Issue with chrome extensions

When trying to run the chrome extension examples I can't seem to get around this error.
Refused to connect to 'https://cdn-lfs-us-1.hf.co/repos/ea/90/ea90ac38f608f2fa13d505306d67e6a194ebbad90f61e9889a9435286d6034e0/6c681d791cf2d278843952540386171f96f3acd25007b688169fd4bc6a28b923?response-content-disposition=inline%3B+filename*%3DUTF-8%27%27params_shard_26.bin%3B+filename%3D%22params_shard_26.bin%22%3B&response-content-type=application%2Foctet-stream&Expires=1728203236&Policy=eyJTdGF0ZW1lbnQiOlt7IkNvbmRpdGlvbiI6eyJEYXRlTGVzc1RoYW4iOnsiQVdTOkVwb2NoVGltZSI6MTcyODIwMzIzNn19LCJSZXNvdXJjZSI6Imh0dHBzOi8vY2RuLWxmcy11cy0xLm...MDdiNjg4MTY5ZmQ0YmM2YTI4YjkyMz9yZXNwb25zZS1jb250ZW50LWRpc3Bvc2l0aW9uPSomcmVzcG9uc2UtY29udGVudC10eXBlPSoifV19&Signature=AzDYlr0wmkvD8j5JGrNod0B3J3ici8QqOj5FSoLhqwuiE9ZxpnYO8Kv7Bzqgd23rCv27vx3RfEISOjfxW2hWDqWr6QSlTaWxoKRNiGD%7EGnDMIvH1ySdENFlZj17n7aas%7Ed6VriLXTQESqaS56mXHLs6tSUQ1z2VoGDMKr3WtZTrhhcj%7EPy8Uej9y%7E4l6CBZ3-6TL7wj38IL%7EF6TMnu7CTweWHAEVoWzsY0kBBtK1Y%7E0colESvRXaOFEf32%7EsZsGHXzYOKHNiSxffcUuRB%7E1Ow-SfdHHOOkuJqV%7ExN8tKMFEoTB5WklN59KwabZs0crWh8dUNhyNNaLLedrCfBJJ%7EOw__&Key-Pair-Id=K24J24Z295AEI9' because it violates the following Content Security Policy directive: "connect-src 'self' data: http://localhost:8000 https://huggingface.co https://cdn-lfs.huggingface.co https://cdn-lfs-us-1.huggingface.co https://raw.githubusercontent.com".

Any ideas?

Looks like the domain huggingface uses for caching weights was changed; I added https://cdn-lfs-us-1.hf.co to the manifest and it seemed to get past this issue.
That said, I am still having trouble running the service worker extension example. I'm currently getting the following error:
Error in event handler: Error: return from a unknown uuid, msg=[object Object] and the model doesn't seem to get loaded.

When trying to run the chrome extension examples I can't seem to get around this error.
Any ideas?

As @CharanSriramUni mentioned above, this is due to the new huggingface domain name not being included in the example extension's CSP configuration. https://github.com/mlc-ai/web-llm/pull/603 should resolve this.

Looks like the domain huggingface uses for caching weights was changed; I added https://cdn-lfs-us-1.hf.co to the manifest and it seemed to get past this issue.
That said, I am still having trouble running the service worker extension example. I'm currently getting the following error: Error in event handler: Error: return from a unknown uuid, msg=[object Object] and the model doesn't seem to get loaded.

This error is fine. It happens when the popup receives message that was not sent by it from the service worker.
I have tried the service worker extension example by myself and it works fine on my end. Could you please try again and let me know if the issue persists?

Oh. Seems to work now. I think there might be an issue if the extension popup is clicked several times while loading but the Qwen model loads and works for me if allowed to load.


Symbols sidebar filter does not have placeholder text

Version and Platform (required):

Binary Ninja Version: 4.2.6455-dev,  2c8da1e
OS: macos
OS Version: 15.1
CPU Architecture: arm64

Bug Description:
I believe there should be some text indicating "Search symbols."

Resolved in builds >= 4.3.6536


add long help text and example usage to kube-inject command

Jenkins job manager/presubmit passed

Jenkins job manager/presubmit passed

Jenkins job manager/presubmit passed

Jenkins job manager/presubmit passed


Py3.8 breaks parcels on a Mac?

I've run into compilation errors just specifying python=3 upon installation. Falling back to python=3.6 seems to have solved this for now.
Should the installation instructions be adapted until this is figured out?
(Related: #691)

OK, I've now added python=3.6 to the installation instructions at http://oceanparcels.org/#installing
Do we also need to change the environment_py*.xml files?

This seems to have fixed for now by specifically forcing python=3.6 on http://oceanparcels.org/#installing


Using decorators on client-side

I'd like to use decorators on both server and client-side and share the representers through a gem... Not seeing a way on the client side to use the decorators to make http requests.
Is this possible?

@apotonick got this working for a different project. (I'm using Virtus models, btw.) The syntax I'm using is:
class SongDecorator < Roar::Decorator
  include Roar::JSON

  property :title
end

class SongClient < SongDecorator
  include Roar::Client
  Roar::HttpVerbs.transport_engine = Roar::Transport::Faraday
end

client = SongClient.new(Song.new)
client.get(...)

works like a charm!

Cool! We should add tests for that kind of usage to Roar, here: https://github.com/apotonick/roar/blob/master/test/client_test.rb
You keen to do that? :wink:

Sure :smile:


no matches for kind "Certificate" in version "cert-manager.io/v1" | no matches for kind "Issuer" in version "cert-manager.io/v1"

Getting 2 errors while installing the k8 manifest. Looks like maybe a kubectl / k8 API version mismatch. I am not able to find this k8 API and kind in k8 API docs.
apiVersion: cert-manager.io/v1
kind: Certificate
Details of my error in the attached screenshots.

Should I delete this observability namespace and try an older version of jaeger manifest? Is there a compatibility matrix for kubectl to Jaeger manifest version mapping?

hi @abhishekgoldypathak, thanks for your report. Seems cert-manager is not installed. I'll revisit the documentation.
Could you try installing cert-manager and then deploying jaeger-operator again?
kubectl apply --validate=false -f https://github.com/jetstack/cert-manager/releases/download/1.6.1/cert-manager.yaml

this seems to be the working command not the one provided

kubectl apply --validate=false -f https://github.com/cert-manager/cert-manager/releases/download/v1.6.2/cert-manager.yaml

after this I get a couple of connection refused errors. I don't recognize this IP <IP_ADDRESS> - is this some sort of default / hardcoded value?

please suggest

@abhishekgoldypathak I had the same issue and resolved it with canal:
kubectl apply -f https://projectcalico.docs.tigera.io/manifests/canal.yaml

You might also need some timeout, as cert-manager needs around 2 minutes to deploy successfully.

my cert manager pods don't come up, looks like a wrong node-selector default setting (or something else)

mh... Too many pods doesnt sound right.
How many pods do you have up and running? e.g. bc <<< "$(kubectl get pods --all-namespaces | wc -l) - 1"
The number of pods available would be interesting too. kubectl cluster-info dump | grep pods -A 10 -B 10

Interesting catch  - I had my application (product) running which has ~130 total pods - deleted those helm charts and now jaeger comes up..
but logically, what would jaeger trace if I start it with my application brought down :)

however before I go there I don't see the Jaeger UI, no svc running on 16886 port

but logically, what would jaeger trace if I start it with my application brought down :)

it would trace itself ^^
Until here it looks like you only deployed the operator. You should be able to continue with the quick-start deploying the allinone image.

I used this a while ago
kubectl apply -n observability -f - <<EOF
apiVersion: jaegertracing.io/v1
kind: Jaeger
metadata:
  name: simplest
EOF

then
kubectl port-forward -n observability svc/simplest-query 8080:16686

The cert manager was added to docs


Make benchmarks/bytes00 pass on haskell backend

This makes the bytes00 proof pass on the Haskell backend, but it takes roughly 5 hours on my machine, so should not be merged yet.

Could you elaborate on " kevm: remove manual --repl in favor of frontend supported --debugger --debug-script"? Could you provide the equivalent command of kevm --repl ...?

I pulled out non-semantic changes to this PR: https://github.com/kframework/evm-semantics/pull/887


Voting tal

Done some work on chats

Thanks
On Mon, Jun 6, 2016 at 9:57 AM, Tal<EMAIL_ADDRESS>wrote:

Merged #1 https://github.com/delib-org/delib-fron2/pull/1.
—
You are receiving this because you are subscribed to this thread.
Reply to this email directly, view it on GitHub
https://github.com/delib-org/delib-fron2/pull/1#event-682461440, or mute
the thread
https://github.com/notifications/unsubscribe/AJp22pSV1Tr_5XXJTJkvQXHXafUsR2Gaks5qI8T1gaJpZM4IunCr
.


updated the pre-requisite para for more clarity

Added the part of picking one of the courses below before all the courses are listed on line #400. Removed the "PS" part below line #407

@wuodland thank you for your help! :pray:
Could you also make more two things?

Bump our Curriculum Version to 1.2.3 here, because you're "fixing" our file.
Add a little explanation in our CHANGELOG file, saying what you're doing. More explanations about CHANGELOG files here. The text will be something like this:[1.2.3] 2015-10-12

### Changed
- Updated the prerequisite section for more clarity

@ericdouglas Thanks. I've made a separate PR fur the changelog & also changed the main version number in the readme file.
This is my first pull-req, ty for guiding me :)

@wuodland ok, no problem! You did a great work, thank you for helping us! :smile:


No windows when switched to eGPU

I've set up the mode 2 and was able to boot and get display on the eGPU DP out.
The problem is that GDM just shows a gray screen and if I press enter and then my user password it logs in into my normal Wayland but it only shows the background image. No GNOME shell, no windows. Just the background.
If I go to other consoles by using Ctrl+Alt+F3 they do not show anything, and if I come back to my wayland session, some times it shows the background like if I pressed the windows button in the GNOME session (the desktop backgound is zoomed out in the center of the screen) but there is no favorite bar neither the top bar.
Maybe Wayland is not aware of where to send the display for the windows? Do not know how to debug this. Can you point me to the right direction please?
My system: Fedora 40

@olivergs
It would help to know the laptop model and eGPU you are using.
It sounds to me like the primary display is still being sent to the laptop's internal display or something and the eGPU's DP out is showing the secondary display output. By default GDM shows gray on the second display and the desktop top bar is only shown on the primary display.
You can use both method 2 and method 3 at the same time and this is my preferred way for my personal system using Fedora 40 as method 3 adds the specific variables used by the GNOME desktop.

Thanks @ewagner12 for the fast response.
My setup is a LG Gram 15 laptop with intel Irix XE iGPU, connected via USB-C to an LG display. Only one cable is connected to the laptop.
That cable is most of the time connected to the USB-C connector in the monitor, but I was hotplugging the eGPU to use it as a CUDA accelerator with no display.
The eGPU is a TH3P4G3 with an RTX3060Ti 8GB card on it.
Before using your script I was able to connect the laptop to the egpu, and from the same egpu mount I can connect to the USB-C monitor, so I can have the eGPU connected for CUDA work, but still use the USB-C display.
After using it, I was able to boot in the card. No display on USB-C. neither in laptop screen, but in the NVIDIA DP I can see the gray screen, then login to desktop and see the background. The problem is that neither mouse, nor keyboard are responsive after booting in the eGPU mode.
The new problem is that even reconfiguring everything to defaults and removing the script using the uninstall option, I can't plug the eGPU anymore, because if I do, then the USB-C display freezes, no display on NVIDIA DP so I've to power off the laptop. I can't see anything so I do not know if it is a kernel oops or what it is.
I will try as you said and set this to use mode 2 and 3 at the same time and let's see what happens.
Thanks again for your help.

After some extra testing, it seems that if I connect the eGPU to the monitor through DP, and try to use the eGPU secondary thunderbolt port to downlink to the monitor, wayland gets crazy and is not able to understand where the display should go and stops working completely.
Now I've removed the DP cable from the RTX3060 it works as before: I can connect the eGPU and from the eGPU rack directly to the USB-C in the monitor and worked as before.
Anyway I still have the problems to connect the eGPU as primary display, but I will continue experimenting. I suppose it is just a small configuration quirk that is keeping me away of getting the windows displayed.


add DB_USERNAME & DB_PASSWORD to lambo

For me it would be helpful to be able to specify username and password for database in the lambo config.
What do you think?

Fine now?

Guess I resolved every change request @mattstauffer

Thanks @Naoray! We're merged into dev-master for folks to test and I'll make a release later.


