Google Plus Callback Gives Me Internal Server Error

So I use follow the README file to set up Mail For Good. I create google + OAuth client ID Credentials and fill it in the .env file. I didn't enter PSQL related credentials. only GOOGLE_CONSUMER_KEY, GOOGLE_CONSUMER_SECRET and GOOGLE_CALLBACK. And I run docker-composer up... the app was successfully accessible via localhost:8080. But when I click login with google +,  it gave me 'Internal Server Error' message. also the console said
app_1       |   ############################ app_1       |   #   Mail 4 Good started    # app_1       |   ############################ app_1       |   # Port: 8080 app_1       |   ############################ app_1       | app_1       | (node:51) DeprecationWarning: Using the automatically created return value from client.query as an event emitter is deprecated and will be removed in<EMAIL_ADDRESS>Please see the upgrade guide at https://node-postgres.com/guides/upgrading app_1       | Error app_1       |     at Strategy.OAuth2Strategy._createOAuthError (/usr/src/app/node_modules/passport-oauth2/lib/strategy.js:379:17) app_1       |     at /usr/src/app/node_modules/passport-oauth2/lib/strategy.js:166:45 app_1       |     at /usr/src/app/node_modules/oauth/lib/oauth2.js:191:18 app_1       |     at ClientRequest.<anonymous> (/usr/src/app/node_modules/oauth/lib/oauth2.js:162:5) app_1       |     at emitOne (events.js:115:13) app_1       |     at ClientRequest.emit (events.js:210:7) app_1       |     at TLSSocket.socketErrorListener (_http_client.js:401:9) app_1       |     at emitOne (events.js:115:13) app_1       |     at TLSSocket.emit (events.js:210:7) app_1       |     at emitErrorNT (internal/streams/destroy.js:64:8) app_1       |     at _combinedTickCallback (internal/process/next_tick.js:138:11) app_1       |     at process._tickDomainCallback (internal/process/next_tick.js:218:9)
Can anyone help with setting up this? I wanted to test, learn and contribute.

Hey,
Thank you for reaching out.
If your end goal is to contribute or examine the code I recommend you follow the developer setup guide.
Anyway, I'll take some time to look into this issue. So far I managed to reproduce it. I'll keep you up to date.

@stanleyyylau Can you screenshot the webpage ? And also, it's an Internal Server Error from Google ? If yes, then there's usually a link to click to know more details about the error, do click on it and then screenshot it :)

@karuppiah7890  Hi, thanks for your reply. I think this error is caused by the codebase, I didnt see any errors on google api console. page, here's a screenshot

my .env file is as below

here's the error output by console

@stanleyyylau Thanks for the screen shots. :) I will look into too I guess. @zhakkarn Have you found the problem already ?

@karuppiah7890 Not yet and unfortunately I won't be able to work on it for the next 4hours.
@stanleyyylau, just a guess, did you try to assign 'http://localhost:8080/auth/google/callback' to the GOOGLE_CALLBACK in your env?
Also, can I see what you did put in the google console when you retrieved your id and secret (I mostly want to see if the redirections are set properly, just in case)

@zhakkarn Thanks for getting back to me,  I tried it with and without the callback link, neither one is working.
Here is the google console info

I just start a ubuntu machine with docker, I will try the developer setup guide also to see if this will solve the issue.

@stanleyyylau I am not able to reproduce the error. And I have set the GOOGLE_CALLBACK environment variable in .env file

Hi @stanleyyylau,
Can you add:
GOOGLE_CALLBACK=http://localhost:8080/auth/google/callback
To your .env on line 11 in your screenshot and let us know the result?

Hi @AndrewGHC  @karuppiah7890 I try again with the GOOGLE_CALLBACK url on the .env file, but still don't work. but google still returns me error.

I checked the ./server/secrets.js file, looks like GOOGLE_CALLBACK is automatically set to  http://localhost:8080/auth/google/callback if no value is specified in the .env file

@karuppiah7890  If our environment is the same, than I guess it's my google + settings. I will double check it and keep you guys updated, thanks so much

If you still have issues, screenshot the Google Error and let us know :)

@karuppiah7890    thanks for your reply, I still can't make it work. the app only gives the msg of ' internal service error'. with no link to google error page. 　I did some googling but still can't figure out if it's possible to check authentication logs directly on google console page.  highly appreciate if you can give me some guidance

@stanleyyylau I don't get you. Are you getting a Google Internal Server Error page ? Or a page like the low ?

@stanleyyylau Screenshot what you get currently. And when did you get the Docker Image for the application ? Like, when did you run docker-compose command for the first time for Mail for Good?

@karuppiah7890 Thanks for getting back to me , no I still cant get it work even after I reapply for another google API following the README.md file
the error msg I got is below

Here's what docker console output

I'm not sure if it's google api issue or environment difference issue since I have re create the google api key following the guide. and I search and the internet and cant seem to find a way to check error msg on google console. the only clues I have for debugging is the 'Internal server error' on the /auth/google/back page and the console output by docker

@stanleyyylau You just plan to run Mail for Good right ? I can check what's the issue if you have TeamViewer. My timezone is UTC+05:30, ping me in gitter.im @karuppiah7890

hi @karuppiah7890  thanks for your help. my timezone is https://www.timeanddate.com/worldclock/china/beijing    so there isnt much time difference. I wonder if tonight around 10 is ok for you. thanks in advanced

That's too late. And 10 PM for you or me ? And I think it's better to switch over to gitter.im
And something in the evening (for me) should be good.

@karuppiah7890   I just send you a message on gitter.im,  evening is also ok for me, anytime that's better for u,  I can wait for you, no problem, appreciate your help( by the way I thought we only have like around 30 mins time difference)

No, I think it's 2.5 hrs difference, from what I see in the link you gave me

@AndrewGHC It was a proxy issue. The application wasn't able to connect to Google to do the OAuth stuff (getting tokens etc) but the user was able to see the Google accounts screen as browser had proxy settings and that was shown as passport redirected the user to that page, but after the authorization, when it redirected to http://localhost:8080/auth/google/callback , the application was not able to connect to Google to continue and finish the OAuth process.
The issue can be closed.
And @zhakkarn How did you manage to reproduce it ? Or you got some other error ?

@AndrewGHC Next time, we need to make sure that people don't use proxies in their PCs while debugging such issues, and hopefully, no one uses proxies in their servers.

@karuppiah7890 I got some other error.

@karuppiah7890 Great investigation there and thanks for the report. So the issue was that the user's browser had a proxy to allow access to Google, but the system itself did not (meaning that the app could not connect to Google)?
Thanks for your help with this.

@AndrewGHC Yes, you are right. :)


convert.py doesn't work with RTX

I get an error very similar to the memory issues seen on the detect scripts, but trying to set the TF2 options for gpu memory usage doesn't help/work in convert.py (I tried to import tf2 there and set the options the same as others have done in the other scripts but no dice).
converting and getting the checkpoints on another machine (AWS instance) and copying them over let's me proceed with using the detect scripts, but would be nice to be able to run the conversion locally.
Windows 10, RTX2080.
Traceback (most recent call last):
  File "convert.py", line 40, in <module>
    app.run(main)
  File "C:\Users\anton\AppData\Local\Programs\Python\Python37\lib\site-packages\absl\app.py", line 299, in run
    _run_main(main, args)
  File "C:\Users\anton\AppData\Local\Programs\Python\Python37\lib\site-packages\absl\app.py", line 250, in _run_main
    sys.exit(main(argv))
  File "convert.py", line 31, in main
    output = yolo(img)
  File "C:\Users\anton\AppData\Local\Programs\Python\Python37\lib\site-packages\tensorflow_core\python\keras\engine\base_layer.py", line 891, in __call__
    outputs = self.call(cast_inputs, *args, **kwargs)
  File "C:\Users\anton\AppData\Local\Programs\Python\Python37\lib\site-packages\tensorflow_core\python\keras\engine\network.py", line 708, in call
    convert_kwargs_to_constants=base_layer_utils.call_context().saving)
  File "C:\Users\anton\AppData\Local\Programs\Python\Python37\lib\site-packages\tensorflow_core\python\keras\engine\network.py", line 860, in _run_internal_graph
    output_tensors = layer(computed_tensors, **kwargs)
  File "C:\Users\anton\AppData\Local\Programs\Python\Python37\lib\site-packages\tensorflow_core\python\keras\engine\base_layer.py", line 891, in __call__
    outputs = self.call(cast_inputs, *args, **kwargs)
  File "C:\Users\anton\AppData\Local\Programs\Python\Python37\lib\site-packages\tensorflow_core\python\keras\engine\network.py", line 708, in call
    convert_kwargs_to_constants=base_layer_utils.call_context().saving)
  File "C:\Users\anton\AppData\Local\Programs\Python\Python37\lib\site-packages\tensorflow_core\python\keras\engine\network.py", line 860, in _run_internal_graph
    output_tensors = layer(computed_tensors, **kwargs)
  File "C:\Users\anton\AppData\Local\Programs\Python\Python37\lib\site-packages\tensorflow_core\python\keras\engine\base_layer.py", line 891, in __call__
    outputs = self.call(cast_inputs, *args, **kwargs)
  File "C:\Users\anton\AppData\Local\Programs\Python\Python37\lib\site-packages\tensorflow_core\python\keras\layers\convolutional.py", line 197, in call
    outputs = self._convolution_op(inputs, self.kernel)
  File "C:\Users\anton\AppData\Local\Programs\Python\Python37\lib\site-packages\tensorflow_core\python\ops\nn_ops.py", line 1134, in __call__
    return self.conv_op(inp, filter)
  File "C:\Users\anton\AppData\Local\Programs\Python\Python37\lib\site-packages\tensorflow_core\python\ops\nn_ops.py", line 639, in __call__
    return self.call(inp, filter)
  File "C:\Users\anton\AppData\Local\Programs\Python\Python37\lib\site-packages\tensorflow_core\python\ops\nn_ops.py", line 238, in __call__
    name=self.name)
  File "C:\Users\anton\AppData\Local\Programs\Python\Python37\lib\site-packages\tensorflow_core\python\ops\nn_ops.py", line 2010, in conv2d
    name=name)
  File "C:\Users\anton\AppData\Local\Programs\Python\Python37\lib\site-packages\tensorflow_core\python\ops\gen_nn_ops.py", line 1031, in conv2d
    data_format=data_format, dilations=dilations, name=name, ctx=_ctx)
  File "C:\Users\anton\AppData\Local\Programs\Python\Python37\lib\site-packages\tensorflow_core\python\ops\gen_nn_ops.py", line 1130, in conv2d_eager_fallback
    ctx=_ctx, name=name)
  File "C:\Users\anton\AppData\Local\Programs\Python\Python37\lib\site-packages\tensorflow_core\python\eager\execute.py", line 67, in quick_execute
    six.raise_from(core._status_to_exception(e.code, message), None)
  File "<string>", line 3, in raise_from
**tensorflow.python.framework.errors_impl.InternalError: Blas SGEMM launch failed : m=25600, n=32, k=64 [Op:Conv2D]**

Hey, Anton!
I've seen your post here: https://github.com/opencv/opencv/pull/14827.
Did you solve the problem?

