340881 with num of buyers fetched 1:
V  Starts the run-ad-bidding process.
V  Entering bidding NO of Ads: 2:, NO of CAs : 1
V  Created mapping for #1 buyers
V  Invoking bidding for #1 buyers
V  Running bid for #1 Custom Audiences for buyer: remerge.sb
V  Fetching trusted bidding data for buyer: remerge.sb
V  Invoking bidding for CA: 53098
V  Running Ad Bidding for CA : 53098
V  Start the get-buyer-decision-logic process.

BA-Auction
--------------------------------------------------------------------------------
V  Joining custom audience
V  Requested CA to join: CustomAudience{
        mBuyer=remerge.sb,
        mName='53098,
        mActivationTime=2024-10-08T08:15:30.123Z,
        mExpirationTime=2024-11-18T10:15:30.123Z,
        mDailyUpdateUri=https://remerge.sb/daily-update?partner=remerge&token=encoded_token,
        mUserBiddingSignals={"budget__id":"11","events":[{"app_open":9,"purchase":1,"put_to_cart":3}],"last_seen":"1711099730","total_revenue":"100_000"},
        mTrustedBiddingData=android.adservices.customaudience.TrustedBiddingData@7b00073b,
        mBiddingLogicUri=https://remerge.sb/bidding/js,
        mAds=[
            AdData{mRenderUri=https://remerge.sb/ads/12345, mMetadata='{"h":540,"w":720}', mAdCounterKeys=[], mAdFilters=null, mAdRenderId='128699660'},
            AdData{mRenderUri=https://remerge.sb/ads/23456, mMetadata='{"h":120,"w":720}', mAdCounterKeys=[], mAdFilters=null, mAdRenderId='129653965'}
        ],
        mAuctionServerRequestFlags=0
    }
V  Inserting CA in the DB: DBCustomAudience{
        mOwner='com.remerge.step',
        mBuyer=remerge.sb,
        mName='53098',
        mExpirationTime=2024-11-18T10:15:30.123Z,
        mActivationTime=2024-10-16T14:32:46.552227Z,
        mCreationTime=2024-10-16T14:32:46.552227Z,
        mLastAdsAndBiddingDataUpdatedTime=2024-10-16T14:32:46.552227Z,
        mUserBiddingSignals={"budget__id":"11","events":[{"app_open":9,"purchase":1,"put_to_cart":3}],"last_seen":"1711099730","total_revenue":"100_000"},
        mTrustedBiddingData=DBTrustedBiddingData{mUri=https://remerge.sb/tbs/get, mKeys=[53098__is_bidding, 53098__rules, 53098__ads, 53098__use_aspect_ratio]},
        mBiddingLogicUri=https://remerge.sb/bidding/js,
        mAds=[
            DBAdData{mRenderUri=https://remerge.sb/ads/12345, mMetadata='{"h":540,"w":720}', mAdCounterKeys=[], mAdFilters=null, mAdRenderId='null'},
            DBAdData{mRenderUri=https://remerge.sb/ads/23456, mMetadata='{"h":120,"w":720}', mAdCounterKeys=[], mAdFilters=null, mAdRenderId='null'}
        ],
        mDebuggable=true,
        mAuctionServerRequestFlags=0
    }
V  Collected 2 active CAs from device
V  Checking Auction Server eligibility for Custom Audience 53098
V  At least one ad should have should have a non-null and non-empty ad render id but none present for '53098'
V  Checking Auction Server eligibility for Custom Audience 53098
V  At least one ad should have should have a non-null and non-empty ad render id but none present for '53098'
V  After auction server filtering : 0 active CAs from device
V  After ad filtering : 0 active CAs from device
V  Created BuyerInput proto for 0 buyers
V  Ad render id enabled flag is false

Something else that I've noticed in the logs is the following line
V  Ad render id enabled flag is false

Is there a specific flag that we can use to be able to set this ad render id ? I've tried searching for such a flag but couldn't find anything on the matter.


[OpenAI] Module '"@azure-rest/core-client"' has no exported member 'OperationOptions'

After updating to version 1.0.0-beta.5, the module @azure-rest/core-client no longer has an exported member OperationOptions. Additionally, i don't know if it's related but there is a TypeError occurring:
TypeError: (0 , import_core_client2.operationOptionsToRequestParameters) is not a function
    at _getChatCompletionsSend (/var/task/app.js:47397:182)
    at _getChatCompletionsSendX (/var/task/app.js:47501:331)
    at listChatCompletions (/var/task/app.js:47465:20)
    at OpenAIClient.listChatCompletions (/var/task/app.js:47589:12)

Thanks for opening this report! OperationOptions was added in<EMAIL_ADDRESS>could you please upgrade it to that version until I ship the fix in the next release of @azure/openai?

Thanks for opening this report! OperationOptions was added in<EMAIL_ADDRESS>could you please upgrade it to that version until I ship the fix in the next release of @azure/openai?

Sure. Thanks for the support.

This has been addressed in <EMAIL_ADDRESS>


Remove Frozen Pulls UI

We used to have a list of pull requests that were started but stopped due to incomplete specs or other reasons.
We started following a scrum/agile project process and frozen pulls just don't really happen anymore.
Do This
Remove all aspects of the frozen pull UI.

Remove documentation from README.md
Remove less rule from views/standard/less/components/header.less
Remove the frozen_count field from the default export in views/standard/spec/pageIndicators.js

Hey @copperwall ! I'll take this one.

Okay, go for it!


Update secure Kubernetes instructions with RBAC support

This enables them to work on more clusters (including non-GKE clusters)
by default.
This PR replaces https://github.com/cockroachdb/docs/pull/2271.

This change is

http://cockroach-docs-review.s3-website-us-east-1.amazonaws.com/609afa2852f007828c95817d1fa8282546946b2d/


Update Ollama to at least 0.2.1

I'd like to leverage the new added v1/models endpoint that was added last week. Could you please rebuild/publish a new image on Quay.io based on Ollama 0.2.1.
https://github.com/rh-aiservices-bu/llm-on-openshift/blob/1b864db3eb23a4fdaa7f2c57ab58ad2a25711a94/llm-servers/ollama/Containerfile#L2

Fixed in #79 , although I went straight to 0.2.8


Correct a typo in README

Merged! Thank you.

Hi Tianyi,
I have noticed that current version of this repo is different from former version few days ago. Because some functions in normalization.py I saw disappear now.  Seems like a rollback? Could you share what it is the difference between these two versions? Do you plan to recover/complete the full version?😂
Thx and looking forward to your reply.
Best regards,
Juncheng
On 14 Mar 2019, 11:47 PM +0800, Tianyi<EMAIL_ADDRESS>wrote:

Merged! Thank you.
—
You are receiving this because you authored the thread.
Reply to this email directly, view it on GitHub, or mute the thread.

Hi Juncheng,
I apologize for the confusion. I simply removed other normalizations because they are not used. The expected behavior of the sample script does not have any difference (if you want to replicate the paper reported result).
Those normalization functions were there because I was doing some ablations. My preliminary result showed that AugNormAdj works consistently better so I didn't use any other normalization function.