Add option to skip SSH provisioning

Currently the "none" driver name is used to skip the SSH provisioning steps:
https://github.com/docker/machine/blob/45f08d9815734d88d25e9c49873cf67b6699a5fd/libmachine/host.go#L110
I'd like to be able to skip the SSH provisioning too, for a SDC Docker driver I'm writing.
My initial thoughts are to add SupportsSSH() or SupportsSSHProvisioning() to the Driver interface - but that requires changes to all existing drivers - which I'd prefer to avoid.
Any thoughts for best approach?

@twhiteman What specifically are you wanting to skip?  Installation of Docker?  Setting hostname, configuration of the certs etc.?

@nathanleclaire All of it :P - I wanted to create a driver (which behaves similar to the none driver), but where I can specify the SDC Docker settings, like:
   --sdc-account "twhiteman"		SDC Account [$SDC_ACCOUNT]
   --sdc-key "path-to-cert"			SDC SSH key [$SDC_KEY]
   --sdc-region "us-east-3b" 		SDC data center (DC) [$SDC_REGION]

This is in the aim of then being able to use docker-machine env to populate the docker client settings.
Perhaps another take on this would be imaging the provisioning steps occurring over a REST API?
Note: The SDC Docker already handles the remote docker machine setup in other ways, so the other docker-machine commands (start, stop, upgrade, rm, ...) are not applicable for SDC Docker.

What OS is SDC behind the scenes?  If SDC supports /etc/os-release I think your easiest way would be to implement a custom provisioner.

OS: SmartOS / Illumos (aka Solaris) - no /etc/os-release (it's Unix but not Linux).
For custom provisioner, it looks like it still requires SSH, thus my question about an alternative merthod (if I'm reading the code right). C.f.:
https://github.com/docker/machine/blob/45f08d9815734d88d25e9c49873cf67b6699a5fd/libmachine/provision/provisioner.go#L71
https://github.com/docker/machine/blob/45f08d9815734d88d25e9c49873cf67b6699a5fd/libmachine/host.go#L110

Note that the SDC Docker I'm referring to uses its own implementation of the Docker Remote API, so it's somewhat different to a regular docker host setup. This means the provisioning side for SDC Docker (setting up keys/certs, managing machines, installing docker, ...) is already done (already available) when the user first creates an account with SDC.

Here's my thinking on how to enable this (since IMO it's a very important type of driver to enable and would love to see Triton / Carina type drivers):
I don't want to change the Driver interface directly since it is a huge pain to try and do so (at least without a version bump to the driver API, which I want to save until we're going to make some changes that are really exceptionally worth it).  But, I think we can use Go's type system to control flows like this.
Basically, I'm thinking that maybe we can bundle the methods related to SSH into another interface (say SSHer) and embed that into the Driver interface.  Consequently, we can make a SkipSSHer interface which drivers such as Triton embed (which fulfills the interface, but with "noop" methods), and then check the driver to see if it fulfills SkipSSHer before moving forward with provisioning.  If it does we will, naturally, skip the normal provisioning process.

I think the SkipSSHer idea is probably the best way to get this going quickly and without too much pain.
But I think we should also consider bumping the Driver API, and adding a mechanism for a driver to override DetectProvisioner and provide its own provisioning mechanism...


[Feature] Deploy Linkis with HDFS

Search before asking

[X] I had searched in the issues and found no similar feature requirement.

Problem Description
Verify that Linkis could be deployed with HDFS config
Description
No response
Use case
No response
solutions
No response
Anything else
No response
Are you willing to submit a PR?

[X] Yes I am willing to submit a PR!

I will fix this


Make table name clickable

The table name that shows in the subtitle element clickable so that it navigates to the recordset page for that table.

This commit resolves this issue.


drawio: 13.7.9 -> 13.9.5

Automatic update generated by nixpkgs-update tools. This update was made based on information from https://github.com/jgraph/drawio-desktop/releases.
meta.description for drawio is: "A desktop application for creating diagrams"
meta.homepage for drawio is: "https://about.draw.io/"
meta.changelog for drawio is: "https://github.com/jgraph/drawio-desktop/releases/tag/v13.9.5"
Updates performed

Version update

To inspect upstream changes

Release on GitHub

Compare changes on GitHub

Impact

Checks done (click to expand)

built on NixOS

The tests defined in passthru.tests, if any, passed

0 of 0 passed binary check by having a zero exit code.

0 of 0 passed binary check by having the new version present in output.

found 13.9.5 with grep in /nix/store/frbya7q8diihc7fqn9jdj8l548x5k9mm-drawio-13.9.5

directory tree listing: https://gist.github.com/fd464882ef84f0b248f908388c632aec

du listing: https://gist.github.com/02e79131c9224388a5e43f9ff578f7d7

Rebuild report (if merged into master) (click to expand)

1 total rebuild path(s)

1 package rebuild(s)

1 x86_64-linux rebuild(s)
0 i686-linux rebuild(s)
0 x86_64-darwin rebuild(s)
0 aarch64-linux rebuild(s)

First fifty rebuilds by attrpath
drawio

Instructions to test this update (click to expand)

Either download from Cachix:
nix-store -r /nix/store/frbya7q8diihc7fqn9jdj8l548x5k9mm-drawio-13.9.5 \
  --option binary-caches 'https://cache.nixos.org/ https://nix-community.cachix.org/' \
  --option trusted-public-keys '
  nix-community.cachix.org-1:mB9FSh9qf2dCimDSUo8Zy7bkq5CX+/rkCWyvRCYg3Fs=
  cache.nixos.org-1:6NCHdD59X431o0gWypbMrAURkbJ16ZPMQFGspcDShjY=
  '

(The Cachix cache is only trusted for this store-path realization.)
For the Cachix download to work, your user must be in the trusted-users list or you can use sudo since root is effectively trusted.
Or, build yourself:
nix-build -A drawio https://github.com/r-ryantm/nixpkgs/archive/d8c9dd18e4a32d41d1e216d07b6b43e9d4e4d051.tar.gz

After you've downloaded or built it, look at the files and if there are any, run the binaries:
ls -la /nix/store/frbya7q8diihc7fqn9jdj8l548x5k9mm-drawio-13.9.5
ls -la /nix/store/frbya7q8diihc7fqn9jdj8l548x5k9mm-drawio-13.9.5/bin

Pre-merge build results
We have automatically built all packages that will get rebuilt due to
this change.
This gives evidence on whether the upgrade will break dependent packages.
Note sometimes packages show up as failed to build independent of the
change, simply because they are already broken on the target branch.
Result of nixpkgs-review 1

1 package built:

drawio

Maintainer pings
cc @danieldk for testing.

I've 'built' this and tried to run it, but ran into an issue.
[14087:1115/225901.762077:FATAL:setuid_sandbox_host.cc(158)] The SUID sandbox helper binary was found, but is not configured correctly. Rather than run without sandboxing I'm aborting now. You need to make sure that /nix/store/frbya7q8diihc7fqn9jdj8l548x5k9mm-drawio-13.9.5/share/draw.io/chrome-sandbox is owned by root and has mode 4755.
Trace/breakpoint trap (core dumped)

I have found the nixos option that changes this (security.chromiumSuidSandbox.enable), but unsure how to change it only for testing.


Add support for cleartype text antialiasing

Summary of the Pull Request
I needed to do something to keep sane so today I day of learned about antialiasing. This PR adds the ability to specify the "antialiasingMode" as a setting.

"antialiasingMode": "grayscale": the current behavior, D2D1_TEXT_ANTIALIAS_MODE_GRAYSCALE
"antialiasingMode": "cleartype": use D2D1_TEXT_ANTIALIAS_MODE_CLEARTYPE instead

PR Checklist

[x] Closes #1298
[x] I work here
[ ] I didn't add tests
[x] Requires documentation to be updated

Detailed Description of the Pull Request / Additional comments
Grayscale:

Cleartype:

Side-by-side (can you tell which is which?)

Please do put aliased in as an option.

Should this be the beginning of the font object? I am envisioning a future where we...
"font": {
    "family": "Cascadia Code",
    "weight": 400,
    "features": ["dlig", "ss01"]
}

but of course, maybe it chould also support a string ("font": "Cascadia Code")

@DHowett-MSFT I'm gonna argue no, because I want this for 1.0 😄
That's a fine idea for 1.x/backlog IMO. If "font" is a string, use that. If it's a object, try parsing other bits out of it. That'll work well enough, but won't land this side of 1.0

/azp run


Java 2.4: Strong Type Languages

Description :scroll:
Add audio, documentation and video regarding Strong Type Languages.

Domain of Contribution :bar_chart:

[x] Java

Location of File to be added
The files should be added inside the Strong Type Languages which will be inside Fundamentals folder which will be inside of Java folder. If the folder is not present, create the folder with this exact name. The documentation file can be in the
.md/.py/.ipynb format. Audio should be in .mp3 format and to be submitted through a Google drive link. Video can be in any format and should be submitted through a Google Drive link.
Note:

You are required to comment with \assign CONTENT_TYPE, so that other content types can be created at the same time.
Failing to comment in the above manner will lead to the removal of assignment from the issue even if the bot assigns.
You are required to do a PR within 7 days otherwise you will be unassigned and others will be assigned.
Issues will be assigned on a first come first serve basis.

\assign Document

\assign Document

\assign audio

@lakshya7878 You have been assigned for Document and @Anushka-Gamad You have been assigned for Audio.

\assign Document

\assign video

@sanghisha145 You have been assigned for video


Fix IR devices creating >100 services per accessory

Fixes https://github.com/0x5e/homebridge-tuya-platform/issues/238

Thanks for the PR! the BaseAccessory will add AccessoryInformation and Battery(not exist for IR device) services, so should it be 99 instead of 100?
I'm curious why you have so many services..


Display expired entries when opening or unlocking the database

In KeeWeb, the only way to know if an entry is expired is to see it by chance when reviewing a list or search result. I would like KeeWeb to to automatically display expired and soon-to-expire entries as a search result whenever one opens or unlocks the database.
My understanding of the purpose of the field (within KeePass) is to be able to proactively act on an entry the will soon expire, or has expired (e.g., renew an expiring license, expect the arrival of an expiring credit card, etc.). Without an expiry list, the user will never know that an entry has expired unless the user stumbles upon the entry or in the unlikely event that all their entries happen fit within the screen height.
This was also requested as part of #49 (Add security check), however, that would still require the user to remember to periodically perform the check.
===
KeeWeb v1.1.4 (08087c3, 2016-04-21)
Environment: electron v0.37.4
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_4) AppleWebKit/537.36 (KHTML, like Gecko) KeeWeb/1.1.4 Chrome/49.0.2623.75 Electron/0.37.4 Safari/537.36

Audit link will contain a special bubble in case of notifications (like update bell).
The expired entries list will be inside Audit tab. Closing this, as the notification is planned in Audit and we'll not show the expiry list on app startup.

That's a sensible plan. Thanks for your response.


Keepass export doesn't contain all entries?

This was due to datamodel mismatch.. if account has len(secrets) = 0, nothing got exported. Because we support multiple secrets per one account, in Keepass export we repeat the same account for each secret.. so no secret, no account.


SimpleITK R Wrapping does not respect SimpleITK_FORBID_DOWNLOADS

Files related to R documentation such as "cthead1.png" and sitkRdfiles.tar.gz are always downloaded.

After looking at the sitkExternalData module: https://github.com/SimpleITK/SimpleITK/blob/1720d80024aa1527f372163ac5dff4e44068c80f/CMake/sitkExternalData.cmake#L35
The R wrapping is behaving correctly. As when SimpleITK_FORBID_DOWNLOADS is enabled, no remote URLs are added and only the local caches are used. The local caches can be populated with a SimpleITKData archive.


Replace usage of commons collections 3 with commons collections 4

Commons collections 3 is outdated and not maintained anymore, this change updates all usage to commons collections 4 - which is already used in some places

As long as it is provided by the uber-jar it will be tricky to prevent those imports from sneaking in again. Any reason why even https://repo1.maven.org/maven2/com/adobe/aem/uber-jar/6.5.21/uber-jar-6.5.21.jar still contains Collections 3? I would expect that to be only provided in https://repo1.maven.org/maven2/com/adobe/aem/uber-jar/6.5.21/uber-jar-6.5.21-apis-with-deprecations.jar....

Is there maybe some configuration on https://github.com/adobe/aemanalyser-maven-plugin/tree/main/aemanalyser-maven-plugin#configuration which could be leveraged to make the build fail in case of using deprecated API (is there even an analyser task for it)?

