Unable to Share Vehicle: This third party isn't registered with Tesla. We can't grant them access at the time.

Describe the bug
I've followed the instructions trying to set this up. Man, Tesla has really made a lot of hoops for us to jump through now 😢
I set up another domain using duckdns and registering it with the Duck DNS (with Lets Encrypt) addon. Everything seems to be working. I also forwarded port 443 to my home assistant behind my firewall. I am able to reach the server from outside the network (tested on cell connection). With the this addon and nginx running when I go to my https://<tesla-example.duckdns.org> I get the Web UI for this addon with the "Generate OAuth token" and other buttons.
When I click "Generate OAuth token" and authenticate with Tesla, everything seems to work and I get the Tesla Custom component token information in this addon's logs 👍.
Then when I go back to the WebUI and click "Enroll public key in your vehicle", my Tesla app opens as expected and it starts to try to authenticate... then I get a popup that stays:
❌Unable to Share Vehicle: This third party isn't registered with Tesla. We can't grant them access at the time.

When I click the "Test public key endpoint", chrome opens on my phone with the "Dangerous site" warning (something wrong with the certificate?). If I bypass the warning (Details > this unsafe site), I just get a blank white page.

When I restart the addon I get this in the logs:
s6-rc: info: service s6rc-oneshot-runner: starting
s6-rc: info: service s6rc-oneshot-runner successfully started
s6-rc: info: service fix-attrs: starting
s6-rc: info: service fix-attrs successfully started
s6-rc: info: service legacy-cont-init: starting
s6-rc: info: service legacy-cont-init successfully started
s6-rc: info: service legacy-services: starting
s6-rc: info: service legacy-services successfully started
[14:52:01] INFO: Found existing keypair
[14:52:01] NOTICE: Starting temporary Python app for authentication flow
[14:52:02] main:INFO: *** Generating Partner Authentication Token ***
[14:52:03] main:INFO: *** Registering Tesla account ***
[14:52:04] main:ERROR: Error 400: Bad Request
[14:52:04] main:INFO: {"response":null,"error":"Invalid EC public key","error_description":""}
[14:52:04] main:INFO: *** Starting Flask server... ***
[14:52:04] werkzeug:INFO: WARNING: This is a development server. Do not use it in a production deployment. Use a production WSGI server instead.
 * Running on all addresses (<IP_ADDRESS>)
 * Running on http://<IP_ADDRESS>:8099
 * Running on http://<IP_ADDRESS>:8099
[14:52:04] werkzeug:INFO: Press CTRL+C to quit

Where did I go wrong? Help 🙏
Environment (please complete the following information):

Home Assistant version: 2024.3.0
Home Assistant install method: [supervised, HAOS, container, etc.] HAOS 12.0
Addon version: 1.3.2
Region: US
Vehicle model and year: 2021 Model Y
Your public domain name: using a subdomain of duckdns.org

It sounds like something is wrong with the TLS cert on your domain.  Please share your real domain name so we can help you debug it.

Experiencing the same issue with A+ report from SSL labs

If you don't share your real domain I can't help you.

I'm nervous publicly posting my domain and home assistant IP address for all to see.
I did notice that mycom.tesla.3p.public-key.pem file is empty which might explain the {"response":null,"error":"Invalid EC public key","error_description":""} error in the log file.

Ah, ok it sounds like you hit the same bug as another user.  Delete that file, then update to 1.3.3 and try again.

Ok, cool. Tried it and I am still getting the same "Dangerous Site" error for https://<REDACTED>.duckdns.org/.well-known/appspecific/com.tesla.3p.public-key.pem and I get the same error in the Tesla app.
The logs give this error:
[03:47:21] main:ERROR: Error 424: Failed Dependency
[03:47:21] main:INFO: {"response":null,"error":"Public key download failed for https://<REDACTED>.duckdns.org/.well-known/appspecific/com.tesla.3p.public-key.pem, error: SSL_connect returned=1 errno=0 peeraddr=<XX.XX.XX.XX>:443 state=error: certificate verify failed (self signed certificate)","error_description":""}

Chrome doesn't complain about the SSL cert if I go to https://<REDACTED>.duckdns.org... that brings up the AddOn's button page. 🙄
I checked the cert using https://dnschecker.org/ and it all looks correct. The domains align and it's signed by Let's Encrypt... ahh, but I just hit refresh and it's pulling my pfSense self-signed cert... Eh, how do I fix that?

I had this issue, it was because the domain I was using for tesla-http-proxy wasn't in the "Allowed Origin's" list in the tesla app

You should be able to view the public key in a web browser with no errors. If that’s not working, you need to solve that before doing anything else.

Me too have this problem. I have followed all the steps but always stuck at generating oauth.

Logging in the oauth link of the webui gives me a blank page saying error cannot open page.

It sounds like something is wrong with your nginx config. It’s hard to help without knowing how your domain, nameservers, and network are configured.

Ok i will check the nginx and see if this is the culprit. I am using cloudflare tunnel as well if that might be causing it.

I have tried getting this to work for 5 days now 😭 and have spent hours cycling in what feels like infinite loops. Please, please can anyone help before I loose my sanity. 🙏
After trying everything I could think of to get this to work with duckdns domins, I gave up and decided to just purchase a domain.
Cloudflare attempt
I got a domain from namecheap and set it up with cloudflare as the dns provider. I then setup the Cloudflare integration in HA to keep my IP address in sync with cloudflare. I set up an A type DNS record in cloudflare that points to my network and have port 443 forwarded to HA. I setup the NGINX addon with the new domain and got a SSL cert from cloudflare and put them in the /ssl directory and pointed the NGINX at them.

The issue is that when I go to my domain externally, it times out. But if I set up NGINX with a duckdns domain, it works like a charm. So my guess is that there is something that cloudflare is doing or not doing where the domain data is not passed on to NGINX and therefore it ignores the request instead of forwarding it on. NGINX doesn't give me any log information if a request fails though. Is there a way to turn that on? Is there some type of setting I am missing in Cloudflare? Am I doomed to just not get this working?
Things I've tried:

Both proxied and "DNS only" with cloudflare (same behavior)
Pinging my domain resolves my IP correctly
Tried NGINX Home Assistant SSL proxy add-in and Nginx Proxy Manager add-in. Same behavior with both.
Changed the port that pfSense uses for https and turned off HSTS and WebGUI redirect as it seemed to be causing issues.

@e2m32 your description sounds correct to me.  I really don't understand the hesitation of sharing a public domain name.  Your public IP is probably being port scanned every day by Chinese bots anyway.
curl, netcat, nmap, and dig may be helpful for troubleshooting.

@e2m32 what do the logs on the cloudflared process look like? There's something in the config(at least when I last looked at it) that breaks SNI when using a reverse proxy, even if you're passing through headers. I was seeing "name unknown" type  responses from nginx with the tesla-http-proxy config that the app builds.
In the short term, I reconfigured it for http between cloudflare and nginx, when I get some time I'll dig into it.

Hey, thank you for your suggestions! I was able to get my main domain to work with cloudflare when I set the encryption mode to Flexible. I think there was an issue with the SSL cert that I created in Cloudflare and was using with Nginx Proxy Manager. I ended up using Nginx Proxy Manager to create a LetsEncrypt cert for me (using a DNS Edit API key) and started using that. Now I can use cloudflare's Full encryption mode 🙌
I went back to NGINX Home Assistant SSL proxy add-in so I could use it with tesla-http-proxy-addon and loaded the new SSL certs, followed the DOCS and was able to authenticate with tesla and my car! 🎉 My domain is now listed under keys in the car's display. So cool.
I restarted the tesla-http-proxy-addon , and attempted to link it with Tesla Custom Integration and then ran into another hiccup. 😞 After entering the requested info (Refresh token, etc), it fails to authenticate. There is no info in the tesla-http-proxy-addon logs. Just the following:

Any advise at this point? It's interesting to me that it's listening on 443... Shouldn't it be listening on 4430? Or is 443 internal to the add on and 4430 is what is exposed external to HA?

I don't think profile information is required in the scopes.
Port 4430 is not used for anything in a standard HAOS installation.
It sounds like this addon is working properly.  Please enable debug logging from the Tesla integration and share the logs (in a formatted code block).  The most common issue I see is the login_required error which means the refresh token has already been used.  If that happens, you'll need to delete the car "device" and add it back.
By the way, there is no reason to redact a public key.  It is by nature, public.

Got it! I removed the Tesla Custom integration and went through the entire process again, and now it is working! Thank you so much!
🚗♥🏠 again! :)

I am having similar issues as the first post in this. This third party isn't registered with Tesla. We can't grant them access at the time. I am using the cloudflare process mentioned in this blog . Setup two times but still end up with this issue and unable to figure out what's wrong.  Able to access public key just fine.
my domain name is https://tesla.chowdaryonline.org
Appreciate any help on this
This is the log from Tesla Proxy addon
[19:00:31] werkzeug:INFO: <IP_ADDRESS> - - [15/Apr/2024 19:00:31] "GET / HTTP/1.1" 200 -
2024/04/15 19:11:03 http: TLS handshake error from <IP_ADDRESS>:21052: EOF
2024/04/15 19:11:03 http: TLS handshake error from <IP_ADDRESS>:25722: EOF
2024/04/15 19:11:03 http: TLS handshake error from <IP_ADDRESS>:29344: EOF
2024/04/15 19:11:03 http: TLS handshake error from <IP_ADDRESS>:34018: tls: client requested unsupported application protocols ([http/0.9 http/1.0 spdy/1 spdy/2 spdy/3 h2c hq])
2024/04/15 19:11:03 http: TLS handshake error from <IP_ADDRESS>:37348: tls: client requested unsupported application protocols ([hq h2c spdy/3 spdy/2 spdy/1 http/1.0 http/0.9])
2024/04/15 19:11:03 http: TLS handshake error from <IP_ADDRESS>:41182: EOF
2024/04/15 19:11:03 http: TLS handshake error from <IP_ADDRESS>:45012: tls: peer doesn't support any of the certificate's signature algorithms
2024/04/15 19:11:03 http: TLS handshake error from <IP_ADDRESS>:49016: EOF
2024/04/15 19:11:04 http: TLS handshake error from <IP_ADDRESS>:52962: EOF
2024/04/15 19:11:04 http: TLS handshake error from <IP_ADDRESS>:57402: tls: peer doesn't support any of the certificate's signature algorithms
2024-04-15T19:18:38-05:00 [info ] Received GET request for /
2024-04-15T19:18:38-05:00 [error] Returning error Forbidden
2024/04/15 19:23:23 http: TLS handshake error from <IP_ADDRESS>:57784: EOF
2024/04/15 19:23:24 http: TLS handshake error from <IP_ADDRESS>:56518: EOF
2024/04/15 19:23:24 http: TLS handshake error from <IP_ADDRESS>:48454: EOF
2024/04/15 19:23:24 http: TLS handshake error from <IP_ADDRESS>:52142: tls: client requested unsupported application protocols ([http/0.9 http/1.0 spdy/1 spdy/2 spdy/3 h2c hq])
2024/04/15 19:23:24 http: TLS handshake error from <IP_ADDRESS>:60824: tls: client requested unsupported application protocols ([hq h2c spdy/3 spdy/2 spdy/1 http/1.0 http/0.9])
2024/04/15 19:23:25 http: TLS handshake error from <IP_ADDRESS>:36136: EOF
2024/04/15 19:23:25 http: TLS handshake error from <IP_ADDRESS>:57922: tls: peer doesn't support any of the certificate's signature algorithms
2024/04/15 19:23:26 http: TLS handshake error from <IP_ADDRESS>:58816: EOF
2024/04/15 19:23:26 http: TLS handshake error from <IP_ADDRESS>:56586: EOF
2024/04/15 19:23:26 http: TLS handshake error from <IP_ADDRESS>:34584: tls: peer doesn't support any of the certificate's signature algorithms
2024/04/15 19:33:35 http: TLS handshake error from <IP_ADDRESS>:16750: EOF