Hi,
No, I didn't look into it more. I started to look at the TF2 based yolo
implementation instead.
Cheers,
Anton
On Fri, 8 Nov 2019 at 13:02, VectorVP<EMAIL_ADDRESS>wrote:

Hey, Anton!
I've seen your post here: opencv/opencv#14827
https://github.com/opencv/opencv/pull/14827.
Did you solve the problem?
—
You are receiving this because you authored the thread.
Reply to this email directly, view it on GitHub
https://github.com/zzh8829/yolov3-tf2/issues/94?email_source=notifications&email_token=AFR5TKFHX25WL4M5CNLFUG3QSVIMZA5CNFSM4JKN7WLKYY3PNVWWK3TUL52HS4DFVREXG43VMVBW63LNMVXHJKTDN5WW2ZLOORPWSZGOEDQ5OQI#issuecomment-551671617,
or unsubscribe
https://github.com/notifications/unsubscribe-auth/AFR5TKG45FLLYMSJD2WH6TLQSVIMZANCNFSM4JKN7WLA
.

TF2 based yolo implementation

@antongisli
Do you happen to have a link to this? Id really like to take a look at.

have you tried the latest tensorflow 2.1 version, unfortunately i can't test it for you since i don't have RTX2080

Convert.py worked for me with Ubuntu 18.04 and an RTX2080, if that helps.

Add these lines to models.py right after the imports
gpus = tf.config.experimental.list_physical_devices('GPU')
if gpus:
try:
# Currently, memory growth needs to be the same across GPUs
for gpu in gpus:
tf.config.experimental.set_memory_growth(gpu, True)
logical_gpus = tf.config.experimental.list_logical_devices('GPU')
print(len(gpus), "Physical GPUs,", len(logical_gpus), "Logical GPUs")
except RuntimeError as e:
# Memory growth must be set before GPUs have been initialized
print(e)

Add these lines to models.py right after the imports
gpus = tf.config.experimental.list_physical_devices('GPU')
if gpus:
try:
Currently, memory growth needs to be the same across GPUs
for gpu in gpus:
tf.config.experimental.set_memory_growth(gpu, True)
logical_gpus = tf.config.experimental.list_logical_devices('GPU')
print(len(gpus), "Physical GPUs,", len(logical_gpus), "Logical GPUs")
except RuntimeError as e:
Memory growth must be set before GPUs have been initialized
print(e)

Thanks MrPerdition.
Your code snippet from TF site (https://www.tensorflow.org/guide/gpu#limiting_gpu_memory_growth) manage to solve the issue and weights are converted. Here's my succesful output if anyone is interested.
(note: despite the CUDA out of memory error, weights are still converted)
...
2020-03-14 16:14:02.204447: I tensorflow/stream_executor/platform/default/dso_loader.cc:44] Successfully opened dynamic library libcudnn.so.7
2020-03-14 16:14:02.969893: W tensorflow/stream_executor/gpu/redzone_allocator.cc:312] Not found: ./bin/ptxas not found
Relying on driver to perform ptx compilation. This message will be only logged once.
2020-03-14 16:14:03.003407: I tensorflow/stream_executor/platform/default/dso_loader.cc:44] Successfully opened dynamic library libcublas.so.10
2020-03-14 16:14:03.510546: I tensorflow/stream_executor/cuda/cuda_driver.cc:801] failed to allocate 3.90G<PHONE_NUMBER> bytes) from device: CUDA_ERROR_OUT_OF_MEMORY: out of memory
I0314 16:14:03.683123<PHONE_NUMBER>11200 convert.py:26] sanity check passed
I0314 16:14:04.121551<PHONE_NUMBER>11200 convert.py:29] weights saved

I have the same problem if you could solve it please help me as well :(

I get an error very similar to the memory issues seen on the detect scripts, but trying to set the TF2 options for gpu memory usage doesn't help/work in convert.py (I tried to import tf2 there and set the options the same as others have done in the other scripts but no dice).
converting and getting the checkpoints on another machine (AWS instance) and copying them over let's me proceed with using the detect scripts, but would be nice to be able to run the conversion locally.
Windows 10, RTX2080.
Traceback (most recent call last):
  File "convert.py", line 40, in <module>
    app.run(main)
  File "C:\Users\anton\AppData\Local\Programs\Python\Python37\lib\site-packages\absl\app.py", line 299, in run
    _run_main(main, args)
  File "C:\Users\anton\AppData\Local\Programs\Python\Python37\lib\site-packages\absl\app.py", line 250, in _run_main
    sys.exit(main(argv))
  File "convert.py", line 31, in main
    output = yolo(img)
  File "C:\Users\anton\AppData\Local\Programs\Python\Python37\lib\site-packages\tensorflow_core\python\keras\engine\base_layer.py", line 891, in __call__
    outputs = self.call(cast_inputs, *args, **kwargs)
  File "C:\Users\anton\AppData\Local\Programs\Python\Python37\lib\site-packages\tensorflow_core\python\keras\engine\network.py", line 708, in call
    convert_kwargs_to_constants=base_layer_utils.call_context().saving)
  File "C:\Users\anton\AppData\Local\Programs\Python\Python37\lib\site-packages\tensorflow_core\python\keras\engine\network.py", line 860, in _run_internal_graph
    output_tensors = layer(computed_tensors, **kwargs)
  File "C:\Users\anton\AppData\Local\Programs\Python\Python37\lib\site-packages\tensorflow_core\python\keras\engine\base_layer.py", line 891, in __call__
    outputs = self.call(cast_inputs, *args, **kwargs)
  File "C:\Users\anton\AppData\Local\Programs\Python\Python37\lib\site-packages\tensorflow_core\python\keras\engine\network.py", line 708, in call
    convert_kwargs_to_constants=base_layer_utils.call_context().saving)
  File "C:\Users\anton\AppData\Local\Programs\Python\Python37\lib\site-packages\tensorflow_core\python\keras\engine\network.py", line 860, in _run_internal_graph
    output_tensors = layer(computed_tensors, **kwargs)
  File "C:\Users\anton\AppData\Local\Programs\Python\Python37\lib\site-packages\tensorflow_core\python\keras\engine\base_layer.py", line 891, in __call__
    outputs = self.call(cast_inputs, *args, **kwargs)
  File "C:\Users\anton\AppData\Local\Programs\Python\Python37\lib\site-packages\tensorflow_core\python\keras\layers\convolutional.py", line 197, in call
    outputs = self._convolution_op(inputs, self.kernel)
  File "C:\Users\anton\AppData\Local\Programs\Python\Python37\lib\site-packages\tensorflow_core\python\ops\nn_ops.py", line 1134, in __call__
    return self.conv_op(inp, filter)
  File "C:\Users\anton\AppData\Local\Programs\Python\Python37\lib\site-packages\tensorflow_core\python\ops\nn_ops.py", line 639, in __call__
    return self.call(inp, filter)
  File "C:\Users\anton\AppData\Local\Programs\Python\Python37\lib\site-packages\tensorflow_core\python\ops\nn_ops.py", line 238, in __call__
    name=self.name)
  File "C:\Users\anton\AppData\Local\Programs\Python\Python37\lib\site-packages\tensorflow_core\python\ops\nn_ops.py", line 2010, in conv2d
    name=name)
  File "C:\Users\anton\AppData\Local\Programs\Python\Python37\lib\site-packages\tensorflow_core\python\ops\gen_nn_ops.py", line 1031, in conv2d
    data_format=data_format, dilations=dilations, name=name, ctx=_ctx)
  File "C:\Users\anton\AppData\Local\Programs\Python\Python37\lib\site-packages\tensorflow_core\python\ops\gen_nn_ops.py", line 1130, in conv2d_eager_fallback
    ctx=_ctx, name=name)
  File "C:\Users\anton\AppData\Local\Programs\Python\Python37\lib\site-packages\tensorflow_core\python\eager\execute.py", line 67, in quick_execute
    six.raise_from(core._status_to_exception(e.code, message), None)
  File "<string>", line 3, in raise_from
**tensorflow.python.framework.errors_impl.InternalError: Blas SGEMM launch failed : m=25600, n=32, k=64 [Op:Conv2D]**


Dev

Codecov Report

:exclamation: No coverage uploaded for pull request base (main@b4b78de). Click here to learn what that means.
The diff coverage is 100.00%.

@@           Coverage Diff           @@
##             main      #41   +/-   ##
=======================================
  Coverage        ?   99.73%
=======================================
  Files           ?        9
  Lines           ?      380
  Branches        ?        0
=======================================
  Hits            ?      379
  Misses          ?        1
  Partials        ?        0

Impacted Files
Coverage Δ

src/SurvTerm.jl
100.00% <ø> (ø)

src/SurvivalModel.jl
85.71% <ø> (ø)

src/concordance.jl
100.00% <ø> (ø)

src/ParametricSurvival.jl
100.00% <100.00%> (ø)

Help us with your feedback. Take ten seconds to tell us how you rate us. Have a feature suggestion? Share it here.


Documentation updates

Description
Some fixes for typos, capitalization, grammar, and general readability in the documentation.
Checklist:

[X] I have signed the Adobe Open Source CLA.
[X] My code follows the code style of this project.
[X] My change requires a change to the documentation.
[X] I have updated the documentation accordingly.
[X] I have read the CONTRIBUTING document.
[ ] I have added tests to cover my changes.
[X] All new and existing tests passed.

Thanks!

Cool! How should I submit my information?

You can linked-in message me: https://www.linkedin.com/in/ted-casey-0074064/
Thanks again!


add aa-paymaster docs

:clipboard: https://github.com/bobanetwork/boba/pull/489
Overview
Add account-abstraction paymaster docs
Changes
/
Testing
/

Good to merge?

lets merge this!


[CRIMAP-295] Re-arrange rehydration of dependants

Description of change
Refactors dependants rehydration which breaks the normal pattern of rehydration due to the split nature of attributes and need to calculate one of the attributes.
Link to relevant ticket
https://dsdmoj.atlassian.net/browse/CRIMAPP-295
Notes for reviewer
Rehydration of `dependants is complicated by the following:

dependants are very optional because the 'income and outgoings' feature is still WIP
there are 2 pieces of data - dependants and client_has_dependants. Schema has no knowledge of client_has_dependants.
in Apply, client_has_dependants is stored in the income table, generally rehydrated by the income_details field from Schema. But income_details does not contain dependants from which the value can be calculated...
because in Schema dependants is an attribute in means_details
As a result this rigmarole is required.

Consider:

Is this a good idea?
the code in CrimeApplication.income which performs some logic
because dependants is optional, the calculated field income.client_has_dependants can have yes/no/nil
Structs::IncomeDetails contains an attr_accessor :client_has_dependants to mirror the Apply database schema.

Hey @mseedat-moj  - First thoughts are 100% change the schema to suit out domain needs instead of any jiggery-pokery. I think Tim was working on it ahead of knowing what we needed or what it should look like. Maybe just check in with him on his logic/needs for it to not be in the income.

@mseedat-moj - I'm going to close this just to tidy up. Hibo did the schema shuffle around and the submission and rehydration over Christmas


pyinstaller 打包 无法打包 etc 里的 nmap-services.dat

我不知道这个问题是否适合在这里提出，在网上各种查询，未能解决。其他程序打包未出过类似的问题，只有引用了你的包会出现问题。
打包后 exe 执行结果：
C:\Users\Notebook\Git\Python\scanner_tcp\dist>Scanner_TcpTop.exe <IP_ADDRESS>
Traceback (most recent call last):
  File "scanner_tcp_top.py", line 82, in <module>
  File "scanner_tcp_top.py", line 76, in main
  File "pyportscanner\pyscanner.py", line 77, in __init__
  File "pyportscanner\etc\helper.py", line 15, in read_input
  File "pkg_resources\__init__.py", line 1151, in resource_stream
  File "pkg_resources\__init__.py", line 1398, in get_resource_stream
  File "pkg_resources\__init__.py", line 1401, in get_resource_string
  File "pkg_resources\__init__.py", line 1569, in _get
  File "c:\users\notebook\appdata\local\programs\python\python37-32\lib\site-packages\PyInstaller\loader\pyimod03_importers.py", line 475, in get_data
    with open(path, 'rb') as fp:
FileNotFoundError: [Errno 2] No such file or directory: 'C:\\Users\\Notebook\\AppData\\Local\\Temp\\_MEI57842\\pyportscanner\\etc\\nmap-services.dat'
[4916] Failed to execute script scanner_tcp_top

pyinstaller 的日志文件信息：

This file lists modules PyInstaller was not able to find. This does not
necessarily mean this module is required for running you program. Python and
Python 3rd-party packages include a lot of conditional or optional module. For
example the module 'ntpath' only exists on Windows, whereas the module
'posixpath' only exists on Posix systems.