@kwin I agree that it would be nice to prevent reintroduction of usage of such APIs. The best place is a PR review - not fool proof of course.
The aemanalyser maven plugin checks such API usage and by default WARNs. It can be changed to fail.
(Site note: the reporting in the latest versions of the plugin is currently broken)

Is anything missing to apply this PR?

Can someone please merge this?


EstimatorV2 does not have zne_mitigation option though it is documented

Describe the bug
EstimatorV2 does not have zne_mitigation option though it is documented here: https://docs.quantum.ibm.com/run/advanced-runtime-options#error-mitigation
Steps to reproduce
from qiskit_ibm_runtime import QiskitRuntimeService, EstimatorV2

service = QiskitRuntimeService()
backend = service.backend("ibm_pinguino1")
estimator = EstimatorV2(backend=backend)
estimator.options.zne_mitigation = True

output:
ValidationError: 1 validation error for EstimatorOptions
zne_mitigation
  Object has no attribute 'zne_mitigation' [type=no_such_attribute, input_value=True, input_type=bool]

Expected behavior
EstimatorV2 supports 'zne_mitigation' or zne.enable (like dynamical_decoupling), and/or the documentation is updated.
Suggested solutions
Additional Information

qiskit-ibm-runtime version: 0.21.1
Python version: 3.10.13
Operating system: macOS 14.3.1

I've found zne_mitigation option in ResilienceOptionsV2. That suggests it is a bug in the documentation where resilience is missing after options, i.e. correct doc should be like:
estimator.options.resilience.zne_mitigation = True
estimator.options.resilience.zne.noise_factors = [1, 3, 5]
estimator.options.resilience.zne.noise_factors = [1, 3, 5]


Part of the code block is hidden

part of the code block is hidden for the below link
https://docs.microsoft.com/en-us/aspnet/core/performance/caching/distributed?view=aspnetcore-2.2
Please have a look at the attached screenshot

dup of #13143


Add .merge, .without etc as static methods

Is it possibly a good idea to add .merge, .omit, .without, .asMutable() to seamless-immutable as static methods? This way, in production, no properties or methods have to be added to an object. Also, it reduces the chance of trying to call one of those methods on an object which is not wrapped.

I like this idea, and I wish I'd thought of it back when I first made the library! (A production-specific build was not on the radar back then.)
At this point, though, this would be a monumental breaking change for the sake of a performance improvement it's not clear would make a difference for people using the library today.
This seems unlikely to be the right move in the foreseeable future, so I'm going to close this rather than leave it in limbo. Great thought, though!


[CSPM] k8sconfig: handle boolean CLI flags correctly

What does this PR do?
Handling boolean CLI flags following the UNIX conventions that without an argument, they represent a truthy value.
Motivation
K8s components can be used with boolean flags without value.
--peer-client-cert-auth is equivalent to --peer-client-cert-auth=true or --peer-client-cert-auth true
Describe how to test/QA your changes
Identify a Kubernetes deployment component configured with such boolean flags and check that the resulting resource is indeed reporting it as a TRUE value.

/merge


Use k8s.io/api/admission/v1 instead of v1beta1

v1beta1 will be removed in Kubernetes 1.22. Still a way off but doing this now in case we forget.
Checklist

[x] Update changelog in CHANGELOG.md.

Tested on gauss


Proxy settings for request

Currently it's not possible to run this framework behind a proxy

python-telegram-bot did a great job
https://github.com/python-telegram-bot/python-telegram-bot/blob/b9f56ca47900d92cd8757e72b392efef617997d3/telegram/utils/request.py#L127-L151

I guess this is an easy issue for people who already used urllib3. If you know how to add code to be able to use a proxy I would be very glad if you could help.

Hi,
I could look into it. Is there a reason you are using urllib3 and not requests (which is based on urllib3 too)?
By default, requests already use the environment variables HTTP_PROXY, HTTPS_PROXY to set the proxy. It is also possible to use a SOCKS proxy with the additionnal lib requests[socks].

@StephenSorriaux thanks :)
I am not sure what the pros and cons of requests are. If you feel that requests is better, I would love to hear your reasons.
I thought that urllib3 might be more lightweight. But I am honest that I did not take much time for research of this topic.

I think you are right about urllib3 being more lightweight. But there is no difference between the two in performance's terms. Also, I noticed urllib is recommanding requests as HTTP client (https://docs.python.org/3/library/urllib.request.html#module-urllib.request)
AFAICT, requests will give you right away some new features:

proxy support using environment variables
.netrc support, which would make HTTP auth easier using your framework
if needed in the future, usage of Session for cookie persistence

I let you decide whether you want to stick with urllib3 or change to requests, I will submit a PR accordingly. :)

Feel free to use requests if it means less work (not re-inventing the wheel).
Thanks a lot :)


ISPN-6767 Upgrade to Hibernate ORM 5.1.1.Final

https://issues.jboss.org/browse/ISPN-6767

Looks good. Pulling...

Integrated in master. Thanks @Sanne !

@anistor thanks, but forgot a line! sorry, see PR #4519


Can't connect to website

The CNAME file points to osdev.wiki, but because of that, when I click https://osdev-wiki.github.io/wiki, I get sent to the osdev.wiki domain which has no content.


Fix stacktraceusage with more than 1 rule

This was broken due to too aggressive caching.
This was working:
<nlog>
   <targets>
       <target name='debug' type='Debug' layout='${message}' />
       <target name='debug2' type='Debug' layout='${callsite} ${message}' />
   </targets>
   <rules>
       <logger name='*' minlevel='Debug' writeTo='debug2' />
       <logger name='*' minlevel='Debug' writeTo='debug' />
   </rules>
</nlog>

and this wasn't (nullref in stacktrace renderer, because of maxstacktrace = none)
<nlog>
   <targets>
       <target name='debug' type='Debug' layout='${message}' />
       <target name='debug2' type='Debug' layout='${callsite} ${message}' />
   </targets>
   <rules>
       <logger name='*' minlevel='Debug' writeTo='debug' />
       <logger name='*' minlevel='Debug' writeTo='debug2' />
   </rules>
</nlog>

fixes https://github.com/NLog/NLog/issues/1363

Current coverage is 75.23%

Merging #1364 into master will increase coverage by +0.06% as of 07f306b

@@            master   #1364   diff @@
======================================
  Files          267     267
  Stmts        15526   15528     +2
  Branches      1631    1631
  Methods          0       0
======================================
+ Hit          11672   11682    +10
- Partial        383     384     +1
+ Missed        3471    3462     -9

Review entire Coverage Diff as of 07f306b

Uncovered Suggestions

+0.09% via ...gingConfiguration.cs#374...387
+0.09% via ...gingConfiguration.cs#340...353
+0.08% via ...argets/FileTarget.cs#1713...1725
See 7 more...

Powered by Codecov. Updated on successful CI builds.


[zh] sync blog: 2023-05-24-oci-security-profiles.md

Add zh text to this blog:
content/zh-cn/blog/_posts/2023-05-24-oci-security-profiles.md

See preview please.

/approve

/lgtm


Discord can't find libffmpeg.so

Describe the bug
Discord fails to find libffmpeg.so:
[leo60228@leotop:~]$ Discord
/nix/store/m0wfcq5cmjp8admq06bv1vq9d5dkpcla-discord-0.0.12/bin/Discord: error while loading shared libraries: libffmpeg.so: cannot open shared object file: No such file or directory

Adding what seems to be the correct libffmpeg.so to LD_LIBRARY_PATH works.
[leo60228@leotop:~]$ LD_LIBRARY_PATH=$LD_LIBRARY_PATH:$(dirname $(which Discord))/../opt/Discord/ Discord
Discord 0.0.12

To Reproduce
Steps to reproduce the behavior:

Install discord
Start Discord

Expected behavior
I expect Discord to find its libraries.
Additional context
It would be very strange if I was the first person to encounter this, so I'm assuming that it's an issue with my system. However, all indications I can find point to this being a Nixpkgs bug, so I'm reporting it here.
Note that I'm using Nixpkgs via its flake. I can reproduce this issue using the github:NixOS/nixpkgs/nixos-20.09 flakes (used for NixOS) and nixpkgs/master flakes, as well as from a local Nixpkgs checkout and a non-flake command like nix-shell -I nixpkgs=. -p discord.
Notify maintainers
@ldesgoui @MP2E @tadeokondrak
Metadata

system: "x86_64-linux"
host os: Linux 5.4.75, NixOS, 20.09.20201118.58f9c4c (Nightingale)
multi-user?: yes
sandbox: yes
version: nix-env (Nix) 2.4pre20201102_550e11f
channels(root): ""
channels(leo60228): ""
nixpkgs: /nix/store/5c45nyf2kwjq40lz4nfycwkhjwg21rhn-source

Maintainer information:
# a list of nixpkgs attributes affected by the problem
attribute: discord discord-ptb
# a list of nixos modules affected by the problem
module:

The segfault turned out to be because my X server managed to get itself into a broken state, restarting display-manager.service fixed it.

This fixes the problem. I'm not sure if it's the right solution, though:
diff --git a/discord-base.nix b/discord-base.nix
index 5aa9db7..66a5c3d 100644
--- a/discord-base.nix
+++ b/discord-base.nix
@@ -33,7 +33,7 @@ in stdenv.mkDerivation rec {
     wrapProgram $out/opt/${binaryName}/${binaryName} \
         "''${gappsWrapperArgs[@]}" \
         --prefix XDG_DATA_DIRS : "${gtk3}/share/gsettings-schemas/${gtk3.name}/" \
-        --prefix LD_LIBRARY_PATH : ${libPath}
+        --prefix LD_LIBRARY_PATH : ${libPath}:$out/opt/${binaryName}

     ln -s $out/opt/${binaryName}/${binaryName} $out/bin/
     ln -s $out/opt/${binaryName}/discord.png $out/share/pixmaps/${pname}.png

It's been working OK for me. I just checked on current nixos-unstable and couldn't reproduce either.
Looking at the package, the situation seems a bit bizarre; on my system, all the dependencies appear to be in the executable RUNPATH and also in the LD_LIBRARY_PATH.
The relevant code stems from here: https://github.com/NixOS/nixpkgs/commit/8753b10808338c52d59dc5f2f74fb9c089ab134c; the description indicates there's been an issue before.
https://github.com/NixOS/nixpkgs/blob/98fc56e481bfd1cc535c210e0d229c47d78b7271/pkgs/applications/networking/instant-messengers/discord/base.nix#L46-L52
I'm not sure what, if anything, is achieved by including the patchelf line in the installPhase since it gets run automatically later during the fixup anyway... In fact, I don't understand how the above commit changed anything - except that it removed out/opt/discord from the desired rpath. On my system, this is found later on during the auto-patchelf - look for ffmpeg in the build log:

Build log
[craig@samwise:~/nixpkgs]
((f6b5bfdb470...) *$%)$ nix-build . -A discord --check
checking outputs of '/nix/store/x4qjpn8bsw6lcqi677rsa89qvsjn3wxb-discord-0.0.13.drv'...
unpacking sources
unpacking source archive /nix/store/flm29sd7qwihn6azglgzw736snfsp0mb-discord-0.0.13.tar.gz
source root is Discord
setting SOURCE_DATE_EPOCH to timestamp<PHONE_NUMBER> of file Discord/swiftshader/libGLESv2.so
patching sources
configuring
no configure script, doing nothing
building
no Makefile, doing nothing
installing
gappsWrapperArgsHook
post-installation fixup
shrinking RPATHs of ELF executables and libraries in /nix/store/c33n4pky14khh3czhd6gy05xbvvvk30n-discord-0.0.13
shrinking /nix/store/c33n4pky14khh3czhd6gy05xbvvvk30n-discord-0.0.13/opt/Discord/libvk_swiftshader.so
shrinking /nix/store/c33n4pky14khh3czhd6gy05xbvvvk30n-discord-0.0.13/opt/Discord/libvulkan.so
shrinking /nix/store/c33n4pky14khh3czhd6gy05xbvvvk30n-discord-0.0.13/opt/Discord/.Discord-wrapped
shrinking /nix/store/c33n4pky14khh3czhd6gy05xbvvvk30n-discord-0.0.13/opt/Discord/libGLESv2.so
shrinking /nix/store/c33n4pky14khh3czhd6gy05xbvvvk30n-discord-0.0.13/opt/Discord/swiftshader/libGLESv2.so
shrinking /nix/store/c33n4pky14khh3czhd6gy05xbvvvk30n-discord-0.0.13/opt/Discord/swiftshader/libEGL.so
shrinking /nix/store/c33n4pky14khh3czhd6gy05xbvvvk30n-discord-0.0.13/opt/Discord/libEGL.so
shrinking /nix/store/c33n4pky14khh3czhd6gy05xbvvvk30n-discord-0.0.13/opt/Discord/libffmpeg.so
shrinking /nix/store/c33n4pky14khh3czhd6gy05xbvvvk30n-discord-0.0.13/opt/Discord/chrome-sandbox
rewriting symlink /nix/store/c33n4pky14khh3czhd6gy05xbvvvk30n-discord-0.0.13/bin/Discord to be relative to /nix/store/c33n4pky14khh3czhd6gy05xbvvvk30n-discord-0.0.13
rewriting symlink /nix/store/c33n4pky14khh3czhd6gy05xbvvvk30n-discord-0.0.13/share/pixmaps/discord.png to be relative to /nix/store/c33n4pky14khh3czhd6gy05xbvvvk30n-discord-0.0.13
strip is /nix/store/9f8y44vmjnwdjvzlff0gm3f3g6ycyyqy-binutils-2.35.1/bin/strip
stripping (with command strip and flags -S) in /nix/store/c33n4pky14khh3czhd6gy05xbvvvk30n-discord-0.0.13/bin
patching script interpreter paths in /nix/store/c33n4pky14khh3czhd6gy05xbvvvk30n-discord-0.0.13
/nix/store/c33n4pky14khh3czhd6gy05xbvvvk30n-discord-0.0.13/opt/Discord/postinst.sh: interpreter directive changed from "#!/bin/sh" to "/nix/store/yyy7wr7r9jwjjqkr1yn643g3wzv010zd-bash-4.4-p23/bin/sh"
checking for references to /build/ in /nix/store/c33n4pky14khh3czhd6gy05xbvvvk30n-discord-0.0.13...
automatically fixing dependencies for ELF files
searching for dependencies of /nix/store/c33n4pky14khh3czhd6gy05xbvvvk30n-discord-0.0.13/opt/Discord/libvk_swiftshader.so
searching for dependencies of /nix/store/c33n4pky14khh3czhd6gy05xbvvvk30n-discord-0.0.13/opt/Discord/libvulkan.so
searching for dependencies of /nix/store/c33n4pky14khh3czhd6gy05xbvvvk30n-discord-0.0.13/opt/Discord/.Discord-wrapped
  libffmpeg.so -> found: /nix/store/c33n4pky14khh3czhd6gy05xbvvvk30n-discord-0.0.13/opt/Discord/libffmpeg.so
  libgobject-2.0.so.0 -> found: /nix/store/5i172qh374nls3canh28ydniqkgliv11-glib-2.66.4/lib/libgobject-2.0.so.0
  libglib-2.0.so.0 -> found: /nix/store/5i172qh374nls3canh28ydniqkgliv11-glib-2.66.4/lib/libglib-2.0.so.0
  libgio-2.0.so.0 -> found: /nix/store/5i172qh374nls3canh28ydniqkgliv11-glib-2.66.4/lib/libgio-2.0.so.0
  libX11.so.6 -> found: /nix/store/yq0m2kngxbjkh8y1kizshl4ym4ydnw7m-libX11-1.7.0/lib/libX11.so.6
  libX11-xcb.so.1 -> found: /nix/store/yq0m2kngxbjkh8y1kizshl4ym4ydnw7m-libX11-1.7.0/lib/libX11-xcb.so.1
  libxcb.so.1 -> found: /nix/store/cgjnqiby59x6kz9c33g73007ry8bs8qa-libxcb-1.14/lib/libxcb.so.1
  libxcb-dri3.so.0 -> found: /nix/store/cgjnqiby59x6kz9c33g73007ry8bs8qa-libxcb-1.14/lib/libxcb-dri3.so.0
  libXcomposite.so.1 -> found: /nix/store/hc39jdjdyrxyhlf2gcs7d9pvfqgppvv8-libXcomposite-0.4.5/lib/libXcomposite.so.1
  libXcursor.so.1 -> found: /nix/store/giiqqhqk1zyynflm6h38kpqhq42vmqrh-libXcursor-1.2.0/lib/libXcursor.so.1
  libXdamage.so.1 -> found: /nix/store/261hxvhxklrqhiag25l6wq753vgcn4xy-libXdamage-1.1.5/lib/libXdamage.so.1
  libXext.so.6 -> found: /nix/store/cw7ffh2px1sarw3b9w9h6ykjkaq4rz8a-libXext-1.3.4/lib/libXext.so.6
  libXfixes.so.3 -> found: /nix/store/1lrx5wimpqikfwx4wiam0kkdh5kfsahm-libXfixes-5.0.3/lib/libXfixes.so.3
  libXi.so.6 -> found: /nix/store/wnk2fsq8clj4g637wybpx7ic0nbnksb5-libXi-1.7.10/lib/libXi.so.6
  libXrender.so.1 -> found: /nix/store/gra7av8n5gwrxfk8r3niw6rcwk10sa3q-libXrender-0.9.10/lib/libXrender.so.1
  libXtst.so.6 -> found: /nix/store/kbmx94jgcbhcz9l8h59hsxlcqrmqzv41-libXtst-1.2.3/lib/libXtst.so.6
  libnss3.so -> found: /nix/store/xlbljc9a23cwbnkmxmxzr4hbbhc83pg9-nss-3.60/lib/libnss3.so
  libnssutil3.so -> found: /nix/store/xlbljc9a23cwbnkmxmxzr4hbbhc83pg9-nss-3.60/lib/libnssutil3.so
  libsmime3.so -> found: /nix/store/xlbljc9a23cwbnkmxmxzr4hbbhc83pg9-nss-3.60/lib/libsmime3.so
  libnspr4.so -> found: /nix/store/fpbip6kbkykirpln4amhs30lnn8cfx5c-nspr-4.29/lib/libnspr4.so
  libatk-1.0.so.0 -> found: /nix/store/x4ad37j6q7x31s6x9lbacq06qslq6rvc-atk-2.36.0/lib/libatk-1.0.so.0
  libatk-bridge-2.0.so.0 -> found: /nix/store/zfw5fadlj0604bg31jf9by0nbg41lbyg-at-spi2-atk-2.38.0/lib/libatk-bridge-2.0.so.0
  libdbus-1.so.3 -> found: /nix/store/ha3r52724cqfyqv99mlgiy0kh5qrl2x0-dbus-1.12.20-lib/lib/libdbus-1.so.3
  libgdk_pixbuf-2.0.so.0 -> found: /nix/store/0h2yrxxs74gwbd4gcgb7gpbaxyy9mw5b-gdk-pixbuf-2.42.2/lib/libgdk_pixbuf-2.0.so.0
  libgtk-3.so.0 -> found: /nix/store/h63xqnjsbgb968fd7i1k5wmfp9pjj3l9-gtk+3-3.24.24/lib/libgtk-3.so.0
  libgdk-3.so.0 -> found: /nix/store/h63xqnjsbgb968fd7i1k5wmfp9pjj3l9-gtk+3-3.24.24/lib/libgdk-3.so.0
  libpangocairo-1.0.so.0 -> found: /nix/store/q7j3dhx8x0dyyk8dj0736ij02vimh0ic-pango-1.47.0/lib/libpangocairo-1.0.so.0
  libpango-1.0.so.0 -> found: /nix/store/q7j3dhx8x0dyyk8dj0736ij02vimh0ic-pango-1.47.0/lib/libpango-1.0.so.0
  libcairo.so.2 -> found: /nix/store/ajis1g3fsmlfhq8hs7vr3m734xz09d2c-cairo-1.16.0/lib/libcairo.so.2
  libXrandr.so.2 -> found: /nix/store/h92361l0na9q61lb11j1swhp1gf80kfl-libXrandr-1.5.2/lib/libXrandr.so.2
  libexpat.so.1 -> found: /nix/store/7jxw8jwb7qs8gki67r91d5wxq99z2k23-expat-2.2.10/lib/libexpat.so.1
  libdrm.so.2 -> found: /nix/store/m5xv2wdfnx7qjw9gd6wk3pm7h7ry3if8-libdrm-2.4.104/lib/libdrm.so.2
  libgbm.so.1 -> found: /nix/store/rfrh53sl94l663cpmm333n9ci8ypfzpk-mesa-20.3.4/lib/libgbm.so.1
  libXss.so.1 -> found: /nix/store/4i9y386mgyz1qmpvvkcqznva9j8vq8j3-libXScrnSaver-1.2.3/lib/libXss.so.1
  libasound.so.2 -> found: /nix/store/v8l1i15nc924d39pj7x1crj7527nh57z-alsa-lib-1.2.4/lib/libasound.so.2
  libatspi.so.0 -> found: /nix/store/bzlydmzc47dim3xrx3n7qkpjbrwdl74z-at-spi2-core-2.38.0/lib/libatspi.so.0
  libcups.so.2 -> found: /nix/store/7z0r6bwm32gxqcaipyc21pnwcni751c1-cups-2.3.3-lib/lib/libcups.so.2
setting RPATH to: /nix/store/c33n4pky14khh3czhd6gy05xbvvvk30n-discord-0.0.13/opt/Discord:/nix/store/5i172qh374nls3canh28ydniqkgliv11-glib-2.66.4/lib:/nix/store/5i172qh374nls3canh28ydniqkgliv11-glib-2.66.4/lib:/nix/store/5i172qh374nls3canh28ydniqkgliv11-glib-2.66.4/lib:/nix/store/yq0m2kngxbjkh8y1kizshl4ym4ydnw7m-libX11-1.7.0/lib:/nix/store/yq0m2kngxbjkh8y1kizshl4ym4ydnw7m-libX11-1.7.0/lib:/nix/store/cgjnqiby59x6kz9c33g73007ry8bs8qa-libxcb-1.14/lib:/nix/store/cgjnqiby59x6kz9c33g73007ry8bs8qa-libxcb-1.14/lib:/nix/store/hc39jdjdyrxyhlf2gcs7d9pvfqgppvv8-libXcomposite-0.4.5/lib:/nix/store/giiqqhqk1zyynflm6h38kpqhq42vmqrh-libXcursor-1.2.0/lib:/nix/store/261hxvhxklrqhiag25l6wq753vgcn4xy-libXdamage-1.1.5/lib:/nix/store/cw7ffh2px1sarw3b9w9h6ykjkaq4rz8a-libXext-1.3.4/lib:/nix/store/1lrx5wimpqikfwx4wiam0kkdh5kfsahm-libXfixes-5.0.3/lib:/nix/store/wnk2fsq8clj4g637wybpx7ic0nbnksb5-libXi-1.7.10/lib:/nix/store/gra7av8n5gwrxfk8r3niw6rcwk10sa3q-libXrender-0.9.10/lib:/nix/store/kbmx94jgcbhcz9l8h59hsxlcqrmqzv41-libXtst-1.2.3/lib:/nix/store/xlbljc9a23cwbnkmxmxzr4hbbhc83pg9-nss-3.60/lib:/nix/store/xlbljc9a23cwbnkmxmxzr4hbbhc83pg9-nss-3.60/lib:/nix/store/xlbljc9a23cwbnkmxmxzr4hbbhc83pg9-nss-3.60/lib:/nix/store/fpbip6kbkykirpln4amhs30lnn8cfx5c-nspr-4.29/lib:/nix/store/x4ad37j6q7x31s6x9lbacq06qslq6rvc-atk-2.36.0/lib:/nix/store/zfw5fadlj0604bg31jf9by0nbg41lbyg-at-spi2-atk-2.38.0/lib:/nix/store/ha3r52724cqfyqv99mlgiy0kh5qrl2x0-dbus-1.12.20-lib/lib:/nix/store/0h2yrxxs74gwbd4gcgb7gpbaxyy9mw5b-gdk-pixbuf-2.42.2/lib:/nix/store/h63xqnjsbgb968fd7i1k5wmfp9pjj3l9-gtk+3-3.24.24/lib:/nix/store/h63xqnjsbgb968fd7i1k5wmfp9pjj3l9-gtk+3-3.24.24/lib:/nix/store/q7j3dhx8x0dyyk8dj0736ij02vimh0ic-pango-1.47.0/lib:/nix/store/q7j3dhx8x0dyyk8dj0736ij02vimh0ic-pango-1.47.0/lib:/nix/store/ajis1g3fsmlfhq8hs7vr3m734xz09d2c-cairo-1.16.0/lib:/nix/store/h92361l0na9q61lb11j1swhp1gf80kfl-libXrandr-1.5.2/lib:/nix/store/7jxw8jwb7qs8gki67r91d5wxq99z2k23-expat-2.2.10/lib:/nix/store/m5xv2wdfnx7qjw9gd6wk3pm7h7ry3if8-libdrm-2.4.104/lib:/nix/store/rfrh53sl94l663cpmm333n9ci8ypfzpk-mesa-20.3.4/lib:/nix/store/4i9y386mgyz1qmpvvkcqznva9j8vq8j3-libXScrnSaver-1.2.3/lib:/nix/store/v8l1i15nc924d39pj7x1crj7527nh57z-alsa-lib-1.2.4/lib:/nix/store/bzlydmzc47dim3xrx3n7qkpjbrwdl74z-at-spi2-core-2.38.0/lib:/nix/store/7z0r6bwm32gxqcaipyc21pnwcni751c1-cups-2.3.3-lib/lib
searching for dependencies of /nix/store/c33n4pky14khh3czhd6gy05xbvvvk30n-discord-0.0.13/opt/Discord/libGLESv2.so
  libX11.so.6 -> found: /nix/store/yq0m2kngxbjkh8y1kizshl4ym4ydnw7m-libX11-1.7.0/lib/libX11.so.6
  libxcb.so.1 -> found: /nix/store/cgjnqiby59x6kz9c33g73007ry8bs8qa-libxcb-1.14/lib/libxcb.so.1
setting RPATH to: /nix/store/yq0m2kngxbjkh8y1kizshl4ym4ydnw7m-libX11-1.7.0/lib:/nix/store/cgjnqiby59x6kz9c33g73007ry8bs8qa-libxcb-1.14/lib
searching for dependencies of /nix/store/c33n4pky14khh3czhd6gy05xbvvvk30n-discord-0.0.13/opt/Discord/swiftshader/libGLESv2.so
searching for dependencies of /nix/store/c33n4pky14khh3czhd6gy05xbvvvk30n-discord-0.0.13/opt/Discord/swiftshader/libEGL.so
searching for dependencies of /nix/store/c33n4pky14khh3czhd6gy05xbvvvk30n-discord-0.0.13/opt/Discord/libEGL.so
searching for dependencies of /nix/store/c33n4pky14khh3czhd6gy05xbvvvk30n-discord-0.0.13/opt/Discord/libffmpeg.so
searching for dependencies of /nix/store/c33n4pky14khh3czhd6gy05xbvvvk30n-discord-0.0.13/opt/Discord/chrome-sandbox
/nix/store/c33n4pky14khh3czhd6gy05xbvvvk30n-discord-0.0.13