This is the log from Apache addon
<IP_ADDRESS> - - [15/Apr/2024:19:53:33 -0500] "GET /apple-touch-icon.png HTTP/1.1" 403 287
<IP_ADDRESS> - - [15/Apr/2024:19:53:33 -0500] "GET /apple-touch-icon-precomposed.png HTTP/1.1" 403 287
[Mon Apr 15 19:53:33.825383 2024] [authz_core:error] [pid 141] [client <IP_ADDRESS>:39318] AH01630: client denied by server configuration: /share/tesla/apple-touch-icon-precomposed.png
[Mon Apr 15 19:53:33.839442 2024] [authz_core:error] [pid 141] [client <IP_ADDRESS>:39318] AH01630: client denied by server configuration: /share/tesla/
<IP_ADDRESS> - - [15/Apr/2024:19:53:33 -0500] "GET / HTTP/1.1" 403 287
[Mon Apr 15 19:53:33.940334 2024] [authz_core:error] [pid 141] [client <IP_ADDRESS>:39318] AH01630: client denied by server configuration: /share/tesla/apple-touch-icon.png
<IP_ADDRESS> - - [15/Apr/2024:19:53:33 -0500] "GET /apple-touch-icon.png HTTP/1.1" 403 287
<IP_ADDRESS> - - [15/Apr/2024:19:53:33 -0500] "GET /favicon.ico HTTP/1.1" 403 287
[Mon Apr 15 19:53:33.978544 2024] [authz_core:error] [pid 141] [client <IP_ADDRESS>:39318] AH01630: client denied by server configuration: /share/tesla/favicon.ico
[Mon Apr 15 19:53:34.047185 2024] [authz_core:error] [pid 141] [client <IP_ADDRESS>:39318] AH01630: client denied by server configuration: /share/tesla/favicon.ico
<IP_ADDRESS> - - [15/Apr/2024:19:53:34 -0500] "GET /favicon.ico HTTP/1.1" 403 287
[Mon Apr 15 20:17:49.689859 2024] [authz_core:error] [pid 139] [client <IP_ADDRESS>:44928] AH01630: client denied by server configuration: /share/tesla/
<IP_ADDRESS> - - [15/Apr/2024:20:17:49 -0500] "GET / HTTP/1.1" 403 287
[Mon Apr 15 20:17:49.786110 2024] [authz_core:error] [pid 139] [client <IP_ADDRESS>:44928] AH01630: client denied by server configuration: /share/tesla/favicon.ico, referer: https://tesla.chowdaryonline.org/
<IP_ADDRESS> - - [15/Apr/2024:20:17:49 -0500] "GET /favicon.ico HTTP/1.1" 403 287
<IP_ADDRESS> - - [15/Apr/2024:20:19:19 -0500] "GET /.well-known/appspecific/com.tesla.3p.public-key.pem HTTP/1.1" 200 178
<IP_ADDRESS> - - [15/Apr/2024:20:19:19 -0500] "GET /favicon.ico HTTP/1.1" 403 287
[Mon Apr 15 20:19:19.706905 2024] [authz_core:error] [pid 140] [client <IP_ADDRESS>:37978] AH01630: client denied by server configuration: /share/tesla/favicon.ico, referer: https://tesla.chowdaryonline.org/.well-known/appspecific/com.tesla.3p.public-key.pem
<IP_ADDRESS> - - [15/Apr/2024:20:19:40 -0500] "GET /.well-known/appspecific/com.tesla.3p.public-key.pem HTTP/1.1" 206 178
<IP_ADDRESS> - - [15/Apr/2024:20:33:19 -0500] "GET /.well-known/appspecific/com.tesla.3p.public-key.pem HTTP/1.1" 304 -
[Mon Apr 15 20:33:20.075786 2024] [authz_core:error] [pid 145] [client <IP_ADDRESS>:48036] AH01630: client denied by server configuration: /share/tesla/favicon.ico, referer: https://tesla.chowdaryonline.org/.well-known/appspecific/com.tesla.3p.public-key.pem
<IP_ADDRESS> - - [15/Apr/2024:20:33:20 -0500] "GET /favicon.ico HTTP/1.1" 403 287


Converting Job ids back into integers

The zid field is a string, so we need to do a type conversion.

Fix for issue #845

@hockeytim11, do you know if this issue made any functional issue? We often have jobs on queues that are paused for days or weeks, and just want to make sure that taking this change isn't going to cause any issues with those jobs.

As far as I know, this issue should not have effected processing. The only issue was that job ID's were being returned as strings in the event handlers. The reason it was an issue for me was some tests on my project that used strict comparisons of the job results on the complete event.


update remaining deps

In order to tackle the test timeout issue I decided to update the remaining dependencies to make sure the root cause is not already fixed upstream.
The only direct dependency that couldn't be updated is unsigned-varint, because cid depends on the version we are currently using.

A linker error in Windows? I don't think I have't seen those before, I'll retry when all the others are complete.

A linker error again; it's in ipfs-http and points to openssl.

No more Cargo.lock changes to openssl, but the Windows build still fails at linking openssl :shrug:; package caching?

mac failure is #134.

The windows caching is likely the culprit here. Today I learned vcpkg is in fact using submodules for all of the ports/ so I am now thinking if we could somehow pin that version. Then using that "pin" as a cache key would be the proper course.

This should be rebased on top of the latest master following #267, which resolved the caching issue.

The mac failure is the fimeout; if Windows passes, this is good to go.

Yep, all good - it's good to go @koivunej.


minified version doesn't work

Everything works fine when I run the application locally, because it is served from a node server, not minified. On building as runnable spring-boot-jar, grunt minifies it. When I run the deployed version, I receive TypeErrors.
First of all, when I let the cursor in the input field, as expected, the picker goes open but  the browser shows in the console:
TypeError: "a.on is not a function"
v()                                                                          vendors.6525b3ad.js:28
.link/<()                                                                   vendors.6525b3ad.js:28
defaultHandlerWrapper()                                       vendors.6525b3ad.js:1
createEventHandler/c()                                          vendors.6525b3ad.js:1
Then, when I am trying to pick a color, comes
"d.setColor is not a function",
and when I try to set the Hue,
"d.setHue is not a function".
The close-button works normally.
I also have found on stackoverflow a very similar issue:
http://stackoverflow.com/questions/38906377/angular-bootstrap-colorpicker-is-not-working-in-minified-version
It would be great if anybody could solve this or give us a hint, what settings would be necessary in order to work properly. It also would be very useful if anybody would say if he/she could successfully use the min (bootstrap-colorpicker-module.MIN.js) version.

Minified version is used in demo page and it works correctly. This repo is not handling custom builds issues.


Honor BindRequired and BindNever attributes

Fixes https://github.com/domaindrivendev/Swashbuckle.AspNetCore/issues/661 and adds support for BindRequired and BindNever attributes for models
public class BindingType
{
    public string Property1 { get; set; }

    [BindNever]
    public string Property2 { get; set; }

    [BindRequired]
    public string Property3 { get; set; }
}

It also should work for action's parameters (but only in ASP.NET Core 2.1 preview-2 and higher https://github.com/aspnet/Mvc/issues/7435)
public void AcceptsRequiredParameters([Required, BindRequired] string queryParam) { }

This change makes sense for inferring if a parameter's required field should be set or not. But, I don't believe these attributes should be honored when describing Schema properties. See my inline comments for more details

Also, you should read the following comments in issue https://github.com/aspnet/Mvc/issues/7399#issuecomment-368575076. The snippet provided represents the approach I'd like to take for inferring a value for the required flag on parameters.


Customize translate function name

Hello,
Is it possible to customize the translate function name that the parser is looking for in the code?
Some context: I would like to use this library in VueJs templates. For this I need to attach a function to the prototype in order to be available in templates. It's common to prefix those with $. So ideally I can set the function name to somewhat like $translate or $t

You can add this entry to your l10ns.json file.
            "function": {
                "name": "$translate|$t",
                "nameUsingData": "$translate|$t"
            },

Note that this is not an official function.

Perfect, thanks. Guess would be useful to others as well and would deserve a place in the docs ;)

Maybe the $ needs to be escaped also with '\'. It's being passed as arguments to RegExp.

Hey @tinganho,
There is something weird with those function names. Somehow it only works if the function name is exactly 1 character in length...

Could you try without $ or escape it \$``? I have tried with this\\.l in one of my projects. So multiple character should work.

I'm using the following configuration:
{
    "defaultProject": "test",
    "projects": {
        "test": {
            "timezones": [
                "Europe/Zurich"
            ],
            "currencies": [
                "CHF"
            ],
            "interface": {
                "autoOpen": true,
                "port": 3001
            },
            "languages": {
                "en-US": "English",
                "de-CH": "Swiss"
            },
            "defaultLanguage": "en-US",
            "programmingLanguage": "javascript",
            "store": "localizations//",
            "output": "localizations//output",
            "source": ["l10ns.js"],
            "function": {
                "name": "ab",
                "nameUsingData": "ab"
            }
        }
    }
}

and my sample "view" file:
ab('A')

When I now run l10ns update the translated de-CH.json and en-US.json is just an empty array.
If I change the config to "function": { "name": "a", "nameUsingData": "a" } it works ( I get the keys in the json files.

@mediafreakch this is a bug. I published a new version<EMAIL_ADDRESS>Could you give it a try?

@tinganho Wow that was fast. I can confirm that this is working now. What is special is that I can use the dollar sign as follows:
In view:
$trans('KEY')

in config:
"function": {
  "name": "trans",
  "nameUsingData": "trans"
}

If I put the dollar into the config as well it doesn't work (escaped nor unescaped). Not sure if this is intentional, but anyway we can use the dollar sign as shown above.

Do you use this config?
"function": {
  "name": "\\$trans",
  "nameUsingData": "\\$trans"
}

Yes exactly. Accessing the function name in the view as $trans('KEY'). With your suggested config this doesn't work. With the one I showed above it does.

Strange it works for me:

var requireLocalizations = require('./output/all');
var $trans = requireLocalizations('en-US');
var x = $trans(
    'NEW_KEY'
);
console.log($trans('TEST', { test: 1260 }));
console.log($trans('CURRENCY', {
  price: {
    code: 'USD',
    amount: 0
  }
}))

$ node binaries/l10ns update
[added] NEW_KEY
[added] TEST
[added] CURRENCY

I did publish another small change could you try to update to<EMAIL_ADDRESS>

With the updated version it works also with the \\$ escaping. You are awesome thanks!