Hi Tianyi,
Thanks for the reply! I not only want to replicate the main results but also want to exploring the ablations setting/results for academic research purpose. If you don’t mind, could you send me a former version? My email is<EMAIL_ADDRESS>This is a really impressive and interesting work. If we have any further work/outcome based on this, we will definitely cite your paper. Thanks a lot.
Best regards,
Juncheng
On 15 Mar 2019, 1:14 AM +0800, Tianyi<EMAIL_ADDRESS>wrote:

Hi Juncheng,
I apologize for the confusion. I simply removed other normalizations because they are not used. The expected behavior of the sample script does not have any difference (if you want to replicate the paper reported result).
Those normalization functions were there because I was doing some ablations. My preliminary result showed that AugNormAdj works consistently better so I didn't use any other normalization function.
—
You are receiving this because you authored the thread.
Reply to this email directly, view it on GitHub, or mute the thread.

Hi Juncheng,
Thanks for letting me know. Given that this may be a common request, I will clean the codes and push to a separate branch later today. You will see a couple more ablation choices regarding how to engineer better features with the propagation.
We will include these additional results in the supplementary materials of our next version of the paper.

Really appreciate! Looking forward to your next version of the paper!
Best regards,
Juncheng
On 15 Mar 2019, 1:39 AM +0800, Tianyi<EMAIL_ADDRESS>wrote:

Hi Juncheng,
Thanks for letting me know. Given that this may be a common request, I will clean the codes and push to a separate branch later today. You will see a couple more ablation choices regarding how to engineer better features with the propagation.
We will include these additional results in the supplementary materials of our next version of the paper.
—
You are receiving this because you authored the thread.
Reply to this email directly, view it on GitHub, or mute the thread.

See https://github.com/Tiiiger/SGC/tree/ablation
This branch is not entirely cleaned up. Feel free to open an issue if you have questions or if the code doesn't work.

Got it. Thank you so much!


feat(common): add VisMut

I hereby agree to the terms of the RisingWave Labs, Inc. Contributor License Agreement.
What's changed and what's your intention?

Checklist

[ ] I have written necessary rustdoc comments
[ ] I have added necessary unit tests and integration tests
[ ] I have added fuzzing tests or opened an issue to track them. (Optional, recommended for new SQL features #7934).
[ ] My PR contains breaking changes. (If it deprecates some features, please create a tracking issue to remove them in the future).
[ ] All checks passed in ./risedev check (or alias, ./risedev c)
[ ] My PR changes performance-critical code. (Please run macro/micro-benchmarks and show the results.)

[ ] My PR contains critical fixes that are necessary to be merged into the latest release. (Please check out the details)

Documentation

[ ] My PR needs documentation updates. (Please use the Release note section below to summarize the impact on users)

Release note
If this PR includes changes that directly affect users or other significant modifications relevant to the community, kindly draft a release note to provide a concise summary of these changes. Please prioritize highlighting the impact these changes will have on users.

What is this for? 👀
Actually I was planning to replace all Vis by Bitmap after #9329.

It is a part of https://github.com/risingwavelabs/risingwave/pull/11070, which wants to modify the Vis in place and avoid clone


Why rclone copy checks file list from S3 bucket?

Probably, one of the common use cases for rclone with S3 is to upload new files from local folder, which could be done via cron.daily like rclone copy --max-age=25h <local> <s3:bucket>.
The problem with this case is that rclone copy first checks the bucket file list, which could be very expensive operation (more than 1 hour for my case), while it could just start checking and uploading files from local folder. What is wrong?

Yes you are right.  This is the same issue as #8 - I'm in the process of fixing this and will post a beta when it is ready.

Here is a beta with a --no-traverse flag which should help.
Let me know how you get on.
http://pub.rclone.org/v1.30-11-g22ab4e4β/

That's great!
Now my daily backup job completes in 10 minutes. Was over 90 minutes before.

Could this work also for ACD?

@lorenzoferrarajr It will work for all the remotes, yes.

Thank you @ncw, the --no-traverse option works great also on Amazon Cloud Drive.


add ability to add to lru cache without eviction, fix ingest bug

go-pilosa keeps an LRU cache of the row key to id mapping so that it
doesn’t have to look it all up from Pilosa every time. It first checks
the cache to see which keys it needs to look up, then looks up from
Pilosa and adds to the cache. Unfortunately, it was possible for the
newly added keys to evict ones which were previously in the
cache. When it went to use them, it couldn’t find them and errored
out, which eventually caused ingest to deadlock (when using PDK).

hmm, the LRU is supposed to be created with the size of the batchSize so it should have enough capacity without evicting. I'll check this deeper.

Yes, but if the cache has size 1000, and a batch comes in with 500 new keys and 500 existing keys, the 500 new keys will be looked up and added. While they are being added, 500 existing keys will be removed, and if there is any overlap between the removed keys and the keys which were existing when we first checked, then some of the keys which were originally existing will not be present when the cache is used later in the function.


nginx-proxy + docker-letsencrypt-nginx-proxy-companion -> SSL errors

I have setup a nginx-proxy + docker-letsencrypt-nginx-proxy-companion and, finally, when things seem to be going well, I get a SSL error. My setup is like this:
nginx-proxy points to my nginx container that server my app. I have the variables set like this:
VIRTUAL_PROTO=https
VIRTUAL_PORT=443
VIRTUAL_HOST=app.italomaia.com
LETSENCRYPT_HOST=app.italomaia.com
<EMAIL_ADDRESS>
The problem is my nginx server serving my application is getting me the following log:
no "ssl_certificate" is defined in server listening on SSL port while SSL handshaking
While nginx from nginx proxy gives me this:
"GET / HTTP/2.0" 502 173 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:54.0) Gecko/20100101 Firefox/54.0"
2017/07/25 04:40:45 [error] 11#11: *1 peer closed connection in SSL handshake (104: Connection reset by peer) while SSL handshaking to upstream, client: <IP_ADDRESS>, server: app.italomaia.com, request: "GET / HTTP/2.0", upstream: "https://<IP_ADDRESS>:443/", host: "app.italomaia.com"

My app's nginx has the following configuration for SSL support:
listen 443 ssl http2;
listen [::]:443 ipv6only=on ssl http2;

And it does not have access to the certificates, like nginx-proxy nginx container does nor any other parameter. What am I missing?

For my understanding you want to use letsencrypt for the public side. But you also want to secure your private docker network. What kind of certificate do you use to secure this net?