@leo60228 I guess that on your system this isn't happening. Do you have some kind of hardening enabled?  The workaround I posted above has been good enough for me. If nobody else is running into it, I'm going to close it, since it's probably just something weird in my config.

I have the same exact error on Ubuntu 22.04.
[mona@ARD-WS-24 20221221-10:19:39]$ ./Discord
./Discord: error while loading shared libraries: libffmpeg.so: cannot open shared object file: No such file or directory
[mona@ARD-WS-24 20221221-10:19:46]$ ffmpeg
ffmpeg version 4.4.2-0ubuntu<IP_ADDRESS> Copyright (c) 2000-2021 the FFmpeg developers
  built with gcc 11 (Ubuntu 11.2.0-19ubuntu1)
  configuration: --prefix=/usr --extra-version=0ubuntu<IP_ADDRESS> --toolchain=hardened --libdir=/usr/lib/x86_64-linux-gnu --incdir=/usr/include/x86_64-linux-gnu --arch=amd64 --enable-gpl --disable-stripping --enable-gnutls --enable-ladspa --enable-libaom --enable-libass --enable-libbluray --enable-libbs2b --enable-libcaca --enable-libcdio --enable-libcodec2 --enable-libdav1d --enable-libflite --enable-libfontconfig --enable-libfreetype --enable-libfribidi --enable-libgme --enable-libgsm --enable-libjack --enable-libmp3lame --enable-libmysofa --enable-libopenjpeg --enable-libopenmpt --enable-libopus --enable-libpulse --enable-librabbitmq --enable-librubberband --enable-libshine --enable-libsnappy --enable-libsoxr --enable-libspeex --enable-libsrt --enable-libssh --enable-libtheora --enable-libtwolame --enable-libvidstab --enable-libvorbis --enable-libvpx --enable-libwebp --enable-libx265 --enable-libxml2 --enable-libxvid --enable-libzimg --enable-libzmq --enable-libzvbi --enable-lv2 --enable-omx --enable-openal --enable-opencl --enable-opengl --enable-sdl2 --enable-pocketsphinx --enable-librsvg --enable-libmfx --enable-libdc1394 --enable-libdrm --enable-libiec61883 --enable-chromaprint --enable-frei0r --enable-libx264 --enable-shared
  libavutil      56. 70.100 / 56. 70.100
  libavcodec     58.134.100 / 58.134.100
  libavformat    58. 76.100 / 58. 76.100
  libavdevice    58. 13.100 / 58. 13.100
  libavfilter     7.110.100 /  7.110.100
  libswscale      5.  9.100 /  5.  9.100
  libswresample   3.  9.100 /  3.  9.100
  libpostproc    55.  9.100 / 55.  9.100
Hyper fast Audio and Video encoder
usage: ffmpeg [options] [[infile options] -i infile]... {[outfile options] outfile}...

Use -h to get full help or, even better, run 'man ffmpeg'

@monajalal, are you using Nix to install Discord? This issue is about a problem with the Nix package early last year - if it's back, it might be worth opening a new issue here.

the nix version of Discord uses the discord vendored version of ffmpeg.so. It's located in $out/opt/Discord


Behavior when condition's needed input parameter is not found during evaluation

Now if i send a request without input, i will reicive an error.
How about create a default where if condition ask for input and i don't send that, the app continue just not aplly that condition?

So, what do you think about placing this option at the "config" node of the rules json? Something like:
{
    "_config": {
        "seed": 123,
        "default_condition": true,
        "lazy_evaluation": false,
        "flatten": true,
    },
    "_items": [{
            "provider": "aws",
            "_condition": "randomPerc(10, input:customerid)",
            "_items": [{
                    "region": "sa-east-1",
                    "login": "login.sa-east-1.test.com",
                    "bootcamp": "bootcamp.sa-east-1.test.com",
                    "_condition": "input:_ip_country=='Brazil'"
                },
                {
                    "region": "us-west-1",
                    "login": "login.us-west-1.test.com",
                    "events": "events.us-west-1.test.com",
                    "bootcamp": "bootcamp.us-west-1.test.com"
                }
            ]
        },
        {
            "provider": "azure",
            "_condition": "randomPercRange(10, 50, input:customerid)",
            "_items": [{
                    "region": "azure-brazil",
                    "login": "login.azure-brazil.test.com",
                    "_condition": "input:_ip_country=='Brazil'"
                },
                {
                    "region": "azure-ny",
                    "login": "login.azure-ny.test.com",
                    "events": "events.azure-ny.test.com",
                    "bootcamp": "bootcamp.azure-ny.test.com"
                }
            ]
        },
        {
            "provider": "vpsdime",
            "_items": [{
                "region": "vpsdime",
                "login": "login.vpsdime.test.com",
                "events": "events.azure-ny.test.com",
                "bootcamp": "bootcamp.azure-ny.test.com"
            }]
        }
    ]
}

I suggest "lazy_evaluation" default value to be "false" because we will stop throwing errors when a required input is not present, so that it will be much harder to detect when the caller is sending wrong values to ruller.
What do you think?

For me it is an excellent solucion.

Great!


Package metadata incorrect for trusat-backend?

I was following the instructions to set up the environment for trusat-orbit and got the following error message after resolving one involving old setuptools:
WARNING: Generating metadata for package trusat-backend-1.1.0 produced metadata for project name trusat-backend. Fix your #egg=trusat-backend-1.1.0 fragments. WARNING: Discarding<EMAIL_ADDRESS>Requested trusat-backend from<EMAIL_ADDRESS>has inconsistent name: filename has 'trusat-backend-1-1-0', but metadata has 'trusat-backend' ERROR: Could not find a version that satisfies the requirement trusat-backend-1-1-0 (unavailable) ERROR: No matching distribution found for trusat-backend-1-1-0 (unavailable)
It seems that either line 12 or line 25 in https://github.com/TruSat/trusat-backend/blob/dev.chris.package/setup.py should have a -1-1-0 appended to the end of the string. I would have tested this out myself, but I am only starting to work on this and don't have a fully set up environment.

I was able to install by running pip3 install trusat-backend, but I wonder if this means I will end up having to manually install a bunch of packages. I already installed Cython and numpy, but since these are very common packages, I'm surprised the trusat-orbit README doesn't mention it and pip3 install trusat-backend hasn't installed them already.


Pinning of system components

Today, Gardener deploys a bunch of workloads (let's call them 'system components') into kube-system namespace.
While most or all of them run with a high priority class (which is good) it would be in addition desirable to pin these workloads to certain worker groups. It seems that this was already (partially) addressed when the worker spec field systemComponents.allowed was introduced (which is defaulted as true). However in the current logic (https://github.com/gardener/gardener/blob/efb517ac8e2b4efc464c95c049c770367df1b058/pkg/apis/core/validation/shoot.go#L1169), when electing nodes for system components, Gardener considers only worker pools for which this flag is true and which have no strict taints.
But naturally, if one would pin system components to a particular 'system' worker group, this group would be probably (heavily) tainted, to prevent regular workloads from going there. Which makes the systemComponents.allowed flag kind of useless.
The requirement is to specify certain (even strict) taints as tolerable for Gardener's system components, to allow them to run on a worker group with systemComponents.allowed == true even if it carries strict taints.

There are some system components that must run on each node and they cannot be isolated to a specific worker pool.
Could name the components that you do not want to run the special worker pool?

Of course, daemon sets excluded. But for all others ...

Could you name the components that you do not want to run the special worker pool?

All current (and yet unknown future) non-daemonset workloads that Gardener deploys ...

This does not help.
You can check https://github.com/gardener/gardener/issues/2462 and the related PRs to see which components and why were considered as node critical and hence runs everywhere.
/close

The requirement is to specify certain (even strict) taints as tolerable for Gardener's system components, to allow them to run on a worker group with systemComponents.allowed == true even if it carries strict taints.

Hm, wouldn't it be good enough if Gardener would simply add the taints which are specified on the "system" worker pool as tolerations to the deployments? All of them? Then there is no need to explicitly configure the tolerations via a separate field. This would also be backwards-compatible with the current behaviour and should allow for all use-cases (the current and the one envision by @cbarbian-sap)?

Isn't it getting a bit complicated for the extensions then? They also have to find this system worker pool and add the respective tolerations. Code wise this can be implemented by a utility function, but for some versions the Gardener and the extensions will not be fully compatible.
If there are multiple worker pools allowing system components and each of them have some taints, then the system components must tolerate all of the taints which can potentially brake somebody's else scenario that is also trying to isolate the system components but via the taints. Of course, these users can use
    systemComponents:
      allow: false

instead of the taints, but this is then not backward compatible for them.

But naturally, if one would pin system components to a particular 'system' worker group, this group would be probably (heavily) tainted, to prevent regular workloads from going there. Which makes the systemComponents.allowed flag kind of useless.

I think I might be starting to get what you are asking - do you want the system worker pool to be available only for the gardener's system components and nothing else? If yes, you can achieve this even now by adding labels to the system worker poll and use node selector to select only other nodes for your apps. This is a bit cumbersome and error prone because each application needs to add this node label selector, I agree.

Then there is no need to explicitly configure the tolerations via a separate field.

What about adding these taints via an additional optional empty by default field named taints in the systemComponents https://github.com/gardener/gardener/blob/efb517ac8e2b4efc464c95c049c770367df1b058/pkg/apis/core/v1beta1/types_shoot.go#L1030-L1033
A worker pool can have either the pool.taints or the pool.systemComponents.taints set, but not both. This way it will be clear from the API that these taints will be always tolerated by the gardener's system components.


Thread unsafe variable causing undefined/irregular behavior for ADAM

I think we should revert this back. Here are the lines in question: Thread unsafe variable declaration, Use in the get method. Once I took this out I no longer got the failures.

I don't think this is the correct solution. The correct solution should be to do the copy of the class, no?

Yes, I like that solution better.


Tab headers colors issue with stacked tabs

The tab headers of unfocused tabs behave weirdly when in "stacked" mode. The video explains it all:
https://user-images.githubusercontent.com/32358946/202852646-390df0dc-010b-4fb5-9c44-7de2d586ff49.mp4
I don't have tame to submit a PR but it probably has something to do with the foreground color of the "workspace-tab-header-inner" css class.
P.s. absolutely love your theme!

