Operator Token Privilege Escalation

Summary:
A business logic flaw in influxdb allows users who own a valid allAccess token to escalate their privileges at operator level by listing current authorization tokens.
Example Scenario:
Attacker might be a user which was gained access by an administrator via an allAccess token only within their organization.
This user's permissions will allow full control over the organization but will still prevent him to interact with other orgs.
Impact:
This vulnerability would allow a user to obtain unrestricted access to the influxdb instance. A similar condition might fully compromise Confidentiality, Integrity and Availability of data owned by users of different organizations. Additionally, since operator token has administrative permissions, Availability and Integrity of the entire influxdb instance might be compromised.
Prerequisites/Limitations:

Attacker must have a valid allAccess token
allAccess token must have been created in the same Org where an operator token resides (ex. same Org as Admin user)
Attacker must be able to interact with influxdb instance via CLI or APIs (influxClient)

Steps to reproduce:
Scenario setup

Access influxdb UI as admin user
Create a new user and assign it to any org which contains an operator token (ex. default organization) with:

influx auth user create -o xenoOrg -n xenoUser -p <password> -t <OperatorToken>

From influxdb UI generate a new allAccess token within the same org

Exploitation (via CLI):

Execute: influx auth ls -t <allAccessToken> | grep write:/orgs. This will list all current active operator tokens on the influxdb instance.

Example
# Using an allAccess token
influx auth ls -t U1OuqmFC{REDACTED} | grep U1OuqmFC{REDACTED}

0cc41c3b050e5000							U1OuqmFC{REDACTED}
admin		0cb9c92ee228b000	[read:orgs/87d0746948a3b3f5/authorizations write:orgs/87d0746948a3b3f5/authorizations read:orgs/87d0746948a3b3f5/buckets write:orgs/87d0746948a3b3f5/buckets read:orgs/87d0746948a3b3f5/dashboards write:orgs/87d0746948a3b3f5/dashboards read:/orgs/87d0746948a3b3f5 read:orgs/87d0746948a3b3f5/sources write:orgs/87d0746948a3b3f5/sources read:orgs/87d0746948a3b3f5/tasks write:orgs/87d0746948a3b3f5/tasks read:orgs/87d0746948a3b3f5/telegrafs write:orgs/87d0746948a3b3f5/telegrafs read:/users/0cb9c92ee228b000 write:/users/0cb9c92ee228b000 read:orgs/87d0746948a3b3f5/variables write:orgs/87d0746948a3b3f5/variables read:orgs/87d0746948a3b3f5/scrapers write:orgs/87d0746948a3b3f5/scrapers read:orgs/87d0746948a3b3f5/secrets write:orgs/87d0746948a3b3f5/secrets read:orgs/87d0746948a3b3f5/labels write:orgs/87d0746948a3b3f5/labels read:orgs/87d0746948a3b3f5/views write:orgs/87d0746948a3b3f5/views read:orgs/87d0746948a3b3f5/documents write:orgs/87d0746948a3b3f5/documents read:orgs/87d0746948a3b3f5/notificationRules write:orgs/87d0746948a3b3f5/notificationRules read:orgs/87d0746948a3b3f5/notificationEndpoints write:orgs/87d0746948a3b3f5/notificationEndpoints read:orgs/87d0746948a3b3f5/checks write:orgs/87d0746948a3b3f5/checks read:orgs/87d0746948a3b3f5/dbrp write:orgs/87d0746948a3b3f5/dbrp read:orgs/87d0746948a3b3f5/notebooks write:orgs/87d0746948a3b3f5/notebooks read:orgs/87d0746948a3b3f5/annotations write:orgs/87d0746948a3b3f5/annotations read:orgs/87d0746948a3b3f5/remotes write:orgs/87d0746948a3b3f5/remotes read:orgs/87d0746948a3b3f5/replications write:orgs/87d0746948a3b3f5/replications]

# Listing all available tokens passing allAccess token and retrieving only operator level tokens
influx auth ls -t U1OuqmFC{REDACTED} | grep write:/orgs

0cbb920e128e5000							gerKYLO0Ph_ibUk0y{REDACTED}
admin		0cb9c92ee228b000	[read:/authorizations write:/authorizations read:/buckets write:/buckets read:/dashboards write:/dashboards read:/orgs write:/orgs read:/sources write:/sources read:/tasks write:/tasks read:/telegrafs write:/telegrafs read:/users write:/users read:/variables write:/variables read:/scrapers write:/scrapers read:/secrets write:/secrets read:/labels write:/labels read:/views write:/views read:/documents write:/documents read:/notificationRules write:/notificationRules read:/notificationEndpoints write:/notificationEndpoints read:/checks write:/checks read:/dbrp write:/dbrp read:/notebooks write:/notebooks read:/annotations write:/annotations read:/remotes write:/remotes read:/replications write:/replications]

Exploitation (via InfluxClient):
TODO (PoC script)
Considerations:
This might be an intended behaviour. Although, from the security perspective, a user who was gained limited access to a single entity should never be able to escalate their permissions to interact with other entities. Resulting in a critical business logic flaw.
Potential root cause:
allAccess tokens by default have permissions to list all authorizations that are defined in the same Org with no restrictions based on type (custom, allAccess, operator) -> read:orgs/87d0746948a3b3f5/authorizations.
CVSS Base Score: 9.1
CVSS v3.1 Vector: AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Thank you for this report. The is intended behavior in that:

influx setup creates a user, an org and an operator token
tokens are accessed via /api/v2/authorizations with permissions
the operator token is put in the first org, which matches the read:orgs/ORIGID/authorizations of the access token
the raw token string is stored in the system and is displayed with influx auth ls and the UI
users with read:orgs/ORIGID/authorizations (all access token or otherwise), can influx auth ls tokens, which, if this matches the first org, shows the operator token (as you reported)

So, yes, the issue is confirmed. A couple of things:

while influxdb 2.x OSS has a concept of orgs, influxdb 2.x OSS isn't considered truly multi-tenant but rather single tenant in terms of org isolation (in contrast to InfluxDB Cloud 2 and Serverless). That doesn't mean we can't improve things when it makes sense (see below). For the time being, users will want to take care to not user the default org for users they don't fully trust (we should've been documenting this, but see below)
putting the operator token in the first org is by design (arguably a better choice could have been made)
storing and displaying the raw token to users is by design, but this was a poor design choice. Best practice says we should instead only store a secure hash of the token internally (so it can't leak) and adjust the UI and influx output accordingly, as was done in Cloud 2 and Serverless (hinted at by the UI info you mentioned)

This last issue was identified internally prior to this issue and has recently been scheduled for correction by our Engineering team (cc @davidby-influx). Once done and the raw token is no longer stored internally, this issue is fully remediated since while users would be able to see the operator token, nothing sensitive will be leaked via the UI or the influx tool.
Thanks for the issue! I'm going to leave this open and we'll update it when we've implemented this best practice.

Thanks for the quick response. I just added a simple PoC script to detect and eventually exploit the vulnerability if the above mentioned conditions are met.
I'll watch this thread for future updates.

Gentle reminder on this. I'd like to have this issue officially disclosed since, with the appropriate configuration, customers would be able to mitigate it. Sharing it will help making sure customers will follow this best practice.
Do you have an ECD for the official fix? I know you probably have a very high workload, but the issue has been present here on Github since Mar 2024, I believe it would be better to disclose the CVE soon.

Hello. This does not affect 1.8, correct?

Gentle reminder on this. I'd like to have this issue officially disclosed since, with the appropriate configuration, customers would be able to mitigate it. Sharing it will help making sure customers will follow this best practice. Do you have an ECD for the official fix? I know you probably have a very high workload, but the issue has been present here on Github since Mar 2024, I believe it would be better to disclose the CVE soon.

As described in my prior comment, the behavior is confirmed but the system is operating as designed within the intended functionality of the system (ie, within OSS 2.x orgs are for organization and not true isolation) and we don't have plans to assign a CVE for this. However and importantly, we acknowledge we can improve upon this design by not storing the raw token in the first place. While it has been a while since this issue was filed, the work to improve the situation is (admittedly slowly) approaching the top of the list and is currently scheduled for a (soonish) release of InfluxDB 2.x. (cc @davidby-influx and @gunnaraasen)

Hello. This does not affect 1.8, correct?

This is dealing with the /api/v2/authorizations API which only exists in 2.x. 1.x is not affected.

As described in my prior comment, the behavior is confirmed but the system is operating as designed within the intended functionality of the system (ie, within OSS 2.x orgs are for organization and not true isolation) and we don't have plans to assign a CVE for this. However and importantly, we acknowledge we can improve upon this design by not storing the raw token in the first place. While it has been a while since this issue was filed, the work to improve the situation is (admittedly slowly) approaching the top of the list and is currently scheduled for a (soonish) release of InfluxDB 2.x. (cc @davidby-influx and @gunnaraasen)

While InfluxDB is operating within its intended design, https://www.cve.org/CVERecord?id=CVE-2024-30896 was assigned for this. As mentioned before, improvements to InfluxDB are planned and scheduled which will address this issue.

@XenoM0rph97 - it appears you requested this CVE (see https://github.com/XenoM0rph97/CVE-2024-30896). Can you adjust it to say that it only affects 2.x and not 1.x or 3x?


Support for annotations (PEP 484 type hints)

Hi Hynek!
I'd like the generated __init__ signature to include type annotations in Python 3.
Somebody mentioned this in passing over in #63, but after reading through that ticket and glancing at the PR, I'm still not sure how that feature would let me actually get type annotations into the generated __init__ signature. It seems like this requires dedicated support in attrs, probably as a separate kwarg to attr.ib.
Any thoughts?

My thoughts are that that makes sense to have and shouldn’t be too hard to achieve.
The question is how to integrate it.  We could pull the type information from the instance_of validator or bite the bullet and introduce a full-fledged on type field that would also help with the deserialization efforts.

I'll have to think a bit about those options. It seems really strange for attr.ib "core" to pull info like that out of a special validator (it's like adding some kind of implicit side-channel to the validator API that only this one special validator gets to use). Also, PEP 484 type hints aren't necessarily expressed the same as runtime types (e.g. for optional types). On the other hand, it's obviously closely related, and would be ugly to have to specify both, especially when they are the same.
The other problem with this whole idea is that PEP 484 hints are mostly for static analysis, and having annotations in import-time generated code isn't going to help those analyzers at all :-) So even with support in attrs to make these annotations available at runtime, making use of them with a type analyzer would require something else (an extension to the static analyzer to understand attr.ib? A generator for type stub files for attr classes?)

Another thought to consider. In 3.6, this will be possible IIUC:
@attr.s
class A:
    a: int = attr.ib()

I think it would be a great waste not to expose this type information somehow. Probably make attr.Attribute have a type property? In that case we might want to allow versions earlier than 3.6 to set this property somehow too, maybe via an attr.ib() argument.
In any case, once we have this info, it's not hard to add the annotations to the generated init if we want.