RTV development is shutting down

RTV development is shutting down
Hi, I'm the author and sole maintainer of RTV (https://github.com/michael-lazar/rtv).
This is an official announcement that I will no longer be maintaining this project.
Why?
Lately, RTV has stopped being fun for me to work on. I suspect this is the typical burnout that many open source maintainers face. I have a limited amount of free time, and other projects that I would rather be spending it on.
More concerning, I no longer wish to support reddit as a platform. Widespread astroturfing, manufactured controversy, politics, bullying, incessant nitpicking and arguing. I don't like how people treat each other on the platform, and I don't like how it makes me feel when I use it.
So I'm making a clean break and moving on to other things that make me happy.
What will happen to RTV?
Nothing, the GitHub repo will remain as it is today. I am simply going to stop responding to issues and pull requests. I suspect that many people will continue to use the latest release of RTV for some time, until reddit inevitably breaks their API. I may archive the repo sometime in the future.
I will retain access to the PyPI repo and will not publish any new releases. I don't have any involvement in the other package repositories. It's up to those maintainers to decide how to handle this.
I will not be offering any future security patches or bugfixes.
For those who want to continue development, I suggest that forking is the appropriate course of action. I support anyone who wants to fork this project, provided that you follow to these guidelines:

Change the name of your fork, so people don't confuse it with this project (fun fact, the name "Reddit Terminal Viewer" is a direct violation of reddit's usage policy).
Attribute RTV as the source and provide a link back to this project's GitHub repo.

Why not transfer ownership to someone else?
Frankly, I don't want to put the work into vetting a new maintainer or transferring ownership to an organization. Stuff like this scares me.
Forking is nice because it allows the new maintainer to establish their own trust and reputation within the community. It's also nice because it requires zero involvement from myself. I acknowledge that this is inconvenient for the average RTV user. Change is always annoying, especially when you have no control over it.
Thanks
I would like to say thank you to everyone who interacted positively via the issue tracker, pull requests, email, saythanks.io, reddit, and other channels. I look forward to building more things together in the future!

Oh, that's really sad... but I can understand you. If the project doesn't satisfy you anymore, it's the right thing to do! I've known and used rtv for many years. It was a great project! Thank you for putting all that effort in it!
Unfortunately, I've only recently started to contribute to rtv, so I have some open PRs that did not make it into that project: https://github.com/michael-lazar/rtv/pull/684, https://github.com/michael-lazar/rtv/pull/688 and https://github.com/michael-lazar/rtv/pull/691. I hope that we can establish a successful fork.

@goggle Thanks! Sorry about those PRs. It was nothing personal or a knock against your code, just bad timing.

@michael-lazar it's been real. Thanks for this great project

Just a user, but I am very thankful for all your work and effort. It's been an excellent project.
Hope you find your time better used in more productive, satisfying and gratifying things. Thanks again!

Thank you for your great work. I only recently started using rtv and have been really enjoying it.
I feel like rtv makes the platform more tolerable, in a browser I would find myself endlessly scrolling /all/ and that rarely leads anywhere good. Now I just have a couple multis setup with some subs I enjoy and check in on them occasionally with rtv.

Thank you for the work you did with RTV,it was a excellent terminal based reddit tool.
As far as reddit goes,the increasing no of "normal" folks moving to reddit from sites like facebook imo is the reason for its downfall.It used to be a great community/knowledge resouce especially for hobbies and whatnot sadly with "geek/nerd is the new cool" thing destroying everything in its path,reddit too seems to have fallen.

I've enjoyed RTV very much. Thanks for all the work you've done on it.

Thank you for the work you did with RTV! It's a great thing you've made here.

Your concerns for the platform are valid. Thanks for making RTV!

Can't blame you, I really liked to have a low distraction client that runs great on RPi. Have fun with your next project!

That’s too bad, but understandable.
Are you going to archive this repo? Makes it clearer that it’s no longer being maintained.

@vor0nwe He answered that question:

Nothing, the GitHub repo will remain as it is today. I am simply going to stop responding to issues and pull requests. I suspect that many people will continue to use the latest release of RTV for some time, until reddit inevitably breaks their API. I may archive the repo sometime in the future.

Its sad that the project is being shut down. But I am sure the source code will help many new comers learn many things about programming.

Thank you so much for your work over the years! After the redesign of reddit, I put rtv on almost all of my systems because of the clean interface.

Thank you so much for your work, this is totally understandable. Who knows how long it'll be before reddit closes off their API and goes the way of twitter and FB.
For anyone else interested, I've been building  a federated reddit alternative called Lemmy intended to work in the fediverse, and have an open ticket for someone to fork RTV to get a working command line crest for it.

Please consider adding the project to the Code Shelter, that way someone vetted might pick it up at some point.

Convenient keyboard shortcuts, intuitive distraction free interface, help for commands, ease of use, colors for titles, easiest way to toggle threads, and many more useful features. I thank you for all of this! Wishing you success in your next productive project 👍 You've set an awesome example for clean distraction free command line interfaces. Loads to learn from your work 👍

Great project, such a shame that it has come to an end but it is completely understandable. Do you think in the future you could post 1 or 2 forks you deem worthy on your README?

Sad to see you leave the project and it's completely understandable; at some point it becomes a chore that is no longer enjoyable. We are grateful for RTV and wish you the best!

Really sad to hear. I use this app on a daily basis. I do understand your reasons. Reddit isn't getting better, but it does bring me good information on specific subjects. I hope someone else can fork it and continue the great work you have done so far.

Great project, such a shame that it has come to an end but it is completely understandable. Do you think in the future you could post 1 or 2 forks you deem worthy on your README?

Absolutely! People are also welcome to use this project's issue tracker to promote alternative projects that they're working on.

I love this application as it makes reddit so much better to use. Thank you so much for making it. I can understand your reasons to no longer support it. I hope the development will continue in another fork, I would really like this application to become platform independent and support not just reddit but every other website like it: hackernews, voot, raddle, saidit, etc.

Darn, I came to check up on the status of the project after having used it last year. Hopefully someone forks and continue on.

@adam-lee I'm maintaining a fork here

<3 thanks for everything.

If you ever want to transfer ownership to someone our little community (tilde.club) would happily take it on..  But unlikely that you'd do that as you stated, I have put it on our github:
https://github.com/tildeclub/ttrv
Thanks for great software over the years :)

To be honest, I’m glad Michael still owns the pypi/pip package and github repo.

It was awesome trying it out.

I've reinstalled RTV now and see this
Please press F


ARMv8-A MMU support

Add MMU support for ARMv8A. As of now, 4kB translation granule is supported.
Regions to be mapped with specific attributes are required to be
at least 4kB aligned and can be provided through platform file(soc.c).
Patches have been verified on Broadcom SoC with Cortex-A72 and on qemu_cortex_a53.
Fixes #22410

@Abhishek-brcm mind shortening the lines in your commit message as shown here?

LGTM now. Thanks.

+1

Support for NEW LIB: Currently initialization of MMU runs by using “SYS_INIT(arm_mmu_init, PRE_KERNEL_1,….”.
This initialization is invoked after zeroing of bss and copy of data sections. For correct NEW LIB support we need MMU working before care of bss and data sections.

@timork This should only be a problem when the section start or end address is unaligned (newlib memcpy and memset functions have no reason to perform unaligned accesses when the memory addresses are aligned).
One exception is if the newlib nano variant is used. The nano memcpy implementation, for instance, always produces unaligned memory accesses:
https://github.com/bminor/newlib/blob/d8ccbcdaccff12ca9509358d31114515acd20590/newlib/libc/string/memcpy.c#L53-L64
Noting that there is absolutely no reason to use newlib nano on AArch64, it might make the most sense to simply disallow CONFIG_NEWLIB_LIBC_NANO=y when CONFIG_ARM64=y.

