Update .nvmrc file with correct Node Version

The Node version in the .nvmrc file shows 20.4.0 while the README.md file has 20.11.0. Running nvm use followed by npm clean-install results in errors.
Running nvm list provides a list of Node versions shown below

Version 20.11.0 in the README.md file is not listed. Best to use the most recent version in the list closest to the one specified in the README.md file, which is version 20.15.0.
Steps to fix:

[ ] Update Node version specified in the .nvmrc file to 20.15.0
[ ] Update Node version in the README.md file to 20.15.0

Can you add to the steps to fix "Make unit test to ensure the node version in the README matches the one in the .nvmrc?  I'm sure this will happen again if we don't fix this.
Thanks for finding this and opening a ticket for it.


[match] import does not support new Apple Distribution and Development certificates

New Issue Checklist

[x] Updated fastlane to the latest version
[x] I read the Contribution Guidelines
[x] I read docs.fastlane.tools
[x] I searched for existing GitHub issues

Issue Description

match import command does not appear to support the new Xcode 11 Development and Distribution certificate types.
Command executed

I followed the usual match import as documented here
Complete output when running fastlane, including the stack trace and command used

Taking a look at the importer, it doesn't look like it supports the new certificate types at all.
https://github.com/fastlane/fastlane/blob/d9f057726f406a634a086a9b3c9be93146e74141/match/lib/match/importer.rb#L55-L62
Which uses Spaceship::ConnectAPI to fetch certificates for validation and those certificate models hasn't been updated to support Apple Distribution and Development certificates either.
https://github.com/fastlane/fastlane/blob/d9f057726f406a634a086a9b3c9be93146e74141/spaceship/lib/spaceship/connect_api/models/certificate.rb#L24-L32
Environment

✅ fastlane environment ✅
Stack

Key
Value

OS
10.14.6

Ruby
2.6.5

Bundler?
true

Git
git version 2.21.0 (Apple Git-122.2)

Installation Source
~/.rvm/gems/ruby-2.6.5/bin/fastlane

Host
Mac OS X 10.14.6 (18G2022)

Ruby Lib Dir
~/.rvm/rubies/ruby-2.6.5/lib

OpenSSL Version
OpenSSL 1.1.1d  10 Sep 2019

Is contained
false

Is homebrew
false

Is installed via Fabric.app
false

Xcode Path
/Applications/Xcode-11.3.app/Contents/Developer/

Xcode Version
11.3

System Locale

Variable
Value

LANG
en_CA.UTF-8
✅

LC_ALL

LANGUAGE

fastlane gems

Gem
Version
Update-Status

fastlane
2.139.0
✅ Up-To-Date

Loaded gems

Gem
Version

did_you_mean
1.3.0

executable-hooks
1.6.0

bundler-unload
1.0.2

rubygems-bundler
1.4.5

bundler
1.17.3

etc
1.0.1

forwardable
1.2.0

CFPropertyList
3.0.2

public_suffix
2.0.5

addressable
2.7.0

atomos
0.1.3

babosa
1.0.3

claide
1.0.3

coderay
1.1.2

colored
1.2

colored2
3.1.2

highline
1.7.10

commander-fastlane
4.4.6

declarative
0.0.10

declarative-option
0.1.0

digest-crc
0.4.1

unf_ext
<IP_ADDRESS>

unf
0.1.4

domain_name
0.5.20190701

dotenv
2.7.5

emoji_regex
1.0.1

excon
0.71.1

multipart-post
2.0.0

faraday
0.17.3

http-cookie
1.0.3

faraday-cookie_jar
0.0.6

faraday_middleware
0.13.1

fastimage
2.1.7

gh_inspector
1.1.3

jwt
2.1.0

memoist
0.16.2

multi_json
1.14.1

os
1.0.1

signet
0.12.0

googleauth
0.10.0

httpclient
2.8.3

mini_mime
1.0.2

uber
0.1.0

representable
3.0.4

retriable
3.1.2

google-api-client
0.36.4

google-cloud-env
1.3.0

google-cloud-core
1.4.1

google-cloud-storage
1.25.0

json
2.3.0

mini_magick
4.10.1

multi_xml
0.6.0

plist
3.5.0

rubyzip
1.3.0

security
0.1.3

naturally
2.2.0

simctl
1.6.7

slack-notifier
2.3.2

terminal-notifier
2.0.0

unicode-display_width
1.6.0

terminal-table
1.8.0

tty-screen
0.7.0

tty-cursor
0.7.0

tty-spinner
0.9.2

word_wrap
1.0.0

nanaimo
0.2.6

xcodeproj
1.14.0

rouge
2.0.7

xcpretty
0.3.0

xcpretty-travis-formatter
1.0.0

fastlane-plugin-teams
0.2.0

method_source
0.9.2

pry
0.12.2

Same issue here, I can successfully create new certificates & profiles with match. But import not working on certificates.
Xcode can't see the new certificates after I run match development --readony command.
🚫 fastlane environment 🚫
Stack

Key
Value

OS
10.14.6

Ruby
2.6.5

Bundler?
false

Git
git version 2.21.0 (Apple Git-122.2)

Installation Source
/usr/local/bin/fastlane

Host
Mac OS X 10.14.6 (18G1012)

Ruby Lib Dir
~/.rbenv/versions/2.6.5/lib

OpenSSL Version
OpenSSL 1.1.1d  10 Sep 2019

Is contained
false

Is homebrew
false

Is installed via Fabric.app
false

Xcode Path
/Applications/Xcode.app/Contents/Developer/

Xcode Version
11.3

fastlane gems

Gem
Version
Update-Status

fastlane
2.139.0
✅ Up-To-Date

generated on: 2020-01-08

Later in the week, I'll make an attempt to try and add support for these new certificate types in Spaceship::ConnectAPI. The API is returning these new certificates, but the type is missing from Apple's ConnectAPI documentation.

Closing this ticket as https://github.com/fastlane/fastlane/pull/16041 got merged and released a long time ago 🤗 🚀

Closing this ticket as https://github.com/fastlane/fastlane/pull/16041 got merged and released a long time ago 🤗 🚀


load epub_viewer in container

Hello everyone!
I would like to load epub_viewer inside a container. It's possible?
Can I customize the AppBar to put a button to return to the app?
Thanks.