!nvidia-smi shows CUDA 12.2, but !nvcc -V shows 11.2 CUDA Compiler version

I was trying to install flash-attn for ComfyUI-ExLlama-Nodes, but i was greeted with this error:
    ERROR: Command errored out with exit status 1:
     command: /home/studio-lab-user/.conda/envs/default/bin/python3.10 -c 'import io, os, sys, setuptools, tokenize; sys.argv[0] = '"'"'/tmp/pip-install-jlkcxk9h/flash-attn_abe85aae80da4140845572141db7a95a/setup.py'"'"'; __file__='"'"'/tmp/pip-install-jlkcxk9h/flash-attn_abe85aae80da4140845572141db7a95a/setup.py'"'"';f = getattr(tokenize, '"'"'open'"'"', open)(__file__) if os.path.exists(__file__) else io.StringIO('"'"'from setuptools import setup; setup()'"'"');code = f.read().replace('"'"'\r\n'"'"', '"'"'\n'"'"');f.close();exec(compile(code, __file__, '"'"'exec'"'"'))' egg_info --egg-base /tmp/pip-pip-egg-info-uyl4bktx
         cwd: /tmp/pip-install-jlkcxk9h/flash-attn_abe85aae80da4140845572141db7a95a/
    Complete output (11 lines):
    fatal: not a git repository (or any of the parent directories): .git

    torch.__version__  = 2.1.0+cu118

    Traceback (most recent call last):
      File "<string>", line 1, in <module>
      File "/tmp/pip-install-jlkcxk9h/flash-attn_abe85aae80da4140845572141db7a95a/setup.py", line 114, in <module>
        raise RuntimeError(
    RuntimeError: FlashAttention is only supported on CUDA 11.6 and above.  Note: make sure nvcc has a supported version by running nvcc -V.

It told me to use nvcc -V, so i tried to execute it and gave me this
nvcc: NVIDIA (R) Cuda compiler driver
Copyright (c) 2005-2021 NVIDIA Corporation
Built on Sun_Feb_14_21:12:58_PST_2021
Cuda compilation tools, release 11.2, V11.2.152
Build cuda_11.2.r11.2/compiler.29618528_0

I thought to check nvdia-smi, got me CUDA 12.2
Mon Feb 26 09:42:28 2024
+---------------------------------------------------------------------------------------+
| NVIDIA-SMI 535.129.03             Driver Version: 535.129.03   CUDA Version: 12.2     |
|-----------------------------------------+----------------------+----------------------+
| GPU  Name                 Persistence-M | Bus-Id        Disp.A | Volatile Uncorr. ECC |
| Fan  Temp   Perf          Pwr:Usage/Cap |         Memory-Usage | GPU-Util  Compute M. |
|                                         |                      |               MIG M. |
|=========================================+======================+======================|
|   0  Tesla T4                       Off | 00000000:00:1E.0 Off |                    0 |
| N/A   27C    P0              25W /  70W |      2MiB / 15360MiB |      5%      Default |
|                                         |                      |                  N/A |
+-----------------------------------------+----------------------+----------------------+

+---------------------------------------------------------------------------------------+
| Processes:                                                                            |
|  GPU   GI   CI        PID   Type   Process name                            GPU Memory |
|        ID   ID                                                             Usage      |
|=======================================================================================|
|  No running processes found                                                           |
+---------------------------------------------------------------------------------------+

So i wonder if this is a mistake on putting the CUDA compiler as 11.2, not 12.2?

Are yo sure this is a bug? Did you check out the advice on this blog? https://komodor.com/blog/solving-fatal-not-a-git-repository-error/

Are yo sure this is a bug? Did you check out the advice on this blog? https://komodor.com/blog/solving-fatal-not-a-git-repository-error/

Im referring to the RuntimeError: FlashAttention is only supported on CUDA 11.6 and above.  Note: make sure nvcc has a supported version by running nvcc -V., not a git repository error.
That's why im asking if this is a mistake setting the CUDA compiler as 11.2 instead of 12.2. Checking on google colab its compiler is at 12.2 with !nvcc -V, but not sagemaker studio lab.

Well tbh I expected someone that was responsible for making the runtime stuff on the Sagemaker Studio Lab looked into this... They should be able to update CUDA Compiler to 12.2 though


[WIP] Map & City view

Sets up native bottom sheet container with React Native Map and City Components.
Todo

[ ] Set up user location service and nearest city matcher
[ ] Add event emitter for applying filters across Map & City view
[ ] Slide top bar (filters) up when bottom sheet is in full screen

Fails

:no_entry_sign:

No CHANGELOG added.

:no_entry_sign:

Missing Test Files:

src/lib/Components/__tests__/TabBar-tests.tsx
src/lib/Scenes/City/__tests__/City-tests.tsx
src/lib/Scenes/City/__tests__/cities-tests.ts
src/lib/Scenes/City/__tests__/index-tests.tsx
src/lib/Scenes/Map/Components/__tests__/FiltersBar-tests.tsx
src/lib/Scenes/Map/__tests__/GlobalMap-tests.tsx
src/lib/Scenes/Map/__tests__/index-tests.tsx

If these files are supposed to not exist, please update your PR body to include "#skip_new_tests".

  Generated by :no_entry_sign: dangerJS


Restrict TLS version / cipher suite

No e2e tests yet. Might be tricky to test, because Go seems to only support a specific TLS version.
Fixes https://github.com/istio/istio/issues/8804
Fixes https://github.com/istio/istio/issues/8769

[APPROVALNOTIFIER] This PR is NOT APPROVED
This pull-request has been approved by:
To fully approve this pull request, please assign additional approvers.
We suggest the following additional approver: geeknoid
If they are not already assigned, you can assign the PR to them by writing /assign @geeknoid in a comment when ready.
The full list of commands accepted by this bot can be found here.
The pull request process is described here

Needs approval from an approver in each of these files:

OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[APPROVALNOTIFIER] This PR is APPROVED
This pull-request has been approved by: rshriram
The full list of commands accepted by this bot can be found here.
The pull request process is described here

Needs approval from an approver in each of these files:

OWNERS [rshriram]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment


[BUG] Assisted Clear transaction dates are off by a day

Describe the bug
The dates on the matching transactions list do not match the dates of the transactions on which they are based. They seem to be on the candidate list as a day earlier than the actual transaction was recorded in YNAB.
To Reproduce
Conduct a credit card reconcilation using the Assisted Clear feature. You can see that there is a discrepancy immediately.
Screenshots

Desktop (please complete the following information):
OS = Windows 10
Chrome browser
Toolkit Version 2.35.1
Setting Export
Please replace the text 'REPLACE_ME_WITH_SETTINGS' below with your exported Toolkit settings. You can export these by going to the Toolkit Options page, click the Import/Export Settings button at the top right and copying the text in the modal which appears.
Note! DO NOT replace the leading and trailing ``` characters as they are required formatting characters.
[{"key":"AccountsDisplayDensity","value":"1"},{"key":"AccountsEmphasizedInflows","value":true},{"key":"AccountsEmphasizedOutflows","value":true},{"key":"AccountsStripedRows","value":true},{"key":"AccountsStripedRowsColor","value":"#fafafa"},{"key":"AccountsStripedRowsDarkColor","value":"#1e1e1f"},{"key":"AdjustableColumnWidths","value":false},{"key":"AssistedClear","value":true},{"key":"AutoDistributeSplits","value":false},{"key":"AutoEnableRunningBalance","value":false},{"key":"AutomaticallyMarkAsCleared","value":false},{"key":"BetterScrollbars","value":"0"},{"key":"BottomNotificationBar","value":false},{"key":"BudgetCategoryFeatures","value":true},{"key":"BudgetProgressBars","value":false},{"key":"BudgetQuickSwitch","value":false},{"key":"BudgetSpendingGoal","value":false},{"key":"BulkEditMemo","value":false},{"key":"BulkManagePayees","value":false},{"key":"CalculateIRR","value":false},{"key":"CalendarFirstDay","value":"0"},{"key":"CategoryActivityCopy","value":false},{"key":"CategoryActivityPopupWidth","value":"0"},{"key":"CategorySoloMode","value":"cat-solo-mode-toggle-all"},{"key":"ChangeEnterBehavior","value":true},{"key":"ChangeMemoEnterBehavior","value":false},{"key":"CheckCreditBalances","value":true},{"key":"CheckNumbers","value":false},{"key":"ClearSelection","value":false},{"key":"CollapseSideMenu","value":false},{"key":"ColourBlindMode","value":false},{"key":"CompactIncomeVsExpense","value":false},{"key":"ConfirmEditTransactionCancellation","value":false},{"key":"ConfirmKeyboardCancelationOfTransactionChanges","value":false},{"key":"CreditCardEmoji","value":true},{"key":"CtrlEnterCleared","value":false},{"key":"CurrentMonthIndicator","value":false},{"key":"CustomFlagNames","value":false},{"key":"CustomizeColourScheme","value":true},{"key":"DateOfMoney","value":true},{"key":"DaysOfBuffering","value":"3"},{"key":"DaysOfBufferingDate","value":false},{"key":"DaysOfBufferingExcludeCreditCards","value":false},{"key":"DaysOfBufferingHistoryLookup","value":"0"},{"key":"DeselectTransactionsOnSave","value":false},{"key":"DisableToolkit","value":false},{"key":"DisplayTargetGoalAmount","value":false},{"key":"DisplayTotalMonthlyGoals","value":true},{"key":"DisplayTotalOverspent","value":false},{"key":"DisplayUpcomingAmount","value":true},{"key":"EasyTransactionApproval","value":false},{"key":"EditAccountButton","value":false},{"key":"EnlargeCategoriesDropdown","value":true},{"key":"EnterToMove","value":false},{"key":"FilterCategories","value":true},{"key":"GoalIndicator","value":true},{"key":"GoalWarningColor","value":true},{"key":"GoogleFontsSelector","value":"0"},{"key":"HideAccountBalancesType","value":false},{"key":"HideAgeOfMoney","value":true},{"key":"HideClosedAccounts","value":false},{"key":"HideDebtRatio","value":false},{"key":"HideHelp","value":false},{"key":"HideReferralBanner","value":false},{"key":"HideTotalAvailable","value":false},{"key":"HighlightNegatives","value":true},{"key":"HoveredBudgetRows","value":true},{"key":"ImportNotification","value":"0"},{"key":"IncomeFromLastMonth","value":"0"},{"key":"IncomeVsExpenseHoverHighlight","value":true},{"key":"LargerClickableIcons","value":true},{"key":"LastReconciledDate","value":false},{"key":"LinkToInflows","value":true},{"key":"LiveOnLastMonthsIncome","value":"1"},{"key":"MasterCategoryRowColor","value":true},{"key":"MemoAsMarkdown","value":false},{"key":"MonthlyNotesPopupWidth","value":"0"},{"key":"NavDisplayDensity","value":"0"},{"key":"NotesAsMarkdown","value":false},{"key":"POSStyleCurrencyEntryMode","value":false},{"key":"Pacing","value":false},{"key":"PrintingImprovements","value":true},{"key":"PrivacyMode","value":"2"},{"key":"QuickBudgetWarning","value":false},{"key":"ReconcileBalance","value":false},{"key":"ReconcileConfetti","value":false},{"key":"ReconciledTextColor","value":false},{"key":"RemovePositiveHighlight","value":false},{"key":"RemoveZeroCategories","value":true},{"key":"ResizeInspector","value":false},{"key":"ResizeSidebar","value":false},{"key":"RightClickToEdit","value":true},{"key":"RowHeight","value":"0"},{"key":"RowsHeight","value":false},{"key":"RunningBalance","value":"0"},{"key":"ScrollableEditMenu","value":false},{"key":"SeamlessBudgetHeader","value":false},{"key":"SetMultipleFlags","value":true},{"key":"ShowAvailableAfterSavings","value":false},{"key":"ShowCategoryBalance","value":true},{"key":"ShowIntercom","value":true},{"key":"SpareChange","value":false},{"key":"SplitKeyboardShortcut","value":true},{"key":"SplitTransactionAutoAdjust","value":false},{"key":"SplitTransactionAutoFillPayee","value":false},{"key":"SplitTransactionTabExpand","value":true},{"key":"SquareNegativeMode","value":false},{"key":"StealingFromFuture","value":true},{"key":"StripedBudgetRows","value":false},{"key":"SubtractUpcomingFromAvailable","value":false},{"key":"SwapClearedFlagged","value":false},{"key":"TargetBalanceWarning","value":false},{"key":"ToBeBudgetedWarning","value":false},{"key":"ToggleAccountColumns","value":true},{"key":"ToggleMasterCategories","value":false},{"key":"ToggleSplits","value":true},{"key":"ToggleTransactionFilters","value":"1"},{"key":"ToolkitReports","value":true},{"key":"TransactionGridFeatures","value":true},{"key":"UnclearedAccountHighlight","value":false},{"key":"ViewZeroAsEmpty","value":true},{"key":"goalIndicator","value":false},{"key":"highlightNegativesNegative","value":false},{"key":"l10n","value":"0"},{"key":"options.dark-mode","value":false},{"key":"popupCalculator","value":false},{"key":"reports","value":true}]

I can take a look into this. The date formatting must be off.
￼Thanks for reporting the bug and hope you're enjoying the feature!