@stephanosio
On aarch64 asm optimized memory operations are used:
https://github.com/bminor/newlib/blob/d8ccbcdaccff12ca9509358d31114515acd20590/newlib/libc/machine/aarch64/memcpy.S
The assumptions on this impl. is unaligned accesses machine suporrt.

@stephanosio
On aarch64 asm optimized memory operations are used:
https://github.com/bminor/newlib/blob/d8ccbcdaccff12ca9509358d31114515acd20590/newlib/libc/machine/aarch64/memcpy.S

@timork For newlib nano, even on AArch64, the dumb never-aligned byte-level copy implementation is used:
https://github.com/bminor/newlib/blob/d8ccbcdaccff12ca9509358d31114515acd20590/newlib/libc/machine/aarch64/memcpy.S#L61-L63

The assumptions on this impl. is unaligned accesses machine suporrt.

Unaligned accesses generate fault when the MMU is disabled, which I thought was the rationale behind why you said "For correct NEW LIB support we need MMU working before care of bss and data sections."

@stephanosio

Unaligned accesses generate fault when the MMU is disabled, which I thought was the rationale behind why you said "For correct NEW LIB support we need MMU working before care of bss and data sections."

Yes

Noting that there is absolutely no reason to use newlib nano on AArch64, it might make the most sense to simply disallow CONFIG_NEWLIB_LIBC_NANO=y when CONFIG_ARM64=y.

Except cases when perf. of memory operations routines is important.

Noting that there is absolutely no reason to use newlib nano on AArch64, it might make the most sense to simply disallow CONFIG_NEWLIB_LIBC_NANO=y when CONFIG_ARM64=y.

We are already doing that with https://github.com/zephyrproject-rtos/zephyr/blob/master/cmake/toolchain/zephyr/0.11/Kconfig#L8

Noting that there is absolutely no reason to use newlib nano on AArch64, it might make the most sense to simply disallow CONFIG_NEWLIB_LIBC_NANO=y when CONFIG_ARM64=y.

We are already doing that with https://github.com/zephyrproject-rtos/zephyr/blob/master/cmake/toolchain/zephyr/0.11/Kconfig#L8

@carlocaione In that case, using newlib should not be a problem as long as the section addresses are aligned.

@ehudmarvell Could you check if the latest implementation works on your H/W platform? (especially when newlib is enabled)

The failure on tests/application_development/libcxx is really suspicious since there is no clear indication on why it is failing and it seems that they are timing out without even starting QEMU.

The failure on tests/application_development/libcxx is really suspicious since there is no clear indication on why it is failing and it seems that they are timing out without even starting QEMU.

I have verified qemu_cortex_a53 boot. It would be great if someone with knowledge on Shippable test/sanitycheck can help resolve this.

I think that the tests are failing because they are hitting https://github.com/zephyrproject-rtos/zephyr/pull/22446/commits/60b65208307792afa61193af0b3bff8b748a6bc6#diff-2d71619e0283603f202f7ce63309c0cfR302

I think that the tests are failing because they are hitting 60b6520#diff-2d71619e0283603f202f7ce63309c0cfR302
#0  arch_system_halt (reason=reason@entry=4) at /home/carlo/work/proj/zephyr/zephyrproject/zephyr/kernel/fatal.c:31
#1  0x0000000040013764 in k_sys_fatal_error_handler (reason=reason@entry=4, esf=esf@entry=0x0) at /home/carlo/work/proj/zephyr/zephyrproject/zephyr/kernel/fatal.c:43
#2  0x00000000400137f4 in z_fatal_error (reason=reason@entry=4, esf=esf@entry=0x0) at /home/carlo/work/proj/zephyr/zephyrproject/zephyr/kernel/fatal.c:123
#3  0x0000000040011814 in assert_post_action (file=file@entry=0x40024404 "ZEPHYR_BASE/arch/arm/core/aarch64/arm_mmu.c", line=line@entry=302)
    at /home/carlo/work/proj/zephyr/zephyrproject/zephyr/lib/os/assert.c:45
#4  0x00000000400128e0 in init_xlat_tables (region=region@entry=0x400221a0 <mmu_zephyr_regions+40>) at /home/carlo/work/proj/zephyr/zephyrproject/zephyr/arch/arm/core/aarch64/arm_mmu.c:302
#5  0x0000000040012cb4 in setup_page_tables () at /home/carlo/work/proj/zephyr/zephyrproject/zephyr/arch/arm/core/aarch64/arm_mmu.c:392
#6  arm_mmu_init (arg=<optimized out>) at /home/carlo/work/proj/zephyr/zephyrproject/zephyr/arch/arm/core/aarch64/arm_mmu.c:461
#7  0x0000000040013680 in z_sys_device_do_config_level (level=level@entry=0) at /home/carlo/work/proj/zephyr/zephyrproject/zephyr/kernel/device.c:54
#8  0x00000000400138fc in z_cstart () at /home/carlo/work/proj/zephyr/zephyrproject/zephyr/kernel/init.c:523
#9  0x0000000040012650 in z_arm64_prep_c () at /home/carlo/work/proj/zephyr/zephyrproject/zephyr/arch/arm/core/aarch64/prep_c.c:31
#10 0x000000004000ec38 in __start () at /home/carlo/work/proj/zephyr/zephyrproject/zephyr/arch/arm/core/aarch64/reset.S:145

This helps. I see that #include <linker/cplusplus-rom.ld> is coming in effect for tests/application_development/libcxx test and making image_rodata_end 4k unaligned causing MMU assert.

@Abhishek-brcm @carlocaione there are still some tests failing CI, on the qemu_cortex_a53 platform:
https://app.shippable.com/github/zephyrproject-rtos/zephyr/runs/63654/5/console

@Abhishek-brcm @carlocaione there are still some tests failing CI, on the qemu_cortex_a53 platform:
https://app.shippable.com/github/zephyrproject-rtos/zephyr/runs/63654/5/console

I see that I am not able to use "LOG_" in this driver, which is causing tests/subsys/logging/log_core/ to fail. I tried using "LOG_" macro in timer driver(drivers/timer/arm_arch_timer.c) instead, and same failure is seen.[Also I see no timer driver using LOG_*] So I think that there is not issue with driver itself, but rather related to logging use. Currently, I am submitting MMU driver after removing LOG_*. That should make CI pass.

@Abhishek-brcm ignore the Documentation and License checks showing in progress, those are now handled by GitHub actions. This PR is ready for merging.

@Abhishek-brcm ignore the Documentation and License checks showing in progress, those are now handled by GitHub actions. This PR is ready for merging.

Ok, sounds good.


Fit ligand here + use conformers not working (pool thread exhausted)

Closing this as it is no longer a problem.


Al/redis maxmemory samples option

 Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you all sign our Contributor License Agreement before we can accept your contribution.0 out of 3 committers have signed the CLA.:x: lemaitre-aneo:x: esoubiran-aneo:x: alouvion-aneoYou have signed the CLA already but the status is still pending? Let us recheck it.