Types if import:
* top-level: imported at the top-level - look at these first
* conditional: imported within an if-statement
* delayed: imported from within a function
* optional: imported within a try-except-statement

IMPORTANT: Do NOT post this list to the issue-tracker. Use it as a basis for
           yourself tracking down the missing module. Thanks!

missing module named 'multiprocessing.forking' - imported by c:\users\notebook\appdata\local\programs\python\python37-32\lib\site-packages\PyInstaller\loader\rthooks\pyi_rth_multiprocessing.py (optional)
missing module named multiprocessing.get_context - imported by multiprocessing (top-level), multiprocessing.pool (top-level), multiprocessing.managers (top-level), multiprocessing.sharedctypes (top-level)
missing module named multiprocessing.TimeoutError - imported by multiprocessing (top-level), multiprocessing.pool (top-level)
missing module named multiprocessing.BufferTooShort - imported by multiprocessing (top-level), multiprocessing.connection (top-level)
missing module named multiprocessing.AuthenticationError - imported by multiprocessing (top-level), multiprocessing.connection (top-level)
missing module named multiprocessing.set_start_method - imported by multiprocessing (top-level), multiprocessing.spawn (top-level)
missing module named multiprocessing.get_start_method - imported by multiprocessing (top-level), multiprocessing.spawn (top-level)
missing module named 'win32com.gen_py' - imported by win32com (conditional, optional), c:\users\notebook\appdata\local\programs\python\python37-32\lib\site-packages\PyInstaller\loader\rthooks\pyi_rth_win32comgenpy.py (top-level)
missing module named pyimod03_importers - imported by PyInstaller.loader.pyimod02_archive (delayed, conditional), c:\users\notebook\appdata\local\programs\python\python37-32\lib\site-packages\PyInstaller\loader\rthooks\pyi_rth_pkgres.py (top-level)
missing module named StringIO - imported by PyInstaller.lib.modulegraph._compat (conditional), PyInstaller.lib.modulegraph.zipio (conditional), pkg_resources._vendor.six (conditional)
missing module named 'pkg_resources.extern.pyparsing' - imported by pkg_resources._vendor.packaging.requirements (top-level), pkg_resources._vendor.packaging.markers (top-level)
missing module named _uuid - imported by uuid (optional)
missing module named __builtin__ - imported by pkg_resources._vendor.pyparsing (conditional)
missing module named ordereddict - imported by pkg_resources._vendor.pyparsing (optional)
missing module named 'com.sun' - imported by pkg_resources._vendor.appdirs (delayed, conditional, optional)
missing module named com - imported by pkg_resources._vendor.appdirs (delayed)
missing module named _scproxy - imported by urllib.request (conditional)
missing module named 'macholib.compat' - imported by macholib.MachO (optional)
missing module named _pkgutil - imported by PyInstaller.lib.modulegraph.modulegraph (delayed, optional)
missing module named xdis - imported by PyInstaller.lib.modulegraph._compat (conditional)
missing module named dis3 - imported by PyInstaller.lib.modulegraph._compat (conditional)
missing module named urllib.pathname2url - imported by urllib (conditional), PyInstaller.lib.modulegraph._compat (conditional)
missing module named pyimod00_crypto_key - imported by PyInstaller.loader.pyimod02_archive (delayed, optional)
missing module named thread - imported by PyInstaller.loader.pyimod02_archive (conditional)
missing module named Crypto - imported by PyInstaller.building.makespec (delayed, conditional, optional)
missing module named win32ctypes.core._time - imported by win32ctypes.core (top-level), win32ctypes.pywin32.win32api (top-level)
missing module named win32ctypes.core._system_information - imported by win32ctypes.core (top-level), win32ctypes.pywin32.win32api (top-level)
missing module named win32ctypes.core._resource - imported by win32ctypes.core (top-level), win32ctypes.pywin32.win32api (top-level)
missing module named win32ctypes.core._dll - imported by win32ctypes.core (top-level), win32ctypes.pywin32.win32api (top-level)
missing module named win32ctypes.core._common - imported by win32ctypes.core (top-level), win32ctypes.pywin32.win32api (top-level), win32ctypes.pywin32.win32cred (top-level)
missing module named win32ctypes.core._authentication - imported by win32ctypes.core (top-level), win32ctypes.pywin32.win32cred (top-level)
missing module named cffi - imported by win32ctypes.core (optional)
missing module named UserDict - imported by PyInstaller.compat (conditional)
missing module named pkg_resources.extern.packaging - imported by pkg_resources.extern (top-level), pkg_resources (top-level)
missing module named pkg_resources.extern.appdirs - imported by pkg_resources.extern (top-level), pkg_resources (top-level)
missing module named 'pkg_resources.extern.six.moves' - imported by pkg_resources (top-level), pkg_resources._vendor.packaging.requirements (top-level)
missing module named pkg_resources.extern.six - imported by pkg_resources.extern (top-level), pkg_resources (top-level), pkg_resources.py31compat (top-level)
missing module named resource - imported by posix (top-level), C:\Users\Notebook\Git\Python\scanner_tcp\scanner_tcp_top.py (top-level)
missing module named posix - imported by os (conditional, optional), C:\Users\Notebook\Git\Python\scanner_tcp\scanner_tcp_top.py (top-level)
missing module named _posixsubprocess - imported by subprocess (conditional), multiprocessing.util (delayed), C:\Users\Notebook\Git\Python\scanner_tcp\scanner_tcp_top.py (top-level)
missing module named readline - imported by cmd (delayed, conditional, optional), code (delayed, conditional, optional), pdb (delayed, optional), C:\Users\Notebook\Git\Python\scanner_tcp\scanner_tcp_top.py (top-level)
excluded module named _frozen_importlib - imported by importlib (optional), importlib.abc (optional), PyInstaller.loader.pyimod02_archive (delayed, conditional), C:\Users\Notebook\Git\Python\scanner_tcp\scanner_tcp_top.py (top-level)
missing module named _frozen_importlib_external - imported by importlib._bootstrap (delayed), importlib (optional), importlib.abc (optional), C:\Users\Notebook\Git\Python\scanner_tcp\scanner_tcp_top.py (top-level)
missing module named _winreg - imported by platform (delayed, optional), C:\Users\Notebook\Git\Python\scanner_tcp\scanner_tcp_top.py (top-level), pkg_resources._vendor.appdirs (delayed, conditional)
missing module named java - imported by platform (delayed), C:\Users\Notebook\Git\Python\scanner_tcp\scanner_tcp_top.py (top-level)
missing module named 'java.lang' - imported by platform (delayed, optional), xml.sax._exceptions (conditional), C:\Users\Notebook\Git\Python\scanner_tcp\scanner_tcp_top.py (top-level)
missing module named vms_lib - imported by platform (delayed, conditional, optional), C:\Users\Notebook\Git\Python\scanner_tcp\scanner_tcp_top.py (top-level)
missing module named termios - imported by tty (top-level), getpass (optional), C:\Users\Notebook\Git\Python\scanner_tcp\scanner_tcp_top.py (top-level)
missing module named grp - imported by shutil (optional), tarfile (optional), C:\Users\Notebook\Git\Python\scanner_tcp\scanner_tcp_top.py (top-level)
missing module named 'org.python' - imported by pickle (optional), xml.sax (delayed, conditional), C:\Users\Notebook\Git\Python\scanner_tcp\scanner_tcp_top.py (top-level)
missing module named pwd - imported by posixpath (delayed, conditional), shutil (optional), tarfile (optional), http.server (delayed, optional), webbrowser (delayed), netrc (delayed, conditional), getpass (delayed), C:\Users\Notebook\Git\Python\scanner_tcp\scanner_tcp_top.py (top-level)
missing module named org - imported by copy (optional), C:\Users\Notebook\Git\Python\scanner_tcp\scanner_tcp_top.py (top-level)

I fixed it by currect path that installed by python setup.py install.


Chore: rename queries and fragments

What's the purpose of this pull request?
This PR aims to rename queries and fragments to prevent confusion while Extending the FastStore API.

before
after

ServerProductPage
ServerProduct

ClientProducts
ClientManyProducts

Avoid single and multiple. Why don't we use unique and manyas well as ORM tools on the market?

After a little thought, I think we are adding unnecessary complexity to try to fix some problem that has not yet manifested, AFAIK.
I think that the complexity we're adding for every developer to try to remember out if it is Single, Unique or Many or Multiple is greater than the debugging complexity of trying to figure out if they made a typo.
TL:DR; I think we should leave things as they are and close this PR.

After a little thought, I think we are adding unnecessary complexity to try to fix some problem that has not yet manifested, AFAIK.
I think that the complexity we're adding for every developer to try to remember out if it is Single, Unique or Many or Multiple is greater than the debugging complexity of trying to figure out if they made a typo.
TL:DR; I think we should leave things as they are and close this PR.

I disagree with your conclusion. I don't think the complexity would be too much. What makes me unconfortable to change this once the problem appears is that it would break the API contract to change the name.

Avoid single and multiple. Why don't we use unique and manyas well as ORM tools on the market?

Let's go with Many instead of multiple and nothing when is single? WDYT? @emersonlaurentino

for the future: this is the kind of thing that should have been previously addressed in the RFC.


NFS connection drops on host, as physical interface is added to lxdbr0.

I am using PXE boot with NFS root bound to eth0 interface. I am using the default lxdbr0 setup to create the network connections for the containers.
When I am trying to add the physical interface which was bound to NFS root to lxdbr0 inorder to get the containers on network, the system hangs up throwing error message as follows
eth0 entered into promiscuous mode
NFS server not responding still trying .
and then the kernel crashes.
Can someone shed some light on how to fix this issue?
I tried other network configuration such as macvlan, and I am able to bring the containers on a network, however, CRIU dump and restore are not working, since they are confined only to veth devices as of now.

So you're attempting to move a configured eth0 device that's used for your nfs root into the lxdbr0 bridge?
I can't see how this would possibly work. Your network config on eth0 would be wiped in the process, this would also expose the DHCP server running on lxdbr0 to the rest of your network, possibly re-addressing a bunch of machines in the process and would also cause your MAC address to appear different, ensuring that things really don't work well anymore :)
If you want to bridge eth0, you have to do it right. Which typically means having a bridge created and eth0 bridged into it before setting up an IP on the bridge so you can communicate with the outside world.
If you want to use lxdbr0, you'd need to do something like:

Configure lxdbr0 to not have any IPv4 or IPv6 subnet associated with it and no dnsmasq instance running
Copy the MAC address from eth0 to lxdbr0
Copy the network configuration of eth0 to lxdbr0
Unconfigure the network on eth0 (but don't bring it down!)
Bridge eth0 into lxdbr0
Re-apply the default gateway as it'll have been lost in the process

You'd obviously need to script the above as network will be unavailable somewhere in the middle of it. Since your root is on NFS, you'll also need to make sure that any command you run from the point where you loose network has been pre-cached in the page cache, otherwise, your kernel will hang and crash when trying to execute it.