Before Python 3.6 annotating attributes was also possible; it is in PEP 484:
@attr.s
class A:
    a = attr.ib(default=None)  # type: int

PyCharm seems to understand such annotations; A().a inferred type is int in PyCharm (likely it just thinks this is a regular class attribute).
But none of PyCharm or mypy understand __init__ method or other generated methods, they both think that __init__ is just __init__(self) and complain when attr.s objects are created with constructor arguments, e.g. A(a=2) is an error in both, which is a bit annoying if a project uses both mypy and attrs.
See also: https://github.com/python/mypy/issues/1310.

Actually in PyCharm __init__ isn't an error since https://youtrack.jetbrains.com/issue/PY-19130. It won't help you with static analysis either though, just ignore it.

@Tinche yeah, you're right! It shows __init__(self) on inspection, but doesn't complain for unknown arguments.

I believe this is the mypy version of this ticket: https://github.com/python/mypy/issues/2088

Closing in favor of #214


[FEA] create the plugin package capable of storing conflicting multiple versions of same named classes

Is your feature request related to a problem? Please describe.
This feature contributes to #3223. Spark does not provide link compatibility. Therefore identical classes compiled against different spark versions may result in incompatible bytecode. We need to save multiple copies of such classes in the plugin jar. Standard way of using ASM-based shading/relocation does not work well with Scala.
Describe the solution you'd like
This issue proposes an approach similar to  ParallelWorldClassLoader. Instead of overriding findClass in Spark we can lean on MutableURLClassLoader in conjunction with JarURLConnection JAR URLs
The package will consist of three types of areas

a few publicly documented classes in the conventional layout
a large fraction of classes whose bytecode is identical under all supported Spark versions
a smaller fraction of classes that differ under one of the supported Spark vesions

$ jar tvf rapids-4-spark_2.12.jar
com/nvidia/spark/SQLPlugin.class
spark3xx-common/com/nvidia/spark/rapids/CastExprMeta.class
spark301/org/apache/spark/sql/rapids/GpuUnaryMinus.class
spark311/org/apache/spark/sql/rapids/GpuUnaryMinus.class
spark320/org/apache/spark/sql/rapids/GpuUnaryMinus.class

So each shim can see a consistent parallel world without conflicts by referencing only one conflicting directory.
E.g., Spark 3.2.0 Shim will use
jar:file:/home/spark/rapids-4-spark_2.12-21.10.jar!/spark3xx-common/
jar:file:/home/spark/rapids-4-spark_2.12-21.10.jar!/spark320/

Spark 3.1.1 will use
jar:file:/home/spark/rapids-4-spark_2.12-21.10.jar!/spark3xx-common/
jar:file:/home/spark/rapids-4-spark_2.12-21.10.jar!/spark311/

Describe alternatives you've considered

shading
JDK ParallelWorldClassLoader
replicating copies of the same under different package names.

Additional context

this issue should be broken down in packaging and actual class loader implementation

@tgravescs this is now complete after #3411, correct?

Completed via #3381, #3411


Preconnect or DNS Prefetch Cross-Origin Domains

It isn't always possible to prefetch cross-origin resources, however, some optimizations can still be made for external links by requesting the browser prefetch the dns records or preconnect to the host. Twitter has enabled such a service while hovering over tweets to external urls.

I would like to propose adding a feature to appending dns-prefetch or preconnect html tags when a user hovers or begins to click off-domain url.
<link rel="preconnect" href="https://example.com">
<link rel="dns-prefetch" href="https://example.com">

@lrehmann this sounds good. Will consider adding it


Traccar commands with PT502

Hi Tananaev,
We just installed traccar 3.5 and test the PT502, it worked fine for us untill we decide testing the commands (engine stop), we get this error:
"{\"reason\":\"java.lang.RuntimeException: Command engineStop is not supported in protocol pt502\",\"success\":false}"

Close
I guess that the protocol at the backend is not finish yet? - do you have the list of the protocols that already implement this feature so I can test if I have the device, I have TK103 and PT600. (just in case)
Finally, is-it easy to help you on developing these commands ? - I am just new in java, but I think the encoder is already there so if I just stick to the device protocol I can make it !
Thanks for your feedback.
cheers
Thomas

You can check what commands are supported for a particular protocol by looking at the protocol class:
https://github.com/tananaev/traccar/blob/master/src/org/traccar/protocol/Pt502Protocol.java#L33
Adding new commands should be straight forward if you have protocol documentation.

Hey everyone! I got this protocol and I will try to help :)
Anton, the OPC command you implemented at:
https://github.com/tananaev/traccar/blob/master/src/org/traccar/protocol/Pt502Protocol.java#L33
has different format from the documentation ( attached )

The tracking implementation matches the doc.
Can I fix TYPE_OUTPUT_CONTROL as the document and implement TYPE_ENGINE_STOP and TYPE_ENGINE_RESUME based on OPC ?
Thanks
Danilo Recchia

Yes, I think you are right. The format I'm using is most likely incorrect.

Ok, this feature is merged into trunk, but I wasnt able to implement ENGINE_STOP and ENGINE_START since there is no default port on this device. But you can achieve the same behavior using the OUTPUT_CONTROL that I fixed.
Regards


Fix 2D scale gizmo placement

This PR fixes the placement of the scale gizmo for 2D nodes whose pivot has been moved.
A similar issue was fixed in #25380, also by taking into account the pivot. This PR introduces a helper function to hopefully prevent the issue from occurring in other places. I wasn't sure if the helper should indicate it's returning a value which includes the pivot or not - perhaps someone with more experience with the engine can weigh in.
Before:

After:

I've actually noticed what I believe to be 5 or 6 distinct issues with the 2D editor (including some scaling issues). I will open issues for the individually and perhaps a tracker issue since I don't see any already open.
From my testing however, it seems like scaling (when working) uses the pivot as the origin on both Node2Ds and Control nodes. That behaviour is what I would expect, and this PR makes it clearer.

@groud Could you explain a scenario where the pivot is not the origin of the scale transform?

From my testing, scaling uses the pivot as the origin on both Node2Ds and Control nodes. That behaviour is what I would expect, and this PR makes it clearer.

I had the time to test this and, indeed, the pivot is in both cases the origin of the scale. :)

Thanks!


conda chooses privious pyemma version as maximum

version 1.0a3 is weighted higher by conda than 1.0 or 1.0.1. As a workaround I would suggest deleting the old versions from binstar. Otherwise users are dragging in old versions.

Done.  I've removed everything older than 1.0.1, just in case.

Thank you for removing the old stuff!


[cleanup][test] CSContainer needs not to inherit from ZKContainer

Code cleanup so that we read code more smoothly ..
Does this pull request potentially affect one of the following parts:

If the box was checked, please highlight the changes

[ ] Dependencies (add or upgrade a dependency)
[ ] The public API
[ ] The schema
[ ] The default values of configurations
[ ] The threading model
[ ] The binary protocol
[ ] The REST endpoints
[ ] The admin CLI options
[ ] The metrics
[ ] Anything that affects deployment

Documentation

[ ] doc
[ ] doc-required
[x] doc-not-needed
[ ] doc-complete

Matching PR in forked repository
PR in forked repository:

Thanks for your reviews! Merging...


draft: fix vote

fix https://github.com/denoland/saaskit/issues/427
export function newVoteProps(): Pick<Vote, "id" | "createdAt"> {
  return {
    id: crypto.randomUUID(),
    createdAt: new Date(),
  };
}

 const vote = {
    item,
    userLogin: user.login,
    ...newVoteProps(),
  };
  let status;
  switch (req.method) {
    case "DELETE":
      status = 204;
      await deleteVote(vote);
      break;

vote.id should not get from newVoteProps when undergoing the delete action

Thank you! Can you please run deno fmt and then deno task ok?

I'm closing this PR in favour of #445. Either way, thank you for your help @huai-jie! Feel free to take a look at that PR and tell me what you think.


[Issue] Domains in Java package IDs

Heya, you’re currently using Java package IDs beginning me.wolfie, which implies the package is developed by someone related to the wolfie.me domain, which it isn’t. Please could you consider changing your package IDs to use a domain you do own? Many thanks :)

Oh yeah! That was to do with a much older pseudonym I used to go as for plugin dev. I'll get to changing it later on.

https://github.com/AnOpenSauceDev/Methane-mod/commit/2c2a713f9fff6ac4738bd4c246e479fc80d2745a should resolve this


Widget light service call not working

Home Assistant Android version:
1.5.0
Android version:
10
Phone model:
Samsung Galaxy S10 (SM-G973F)
Home Assistant version:
0.104.3
Description of problem:
Light.toggle/turn_on/turn_off seems to have a problem calling my server, I get a webhook error corresponding to when I'm pressing the widget.
Widget icon responds as if successful with green checkbox.
Additional information:
From Home Assistant log:
2020-01-29 23:12:02 WARNING (MainThread) [homeassistant.components.webhook] Received message for unregistered webhook null

I think the main problem with implementing a check in the app is that the response to a REST service call is always 200 as long as the call itself is received.  HA doesn't supply any sort of data saying that the service data is bad--it just passes it along to the appropriate service and tries to execute it there.
I think this is a change that would have to first happen in HA to send the app a response that indicates that the service call failed somewhere down the line.

Fixed in #370


Opening a connection takes a lot of time on Read data types

Description
Related to #17117 - it happens in my case as well.
I have a DB with a dozen schemas and ~315 enums.
Whenever I open a connection to a remote DB the background task stays on Read data types for about 35 seconds before the connection is actually opened.
suggestions:

do this as a background task AFTER the connection is made
lookup a data type when it's actually needed i.e describing or selecting from a table for the first time.

DBeaver Version
Community 22.2.0
Operating System
MacOS 12.6
Database and driver
postgres 12.4, default JDBC drivers
Steps to reproduce
create a remote (i.e cloud) database with many enums.
open a connection to it
Additional context
it only happens when Connecting to a DB - it doesn't happen when invalidating the connection

I am facing the same issue when trying to connect to remote Postgres DB that hosts around 300 schemas and multiple enums. It takes about 5 minutes to open a connection.
Using Dbeaver v22.2.5 and jdbc driver v42.5.1

I get same non-responsiveness whilst attempting to connect to a postgresql rds db hosted on AWS:
"connect to jdbc:postgresql://..... Read data types" and the connection just sits there, waiting.

@LonwoLonwo @arhayka sorry for the bump - but are there any plans of addressing this soon? thanks 🙏

You can vote for the issue by reacting with thumbs up emoji under the issue body.

But i am the OP :/

thanks for handling this - the experience is so much better now.


[BUG] Infinite loop on v34.4.0

Is there an existing issue for this?

[X] I have searched the existing issues

Does this issue exist in the latest version?