Add a type checking pipeline

This pull request aims to add provisional support to type checking via mypy.
It has been discussed at #530
Running mypy against the current master prompts us for 80 issues

Fixed 45 out of the 80 mypy errors so far.

Fixed all the errors


proposal: Go 2: extended type inference for make and new

Rationale
Currently in Go, type inference works in one direction and one direction only: From the values of an assignment to the variable declarations. In other words, given some expression with a statically-determinable type, which is basically every expression, the type of a declaration can be omitted. This allows for a lot of the perceived lightness of Go over many statically typed languages.
However, there are a number of situations where this is not possible, most of which have to do with make() and new(), both of which are unique, not including some stuff in the unsafe package, in that they take a type name as an argument. Normally this is a non-issue, as that type can be used to determine the return of the expression, thus allowing for inference in the normal manner:
m := make(map[string]interface{})
s := make([]string, 0, 10)
p := new(int)

Sometimes the variable must have a separately declared type, though, such as in the case of struct fields:
type Example struct {
  m map[string]interface{}
}

func NewExample() *Example {
  return &Example{
    m: make(map[string]interface{}),
  }
}

This leads to unwanted repetition of the type name, making later alteration more awkward. In particular, I thought of this while reading through one of the many proposals about ways to make anonymous structs more useful with channels, and I realized that the following pattern could get very annoying, exacerbating the existing issue:
type Example struct {
  c chan struct {
    v string
    r chan<- int
  }
}

func NewExample() *Example {
  return &Example{
    c: make(chan struct {
      v string
      r chan<- int
    },
  }
}

Proposal
I propose the introduction of a new keyword, say typeof, which takes a variable, function name, or a struct field identifier and essentially acts as a stand-in for a standard type name, possibly with the restriction of only being available as the argument to a make() or new() call. For example,
return &Example{
  m: make(typeof Example.m),
}

This would allow a type name to be pegged to an already declared variable type elsewhere.
Alternative
Alternatively, make() and new() could allow for the aforementioned types of identifiers directly, such as
return &Example{
  m: make(Example.m),
}

This has the advantage of being backwards compatible, but is potentially less flexible if one wants to extend the functionality elsewhere later, such as to generics.

If we are going to introduce typeof, I can't think of any reason why we would restrict it to being used with make and new.  That would not be very orthogonal.

Type of m in Example is already known. So typeof or Example.m can be omitted:
return &Example {   m: make() }

Should this be introducted, as an alternative totypeof Example.m, I feel that Example.m.(type) might be more consistent when comparing it to type switches.

That's backwards compatible, too, that way, although it brings with it an implicit assumption that typename.fieldname has a general meaning.

Type of m in Example is already known. So typeof or Example.m can be omitted:
return &Example { m: make() }

That's what I want myself. @griesemer points out that you'd also want to do new() then.

Regarding typeof: Instead of a new keyword, typeof could easily be a built-in. The possible "danger" of a typeof operator is that people might start using it all over the place, for all kinds of declarations, thereby reducing the readability of the code.
There's clearly a strong sentiment for being able to use make() or new() and have both of them infer the necessary type. Though we don't have anything else in the language that behaves like this at the moment. Is there a better syntax?

Building on @dmkra's observation, we could use _ as a stand-in for “infer the obvious type”.
type Example struct {
  m map[string]interface{}
}

func NewExample() *Example {
  return &Example{ m: make(_) }
}

type Example struct {
  c chan struct {
    v string
    r chan<- int
  }
}

func NewExample() *Example {
  return &Example{ c: make(_, 1) }
}

That said, I think #21496 is a better fit for the map example:
return &Example{ m: {} }

And I suspect that #28366 would address most of the realistic use-cases for the chan example:
type Example struct {
  c chan(1) struct {
    v string
    r chan<- int
  }
}

func NewExample() *Example {
  return &Example{}
}

@DeedleFake, there is some precedent for .(type) in earlier proposals too.
(For example, I used (type) as the “type, not value” indicator in https://github.com/golang/proposal/blob/master/design/15292/2016-09-compile-time-functions.md.)

I like the _ for inference, but it feels a bit like it overlaps with _ as a discard assignment. This would allow it to be used on the right-hand side, technically, though only in the unusual case of make() and new() which take actual type names as arguments.

Using .(type) for both dynamic type checks (as today with type switches) and static types would slightly be weird.

@bradfitz, at least there is precedent for that! The cases within a switch statement can already be either dynamic values or static types, depending on whether you're switching on x or x.(type).

Using _ looks like we are discarding the value.
Another possibility would be . to refer to the current topic, sort of analogous to text/template.
var m map[int]string
m = make(.)
(Using dot might also work for #33359.)
But in general this would be a new kind of idea in Go that we don't currently have.

Or we could take one of the ideas from #33359 and use ... here.
    var m  map[int]string
    m = make(...)

Does there need to be anything?
Could the absence of a type argument be enough to signal that it should be inferred?
var ch chan T = make() // same as make(chan T)
var buf []T = make(10) // same as make([]T, 10)
x := new() // compile time error, no type can be inferred

Slightly off-topic, but in the case of new(), I'm in favor of getting rid of the function completely and adding make(*T). I don't really see why there needs to be a separate function. With the above suggestion, it'll only work with a pre-existing pointer type variable anyways, which means that it would essential infer T from a *T variable, unlike make() which would just use the variable's type directly.
It's a small nitpick, though.

Let's definitely keep the fraught discussion of new vs. make in a different issue.

There doesn't need to be an argument to make, but personally I think some sort of marker would be better than having it just make something.

It would make it somewhat more similar to the recent contracts draft, modulo the number of parens and commas.

The ? symbol is also currently unused, right? That seems like a reasonable token to indicate “inferred”.

I think typeof()as a built in function has the best potential here, and would be the most backwards compatible solution, and useful in several other cases, such as in low level programming, in conjunction with unsafe.Sizeof, unsafe.Alignof and unsafe.Offsetof.
If there is any risk that typeof() will end up being overused, then this can be solved through go lint checking. Personally I think the risk for abuse is low, since if you do typeof(x), then x will already be in scope, and the type of x should be relatively clear to the reader.

Another idea would be to permit referring to the basic kind of type without filling out the elements.  For example,
    var s []byte = make([], 10)
    var m map[int]string = make(map)
    var m2 map[int]string = make(map, 100)
    var c chan bool = make(chan)

This might make the code clearer to the reader, while still permitting the omission of the redundant type information.

The new() and make(length, capacity) form looks consistent with this generic proposal.