Hi Stephane,
Thanks for quick reply.
Yes, I am trying to move a configured eth device that's used for NFS root to lxdbro, since that is the only available physical interface connected to the network.
Is there any other way, I can provide network connectivity to the containers via veth devices or some other which are capable of CRIU restore and dump ?
I tried the steps that you mentioned above, but still no luck.
The modified /etc/network/interfaces file is as follows
auto br0
iface br0 inet dhcp
ip link set br0 address 90:e2:ba:5a:6d:50
bridge_ports eth2
bridge-ifaces eth2
up ifconfig eth2 up
bridge_fd 0
iface eth2 inet manual

@stgraber
I tried the same as you mentioned above, and was able to ping to a network on the network from the macv and also with br0 interface using
ping -i macv <IP_ADDRESS>
ping -i br0 <IP_ADDRESS>
However was unable to connect to the network from inside the container.
And debug information is as follows.
ip link is as follows
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: eth0: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN mode DEFAULT group default qlen 1000
link/ether f0:1f:af:e5:1d:70 brd ff:ff:ff:ff:ff:ff
3: eth1: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN mode DEFAULT group default qlen 1000
link/ether f0:1f:af:e5:1d:71 brd ff:ff:ff:ff:ff:ff
4: eth2: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 9000 qdisc mq state UP mode DEFAULT group default qlen 1000
link/ether 90:e2:ba:5a:6d:50 brd ff:ff:ff:ff:ff:ff
5: eth3: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN mode DEFAULT group default qlen 1000
link/ether 90:e2:ba:5a:6d:51 brd ff:ff:ff:ff:ff:ff
34: macv@eth2: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 9000 qdisc noqueue master br0 state UP mode DEFAULT group default qlen 1
link/ether 5a:41:3a:8a:0c:2d brd ff:ff:ff:ff:ff:ff
35: br0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
link/ether 5a:41:3a:8a:0c:2d brd ff:ff:ff:ff:ff:ff
42: vethI2MWJD@if41: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue master br0 state UP mode DEFAULT group default qlen 1000
link/ether fe:19:07:bd:00:1f brd ff:ff:ff:ff:ff:ff link-netnsid 0
brctl show is as follows
bridge name	bridge id		STP enabled	interfaces
br0		8000.5a413a8a0c2d	no		macv
vethI2MWJD
sudo lxc list
+------+---------+-----------------------+------+------------+-----------+
| NAME |  STATE  |         IPV4          | IPV6 |    TYPE    | SNAPSHOTS |
+------+---------+-----------------------+------+------------+-----------+
| u1   | RUNNING | <IP_ADDRESS> (eth0) |      | PERSISTENT | 0         |
+------+---------+-----------------------+------+------------+-----------+
And interfaces file inside the container is
root@u1:~# cat /etc/network/interfaces.d/eth0.cfg
The primary network interface
auto eth0
iface eth0 inet static
address <IP_ADDRESS>
broadcast <IP_ADDRESS>
netmask <IP_ADDRESS>
gateway <IP_ADDRESS>
root@u1:~# ping <IP_ADDRESS>
PING <IP_ADDRESS> (<IP_ADDRESS>) 56(84) bytes of data.
From <IP_ADDRESS> icmp_seq=1 Destination Host Unreachable
Am I missing something ?
How to connect to the network from the container ?

Can someone comment on this ?

Could be a number of different things, none really relevant to LXD...

Your switch may be blocking multiple MAC addresses
One of "eth2 on host", "macv on host", "br0 on host" or "eth0 in container" may be down
<IP_ADDRESS> can't talk back to you for some reason (wrong netmask?)

You probably want to triple check everything and if all looks good, then start doing some tcpdump to see where things are getting stuck.

@stgraber
Thanks :+1:
Got fixed..


Update consul_watcher.go

WatchPlan was renamed to Plan in the consul watch package in commit https://github.com/hashicorp/consul/commit/d7e23857ad1943edeaa7e490e0642019d44812e6

This appears to fix #161. Please merge, thanks!

Thanks for the PR


Migrate CONTRIBUTING and docs/README to Obsidian Publish

Description
The Obsidian Team is offering free use of Obsidian Publish for plugin docs, and Tasks got offered early access.
Additionally, they have kindly agreed to a second publish licence for the Tasks 'contributing' docs.
This is to track the work for the migration of CONTRIBUTING and docs/README to Obsidian Publish
Required Steps
Basics

[ ] Decide on the Publish URL for contributor docs
[ ] Create the publish site
[ ] Update any links to the docs to point to the new site...
[ ] Decide which conventional commit prefix to use for edits to the contributing site

Preparation

[ ] Probably merge #1654 first.

Set up structure

[ ] Create a vault for the contributing docs - probably in a contributing/ directory
[ ] Split CONTRIBUTING.md up at level-2 headings
[ ] Set up directory structure
[ ] Move the level-2 files to appropriate sub-directories
[ ] Split files up at level-3 headings
[ ] Add links between pages

Publishing

[ ] Document how (and when) to publish the site

Backwards compatibility

[ ] Make the old CONTRIBUTING page link to the new site

Redundancy

[ ] Give @schemar permission to publish - and have him do a test Publish

How to Test
Confirm that all data from the old pages is visible on the new site.

This all sounds good. I'm happy to help, especially in the second phase.
I guess one issue here is Obsidian's business model. I'm glad they have a business model because it will increase the chance of this great software surviving. But I don't think their model is very sensible. They are way beyond the peak of the Laffer Curve.
I'd happily pay a few £ to get the ability to push to self hosted publishing. With their current eyewatering model they are going to get a great fat zero from 99% of people who would give something. It becomes a self fulfilling problem because people are not going to put the effort into learning a software system they can't use, so it makes for very un-collaborative (apart from on the review side) work.
Similar issue with Obsidian Sync business model (which doesn't work that well anyway in many respects).

@aubreyz I seriously underestimated how long it would take to do a thorough job of converting just CONTRIBUTING.md and docs/README.md to Obsidian Publish - and I did write some new content, but I am pleased with the results of this, as a first pass:
https://publish.obsidian.md/tasks-contributing

Looking good. And "On this page" to the right is clever wording to distinguish it from a ToC which instantly helps.

I will document the publish process when the main docs page is published...
And I can live without a conventional commit notation for this area for now.
So marking this as done, as the docs are live, and I really need to have less stuff on my radar....


Add support for activeBackgroundColor for focused tab on Android

See it in action here
Main use case is when on iOS and putting the tabBar on top, I need it to scroll horizontally and also have focused tab highlighted (with activeBackgroundColor style), hence the PR.

You can set tabStyle according to the state.


Combine media queries

It would be a good enhancement if we had option to combine media queries into one in output css.

Use the Sass issue tracker for feature requests.


feat(gen): use typed errors instead of fmt.Errorf

Fixes #445.

There is no binary size improvement, so closing.


Verify base image signatures

If ko is instructed to build an image based on another image, it would be nice to verify signatures on those base images.
It just so happens the default base image, distroless, is signed. 🎉

What should the CLI surface look like for enabling/disabling signing base images?
Should we start by only ~signing~ (edit) verifying the default distroless base image?
How should we get the keys to verify the signatures?
How should users configure the keys to verify arbitrary images' signatures?

cc @dlorenc

I'd propose a similar two-release strategy to things we've done previously (e.g. requiring ko://):

Start to verify things by default, be noisy when they are NOT (link to how), and have an option to fail,
Require verification by default, fail closed, and have an option to allow unsigned images.

I don't think there are enough signed base images in the wild yet to justify failing closed. A big scary warning sgtm though.
Since we control the default and the default is signed, I do think it's safe to fail closed if we detect distroless isn't signed.

@imjasonh Yeah 2 doesn't have to be the next release, but we should indicate in our scary warning that this is the direction we intend to head.  We can always wake up smarter and walk that back, but the more people we can scare into taking action the better IMO

To pontificate a bit.  At least for me, ko and other "last mile" build tools exist to try to realize the best practices (e.g. nonroot, multi-arch, minimal base).
While the breaking nature of this sort of against the idea of back-compatibility, I think the north star we want to remain compatible with is that we leave folks with containers that are as good as we can possibly produce given the evolution of best practices over time.
I wonder if it would be worth including a bit about that as a sort of "mission statement" or "philosophy" for the tool in the main README.md?  Sort of like we added the principles section to GGCR.
</pontification>

This applies similarly to: https://github.com/google/ko/issues/357

Taking a stab at the latter two points:
.ko.yaml:
verifySignatures:
  "alpine:1.23":
  - publicKey: https://some.url/path/to/key.pub
    annotations:
      key: value
      another: value2

If any image is based on alpine:1.23 then ko will verify that it has a signature signed using the private key it can find at the URL, and has those annotations.
The default distroless base image has an assumed - publicKey: https://github.com/GoogleContainerTools/distroless/blob/main/cosign.pub as documented here.
Users can configure other signatures that need to be verified for distroless, or any base image they use.
Q: how should ephemeral OIDC keys be configured to be verified?
If all base images involved in an invocation of ko are signed and verified, no warning. If any are missing a signature, warn. If any have signatures that can't be verified as configured, fail loudly.
wdyt?

Revisiting this and adding a few thoughts after mulling this over a bit this morning.
I think that rather than inventing our own ~API for verification, we should (similar to the Go releaser precedent) align around the sigstore/policy-controller API for verification, which closes a lot of open questions (including rollout).
I think there are a few key elements of configuration:

Global configuration (e.g. what to do for uncovered images?)
Policy configuration (e.g. what to check for which images?)

For 1. I think we want a little bit of configuration that exposes the knobs that policy-controller defines within its configmap here.  For example, the no-match-policy setting can warn on uncovered images (probably what we should start with as the default!), but folks can configure this to allow (match current behavior) or deny (to block things uncovered by policy).
For 2. I think it makes sense to align with the ClusterImagePolicy API shape (and TrustRoot coming soon!) rather than inventing our own thing.  This allows us access to the following authorities properties:

Statically trust certain images with static: {action: pass},
Statically distrust certain images with static: {action: fail},
Verify signatures with fixed keys using key: {data: ... }
Verify signatures with KMS keys using key: {kms: gcpkms://... }
Verify signatures with CAs using keyless: { ... }
Verify signature with TSAs using rfc3161timestamp: { ... }
Verify transparency log inclusion with ctlog: { ... }
Verify attestation signatures in all of the above ways
Verify individual attestation predicates using Cue or Rego
Verify N of M-like properties with top-level Cue or Rego policies.

This is significantly more capable that what you can easily do via cosign verify directly today (benefits of API over CLI!), will only grow in capability over time, and will always exceed the capabilities of anything homegrown we try to define ourselves. 😅

Before foraying into the next section, let me ACK the dependency tree nightmare we have inherited from sigstore/cosign, which @imjasonh and others are working to fix with sigstore/sigstore-go.

sigstore/policy-controller is also intended to be used as a library, and exposes a ValidatePolicy method to allow folks to validate policies against image digests directly.  It currently has something we call the policy-tester which is a toy CLI for playing with policies, and demonstrates some of how you can call this method directly with a policy today.