Thank you so much! I will fix it today. There are some selectors specific to the stacked tabs that I probably didn’t account for when making changes the other day. Appreciate the included video, too. 👍 On Nov 19, 2022, at 6:18 AM, kerbless @.***> wrote:
The tab headers of unfocused tabs behave weirdly when in "stacked" mode. The video explains it all:
https://user-images.githubusercontent.com/32358946/202852646-390df0dc-010b-4fb5-9c44-7de2d586ff49.mp4
I don't have tame to submit a PR but it probably has something to do with the foreground color of the "workspace-tab-header-inner" css class.
P.s. absolutely love your theme!
—Reply to this email directly, view it on GitHub, or unsubscribe.You are receiving this because you are subscribed to this thread.Message ID: @.***>

This should be fixed in the most recent update (0.2.14). I will leave this issue open in case anyone else runs into trouble here, because I may have missed some things. In the case of stacked tabs, only the text should change color on highlight now (as the 'tab' is technically 100% of the height; I experimented with reducing the height but know some people use long file names). There is a huge mess of css I need to fix related to the tabs, but if anyone is tweaking things on their own, the key is the .workspace-tabs.mod-stacked selector when changing the stacked tabs.


Update manage provider to return true/false in guard block

Description
Chef > 12.14 added a warn when returning a string in the only_if/not_if guard block
https://github.com/chef/chef/commit/bea83309ccedfe48be5ebac979bb531100f31883
This commit changed these 2 resources which currently warn on latest chef and now return true/false
https://github.com/chef/chef/issues/5574

Thanks @petecheslock


add [Show] implementation for [ArgsLoc]

ArgsLoc only had a to_string method and did not implement Show

Pull Request Test Coverage Report for Build 3778
Details

0 of 0   changed or added relevant lines in 0 files are covered.
No unchanged relevant lines lost coverage.
Overall coverage increased (+0.02%) to 83.77%

Totals

Change from base Build 3777:
0.02%

Covered Lines:
4320

Relevant Lines:
5157

💛  - Coveralls


Dashboard not refreshing automatically

Hi,
I don't know if this is really implemented, but If I let the Dashboard opened and a new speedtest runs in this time, then the latest result values doesn't appear on the Dashobard, it's not automatically refreshed
Regards,
Lukas

So just to be clear, you'd like to see /dashboard or /results refresh after a test has been run automatically?

/dashboard

Oh and fyi, if you're using DB notifications you'll see a notification under the bell shortly after a test runs.

Yes, notification is working fine. Thank you for all!


Add type hints to animation

Part of https://github.com/ManimCommunity/manim/issues/3375.

pointwise_become_partial is only available on VMobject, so the type hint is probably invalid here?
https://github.com/ManimCommunity/manim/blob/4315549c31747231eb6e5aead5408e3b2fe4de16/manim/animation/creation.py#L122-L130

pointwise_become_partial is only available on VMobject, so the type hint is probably invalid here?
https://github.com/ManimCommunity/manim/blob/4315549c31747231eb6e5aead5408e3b2fe4de16/manim/animation/creation.py#L122-L130

It would seem so!

Consider this a first pass. They are still too many mypy errors to actually enable this module. I first want to go over simple modules and I'll come back to this one later.


Fix NullpointerException

Fix the nullpointer exception that is thrown when try to parse files from Excel online, OpenOffice and etc. The error occurs because we don't have the element titleOfParts on XML on those cases.
The solution is pretty simple: just check if we have any value on titleOfParts - if not, we set a default value.
Related Issue >> camunda/camunda-dmn-xlsx#2

Merged via https://github.com/camunda/camunda-dmn-xlsx/commit/c7d1d9a56a58a8029193a692dc8a1e48660c3001


Add rebroadcast button for unconfirmed transactions

Closes #700
This PR adds rebroadcast button to transactions that have not been published to the network
Image:

from the screenshot you posted, let's redesign the rebroadcast button to be like the sync button


[do-not-merge] Adapt helm files for release version 1.2.0

Codecov Report
All modified and coverable lines are covered by tests :white_check_mark:

Project coverage is 58.15%. Comparing base (3160b4c) to head (9579268).

:exclamation: Your organization needs to install the Codecov GitHub app to enable full functionality.
Additional details and impacted files
@@           Coverage Diff           @@
##             main    #3354   +/-   ##
=======================================
  Coverage   58.15%   58.15%
=======================================
  Files         330      330
  Lines       18521    18521
=======================================
  Hits        10770    10770
  Misses       6538     6538
  Partials     1213     1213

Flag
Coverage Δ

unittests
58.15% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

:umbrella: View full report in Codecov by Sentry.
:loudspeaker: Have feedback on the report? Share it here.


reading generic json on invalid input causes out of bounds read in read.hpp

The following code:
   glz::json_t json{};
   auto blah = std::vector<char>{0x22, 0x5c, char(0xff), 0x22, 0x00};
   auto ec = glz::read_json(json, blah);

triggers out of bounds access from https://github.com/stephenberry/glaze/blob/ebee5fdf14ec86edc43f485abfba09cc3504f90e/include/glaze/json/read.hpp#L761
seems like uint8_t(...) is needed here as well?

Yup, another missed uint8_t cast


Put TestCase buttons on top

you really need to setup your editor. you've added hard tabs.

congratulations on getting it right 🐕


fix errors in specificity and sensitivity

It looks like the merge pervious merge uses my oldest code which was buggy :)
The pull request fixes

getErrors is now a methods
various erros in getErrors
erros in specificity and sensitivity

removed these functions from trunk, would be good to have a clean PR introduce them again, in working order.


Question about RNN search spaces

Hi, I was playing around a little with your framework and wanted to create a search space for a RNN but i failed to get a working RNN out-of-box: I could create a cell and plug that cell manually into an vanilla RNN that is encapsulating the cell and iterating over the temporal dimension.
Now I'm wondering if there is any way to get a complete RNN (not just the cell) as the result of an architecture search with your framework.
I tried various approaches like expressing the outer temporal loop as a substitution module and tried to instantiate the cell within the compile function. That wasn't working (probably because not all variables of the cell's search space have been set before the call to compile_fn()).
Another idea (that is quickly rejected) was to connect the cell's output with the cell's input, but that would produce a cyclic graph...
To me it seems that with the current framework it is not possible to create true recursive search spaces. The kind of recursion you show in your paper is no true recursive search space, the result is a linear/sequential one (referring to fig. 18 in your paper) .
Is what I'm trying to do possible?
Could you help me to make this work somehow (in an elegant, non-hacky way)?
And how would you define e.g. a multi-layer RNN with individual, independent cell search spaces for each layer, so your don't reuse the same cell on every layer?
FYI: I have also posted this on the google groups board.

Hi Pratik,
If you want to consume multiple time steps instead of a single one, the best way is to do this directly, i.e., to consume the whole tensor (batch_size x input_dim x num_steps, or whatever ordering of the dimensions you are using) and output whole processed tensors your computation performs. I would probably take that route. In the future, I want to define modules that can have other search spaces inside, which would help in this use-case, but right now, there is a flat nesting hierarchy in the search space, i.e., eventually the search space bottoms out to basic modules and then you run that. I've thought about the nested case but haven't implemented yet.
The way to do this would be either to search over the cell, compile it to Pytorch code, and then use that, or search directly over something that consumes all time steps and does the computation you want. After the implementation of the recursive case, wrapping search spaces will be possible. I've thought about it, but haven't got around implementing it. Additionally, while it might not be super relevant here, the most recent branch is this one. Haven't updated the documentation yet though.
For the multi-layer example that you mention, I would do the same thing: stack the RNN that consume the whole input that contains all time steps and outputs the results of processing all time steps. Inside the module, you can enforce the locality of the computation by just looking at the relevant positions.
I'll check the code on Google Groups.
All the best,
Renato


How to build Windows version?

Hi!
How can I build windows version from the sources?
D:\Go\src\github.com\lukehoban\delve>go build ./cmd/dlv/
# github.com/derekparker/delve/proc
..\..\derekparker\delve\proc\proc.go:51: undefined: OSProcessDetails
..\..\derekparker\delve\proc\threads.go:21: undefined: unix.WaitStatus

@lukehoban

Sorry! This is my mistake. I ran build from my lukehoban/delve, and derekparker/delve was a newer version from github ...)
Now was built successfully!
And now I need to build an itellij idea golang plugin! )


BT loss value on val set every N training epochs without classifier

Hi,
Thanks for making it painless for others to use and build upon your work.
I'm curious to know what the loss function value looks like during the training process on the val set of images. In my case of using spectrogram images on a resnet-18 backbone, the network trains well but the val loss value is very noisy and shows no clear trend. For example, I'm not sure what to make of this:

In the original experiments, was the BT loss value on the val set tracked every N epochs (without any classifier involved)? As far as I can tell, the loss reported in the 'val logs' txt file is of the classifier that was trained on top of the embeddings generating using a single training checkpoint.
The loss curve on the val set should be expected to follow typical behavior, right? Any pointers as to what might be causing a noisy val loss?

We currently don't log the BT loss on the validation set. In the original experiments we trained a linear classifier in parallel with BT training and tracked its train and val top-1 accuracy.
I don't know why the train and val BT loss would differ so much. I can run this on ImageNet and report back.

Hi @jzbontar, thanks for clarifying your val setup.
It'd be great if you could run a quick experiment (possibly on 10% training data, and a smaller embedding size) to check the BT loss value on the val set in parallel with BT training. When you try this, you may want track_running_stats=False at https://github.com/facebookresearch/barlowtwins/blob/574f589af8a2cb6214e0e537ca768ea7ae31ab19/main.py#L205 (It makes sense for the val BT loss to use batch statistics computed from the val batch instead of using the train batch statistics, right? From what I understand, the last BN layer only exists to make the loss calculation simpler.)
In your view, is it okay for BT (pre-)training to overfit on the train set or should we stop BT pre-training when BT val loss starts diverging?

I trained BT on ImageNet training set (1.28M images) and computed the BT loss on the ImageNet validation set (50k images) after each training epoch. I used model.train() for both training and validation, because I had some trouble getting track_running_stats=False to work. I trained for 40 epochs using the following command:
python main.py <imagenet_path> --epochs 40 --batch-size 1024 --learning-rate-weights 0.2 --learning-rate-biase 0.005 --weight-decay 1e-06 --lambd 0.005
In my experiments the validation loss does not show the behavior that you observed, but rather follows the training loss pretty well. See figure below:

My best guess is that your training set is small and that BT overfits it.

In your view, is it okay for BT (pre-)training to overfit on the train set or should we stop BT pre-training when BT val loss starts diverging?

I guess it all depends on how you intend to use the representations learnt by BT. If you plan to use it for a downstream task, I would measure the accuracy on that task and stop training based on that.

Oh, that looks neat!
I'm aiming for task-agnostic and dataset-agnostic embeddings, so I cannot have a backbone that overfits my training set. Even if the downstream task is fixed to a specific one, I'm still worried the embeddings may not work for the same task done using a different downstream dataset. So I guess I need to continue debugging until I see healthy loss curves.
You're right, my dataset is much smaller: train #samples: 140k, val #samples: 54k. So I'll probably try a smaller projector and sanity check my train and val distributions.
In your eval loop, do you have the same augmentation process as in your training loop?

In your val loop for this particular experiment, do you have the same augmentation process as in your training loop?

Yes, the training and validation datasets have the same augmentation process.

@neerajwagh were you able to get the BTLoss reduce on the validation set ?


Performance on indoor planes

Thank you for this amazing work.
I was wondering if this algorithm works well with indoor planes. I have a indoor dataset captured using rgbd camera. I want to simplify the mesh into planar segments. I previously tried polyfit and was only able to get a watertight planar mesh around the structure of the building rather than indoor planar segments like walls and desks. Could you help me with this? Thank you in advance.

Hi @bkhanal-11, unfortunately both our work and PolyFit assert watertightness on the model to reconstruct. If I understand your case correctly, the un-closed indoor planes are not a good usecase here unless they are expected to form a watertight model.


Create translate routes only when needed

Prevents unnecessary routes creation by checking if the locales configuration variable contains more than one locale.

A new inspection was created.