Hey, Tony. Thanks for touching base with me.
Note that the credit card transaction I highlighted occurred at 0128
GMT/UT, which was 0728 local (CDT, GMT+6). I could look up others, but that
one stuck out since I'd just been to the gas pump an hour earlier and KNEW
it was not from yesterday.
I LOVE LOVE LOVE the assisted clear feature. I reconcile my main credit
card daily, and this takes a job of a minute down to seconds. Talk about
reducing friction, eh?
It would be helpful if you could also show the Pending balance (uncleared)
before committing, though. That's my double-check number: if this batch
matches AND the pending total is right, I am 100 pct sure I'm on target. As
of now, I clear, and then verify the uncleared, so it's just a bit of a
bump.
Good luck and holler back if you need more info or if I can help in any way.
On Sat, Oct 2, 2021 at 11:10 AM Tony Vo @.***> wrote:

I can take a look into this. The date formatting must be off.
￼Thanks for reporting the bug and hope you're enjoying the feature!
—
You are receiving this because you authored the thread.
Reply to this email directly, view it on GitHub
https://github.com/toolkit-for-ynab/toolkit-for-ynab/issues/2572#issuecomment-932776661,
or unsubscribe
https://github.com/notifications/unsubscribe-auth/ABEK5ZIKCXHXK2BGGTJQFLLUE4VGPANCNFSM5FGNYHXQ
.
Triage notifications on the go with GitHub Mobile for iOS
https://apps.apple.com/app/apple-store/id1477376905?ct=notification-email&mt=8&pt=524675
or Android
https://play.google.com/store/apps/details?id=com.github.android&referrer=utm_campaign%3Dnotification-email%26utm_medium%3Demail%26utm_source%3Dgithub.


Text selection in NavigationListItems is disabled even on desktop

See https://github.com/SAP/openui5/commit/cf0c270a637e081ded3e5a1bc2b546ca7a69335d#commitcomment-9076720
and the comment added by endrx: on desktop text selection should be enabled, if possible.
Followup internal mail from aborjinik: text selection should be on, but maybe it affects active feedback; maybe ux should decide.

When type is navigation row is clickable and text selection gets disabled like a button. This is UX decision please see related commits https://github.com/SAP/openui5/commit/4d238eccdee801873d5cef6fc93b1456f1b81cab


Updated Player SDK version and gradle libs;

By submitting this pull request, I confirm that you can use, modify, copy, and redistribute this contribution, under the terms of your choice.

LGTM - thanks for the PR!


feat: refactor toggle button

Description
Zeplin: https://zpl.io/dxqGA5K
Fixes https://github.com/appsmithorg/appsmith/issues/19568
Type of change

New feature (non-breaking change which adds functionality)

How Has This Been Tested?

Manual on storybook
Manual on main repo
Jest
Cypress

Test Plan

Add Testsmith test cases links that relate to this PR

Issues raised during DP testing

Link issues raised during DP testing for better visiblity and tracking (copy link from comments dropped on this PR)

Checklist:
Dev activity

[ ] My code follows the style guidelines of this project
[ ] I have performed a self-review of my own code
[ ] I have commented my code, particularly in hard-to-understand areas
[ ] I have made corresponding changes to the documentation
[ ] My changes generate no new warnings
[ ] I have added tests that prove my fix is effective or that my feature works
[ ] New and existing unit tests pass locally with my changes

QA activity:

[ ] Test plan has been approved by relevant developers
[ ] Test plan has been peer reviewed by QA
[ ] Cypress test cases have been added and approved by either SDET or manual QA
[ ] Organized project review call with relevant stakeholders after Round 1/2 of QA
[ ] Added Test Plan Approved label after reveiwing all Cypress test

No major issues found in this PR.
However some minor issues:

Can we have the complete name of the component in Storybook

The icon inside takes more space than what is allotted (in the below image you can see that it eats up some padding space as well).

Keeping the Icon control blank does not throw an error. Should it? as this is a required field.

Can we have the complete name of the component in Storybook -> Fixed
The icon inside takes more space than what is allotted (in the below image you can see that it eats up some padding space as well). -> As per the description in the design file, the current implementation is done.
Keeping the Icon control blank does not throw an error. Should it? as this is a required field. -> We can take this up in next phase


Update glob.match calls to specify delimiter

The latest minor release of OPA (v0.17) fixes an issue in the glob.match built-in function. Basically the built-in function was supposed to default the delimiter to ....but it wasn't. I did a search of public repos on GitHub and noticed two cases here. The fix is to simply update the glob.match built-in function calls to supply ["/"] for the delimiter. We try to avoid backwards incompatible changes as much as possible but in this case it felt like it was better to fix the buggy built-in rather than deprecating it and introducing a new one.
cc @morgante

Thanks for letting us know, I assume these are the two cases you found?

https://github.com/forseti-security/policy-library/blob/a069b66f9cff36bc38a4c858bf3d788b29d61b4b/validator/iam_allowed_bindings.rego#L35
https://github.com/forseti-security/policy-library/blob/73e19dda7dbbf89a633308adf524d47d253301c4/validator/iam_allow_ban_roles.rego#L32

In both cases, we're explicitly passing a [] delimiter list (to avoid having any delimiters). Will this change/break?

Yep, those are the cases. I looked at the constraint parameters and assumed that you were intending to use / as the delimiter. What is the glob match behaviour that you want? If the current (fixed) built-in doesn't work for you use case, we can introduce another one.

In this case, I don't think we actually need any delimiter matching. You can see some sample params here and in those cases we're providing the full desired role (potentially with a wildcard).

Fair enough. I think the update to specify the "/" delimiter will work for your use cases. If you can have roles with multiple "/" characters in them you could use the super glob: https://www.openpolicyagent.org/docs/latest/policy-reference/#glob. Alternatively, if you just want exact matching and prefix matching (indicated w/ wildcard) you could implement that inside of Rego today. Hope this helps.

this policy tests actually break when using opa 0.17, probably because of this issue.
@FanchenBao can you take a look?

@AdrienWalkowiak Sure. Looking into it now.

@AdrienWalkowiak  @morgante A PR has been submitted for the bug fix: #260
I also wrote a bug fix report as comment for the PR.


package for pip: sipyco and newfocus8742

sipyco and newfocus8742 are not properly packaged in pypi (maybe they are in conda?)
for installation via python setup.py the dependence like
sipyco @ git+https://github.com/m-labs/sipyco.git
is valid and plico_motor_server properly installs (also from local with pip install -e .)
But when I try to upload on pip I get:
Invalid value for requires_dist. Error: Can't have direct dependency: 'sipyco @ git+https://github.com/m-labs/sipyco.git'
I can of course remove the direct dependence and package plico_motor_server as if sipyco and newfocus8742 were available on pip, but then plico_motor_server cannot be  installed anyhow, so it doesn't really help.
Should we go back and re-add sipyco and newfocus8742 as external submodules? It doesn't really solve the issue of pip-installing them... Or maybe yes, by properly modifying our setup.py to install both our code and the submodules one, skipping the submodules's setup.py?

newfocus8742 is on conda (in a non-default channel: https://anaconda.org/quartiq/repo ), but sipyco is not (quartiq split the sipyco module out from their main code, but did not add it to conda or anywhere else...).
I think that the only way is it to add them as submodules, maybe with a specific version, and modify setup.py to install them. It should be possible to do it automatically with setuptools.find_packages()

This was solved in 151e1143595747a17862fe1c9b8129936b1e8fef by reimplementing the communication with the newfocus8742 without the need of  external dependencies


:sparkles: Add the API only of APIExportEndpointSlice, Partition and PartitionSet

Summary
This PR introduces a new API that allows controllers of service providers to retrieve the endpoints of their APIExport services across multiple shards.
It also provides an API that allows service providers to create shard Partitions:

for the placement of controllers
for the processing of a subset of the endpoints

The implementation of the reconciliation logic will be provided in subsequent PRs.
Related issue(s)
Fixes #2331
Signed-off-by: Frederic Giloux<EMAIL_ADDRESS>

/retest

/retest

It seems that it is hitting https://github.com/kcp-dev/kcp/issues/2371

/retest

@ncdc @stevekuznetsov anything left preventing this PR to get merged?

No, this looks good I think for a first pass!
/lgtm
/approve
/hold cancel

Seems fine with it either way - adding new fields is a backwards-compatible change we can make at any time once the types are in

ok. I will add it to the coming reconciliation then PR.

/hold cancel

/assign @ncdc


Indirect Dependency Authentication Issue

Bug Report: Indirect Dependency Authentication Issue
Minimal Code Snippet
I am using a private package (a) that depends on another private package (b). The b package is not being fetched correctly when I run uv sync because it appears that authentication credentials are not being passed for indirect dependencies and the token isn't being fetched from the pyproject.toml instead its being checked on the lock file where there is no token.
Command Invoked
The command I invoked was:
uv sync --frozen --no-install-project --no-dev

Current uv Platform

Platform: Docker
Docker Image: ubuntu:noble
uv installed through COPY --from=ghcr.io/astral-sh/uv:0.4.18 /uv /bin/uv

Current uv Version
Version: 0.4.18
Error Message
The output of the command includes the following error:
error: Failed to prepare distributions
Caused by: Failed to fetch wheel: b @ git+https://gitlab.com/<redacted>/backend/b.git@<commit_hash>
Caused by: Git operation failed
Caused by: failed to clone into: /root/.cache/uv/git-v0/db/<some_id>
Caused by: failed to fetch commit <commit_hash>
Caused by: process didn't exit successfully: `git fetch --force --update-head-ok 'https://gitlab.com/<redacted>/backend/b.git' '+<commit_hash>:refs/remotes/origin/HEAD'` (exit status: 128)
fatal: could not read Username for 'https://gitlab.com': No such device or address

Additional Context

The a package is correctly set up to include the credentials in its pyproject.toml, but these credentials do not seem to propagate to the b dependency during the uv sync process.
I have verified that the credentials are correct and are functioning when manually installed.

Are you able to put together a more complete reproduction? Like something I can Git clone or copy-paste to get into this same error state? Would help a lot.

Sure, here you go:
There are 3 repos:

repo-main
private-repo-a
private-repo-b

repo-main is public so you will have to clone it. This would be our "application". This application has one direct dependency, private-repo-a, and one indirect dependency, private-repo-b.
repo-main has in its pyproject.toml an access token to access the private-repo-a, and private-repo-a has an access token to access private-repo-b. Whenever you try to uv sync to run the "application", you will find that private-repo-b isn't possible to clone because of the error: fatal: could not read Username for 'https://github.com': No such device or address
Let me know if you need anything further.
Note: The private token was specifically generated for this demo and only has access to both private repositories with read-only permissions.