As a total strawperson proposal for this:
verification:
  no-match-policy: ...
  policies:
  - data: # inline policy
  - url: # URL for a policy
  - path: # Path to policy (support directories as well, like kubectl/ko -f)

I think we should default this to something like:
verification:
  no-match-policy: warn
  policies:
  # a default policy covering our default base image (cgr.dev/chainguard/static*)
  - data: ...
  # Users can put CIPs/Secrets/TrustRoots under .ko/ (alongside .ko.yaml)
  - path: .ko/

Folks can get the current behavior with:
verification:
  # Allow uncovered images
  no-match-policy: allow
  # Specify no policies
  policies: []


Update logic-apps-workflow-definition-language.md

Fixed some typos in examples.

@syfhu : Thanks for your contribution to the Azure documentation! The author, @jeffhollan, has been notified to review your proposed change.

@kevinlam1 for review


build(merge-tree): Don't distribute test files generated during build

I noticed our recent merge-tree release was ~9MB with an unpacked size of over 47MB. The main culprit is the inclusion of test files, which is explained in a comment in the npmignore file. However, there is a tar file generated during testing that we don't need to distribute, so I added an entry to ignore that file.

Assuming the only reason we publish the merge-tree test directory is to give sequence access to the TestClient class, I think we can safely ignore test/**/*.spec.ts, test/types, test/results, and test/literature. There are some other files that we could in theory ignore, but I think just these paths is sufficient and the bulk of the bloat.


Add SRT export

Fixes #11

Awesome! Also, just letting you know, I haven't forgotten about this 😄. This will be merged for the next version (when word-level timestamps are supported).

This is amazing i'll add it to my local version ♥


API versioning

To ensure backwards- and forwards compatibility, allow specifying the API or resource version using content negotiation.

Merged into #263.


helm chart (cert-manager) does not support wildcards

Bug description
When enabling cert-manager for certificates, if you add a wildcard to the dns extra configuration it fails with
Error: YAML parse error on capsule-proxy/templates/certmanager.yaml: error converting YAML to JSON: yaml: line 8: did not find expected alphabetic or numeric character
helm.go:84: [debug] error converting YAML to JSON: yaml: line 8: did not find expected alphabetic or numeric character
YAML parse error on capsule-proxy/templates/certmanager.yaml
helm.sh/helm/v3/pkg/releaseutil.(*manifestFile).sort
	helm.sh/helm/v3/pkg/releaseutil/manifest_sorter.go:146
helm.sh/helm/v3/pkg/releaseutil.SortManifests
	helm.sh/helm/v3/pkg/releaseutil/manifest_sorter.go:106
helm.sh/helm/v3/pkg/action.(*Configuration).renderResources
	helm.sh/helm/v3/pkg/action/action.go:168
helm.sh/helm/v3/pkg/action.(*Install).RunWithContext
	helm.sh/helm/v3/pkg/action/install.go:312
main.runInstall
	helm.sh/helm/v3/cmd/helm/install.go:314
main.newTemplateCmd.func2
	helm.sh/helm/v3/cmd/helm/template.go:95
github.com/spf13/cobra.(*Command).execute
	github.com/spf13/cobra@v1.8.0/command.go:983
github.com/spf13/cobra.(*Command).ExecuteC
	github.com/spf13/cobra@v1.8.0/command.go:1115
github.com/spf13/cobra.(*Command).Execute
	github.com/spf13/cobra@v1.8.0/command.go:1039
main.main
	helm.sh/helm/v3/cmd/helm/helm.go:83
runtime.main
	runtime/proc.go:271
runtime.goexit
	runtime/asm_arm64.s:1222

How to reproduce
use values:
certManager:
  generateCertificates: true
  issuer:
    kind: Issuer
  certificate:
    includeInternalServiceNames: true
    dnsNames:
    - "*-proxy.capsule-system.svc"

Expected behavior
It shoudl generate the certificate object with the proper wildcard in there
Additional context

Capsule-Proxy version: 0.7.1
Helm Chart version: 0.7.1
Kubernetes version: 1.28.9

I think this is not supported in Cert Manager, since the wildcard support is allowed only for DNS01 challenges.

I think this is not supported in Cert Manager, since the wildcard support is allowed only for DNS01 challenges.

Hi!
i think quoting won't break any dns name, eitherway i did a test with a certificate and it works as expected
Issuer
apiVersion: cert-manager.io/v1
kind: ClusterIssuer
metadata:
  name: self-signed
spec:
  selfSigned: {}

Certificate
apiVersion: cert-manager.io/v1
kind: Certificate
metadata:
  name: test-serving-cert
spec:
  dnsNames:
  - capsule-proxy
  - capsule-proxy.capsule-system.svc
  - '*-proxy.capsule-system.svc'
  issuerRef:
    kind: ClusterIssuer
    name: self-signed
  secretName: test-cert
  subject:
    organizations:
    - clastix.io
status:
  conditions:
  - lastTransitionTime: "2024-09-13T06:20:01Z"
    message: Certificate is up to date and has not expired
    observedGeneration: 1
    reason: Ready
    status: "True"
    type: Ready
  notAfter: "2024-12-12T06:20:01Z"
  notBefore: "2024-09-13T06:20:01Z"
  renewalTime: "2024-11-12T06:20:01Z"
  revision: 1

Thanks for testing it! 🚀


No way to pass extra options to vsce

Due to master->main branch rename we need to pass --githubBranch option to vsce. I currently see no way of doing that and because of that relative image paths on VSCode Market place are broken.

This is fixed in vsce 1.86.0 or higher, you don't need to pass --githubBranch anymore, it automatically uses the default.

I see that you have "vsce": "^1.85.0", in your package.json. You can remove it as semantic-release-vsce also includes it.

Nonetheless, what this issue says is true. However, the best way to fix it would be through https://github.com/microsoft/vscode-vsce/issues/548.

Thank you so much for pointing this out. I also agree about your proposed change to vsce. This is the reason why I didn't notice that change from master to HEAD as I was so determined to find a different way to pass configuration data to vsce via ENV or other means.

I need a way to pass --insiders to vsce

Right, I'm okay with new options for this plugin like:
{
  "packageOpts": ["--whatever", "you-want"],
  "publishOpts": ["--whatever", "you-want"],
  "ovsxPublishOpts": ["--whatever", "you-want"]
}

cool, I'll try to make a PR soon, I think vscePublishOpts would be the least ambiguous

I think vscePublishOpts would be the least ambiguous

Looks good to me


Update 02-external-sops.md

updated the external SOP list

@saschulz I cleaned up the table a bit and merged the results. I think it would be good to also have just some short description of what this page is intended for. E.g. along the lines of "This page lists well established protocols from ..."
It would be great if you could add something like this.


[DOC] Need to add More setting values in the MLCommons doc

What do you want to do?

[ ] Request a change to existing documentation
[x] Add new documentation
[ ] Report a technical problem with the documentation
[ ] Other

Tell us about your request. Provide a summary of the request and all versions that are affected.
We need to add documentation about few more settings in the MLCommons Cluster Settings page
Setting name: plugins.ml_commons.enable_inhouse_python_model
Description:  From 2.7, we are introducing python based in house model in Opensearch cluster. [Metrics Correlation] algorithm is the first initiative. To run python based in house models, we need to enable (change the value to true] this setting first.
Default Value: false
Value Range: [false, true]
Setting name: plugins.ml_commons.allow_registering_model_via_url
Description:  If we want to register any model via url in the opensearch cluster, we need to enable this settings first. By default, we don't allow any model registration through URL.
Default Value: false
Value Range: [false, true]
Setting name: plugins.ml_commons.allow_registering_model_via_local_file
Description:  If we want to register any model from local file in the opensearch cluster, we need to enable this settings first. By default, we don't allow any model registration from local file upload/register
Default Value: false
Value Range: [false, true]
What other resources are available? Provide links to related issues, POCs, steps for testing, etc.

Let's not close this issue until we finalize the wording for enable_inhouse_python_model setting. IIn addition, Can we also make the related changes in this page?
Thanks.


rr: fix cross-compilation

Description of changes
Things done

Built on platform(s)

[x] x86_64-linux
[x] aarch64-linux (cross)
[ ] x86_64-darwin
[ ] aarch64-darwin

For non-Linux: Is sandboxing enabled in nix.conf? (See Nix manual)

[ ] sandbox = relaxed
[ ] sandbox = true

[ ] Tested, as applicable:

NixOS test(s) (look inside nixos/tests)
and/or package tests
or, for functions and "core" functionality, tests in lib/tests or pkgs/test
made sure NixOS tests are linked to the relevant packages

[ ] Tested compilation of all packages that depend on this change using nix-shell -p nixpkgs-review --run "nixpkgs-review rev HEAD". Note: all changes have to be committed, also see nixpkgs-review usage
[x] Tested basic functionality of all binary files (usually in ./result/bin/)
24.11 Release Notes (or backporting 23.11 and 24.05 Release notes)

[ ] (Package updates) Added a release notes entry if the change is major or breaking
[ ] (Module updates) Added a release notes entry if the change is significant
[ ] (Module addition) Added a release notes entry if adding a new NixOS module

[x] Fits CONTRIBUTING.md.

Add a :+1: reaction to pull requests you find important.

Result of nixpkgs-review pr 328973 run on x86_64-linux 1

2 packages built:

cargo-rr
rr

Split the rework in to a separate commit


Respect scale factor on recent Windows versions

On my laptop, the scale factor is 200% (scale-unaware applications will think that my 3240x2160 display is a 1620x1080 one). One of those scale-unaware applications is node.exe. A screen.capture(path) would therefore capture only the upper-left quadrant of my screen, and nut.js would therefore be unable to screen.find() anything outside that area.
This PR fixes that by scaling the captured screen, also pretending that there is no scale factor involved.
This fixes https://github.com/nut-tree/nut.js/issues/183.

The CI failure seems to be a time-out downloading Node, not a bug in my code:
info TOOL Using Unix Makefiles generator.
info DIST Downloading distribution files.
http DIST 	- https://nodejs.org/dist/v12.20.1/SHASUMS256.txt
http DIST 	- https://nodejs.org/dist/v12.20.1/node-v12.20.1-headers.tar.gz
ERR! OMG read ECONNRESET
ERR! OMG read ECONNRESET
npm ERR! code ELIFECYCLE

Closing this in favor of #59


django-rest-swagger 2.2.1 won't show Authorize button

This is my Security_Definitions
'SECURITY_DEFINITIONS': {         'apiKey': {             'type': 'apiKey',             'name': 'AUTHORIZATION',             'in': 'header',         }     },
I have a custom permission class to validate my JWT. I'm not sure why Authorize doesn't get rendered despite having the SECURITY_DEFINITIONS in settings.

I use django-rest-framework-jwt as the authentication backend and your snippet works.
Just make sure to use 'Authorization', with first letter uppercase and lowercase the rest.

There is no 2.2.1 released yet :P https://github.com/marcgibbons/django-rest-swagger/blob/master/CHANGELOG.md
Use
SWAGGER_SETTINGS = {
    'SECURITY_DEFINITIONS': {
        'api_key': {
            'type': 'apiKey',
            'in': 'header',
            'name': 'Authorization'
        }
    },
    'JSON_EDITOR': True,
}


chore(dep) Upgrade Concerto to 1.0.0-alpha6

Signed-off-by: Jerome Simeon<EMAIL_ADDRESS>Changes

Upgrade to latest Concerto 1.0.0-alpha.6

Coverage remained the same at 92.683% when pulling 58801171d45920d111fd56fb6f7d6b009204c9cc on js-concerto-alpha.6 into 0cf358eaea652014655a2b80fc1c283d066cd056 on master.