The inspection completed: No new issues

Totally agree that we shouldn't have the translate route if the entity is not translatable. This would clean up php artisan route:list quite a bit.
But while investigating this - I discovered something - I think we can remove this route entirely.  I've last worked on this a few years ago, so I don't remember exactly how it worked all the time, but it looks like this route is completely unused in Backpack v4. I see that:

the URL is actually admin/product/21/edit?locale=fr when you translate an item;
there's no reference to translateItem anywhere, other than when we set up this route;
I couldn't find the translateItem() Controller method that this route points to;
when manually accessing the URL you're greeted by a Method does not exist exception;
removing this route results in the app still working as expected (because, again, it's not used anywhere);

It's totally possible that when I refactored to Operations I changed the URL, but forgot to remove the route. I make mistakes too, and this seems like quite an innocent one - so it's right up my alley.
So I'm wondering - do you guys have any idea what this route does? Or what it did in the past? 😆 If not, and you guys also think this can be safely removed, I say let's do that - let's remove it entirely 😄 🥳
Cheers! Thanks a lot for surfacing this @martijnb92

Indeed, I could not find any reference to this function in main crud repository.
Maybe is like you said, after the refactor this bit got lost.

Same here, can't find anything related to translateItem, route can be deleted.

A new inspection was created.

Awesome. Thanks a lot for double-checking guys. Merged and tagged.

The inspection completed: No new issues


Association methods are not timestamping entries

The association methods do not timestamp entries into the junction table. Running the following code creates appropriate entries into the "roles" and "privileges" appropriately and with timestamps. The association entires into the "roleprivileges" junction table are correct, but the created_at and updated_at fields are blank.
Go version
go1.8.3 darwin/amd64
Database version
PostgreSQL 9.6.3
What did I do?
sql code for many2many table:
CREATE TABLE Roleprivileges (
  id SERIAL PRIMARY KEY NOT NULL,
  role_id INTEGER NOT NULL REFERENCES roles (id) ON UPDATE CASCADE,
  privilege_id INTEGER NOT NULL REFERENCES privileges (id) ON UPDATE CASCADE,
  created_at TIMESTAMP WITH TIME ZONE,
  updated_at TIMESTAMP WITH TIME ZONE,
  deleted_at TIMESTAMP WITH TIME ZONE
);

package main

import (
	"github.com/jinzhu/gorm"
	_ "github.com/jinzhu/gorm/dialects/mssql"
	_ "github.com/jinzhu/gorm/dialects/mysql"
	_ "github.com/jinzhu/gorm/dialects/postgres"
	_ "github.com/jinzhu/gorm/dialects/sqlite"
)

var db *gorm.DB

func init() {
	var err error
	db, err = gorm.Open("postgress", "...")
	if err != nil {
		panic(err)
	}
	db.LogMode(true)
}

type Privilege struct {
	gorm.Model
	Name        string `gorm:"type:varchar(255);not null:unique"`
	Description string `gorm:"type:text;not null"`
	Roles       []Role `gorm:"many2many:roleprivileges"`
}

type Role struct {
	gorm.Model
	Name       string      `gorm:"type:varchar(255);not null:unique"`
	Privileges []Privilege `gorm:"many2many:roleprivileges;"`
}

func main() {
	var role Role
	var privilege Privilege
	// Create dummy data
	for index, roleName := range []string{"role1", "role2", "role3"} {
		role = Role{
			Model: gorm.Model{ID: uint(index + 1)},
			Name:  roleName,
		}
		db.Create(&role)
	}
	for index, privilegeName := range []string{"priv1", "priv2", "priv3"} {
		privilege = Privilege{
			Model:       gorm.Model{ID: uint(index + 1)},
			Name:        privilegeName,
			Description: "blank description",
		}
		db.Create(&privilege)
	}
	// Associate role1 to priv1 and priv2, and priv2 to role1 and role3
	var associatedRoles []Role
	var associatedPrivileges []Privilege
	db.Find(&associatedRoles, "name = 'role1' or name = 'role2' or name = 'role3'")
	db.Find(&associatedPrivileges, "name = 'priv1' or name = 'priv2'")
	db.Model(&associatedPrivileges[0]).Association("roles").Append(associatedRoles)
        // Also tried
        //associatedRoles[0].Privileges = associatedPrivileges
        //db.Save(associatedRoles[0])
}

Hello @martinjaime
Yes, for the join table, we are not assigning created_at, updated_at...
If you need this value, maybe you could create a JoinStruct, or rewrite JoinTableHandler for those two structs (refer join_table_test.go)

@jinzhu, are there any plans to implement this feature?

Are there plans to add this feature?

Are there plans to add this feature?

Are there plans to add this feature?


Tone.Meter getLevel method range min & max

getLevel() seems to return values between -100 & 0. Is this the intended range & if so, can I propose an update to the type definition for Decibels or getLevel() in the docs? The exact min & max of the intended range would be helpful.
My intention is to build a VU Meter & the decibel scale for VU Meters is typically between -20 & +3. It's easy enough to map from one range to another & I've done the following.
const mapRange = (x, in_min, in_max, out_min, out_max) => {
    return Math.ceil((x - in_min) * (out_max - out_min) / (in_max - in_min) + out_min);
}

const context = Tone.context;
const meter = new Tone.Meter();
const source = context.createMediaStreamSource(microphone);

source.connect(meter);

const raw = meter.getLevel();
const dB = mapRange(raw, -100, 0, -20, 3);

Thank You All for this awesome framework!!

You can can the lower rang with a Math.max(-20, meter.getLevel()). The value returned should not have an upper bound, everything above 0db is digital clipping. Keep in mind the value returned is the RMS value, not the peak value. The RMS value is lower than the peak but higher than the average in general and an often used measurement in digital VU meters.
The +3dB value you are referring to on analog VU meters is equal to around -18dB on a digital meter if I remember correctly. Everything above 0dB is always digital clipping which you want to a void.

Thanks for following up with that info @Idicious
The range is the decibel range which would be all numbers where silence is -Infinity. If you'd like to normalize this output to a 0-1 range if that's easier to work with, use Tone.dbToGain(meter.getLevel()). which will return 0-1 unless the signal is clipping in which case the output could be above 1.


iframe elements in title not displaying

When a HTMLElement containing a iframe element is passed to the title attribute, the iframe element does not display. I have tried to change the iframe element's properties like height, width, src, etc. I have also tried document.createElement('iframe') and then assigning values for it's properties. Here is the code snippet where a value for title is assigned:
export class SmartDeviceMarker extends Marker {
  private _elementId: string;
  private _userLabel: string;

  constructor(location: XYAndZ, size: XAndY, elementId: string, userLabel: string) {
    super(location, size);
    this._elementId = elementId;
    this._userLabel = userLabel;
    this.setImageUrl("https://indyme.com/wp-content/uploads/2020/11/sensor-icon.png");
    this.title = this.populateTitle();
  }

  private populateTitle() {
    const element = document.createElement('div');
    element.innerHTML = `

${this._userLabel}

    `;
    return element;
  }
// rest of the class...

The h3 element, which can be seen in the code above displays properly. What could be the issue here? If it is not possible to display iframe elements inside of the tooltip, what are the alternatives?

⚠ Do not edit this section. It is required for imodeljs.github.io ➟ GitHub issue linking

LINK: Markers---iTwin.js-link-to-docs
TAG: imodeljs-docs-question
SOURCE: https://www.itwinjs.org/learning/frontend/markers/

Closed since this is not a issue, but rather a question for a discussion thread.


enhancement: Add W3W grid overlay to static maps

Add a transparent grid for the static maps (used on each cache page).

Unable to implement 😢 polygon provided by W3W is not big enough to show via the Static Maps API.
As a compromise, the static images are now rendered using the Satellite layer (instead of Road map layer).


Remove unnecessary files reference

https://github.com/logstash-plugins/logstash-input-heartbeat/blob/master/logstash-input-heartbeat.gemspec#L14
Erroneously have
# Files
  s.files = `git ls-files`.split($\)+::Dir.glob('vendor/*')

Closed by #3


Patch nnlib (hifi4 and hifi5) to allow null bias for fully connected.

This is groundwork towards merging https://github.com/tensorflow/tflite-micro/pull/590
BUG=#589 and http://b/205306469 and #685

@advaitjain Thanks Advait for raising the patch to fix this issue and we will merge these code changes to nnlib-hifi4


MacOS

Will MacOS support ever come? I can't compile for MacOS.

There is an answer in the FAQ channel on the discord server, but to be short:
There is no MacOS/Linux version due to ONBS using some windows-only libraries.
Bentroen hopes to fix it in v4.0 (The Python Rewrite), but for now the only solution would be WINE, however using it would be a bit "at your own risk" because it doesn't always work, if at all.
Issue on Mac/Linux support: #4

Closing as duplicate, as per above.


chore: improve code coverage

Pull Request Test Coverage Report for Build<PHONE_NUMBER>

0 of 0   changed or added relevant lines in 0 files are covered.
No unchanged relevant lines lost coverage.
Overall coverage increased (+9.4%) to 65.918%

Totals

Change from base Build<PHONE_NUMBER>:
9.4%

Covered Lines:
323

Relevant Lines:
490

💛  - Coveralls


Use unique epaira interface names

This changes the code to rename the epaira side of interfaces to a unique value and stores it in the status file.
This has multiple advantages:

Removing the wrong interface highly unlikely
No need to poke into the running (or potentially dying) pot when stopping

Note that dual stack isn't covered yet (wasn't with the previous either).

@pizzamig This is what this looks like
[root@host ~]# pot start cloneme
===>  Starting the pot cloneme
add net default: gateway <IP_ADDRESS>
[root@host ~]# cat /tmp/pot_status_cloneme
pot.status=started,p4632611c512510
[root@host ~]# ifconfig p4632611c512510
p4632611c512510: flags=8963<UP,BROADCAST,RUNNING,PROMISC,SIMPLEX,MULTICAST> metric 0 mtu 1500
	description: cloneme
	options=8<VLAN_MTU>
	ether 02:ca:3c:ac:ce:0a
	groups: epair pot
	media: Ethernet 10Gbase-T (10Gbase-T <full-duplex>)
	status: active
	nd6 options=29<PERFORMNUD,IFDISABLED,AUTO_LINKLOCAL>
[root@host ~]# pot stop cloneme
[root@host ~]#

Dual stack example in action:
[root@host ~]# pot start -v cloneme
=====>  mount /opt/pot/jails/cloneme/m/tmp
===>  Starting the pot cloneme
add net default: gateway <IP_ADDRESS>
rtsol: No answer after sending 3 RSs
[root@host ~]# pot stop -v cloneme
=====>  Stop the pot cloneme
=====>  Remove p4632706721649 epair network interfaces
=====>  Remove p6632706721649 epair network interfaces
=====>  unmount /opt/pot/jails/cloneme/m/tmp
=====>  unmount /opt/pot/jails/cloneme/m/dev

@grembo Where are we with this?

@grembo Where are we with this?

on vacation, but I can look into it soon

No rush, when you are back! Enjoy your time off!

In tests/CI there is a run.sh script, that perform a set of operation, using multiple configurations.
It was designed to run in an empty VM, with no pots (to easily check if all pots have been correctly destroyed after tests).
I will test this branch with this script later

In tests/CI there is a run.sh script, that perform a set of operation, using multiple configurations. It was designed to run in an empty VM, with no pots (to easily check if all pots have been correctly destroyed after tests). I will test this branch with this script later

I implemented some pot testing for the FreeBSD sccache-dist patch (PR still pending): https://github.com/mozilla/sccache/pull/1184/files
I could adapt that to run these tests using github actions.

@pizzamig I created #236 which allows us to run CI tests as a github action. Once this lands (and ci.yml is part of the master branch), I will rebase this issue and we can run the integration tests manually in github actions.

@pizzamig Successful CI run: https://github.com/grembo/pot/actions/runs/3308124096


Fix typo in reset portion of readme.md

PR Checklist

[ ] The PR title follows our guidelines: https://github.com/NativeScript/NativeScript/blob/master/CONTRIBUTING.md#commit-messages.
[ ] There is an issue for the bug/feature this PR is for. To avoid wasting your time, it's best to open a suggestion issue first and wait for approval before working on it.
[ ] All existing tests are passing
[ ] Tests for the changes are included

What is the current behavior?

There is a typo in the README.md located in the reset section.
What is the new behavior?

changed demo-angular.ios -> demo-angular.reset in the README.md
Fixes/Implements/Closes #[Issue Number].