[X] I'm using the latest release

Describe the bug?
The step gets stuck in an infinite loop while checking out.
I am using it to get changed files to scan with Semgrep on a Pull Request.
Changing my step to version 34.3.4 does not raise the same issue.
The loop gets stuck as seen in the attached image:

To Reproduce
name: Semgrep (JS) - JS, Python, Go Security Scan
on:
  pull_request:
    paths:
      - '**.js'
      - '**.jsx'
      - '.github/workflows/semgrep-js.yml'
  workflow_dispatch:
jobs:
  semgrep:
    # Skip job if draft
    if: github.event.pull_request.draft == false
    name: Semgrep run
    runs-on: ubuntu-latest
      # Check out current branch if PR
      - name: Check out (PR)
        if: ${{ github.event_name == 'pull_request' }}
        uses: actions/checkout@v3
      # Skip changed files and filtering on PR
      - name: Get changed files (PR)
        if: ${{ github.event_name == 'pull_request' }}
        id: changed-files
        uses<EMAIL_ADDRESS># Test
        with:
          files: |
            **.js
            **/**.js
            **.jsx
            **/**.jsx
      # Show changed files on PR and push them to environment as CHANGED_FILES
      - name: Show changed files (PR)
        if: ${{ github.event_name == 'pull_request' }}
        run: |
          ALL_CHANGED_FILES=$(echo ${{ steps.changed-files.outputs.all_changed_files }})
          echo "Got changed files: $ALL_CHANGED_FILES"
...

Skipped the rest as the execution does not continue any further anyways.
What OS are you seeing the problem on?
ubuntu-latest or ubuntu-20.04
Expected behavior?
To work properly.
Relevant log output
See attached image.
Stuck on:

From repo
* branch master -> FETCH_HEAD
* branch HEAD   -> FETCH_HEAD

### Anything else?

Nope 😄

### Code of Conduct

- [X] I agree to follow this project's Code of Conduct

If I use with fetch-depth: 0 it does seem to work.
      - name: Check out (PR)
        if: ${{ github.event_name == 'pull_request' }}
        uses: actions/checkout@v3
        with:
          fetch-depth: 0

      - name: Get changed files (PR)
        if: ${{ github.event_name == 'pull_request' }}
        id: changed-files
        uses<EMAIL_ADDRESS>        with:
          files: |
            **.js
            **/**.js
            **.jsx
            **/**.jsx

This does increase run times but if we cannot move further I guess I can leave it like this.

@tsigouris007 I'll like to point out that the patterns you highlighted aren't valid. You can take a look at the patterns to match file paths for more information.

Hi @jackton1 apart from the patterns the infinite loop did not stop.
But also, why are they not valid?
I have been using them for quite some time on a production environment and have been used for more than 15k runs without a problem and producing right results. What am I not doing right?

Unfortunately this is not solved.

Using 34.4.0 version runs for more than 6 minutes without any proper result.
Reverting to 34.3.4 it works.
The step used for this is:
      - name: Get changed files (PR)
        id: changed-files
        uses<EMAIL_ADDRESS>        with:
          files: |
            **.js
            **.jsx

Hello again @jackton1 ,
Regarding my patterns they are actually correct as they were in the first place. I thoroughly verified them while testing. Using only **.extension does not include sub-directories, you actually need the **/**.extension for this to include everything.

@tsigouris007 Have you tried upgrading to the latest version.?

@jackton1 seems like v34.4.2 does the trick.
Thank you very much.


error with -o option

ssh with assh (aliased as assh wrapper ssh) does not work with -o option, for example
$ command -v ssh
alias ssh='assh wrapper ssh'

$ ssh -o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null <IP>
Error: unknown shorthand flag: 'o' in -o
Usage:
  assh wrapper ssh [flags]

Flags:
      --1
      --2
      --4
      --6
      --A
      --C
      --D strings
      --E strings
     ...

I do put ssh options in the configuration file (thanks to assh, it is very convenient), but I need to run ssh -o on some ephemeral
IPs.
Is this a known issue? any suggestion on how to handle this?
Thanks

The issue is resolved by aliasing ssh to assh wrapper ssh --.


chore: Fixed README karpenter_controller_cluster_ids parameter

Description

karpenter_controller_cluster_ids changed to karpenter_controller_cluster_id, but the README sample did not change.
https://github.com/terraform-aws-modules/terraform-aws-iam/pull/209 Thie

Motivation and Context

How Has This Been Tested?

[ ] I have updated at least one of the examples/* to demonstrate and validate my change(s)
[ ] I have tested and validated these changes using one or more of the provided examples/* projects

[ ] I have executed pre-commit run -a on my pull request

This PR is included in version 4.20.2 :tada:


feat(login): new palette based styles

Closes #1172

:tada: This PR is included in version 0.111.0 :tada:
The release is available on GitHub release
Your semantic-release bot :package::rocket:


How to handle complex numbers?

Level 1 (good)
Internal operations on Complex{Dual} and Complex{Tracer} should be supported, as long as there are Real numbers at the start and at the end.
Requires overloading conversions and promotions, not more.
Level 2 (still debatable)
We could decide how to initialize tracing with complex input, and read out the tracers to create a Jacobian.

I think we can closes this for now, until the need for it arises.
If you're a user and need to compute sparsity patterns through computations involving complex numbers, please open an issue!


Add Prop Hunt Plugin

Adds a Prop Hunt plugin to OSRS, allowing you to disguise yourself as everyday objects found around Gielnor while making your friends track you down.

You should add a warning line to your plugin file to disclose that you are sending player data to a third party server, e.g.
repository=...
commit=...
warning=This plugin sends player data, including IP address [...] to a third-party server for communication between clients.

Done and done. Thanks for the helpful feedback @LlemonDuck !


feat: Add target_tracking_configuration to autoscaling.tf

This PR is included in version 1.1.0 :tada:


Update chocolatey package version

The package's version available via chocolatey is currently 0.18.1, It has not been updated for more than a year.
Let me know if I can do anything to help on this.

Sorry, but my Windows-fu is weak. I hardly ever use it, and I don't know how to build ag on Windows. Someone else must have submitted ag to Chocolatey.


Make the default Pager page size be settable

Right now, the default page width is fixed. You can play by:
GtPagerPageEmbellisher compile: 'defaultPageWidthNumber ^ 1/3'

Better query:
'Pager' gtClassMatches &
(0.5 gtLiteralValueMatch | '1/2' gtASTMatches)

This is exciting!!! Hopefully we will eventually be able to vary this on a per pager basis (e.g. I meta-drag a pager pane resizer and just that one resizes all visible panes to show two, three, four panes at a time)


[WIP] Support Hadoop 3.x Hive 3.x and Spark 3.2.x default

Tips

Thank you very much for contributing to Apache Hudi.
Please review https://hudi.apache.org/contribute/how-to-contribute before opening a pull request.

What is the purpose of the pull request
(For example: This pull request adds quick-start document.)
Brief change log
(for example:)

Modify AnnotationLocation checkstyle rule in checkstyle.xml

Verify this pull request
(Please pick either of the following options)
This pull request is a trivial rework / code cleanup without any test coverage.
(or)
This pull request is already covered by existing tests, such as (please describe tests).
(or)
This change added tests and can be verified as follows:
(example:)

Added integration tests for end-to-end.
Added HoodieClientWriteTest to verify the change.
Manually verified the change by running a job locally.

Committer checklist

[ ] Has a corresponding JIRA in PR title & commit

[ ] Commit message is descriptive of the change

[ ] CI is green

[ ] Necessary doc changes done or have another open PR

[ ] For large changes, please consider breaking it into sub-tasks under an umbrella JIRA.

@hudi-bot run azure

@hudi-bot run azure

@hudi-bot run azure

@hudi-bot run azure

@yihua @rahil-c
I have a question:
As we know, from hive2 to hive3 is a major version change, which will involve the adjustment of many original methods and classes. Should we also split hive2 and hive3 (or the newest hive4) into different packages?

@hudi-bot run azure

@hudi-bot run azure

@hudi-bot run azure

@yihua @rahil-c Hi~ I have a question: As we know, from hive2 to hive3 is a major version change, which will involve the adjustment of many original methods and classes. Should we also split hive2 and hive3 (or the newest hive4) into different packages?

@rahil-c  wdyt?  Is there any compatibility changes on the Hudi side across hive2 and hive3?

cc @yihua , will we cut this feature into release 0.12.0 then ?

@yihua @rahil-c Hi~ I have a question: As we know, from hive2 to hive3 is a major version change, which will involve the adjustment of many original methods and classes. Should we also split hive2 and hive3 (or the newest hive4) into different packages?

@rahil-c wdyt? Is there any compatibility changes on the Hudi side across hive2 and hive3?

@yihua @cdmikechen  I think in our setup our azure ci runs seems to show that there are not currently any major changes needed to support hive3 otherwise I think we would have seen more test failures. (Maybe integration testing might catch this)
We will also want to check that this pr still allows users can to run hadoop 2.x hive 2.x and spark 2 or 3.x as well, without any issues.


activity screen - do not show blank slate when search is active AGPUSH-1500

https://issues.jboss.org/browse/AGPUSH-1500
I've introduced a helper isSearchActive() that is now a condition for showing blank slate.
Besides that I've fixed the Register Device button also on Activity page (was fixed before on Analytics: https://github.com/aerogear/aerogear-unifiedpush-server/blob/1.1.x-dev/admin-ui/app/components/app-detail/include/analytics.html#L97 )
:dart: master and 1.1.x-dev
:ship: deployed at https://upsstaging-aerogearz.rhcloud.com/ag-push/ (standard credentials)
:hammer: Testing:

try Activity tab with no devices registered (blank slate should be shown)
try Activity  tab with one device registered (blank slate should be shown)
try Activity tab with a message sent (the activity log table should appear)
try Activity tab with a message sent, but use search with a non-existent value (activity log table should be visible, but a message "No message matches the given search criteria." will appear - then try to clear search string and a message should appear again)

Hmm no TravisCI build


Use of hash_to_scalar

Update the spec to use hash_to_scalar where needed. Fixes #89
Note:
The way that random elements are generated in ProofGen will change. Right now, each element is generated by calling a PRF for each one separately. The proposed alternative is to call the PRF once and use the result as a seed to an XOF (in hash_to_scalar). The reasons are two:

We can replace the PRF with a seed that will be passed as an argument to the ProofGen function. This will help with test vectors, and we can make a requirement that this seed will be the output of a PRF in any other situation aside from testing.
The proposed alternative is more efficient and since we already assume that the XOF is secure (otherwise the deterministic signatures will be insecure), we will not have to change our security model when it comes to the XOF.

My question is: Is there a reason to avoid this route?? Is there any security reason for which we would not want to use this alternative??
Also, e and s generation is not changed because PR #135 proposes an alternative.

Looking good to me as a direction, few tweaks based on the merging of #140, also looks like there are conflicts to resolve

Looking good to me as a direction, few tweaks based on the merging of #140, also looks like there are conflicts to resolve

Conflicts also need to be resolved.

Multiple reviews and approvals, open 7 days, merging.