[Python] Use explicit imports

@modocache Thanks a lot for reviewing! I've updated accordingly. Please take a look at the updated code :-)

@practicalswift I think this is an improvement, but I would recommend to switch to the code formatting suggested by @modocache:
from SwiftBuildSupport import (
    SWIFT_SOURCE_ROOT,
    SWIFT_BUILD_ROOT,
    print_with_argv0,
    quote_shell_command,
    check_call,
    get_preset_options,
    get_all_preset_names
)

since we normally don't do "endline" layout in Python code.

@gribozavr Fixed :-)

Looks great! Thanks for updating. I'll follow up with @ddunbar about how lit is structured.


Please Can I Join This Organisation? 🥺🙏"

Name:

Estevamsl

Info About the Pull Request You Made:

Because I want to stay on top of everything that goes on in this organization and of course, as a good dev, you have to know about the challenges of this incredible world of programming

Our Website 🌐 | Repositories 📚 | LinkFree Profile 🔗
@Estevamsl , You have received an email to join, or press this link - https://github.com/App-Choreography - , and you'll see a banner, for you to join the organisation! 🎉
You can also show that you are part of this org, by making yourself public. This will show our profile org on your profile:
Follow This:

After you join the organisation, search your name in the list of people. 🔍
Follow this below: ⬇

When you join our org, you will be automatically be part of our community team, where you will get updates, and news about our org!
We are so happy you have joined! Welcome to App Choreography! 🥳

Because I want to stay on top of everything that goes on in this organization and of course, as a good dev, you have to know about the challenges of this incredible world of programming

Welcome @Estevamsl! Here is a few things you can do in this org:

App-Choreo's Community team chat = Here you see the latest updates, can share your ideas and collaborate!
GitHub Profile League = submit your GitHub profile readme, to be in the chance of winning! 2 entries left to fill!
Hacktoberfest Practice = practice your Hacktoberfest.
Best App Tutorials = see the latest app tutorials you can either add or take a look at.
Fix our Readme = Here you can polish your code debugging/review and GitHub skills.
Best GitHub Open Source = See the best GitHub opensource repos!

For any help or support, feel free to ask.
Thank you.


share name containing the '&' symbol

Connection seems to fail when a share name contains the '&' symbol.
output:
[21:00:56] WARNING: scripts/helper.sh: line 42: Assistant: command not found tree connect failed: NT_STATUS_BAD_NETWORK_NAME [21:00:56] FATAL: Cannot access share. Please check your config. [cmd] /run.sh exited 1 [cont-finish.d] executing container finish scripts... [cont-finish.d] done. [s6-finish] waiting for services. [s6-finish] sending all processes the TERM signal.

The & symbol has a special meaning in bash and it's not escaped correctly here.

Fixed in v2.4


GitHub Actions version upgrades and pins

Fixes a deprecation warnings, and makes sure things don't break on us next year when github start to change the ubuntu latest alias - we wanna explicitly control when to move, just like the other action major versions.

Thanks


[GAMES-1481] - move reset function outside of callback

This fix solves an issue we were seeing when parallel queries were being made by various graphql field resolvers.
Please verify my tests in this attached PDF:
GAMES-1481_testing.pdf
I believe this change to fix the most recent issue with the apollo aws sdk v3 upgrade PR which broke the onboarding flow.
Once this change is merged into this lib, we will need to update the library in apollo and verify the sdk upgrade changes in apollo.
Test Query:
query UserInfoQuery {
  user {
    id

    ... on Customer {
      onboarding_completed
      onboarding_skipped
    }
  }
}

The user id for this query is derived from the Authorization: Bearer <ath_access_token> which can be determined via a logged in session using the web client and then visiting the /get-current-user endpoint via the PHP api.

Great PDF and great job spotting it!
So IIUC, and I guess this basically repeats what you explained but wanna make sure I understand it:

problem happens when querying both onboarding_completed and onboarding_skipped

that results in 2 userMetaDataSource.get() invocations in-parallel (this and this)

which in turn means 2 dynamo .get()

the 2 dynamo .get() results in a race condition because

they basically are the same Request object

the this.dynamoTable is a Request

and the 2nd userMetaDataSource.get() would just overwrite the condition before the 2 requests actually fire

Which makes sense 👍
What does not make sense to me yet is: why did it only become an issue with the aws-sdk upgrade, not before? 🤔
Regardless, I think the change looks correct. I'd personally go one extra step and combine the 2 reset calls in this method together (there's one more in the return_explain branch) but not mandatory.
But let me see if I can reproduce the issue and answer my above question first to be sure. Sorry, tried it locally and got a Could not fetch user info which I don't recall what was missing 🤦 I'll play around with it.

@soyelmnd @markw351 Any updates on this or I guess any concerns with merging this in?  it's blocking us releasing the sdk update which is blocking a lot of other work we have in flight.

Any updates on this or I guess any concerns with merging this in? it's blocking us releasing the sdk update which is blocking a lot of other work we have in flight.

Sorry I thought I communicated to Derek on Slack, but I have a ticket this sprint to look into testing this. Going to try looking into it today or else early next week.
Personally, I don't have a strong concern until I finish the test, but I think while this is one liner-change, it isn't trivial:

it's a core change in the lib - updating the routeCall which is consumed by multiple operations
and Dynamo interaction is the crucial part in Apollo

That is to say: I don't think we should rush this out, I feel like that'd ask for another P0. At the same time, I'm pretty confident we can have it up before the Christmas.

Some note for my future self apart from what on Slack:
Q: what is this reset?
A: I dug up the commit introduced this reset and

seems like the idea of it was fulfilled after this fix: clean up the internal state (i.e. temporary variables) used for the "chaining" when an "action" is performed
the only action without reset is the describeTable, which I guess cannot have reset since it is used internally in other actions (e.g. insert and replace). I guess this is confusing and to be refactored tho, but surely not before 2030

Q: why did it happen?
A: pretty much this theory

the this.whereKey in Request is an object that was shared across the 2 calls
before the fix, this object goes all the way into the aws-sdk client getItem() call with some async/callback executions in between (that is to say: it's not synchronous or instant, dig up smithy-client if prefer, I gave up with that mess after stepping into loggerMiddleware)
this led to both requests to dynamo are only made after the whereKey got overwritten with the new value from the 2nd query, and hence having identical parameters (screenshot 👇)

Q: how does this fix it?
A: the reset() is called before invoking the mentioned aws-sdk client getItem(), and that reset() assign a new object to whereKey before the 2nd dynamo .get() kicks in (and overwrites the whereKey)

Warning: theoretically there may still be a chance for the 2nd dynamo .get() to overwrite the whereKey before the 1st .get() reset it, since the routeCall is invoked async

I reckon this is very low chance and I haven't been able to reproduce it so far, which is great
If the issue happens tho, I reckon we can move the reset() out (to the action calls, i.e. get, update, etc)

Q: how did it now happen before the upgrade?
A: I actually don't know as I gave up with the debugging of that mess when I saw it's already 7pm 😂 but I believe it's because a Derek said, aws-sdk v2 handles it differently 🤔 perhaps it cloned the params, or perhaps it's just simpler and faster


Prefect Network Configuration defined in work pool fails to get applied when using with ECS Fargate Task

Issue:
Defining subnets in Network Configuration throws error indicating the subnets mentioned in network configuration not found in VPC, even when subnet exist on the VPC.
I am using ECS Workpool. Flow executes in ECS Task based on the configuration defined in the Infrastructure Overrides in Deployment.

I need to restrict the flow to execute in specific Subnets so I am defining them in Network Configuration in the work pool.
If I define the subnets in the network configuration it throws error:  even when Subnet exist in the vpc and there are no permission issue to call describe_subnets.
ValueError: Subnets ['subnet-abc] not found within VPC with ID vpc-MYVPC.
Please check that VPC is associated with supplied subnets.

Error is from below when it tries to validate subnets:
https://github.com/PrefectHQ/prefect-aws/blob/525c9173a7db0e7cbe337a2252204b2d076124cf/prefect_aws/workers/ecs_worker.py#L1356
Expectation / Proposal
The code which validates subnets from AWS to subnets defined in network configuration seems to be incorrect.
https://github.com/PrefectHQ/prefect-aws/blob/525c9173a7db0e7cbe337a2252204b2d076124cf/prefect_aws/workers/ecs_worker.py#L1354
ec2_client.describe_subnets returns details of each subnet not just SubnetId so the matching logic in above line seems to be incorrect.
This can be done something as below and then validation logic seems to work correctly, locally.
if not all(conf_sn in [sn['SubnetId'] for sn in subnets] for conf_sn in config_subnets):
    raise ValueError(...)

Also  note that boto3 describe_subnets will return subnets array (sample dummy data) ...
{
    "Subnets": [
        {
            "AvailabilityZone": "us-west-2a",
            "AvailabilityZoneId": "usw2-az1",
            "AvailableIpAddressCount": 251,
            "CidrBlock": "<IP_ADDRESS>/24",
            "DefaultForAz": False,
            "MapPublicIpOnLaunch": True,
            "State": "available",
            "SubnetId": "subnet-0abcd1234efgh5678",
            "VpcId": "vpc-0abcd1234efgh5678",
            "OwnerId": "123456789012",
            "SubnetArn": "arn:aws:ec2:region:account-id:subnet/subnet-id",
            # ... other subnet attributes ...
        },
        # ... other subnets ...
    ]
}

Thank you for the report @chotalia. We'll take a look at this but based on your analysis you seem to have done a lot of the hard work already! If you're interested we'd welcome a PR with the fix to this bug.

Thank you for the report @chotalia. We'll take a look at this but based on your analysis you seem to have done a lot of the hard work already! If you're interested we'd welcome a PR with the fix to this bug.

Thanks @urimandujano. Please review the PR https://github.com/PrefectHQ/prefect-aws/pull/321 when you get a chance


Ready Hello, Minikube page for vanilla Docsy

Delete the menu front matter for Hello, Minikube. Docsy would use this menu, but we don't want this page in the top navigation.
This change does not change the way the current site displays or, at least, that's what I intend.
Current page | Preview
/area web-development
Helps with issue https://github.com/kubernetes/website/issues/41171

Its good to have alignment with upstream Docsy.
Preivew https://deploy-preview-45938--kubernetes-io-main-staging.netlify.app/docs/tutorials/hello-minikube/ also looks good.
/lgtm


How did adding the devenv package make my system start to trust devenv.cachix.org

Hello, I'm trying devenv for the first time to integrate some git-hooks into to my flake-based project. On my nixos machine, I added devenv to environment.systemPackages and then ran devenv init, per the instructions on the setup page.
My question is about the final line from the stdout from devenv init, which I've pasted blow. How did my system start to trust devenv.cachix.org as a substituter / binary cache?  My prior understanding was that I would need to explicitly add additional trusted nix binary caches in my config under nix.settings.trusted-substituters and nix.trusted-public-keys to start using a new cache. I didn't add any trusted-substituters or binary-caches to my config, so I'm quite surprised to see that devenv is using devenv.cachix.org.
➜ devenv init
• Creating devenv.nix
• Creating devenv.yaml
• Creating .envrc
• Creating .gitignore
direnv: loading ~/fun/visual-preview/.envrc
direnv: loading https://raw.githubusercontent.com/cachix/devenv/95f329d49a8a5289d31e0982652f7058a189bfca/direnvrc (sha256-d+8cBpDfDBj41inrADaJt+bDWhOktwslgoP5YiGJ1v0=)
direnv: using devenv
direnv: .envrc changed, reloading
direnv: ([/nix/store/h960xs3n0qh0809620kp9955sh56rgp1-direnv-2.34.0/bin/direnv export zsh]) is taking a while to execute. Use CTRL-C to give up.
• Using Cachix: devenv
• Trusting devenv.cachix.org on first use with the public key devenv.cachix.org-1:w1cLUi8dv3hnoSPGAuibQv+f9TZLr6cv/Hm9XgU50cw=
direnv: updated devenv shell cache

If you're a trusted user, then devenv will add the --extra-substituters and --extra-trusted-public-keys CLI arguments to its internal nix commands.
If you're not a trusted users, then you'll be provided with instructions on how to add the substituter manually.