@cla-bot check

change is included in https://github.com/NativeScript/nativescript-plugin-seed/pull/147


Editor: Improve UX/UI for markdown

Currently users can write page templates using the markdown (CommonMark spec) format, which is good enough for simple cases or if you have the knowledge to use more complex markdown features which doesn't fit everyone.
So we want to explore adding cells, similar to LiveBook smart cells, that would allow Beacon LiveAdmin to display a more user friendly interface to add components into the markdown template as graphs, images and videos from the media library, embedded resources, and so on.
Depends on https://github.com/BeaconCMS/beacon_live_admin/issues/28

Related to https://github.com/livebook-dev/kino/issues/100


Issue with Mux's handle method

I'm trying to use nested muxes and goji's mux's handle method does not behave as expected.
Here's the code. If you replace parentMux := web.New() with parentMux := http.NewServeMux(), it works
package main

import (
	"io"
	"net/http"

	"github.com/zenazn/goji/web"
)

func main() {
	child1Mux := http.NewServeMux()
	child1Mux.HandleFunc("/foo", func(w http.ResponseWriter, r *http.Request) {
		io.WriteString(w, r.URL.Path)
	})

	child2Mux := http.NewServeMux()
	child2Mux.HandleFunc("/bar", func(w http.ResponseWriter, r *http.Request) {
		io.WriteString(w, r.URL.Path)
	})

	parentMux := web.New()
	parentMux.Handle("/", child1Mux)
	child1Mux.Handle("/", child2Mux)

	http.ListenAndServe(":8181", parentMux)
}

Goji patterns have different semantics than http.ServeMux: all patterns much match exactly, even if they contain a trailing slash. You're probably looking for "/*", which matches a prefix of the URL.

Thank you.


[GHSA-8hfj-j24r-96c4] Path Traversal: 'dir/../../filename' in moment.locale

Updates

Affected products
Description

Hi there @ichernev! A community member has suggested an improvement to your security advisory. If approved, this change will affect the global advisory listed at github.com/advisories. It will not affect the version listed in your project repository.
This change will be reviewed by our highly-trained Security Curation Team. If you have thoughts or feedback, please share them in a comment here! If this PR has already been closed, you can start a new community contribution for this advisory


Stored content doesn't match expected value

I'm constantly getting the following warning when my Trin node is processing a FindContent request:
WARN portalnet::overlay_service: Stored content doesn't match expected value
I haven't investigated this but it looks like a bug to me.

Resolved.


Timezone Format

Hi,
What is the format that is being used to set a new time zone. I live in United States/Rochester I tired different combo and still no luck. Where does it check to validate the time zone?

Hi murdockz,
You can find a list of timezones right here: https://www.php.net/manual/en/timezones.php
Since Rochester is within New York, I guess you are looking for America/New_York

Yes that works wonderful. Thanks.


fresh Ubuntu install without GPU not finding OpenCL platform

I tried to do a basic setup to test ROCm for OpenCL for CPU-only (initially).  clGetPlatformIDs is returning -1001.  Can anyone confirm these steps?
Test setup:
Fresh install of Ubuntu 18.04 in a virtual machine, running on Intel i7 v4 CPU with 4 cores, no discrete GPU.
Steps:
$ sudo apt update
$ sudo apt install rocm-dkms

Succes. Reboot.
$ /opt/rocm/bin/rocminfo
hsa api call failure at line 900, file: /home/jenkins/jenkins-root/workspace/compute-rocm-rel-2.0/rocminfo/rocminfo.cc. Call retured 4104

$ /opt/rocm/opencl/bin/x86_64/clinfo
ERROR: clGetPlatformIDs(-1001)

$ strace /opt/rocm/opencl/bin/x86_64/clinfo
Shows that libamdoclcl64.so is not found in a couple dozen paths right before exit 1.
Did I miss something?  Other packages are mentioned on the install guide.
$ sudo apt install rock-dkms
"already the newest version" 0 upgraded, 0 newly installed.
$ sudo apt install rocm-opencl-dev
"already the newest version" 0 upgraded, 0 newly installed.
$ sudo apt-get install dkms rock-dkms rocm-opencl
for each ... "already the newest version" 0 upgraded, 0 newly installed.
I'm not sure what else to try.  Where should libamdoclcl64.so be located?   Would it be installed if I don't have a supported GPU?

Perhaps you can expand on the first sentence more explicitly please.  Are you saying there's no CPU target support in the whole ROC-whatever ecosystem?
I came to ROCm because I understood AMDAPPSDK was discontinued but redirected to this project.

Correct, the ROCm OpenCL runtime does not support CPU targets. As far as I know, the OpenCL runtimes in the Linux/amdgpu-pro and Windows software stacks also no longer support CPU targets, but I don't actively work in those areas so I can't verify that at this time.

Ok, thank you for the clarification.  I submitted a pull request to enhance the README. I think language like this would have saved me several hours down a dead-end path.
The same language can be applied to the Wiki, which I am attaching.
Home.txt


Automate DKIM records

It appears the dkim records can be generated with terraform using the aws_ses_domain_dkim resource as described here: https://www.terraform.io/docs/providers/aws/r/ses_domain_dkim.html
I believe this will be a breaking change for anyone using the current version of the module, as if the dkim records were manually generated, terraform may not be able to generate them using the aws_ses_domain_dkim resource.
If you're happy with this I can go ahead and open a PR.

Here's the PR - https://github.com/skyscrapers/terraform-ses/pull/5

Thanks for the PR.
merged in #5


[BUG][Module Compatibility 'item-linking'] If the final recipe object is in a compendium, the flags.beavers-crafting.status flag is not applied to that object

Details:
Core Version: 11.307
System: dnd5e 2.3.0 (Atropos)
Modules:
–	beavers-crafting 3.2.2 (angryBeaver)
–	beavers-system-interface 2.1.4 (angryBeaver)
–	bsa-dnd5e 2.0.1 (angryBeaver)
–	forien-copy-environment v2.2.0 (Blair McMillan, Forien)
–	item-linking 1.0.14 (Elizeu Angelo)
NOTE: If the final recipe object is not in a compendium the workflow is working !!!
Then the case is special, I am using two modules "Item Linking" and "Beaver Crafting".
The recipe goes to retrieve the final object (in this case a potion) from a compendium.
For some reason at the end of the process on the final item the flags.beavers-crafting.status flag is missing.
With a little debugging, I verified that it is because the itemChanges object at this row https://github.com/AngryBeaver/beavers-crafting/blob/2c43ca1880e2405d9db960be3d14e4f3f06e7044/src/Crafting.ts#L373 has the arrays all empty.
The  itemChanges  value is:
{
    create: []
    update: [],
    merge: [],
    delete: []
}

This should not happen right ? at least one element must be present in one of the arrays (I think).
Let me know it if you need other informations.
Some videos:
https://i.imgur.com/GzaAZxm.gif

Well i have to look more closely to this but first things:

this flag is only a minor feature:
Beavers Crafting does not really need that flag in order to work it is for the rare cases when you want to know which items had been crafted e.g. build a recipe that only accept crafted items.
bug only in combination with item-linking module:
I haven't used item-linking before but from the description of the author it seems that it might be possible that i can not edit that linked item to add a flag: "Players can edit linked items only partially, most fields are disabled."

yes that is it usually this method returns something:

and this happens if i enable the item-linking module:

i might be able to workaround that but maybe item-linking can fix it.

kk i open a issue on the item-linking project, ty for the fast investigation.

Related to https://github.com/elizeuangelo/fvtt-module-item-linking/issues/3

Solved from magus side


Please add documentation or sample how to use TLS_SESSION_CACHE socket option

I tried to enable the TLS_SESSION_CACHE for TLS on a nRF9160.
Therefore I set the socket option on the client socket. Add the end of the request, the connection is closed.
I would expect, that on the next connection, if the TLS session context is cached, I would be able to execute an abbreviated handshake as in RFC5246, 7.3., Figure 2 but the new Client_Hello never contains the session id and so a full handshake is always executed .
I searched the web without success.
I searched samples without success.
Would it be possible, that either an sample is added, or if I overseen it, point me to?
Or add some documentation how it must used.
Sure, the server may send a session id but rejects to support session resumption.
But the first step is the follow up Client_Hello with session id, and that's what I miss.

I tried to enable the TLS_SESSION_CACHE for TLS on a nRF9160.

Please clarify if you use native TLS implementation from Zephyr on top of nRF9160 socket, or rather fully offloaded modem side TLS (default configuration)?
The TLS_SESSION_CACHE option is rather straightforward to use, just enable it on a socket, and the TLS implementation will take care of storing the session. I've used the http_get sample with the following changes to verify the functionality:
diff --git a/samples/net/sockets/http_get/src/http_get.c b/samples/net/sockets/http_get/src/http_get.c
index 475f848c35..dca9ad1697 100644
--- a/samples/net/sockets/http_get/src/http_get.c
+++ b/samples/net/sockets/http_get/src/http_get.c
@@ -87,6 +87,7 @@ void main(void)

        dump_addrinfo(res);

+       for (int i = 0; i < 2; i++) {
 #if defined(CONFIG_NET_SOCKETS_SOCKOPT_TLS)
        sock = socket(res->ai_family, res->ai_socktype, IPPROTO_TLS_1_2);
 #else
@@ -104,6 +105,11 @@ void main(void)

        CHECK(setsockopt(sock, SOL_TLS, TLS_HOSTNAME,
                         HTTP_HOST, sizeof(HTTP_HOST)))
+
+       int cache = TLS_SESSION_CACHE_ENABLED;
+
+       CHECK(setsockopt(sock, SOL_TLS, TLS_SESSION_CACHE,
+                       &cache, sizeof(cache)))
 #endif

        CHECK(connect(sock, res->ai_addr, res->ai_addrlen));
@@ -130,4 +136,5 @@ void main(void)
        printf("\n");

        (void)close(sock);
+       }
 }

The second handshake seems to work as expected, i. e. Session ID is included:

But this is TLS socket implementation from Zephyr. If you use modem-side TLS on nRF91, although it should work the same way, there might be some bug modem-side, if it doesn't work this way please report the issue on https://devzone.nordicsemi.com/ so that it reaches modem developers.
Now as for the example usage, I think the option could be added to big_http_download sample as it already works in a way that download is restarted after the previous one finished, but there seems to be some issue with the server the sample used, it's no longer responsive. I need to find a new one that allows to download files over TLS.

Thanks for the response!
I use NCS v2.1.0, nRF9160 SICA B1A, mfw_nrf9160_1.3.2 with a prj.conf
CONFIG_NETWORKING=y
CONFIG_NET_SOCKETS=y
CONFIG_NET_SOCKETS_OFFLOAD=y
CONFIG_NET_NATIVE=n

Not sure, which mode that is.
(For DTLS I use my own tinydtls port, therefore I'm not too common with that modes.)
About your snippet.
CHECK(setsockopt(sock, SOL_TLS, TLS_HOSTNAME, HTTP_HOST, sizeof(HTTP_HOST) ))

NCS v2.1.0 uses in nrf/samples/nrf9160/https_client
setsockopt(fd, SOL_TLS, TLS_HOSTNAME, HTTPS_HOSTNAME, sizeof(HTTPS_HOSTNAME) - 1);

Is that -1 relevant?

Not sure, which mode that is.

Using native TLS with nRF91 needs some runtime configuration, so it seems that you use modem-side TLS.

Is that -1 relevant?

Actually, for this specific option the optlen is ignored as the option expects NULL-terminated string (the optval is passed as is driectly to mbed TLS). So in this case sizeof(HTTP_HOST) would be the right choice, but it makes no real difference what you provide as optlen.

so it seems that you use modem-side TLS.

So the nordic forum is the right place?

Yes

I did some more analysis, but end up in more detail question, where I was not able to find some docu:
Using:
fd = socket(AF_INET, SOCK_STREAM, IPPROTO_TLS_1_2);

Does this ensure, that at least 1.2 is used, so 1.3 will also be possible (that's my impression)
Or does it mean, that exactly 1.2 is used?
Also:
Is the SESSION_CACHE feature limited to
a resumption handshake as of RFC5246 mentioned above?
Or does it also support  session tickets as of RFC 5077?

the server the sample used, it's no longer responsive.

Just to mention:
Using a S3 offer (AWS, Gcloud, Azure, DigitalOcean, ExoScale) makes it very easy to provide files via https.
It comes with low or moderate costs.
You may also contact other open source project (e.g. Eclipse/Hawkbit ), if they are interested in hosting such a file in order to verify, that the zephyr community is able to use Hawkbit.

Thanks a lot. I opened also ticket in the nordic devzone, either I sticked to deprecated documentation of the nrfxlib, or that may be updated.
devzone issue
FMPOV, we can close this issue.

Thank you.