Failing test for numeric enum (#946)

Here is a failing test for #946. You should see:
1) Should support numeric keys
  Message:
    TypeError: Cannot read property 'type' of undefined
  Stacktrace:
    TypeError: Cannot read property 'type' of undefined
    at jsdoc/lib/jsdoc/src/parser.js:525:41
    at Array.forEach (native)
    at Parser.resolveEnum (jsdoc/lib/jsdoc/src/parser.js:520:13)
    at Visitor.visitNode (jsdoc/lib/jsdoc/src/visitor.js:381:24)
    at Visitor.visit (jsdoc/lib/jsdoc/src/visitor.js:284:27)
    at Walker.recurse (jsdoc/lib/jsdoc/src/walker.js:530:44)
    at Parser._walkAst (jsdoc/lib/jsdoc/src/parser.js:246:18)
    at Parser._parseSourceCode (jsdoc/lib/jsdoc/src/parser.js:236:18)
    at Parser.parse (jsdoc/lib/jsdoc/src/parser.js:157:18)
    at Object.jasmine.getDocSetFromFile (jsdoc/test/jasmine-jsdoc.js:159:26)

Notes
The test will pass if you change the fixture to use string keys (simply quote "0" and "1").
I would expect it to pass either way.

Fixed #946 without using this.


minor fixes

@conniey, for some reason, some of the text at the end of the suggestion section in the file on microsoft/dotnet was not migrated to this file.


Code coverage support

Infrastructure is now provided to enable local code coverage reports, as well as web reports for Travis builds through codecov.io.

This change is

Codecov Report

:exclamation: No coverage uploaded for pull request base (master@fa7f85f). Click here to learn what that means.
The diff coverage is n/a.

@@            Coverage Diff            @@
##             master      #52   +/-   ##
=========================================
  Coverage          ?   57.75%
  Complexity        ?       95
=========================================
  Files             ?       13
  Lines             ?      419
  Branches          ?       35
=========================================
  Hits              ?      242
  Misses            ?      155
  Partials          ?       22

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update fa7f85f...09ed448. Read the comment docs.

Reviewed 3 of 3 files at r1.
Review status: all files reviewed at latest revision, all discussions resolved.

Comments from Reviewable


refactor: move preview resources out of main product

Hi @DenDmitriev
thanks for build such a cool project
when I'm using this package, I found seems the preview resources have been bundled into the final product which will be used in the final app ipa or some other packages
at this line:
https://github.com/DenDmitriev/DominantColors/blob/3ca9e91e0b992edc86ca9f09b42295285ecadad4/Package.swift#L31C1-L31C64
resources: [.process("Resources/Media.xcassets")]),

the final binary of this product will be like around 1.1 MB in the final app or package binary
and the resources counted like almost 0.9 MB for the binary
this PR will move the preview resources out of the package target so the final size will be reduced 80% from the calculation above
then how to preview the local change?
and here is the answer

I have created a xcworkspace for the local development which contains the local swift package and two exist preview project
and moved the preview code (both iOS and macOS) into each project, and also for resources
next time you can just open the xcworkspace file then editing like before
select the iOS project target will preview the package change via iOS preview, same for selecting the macOS target, the code change can be previewed on macOS (no need to boot up any simulator, just like before)

Hello, @vvisionnn
It should have been done a long time ago. I checked the changes, everything is fine.
Thank you for your participation.


mock@latest, TypeError [ERR_INVALID_ARG_TYPE]: The "request" argument must be of type string. Received type undefined

I updated my wechaty environment to the latest today but found that WECHATY_PUPPET=mock is now broken:
Using the latest wechaty-getting-started/examples/starter-bot.js as the example:
$ node starter-bot.js
18:45:33 INFO Wechaty <default> start() v0.22.4 is starting...
Starter Bot Started.

I.e., AOK. Now run with  WECHATY_PUPPET=mock:
$ WECHATY_PUPPET=mock node starter-bot.js
18:45:53 INFO Wechaty <mock> start() v0.22.4 is starting...
18:45:53 INFO PuppetManager install(mock@latest) please wait ...
npm: +<EMAIL_ADDRESS>added 1 package from 2 contributors and audited 1 package in 1.153s

npm: found 0 vulnerabilities

18:45:55 INFO PuppetManager install(mock@latest) done
TypeError [ERR_INVALID_ARG_TYPE]: The "request" argument must be of type string. Received type undefined
    at Function.resolve (internal/modules/cjs/helpers.js:28:13)
    at new mock (/path/to/node_modules/mock/index.js:15:29)
    at Function.<anonymous> (/path/to/node_modules/wechaty/dist/src/puppet-manager.js:58:34)
    at Generator.next (<anonymous>)
    at fulfilled (/path/to/node_modules/wechaty/dist/src/puppet-manager.js:4:58)

$ npm list --depth=0
├──<EMAIL_ADDRESS>├──<EMAIL_ADDRESS>├──<EMAIL_ADDRESS>└──<EMAIL_ADDRESS>

- $ WECHATY_PUPPET=mock node starter-bot.js
+ $ WECHATY_PUPPET=wechaty-puppet-mock node starter-bot.js

This is a bug in Wechaty: we did not validate the puppet name from the environment variable.
Currently, we have to use the full npm module name for puppet, instead of the abbr.
Learn full list of puppet providers at: https://github.com/Chatie/wechaty-puppet/wiki/Directory

Wechaty v0.23.6 should have added the check for this issue.

Gotya. Works like a charm!


Link version of NStepLSTM (for cudnn-rnn branch)

Hi,
I've implemented a link version of NStepLSTM (using your Function) in order to see how it works.
I've heard that you will change the API of the Function.
Please reject this PR if this code is useless.

Sorry, I'll change the function drastically. The old implementation cannot supports variable length inputs and a case when input and output size are different.
And, today I noticed that cuDNN v5 was officially released and its interface was drastically changed from its release candidate ;-(
I updated the implementation just now. See its unit test.

And, I am also implementing a link version of the function now. I think we need to make a function to sort arrays in descent order and a function to transpose the arrays.

Thank you for the helpful reply! It's no problem because this code is just written for our experiments. And it's good to hear that you're now under implementation.
Btw, I'm surprised that the official cuDNN v5 has changed largely its interface...


Question about 'data-tid' attribute

<label for="example2-card-cvc" data-tid="elements_examples.form.card_cvc_label">CVC</label>
I was looking through the examples and noticed the 'data-tid' attribute and I was wondering what it actually does. Do I need to include that in my own code?

👋 Hey @raini35,
That's short for "translation ID" and it's something specific to just these examples, so that we can localize the entire demo into multiple languages.
If you're not localizing your app, or you're using some other method for localization, you can omit this.
(Also: this property is a data-* attribute, which means it's a way to store arbitrary data on the HTML element. It doesn't have any other meaning according to the browser.)


Cursor : pointer not showing when using onRowClick

Describe the bug
Datatable component not showing the pointer when using onRowClick function
To Reproduce
Steps to reproduce the behavior:
https://icflorescu.github.io/mantine-datatable/examples/handling-row-clicks/
Expected behavior
Cursor: pointer will show when using onRowClick function
Screenshots

Thanks for the heads-up. This will be fixed in the next version.


add retry mechanism for e2e test workflows

Requirement - what kind of business use case are you trying to solve?
It seems that the e2e sometimes fail. Instead of having to re-trigger the complete ci logic manually, an automatic retry behavior would be nice.
Proposal - what do you suggest to solve the problem or improve the existing situation?
So far, I have not dealt with it much. I found this action online. Alternatively, someone here describes how to implement a retry logic itself.
Any open questions to address
What are your thoughts?

// cc : @rubenvp8510 @iblancasa

Thanks for opening this issue! Yes, I agree we are having some problems related to the CI. 🤔  The most of the issues I've seen in the last days are related to downloading resources from the Internet like the Golang dependencies and pulling container images. I'm preparing a PR to speedup the build of the E2E environments and I think most of those problems will disappear. It is based on #1715. But yes, we need something extra. I'll take care of this. 😄 Thanks!

if we can't download dependencies to build / test, maybe it would make sense to put them in a container image?
Our Build image could then call our make rules in the cl.
Just an idea:
make_ci_test_with_dep:
    docker run --rm -it build_img_with_deps bash -c "make test_with_dep"
---
make ci_test_with_dep

Thanks for taking care :)

I added some retry mechanisms and I think we can close this issue. What do you think @frzifus?

sure :+1:


timestamp is displayed unexpectedly

in the middle of...
https://theblog--adobe.hlx.page/en/drafts/migrated/2020/05/21/adobe-celebrates-global-accessibility-awareness-day.html#gs.7sd5nq
...the layout seems broken. search for 00.
i think this may be an icon :07:. to be perfectly honest i am not sure that this really is an importer issue, but ideally this should be escaped some how during the import.

This is a rendering issue, the md is correct:
React Spectrum is Adobe’s React-based implementation of [Spectrum](https://spectrum.adobe.com), Adobe’s design system. Spectrum provides adaptive, accessible, and cohesive experiences for Adobe applications. Adobe engineers have worked to abstract the accessibility behaviors expected into a separate library to provide accessible UI primitives that will soon be shared in open source for use outside of Adobe. Devon Govett, an Engineer working on React Spectrum provides highlights for the [React ARIA project on YouTube](https://youtu.be/41Ia291KIvI?t=32810) (starts at 9:07:00).


Data science

changes based on review

Good work!  I'd look at extracting out some of the logic from DataManager.  It's doing an awful lot here.
It's also making calculations very inefficiently by reading the JSON data each time.  Just read it once and save the necessary summary values (number of conversions & number of views).
Please refactor and resubmit when ready.


kotsadm: ability to retry a deployment

Often I'll get an error during deployment in kotsadm, which requires manual steps to address. Once I've taken these manual steps, there's no way to retry the deployment. Examples include:

errors on immutable fields like Jobs and Statefulsets -- I would manually delete the resource and then re-deploy
errors due to missing API versions - I would apply the CRDs and then re-deploy

I know some of these can be addressed by preflight checks, but there's no way to re-run those either (that might be worth a separate issue though)

In my case, the culprit is a PVC that I've had to change.  The deployment fails, since the PVC is immutable, and I've forgotten to remove it before deploying.
To remedy, I delete the PVC manually, click 'rollback', and then attempt to deploy again.
The deploy fails with the original error message.  Presumably this error is cached from the initial deployment, as the PVC in question no longer exists.
My only remedy is to manually remove and re-apply the manifest to the cluster (workable, but kind of defeats the purpose of kots), or make a nonsense change to the resources and re- trigger the pipeline.
An explicit 'retry' button that actually attempts to re-apply the application resources would be a nice feature.  It's not a big deal for an unstable application in development, but it will get seriously annoying when this app becomes stable/production worthy.

Closing this issue since we now have a "Redeploy" button in the admin console and preflight checks can also be re-run.


JW-529 cleanup

Rebuild this please

Rebuild this please

Retest this please

Retest this please

Retest this please


Fix: Coverage report failure during release workflow

Codecov Report

:exclamation: No coverage uploaded for pull request base (main@8f24aa0). Click here to learn what that means.
The diff coverage is n/a.