Just a few observations:

new and make are special because they do expect a type rather than a value as their first argument. If we permit leaving those types away in calls, we lose the visual cue that these calls are indeed calling the built-in functions new and make, and not some user-defined regular functions. (We don't have that cue either if the type argument is a type name rather than a type literal, but that seems rare.) It may be beneficial for readability to retain some sort of visual signal. On the other hand, we already permit the omission of types in certain nested composite literals, and thus leaving away the type in make and new calls has some (remote) precedent, especially because often these calls do appear when constructing composite literals. Also, overwritten new and make identifiers are rare.
A typeof built-in function can't be used in situations where the variable is both declared and initialized as follows: var v []T = make(typeof(v), n) because the newly declared variable won't be in scope until after the variable declaration (which includes the initialization expression). Of course, in these cases one could just write var v = make([]T, n). But it's not clear that adding a new built-in is making this problem simpler - e.g., it doesn't help much if writing the type is shorter than writing the built-in call.
We could just write [], map and chan, which is simple and provides information about the kind of type that's being initialized. The problem with this approach though is that none of [], map and chan are currently syntactically valid type expressions. We'd have to allow them in general, or at the very least as first arguments to calls of functions called make (the parser cannot know that it is parsing a call to the built-in make function, we need type information for that). Probably doable, but requiring much more work than one might anticipate at first (parser and AST will have to be adjusted).
Using ... to denote the inferred type would be comparatively easy. We already accept ... as expression in array declarations, so no parser or AST changes are needed. Doing type-inference for ... in the type-checker would be trivial.

Of these four approaches, it seems that 1) (just leave the type away) and 4) (write ... instead of the type) are the most promising ideas so far.
As nice as ... might seem, it does open a bit of a pandora's box (where else should we allow ...?). It is also not strictly necessary (in contrast to the use of ... in array and parameter declarations or when unpacking a slice).
Thus, notwithstanding some more general concept for ... use, it seems to me that leaving away the type altogether might be the most pragmatic and Go-like approach, should we decide to proceed with this. It does solve the problem, it would be trivial to implement, and it would make the code shorter. If readability is problematic, one can always write the type as we do now. And new and make are already very special because they accept a type argument, so this simple form of type inference wouldn't make them much more special.

Even if all other proposals using ... are accepted, I think that omitting the type is a better fit. This situation is more analogous to the type inference in the generics draft than it is to any of the other ... proposals. Even if that particular draft doesn't survive, the type inference for function calls likely would. I wouldn't want to have to type f(...)(x, y, z) for every generic function call.

There's also a tangential connection to #12854 in that the contexts in which the type could be deduced are the same for both proposals.

@griesemer

A typeof built-in function can't be used in situations where the variable is both declared and initialized as follows: var v []T = make(typeof(v), n) because the newly declared variable won't be in scope until after the variable declaration (which includes the initialization expression). Of course, in these cases one could just write var v = make([]T, n). But it's not clear that adding a new built-in is making this problem simpler - e.g., it doesn't help much if writing the type is shorter than writing the built-in call.

This proposal was specifically not intended for those cases, as those cases already don't require writing the type twice. This proposal was intended to help only in the cases where the declaration and assignment have to be separate, such as in struct fields. I thought that a way to tell the compiler 'use whatever type this variable was declared as here' would allow for a general solution to it, as the problem stems from the type inference currently only being possible do from value to variable and not the other way around.

It was pointed out in episode #166 of Go Time that this type of inference would not help in situations where the user was initializing using a composite literal, such as
type Example struct {
  Values map[string]string
}
// ...
e := Example{
  // Still requires a repeat of the type.
  Values: map[string]string{
    "some": "value",
    "or": "another",
  },
}

That's true. As I said in the original proposal, my primary motivation was channel initialization, though I did think of empty map initialization, too. Slices would be less useful, as appending to a nil slice works just fine. I do still think this would be worth it just for the channel case and the empty map case, though, and, if implemented, it definitely should work for slices too just to be consistent.

I've found a workaround for some situations when using generics. Although the current generics implementation doesn't have inference for return values, it can do it for pointers:
func makeMap[M ~map[K]V, K comparable, V any](m *M, c int) {
  *m = make(M, c)
}

type Example struct {
  Vals map[string]int
}

var ex Example
makeMap(&ex, 0)

I don't know if this has any problematic effects on, for example, optimization, but I recently had a very large number of initialization that I needed to do and each one had a repeated type from a struct definition, so I wrote a function like this and used it instead and it massively cleaned up the code.


[Feature Request]: Document Known issues for publishing

Description
The known issues section in the Wiki is empty for publishing.
List what planned and link related open GH issues. E.g., #2153

We should also mention the failing publishing of 'RecoveryServicesVault' module with respect to template specs


Enhancement of numerical_analysis and _as_na_df methods that provides t_span argument

The goal of issue is preparing additional _as_na_df method argument that allows to prepare Numerical Analysis DataFrame with extended index of time span.

https://cocalc.com/projects/f5eacfa1-ad37-41af-beea-da7216cf5881/files/Shared files/modules/dynpy/solvers/linear.py
https://cocalc.com/projects/f5eacfa1-ad37-41af-beea-da7216cf5881/files/Shared files/modules/dynpy/models/mechanics/principles.py
https://cocalc.com/projects/f5eacfa1-ad37-41af-beea-da7216cf5881/files/Shared files/modules/dynpy/solvers/numerical.py
https://cocalc.com/projects/f5eacfa1-ad37-41af-beea-da7216cf5881/files/Sandbox/Szymon Kozłowski/Tasks/variable_mass_class_development.ipynb
Changes and usage have been shown in following links


fix(backend): Not cross-origin when explicit default host port matches implicit default origin port

Type of change

[x] 🐛 Bug fix
[ ] 🌟 New feature
[ ] 🔨 Breaking change
[ ] 📖 Refactoring / dependency upgrade / documentation
[ ] other:

Packages affected

[ ] @clerk/clerk-js
[ ] @clerk/clerk-react
[ ] @clerk/nextjs
[x] @clerk/remix
[ ] @clerk/types
[ ] @clerk/themes
[ ] @clerk/localizations
[ ] @clerk/clerk-expo
[x] @clerk/backend
[ ] @clerk/clerk-sdk-node
[ ] @clerk/shared
[ ] @clerk/fastify
[ ] @clerk/chrome-extension
[ ] gatsby-plugin-clerk
[ ] build/tooling/chore

Description

[x] npm test runs as expected.
[x] npm run build runs as expected.

Refer to added test cases.
Support setting x-forwarded-port to the default port (80 for http) without triggering cross-origin.
This is required because AWS's load balancer sets that header to the default.
Fixes
Currently the cross-origin check incorrectly flags when comparing the host port of '80' to the origin port of '', here: https://github.com/clerkinc/javascript/blob/edc33b2daf64152eabb187080e7c64df4468fc58/packages/backend/src/util/request.ts#LL30C42-L30C42.
Bug report: https://discordapp.com/channels/856971667393609759/1110775689898111006/1110775689898111006

Nice work @kaploink and thank you for the contribution!
I have opened a new PR to resolve your issue and used some parts from this PR.
Closing this in favor of https://github.com/clerkinc/javascript/pull/1262

Awesome, thanks @dimkl, agree best for you guys to tweak it however suits


In the "Getting Started" guide, baselining instructions cause an error for future runs of prisma migrate reset