Thank you!

Is there an ETA for this? Thank you!

I'm having the same issue, and I'd like to add that the environment variable method (using UV_INDEX_<INDEX_NAME>_USERNAME and UV_INDEX_<INDEX_NAME>_PASSWORD) does not seem to work either. Presumably because it is not reading pyproject.toml to find the index name.


Tolerance

The time zone in laravel is specified in Moscow, in" tolerance " it is specified in 180,but the question is what should be specified in minutes or in seconds?

Same as #95
Could you try out #98 ? This PR introduces time comparisons via Carbon
"romanzipp/laravel-twitch": "dev-fix-event-sub-verification-tolerance",

Same as #95
Could you try out #98 ? This PR introduces time comparisons via Carbon
"romanzipp/laravel-twitch": "dev-fix-event-sub-verification-tolerance",

it`s good, thanks


Handle headers as lowercase

Fixes #205

@ofrobots PTAL.

lgtm if tests pass.

The http hooks were persisting between tests. All tests are passing now that the agent is restarted fresh for each test.


helm install nginx-ingress stable/nginx-ingress [...] never returns with the static IP address

I'm following the tutorial "Create an ingress controller with a static public IP address in Azure Kubernetes Service (AKS)", and am stuck at the step where the ingress controller is deployed with the helm chart.
The public IP is assigned, and I can retrieve it with "az network public-ip show [...]". The ingress controller deploys fine without the static IP address. I've used both a registered domain name and a dummy domain name for the DNS_LABEL. I've also completely omitted the DNS_LABEL setting. All to no avail.

Document Details
⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

ID: 12009c1f-282d-2632-fac0-64b09c432833
Version Independent ID: 6052d3d4-d295-9340-b16d-4c200e34cd73
Content: Use ingress controller with static IP - Azure Kubernetes Service
Content Source: articles/aks/ingress-static-ip.md
Service: container-service
GitHub Login: @mlearned
Microsoft Alias: mlearned

@ronbruintjes Thank you for reaching out. At this time we are reviewing the ask and will provide an update as appropriate

It looks like the addition of the  --set controller.service.annotations."service\.beta\.kubernetes\.io/azure-dns-label-name"="DNS_LABEL" causes the issue.

Thank you @ronbruintjes for the feedback.
I have confirmed the article is working as written. One thing i can suggest is providing your own value for DNS_LABEL as called out in the article: https://docs.microsoft.com/en-us/azure/aks/ingress-static-ip#create-an-ingress-controller
Closing this issue for now but please follow up if you continue to see this issue.
#please-close

Thank you @ronbruintjes for the feedback.
I have confirmed the article is working as written. One thing i can suggest is providing your own value for DNS_LABEL as called out in the article: https://docs.microsoft.com/azure/aks/ingress-static-ip#create-an-ingress-controller
Closing this issue for now but please follow up if you continue to see this issue.
#please-close

I've tried supplying a value for DNS LABEL - I've used a FQDN, and a made up bogus name. Neither one seems to work. Maybe I'm misunderstanding, but the DNS LABEL is supposed to make HTTPS certificates work - so shouldn't it be the name of the site accessed on the ingress IP? Could you provide a sample?

Thank you @ronbruintjes for the feedback.
I have confirmed the article is working as written. One thing i can suggest is providing your own value for DNS_LABEL as called out in the article: https://docs.microsoft.com/azure/aks/ingress-static-ip#create-an-ingress-controller
Closing this issue for now but please follow up if you continue to see this issue.
#please-close

I've tried supplying a value for DNS LABEL - I've used a FQDN, and a made up bogus name. Neither one seems to work. Maybe I'm misunderstanding, but the DNS LABEL is supposed to make HTTPS certificates work - so shouldn't it be the name of the site accessed on the ingress IP? Could you provide a sample?

For testing purposes, try using something like ronbruintjes-sample-dns-label to see if it succeeds for you.

I've tried supplying a value for DNS LABEL - I've used a FQDN, and a made up bogus name. Neither one seems to work. Maybe I'm misunderstanding, but the DNS LABEL is supposed to make HTTPS certificates work - so shouldn't it be the name of the site accessed on the ingress IP? Could you provide a sample?

For testing purposes, try using something like ronbruintjes-sample-dns-label to see if it succeeds for you.

OK, now I'm baffled - that works. Why does "ronbruintjes-sample-dns-label" work, but "bogusIdentifier" doesn't...? :-O
I'm experimenting a bit more, and "stupid-label-name-4654" works too, but "bogusIdentifier" does not... nor does "name.with.dots.3623". So does it have to be lowercase only, one word, excluding certain characters?

I am stuck here as well here. The sample given on the website does not work at all. First I spent a lot of time figuring out that for the azure load balancer file the resource group name of the ip resource group should be used.
If I follow the azure-load-balancer setup for the fixed ip I would say that this dns must be filled in in the ingress setup.
Any progress here?

The problem I had with the label seems to be a restriction on what characters can be included in the DNS label. Only lower case, numbers, and dash seem to be allowed.
We were also able to deploy by disabling a webhook that validates the configuration. This was a Known Issue, and is resolved in a new release of the Helm chart.
Here's the changes I made to initially deploy (way back in August 2020 :)):

Use kubernetes.github.io/ingres-nginx as the repo
Add --version=2.12.1 while deploying. Also use a DNS label of lowercase and dashes only
When the external IP is in a different resource group, you need to supply --set controller.service.annotations."service\.beta\.kubernetes\.io/azure-load-balancer-resource-group"="name-of-the-resource-group" to the helm deploy
Delete the validation hook with kubectl delete -A ValidatingWebhookConfiguration nginx-ingress-ingress-nginx-admission
Delete the admission pod(s)
This should get you to the two ingress controlleres.

Dank je wel (thank you)! Delete the validation hook does not destroy anything? I read some doubt between the 3.5K issues reported in azurecli (a lot related to k8 not working). I will try. If working, is there anybody at MicrosoftDocs responsible for updating the documentation to avoid that those 3.5K issues get more... and/or MS fans go to Google or AWS?

not working...

Graag gedaan (you're welcome)! If it doesn't work, I think you may need to open a new issue related to the page. I doubt if anyone from Microsoft is watching this issue, since it's closed. You can reference this issue in the new one.
Good luck!

@ronbruintjes : I have a version working now with a second static ip, but it allows me to take away the azure load balancer (completely remove it) and the external ip of the ngnix is an external ip. I would expect that would be the ip of the azure load balancer? I believe that an azure-load-balancer and a ingress controller are two separate things? The ingress points back to the documentation on creating a static ip..and thus you start using that static ip for the ingress as well...which is in use of the azure load balancer. So azure load balancer is not present if you have the ingress?
https://docs.microsoft.com/en-us/azure/aks/static-ip

See also: https://github.com/MicrosoftDocs/azure-docs/issues/66416


lsp autocorrects incorrectly

What Git revision are you using?
$aiken --version
aiken v1.0.19-alpha+unknown

What operating system are you using, and which version?
nixos
Describe what the problem is?
lsp autocorrect on write to incorrect code.
Sample line:
  expect x == (y |> bytearray.take(3) )

Is being "corrected" to
  expect x == y |> bytearray.take(3)

which (see chat about fixity) is garbage.
What should be the expected behavior?
Preferably fixity was done sensibly (I dont know why we should do the same as elm - i don't see any benefit) .
Failing that, that this is not autoformatted incorrectly.

This was a problem before in early alpha, possibly pre-alpha, and the reason i didn't use formatting for a long time.
I will try bumping to v20 to see if it remains

I don't think it's fixed in 20. This is a long standing issue related to how groups get formatted

btw in regards to the sensible argument. it currently is sensible. it's not just cause elm does it. So does elixir, that's just how precedence is done on languages with pipes. look at this examples from the other issue
a + 2
|> add_one
|> add_one

what's the correct precedence here?
or for this
a == 2
|> foo
|> bar

It seems pretty clear to me that |> should have the lowest precedence otherwise you wouldn't be able to do something as basic as piping a binary operation expression into something.

Not all binary operators have the same precedence eg 2 + 3 == 5 is unambiguously true.
The precedence of pipe is moot. I don't write elixir or understand elixir docs. According to a cpp prop
https://www.open-std.org/jtc1/sc22/wg21/docs/papers/2022/p2672r0.html#operator-precedence
elm and elixir don't work the same. The placement of elm looks right
https://faq.elm-community.org/operators.html . Can't speak for elixir. Helpfully different languages use opposite scales of precedence.
I like (a + 2) |> add_one  and a == b |> f
Its a choice. Personally I would choose pipe higher. Regardless, it would be helpful if precedence was explicitly documented.

this should have been fixed in https://github.com/aiken-lang/aiken/pull/764 please let me know if the problem persists


Improve namespacing

[x] Move Reader\Interable to IterableReader to separate concepts better.
[ ] Merge FilterHandlerInterface into IterableHandlerInterface since it's used in iterable filter only.

Merge FilterHandlerInterface into IterableHandlerInterface since it's used in iterable filter only.

FilterHandlerInterface used in common reader interface FilterableDataInterface.


ECONNREFUSED

{ Error: connect ECONNREFUSED <IP_ADDRESS>:80
at Object.exports._errnoException (util.js:1018:11)
at exports._exceptionWithHostPort (util.js:1041:20)
at TCPConnectWrap.afterConnect [as oncomplete] (net.js:1086:14)
code: 'ECONNREFUSED',
errno: 'ECONNREFUSED',
syscall: 'connect',
address: '<IP_ADDRESS>',
port: 80 }

Documentation has been updated. Please have a look.


IPTT TvA report doesn't filter on Type

The IPTT Target vs. Actual report does not filter by type.  Even after applying a filter, all indicators, regardless of Type, are still shown.
Steps to reproduce:

Go to IPTT Quickstart page
Select TvA report for TolaData Demo for the program and Annual for the Target Periods.
Try to filter on TYPES.  There should be only one indicator left in the panel but there are still 5 there.

In indicators/views/views_reports we have this bit o' code:
 497         try:
 498             filters['indicator_type__in'] = data['ind_type'] if isinstance(data['ind_type'], list) else [
 499                 data['ind_typ']]
 500         except KeyError:
 501             pass

The key on line 499 is mispeeled: ind_typ should be ind_type. I'll put up a PR.
NB: When I finish the IPTT tests, at least one of them will be a regression test for this.


request support for Squad

hello GitHub users
wondering if anyone with the know how can add support for squad servers.
It would be much appreciated.

There's an open PR for it, but you should be able to do it right now by setting type to protocol-valve, and port to 27165

Fixed in #131


[8pt] Let one HUC process its own branches in one cmd

For AWS, we likely need another option to have GMS processing.  Currently, we process all HUCs (units), then go back and process all branches for all HUCs.
We need a new pattern for processing a HUC, then it auto processes its own branches before continuing.

It needs to operate exactly like gms_pipeline, gms_run_branch and gms_run_unit.  It might even be possible to replace gms_pipeline and continue to use gms_run_unit and gms_run-branch but with different lists (one just for a huc), then let it use it's own branchlist it creates.


Build warning "'matchLevel' is deprecated"

This warning has been around for some while in both the package and the compiler builds. Would be good to clear this.
Sources/_StringProcessing/ConsumerInterface.swift:139:12: warning build: 'matchLevel' is deprecated

@natecook1000 can you fix this and close this issue?


add sbt-scuggest plugin

Hi @ssanj,
Thank you for your contribution! We really value the time you've taken to put this together.
Before we proceed with reviewing this pull request, please sign the Typesafe Contributors License Agreement:
http://www.lightbend.com/contribute/cla

Looks like the Travis build has stalled?