Chrissi's research proposal

@gitchrissi I fixed up your files and submitted the PR for you.

I think the ideas are a great start, and are a strong reason to use the NewsAPI to pull huge numbers of news text to spot these trends. I'm going to paste each idea below and add some comments/feedback.
Ideas for research:
- Does the media intend to scare the public with their choices of diction in their articles

Intention will be hard to find/prove. You can use the language in articles to cluster around diction to identify which news source/author/political bias leaning creates the most positive/negatively charged diction around the virus. You could plot the sentiment or word choice change over time to see if certain sources were potentially fearmongering (i.e. source X was calling for martial law of Y country Z months before a case was even reported there, that seems emotionally charged). HOWEVER, truly being able to show that a person/source/site truly had a negative intention is difficult, and not something that can be done lightly.

Being scared. How will we identify which news articles are scary? Does that hold true for people of all ages, backgrounds, races, ethnicities, etc? If we can only identify scary to certain sub populations we'll need to note that

- Is there a difference between the scholarly articles vs the media articles reporting on coronavirus? What are the differences?

This is a very succinct question that has a clear goal and answer. You could perform cluster analysis based on word usage, and just on that alone we could see if scholarly/media are similar/different. Then we could add word change over time, sentiment, reach/impact, and further expand. Lovely question


Mention in the docs how to access an instance from another machine

I have some instances running some tasks (managed by spotty). I'm trying to check the execution via ssh from another machine and getting Permission denied (publickey). from ssh.
The new machine also has awscli configured to the same access and secret key.

When you start an instance, Spotty creates an EC2 Key Pair and downloads a private key to the ~/.spotty/keys/aws directory. If you want to have access to the instance from a different machine, copy the key there to the same directory.

Now I can't ssh even from the machine that started the instance:
vadimkantorov@5CD8223LBY:~/convasr/scripts$ spotty start
Syncing the project with S3 bucket...
Preparing CloudFormation template...
  - volume "convasr-instance-train1-docker" (vol-0395c41421eab9040) will be attached
  - volume "convasr-instance-train1-workspace" (vol-0aacfb50fabe22a0e) will be attached
  - volume "dataset_open_stt" (vol-09085bee257b3b52d) will be attached
  - availability zone: us-east-1d
  - maximum Spot Instance price: 4.0000
  - AMI: "Deep Learning Base AMI (Ubuntu) Version 19.0" (ami-0b5b391ed8ccaa538)
  - Docker data will be stored on the "docker" volume

Volumes:
+------------------+-------------------+------------+-----------------+
| Name             | Container Dir     | Type       | Deletion Policy |
+==================+===================+============+=================+
| dataset_open_stt | /dataset_open_stt | EBS volume | Retain Volume   |
+------------------+-------------------+------------+-----------------+
| workspace        | /workspace        | EBS volume | Retain Volume   |
+------------------+-------------------+------------+-----------------+
| docker           | -                 | EBS volume | Retain Volume   |
+------------------+-------------------+------------+-----------------+

Waiting for the stack to be created...
  - launching the instance...
  - waiting for the Docker container to be ready...
Error:
------
Stack "spotty-instance-convasr-instance-train1" was not created.
Please, see CloudFormation logs for the details.
vadimkantorov@5CD8223LBY:~/convasr/scripts$ spotty ssh
['ssh', '-ti', '/home/vadimkantorov/.spotty/keys/spotty-key-convasr-us-east-1', '-o', 'StrictHostKeyChecking no'<EMAIL_ADDRESS>'tmux new -s spotty-ssh-container -A "sudo /tmp/spotty/instance/scripts/container_bash.sh || tmux set remain-on-exit on"']
Warning: Permanently added '<IP_ADDRESS>' (ECDSA) to the list of known hosts.
<EMAIL_ADDRESS>Permission denied (publickey).

The keyfile indeed exists, but somehow isn't accepted by the instance.

Hmm, I removed the keys and restarted, and it worked. Maybe the keyfile had bad file permissions somehow.

@vadimkantorov If you scroll the pane one line to the top, you'll see the error message (the "Pane is dead" message itself is being printed at the end of the pane and hides the first line).
Looking at the output you sent, it seems that your container is failed to start, so I assume the error says that the container not found. So you need to figure out what's wrong with it from the logs. You should be able to connect to the host using the spotty ssh -H command.
Have you already managed to connect to the same instance from different machines?

Finally it was not so pressing since I carried the laptop with me
Looking at CloudFormation logs was helpful at many occasions. It would be great if these got downloaded automatically if requested (or if an error occurred).

Added it to FAQ in the docs: How to ssh to a Spotty instance from a different machine?


Actions shouldn't extend Actors

Actors is only one way to implement Actions

Overengineering --> won't do that


[Onepunch Dark] Weird shadow things in the title of the song.

Describe the bug
When i play a song, the title shows weird shadows things on the side.
To Reproduce
Steps to reproduce the behavior:

Play any song
See error

Screenshots
See the picture shown here.
https://imgur.com/a/Ko0zmxq
Specifics:

OS: openSUSE Tumbleweed
Spotify version: Latest
Spicetify version: Latest
Theme name: Onepunch (Dark variant)

Cant see screenshot


When installing the driver in win10 system, it will cause a short network disconnection

When I install or uninstall the driver, I find that the network will be disconnected for a short time, and the computer network adapter will reconnect to verify, and this problem is currently only found on the win10 system computer, win11 is normal, is there a way to solve it?

This is expected behavior because the network stack must rebind during the installation or removal of an NDIS filter driver. This behavior is also expected to affect Windows 11.


system_config.rb: refactor code into worker functions

This PR breaks down dump_verbose_config function into "worker" functions that display information for specific categories:

core_tap_config for Core tap info
homebrew_config for Homebrew/brew info
homebrew_env_config for environment-related information
host_software_config for Host software

Also, I factored out code related to Clang into a new describe_clang function, so that we can do:
f.puts "Clang: #{describe_clang}"

[x] Have you followed the guidelines in our Contributing document?
[x] Have you checked to ensure there aren't other open Pull Requests for the same change?
[x] Have you added an explanation of what your changes do and why you'd like us to include them?
[ ] Have you written new tests for your changes? Here's an example.

[x] Have you successfully run brew tests with your changes locally?

Nice cleanup.

Thank you! :)


to_graph and plot should show the shape of the expected input and output

First, I love the keras.utils.visualize_util module. It makes a quick summary of the neural network possible.

But it would be nice to also annotate the visualization with the expected input and output shape. This would make debugging the neural network easier.
How does a change to keras.utils.visualize_util.plot and keras.utils.visualize_util.to_graph with this feature sound?

(It would also be nice to show the activation of a layer, if any. But that might be bundled in a separate issue.)

That sounds quite reasonable, but it should be made optional. Are you preparing a PR?

Well, I just encountered a pleasant surprise.
I went through the source code, and it turns out that

There are three kwargs that are undocumented for to_graph. See this line of the source code.

recursive=True
show_shape=False
connect_to=None
It's self explanatory what show_shape does. However, since I am only starting to use Keras, I'm unfamiliar with what the two other options are.

plot can not accept these kwargs. See here

I have three future PR requests:

Change the **kwargs here in to_graph to use explicit kwargs.
Documenting the undocumented kwargs. However, I'll need more information about what the kwargs recursive=True and connect_to=None do.
Adding the three kwargs to plot.

What do you think about these requests, @fchollet?

You'd notice from the graphic that the shapes are like (None, 1500), (None, 300), etc. I'm actually curious why this is the case.

Seems that this was addressed in 98c6c8b3b6c81de7ec3583f49d45a52c38b42d2d. Closing issue.

What does the None mean actually in the diagram. Is that a bug ?


app Code Updates to Consider for Milestone 4

Based on a review of #32 these are a couple items to consider during Milestone 4 for the currently named dash_layout.py file:

figuring out card/container layout code
looking at potentially better methods of adding whitespace (vs multiple html.Br())
update bar chart functions which are currently copied code
split app file into multiple files (likely grouped by tab) to reduce size

These items are now complete, did not end up splitting app.py into multiple files for each tab as the format is already split into app.py, app_wrangling.py and app_graphing.py


Incorrect placement of x-axis tick labels in trend and holidays plot (Python only)

If you compare the x-axis labels in the R and Python plots for the trend and holidays components in the holiday_effects notebook for example, you can see that the labels are misplaced in the Python version. I have manually re-created these two plots with Matplotlib (cell input 29 here) just to check, and indeed the labels were then matching the correct positions as seen in the output from R.

Thanks for pointing this out. This axis labeling bug was fixed in the 0.1.1 release last week but we hadn't corrected the notebooks (d02b6f62b2f394f60d526644d09e0cd81583acb0 does this).
If you download the latest version on pip this bug will be fixed:
pip install fbprophet --upgrade

Great! I upgraded and tested, it's all working. I will close this. Thank you!


Add note to docs that baba manager can target a container around a baba too

Because we use visibility CSS this works a treat.

done


Is there any backend library?

I want to build a tool to debug scripts that run on my phone remotely.
Right now I am using nodejs as a proxy. My mobile APP sends all logs to nodejs then nodejs echo them with console.log() method so that I could inspect logs using Chrome Devtools Inspector with command node index.js --inspect.
But If I want to send command from Chrome Devtoos back to my app, the proxy way will not be able to do that because I can't get that input.
So is there any library that implement Chrome Devtools Protocol backend can help me with my tools.
I tried to find but all of the libraries are frontend like Chrome Devtools.

Not sure what sort of tool you want. :/
Are you dealing with an android webview? You can debug those with Chrome DevTools frontend.
But it sounds like you don't want to use that UI?
It's possible to use the protocol to evaluate javascript inside a webview (and collect the output, etc). But it's a decent amount of work, and you end up with a small subset of what the devtools frontend support already gives you.

@paulirish
Thank you for your reply.
I am working on building a logger that receive logs from an iOS application and I want to print those logs in Chrome Devtools or other Debuggers.
And I also want to receive commands from Chrome Devtools Console Tab so that I can eval() them on my iOS application with a javascript runtime.
So I think maybe some backend(websocket and http server wrapped) libraries could help me to communicate with Chrome Devtools.

@Fndroid my crmux  is basically a proxy, have a look at server part of it, you can add a code to modify packets before sending to back to debugger frontend or debuggee. The core protocol itself is very simple, just json messages over websocket


Add back to audience button.

Is your feature request related to a problem? Please describe.
I pulled to speaker. but I can't back to audience by myself and stuck in room, moderator must do this instead me.
Describe the solution you'd like
I want "back to audience" button appear when I long press on my profile pic.
Describe alternatives you've considered
A clear and concise description of any alternative solutions or features you've considered.
Additional context
None

You can simply leave the room and rejoin if you want.