@@           Coverage Diff           @@
##             main       #2   +/-   ##
=======================================
  Coverage        ?   77.12%
=======================================
  Files           ?        9
  Lines           ?     1657
  Branches        ?        0
=======================================
  Hits            ?     1278
  Misses          ?      379
  Partials        ?        0

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update 8f24aa0...853cea8. Read the comment docs.


Wall creating with biomes

Forge Version : 36.0.0
Minecraft Version: 1.16.5
WorldSeed:<PHONE_NUMBER>430116870
Describe the bug
A clear and concise description of what the bug is.

making it so frozen rivers use the same wall as snowy tundra please
Expected behavior
A clear and concise description of what you expected to happen.
Screenshots
If applicable, add screenshots to help explain your problem.
** Stack Trace**
(Pastebin Link)
Desktop (please complete the following information):

OS: [e.g. iOS]
Browser [e.g. chrome, safari]
Version [e.g. 22]

Smartphone (please complete the following information):

Device: [e.g. iPhone6]
OS: [e.g. iOS8.1]
Browser [e.g. stock browser, safari]
Version [e.g. 22]

Additional context
Add any other context about the problem here.

Thank you, I've assigned myself this issue.
ETA roughly 4-10 days if no emergencies come up.
Cheers!

Thank you, I've assigned myself this issue.
ETA roughly 4-10 days if no emergencies come up.
Cheers!


Allow If-None-Match header for CORS requests, to cache GET requests

cc @thoniTUB I noticed this one was also still missing


Fix for WFLY-13129, Example CLI script

Issue: https://issues.redhat.com/browse/WFLY-13129
Community doc is included in this PR.
Do not merge. Analysis under review.
Introduce a CLI script to apply to standalone configurations to contain microprofile, evolve security configuration to rely on elytron, remove security subsystem and ManagementRealm.

retest this please

Dependency Tree Analyzer Output:
Removed Dependencies:

xml-resolver:xml-resolver:jar:1.2:compile

Major Version Changes:

org.wildfly.core:wildfly-cli:jar:client:12.0.0.Beta1:compile -> 11.0.0.Final
org.wildfly.core:wildfly-core-feature-pack:zip:12.0.0.Beta1:compile -> 11.0.0.Final
org.wildfly.core:wildfly-elytron-integration:jar:12.0.0.Beta1:compile -> 11.0.0.Final
org.wildfly.core:wildfly-event-logger:jar:12.0.0.Beta1:compile -> 11.0.0.Final
org.wildfly.core:wildfly-version:jar:12.0.0.Beta1:compile -> 11.0.0.Final

CC @wildfly/prod


Elassandra as C* plugin

Is that possible to use Elassandra as C* plugin?
Have you considered or planned this possibility? We were evaluating this possibility and then found your promising solution. Do you think this would be possible at all, e.g. using embedded ES + your customisations?

Elassandra is Cassandra + Elasticsearch, and you can start C* nodes without enabling Elasticsearch (controlled by the option -e  in bin/cassandra). You can have some cassandra only datacenters, and some cassandra datacenters with embedded elasticsearch enable, it's up to you.


Fixes for twig v1.25

This fixes #107.
Twig.js in conjunction with twig v1.25+ throws an exception when trying to call Twig_Node::getNode() for non existent child nodes. This PR adds checks before calling the getNode method.

This has been fix in #112 commit 36ad48d, so I'm closing the pull request closing.


[WIP]Attempt to root cause test failure in v1.x branch

Description
Checks CI success after reverting #19748 and reenabling skipped gluon_data_loader tests.
Checklist
Essentials

[ ] PR's title starts with a category (e.g. [BUGFIX], [MODEL], [TUTORIAL], [FEATURE], [DOC], etc)
[x] Changes are complete (i.e. I finished coding on this PR)
[x] All changes have test coverage
[x] Code is well-documented

Not required anymore as the CI issue was due to addition of a lot of onnx tests that have been moved to night in this PR #19848


add option to parameterize LicenseWebpackPlugin

Bug Report or Feature Request (mark with an x)
- [ ] bug report -> please search issues before submitting
- [x] feature request

Desired functionality.
I think, it would be nice to set the pattern attribute of the LicenseWebpackPlugin plugin in the .angular-cli.json file. Here is an example:
{
  "defaults": {
    "build": {
      "license": {
        "pattern":  "^(.*)$",
        "unacceptablePattern": "^(GPL.*)$",
        "abortOnUnacceptableLicense": true,
        "includePackagesWithoutLicense": true
      }
    }
  }
}

With this option we do not limit our to show only the (MIT|ISC|BSD.*) licenses and packages in the 3rdpartylicenses.txt file.

I don't think exposing the license regex is the best way to approach this issue. The plugin we use might change for instance, and those options no longer work. It would be better to just automatically extract all licenses IMHO.

I think license export is not the most important functionality, the most used (for me) is unacceptablePattern. In enterprise environment we can not use GPL license (GPL require same license in your product).

hi @filipesilva @Brocco, What do you think about GPL license ignore feature?
It is important for us :)

@filipesilva, @Brocco would you like merge this pull request?

@tamascsaba I think what you need is something difference... You can't use some licenses in your organization, right?
But the way you're trying to detect licenses if through the license comments included in the output bundles. You only get licenses there that included license strings in the source code.
That means that some packages, that don't include license comments in the source code, can have invalid licenses for you.
Instead you should check the licenses in the packages themselves to determine whether or not they are valid. We need to do that for the CLI itself. There's a script to check licenses here: https://github.com/angular/angular-cli/blob/master/scripts/test-licenses.js.
My advice for you is to adapt this script to your project. In your case you probably don't want to check all dependencies though, since you care about the licenses used in packages in the build but not in the tooling.

@tamascsaba, thanks for this feature request, but it's outside of the scope of the Angular CLI.
If you need to customize a Webpack plugin, you can do so by using ngx-build-plus. While, we do allow customizing your build pipeline via 3rd party builders, we don't support this.


Configurator - Add Version Checker

Add a version check module in the config app that will link to the current release for that board/controller.

Added to configurator home page.


composer could not find package

InvalidArgumentException]                                                                                Could not find a matching version of package sawirricardo/laravel-whatsapp. Check the package spelling, your version constraint and that the package is available in a stability which matches your minimum-stability (dev).
I noticed that the package  is not yet available on packagist.org

Hi @Blear , nice catch! I've put this in the composer https://packagist.org/packages/sawirricardo/laravel-whatsapp


Portkey AI Inference Provider Integration

What does this PR do?
Integrate Portkey AI Inference Provider to Llama Stack. Access to 40+ Providers to access 250+ LLMs with LLama Stack
-Fixes and Closes #671
Test Plan
This code has been tested and reviewed
Sources
Before submitting

[x] This PR fixes a typo or improves the docs (you can dismiss the other checks if that's the case).
[x] Ran pre-commit to handle lint / formatting issues.
[x] Read the contributor guideline,
Pull Request section?
[x] Updated relevant documentation.
[x] Wrote necessary unit or integration tests.

@ashwinb can you take a look at this? thanks!


Make synchronous channels work for process families

In #114, support for synchronous channels was added. However, this support currently works only for plain processes. We shall make synchronous channels also work for process families.

I’m not sure whether we should do that. My intention was to have only a typed, non-family version for such higher-level constructs. However, this leads us to working with closed processes only, and it might not be a good idea to exclude open processes, because it may prevent us from using results we’ve proved in other proofs. I guess that this whole concept of process families vs. just processes has to be thought through more, and we don’t have the time anymore to do so.


Handle the case of auto lock after importing multi account

Describe the bug
Handle the case of auto lock after importing multi account
Version test: v1.1.0(220)
Device test: IP 11
To reproduce the bug
Pre-condition: Setting Require unlock = Always
Steps:

Go to Import account screen
Perform import multi-account by Polkadot{js}
In Apply master password step, forget 1 account
Perform derive account and observe the displayed screen

Actual: Do not require master password after import multi account
Expect: Auto lock after import multi account

Version test: https://file.cdmteck.com/s/DB9JLAnjJczopcC/download?path=%2F&files=SubWalletMobile-build-220-1036-merge-2023-09-21T11-04-16.ipa
Device test: IP 11
Validation passed.


Fixup Twitter Links

Add markdown links so that twitter handles are clickable

@nibalizer Thank you. Merging.


Keras model.predict_stochastic function problem

Hi,
Today, when I use the keras I met the problem dropout_score = model.predict_stochastic ,AttributeError: 'Sequential' object has no attribute 'predict_stochastic'. Where or how can I find the description of the parameter about the function？
Thanks！
Peter

predict_stochastic isn't a function anywhere in keras. If you search the code for predict_stochastic there are no results. There is one PR that had a function with that name at one point.
What are you trying to do?

Just to add some context, I think the predict_stochastic function was added by Yarin Gal and Riashat Islam for getting uncertainties thru dropout in neural networks of various kinds. I found the function at https://github.com/Riashat/Active-Learning-Bayesian-Convolutional-Neural-Networks/blob/master/ConvNets/keras/models.py It is also used in Yarin's code at https://github.com/yaringal/BayesianRNN/blob/master/Example/sentiment_lstm_regression.py I ended up at Keras github for LSTM uncertainty estimation because Yarin's page mentions that droput in RNNs has been incorporated in Keras: https://github.com/yaringal/BayesianRNN


Removed PermissionDenied error thrown before OPA call

Motivation and context

At first this part of code was an optimization. If we know that user is not a member but tries to access org resourses we throw an error. But during development of other features(like invitations to organization) we need to give user an access to such resources. That leads to rewriting this part of code with lots of if statements.
Generally all permission decision should be made by OPA.
How has this been tested?

Checklist

[x] I submit my changes into the develop branch
[x] I have created a changelog fragment
[ ] I have updated the documentation accordingly
[ ] I have added tests to cover my changes
[ ] I have linked related issues (see GitHub docs)
[ ] I have increased versions of npm packages if it is necessary
(cvat-canvas,
cvat-core,
cvat-data and
cvat-ui)

License

[x] I submit my code changes under the same MIT License that covers the project.
Feel free to contact the maintainers if that's a concern.

Probably you need to add an appropriate OPA test to list /users in an org and therefore update users.csv with something like list,N/A,Organization,N/A,,GET,/users,None,Worker.

@Marishka17
I've added test generation for list scope, could you check please if thats ok?
All of them are basically allow because /users just filters everyone except the user who sent the request.