In https://www.prisma.io/docs/getting-started/setup-prisma/add-to-existing-project/relational-databases/baseline-your-database-typescript-postgres, the instructions for creating the initial migration say to create a directory with the following command:
mkdir -p prisma/migrations/init
This is misleading, as it doesn't follow the format of prisma migrate dev-generated migration directories (which are all prefixed with a timestamp). If these instructions are followed as-is, future runs of commands like prisma migrate reset won't work as expected, and the user is left with a broken migration state. Specifically, these are the repro steps for the issue:

Starting from a fresh Prisma project connected to a database (Postgres 14 in my case) that already contains a table named (arbitrarily) example_table, follow all of the the baselining instructions as written in https://www.prisma.io/docs/getting-started/setup-prisma/add-to-existing-project/relational-databases/baseline-your-database-typescript-postgres.
add a new column to your schema file.
Run prisma migrate dev to generate / apply a new migration for the schema change.
Run prisma migrate reset. After resetting the db, It will try to apply only the second migration (skipping the init one without the timestamp) and will error with

Database error:
ERROR: relation "example_table" does not exist

One fix would be to change the directory creation command in the instructions as follows, to include a timestamp in the same format as the ones from prisma migrate dev:
mkdir -p prisma/migrations/$(date -u "+%Y%m%d%H%M%S")_init

That would also imply needing to somehow rework all later references to the init directory name in this doc.

(I moved the issue to our main repo, as this indicates our logic does not work as we expected it to - we will need to reproduce and then decide if the logic needs fixing - or the documentation "just" needs to be updated.)

I can confirm this. prisma migrate reset fails with the following error:
Prisma schema loaded from prisma/schema.prisma
Datasource "db": PostgreSQL database "baseline-reproduction", schema "public" at "localhost:5432"

✔ Are you sure you want to reset your database? All data will be lost. … yes

Applying migration `20221130120949_view_count_column`
Error: P3018

A migration failed to apply. New migrations cannot be applied before the error is recovered from. Read more about how to resolve migration issues in a production database: https://pris.ly/d/migrate-resolve

Migration name:<PHONE_NUMBER>0949_view_count_column

Database error code: 42P01

Database error:
ERROR: relation "Post" does not exist

DbError { severity: "ERROR", parsed_severity: Some(Error), code: SqlState(E42P01), message: "relation \"Post\" does not exist", detail: None, hint: None, position: None, where_: None, schema: None, table: None, column: None, datatype: None, constraint: None, file: Some("namespace.c"), line: Some(433), routine: Some("RangeVarGetRelidExtended") }


[Feat] Run in Tmux

This is probably the best plugin for running code that I've seen yet, I'm currently using vimux to manually send commands to a tmux window, it does not offer as extensive configuration as this plugin.  I was wondering if support for tmux could be added or maybe code runner + vimux sounds like a better idea

I don't currently use tmux. I used it for a long time per kitty it already comes with these functions. I will take into account, I will investigate how I can do it, Do not forget to share this plugin to reach more people.

I discovered that you can use VimuxRunCommand(<cmd>) to execute a command in tmux (Vimux documentation). However, I don't have enough knowledge to implement it myself.


BTS-199: remove check and setting of GLIBCXX_FORCE_NEW

Scope & Purpose
Docs PR: https://github.com/arangodb/docs/pull/1230
Oskar PR: https://github.com/arangodb/oskar/pull/481
BTS-199: remove check and setting of GLIBCXX_FORCE_NEW

[ ] :hankey: Bugfix
[ ] :pizza: New feature
[ ] :fire: Performance improvement
[x] :hammer: Refactoring/simplification

Checklist

[ ] Tests

[ ] Regression tests
[ ] C++ Unit tests
[ ] integration tests
[ ] resilience tests

[x] :book: CHANGELOG entry made
[ ] :books: documentation written (release notes, API changes, ...)
[ ] Backports

[ ] Backport for 3.10: -
[ ] Backport for 3.9: -
[ ] Backport for 3.8: -

Related Information

[x] Docs PR: https://github.com/arangodb/docs/pull/1230
[ ] Enterprise PR:
[x] GitHub issue / Jira ticket: https://arangodb.atlassian.net/browse/BTS-199
[ ] Design document:

Ok, glibc can still be used for local developer's Linux builds.
There setting GLIBCXX_FORCE_NEW indeed makes a difference. The question is if this difference is still relevant nowadays, and whether it justifies extra complexity in terms of a startup check, setting the environment variable in startup scripts etc.
As it doesn't affect any production releases, I would be all for simplication and removing the extra complexity.
I am happy to document the effect of the environment variable somewhere, but I can't think of some natural place to put this documentation. Any ideas?


Vulnerabilities

I am detecting these issues with my tenable scanning:

CVE-2023-5678

Fix: Upgrade to >= OpenSSL 3.1.5
https://www.tenable.com/plugins/nessus/185161
https://nvd.nist.gov/vuln/detail/CVE-2023-5678

CVE-2024-0853

Fix: Upgrade to > Curl 8.5.0
https://www.tenable.com/cve/CVE-2024-0853
https://nvd.nist.gov/vuln/detail/CVE-2024-0853

I believe these can be traced to Curl needing to be updated.
From inside the container:
/ # curl --version
curl 8.5.0 (x86_64-alpine-linux-musl) libcurl/8.5.0 OpenSSL/3.1.4 zlib/1.2.13 brotli/1.0.9 libidn2/2.3.4 nghttp2/1.57.0

Sorry to troll, but I attempted a PR to keep Alpine updated, however, it was down voted.  Indeed, you have an example of where keeping Alpine updated would be handy.
So I created a completely new project written in Rust, fully featured and secure.  Hope this helps.

Sorry to troll, but I attempted a PR to keep Alpine updated, however, it was down voted. Indeed, you have an example of where keeping Alpine updated would be handy.
So I created a completely new project written in Rust, fully featured and secure. Hope this helps.

So this is the new container ?


mealie: 2.2.0 -> 2.3.0

See https://github.com/mealie-recipes/mealie/releases/tag/v2.3.0

Things done

Built on platform(s)

[x] x86_64-linux
[ ] aarch64-linux
[ ] x86_64-darwin
[ ] aarch64-darwin

For non-Linux: Is sandboxing enabled in nix.conf? (See Nix manual)

[ ] sandbox = relaxed
[ ] sandbox = true

[x] Tested, as applicable:

NixOS test(s) (look inside nixos/tests)
and/or package tests
or, for functions and "core" functionality, tests in lib/tests or pkgs/test
made sure NixOS tests are linked to the relevant packages

[x] Tested compilation of all packages that depend on this change using nix-shell -p nixpkgs-review --run "nixpkgs-review rev HEAD". Note: all changes have to be committed, also see nixpkgs-review usage
[ ] Tested basic functionality of all binary files (usually in ./result/bin/)
25.05 Release Notes (or backporting 24.11 and 25.05 Release notes)

[ ] (Package updates) Added a release notes entry if the change is major or breaking
[ ] (Module updates) Added a release notes entry if the change is significant
[ ] (Module addition) Added a release notes entry if adding a new NixOS module

[x] Fits CONTRIBUTING.md.

nixpkgs-review result
Generated using nixpkgs-review.
Command: nixpkgs-review

x86_64-linux

:white_check_mark: 2 packages built:

mealie
mealie.dist

Add a :+1: reaction to pull requests you find important.