This is not possible at the moment

This is not possible at the moment


Suggestion: progress indication

Some Patreon feeds have A Lot of content - I've set the downloader running on one that (as an estimate) has over 1000 posts. I know that it's not practical to give an estimated time to completion because of a number of factors, but it'd be helpful to have something in the default logging that shows e.g. "post number x of y total" so people can gauge vaguely how it's going and whether to babysit it or leave it overnight etc.
Running from source code on MacOS, haven't experimented with other logging options besides default to see if it's included in any of them.

...never mind, I just noticed it does already have this feature, my mistake!


⚠ Game Join API Endpoint has degraded performance

In c452ab0, Game Join API Endpoint (http://gamejoin.roblox.com/) experienced degraded performance:

HTTP code: 503
Response time: 1074 ms

Resolved: Game Join API Endpoint performance has improved in cfae175 after 37 minutes.


: todo list using redux

drift: https://video.drift.com/v/abzmBzqSnDMd3MtPyVcJTiqsKbzKie9nMTHAQfAndPQU/

invalid search:

Some weird behaviour shown up on removing the item
The searching part must be onChange
When no items are found then that message must be shown up in the lists container
Edit feature is not implemented
Work on the Directory structure, code modularity
The commit message's format must be proper


GDScript: String.substr returns more text than specified

Godot version: 3.2.3
OS/device including version: Archlinux with Linux x86_64 kernel 5.11.7
Issue description:
When using GDScript's substr method on a string, the result is often incorrect. Substring appears to work correctly near the start of the string, but fails to return to correct result towards the middle and end of the string.
In all instances exhibiting the problem that I tested, substr returns far more text than should be expected. For example, in the steps to reproduce, the third substring call should return 5 characters, but returns 17 instead.
Steps to reproduce:
Place the following code inside of a gdscript file and attempt to run it.
func _ready():

	# string.substr(start, end) appears to function incorrectly. Some parts
	# work as expected, but some places in the string do not. Here is some text
	# from the poem "The Jabberwocky".
	var jabber = "twas brillig and the slithey toves, did gyre and gimble in the wabe."

	# Should (and does) print out "twas "
	print("substr(0, 5)")
	print(jabber.substr(0,5))
	print()

	# Should (and does) print out "twas brillig and the slithey toves"
	print("substr(0, 35)")
	print(jabber.substr(0,35))
	print()

	# Should print out " and ", but instead prints out " and the slithey "
	print("substr(12, 17)")
	print(jabber.substr(12,17))
	print()

	# Attempt to print out the "did gyre and gimble".
	# Prints out "did gyre and gimble in the wabe." instead.
	print("substr(36, 54)")
	print(jabber.substr(36,54))
	print()

When running the code, the output should be similar to this if the same issue is being seen:

Minimal reproduction project: String.substr Issue.zip
EDIT: As soon as I submitted this, something clicked. I believe I have misread the documentation about 15 times in a row. The second part is the length of the string to get, not the index to stop at. Coming from a python background, I completely missed that every time I read it. Sounds like rubber duck debugging at it's finest!

As soon as I submitted this, something clicked. I believe I have misread the documentation about 15 times in a row. The second part is the length of the string to get, not the index to stop at. Coming from a python background, I completely missed that every time I read it. Sounds like rubber duck debugging at it's finest!
If it makes sense for the development side of things to add in a .slice(start_index, end_index) method to gdscript, I'm sure other might appreciate it as well. If not, then sorry for tho noise on this one.


HV-455 The annotation processor should verify the groups parameter of a constraint declaration

https://hibernate.atlassian.net/browse/HV-455
added check for groups parameter to verify that groups are represented by interfaces.
One more for annotation processor :)

Rebased and applied. Many thanks, @marko-bekhta!


#35 WIP: try to use child_added event to avoid updating whole array for single item being added

DO NOT MERGE
This is just a try/proposal for https://github.com/adriancarriger/angularfire2-offline/issues/35 to use array item level events to avoid all items being updated each time
any comments, suggestions, ideas, commits are welcome.
currently this is not even yet tested on any projects, just tests are passing

I really like what I see so far! This should make list updates much more efficient. Thanks for putting this together 👍


ShadowError doesn't implement std::error::Error

Why? This makes it so you can't use the ? operator with it...

published new version support
shadow-rs = "0.17.0"

Thanks!


SVVP support

A batch of commits to fix the SVVP support

Please add comments explaining the changes. For example in the first commit
2960b16 I don't understand why the change is needed. What's wrong, how did it worked before?


Internet keeps disconnecting

Microsoft PowerToys version
0.57.2
Running as admin

[ ] no

Area(s) with issue?
Installer
Steps to reproduce
after I installed powertoys my internet connection keeps dropping out then comes back after 10 seconds or so... No idea about what could have caused it
✔ Expected Behavior
No response
❌ Actual Behavior
No response
Other Software
No response

turns out that my ethernet cable decides to die at the exact moment I installed PowerToys, Sorry guys


update documentation for component-slis

Component SLIs is graduating to GA. This updates the documentation accordingly.

/sig instrumentation

Where is the upstream PR?

Here is the upstream PR for it: https://github.com/kubernetes/kubernetes/pull/120574

/approve


Support Vue 3

Will be vue 3 support?

@sp1ker @Livan-pro @GreenDjango, @kylestev, @carl-jin, @veryeasily, @T0miii, @Niputi, @PabliyoCR
the discussion moved to the thread https://github.com/retejs/vue-render-plugin/issues/39 where you can find more information


Phantomjs for ppc64

This is reopening auto-closed (ignored) issue #14421.  OpenPOWER is a mature, stable, high performance open ISA with server, desktop, and embedded class machines available, and we need support added for ppc64le.  The lack of support makes building e.g. ONLYOFFICE needlessly difficult (thankfully distros have prebuilt packages, but versions do not match what is desired), and as the prior issue noted the sources do in fact build on POWER.
What do we need to have happen to get a POWER binary added for download?

Hi @madscientist159, thanks for the report! If you want to contribute the POWER binary, just fork this repository, prepare a build script to produce such a binary, report back and we'll see what we can do about it.
Please note that nobody is actively working on version 2.1 anymore.

@madscientist159 I imagine #15442  will get you most of the way there just by fixing the openssl architecture and building in a ubuntu ppc64le container

Closing this for now. Thank you!