@klakhov, We should check 3 cases in such tests:

scope == list & is_sandbox => allow
scope == list & is_org & is_member => allow
scope == list & is_org & not is_member => reject

With the changes I've suggested, the mentioned cases will be covered and there will be several tests like
test_scope_LIST_context_ORGANIZATION_ownership_NONE_privilege_BUSINESS_membership_NONE_resource_NONE {
    not allow with input as {"scope": "list", "auth": {"user": {"id": 9, "privilege": "business"}, "organization": {"id": 120, "owner": {"id": 243}, "user": {"role": null}}}, "resource": null}
}


Create a VSCode Demo

This is a work in progress.
Right now I've added willDropInAncestor to the node state properties. This means we can write a css class to target nodes who are descendants of the new parent of the dragged node as they hover.
The only difference left between Arborist and VSCode is they do not apply an overlay style if the node is being dragged in its original folder. See the videos to see this difference.
VSCode (Goal)
https://github.com/brimdata/react-arborist/assets/3460638/66b2302f-fdf9-4f30-aa60-229c1ebd5dd3
This Branch (Almost There)
https://github.com/brimdata/react-arborist/assets/3460638/4046c0d1-ec2b-4d56-926b-493e5f0bb3dc

Ok, I've got it working with this branch. I now need to think about the names of these methods, and what to make public API.
I am considering exposing what will be the new parent for the dragging node on the tree. This would give users more flexibility for when to highlight nodes and when not to.
Maybe these methods would help:
tree.dragDestinationParent => node
tree.dragDestinationIndex => number
tree.dragNode => node

Then the highlight logic in the node renderer would be:
const dest = tree.dragDestinationParent
if (
  (dest.ancestorOf(node) && dest.isNot(tree.dragNode.parent)
) {
  // add className to indicate highlighting
}

Demo Working Now In this Branch
https://github.com/brimdata/react-arborist/assets/3460638/a3b81c88-9410-4c0e-85b5-ea46a8be62f2

Hello @jameskerr,
I've been closely monitoring this PR for the past couple of weeks and would like to kindly inquire about its current status. The feature it introduces is truly fantastic! If this PR has been deprioritised, please don't hesitate to reach out if you require any external assistance to expedite its progress.

@GeorgeGkas thank you for reaching out. Other things came up, but now that you've commented here, I can push this over the finish line soon.

Hi @jameskerr, we're using react-arborist for exactly this purpose, so this looks really useful. Thanks!
One VS Code behaviour we'd like to mimic is that for leaf nodes, ⌘+↓ and double-clicking should open the file and focus the editor.
We have the onActivate callback to change the file displayed in the editor, but we can't easily tell whether it was triggered by one of the the events we're interested in or by e.g. Space or a single-click.
Do you think react-arborist could potentially support this use case? Perhaps this would be possible by adding an optional second argument to the activate method and onActivate callback?

@haines yes we should be able to support that with a custom keyboard shortcut solution. Everyone want's different keyboard shortcuts for the tree, so there is a plan to make these configurable.

Absolutely, this PR is truly outstanding and essential for both myself and many others. I personally struggled with this issue for a few days until I came across this PR. The demo video is fantastic, and I'm looking forward to its completion. Wishing you the very best!

@haines
@GeorgeGkas
@mycvvn
Hey you all, give this version a try and tell me if there are any problems.
https://www.npmjs.com/package/react-arborist/v/3.3.0-rc.1

Thank you so much for this @jameskerr . Will try and report back soon.

Hello @jameskerr. I have reviewed the introduced functionality, and it seems good to me. However, there is one more requirement to be met. Currently there is no way to find out if an element completed the drop. willReceiveDrop works only on hover. The issue is that in one of my projects I need to listen for drop completion events. I propose to add a drop handler that will accept two parameters: dragElem, dropElem. The interface of the handler will look something like the following:
type DropHandler<T> = (dragElem: NodeApi<T>, dropElem: NodeApi<T>) => void

Then we can register the handler on mouseup events only if willReceiveDrop is true, or something similar. Let me know if I need to create a new ticket to track this.

This works well for us, although it was slightly awkward to detect the case when the drag destination is the root.
We ended up with this as our function to determine if the node should be highlighted:
function highlightDragDestination(
  tree: TreeApi<NodeData>,
  node: NodeApi<NodeData>,
): boolean {
  if (
    tree.dragDestinationParent === null &&
    tree.dragDestinationIndex === null
  ) {
    return false;
  }

  const parent = tree.dragDestinationParent ?? tree.root;

  return (
    parent.isAncestorOf(node) &&
    tree.dragNodes.some((dragNode) => dragNode.parent?.id !== parent.id)
  );
}```


php artisan langman:trans addslashes error

How to create the issue:
php artisan langman:trans nav.new_item
> Create new item

Error:
addslashes() expects parameter 1 to be string, array given

Laravel Version: 5.2

Was that using a vendor translation file?

@themsaid No I removed the vendor directory.

Working on this and will update you once it's fixed.
Thanks for reporting :)

This error is now fixed since https://github.com/themsaid/laravel-langman/releases/tag/v1.2.0


Reorganizing Project Layout

The Focus of this PR is to reorganize the project files closer to guidance found here: https://github.com/golang-standards/project-layout
It is not a perfect shift, but this should be the largest move of files, so I wanted to get the PR in as it is.

Go is now set to 1.17
Combines project to a single go module, vs many.
The executable packages (containing a main.go file) have been moved under the /cmd directory.
Referenced libraries, have been moved to the /pkg directory. There is code in the executable packages, which can be placed in a sharable reference package; these will be moved in a future PR.
MAKEFILE has been updated to automatically detect the presence of a Dockerfile at build time and create the corresponding container, removing the need to hardcode docker build commands for each one.
Moved common build steps to a parent "build" container, which will prep the space for each application to be build and avoids duplication of copying common files to a container.

Great work, thanks! I'll post here with findings :) Repo has a VS Code workspace, which IIRC was needed since there were multiple Go apps. Do we need it now that we have a single go.mod file?


Support adding all plugins, including utilities, to Meltano through the hub

Migrated from GitLab: https://gitlab.com/meltano/hub/-/issues/195
Originally created by @DanielPDWalker on 2022-02-09 14:20:41

It would be awesome if like taps and targets you could submit utility plug-ins, (and other plug-ins), into Meltano through the hub.
For example: I've been working on a notebook utility that I use as a custom plug-in in Meltano. I think adding it to Meltano would benefit others, and it being on the hub and making it easy to find/read about would make it even better.

View 4 previous comments from the original issue on GitLab

@ReubenFrankel @DanielPDWalker so do you feel this Issue is covered now?

@sbalnojan Yeah, I think so. :+1:

Closing as resolved via PRs on the hub.


Update preload state for ucbrowser

From testing ucbrowser, I'm not seeing this working. If it is, its with caveats, where did this change come from? It seemed like it was a blanket change for and_uc from 9.9 to 11 which may have accidentally flipped this from n to y.
https://github.com/Fyrd/caniuse/commit/37add34280280c99d350ce5dbcface404cecc0fb

Hmm, you're right. Just tested again and can confirm it's not working.


Adds Demo Day Slidedeck

This document serves as a brief introduction to the conda-recipe-manager project and V0 --> V1 recipe conversion project.

Merging as this is just a doc. rattler-build must have gotten an update that lowered our conversion rate for conda-dorge. I'll look into it separately.


fix(kubectl-mayastor): handle cases with empty state for volume and pools, add managed field

What does this PR do?

This PR handles the cases when a pool is likely having its state as empty.
This PR adds a field MANAGED to denote whether a pool is created by Control plane or not.

I think we can bump into the same problem in resource/volumes?

Added for the volume as well. Apparently, the VolumeSpec cannot be empty. Thus handled the case for VolumeState being empty.

I think we can bump into the same problem in resource/volumes?

Added for the volume as well. Apparently, the VolumeSpec cannot be empty. Thus handled the case for VolumeState being empty.

Yes this is correct. The Volume is an abstract concept created by the control plane, therefore the Volume cannot be created beneath the control plane.

bors r+

bors r+

bors merge


Add main entry point

This makes it easier to use with webpack, rollup and npm.
With this fix you can do require('tachyons'); on master branch you have to do require('tachyons/css/tachyons.css');

:heart_eyes_cat:


Pull out SSL client setup

Right now, we embed the SSL setup inside the TCP connection setup. This means we're running SSL setup per request, which sounds like unnecessary extra overhead. Only the TCP needs to be re-established, while we can probably keep a copy of the SSL initialization per PEM.

Need to give this some thought. @travisstaloch has made good headway exposing that we have competing concerns:

SSL cert
SSL client
TCP connection
HTTP or Websocket

Right now we do 1-3 in the same location so the cert setup is needlessly duplicated each time. My original idea is converting SslTunnel into just the cert, but that means pushing the client + TCP somewhere else... which is not at all obvious where they would go.
I think to do this right, we'll have to introduce yet-another-layer:

SslCert
SslClient + TCP
HTTP or Websocket

While "better" in a modular sense, this seems pretty complex just to save a few CPU cycles.

New strategy: pre calculate the PEM. Validations need to happen per connection so reusing this in its entirety is a mistake.
Moving this effort over to zCord


Negative integer set value

Hey there, while testing the NuGet 1.3.8 update, I noticed that I'm no longer receiving messages with negative integers in the MQTT broker side.
Here's an example:

Metric metric = new()
{
	Name = "Test",
	Timestamp = timestamp_var
};

Int32 negativeInt = -1;

metric.SetValue(DataType.Int32, negativeInt);

In previous versions of the NuGet, I had a workaround where I casted the data to Float, but now I'm still not getting anything. Is this a known issue? Any possible solutions?
Thanks in advance for all the efforts you put into improving this fantastic NuGet.

I guess, this can't be fixed with version 3 anymore and is a known issue within Sparkplug still: https://github.com/eclipse/tahu/issues/71...

Hi, thank you very much for addressing this issue. I'm also struggling with this right now and I'm trying to find a possible workaround.
When I try to send -1 int on version 1.3.8, I get OverflowException.
System.OverflowException: Value was either too large or too small for a UInt32.
   at System.Convert.ThrowUInt32OverflowException()
   at System.Int32.System.IConvertible.ToUInt32(IFormatProvider provider)
   at System.Convert.ChangeType(Object value, Type conversionType, IFormatProvider provider)
   at System.Convert.ChangeType(Object value, Type conversionType)
   at SparkplugNet.Core.Extensions.DataTypeExtensions.ConvertTo[T](Object objValue)
   at SparkplugNet.Core.Extensions.DataTypeExtensions.ConvertOrDefaultTo[T](Object objValue)
   at SparkplugNet.VersionB.PayloadConverter.ConvertVersionBMetric(Metric metric)
   at System.Linq.Enumerable.SelectListIterator`2.ToList()
   at System.Linq.Enumerable.ToList[TSource](IEnumerable`1 source)
   at SparkplugNet.VersionB.PayloadConverter.ConvertVersionBPayload(Payload payload)
   at SparkplugNet.Core.Messages.SparkplugMessageGenerator.GetSparkplugNodeDataB(SparkplugNamespace nameSpace, String groupIdentifier, String edgeNodeIdentifier, IEnumerable`1 metrics, Int32 sequenceNumber, DateTimeOffset dateTime)
   at SparkplugNet.Core.Messages.SparkplugMessageGenerator.GetSparkplugNodeDataMessage[T](SparkplugNamespace nameSpace, String groupIdentifier, String edgeNodeIdentifier, IEnumerable`1 metrics, Int32 sequenceNumber, Int64 sessionNumber, DateTimeOffset dateTime)
   at SparkplugNet.VersionB.SparkplugNode.PublishMessage(IEnumerable`1 metrics)
   at SparkplugNet.Core.Node.SparkplugNodeBase`1.PublishMetrics(IEnumerable`1 metrics)

As far as I can tell, the correct approach for sending negative values with the current sparkplug specification is the following:

Set correct  Metric.datatype field e.g. Int32
Cast the INT32 Value, for example “-32” to UINT32, e.g. “4294967264”
Add the converted value as metric.int_value
Send via MQTT

I have seen this described here and here and have tested it using Node-RED. Looks like it is working well.
Could this logic be part of SparkplugNet?