Is your feature request related to a problem? Please describe.
I pulled to speaker. but I can't back to audience by myself and stuck in room, moderator must do this instead me.
Describe the solution you'd like
I want "back to audience" button appear when I long press on my profile pic.
Describe alternatives you've considered
A clear and concise description of any alternative solutions or features you've considered.
Additional context
None

Hey, can you please share an invite to join Clubhouse?


ESC and arrow keystrokes on mobile are not recognized

For some reason ESC, arrow (from hacker's keyboard) and other keys aren't being processed properly
on android.
I am trying to fix that now. If the palette takes up the whole screen, there is no easy way to shift focus
out of the search input. If the palette exceeds the window even figuring out how to close the keyboard doesn't show the backdrop to generate a blur event.
It looks like e.code.toLowerCase is returning undefined but e.key works.
Still investigating.

This also allows the user to activate command-pal using it's hotkey and to trigger a command via shortcut.


Add option for MultipleExpectation to special case aggregate_failures

As @JonRowe mentioned in #228, the general guideline is to have "one business rule expectation" per spec. Sometimes this isn't always possible with a single expect(...). It would be nice to support something like
aggregate_failures("verifying response") do
  expect(response.status).to eq(200)
  expect(response.headers).to include("Content-Type" => "text/plain")
  expect(response.body).to include("Success")
end

being treated as one expectation

Great way to represent it.

I think there should be an option for MaxAggregatedExpectations as even with aggregate_failures 10 expectations might be too much.
Also an option may determine if RSpec/MultipleExpectation recommends using aggregate_failures when there is more then whatever the maximum expectations are set. With such recommendation, it is possible to implement an autocorrect as well.

This was implemented in https://github.com/backus/rubocop-rspec/pull/329


Feed broken after upgrade to 1.4.4

This change https://github.com/magmodules/magento2-channable/commit/947c4a19b7702b6255fb73e7f96c1bdc9a79f355#diff-5644b19765ce306fc588f975adb8f3bc breaks the feed for simple products in a configurable product. Image links are missing and the link to the product is incorrect.
Workaround is to stay on 1.4.3.

This was caused by content staging in Magento Commerce. We have reverted the fix and added this as on option disabled by default. New release: v1.4.5

This version works correct. Tnx.


A DnsTimeoutException should also set true to ctx.isTimedOut().

Related:

https://github.com/line/armeria/issues/4876#issuecomment-1562255976
https://github.com/line/armeria/pull/4882

We need to make sure CancellationScheduler.finishNow(TimeoutException) is invoked on more timeout types such as session/connection/DNS timeout so that true is set to ctx.isTimedOut().
/cc @injae-kim

Please assign this issue to me~! I'll make PR soon 🙇 thanks!

(Sorry for late, I'll make PR until 8/31 🙇)


Transaction malleability in the account contract

Currently, the account contract does not verify that the nonce in the transaction call data is equal to the current_nonce in the contract, but only that the user signed on the current_nonce. This allows a malicious sequencer to replace nonce with an arbitrary felt. This results in a malleable vulnerability since the sequencer can change the transaction hash, while still being able to execute the transaction.

📝 Details
I suggest adding an assert in the execute() function, that verifies that the nonce in the call data is equal to the current_nonce in the contract storage.

Thanks for reporting this, I can confirm is indeed correct. After a brief analysis, this seems to be a minor issue since malleability on shared state blockchains (e.g. StarkNet, Ethereum) is much less likely to attacks than in Bitcoin for example, the reason being the nonces which help users to keep track of sent and executed transactions. There's little harm an attacker could cause under very specific conditions.
In any case this is an attack vector and we will fix it asap.


Updated to v5.0.4 --HEAD macOS Monterey 12.6.5 no longer working

~ brew services restart yabai
Error: Formula 'yabai' has not implemented #plist, #service or installed a locatable service file

New command
yabai --start-service

May I asked why you moved away from using brew services? I like the centralized and predictable way of managing all background services using brew. Why step away from that?

#1619


fixing links, images and missing files in Getting Started tutorial

Fixed links, images, and missing files
Signed-off-by: Victoria Bialas<EMAIL_ADDRESS>

@icecrime @SvenDowideit if you could merge this soon, it will help with docs build problems, then I'll get to Toolbox and other Docker for Mac and Win problems as well

Looks like we would not be able to merge this PR because of merge conflicts. Please rebase, fix conflicts, and force push to your branch.

Looks like we would not be able to merge this PR because of merge conflicts. Please rebase, fix conflicts, and force push to your branch.

LGTM - fixing the docker-for-* links in another PR


Fix Rust test library path in the Cabal file

I think this is what you meant, and it makes make test work.

I had originally had it as a workspace in order for it to work but by removing it from the Cargo.toml file I broke the functionality of the make file. This is a better solution though that doesn't require the workspaces in the Cargo file. Thanks for the PR!


[silgen] Fix ownership when peepholing bridging and enable ownership …

…verification on test/SILGen/objc_bridging_any.swift
The bridging function that we are calling here takes in the value to be bridged
at +0. We were storing that value via a normal store. This looks like a double
consume since we were destroying the value later. Now we use a store_borrow.
rdar://29791263

@swift-ci test and merge


Missing logError argument in checkUpgradeType function call (since v1.28.0)

Error coming during login since v1.28.0
Reference:
https://github.com/mattermost/mattermost-mobile/blob/217ef59f1c31ff4bac7e35112f7ecdaa328c50bb/app/screens/select_server/select_server.js#L112
Method:
https://github.com/mattermost/mattermost-mobile/blob/217ef59f1c31ff4bac7e35112f7ecdaa328c50bb/app/utils/client_upgrade.js#L9
Error:
TypeError: logError is not a function
    at checkUpgradeType (http://localhost:8081/index.bundle?platform=android&dev=true&minify=false:504174:7)
    at SelectServer.componentDidUpdate (http://localhost:8081/index.bundle?platform=android&dev=true&minify=false:547430:68)
    at commitLifeCycles (http://localhost:8081/index.bundle?platform=android&dev=true&minify=false:24211:28)
    at commitLayoutEffects (http://localhost:8081/index.bundle?platform=android&dev=true&minify=false:26543:13)
    at Object.invokeGuardedCallbackImpl (http://localhost:8081/index.bundle?platform=android&dev=true&minify=false:12683:16)
    at invokeGuardedCallback (http://localhost:8081/index.bundle?platform=android&dev=true&minify=false:12779:37)
    at commitRootImpl (http://localhost:8081/index.bundle?platform=android&dev=true&minify=false:26350:15)
    at unstable_runWithPriority (http://localhost:8081/index.bundle?platform=android&dev=true&minify=false:32478:18)
    at runWithPriority (http://localhost:8081/index.bundle?platform=android&dev=true&minify=false:16229:16)
    at commitRoot (http://localhost:8081/index.bundle?platform=android&dev=true&minify=false:26212:9)

Error triggered due to the following error at line:
https://github.com/mattermost/mattermost-mobile/blob/217ef59f1c31ff4bac7e35112f7ecdaa328c50bb/app/utils/client_upgrade.js#L13
"Error: Dynamic require defined at line 3; not supported by Metro
    at /Users/rahul.jain/Documents/mattermost-mobile/.vscode/.react/index.bundle:504189:13
    at lazyRequire (/Users/rahul.jain/Documents/mattermost-mobile/.vscode/.react/index.bundle:504190:6)
    at Object.get [as gt] (/Users/rahul.jain/Documents/mattermost-mobile/.vscode/.react/index.bundle:504198:19)
    at checkUpgradeType (/Users/rahul.jain/Documents/mattermost-mobile/.vscode/.react/index.bundle:504162:27)
    at SelectServer.componentDidUpdate (/Users/rahul.jain/Documents/mattermost-mobile/.vscode/.react/index.bundle:547430:68)
    at commitLifeCycles (/Users/rahul.jain/Documents/mattermost-mobile/.vscode/.react/index.bundle:24211:28)
    at commitLayoutEffects (/Users/rahul.jain/Documents/mattermost-mobile/.vscode/.react/index.bundle:26543:13)
    at Object.invokeGuardedCallbackImpl (/Users/rahul.jain/Documents/mattermost-mobile/.vscode/.react/index.bundle:12683:16)
    at invokeGuardedCallback (/Users/rahul.jain/Documents/mattermost-mobile/.vscode/.react/index.bundle:12779:37)
    at commitRootImpl (/Users/rahul.jain/Documents/mattermost-mobile/.vscode/.react/index.bundle:26350:15)"

@xRahul would you mind submitting a PR to fix it? That would be great if you can

@enahum What should be the fix here? Personally, I've just put an if/else over logError such that if it exists, log it, or skip logging on error.
If we need to pass it, would I find it in same place, as in, props.action?

@xRahul probably the issue is with the semver import, maybe try to change it for import semver from 'semver/preload';

This doesn't seem to be applicable any longer on V2.


require rmagick instead of RMagick (the latter is deprecated)

Bump rmagick version to 2.13.4 (oldest version with the
non-deprecated require

FYI see https://github.com/rmagick/rmagick/pull/141
Currently, sprite-factory with rmagick versions > 2.13.4 is printing a deprecation warning when run.


Function docstring to node description

ComfyUI will use node.DESCRIPTION as the description of the node when retrieving node info. It would be nice if ComfyUI-Annotations could automatically convert function docstring to DESCRIPTION attribute.
def node_info(node_class):
    obj_class = nodes.NODE_CLASS_MAPPINGS[node_class]
    info = {}
    info['input'] = obj_class.INPUT_TYPES()
    info['output'] = obj_class.RETURN_TYPES
    info['output_is_list'] = obj_class.OUTPUT_IS_LIST if hasattr(obj_class, 'OUTPUT_IS_LIST') else [False] * len(obj_class.RETURN_TYPES)
    info['output_name'] = obj_class.RETURN_NAMES if hasattr(obj_class, 'RETURN_NAMES') else info['output']
    info['name'] = node_class
    info['display_name'] = nodes.NODE_DISPLAY_NAME_MAPPINGS[node_class] if node_class in nodes.NODE_DISPLAY_NAME_MAPPINGS.keys() else node_class
    info['description'] = obj_class.DESCRIPTION if hasattr(obj_class,'DESCRIPTION') else ''
    info['category'] = 'sd'
    if hasattr(obj_class, 'OUTPUT_NODE') and obj_class.OUTPUT_NODE == True:
        info['output_node'] = True
    else:
        info['output_node'] = False

    if hasattr(obj_class, 'CATEGORY'):
        info['category'] = obj_class.CATEGORY
    return info

Thanks, was wondering if I could send the docstring somewhere, will take a look!

I've added what I think will work, but how do I test it? Would figure it out on my own, but after not seeing any obvious items in the menus figured it be faster just to ask you.

You can verify it by opening http://<IP_ADDRESS>:8188/object_info and searching for "description". As far as I know, the official web UI doesn't use the description, but some custom nodes and other frontends may use it.

Implemented in 26e7acb41f007fad78edbea05a2823b8e3efe458


Set Up a Basic Mock S/4HANA Service

Tutorial URL: https://developers.sap.com/tutorials/cap-cloudsdk-1-mock-service.html
Please specify the step you are referring to Step-3
If we have on-premise OData service, how to get the .json format which is used in external/csn folder
Thanks,
Naga

@prakash13t  These GitHub issues are to resolve issues (i.e., problems/errors) with the tutorials. Your question is more general and likely would get more visibility -- and a better answer -- in the SAP Community's Questions & Answers.
https://answers.sap.com/index.html
https://www.sap.com/community.html