Yea. Travis gets confused with PDF building I think.

signed the CLA.


Tighter error handling when the PyU4V.conf cannot be parsed

Error received is currently
requests.exceptions.InvalidURL: Failed to parse: https://None:None/univmax/restapi/84/sloprovisioning/symmetrix/None/maskingview
It would be great if we could catch this before it gets to the request.
Potential reasons for failure

The file cannot be found
The tags do not exist in the file
Permissions

Fix is in development, will also fix config file loading in Windows and initialising logger on Windows.

This has been addressed in https://github.com/MichaelMcAleer/PyU4V/pull/65


default plotting for clinical purposes

Currently left side kinematics, kinetics etc are plotted as a function of the R gait cycle. Also, for some coordinates positive and negative values are opposite from what is typically used in clinical practice.
Suggestion: add a boolean, e.g. bool_clinical_plot, that would convert the results of PredSim to a format typically used in clincal practice.

Typical reporting format:

L kinematics and kinetics as a function of L gait cycle. Same for R.
Vertical line for toe-off
rows: from proximal to distal
columns:  sagital plane, frontal plane, transverse plane

add R.ground_reaction.IC_l and R.ground_reaction.IC_r as output of post processing


Correctness of TaskScheduler::WakeThreads

Hello.
Minor problem: as far as I can understand, there is a race condition between checking for tasks and incrementing m_NumThreadsWaiting in TaskScheduler::WaitForTasks.

[worker thread] TaskScheduler::WaitForTasks is called when there are no tasks.
[another thread] TaskScheduler::SplitAndAddTask from another thread adds the task, and calls the TaskScheduler::WakeThreads.
[another thread] TaskScheduler::WakeThreads checks the m_NumThreadsWaiting and does not signal event.
[worker thread] No tasks are found, worker thread increments m_NumThreadsWaiting. EventWait is called, sleeping the thread until EventSignal is called next time, even when the thread could be processing the added task.

In my opinion, the best way to fix this would be

Changing the Event interface to Semaphore interface: SemaphorePublish(int count) + SemaphoreWait().
Changing the TaskScheduler::WaitForTasks so that it double-checks the pipes after incrementing m_NumThreadsWaiting.

This algorithm is very similar to benaphore (atomic counter + kernel semaphore) described in http://preshing.com/20150316/semaphores-are-surprisingly-versatile/
I will happily a pull-request with a fix if you'd like. Notice that this also fixes the #12

Thanks again for the post. This issue is indeed related to #12, and as per my comment there I was planning to move to a semaphore based design (which is partially in progress), i.e. no. 1. on your list.
I'm happy to leave both these open until I finish the fix, I'd rather do the work myself as I have an in progress change already.

The new implementtation using semaphore's should resolve this, as the waiter count is now incremented outside the check for task loop.


ReferenceError: webpackJsonp is not defined with SSR

I'm running into a small bug when using SSR for a project. A little background may be helpful on this on. I am using a headless CMS (Contentful) to bring content into my app, I have the calls isolated to contentWillMount hook which will populate the template. I tried the implementation for SSR that is recommended with preact-render-to-string, however, this does not pull in the Content from contentful and is only as up to date as the last build of that static file. Since editors edit content continuously I didn't want to build every time they published like that. I remember an old  Google video I watched of using headless chrome and puppeteer to do server side rendering, which seemed to be perfect for this use case. And it does indeed work wonderfully, headless chrome renders the html with all the CMS content. The front end router then takes control from there for users . I just get one small error with regard to chunking on the first initial load.
ReferenceError: webpackJsonp is not defined

This goes away if I pre-render more routes but of course this is not going to be the case since we have hundreds of articles on dynamic routes. It doesn't appear to affect the application at all beyond the single console error but it's been bugging me and I can't seem to get to the bottom of it.
Here's a gist of the server code: https://gist.github.com/mrispoli24/a169fd8445bc11cdc6267f793442c1b5
I'm using express with a single backend endpoing called /api that will be accessing our api-gateway as well as the content from Contentful.
Hopefully puppeteer can be a viable SSR alternative for those looking to use a headless CMS like Contentful as well.

Update I moved on from this approach, it was fast to setup but not the neatest. Ended up using Nextjs on top of express with Preact. Seemed a bit more stable for use with Contentful long term.


Please help...

Hi Jeff, Thanks for this lib, i am planning to use this for for my project. I am familiar with xbee/zigbee and how this work. I have a mesh network where i use only api frame packet to send to node/end device to coordinator or vise-versa. I can successfully receive data by this below:
private static async void Run()
        {
            _xbee = await XBeeController.FindAndOpenAsync(SerialPort.GetPortNames(), 115200);

            _xbee.DataReceived += _controller_DataReceived;
            //await node.TransmitDataAsync(Encoding.UTF8.GetBytes("hi here is some data"));
            //await node.TransmitDataAsync(Encoding.UTF8.GetBytes("Hello!"));
        }

        private static void _controller_DataReceived(object sender, SourcedDataReceivedEventArgs e)
        {
            Console.WriteLine("CReceived: {0}", ((e.Address).LongAddress));
            Console.WriteLine("recevied from: " + sender.ToString());
            Console.WriteLine("Data Received: {0}", Encoding.UTF8.GetString(e.Data));

        }

But struggling to simply send a packet, I was just wondering if you can show me what would be the best practice to get:
Type of received data frame?
send frame using different packet frame, such as 0x10, 0x11 with Long address or broadcast?
Thanks for your help, and keep up the good work.
update:
forget to mention the coordinator is ZigBeeS2.
Now i am able to send and receive the package using of your example as below. I wasn't able at the start because of router(A0=1) was configured as Explicit mode. when i use "TransmitDataAsync", data was ignored by router (as received data was no Explicit addressing command mode (0x11)). after change back to A0=0, received raw data as below:

{'options': b'\x01', 'id': 'rx', 'source_addr_long': b'\x00\x13\xa2\x00@\xaf\xb7_', 'source_addr': b'\x00\x00', 'rf_data': b'hi here is some data'}

private static async void _xbee_Run(string whatToSend, ulong xbeeAddress)
        { _xbee = new XBeeController();
            var _xbee = await XBeeController.FindAndOpenAsync(SerialPort.GetPortNames(), 115200);
            if (_xbee != null)
            {
                var node = await _xbee.GetRemoteNodeAsync(new NodeAddress(new LongAddress(xbeeAddress)));
                await node.TransmitDataAsync(Encoding.UTF8.GetBytes(whatToSend), true);
                _xbee.DataReceived += _xbee_DataReceived;
                 node.DataReceived += Node_DataReceived;
             )
            else{ ................. }

Sorry for the noob question, if i receive a new packet by _xbee.Datareceive, i want to send some Data to another Xbeenode. how can i handle this? how can i get a new instance of _xbee.GetRemoteNodeAsync? Thanks for your help!

Sorry, I haven't had a chance to look at this yet. I'll try to get to it this weekend. Thanks.

Thanks, no rush at all.

  Are you not able to?  Can you post what you're trying?

I have few xbee 2S(zigbee, API 2 with escape). 1xcoordinator and rest all router. Coordinator connected to  connected to PC. And all router connected to RPI(use xbee-python lib). Coordinator read data and type of frame and reply (0x11, or broadcast) some data back.

All I am trying to do is connect my xbee, read incoming packet and send data using different type of frame.

Ok, I thought your original comment said that you were ok not using explicit framing.  I don't have support for 0x10 or 0x11 in the library right now.  I can add them, I'm just trying to understand the use case.  For example, the only difference between 0x00 and 0x10 is the ability to specify additional options.  Can you tell me what options you need in 0x10?  Similarly, what are the features you need that are provided in 0x11?
Thanks

Ah.... ha. sorry I didn't make myself clear and didn't know that library don't support 0x10, 0x11. I am not sure why other people use this frame. As the payload is limited in size, I send different frameID, clusterID, frame Type to use as an tool for parsing and sending the data to right method. such as, frameID(auto generated for each packet) to confirm receive from application level. ClusterID for different group of router, so when server broadcast something, I can set particular ClusterID to get attention of the group i want to listen. There could be better way to do what i am using this frame type for, not sure.

I understand. Ok, let me see if I can work them into the API.

I much prefer the sharpest criticism of a single intelligent man to the thoughtless approval of the masses - Johannes Kepler

From: bshowket<EMAIL_ADDRESS>Sent: Sunday, April 30, 2017 5:08:01 PM
To: jefffhaynes/XBee
Cc: Jeff Haynes; Comment
Subject: Re: [jefffhaynes/XBee] Please help... (#21)
Ah.... ha. sorry I didn't make myself clear and didn't know that library don't support 0x10, 0x11. I am not sure why other people use this frame. As the payload is limited in size, I send different frameID, clusterID, frame Type to use as an tool for parsing and sending the data to right method. such as, frameID(auto generated for each packet) to confirm receive from application level. ClusterID for different group of router, so when server broadcast something, I can set particular ClusterID to get attention of the group i want to listen. There could be better way to do what i am using this frame type for, not sure.
—
You are receiving this because you commented.
Reply to this email directly, view it on GitHubhttps://github.com/jefffhaynes/XBee/issues/21#issuecomment-298257211, or mute the threadhttps://github.com/notifications/unsubscribe-auth/AJSKR3WCZGmyTfYO3mN5nm3Ip0-gJeHLks5r1PgxgaJpZM4NFKKQ.

Thanks!!!

I just realized it does support 0x10 for devices that support it and will automatically default to that. I'll look at adding 0x11.

I much prefer the sharpest criticism of a single intelligent man to the thoughtless approval of the masses - Johannes Kepler

From: bshowket<EMAIL_ADDRESS>Sent: Sunday, April 30, 2017 5:12:29 PM
To: jefffhaynes/XBee
Cc: Jeff Haynes; Comment
Subject: Re: [jefffhaynes/XBee] Please help... (#21)
Thanks!!!
—
You are receiving this because you commented.
Reply to this email directly, view it on GitHubhttps://github.com/jefffhaynes/XBee/issues/21#issuecomment-298257445, or mute the threadhttps://github.com/notifications/unsubscribe-auth/AJSKRw6IDJYaxKTfGGlVIWsL9N_50_FKks5r1Pk9gaJpZM4NFKKQ.

Ok, I added an overloaded TransmitDataAsync method that will send 0x11 in 4.1.1. Let me know if you have any problems with it.

I much prefer the sharpest criticism of a single intelligent man to the thoughtless approval of the masses - Johannes Kepler

From: Jeff Haynes<EMAIL_ADDRESS>Sent: Sunday, April 30, 2017 5:39:01 PM
To: jefffhaynes/XBee; jefffhaynes/XBee
Cc: Comment
Subject: Re: [jefffhaynes/XBee] Please help... (#21)
I just realized it does support 0x10 for devices that support it and will automatically default to that. I'll look at adding 0x11.

I much prefer the sharpest criticism of a single intelligent man to the thoughtless approval of the masses - Johannes Kepler

From: bshowket<EMAIL_ADDRESS>Sent: Sunday, April 30, 2017 5:12:29 PM
To: jefffhaynes/XBee
Cc: Jeff Haynes; Comment
Subject: Re: [jefffhaynes/XBee] Please help... (#21)
Thanks!!!
—
You are receiving this because you commented.
Reply to this email directly, view it on GitHubhttps://github.com/jefffhaynes/XBee/issues/21#issuecomment-298257445, or mute the threadhttps://github.com/notifications/unsubscribe-auth/AJSKRw6IDJYaxKTfGGlVIWsL9N_50_FKks5r1Pk9gaJpZM4NFKKQ.