[Bug]: Display image of guess the number game not visible

Give a brief about the bug ✍
The title image of the number guessing game is not there
What is the expected behavior? 🤔
Should display image
Provide step by step information reproduce the bug 📄
Will change the location of a few files
Select program in which you are contributing
GSSoC23
Code of Conduct

[X] I follow CONTRIBUTING GUIDELINE of this project.

Hey @HarshP6421 , You can't have another issue before completing the previous one 😀
you already have the following 1 open issues 👀 ! :
#1909

Hey @HarshP6421 ! Thank you so much for your raising the issue💗
It’s all yours, you can come anytime again and make some contributions! 🚀
Alone, we can do little, but together we can do so much! 😇

Hey @HarshP6421 !
Thank you for raising an issue 💗
You can self assign the issue by commenting /assign in comment 😀
Make sure you follow CODE OF CONDUCT and CONTRIBUTING GUIDELINES 🚀
Don’t Forget to ⭐ our GameZone🎮
Make sure you join our Discord🕹


Content doesn't update when browser's back button is used

Steps to reproduce

Go to localhost:8080/content/cms
Click "View" on a content item.
Click browser's back button
Click "Edit" to change that Content Item + "Save" + "Go Back"
Click "View" on the same Content Item.

Expected result
Updated content to be shown.
Actual result
Initial content is shown.

Closing as done.


Slider breaks/blocks scrolling on touchscreens

If you touch the slider on the phone because you want to scroll through you dashboard up-/downslids are blocked.
You are only able to slide left and right to change the slidervalue.

Idem

Same issue. Even when the slider is in "toggle" mode, it's not possible to scroll up/down by touching that button/card.


Editable environment variables

Currenttly, there is only secret variable management, that are cumbersome to update because it takes an extra build that exposes the variable and prints it out to get the current value.
This feature request proposes to add CI-stored non-secret environment variables that would be editable:

By editable, I mean easy to consult and update, in contrast with the burden of editing secrets which requires to circumvent the security in place as administrator.

Didn't mean to duplicate, thought it was a different feature. I'll just go back to using ansible vault until I make my own CI solution then, thanks !


ConfirmEmail doesn't work

Moved from https://github.com/aspnet/Home/issues/2152 by @kironet
Hey,
I was following this tutorial: https://docs.microsoft.com/en-us/aspnet/core/security/authentication/accconfirm?tabs=aspnetcore2x%2Csql-server
And email is sent, I'm getting url like this:
_https://localhost:44343/Account/ConfirmEmail?userId=e714dc1d-1b6b-4dfd-8288-78f8b429d506&code=CfDJ8GPqscMYofFCs%2FRH3ucxQlVR4O2ONj8uPQyVUpllt5vd9QrjduDA46u%2FAI9jDaBK28e5U0uzFfx1zxwKQ2O0c41qpXlkVzya%2FU5D1aeLIiMUsiDTxUqil04U%2FRFs%2B%2FZ3UBXmr62zHd%2FxJdsWyo3R4gU1TMwo82OAc0qWrIzG%2BmkxE4SS%2BR0%2BvVVzDyZxLQm4Fc6B9%2Byep6o7ZzVyvhbVKlraFkE6irltJLhKcNFlT6pgmyObNk8uPANP9MXiOdNRvg%3D%3D_
But if I click on it, it does nothing, just redirect to Home/Index and I still can't login, because email is not confirmed.

@Rick-Anderson are the docs correct? The problem here sees to be there's URL encoding on the query string, you can see the &amp in there and that's screwing it all up.

security/authentication/accconfirm #4075


docs: fix error in README example

This is a small documentation PR to fix a naming issue in the README example.

Thanks!


operations: add LogLevel knobs for suitable ops

This will add knobs to be able to select log levels where applicable.

bors r+


Warning: updating an unmounted component

Repro:

refresh page
login (I did via Github)
click "log out"

Doesn't happen on subsequent logouts.
Warning: Can only update a mounted or mounting component. This usually means you called setState, replaceState, or forceUpdate on an unmounted component. This is a no-op.

 Not sure what is causing this issue though.


updated tabulate to 0.7.5

ack

Changes Unknown when pulling 4667b59cdb33c36d7c76d9b3372c3453ca4fc3ee on h/update-tabulate into ** on master**.


Display URL Base Domain / Page Title

At the top of the browser table, display the base domain that doesn't include the query parameters, this will help identify the current page.

Include the page title if it's been set.

Add a button to go to the end destination if it's been set, so you can go directly to the page with or without the query parameters, possibly toggle each param before pressing to see how the page will respond without specific queries.

Fixed in https://github.com/stuartajd/getURL/commit/4ad4665dca9a4188b79e65b513dded7d79434b37


DWX-6365 Adding ECR repo access to cloudbreak client

A ECRAccessRead policy will enable Cloudbreak client to describe repositories. CDP has a new feature which requires customers to define custom ECR repositories and Cloudbreak client will need to have rights to be able to describe repositories if the custome repo is defined on the same account.
See detailed description in the commit message.

Can one of the admins verify this patch?

recheck

yes

Can one of the admins verify this patch?

yes


fix: support custom headers, fix hmr url concat

PR Details
hrm options set error when only set client.host or client.path...
support tools.devServer.headers
Description

Related Issue

Motivation and Context

How Has This Been Tested

Types of changes

[ ] Docs change / refactoring / dependency upgrade
[x] Bug fix (non-breaking change which fixes an issue)
[ ] New feature (non-breaking change which adds functionality)
[ ] Breaking change (fix or feature that would cause existing functionality to change)

Checklist

[x] My code follows the code style of this project.
[x] I have updated changeset
[ ] My change requires a change to the documentation.
[ ] I have updated the documentation accordingly.
[x] I have read the CONTRIBUTING document.
[x] I have added tests to cover my changes.
[x] All new and existing tests passed.

close https://github.com/modern-js-dev/modern.js/issues/772


Values of ordinal variables should sort by numeric value

For ordinal variables, the numeric value (in float_value) should be used for sorting, but the text value should be displayed in the Datapoints table.

Seems to be the case, see https://github.com/clld/dplace2/blob/11a96e510d264cf372b2370001ca90c50c25cea5/dplace2/datatables.py#L205


Summarize memory blocks and total consumption

Description of the feature, modification, idea or suggestion
I'm currently trying to track a memory leak in my app, and System Informer is a great help to do that.
Except that I have to calculate 1000+ lines of memory block consumption one by one, when I select them.
It would be great to:
Summarize the selected lines at "Memory" page and show at the bottom.