It seems like C# doesn't convert the types properly with Convert...

This is basically just:
int intValue = -32;
uint uintValue = unchecked((uint)intValue);
Console.WriteLine(uintValue);

I have updated the tests and nearly fixed this in https://github.com/SeppPenner/SparkplugNet/commit/d3ff29bd4c26c35c8cf963955a7105349177e0c1. However, the conversions back from https://github.com/SeppPenner/SparkplugNet/blob/d3ff29bd4c26c35c8cf963955a7105349177e0c1/src/SparkplugNet/VersionB/PayloadConverter.cs#L219 and https://github.com/SeppPenner/SparkplugNet/blob/d3ff29bd4c26c35c8cf963955a7105349177e0c1/src/SparkplugNet/VersionB/PayloadConverter.cs#L224 don't work yet properly. Feel free to share your thoughts, I don't see the issue here yet...

This code is crazy now: https://github.com/SeppPenner/SparkplugNet/blob/d3ff29bd4c26c35c8cf963955a7105349177e0c1/src/SparkplugNet/Core/Extensions/DataTypeExtensions.cs :D

Thank you for the changes. ❤ It is working ok for my use case and I'm able to send negative values without any issue.


Doc/update readme

Closes #328

This PR does the following:

Update README.md
Delete INSTALL.md, the installation instructions can be found in docs/developer-guide/install_from_sources
Remove doxygen documentation generation


Fix documentation for a misspelled parameter

The parameter max_bin was misspelled as max_bins. Reported in issue #2567.

Codecov Report

Merging #2569 into master will increase coverage by 0.01%.
The diff coverage is n/a.

@@            Coverage Diff             @@
##           master    #2569      +/-   ##
==========================================
+ Coverage   35.11%   35.13%   +0.01%
==========================================
  Files          79       79
  Lines        6971     6971
  Branches      680      680
==========================================
+ Hits         2448     2449       +1
  Misses       4422     4422
+ Partials      101      100       -1

Impacted Files
Coverage Δ

src/data/simple_dmatrix.cc
56.66% <0%> (-0.67%)
:arrow_down:

src/objective/regression_obj.cc
87.43% <0%> (+1.09%)
:arrow_up:

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update 0e06d18...891b0cd. Read the comment docs.


OverflowError: mktime argument out of range

I got this error when pressing "Send New of Selected Books":
calibre 6.13  embedded-python: True
Windows-10-10.0.22621-SP0 Windows ('64bit', 'WindowsPE')
('Windows', '10', '10.0.22621')
Python 3.10.1
Windows: ('10', '10.0.22621', 'SP0', 'Multiprocessor Free')
Interface language: None
Successfully initialized third party plugins: Highlights to Obsidian (1, 1, 0)
Traceback (most recent call last):
File "calibre_plugins.highlights_to_obsidian.menu_button", line 82, in send_new_selected
File "calibre_plugins.highlights_to_obsidian.button_actions", line 124, in send_new_selected_highlights
OverflowError: mktime argument out of range

My guess is that you set the year too high or too low in the config menu. It's also possible that your computer doesn't allow mktime for inputs at the beginning of the Unix epoch.
According to the Python docs for mktime:

The earliest date for which it can generate a time is platform-dependent.

On my Windows 11 laptop, the year has to be between 1970 and 3000.
I'll adjust the default time and validate the config menu input.


Add multi-type variant for NwAreaOfEffect ->GetObjectsInShape

Hi, I encountered the following runtime exception. Is this because GetObjectsInEffectArea<NwGameObject>() is not supported?
Would it be possible to add support multi-type variant for NwAreaOfEffect ->GetObjectsInShape? That would be very useful, as I would like Acid Fog do deal damage to creatures, doors and placeables.
nwn_1    | Unhandled exception. System.InvalidOperationException: Type "NWN.API.NwGameObject" does not have a mapped native object!
nwn_1    |    at NWN.API.NwObject.GetNativeObjectInfo(Type type) in /home/runner/work/NWN.Managed/NWN.Managed/src/main/NWN/API/Object/NwObject.Create.cs:line 162
nwn_1    |    at NWN.API.NwObject.GetObjectType[T]() in /home/runner/work/NWN.Managed/NWN.Managed/src/main/NWN/API/Object/NwObject.Create.cs:line 144
nwn_1    |    at NWN.API.NwAreaOfEffect.GetObjectsInEffectArea[T]()+MoveNext() in /home/runner/work/NWN.Managed/NWN.Managed/src/main/NWN/API/Object/NwAreaOfEffect.cs:line 76
nwn_1    |    at KK2.Game.Feats.AcidFog.OnHeartbeat(CallInfo callInfo)
nwn_1    |    at System.Threading.Tasks.Task.<>c.<ThrowAsync>b__140_1(Object state)
nwn_1    |    at System.Threading.QueueUserWorkItemCallbackDefaultContext.Execute()
nwn_1    |    at System.Threading.ThreadPoolWorkQueue.Dispatch()

        [ScriptHandler("acidfog_hb")]
        private async void OnHeartbeat(CallInfo callInfo)
        {
            AreaOfEffectEvents.OnHeartbeat onHeartbeat = new AreaOfEffectEvents.OnHeartbeat();
            NwAreaOfEffect acidFog = onHeartbeat.Effect;

            int damageAmount = 0;
            Effect vis = Effect.VisualEffect(VfxType.ImpAcidS);

            if (acidFog.Creator is null || !acidFog.Creator.IsValid)
            {
                acidFog.Destroy();
                return;
            }

            if (acidFog.Creator is NwCreature caster)
            {
                damageAmount += caster.GetSkillRank(Kk2Skill.LoreChemistry) / 2;
            }

            IEnumerable<NwGameObject> objectsInsideFog = acidFog.GetObjectsInEffectArea<NwGameObject>();

            foreach (var target in objectsInsideFog)
            {
                if (target is (NwCreature or NwPlaceable or NwDoor) && !target.PlotFlag)
                {
                    float delay = RandGen.NextFloat(0.4f, 1.2f);
                    damageAmount += RandGen.Roll(6, 2);

                    //Set Damage Effect with the modified damage
                    Effect damage = Effect.Damage(damageAmount, DamageType.Acid);
                    //Apply damage and visuals
                    await NwTask.Delay(TimeSpan.FromSeconds(delay));
                    target.ApplyEffect(EffectDuration.Instant, vis);
                    target.ApplyEffect(EffectDuration.Instant, damage);
                }
            }
        }

You want to use the non-generic overload: https://nwn-dotnet.github.io/Anvil/classNWN_1_1API_1_1NwAreaOfEffect.html#ad42e343cf28ffdd27cae99660e7e1fd5


[Extensibility Request] Table 5718 "Nonstock Item" - Protected variables

Hello, we need the following currently global variable defined as protected for our Table extension. Can you please check that? Thank you!
protected var
    CommentLine: Record "Comment Line";

Thanks for reporting this. We agree, and we’ll publish a fix asap, either in an update for the current version or in the next major release. Please do not reply to this, as we do not monitor closed issues. If you have follow-up questions or requests, please create a new issue where you reference this one.
Build ID: 43953.


Remove Angular Material Library

Using both Angular Material and Bootstrap for layouts will conflict with each other. Team has decided to use Bootstrap. Please remove Angular Material links from HTML and package.json.

Angular Material links have been removed from index.html and package.json


how to install this software?

Here is a getting started guide: https://www.win-acme.com/manual/getting-started

Here is a getting started guide: https://www.win-acme.com/manual/getting-started


FkHost is too eager

@rultor release, tag is 1.24.2

@rultor release, tag is 1.24.2

@yegor256 OK, I will release it now. Please check the progress here

@rultor release, tag is 1.24.2

@yegor256 Done! FYI, the full log is here (took me 10min)

Job gh:yegor256/takes#1144 is not assigned, can't get performer


Supporting K8s v1.23 -v1.24

We will be supporting 1.23 and 1.24 for 2.7.0.

[ ]  RKE1 (and standalone) - Make changes in KDM
[ ] RKE2/k3s - changes in KDM
[ ] Hosted providers - EKS, AKS, GKE - Make changes accordingly (UI ?) - kev1 vs kev2
[ ] Imported clusters - k3s/RKE2

Team 2 has reviewed this ticket;
Multiple assignees;
Leaving unassigned for now;

On latest 2.7.0-rc
RKE1 (and standalone)

[ ] Verify the k8s versions available for standalone 1.4.0-rcx RKE1 are only v1.24.6-rancher1-1 and v1.23.10-rancher1-1

RKE2/k3s

[ ] RKE2 - Verify when provisioning RKE2 clusters from Rancher, the versions available should be only 1.24.6+rke2r1 and 1.23.12+rke2r1
[ ] Provisioning a 1.24.6+rke2r1 custom cluster and verify cluster comes up successfully
[ ] Provisioning a 1.23.6+rke2r1 AWS Node driver cluster and verify cluster comes up successfully
[ ] K3S - Verify when provisioning k3s clusters from Rancher, the versions available should be only 1.24.6+k3s1 and 1.23.12+ k3s1
[ ] Provisioning a 1.24.6+k3s1 custom cluster and verify cluster comes up successfully
[ ] Provisioning a 1.23.6+k3s1 AWS Node driver cluster and verify cluster comes up successfully

Imported clusters - k3s/RKE2

[ ] Import a 1.21.14+k3s1 cluster into rancher. Verify user has only 1.24.6+k3s1 and 1.23.12+ k3s1 versions to upgrade to.
[ ] Import a 1.21.14+rke2r1 cluster into rancher. Verify user has only 1.24.6+rke2r1and1.23.12+rke2r1` versions to upgrade to.

Hosted providers - EKS, AKS, GKE

[ ] Provision an EKS kev2 cluster. Verify k8s version only 1.23+ are available on UI. Verify user is able to provision 1.23 cluster successfully.
[ ] Provision an GKE kev2 cluster. Verify k8s version only 1.23+ are available on UI. Verify user is able to provision 1.23 cluster successfully.
[ ] Provision an AKS kev2 cluster. Verify k8s version only 1.23+ are available on UI. Verify user is able to provision 1.24 cluster successfully.

can be validated on the latest v2.7-head

Not completely ready for testing. So moving this to reopen

2.7-head shows all versions which is not expected - reopening
Blocked by - https://github.com/rancher/dashboard/issues/7203

On 2.7.0-rc4
RKE1

RKE2/k3s

We will test everything else other than hosted clusters. But for tracking purpose, moving this to Blocked, since this issue is not completely available for validation until the UI issue is fixed.