Great!! Thanks.


Add path introduction

Path introduction is a trail of particles going through the entire path before spheres roll in.
Example config in gameplay.json:
"pathIntroduction": {
    "particle": "path_introduction.par",
    "speed": 1500,
    "density": 24,
    "separatePaths": false
}

particle - The particle that is going to be spawned.
speed - How fast the particle trail should move along.
density - The distance between each particle.
separatePaths - If set, each path will be introduced immediately after another one finishes. Else, all paths will be introduced simultaneously.

To disable path introduction, just omit this section. This also means that this will be a non-breaking change.

Has been implemented some time ago: https://github.com/jakubg1/OpenSMCE/commit/04d73353ad5bae3ef2db8c8d4a983394dbfad6be


https://github.com/BabylonJS/Babylon.js/issues/2036

https://github.com/BabylonJS/Babylon.js/issues/2032


League Leaders

League Leaders
User Story
As a football fan
I would like to see stats for the teams I search for
So that I can know more about that team
Acceptance Criteria
GIVEN that I am on the stats page
WHEN I open the page
THEN there will be an option to search for teams
WHEN I click on a team
THEN it will display various stats for the team
GIVEN that I am on the stats page and I have favorited a team
WHEN I open the page
THEN my favorited team will already have its stats displayed

finished, needs CSS as of 5:40pm 3/26/23


Joke generator added

Title and Issue number

I have added the joke generator.
Close #3568

Checklist:

[X] I have mentioned the issue number in my Pull Request.
[] I have commented my code, particularly in hard-to-understand areas
[] I have created a helpful and easy to understand README.md

@MohitGupta121 ,@Tushar255 Can it be merged now?


Live View looks broken

As you may see bellow, my camera is a Canon 600D (aka Ti3 Rebel)

Interesting. please download latest stable version of digicamcontrol: http://www.digicamcontrol.com/download and see if the liveview works there.

live view looks correct in digicamcontrol:

good find. i made a change. please try with latest 0.2.1-alpha version of the nuget.

ah i see now that LiveViewData also has ImageWidth and ImageHeight properties. can you see if those report the correct values?

checked that. unfortunately none of these properties is suitable. ImageWidth looks like the full frame (sensor capability ~5184) and the LiveViewImageWidth (and Height respectively) returns always "100". Looks more like a percentage or Thumbnail to me. FocusX and FocusX are returning 2388 and 1741. There is no any obvious correlation to me, among these numbers.

ok. i took another approach. please test again with version 0.2.2-alpha of the nuget

hello @joreg , it looks perfect, version 0.2.2-alpha is working great

good to hear. thanks for the report and checking!


Add a guide on namespacing events or creating "channels"

This will be best to show within the context of the chat app by either showing channels or allowing people to do direct messaging.

I think this can be closed now that we have documented event filtering and custom events.


Create coorbo.json

Changed username to "cohan" - Looks like this project is inactive though so not going to create a new req for it


Snippets

Hello. I've figured out, that in 2.23.13 most of the snippets don't work anymore (always blocks, initial, logic, reg, wire, etc.) Tried to fix it, but failed.

Fixed in 2.23.14 sorry about this one


[Feature Request] Is it possible to display RGBA volume data in VolumeViewport?

What feature or change would you like to see made?
Hello! I'm trying to display RGBA volume in VolumeViewport, but I guess only RGB data is supported (via PhotometricInterpretation: 'RGB' in ImageVolume metadata). I've tried to replace imageData with custom vtkImageData, where scalarsArray is replaced with RGBA data, but in this case Cornerstone displays nothing in the viewport.
Why should we prioritize this feature?
This is needed to implement overlaying of existing volume with rgba-colored data, so some voxels in overlay volume must have zero alpha value.

Can't you have the RGB volume and then fuse the other one on top? similar how we do it for pt ct fusion
https://www.cornerstonejs.org/live-examples/petct

I guess no, I need to display RGB data on top of other volume. Since I can't set alpha = 0 for e.g. black color, the base volume is completely hidden by RGB volume. Currently my usecase can be achieved by adding vtkImageSlice actor to the viewport, but it would be great to do this via Cornerstone's setVolumesForViewports

You can always right a colormap that can map black to 0 opacity, take a look here https://github.com/OHIF/Viewers/blob/master/extensions/tmtv/src/utils/colormaps/index.js

I guess colormap maps scalar values to rgb(a) color, but I already have rgb-colored voxels (so non-scalar voxel values), so colormap is not applicable here. Am I missing something?

I see, no you are right. so seems like the black (background) is the problem. hmmm, one option is to not encode as RGB and just apply the RGB aspect in the color transfer function, so just store non-rgb and take care of the background to 0 via scalar mapping? what do you think


Panic in the distributor

panic: runtime error: slice bounds out of range

goroutine 225 [running]:
panic(0xaf7560, 0xc4200160a0)
    /usr/local/go/src/runtime/panic.go:500 +0x1a1
github.com/weaveworks/cortex/chunk.(*AWSStore).lookupChunksForMatcher(0xc42026c640, 0x7fe601c4b4d0, 0xc420484fc0, 0xc42014de67, 0x1, 0x7ffdacdb3920, 0xc, 0xc4206e8180, 0x6, 0xc4206c26e0, ...)
    /go/src/github.com/weaveworks/cortex/chunk/chunk_store.go:572 +0xff7
github.com/weaveworks/cortex/chunk.(*AWSStore).lookupChunksFor.func1(0xc42026c640, 0x7fe601c4b4d0, 0xc420484fc0, 0xc42014de67, 0x1, 0x7ffdacdb3920, 0xc, 0xc4206e8180, 0x6, 0xc4206c26e0, ...)
    /go/src/github.com/weaveworks/cortex/chunk/chunk_store.go:505 +0xcf
created by github.com/weaveworks/cortex/chunk.(*AWSStore).lookupChunksFor
    /go/src/github.com/weaveworks/cortex/chunk/chunk_store.go:511 +0x17b
panic: runtime error: slice bounds out of range

This is happen on matchers of the kind ==""

Has to be on non-metric name.


Supported filter features

I'm having a few issues with filters and I'm not sure if it's something that's not actually meant to be supported yet (the README points to the JMESPath spec, so I assume that everything there is meant to be supported).
JEP 9 added some very useful improvements to filters, but it looks like "and expressions" are not supported, as I get a parse error attempting them.
# JMESPath::Errors::SyntaxError: expected a closing rbracket for the filter
JMESPath.search('[?foo && bar]', {})

Interestingly "or expressions" from the same JEP parse OK, but don't seem to work.
# []
JMESPath.search('[?foo || bar]', [])

# NoMethodError: undefined method `empty?' for true:TrueClass
JMESPath.search('[?foo || bar]', [{foo: true, bar: false}])

Finally, it seems that string matching with backticks fails, while matching with single quotes (which looks to be invalid?) does work... and matching with double quotes parses but fails to match.  Matching with double quotes inside backticks works as expected, but the double quotes are meant to be optional.
# JMESPath::Errors::SyntaxError: unexpected token 0
JMESPath.search('[?foo == `bar`]', [])

# [{:foo=>"bar"}]
JMESPath.search("[?foo == 'bar']", [{foo: 'bar'}])

# []
JMESPath.search('[?foo == "bar"]', [{foo: 'bar'}])

# [{:foo=>"bar"}]
JMESPath.search('[?foo == `"bar"`]', [{foo: 'bar'}])

I checked out the behaviour of the PHP version on these as well and some of the same issues crop up.  Perhaps I'm misunderstanding some things?

And expressions also fail with much the same error ("Expected a closing rbracket for the filter")
Or expressions parse and work as expected
Backticks work as expected, but single quotes are still allowed and double quotes parse but fail to match.

WRT the strings, there seems to be some difference between the original spec and how this is defined in the current spec.
On that basis, is seems like the ruby implementation is consistent with the current spec in accepting 'foo' and `"foo"`, and in rejecting `foo` (although I note that the tutorial does still permit `foo` style string delimiters).  The behaviour with double quoted strings, e.g. "foo", is odd though; shouldn't this be a parse error?
Overall this inconsistent behaviour between libraries is a bit of a hassle.

This has been added in 526bcb6b3ec99f5add6b074e6e711ec733f6e4dc. Expect a new release shortly.

Awesome, thanks @trevorrowe


x918—As an ARA (Ilaria), I want to specify that the dual index plate is either Fresh frozen or FFPE when transferring reagents

Add a dropdown list to page, options Fresh frozen and FFPE to appear on the view report for, i.e. new column to be dual index plate type, options Fresh Frozen or FFPE
Mandatory field

error using already plates registered in STAN before this enhancement.
I can get a list of plate IDs and types together if needed?

@Katy, Do you mean it doesn't work for slides that is already registered before this enhancement?

For a dual index plate already in the system, as we use can use a dual index plate for 96 wells. I have put a screenshot on slack of the error. I'm going to test for a new dual index plate now

@seenanair For Plate types can we update to have the below please:
Fresh Frozen - Dual Index TT Set A
FFPE - Dual Index TS Set A
Once updated everything was working fine so can be moved to waiting release.
I'll put in another story to update the release file with dual index plate type

@khelwood Just to let you know of the following update  from Katy, in case it requires chnages in core side.

@seenanair For Plate types can we update to have the below please: Fresh Frozen - Dual Index TT Set A FFPE - Dual Index TS Set A
Once updated everything was working fine so can be moved to waiting release. I'll put in another story to update the release file with dual index plate type

@seenanair @khelwood  on the dropdown list on the feature can we see the below please?
Fresh Frozen - Dual Index TT Set A
FFPE - Dual Index TS Set A
Also when we re-scan in a registered barcode it asked for the type again, can we lock this once a plate type is assigned to it


UserInfo.blocked is not checked anywhere

UserInfo has a field blocked with the comment True if the user is blocked from signing in.
However, this field is not read anywhere in serverpod, as far as I can tell.
In particular, I can't see any code that checks whether a user is blocked if an endpoint specifies
  @override
  bool get requireLogin => true;

I found the place where blocked should be checked:
server/endpoint_dispatch.dart
/// Checks if a user can access an [Endpoint]. If access is granted null is
  /// returned, otherwise a [ResultAuthenticationFailed] describing the issue is
  /// returned.
  Future<ResultAuthenticationFailed?> canUserAccessEndpoint(
      Session session, Endpoint endpoint) async {
    var auth = session.authenticationKey;
    if (endpoint.requireLogin) {
      if (auth == null) {
        return ResultAuthenticationFailed('No authentication provided');
      }
      if (!await session.isUserSignedIn) {
        return ResultAuthenticationFailed('Authentication failed');
      }
    }

    if (endpoint.requiredScopes.isNotEmpty) {
      if (!await session.isUserSignedIn) {
        return ResultAuthenticationFailed(
            'Sign in required to access this endpoint');
      }

      for (var requiredScope in endpoint.requiredScopes) {
        if (!(await session.scopes)!.contains(requiredScope)) {
          return ResultAuthenticationFailed(
              'User does not have access to scope ${requiredScope.name}');
        }
      }
    }
    return null;
  }

This should be updated to add, before return null:
    if (session.signedInUser!.blocked) {
      return ResultAuthenticationFailed(
          'User is blocked');
    }

Sorry, the code suggestion won't work because session.signedInUser doesn't exist. How can canUserAccessEndpoint get access to the UserInfo for the logged-in user?