Even more important would be, to
Show total memory consumption at Status page

Total size
Total delta
Peak total

Because private memory allocation alone is not enough to measure, if the app is reaching a total of 2GB and crashes.
Maybe consider to add a checkbox Graph to the "Performance" page too, to:

Show total memory consumption (private + virtual)

Optional:

Memory fragmentation statistics

Proposed implementation details (optional)
No response

It would be great, if the "Total bytes" memory consumption would be calculated the same way as VMMap does from Sysinternals.

the "Total bytes" memory consumption

"Total bytes" are under the I/O category for disk/network and unrelated to memory usage?

"Total bytes" are under the I/O category for disk/network and unrelated to memory usage?

Sorry, but I don't understand this question.
I'm talking only about memory consumption.
VMMap is a memory-usage monitoring app too.
I've never mentioned anything about I/O nor disk/network.
I've added this line:

It would be great, if the "Total bytes" memory consumption would be calculated the same way as VMMap does from Sysinternals.

only for the reason to my original request, because maybe "simply summarizing private bytes + virtual bytes" is not the correct way to calculate "total memory consumption" ...

It would be great, if the "Total bytes" memory consumption would be calculated the same way as VMMap

"Total bytes" is the name of disk/network statistics 🤷♂

"Total bytes" memory consumption would be calculated the same way as VMMap does from Sysinternals.

The values down the left column?

or the values across the top row?

maybe "simply summarizing private bytes + virtual bytes" is not the correct way to calculate "total memory consumption"

The total would be Private bytes + Private WS + Shareable WS + Shared WS?

VMMap and System Informer are querying the system at different intervals and the program or the system changed a small number of pages between those intervals but otherwise the totals the same?

"Total bytes" is the name of disk/network statistics 🤷♂

Total size memory = Total bytes memory
It does not really matter, how we call it. It can be the very same "naming", the only thing that matters, where is it listed.
_(Whether under "I/O" or under "Memory")
The different size/byte naming is currently confusing.
IMHO to be consistent everything should be listed like this:_

Private (bytes)
Private delta (bytes)
Total (bytes)
... etc
Page faults (count)
... etc

So the unit could be separated by a sign. Also "Private [bytes]" is ok.
Than we wouldn't need to thing about if "byte" or "size" is better.

The values down the left column?

YES, but I don't think it would be necessary to list all those values.
Also maybe it would consume too much CPU to collect those separately.
(Sadly I know very little about memory consumption procedures to know how they are counted, which data can be easily obtained from OS, etc...)
I can reflect only as "end user" to the fact that:  "Total memory consumption" is missing from the list.

The total would be Private bytes + Private WS + Shareable WS + Shared WS?

I'm not sure. Can we ask the programmers of VMMap?
If I count together those columns, they do not match.
(For example the "Shareable" blue line: 12700+2216 != 24884)

Answer v2.0:

The total would be Private bytes + Private WS + Shareable WS + Shared WS?

Sorry, If you have ment by that the System Informer's total, than than the answer is: No
If I summarize 109+67+25+11 = 212MB
.. even if I would add Working set +92 = 304MB,
is still much smaller than 349MB real total consumption calculated by VMMap.
So something is missing... But I don't know what.

VMMap Size column includes blocks of reserved but uncommitted memory. That isn't displayed in the Statistics tab in System Informer. But if you can see reserved memory in the Memory tab:


sf.init 添加tls配置启动报错

Issue Type
Bug
Source
binary
Secretflow Version
docker-latest
OS Platform and Distribution
docker
Python version
docker
Bazel version
No response
GCC/Compiler version
No response
What happend and What you expected to happen.
sf.init 添加tls配置启动报错
代码如下：
alice：
tls_config={'ca_cert': '/data/ca/cacert.pem',
 'cert': '/data/ca/alice_cert.pem',
 'key': '/data/ca/alice_key.pem'}
cluster_config={'parties': {'alice': {'address': '<IP_ADDRESS>:8202',
   'listen_addr': '<IP_ADDRESS>:8202'},
  'bob': {'address': '<IP_ADDRESS>:8202', 'listen_addr': '<IP_ADDRESS>:8202'}},
 'self_party': 'alice'}
sf.init(
    address='<IP_ADDRESS>:7201',
    log_to_driver=True,
    cluster_config=cluster_config,
    exit_on_failure_cross_silo_sending=True,
    _memory=5 * 1024 * 1024 * 1024,
    cross_silo_messages_max_size_in_bytes=2 * 1024 * 1024 * 1024 - 1,
    tls_config=tls_config
)
bob:
tls_config={'ca_cert': '/data/ca/cacert.pem',
 'cert': '/data/ca/bob_cert.pem',
 'key': '/data/ca/bob_key.pem'}
cluster_config={'parties': {'alice': {'address': '<IP_ADDRESS>:8202',
   'listen_addr': '<IP_ADDRESS>:8202'},
  'bob': {'address': '<IP_ADDRESS>:8202', 'listen_addr': '<IP_ADDRESS>:8202'}},
 'self_party': 'bob'}
sf.init(
    address='<IP_ADDRESS>:7201',
    log_to_driver=True,
    cluster_config=cluster_config,
    exit_on_failure_cross_silo_sending=True,
    _memory=5 * 1024 * 1024 * 1024,
    cross_silo_messages_max_size_in_bytes=2 * 1024 * 1024 * 1024 - 1,
    tls_config=tls_config
)