Validated these testcases on rancher v2.7-head(9f1e043):
RKE2/k3s :

Below RKE2 and K3s versions available on rancher:

Provisioned 1.24.6+rke2r1 custom cluster(1-cp, 1-etcd, 1-w) and it came up Active.
Provisioned  1.23.12+rke2r1 AWS Node driver cluster(1-cp, 1-etcd, 1-w) and it came up Active.
Provisioned  1.24.6+k3s1 custom cluster(1-cp, 1-etcd, 1-w) and it came up Active.
Provisioned 1.23.12+k3s1 AWS Node driver cluster(1-cp, 1-etcd, 1-w) and it came up Active.

Imported clusters - k3s/RKE2 :

Imported below K3s and RKE2 clusters and validated the cluster versions available for upgrade:

Validated the versions available for k8s upgrade :

K3s:

RKE2:

The remaining tasks have been assigned as follows:

@Josh-Diamond: RKE1 (standalone) + EKS

@thaneunsoo: AKS + GKE

Test Environment:
Rancher version: v2.7.0-rc6
Rancher cluster type: HA
Docker version: 20.10
Downstream cluster type: Kev2
Testing:
NOTE: Kev1 is not supported as mentioned by @nwmac in 7277
AKS: - Pass

Created an AKS cluster from Rancher UI → Create → AKS
Verified k8s versions only 1.23+ are available in the dropdown on UI
Deployed an AKS cluster using default k8s version.
Verified the cluster comes up Active. k8s version 1.24.6

Screenshot:

GKE: - Pass

Created a GKE cluster from Rancher UI → Create → GKE
Verified k8s versions only 1.23+ are available in the dropdown on UI
Deployed a GKE cluster using default k8s version.
Verified the cluster comes up Active. k8s version <IP_ADDRESS>0

Screenshot:


ART-1475: allow ignoring lock in custom builds

at the same time, narrow the scope of "github activity" lock so it does
not include extraneous activity, and make sure parallel puddle/composes
still do not conflict.

Would sweep running simultaneously be problematic? That was my only concern.

LGTM as a workaround.
The github activity lock is too coarse-grained. at lease in build/ocp4 job it locks the whole job run. I think we should split it into smaller locks and avoid unnecessary locks in the future. For example, we can split it to source rebase lock, image mirroring lock, etc. We can have even more fine-grained per-image lock in the long term.

I think running "sweep" concurrently is ok. Ought to be idempotent, and seems low risk if I'm wrong.
Concurrency is hard :) I would prioritize simplicity over optimization. Although the initial impetus for a lock here is that a rebase fails when a competing rebase updates distgit first, there really are a lot of other dependencies that could conceivably go awry given concurrent updates. The safest route is definitely to lock the whole ocp4 job. I thought a while before scoping it down at all; but the things that happen after the build seem safe enough to remove (and I'm tired of e.g. waiting for the CVP to run so appregistry can finish so the next container build can begin). Let's see how that goes.

Yes, Running "sweep" concurrently is definitely ok.
I had very bad experience with the ocp4 job, which locked the custom build/appregistry job for so long (a few hours) and I was hard to debug image build failures.
I would consider locking rebase is absolutely needed, otherwise we may get a git push failure. Image build doesn't seem to be locked, since Brew/OSBS are tracking the source using commit hash, while it may cause the latest tag be updated by another job but do we really need to care about the latest tag? Also I am little worry about the image sync because I not sure if it tracks the built images using NVR or just latest-build (I didn't read that part of code carefully).

image sync is effectively latest-build (may actually be looking at tags in brew registry, but should normally be the same). it doesn't look at what was in the build, it just syncs everything latest. in that sense it's idempotent too -- only rolls forward.
i think this will address your problems so going to merge it for now... can refine later if it seems warranted.


[Bug]: Efficient_AD with Openvino takes too much times to predict

Describe the bug
I am using Openvino inference to predict anomalies in custom datasets.
However, it takes too much times compared to other models like Padim or FastFlow.
In same width/height, Padim takes 0.33 s and Fastflow takes 0.8. However, Efficient_AD takes 15s.
Is it normal that Openvino export+EfficientAD takes more times to predict compared to padim or fastflow?
Dataset
Folder
Model
Other (please specify in the field below)
Steps to reproduce the behavior

Export by Openvino option
Load Efficient_AD
predict anomalies

OS information
OS information:

OS: [windows10]
Python version: [3.8.10]
Any other relevant information: [I'm using a custom dataset]

Expected behavior
I was expected Efficient_AD has better speed compared to Padim and Fastflow.
Also, with
512x512, Efficient_AD with openvino inferencer takes 1.2s.
Padim takes 0.2s.
Screenshots
No response
Pip/GitHub
pip
What version/branch did you use?
No response
Configuration YAML
dataset:
  name: belts
  root: ./datasets
  format : folder
  task: classification
  normal_dir : ok
  abnormal_dir : ng
  mask : null
  normal_test_dir : test
  extensions : ".jpg"
  train_batch_size: 1
  eval_batch_size: 16
  num_workers: 8
  image_size: 512 # dimensions to which images are resized (mandatory)
  center_crop: null # dimensions to which images are center-cropped after resizing (optional)
  normalization: none # data distribution to which the images will be normalized: [none, imagenet]
  transform_config:
    train: null
    eval: null
  test_split_mode: from_dir # options: [from_dir, synthetic]
  test_split_ratio: 0.2 # fraction of train images held out testing (usage depends on test_split_mode)
  val_split_mode: same_as_test # options: [same_as_test, from_test, synthetic]
  val_split_ratio: 0.5 # fraction of train/test images held out for validation (usage depends on val_split_mode)

model:
  name: efficientad
  teacher_out_channels: 384
  model_size: small # options: [small, medium]
  lr: 0.0001
  weight_decay: 0.00001
  padding: false
  pad_maps: true # relevant for "padding: false", see EfficientAD in lightning_model.py
  early_stopping:
    patience: 2
    metric: image_AUROC
    mode: max
  normalization_method: min_max # options: [null, min_max, cdf]

metrics:
  image:
    - F1Score
    - AUROC
  pixel:
    - F1Score
    - AUROC
  threshold:
    method: adaptive #options: [adaptive, manual]
    manual_image: null
    manual_pixel: null

visualization:
  show_images: False # show images on the screen
  save_images: False # save images to the file system
  log_images: False # log images to the available loggers (if any)
  image_save_path: null # path to which images will be saved
  mode: full # options: ["full", "simple"]

project:
  seed: 42
  path: ./results/efficient_test_model_v3

logging:
  logger: [] # options: [comet, tensorboard, wandb, csv] or combinations.
  log_graph: false # Logs the model graph to respective logger.

optimization:
  export_mode: openvino # options: torch, onnx, openvino
# PL Trainer Args. Don't add extra parameter here.
trainer:
  enable_checkpointing: true
  default_root_dir: null
  gradient_clip_val: 0
  gradient_clip_algorithm: norm
  num_nodes: 1
  devices: 1
  enable_progress_bar: true
  overfit_batches: 0.0
  track_grad_norm: -1
  check_val_every_n_epoch: 1
  fast_dev_run: false
  accumulate_grad_batches: 1
  max_epochs: 10
  min_epochs: null
  max_steps: 70000
  min_steps: null
  max_time: null
  limit_train_batches: 1.0
  limit_val_batches: 1.0
  limit_test_batches: 1.0
  limit_predict_batches: 1.0
  val_check_interval: 1.0
  log_every_n_steps: 50
  accelerator: auto # <"cpu", "gpu", "tpu", "ipu", "hpu", "auto">
  strategy: null
  sync_batchnorm: false
  precision: 32
  enable_model_summary: true
  num_sanity_val_steps: 0
  profiler: null
  benchmark: false
  deterministic: false
  reload_dataloaders_every_n_epochs: 0
  auto_lr_find: false
  replace_sampler_ddp: true
  detect_anomaly: false
  auto_scale_batch_size: false
  plugins: null
  move_metrics_to_cpu: false
  multiple_trainloader_mode: max_size_cycle

Logs
Not much logs to put in

Code of Conduct

[X] I agree to follow this project's Code of Conduct

Hello, this certainly isn't expected behavior. Just to clarify, in your config you use 512x512 resolution which you say takes 1.2s to execute, which resolution takes 15s?
In any case, EfficientAD should be fast, but it does use neural networks, so if you want the execution to be fast, you will need to run it on a GPU. I suspect this is the main culprit. Also make sure you are timing only the inference (predict time), not the model instantiation (and other parts), as that would falsely inflate the duration (unless your task involves this).

Hi, thanks for help. When I sue 700x1200 it takes 15s to get prediction. I only check during inference so instantiation model does not be a reason for too much time. Is it normal it takes way more times when use openvino? Other than EfficientAD, it usually takes less time to get predictions with openvino inferencer.

Okay, as you mentioned, it is maybe due to use openvino in cpu option. So I tested torch_inferencer, now it is really faster. with 700x1200, I got 0.6 for prediction return. But still not sure why it works slow in openvino inferencer.

Did you also try openvino with gpu inference? You can pass device parameter and set it to GPU by using --device GPU

@blaz-r, do you think if this is a bug or a specific use-case?

@samet-akcay I don't think this is a bug, but it surely is a bit unusual for EfficientAD to take so much time. Maybe the reason is inference on the CPU or it could also be something with OpenVINO but I can't say for sure.

@samet-akcay Hi. I recentely switched inference module to TorchInferencer and it seems like the issue has been addressed. However, still does not know why it gets extremely slower when I use OpenvinoInferencer(It gives same results. No accuracy drop nor incorrect prediction. Just prediction speed gets 10x slower). Maybe it is due to huge image size?(since I am using 800x1600 image size).


How to cancel indentation in bullet lists cards?

Is the bug present when using the default Obsidian theme?
No
Is the bug present when snippets and plugins are disabled?
Yes
Minimal theme version
7.6.9
Describe the bug
Is your feature request related to a problem? Please describe.
Is there any way to cancel the indentation in list-cards?

I want to achieve what the demo is like:

I have tried to adjust the "Nested list indentation" in Style Settings, It can reduce the indentation but can't be set to 0.

Debug info
SYSTEM INFO:
Obsidian version: v1.6.2
Installer version: v1.5.3
Operating system: Windows 10 Enterprise 10.0.22631
Login status: logged in
Catalyst license: supporter
Insider build toggle: on
Live preview: on
Base theme: adapt to system
Community theme: Minimal v7.6.9
Snippets enabled: 0
Restricted mode: off
Plugins installed: 1
Plugins enabled: 1
1: Style Settings v1.0.8
RECOMMENDATIONS:
Custom theme and snippets: for cosmetic issues, please first try updating your theme and disabling your snippets. If still not fixed, please try to make the issue happen in the Sandbox Vault or disable community theme and snippets.
Community plugins: for bugs, please first try updating all your plugins to latest. If still not fixed, please try to make the issue happen in the Sandbox Vault or disable community plugins.

Fixed in 7.6.10