@ofborg eval


Design System > Tree structure build issues.

Tree structure build issues.

closing this bug resolved build issue while building the solution


[android] Removed unit test task from weex_sdk travis build.

As unit test codes for Weex sdk android stays unmaintained for long,
which breaks unit tests constantly, and need to rewrite. So we decided
to change the behavior of the travis build, we will only verify
Weex sdk build instead of running the unit test cases, until the unit
test codes get rewrite. Also changed the corresponding text output.
I'm sure this patch will make travis happy.

@zshshr @YorkShen PTAL.

rebased, please help to check and merge if applicable. thanks. @YorkShen @zshshr


Fixed bug #22

 Buttons of EditRulePopup not disabling correctly when change to advanced mode and vice-versa


Make ClientOpts use a password converter that respects the env:PASSWORD

ClientOpts doesnt respect env:PASSWORD. We have a requirement to call a class that uses ClientOpts from shell and what to be able to use the environment variable.
This is put up for comment. Open to other suggestions.

The class that does not support env: is RemoveEntriesForMissingFiles, which is an accumulo class. We have had a problem with Rfiles periodically going missing, which is an issue. Until that can be fixed we want to be able to run this periodically to get ahead of the compactions failing.

I'll make sure this works as expected in 2.0 in which case We can just close this issue and wait for that.

Now that I know what class you're using, I feel I must offer a disclaimer. That class has largely remained untouched since the initial public release of Accumulo. It was always intended to be a "use-at-your-own-risk" administrator surgery utility, but since it has largely received on attention across versions which separated the root table, switched to absolute paths, added multiple-volume support, and numerous metadata schema changes, I'd be surprised if it worked reliably and suggest it be used with extreme care. It even predates the use of RFiles, still referring to them as "Map Files".
As for its use of the password, as a system utility, it could probably be rewritten to use the system password / system context.
For 2.x, there's no need to add command-line features for passwords, because newer utilities should use either the system user (via the system properties file) or behave as a client (using client properties file, which already has commons-configuration2 features to interface with system environment and property injection).


Update System.Data.SqlClient to Microsoft.Data.SqlClient

NLog version: next
Platform: .Net Framework 4.6+ / .Net Core 2.1+ / .Net Standard 2.0+

Why do we need it?

I recently had to add System.Data.SqlClient to my .Net Core 3.1 project to get NLog to work; it wouldn't work without it.  All new feature development is happening on Microsoft.Data.SqlClient per this Microsoft statement, including performance and security enhancements.  It would be cool to use that instead.

We have no intention of dropping support for System.Data.SqlClient any time soon. It will remain as-is and we will fix important bugs and security issues as they arise. If you have a typical application that doesn’t use any of the newest SQL features, then you will still be well served by a stable and reliable System.Data.SqlClient for many years.
However, Microsoft.Data.SqlClient will be the only place we will be implementing new features going forward. We would encourage you to evaluate your needs and options and choose the right time for you to migrate your application or library from System.Data.SqlClient to Microsoft.Data.SqlClient.

This is a duplicate of https://github.com/NLog/NLog/issues/3776?

So in summary:
Install package: https://www.nuget.org/packages/Microsoft.Data.SqlClient/
and use in the database target:
dbProvider="Microsoft.Data.SqlClient.SqlConnection, Microsoft.Data.SqlClient"

If updated https://github.com/NLog/NLog/wiki/Database-target to make it a bit more clear in the start :)


Document limitations of Blazor custom elements

We don't support child content or templated components with Blazor custom elements.
@MackinnonBuck @SteveSandersonMS Are there any other limitations of Blazor custom elements that we should document?

Document Details
⚠ Do not edit this section. It is required for learn.microsoft.com ➟ GitHub issue linking.

ID: 81a32115-33f8-7d06-aaf0-b8ce918b5527
Version Independent ID: 31ad18df-1904-bbdd-cfed-8d0d0267c10e
Content: ASP.NET Core Razor components
Content Source: aspnetcore/blazor/components/index.md
Product: aspnet-core
Technology: aspnetcore-blazor
GitHub Login: @guardrex
Microsoft Alias: riande

The PR is up. I'll hold off on merging until we hear back from @MackinnonBuck and/or @SteveSandersonMS

While it's shown in the example already linked in the docs, it might be worth calling out that complex properties (JSON-serializable types as well as EventCallbacks) can be used as parameters for Blazor components registered as custom elements. However, values for complex cannot be specified through the use of HTML attributes. Instead, you set properties directly on the element's JavaScript object. See this as an example.


Server core dump, when use streaming http request and close client early before receiving complete response.

Environments:
Tesla T4 * 2
trtllm: 0.5.0
trtllm_backend: 0.5.0
Reproduction steps:

Deploy qwen-7B or llama-7B trt-llm model using triton server.
Use http streaming to request as following codes:

import requests

def request():
    url = 'http://<IP_ADDRESS>:8000/v2/models/ensemble/generate_stream'
    prompt = {"text_input": "<|im_start|>system\\nYou are a helpful assistant.<|im_end|>\\n<|im_start|>user\\n你好,你是谁?<|im_end|>\\n<|im_start|>assistant", "max_tokens": 256, "bad_words": "", "stop_words": "", "end_id": 151643, "pad_id": 151643, "top_k": 0, "top_p": 0.8, "length_penalty": 1, "repetition_penalty": 1.1, "min_length": 0, "stream": True}
    print(f'prompt: {prompt}')
    response = requests.post(url, json=prompt, stream=True)
    for trunk in response.iter_content(chunk_size=None):
        print(trunk.decode('utf-8'))

request()

If client received all response and process exit itself. There will be no problem.
But if I close client process early before receiving complete response. Triton sever will core dump, like following log:

Signal (11) received.
 0# 0x0000562CFBB8E13D in /opt/tritonserver/bin/tritonserver
 1# 0x00007FAA2CBA2520 in /lib/x86_64-linux-gnu/libc.so.6
 2# 0x0000562CFC2C0E5B in /opt/tritonserver/bin/tritonserver
 3# 0x0000562CFC2C15D8 in /opt/tritonserver/bin/tritonserver
 4# 0x0000562CFC2B63D3 in /opt/tritonserver/bin/tritonserver
 5# 0x0000562CFBCDB9BE in /opt/tritonserver/bin/tritonserver
 6# 0x0000562CFC2BCE23 in /opt/tritonserver/bin/tritonserver
 7# 0x0000562CFC2D08A7 in /opt/tritonserver/bin/tritonserver
 8# 0x0000562CFC2D1197 in /opt/tritonserver/bin/tritonserver
 9# 0x0000562CFC2BCD62 in /opt/tritonserver/bin/tritonserver
10# 0x00007FAA2CBF4AC3 in /lib/x86_64-linux-gnu/libc.so.6
11# clone in /lib/x86_64-linux-gnu/libc.so.6

Same to https://github.com/triton-inference-server/tensorrtllm_backend/issues/176. Close this one.