Reproduction code to reproduce the issue.
报错信息：
alice：
2023-04-27 09:47:00 INFO barriers.py:353 [alice] --  RecverProxy was successfully created.
2023-04-27 09:47:00,584	ERROR worker.py:400 -- Unhandled error (suppress with 'RAY_IGNORE_UNHANDLED_ERRORS=1'): ray::RecverProxyActor.run_grpc_server() (pid=828, ip=<IP_ADDRESS>, repr=<fed.barriers.RecverProxyActor object at 0x7f10f845af70>)
  File "/usr/local/lib/python3.8/concurrent/futures/_base.py", line 437, in result
    return self.__get_result()
  File "/usr/local/lib/python3.8/concurrent/futures/_base.py", line 389, in __get_result
    raise self._exception
  File "/usr/local/lib/python3.8/site-packages/fed/barriers.py", line 283, in run_grpc_server
    return await _run_grpc_server(
  File "/usr/local/lib/python3.8/site-packages/fed/barriers.py", line 109, in _run_grpc_server
    server.add_secure_port(f'[::]:{port}', server_credentials)
  File "/usr/local/lib/python3.8/site-packages/grpc/aio/_server.py", line 102, in add_secure_port
    return _common.validate_port_binding_result(
  File "/usr/local/lib/python3.8/site-packages/grpc/_common.py", line 166, in validate_port_binding_result
    raise RuntimeError(_ERROR_MESSAGE_PORT_BINDING_FAILED % address)
RuntimeError: Failed to bind to address [::]:8202; set GRPC_VERBOSITY=debug environment variable to see detailed error message.
(RecverProxyActor pid=828) E0427 09:47:00.575155683     912 ssl_transport_security.cc:854] Invalid private key.
(RecverProxyActor pid=828) E0427 09:47:00.575217763     912 ssl_security_connector.cc:273] Handshaker factory creation failed with TSI_INVALID_ARGUMENT.
(RecverProxyActor pid=828) E0427 09:47:00.575308511     912 chttp2_server.cc:1053]      UNKNOWN:Unable to create secure server with credentials of type Ssl {created_time:"2023-04-27T09:47:00.57522855+00:00"}
2023-04-27 09:47:01 INFO barriers.py:388 [alice] --  SendProxy was successfully created.
2023-04-27 09:47:01 INFO barriers.py:463 [alice] --  Try ping ['bob'] at 0 attemp, up to 3600 attemps.
E0427 09:47:01.651073519     667 ssl_transport_security.cc:854] Invalid private key.
E0427 09:47:01.651135439     667 ssl_security_connector.cc:127] Handshaker factory creation failed with TSI_INVALID_ARGUMENT.
E0427 09:47:01.651171086     667 chttp2_connector.cc:267]    Failed to create channel args during subchannel creation: INTERNAL: Failed to create secure subchannel for secure name '<IP_ADDRESS>:8202'; Got args: {grpc.client_channel_factory=0x3ac7440, grpc.default_authority=<IP_ADDRESS>:8202, grpc.internal.channel_credentials=0x442cb70, grpc.internal.subchannel_pool=0x3d12410, grpc.primary_user_agent=grpc-python/1.49.1, grpc.resource_quota=0x3dbba60, grpc.server_uri=dns:///<IP_ADDRESS>:8202}
2023-04-27 09:47:01 INFO barriers.py:449 [alice] --  Failed to ping bob on <IP_ADDRESS>:8202, this could be normal, the possible reason is bob has not yet started.
2023-04-27 09:47:03 INFO barriers.py:463 [alice] --  Try ping ['bob'] at 1 attemp, up to 3600 attemps.
E0427 09:47:03.657698728     667 ssl_transport_security.cc:854] Invalid private key.
E0427 09:47:03.657747488     667 ssl_security_connector.cc:127] Handshaker factory creation failed with TSI_INVALID_ARGUMENT.
......

Hi, @magic-hya As per the logs, there is an "Invalid private key" error displayed. Could you take a look at your private key file and verify that the contents are correct.

I have regenerated the PEM file. Do you necessarily need a non confidential file.

Could you provide an example of the ca_cert, cert, and key files if it's possible?

Please note that you have created an encrypted private key. So have you provided a password when using the key?

Please note that you have created an encrypted private key. So have you provided a password when using the key?