It can be useful when used together with the auth module, which has a callback for approving a log in. But you are right, perhaps this should be an automatic check.

See the PR linked above this comment.


ProfileCardSolid is missing

The icon ProfileCardSolid is missing.
I am willing to create a PR for this.

It must be a new one. I will update it.

Appreciate it. Thanks.

It seems the original icons do not have it even though outline has it.
And their folder contents are not consistent.
Please create an issue at https://github.com/themesberg/flowbite-icons/issues.


Observer callback and initial color value of xFF000000

Using ColorPickerView in a xml layout with enableAlpha="false"
and initializing view by calling setInitialColor() with opaque Black color  #FF000000
After that, observer always invokes callback with color #FF000000 no matter where user taps on the color wheel to pick colors.
User has to tap on the seek bar for the observer callback to actually change the color from black.

This is confusing to the a user. I suggest to reset luminosity to 100% when a user taps on the wheel since the wheel is showing 100% luminosity colors.

This is by design because I want to preserve the values from the sliders (the 'luminosity' as well as the 'alpha').
The design refers to the color picker from Xcode, but the difference is that it changes the color wheel when you seeking the 'luminosity' seek bar, the reason why I didn't implement this is that I want to make the color wheel independent on the sliders.
This is really confusing but I think it's acceptable because when a user taps on the wheel, the slider's color will change which can catch the user's attention.
I will think further about this.


implement From for [u8; 4]

What problem does this solve or what need does it fill?
It's convenient when working with images to be able to convert a color to a u8 array.
What solution would you like?
either:
- implement From<Color> for [u8; 4]
- implement a method with a specific name in Color.
What alternative(s) have you considered?
manually convert it.
[
    color.r().mul(255.0) as u8,
    color.g().mul(255.0) as u8,
    color.b().mul(255.0) as u8,
    color.a().mul(255.0) as u8,
]

it feels a bit unnecessary

The primary issue I see with this is that it's unclear what color space the result is supposed to be in using a From impl. An explicitly named conversion is probably the way to go here.

ah, I should have read that lol

The primary issue I see with this is that it's unclear what color space the result is supposed to be in using a From impl. An explicitly named conversion is probably the way to go here.

what name would make sense for this? into_rgba_u8?

The primary issue I see with this is that it's unclear what color space the result is supposed to be in using a From impl. An explicitly named conversion is probably the way to go here.

From is implemented for [f32; 4] already. what makes this different?

Oh yeah you're right. IMO that should be removed since it has an implicit conversion and it's unclear what color space it's using.


feat(y12): add y12 upload/download

:tada: This PR is included in version 2.0.0 :tada:
The release is available on GitHub release
Your semantic-release bot :package::rocket:


Increments version to <IP_ADDRESS>

Not sure why opensearch-trigger bot didn't trigger
Check List
~- [ ] New functionality includes testing~
~- [ ] New functionality has been documented~

[x] Commits are signed per the DCO using --signoff

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.
For more information on following Developer Certificate of Origin and signing off your commits, please check here.

Waiting on core version to be bumped: https://github.com/opensearch-project/OpenSearch-Dashboards/pull/5294


Fails to start or reset when use functions of turned-off extensions.

Bug report
Describe the bug
If you use extensions which are turned off by default then you can't start or either do db reset .
To Reproduce
Use any function from a turned-off-by-default  extension, Ex: FuzzyStrMatch and then try to do db reset or supabase start.
Error: Error resetting database: ERROR:  function levenshtein(character varying, character varying) does not exist
Expected behavior
The used extension should get turned on automatically or by setting a config in config.toml
Screenshots
System information

OS: Independant
Browser (if applies) Independant
Version of supabase-js: 0.18.2
Version of Node.js: v6.9.2

Additional context
Let developer config and turn-on extensions by default in config.toml

Hi @Mohsen7s , with the release of CLI v1, our recommendation here is to commit your extension config as migration files. For example,
CREATE EXTENSION IF NOT EXISTS FuzzyStrMatch;

SELECT levenshtein('apple', 'alice')

When you push this migration to a hosted Supabase project, it also ensures that the extension is enabled on remote.
Feel free to open a new issue if this doesn't solve your need.


[WIP] theme upload/download/delete

closes #7204
Upload, download and delete themes within Ghost.
TODO's

[x]  add download theme (optional right now)
[x] permissions for upload
[x] permissions for download
[x] add permissions via migration --> admin and owner will get more permissions
[x]  wait for new gscan version
[x]  check fix in core/server/api/utils.js
[x] update available themes after success upload
[x] test upload and activate with Ghost-Admin branch
[x] delete unused theme endpoints
[x] theme is always downloaded as theme.zip
[x] delete theme
[x] change download /:name/download
[x] add test for migration 007/001
[x] ensure migration works
[x] go over tmp created files again (e.q. after upload --> /tmp folder is created (the code empties it, but still))
[x] test download with Ghost-Admin branch
[x] go over TODO's
[x] use storage.serve for download?
[x] use getStorage('themes')
[x] run migration again SQLITE_CONSTRAINT: NOT NULL [IGNORED, because that error was not a real use case, because i've added the delete permissions later]
[x] optimise upload theme code for custom storage adapters
[x] replace sync operations with async
[x] only local file storage for theme uploads for now
[x] squash some of the commits
[x] fix tests
[x] code QA before ready to review

ready for review. i kept the history of commits, but i would recommend reading the full diff, because it's not a lot to read and 50% are tests 🎉


Hitting the error "ERR! ERROR in sendMessage -->    errorSummary: 'Security Check Required'"

I made a chat bot that receives a POST request and send a message to the specified Facebook ID. After a while, Facebook has blocked it from sending with
ERR!
ERROR in sendMessage -->  { __ar: 1,
ERR! ERROR in sendMessage -->    error: 1357007,
ERR! ERROR in sendMessage -->    errorSummary: 'Security Check Required',
ERR! ERROR in sendMessage -->    errorDescription: 'A security check is required to proceed.',
ERR! ERROR in sendMessage -->    payload:
ERR! ERROR in sendMessage -->     { __dialogID: 'u_c_0',
ERR! ERROR in sendMessage -->       __dialogx:
I tried logging in with my browser and I can still manually send messages to anyone.
Any clues on 'Security Check Required'?
Thanks Folk!

Are you spamming messages?

@bsansouci When we rewrite error handling, this is another candidate for one we could catch and rethrow.

well I did not repeatedly send out messages. It was intended to be a notification channel for users. How can I get away with this problem? I logged in from a browser and there's no security check to proceed; it seems fine on the browser but not with the API.
Please help. Thanks.

Can you provide a minimal working example of this problem?

I am also troubled with the same error . Especially if you write a URL to msg.body. Is it like a link to other sites will not be able to send been recognized as spam ?

I hit the same problem. The app worked fine for about an hour. I did end up sending about 80 messages to one user (a test account I created) before Facebook blocked me. Any idea how to get around this? Thanks again for the awesome API!
ERR! ERROR in sendMessage -->  { __ar: 1, ERR! ERROR in sendMessage -->    error: 1357007, ERR! ERROR in sendMessage -->    errorSummary: 'Security Check Required', ERR! ERROR in sendMessage -->    errorDescription: 'A security check is required to proceed.', ERR! ERROR in sendMessage -->    payload: ERR! ERROR in sendMessage -->     { __dialogID: 'u_6_0', ERR! ERROR in sendMessage -->       __dialogx: ERR! ERROR in sendMessage -->        { instances: [Object], ERR! ERROR in sendMessage -->          markup: [Object], ERR! ERROR in sendMessage -->          elements: [Object], ERR! ERROR in sendMessage -->          require: [Object], ERR! ERROR in sendMessage -->          define: [Object] } },

The only solution I can imagine to this is to try to log out and then log back in.  Does that help?  Getting around spam-blocking mechanisms isn't really the purpose of this API.

I agree with @Schmavery, getting around spam-blocking mechanisms is a whole other can of tuna that we don't want to open. If it's for testing purposes try having multiple accounts and add a delay between messages.

I'm going to close this for now as it doesn't seem there is much we can do.


Custom filesystem

Hi,
I would like to provide a "custom" filesystem to the binary I am executing. I am thinking about something like this:
Create an empty filesystem and then add some files into it, like
testdata/lib64/libc.so.6 -> /lib/x86_64-linux-gnu/libc.so.6
my_file -> /tmp/file

One thing I could image is to hook into the syscalls and rewrite the paths there, or do you have a better way? I am willing to implement this on my own, but want some feedback on where to put this.
Btw, how unstable is the branch "unstable"?

unstable means it can fail tests temporarily and I will force push to it sometimes, but it's really the branch you need to target for development.
You should look into https://github.com/google/gvisor for virtual filesystem. I think it would be really useful to rebuild a lot of the posix/linux/darwin backend around gvisor + generated code, as they're way further along on linux kernel support than usercorn.
https://github.com/lunixbochs/usercorn/issues/104 is the previous VFS issue

I can see how running usercorn under gvisor would make it less complicated. Are you thinking about something like this:

user executes $ usercorn example.out
usercorn forks itself and runs a new process under gvisor where the binary is emulated
the binary is communicating with gvisor, which is controlled by usercorn (e.g. to trace syscalls)

or something like that:
We look into how gvisor executes the syscalls and just use that interface?
What about cross plattform? We might loose windows and osx support...

What I propose is that we create an interface System:
type System interface {
  func getgroups(ngid int, gid *_Gid_t) (n int, err error)
  func setgroups(ngid int, gid *_Gid_t) (err error)
  func wait4(pid int, wstatus *_C_int, options int, rusage *Rusage) (wpid int, err error)
  func accept(s int, rsa *RawSockaddrAny, addrlen *_Socklen) (fd int, err error)
  // ....
}

And we put that as field of the Usercorn struct. And then instead of using the syscall package directly, we use the that interface (which defaults to just proxying all those calls to the syscall package)

There's no point in running usercorn under gvisor. Both usercorn and gvisor implement a virtual kernel in Go. You can just port parts of the gvisor kernel directly into usercorn.
The interface System is exactly like the kernel objects we already have.


More simplification (with a bonus performance boost)

Extract snippets like this into a div_ceil function:

let mut num_lines = self.cells.len() / num_columns;
if self.cells.len() % num_columns != 0 {
    num_lines += 1;
}

Simplify the Display impl, by precalculating the separator and using the padding functionality of format!.
Simplify theoretical_max_num_lines by using enumerate and only deal with the widths instead of the the whole Cell.
Remove a clone in width_dimensions.
Add an example that takes a few seconds for benchmarking.

Once I had the example, I benchmarked this against main and already got a >2.58x improvement!
Benchmark 1: target/bench/old
  Time (mean ± σ):      4.412 s ±  0.048 s    [User: 3.738 s, System: 0.670 s]
  Range (min … max):    4.354 s …  4.507 s    10 runs

Benchmark 2: target/bench/new
  Time (mean ± σ):      1.709 s ±  0.014 s    [User: 1.085 s, System: 0.624 s]
  Range (min … max):    1.694 s …  1.739 s    10 runs

Summary
  'target/bench/new' ran
    2.58 ± 0.03 times faster than 'target/bench/old'

EDIT: Got another performance boost from 2.1x to 2.5x faster

Note entirely sure what's going on but there's some weird things happening in this branch when I try to run all the firefox files.

Alright, I'm putting this up for review anyway. The reason is that I want to have these cleanups before I start working on more fixes. It doesn't have to be perfect and we can fix more along the way.


Fixup travis config

Should build for 3.4 - 3.7 dev. Should only deploy to pypi for 3.6

addressed by pr #14