In the API, there are only three parameters (ca_cert, cert, key), and there is no place to enter password configuration. At present, I have modified it to a non confidential method and encountered new problems.
alice logs:
(RecverProxyActor pid=9340) 2023-05-04 10:25:43 INFO barriers.py:114 [alice] --  Successfully start Grpc service with credentials.
2023-05-04 10:25:44 INFO barriers.py:388 [alice] --  SendProxy was successfully created.
2023-05-04 10:25:44 INFO barriers.py:463 [alice] --  Try ping ['bob'] at 0 attemp, up to 3600 attemps.
E0504 10:25:44.692515024    9338 ssl_transport_security.cc:1501] Handshake failed with fatal error SSL_ERROR_SSL: error:0400006b:RSA routines:OPENSSL_internal:BLOCK_TYPE_IS_NOT_01.
2023-05-04 10:25:44 INFO barriers.py:449 [alice] --  Failed to ping bob on bob:8202, this could be normal, the possible reason is bob has not yet started.
(RecverProxyActor pid=9340) E0504 10:25:44.953018747    9428 ssl_transport_security.cc:1501] Handshake failed with fatal error SSL_ERROR_SSL: error:0400006b:RSA routines:OPENSSL_internal:BLOCK_TYPE_IS_NOT_01.
2023-05-04 10:25:46 INFO barriers.py:463 [alice] --  Try ping ['bob'] at 1 attemp, up to 3600 attemps.
E0504 10:25:46.706697478    9182 ssl_transport_security.cc:1501] Handshake failed with fatal error SSL_ERROR_SSL: error:0400006b:RSA routines:OPENSSL_internal:BLOCK_TYPE_IS_NOT_01.
2023-05-04 10:25:46 INFO barriers.py:449 [alice] --  Failed to ping bob on bob:8202, this could be normal, the possible reason is bob has not yet started.
(RecverProxyActor pid=9340) E0504 10:25:46.967328669    9428 ssl_transport_security.cc:1501] Handshake failed with fatal error SSL_ERROR_SSL: error:0400006b:RSA routines:OPENSSL_internal:BLOCK_TYPE_IS_NOT_01.
2023-05-04 10:25:48 INFO barriers.py:463 [alice] --  Try ping ['bob'] at 2 attemp, up to 3600 attemps.
E0504 10:25:48.719060289    9338 ssl_transport_security.cc:1501] Handshake failed with fatal error SSL_ERROR_SSL: error:0400006b:RSA routines:OPENSSL_internal:BLOCK_TYPE_IS_NOT_01.
2023-05-04 10:25:48 INFO barriers.py:449 [alice] --  Failed to ping bob on bob:8202, this could be normal, the possible reason is bob has not yet started.
(RecverProxyActor pid=9340) E0504 10:25:48.982554188    9428 ssl_transport_security.cc:1501] Handshake failed with fatal error SSL_ERROR_SSL: error:0400006b:RSA routines:OPENSSL_internal:BLOCK_TYPE_IS_NOT_01.
2023-05-04 10:25:50 INFO barriers.py:463 [alice] --  Try ping ['bob'] at 3 attemp, up to 3600 attemps.
E0504 10:25:50.732444310    9182 ssl_transport_security.cc:1501] Handshake failed with fatal error SSL_ERROR_SSL: error:0400006b:RSA routines:OPENSSL_internal:BLOCK_TYPE_IS_NOT_01.
2023-05-04 10:25:50 INFO barriers.py:449 [alice] --  Failed to ping bob on bob:8202, this could be normal, the possible reason is bob has not yet started.
(RecverProxyActor pid=9340) E0504 10:25:50.995779893    9428 ssl_transport_security.cc:1501] Handshake failed with fatal error SSL_ERROR_SSL: error:0400006b:RSA routines:OPENSSL_internal:BLOCK_TYPE_IS_NOT_01.
2023-05-04 10:25:52 INFO barriers.py:463 [alice] --  Try ping ['bob'] at 4 attemp, up to 3600 attemps.
E0504 10:25:52.745121344    9339 ssl_transport_security.cc:1501] Handshake failed with fatal error SSL_ERROR_SSL: error:0400006b:RSA routines:OPENSSL_internal:BLOCK_TYPE_IS_NOT_01.
bob log:
2023-05-04 10:18:45 INFO barriers.py:353 [bob] --  RecverProxy was successfully created.
(RecverProxyActor pid=3744) 2023-05-04 10:18:45 INFO barriers.py:114 [bob] --  Successfully start Grpc service with credentials.
2023-05-04 10:18:47 INFO barriers.py:388 [bob] --  SendProxy was successfully created.
2023-05-04 10:18:47 INFO barriers.py:463 [bob] --  Try ping ['alice'] at 0 attemp, up to 3600 attemps.
2023-05-04 10:18:47 INFO barriers.py:449 [bob] --  Failed to ping alice on alice:8202, this could be normal, the possible reason is alice has not yet started.
2023-05-04 10:18:49 INFO barriers.py:463 [bob] --  Try ping ['alice'] at 1 attemp, up to 3600 attemps.
2023-05-04 10:18:49 INFO barriers.py:449 [bob] --  Failed to ping alice on alice:8202, this could be normal, the possible reason is alice has not yet started.
2023-05-04 10:18:51 INFO barriers.py:463 [bob] --  Try ping ['alice'] at 2 attemp, up to 3600 attemps.
2023-05-04 10:18:51 INFO barriers.py:449 [bob] --  Failed to ping alice on alice:8202, this could be normal, the possible reason is alice has not yet started.
2023-05-04 10:18:53 INFO barriers.py:463 [bob] --  Try ping ['alice'] at 3 attemp, up to 3600 attemps.
2023-05-04 10:18:53 INFO barriers.py:449 [bob] --  Failed to ping alice on alice:8202, this could be normal, the possible reason is alice has not yet started.
2023-05-04 10:18:55 INFO barriers.py:463 [bob] --  Try ping ['alice'] at 4 attemp, up to 3600 attemps.
2023-05-04 10:18:55 INFO barriers.py:449 [bob] --  Failed to ping alice on alice:8202, this could be normal, the possible reason is alice has not yet started.
2023-05-04 10:18:57 INFO barriers.py:463 [bob] --  Try ping ['alice'] at 5 attemp, up to 3600 attemps.
2023-05-04 10:18:57 INFO barriers.py:449 [bob] --  Failed to ping alice on alice:8202, this could be normal, the possible reason is alice has not yet started.
2023-05-04 10:18:59 INFO barriers.py:463 [bob] --  Try ping ['alice'] at 6 attemp, up to 3600 attemps.
2023-05-04 10:18:59 INFO barriers.py:449 [bob] --  Failed to ping alice on alice:8202, this could be normal, the possible reason is alice has not yet started.
2023-05-04 10:19:01 INFO barriers.py:463 [bob] --  Try ping ['alice'] at 7 attemp, up to 3600 attemps.
2023-05-04 10:19:01 INFO barriers.py:449 [bob] --  Failed to ping alice on alice:8202, this could be normal, the possible reason is alice has not yet started.
2023-05-04 10:19:03 INFO barriers.py:463 [bob] --  Try ping ['alice'] at 8 attemp, up to 3600 attemps.

Hi

Please note that you have created an encrypted private key. So have you provided a password when using the key?

In the API, there are only three parameters (ca_cert, cert, key), and there is no place to enter password configuration.

SecretFlow uses gRPC for communication between parties, but currently gRPC does not support private keys with password. Apologies for any inconvenience this may cause.
Ref:

https://grpc.io/docs/guides/auth/#with-server-authentication-ssltls-4
https://github.com/grpc/grpc/issues/14216

2023-05-04 10:25:50 INFO barriers.py:449 [alice] -- Failed to ping bob on bob:8202, this could be normal, the possible reason is bob has not yet started.

Please check your cluster_def, as it seems that you may have used 'alice:8202' and 'bob:8202' incorrectly as the addresses of alice and bob.

The problem has been solved, Alice and Bob's private keys cannot carry a password, and CA private keys cannot carry a password either.


Update README.md

Update to the final(?) version of the copyright
Description
Please include a summary of the change and which issue is fixed or which feature is added.

[ ] Issue 1 fixed
[ ] Issue 2 fixed
[ ] Feature 1 added
[ ] Feature 2 added

Fixes # (issue)
How to test this?
Please describe the tests that you ran to verify your changes. Provide instructions so we can reproduce if there is no integration test added with this PR. Please also list any relevant details for your test configuration
cmake ..
make -j8
nrnivmodl mod
./bin/nrnivmodl-core mod
./x86_64/special script.py
./x86_64/special-core --tstop=10 --datpath=coredat

Test System

OS: [e.g. Ubuntu 20.04]
Compiler: [e.g. PGI 20.9]
Version: [e.g. master branch]
Backend: [e.g. CPU]

Use certain branches for the SimulationStack CI
CI_BRANCHES:NEURON_BRANCH=master,

Codecov Report

Merging #536 (20e0b96) into master (35ea320) will not change coverage.
The diff coverage is n/a.

@@           Coverage Diff           @@
##           master     #536   +/-   ##
=======================================
  Coverage   56.46%   56.46%
=======================================
  Files          98       98
  Lines        8001     8001
=======================================
  Hits         4518     4518
  Misses       3483     3483

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update 35ea320...20e0b96. Read the comment docs.

please test this


optimize fallback item-based recommender

Codecov Report

Merging #350 (33dfa26) into master (f824565) will increase coverage by 0.11%.
The diff coverage is 100.00%.

@@            Coverage Diff             @@
##           master     #350      +/-   ##
==========================================
+ Coverage   72.71%   72.83%   +0.11%
==========================================
  Files          44       44
  Lines        9398     9415      +17
==========================================
+ Hits         6834     6857      +23
+ Misses       1826     1820       -6
  Partials      738      738

Impacted Files
Coverage Δ

config/config.go
91.44% <100.00%> (+0.17%)
:arrow_up:

master/tasks.go
53.70% <100.00%> (ø)

server/rest.go
66.49% <100.00%> (+0.11%)
:arrow_up:

storage/cache/database.go
87.50% <100.00%> (+16.44%)
:arrow_up:

storage/data/database.go
73.91% <100.00%> (+5.49%)
:arrow_up:

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update f824565...33dfa26. Read the comment docs.


elf parsing

Tested this elf with HSA it passes test_dilated_conv_transpose2d. Should be something wrong with queue setting I think.

Ahh, more hidden queue params.

Should be good, gpt2 runs fine with this

It looks like we don’t need it. We can use header which is in an elf. We need this  https://github.com/ROCm/ROCR-Runtime/blob/master/src/loader/AMDHSAKernelDescriptor.h#L199. I will bring it once clang2py is fixed. This header is c++ and adding c++ flag to haw’s clang2py break output (the same thing why I moved sdma regs into a different file for now)


Only generate certs not provided by the user

What this PR does / why we need it: Checks if the user has provided certs and only generate certs if some certs or all certs are missing. Only use the generated cert/key pair for certs not provided by the user.
Which issue this PR fixes (optional, in fixes #<issue number>(, fixes #<issue_number>, ...) format, will close that issue when PR gets merged): fixes #
Special notes for your reviewer:
Release note:

MERGE THIS WITH PR #1929 (they are complimentary)

This PR depends upon #1929


ARROW-8707: [CI] Docker push fails because of wrong dockerhub credentials

fix rather bug copy-paste error
adjust command sequence to pull all images before building

The CI errors are unrelated.


[1.12]Item pipe  config"TransporterPullAmount" is broken

Because of the individual needs, I try to change the configuration file for the item pipe

I:UltimateTransporterPullAmount=320 I:UltimateTransporterSpeed=50

But the pump rate still is  the default
Version (make sure you are on the latest version before reporting):
**Forge:1.12 latest
**Mekanism:latest
**Other relevant version:some isseus in 1.11

Can confirm this is affecting 1.12 (haven't tested other versions)
Analysis:
Tier#loadConfig isn't called on first load, only on world left.
This causes the config sync Tier#readConfig and Tier#writeConfig syncing the default values.
(SingelPlayer) Try and join a world, old default values. Rejoin world, new values apply.
Also setting an value of >64 for pullamount has no result, as it looks like it only looks for 1 full stack to transport.


PS4 controller can cause ES automatic reboot on 353vs 02092023

I use rg353VS and PS4 controller via bluetooth，when update to 02092023 . On ES main UI ，as soon as the PS4 controller is connected via  bluetooth ,  the ES will automatically reboot , and the indicator light of the PS4 controller will turn off.
If playing game , connect the PS4 controller , 353vs won't reboot , but the indicator light of the PS4 controller will turn on than off，as deactived .

Does the entire system reboot or is it just emulationstation that crashes and restarts?

Nevermind, i see the issue happening with my 8bitdo Lite2 bluetooth controller as well.

Fix will be available shortly

Fix has been pushed with today's update.

Fix has been pushed with today's update.

awesome！THX


Add ability for user to create unknown engagements

API PR: https://github.com/SeedCompany/cord-api-v3/pull/2801
Closes https://github.com/SeedCompany/cord-field/issues/1121

This lived to the end of its lifetime and died


Update the licensing information in the documentation

This PR updates the documentation regarding the DPF licensing for 2024.2.pre0.

@PProfizi As a generic comment, I think that the general licensing doc is a bit convoluted. We have it in 2 places:

The Getting started with DPF Server section, with all the License terms and increments
The new License page.

Do you think we could merge both in one page? (that way if a user wants to know about licensing they don't need to go back-and-forth between 2 pages)

@PProfizi As a generic comment, I think that the general licensing doc is a bit convoluted. We have it in 2 places:

The Getting started with DPF Server section, with all the License terms and increments
The new License page.

Do you think we could merge both in one page? (that way if a user wants to know about licensing they don't need to go back-and-forth between 2 pages)

I agree that information is a bit all over the place. Still, the idea was to have this new page dedicated to licensing, whereas the Getting Started with DPF Server is still useful as a guideline on installing DPF as a standalone. I planned on moving it to the Getting started section though. I'll see how to this this nicer.

Thanks @rafacanton, I updated the versions as you remarked.
I indeed hope this will be clearer for the end user.
I will from now on be making a clear distinction between the getting started (everything related to installation and running a script, as well as very basic usage) and the user guide (where we describe features and in-depth usage)

Thanks @JennaPaikowsky! I'll implement the changes in the next PR.


HMAC doesn't protect headers

The MAC seems to only protect application data, and not the headers of the packet.

This would break the wire protocol compatibility so we can't change it now, but it definitely needs to be addressed for CSP 2.0.

Fixed in 2.0


Merge security code from UCLA

Sorry for the late email. I promised I will send an email to describe what I have done for hydra security. Here's the description of my code:
1/ envelope: https://github.com/tianyuan129/trust-info-base. This is our group's latest trust schema API at last ICN. I used this to secure SVS and hydra.
2/ ndn-python-svs: https://github.com/tianyuan129/ndn-python-svs. This is my fork of Justins's python-svs.
3/ hydra: https://github.com/tianyuan129/ndn-hydra. This is my fork of hydra. Not only about security, but also I fixed some bugs in the master branch. In the examples I have a python script to bootstrap nodes (i.e., trust anchor, trust schema, certificate).
I know how to run my code directly on hosts. Should I do it on fabric hosts?
Best,
Tianyuan

@tianyuan129 I'm trying to publish the svs package in PyPi, but it has a dependency on your envelope package. Could you please publish this into PyPi so we can use it?
PyPi blocks the upload of packages that depend on other packages that are not in PyPi.

Hope my part for this issue already resolved.

Yes, If you can review the PR one more time would be great, I added some changes this morning.


Add git authentication to support the private repo case

Example usage:
bashbrew --library mylibrary --git-username MyGithubUser --git-password ghp_123456789 --debug --cache /tmp/bashbrew_cache --namespace docker-images.mycompany.com/myalpine build --all --pull always

Thanks for the contribution!
I think rather than adding explicit (manual) support for HTTP authentication to all our Git calls, I'd rather find out / figure out whether go-git supports https://git-scm.com/docs/gitcredentials properly so we can avoid having to specify this everywhere (especially since it's a feature we won't be using, so it won't be getting very much testing and we'll be likely to remove it if it ever has issues or requires changes).

Thanks for the contribution!
I think rather than adding explicit (manual) support for HTTP authentication to all our Git calls, I'd rather find out / figure out whether go-git supports https://git-scm.com/docs/gitcredentials properly so we can avoid having to specify this everywhere (especially since it's a feature we won't be using, so it won't be getting very much testing and we'll be likely to remove it if it ever has issues or requires changes).

If I correctly understand they have an open issue on that https://github.com/src-d/go-git/issues/1101 so it is a blocker/dependency to use go-git. There is an example provided but that is not a part of the go-git.

It looks like someone is currently working on adding git credentials support: https://github.com/go-git/go-git/issues/490. So, we should wait until that is available.
(also, we shouldn't be pulling in any dependencies from src-d/go-git since it is an abandoned and archived repo and development has moved to go-git/go-git)


RELEASE 19.2.4

When version 19.2.4 is going to be released

I am working on it, when the framework builds are green, you can click the watch releases button to get notified

more details on the current status. There are are huge delays due to the way the CI pipelines are structured. Previously the test report time could take up to 40 min. As you can understand in some cases where the tests fail on azure only and not locally having such reports times made it impossible to find a way to resolve the problem.
So we know habe 1.5 min report time which gives me the power to resolve any remote case in reasonable times.
Apologies to all for the delays however as a maintainer this is 1st priority and not releasing a framework that do not even the tests pass and then run around fixing small or big cases from users.

further details:
for having a stable framework I switched to https://fsprojects.github.io/Paket/ which us a Nuget alternative that allows finer dependency control. In addition to the 2 EasyTested XafApplicationss (win/web) which consume our own packages and tested on each build I manage to minimize version issues. This work is ready for the DevExpress.XAF repo only but the main will follow later.
As my test report time is now only 1.5min (not have time for a bite) I am working to resolve further remote only issues like dead locks.
As long as the builds are green with stable/fast pipelines we can have a healthy framework with short support times and new implementations else you can imagine the alternative.

19.2.402.0 is now out thanks for the understanding.
Don't miss the new published Compatibility matrix
https://github.com/eXpandFramework/DevExpress.XAF#compatibility-matrix

After upgrade to 19.2.402.0, build with error : "The command "powershell.exe –NonInteractive –ExecutionPolicy Unrestricted –command "& { &.....' '' ''} " " exited with code 1."
It happended at line 4 of Xpand.VersionConverter.targets.
how to fix ? I run VS2017 in Admin.
Truong.

I got the same error :
Error		+     throw "Check output warning message"	Brokero.Master.Module
Error		Au caractère C:\Users\isata\Documents\PME	Brokero.Master.Module
Error		+ CategoryInfo          : OperationStopped: (Check output warning message:String) [], RuntimeException	Brokero.Master.Module
Error		+     ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~	Brokero.Master.Module
Error		Check output warning message	Brokero.Master.Module
Error			Brokero.Master.Module
Error		+ FullyQualifiedErrorId : Check output warning message	Brokero.Master.Module
Error		Projects\Brokero.Master\packages\Xpand.VersionConverter.1.1.7\build\Xpand.VersionConverter.ps1:99 : 5	Brokero.Master.Module
Error		The command "powershell.exe –NonInteractive –ExecutionPolicy Unrestricted –command "& { &'C:\Users\isata\Documents\PME Projects\Brokero.Master\packages\Xpand.VersionConverter.1.1.7\build\Xpand.VersionConverter.ps1' 'C:\Users\isata\Documents\PME Projects\Brokero.Master\Brokero.Master.Module\Brokero.Master.Module.csproj' 'C:\Users\isata\Documents\PME Projects\Brokero.Master\Brokero.Master.Module\bin\Release' '' ''} " " exited with code 1.	Brokero.Master.Module

I wont' build so unable to use it. Any idea Tolis ?

i would start by cleanign the nuget cache, if the problem persists posts the actual message from your VS output window

"Check output warning message"

Did cleaning cache.
the full stack :
Exception:
1>  ----------
1>  ForEach-Object : Le terme «ConvertTo-FramedText» n'est pas reconnu comme nom d'applet de commande, fonction, fichier
1>  de script ou programme exécutable. Vérifiez l'orthographe du nom, ou si un chemin d'accès existe, vérifiez que le
1>  chemin d'accès est correct et réessayez.
1>  Au caractère C:\Users\isata\Documents\PME
1>  Projects\Brokero.Master\packages\Xpand.VersionConverter.1.1.7\build\Write-HostFormatted.ps1:70 : 21
1>  +             $Object|ForEach-Object{
1>  +                     ~~~~~~~~~~~~~~~
1>      + CategoryInfo          : ObjectNotFound: (ConvertTo-FramedText:String) [ForEach-Object], CommandNotFoundException
1>      + FullyQualifiedErrorId : CommandNotFoundException,Microsoft.PowerShell.Commands.ForEachObjectCommand
1>
1>  ----------------
1>  InvokcationInfo:
1>  ----------------
1>
1>
1>  MyCommand             : ForEach-Object
1>  BoundParameters       : {}
1>  UnboundArguments      : {}
1>  ScriptLineNumber      : 70
1>  OffsetInLine          : 21
1>  HistoryId             : 1
1>  ScriptName            : C:\Users\isata\Documents\PME
1>                          Projects\Brokero.Master\packages\Xpand.VersionConverter.1.1.7\build\Write-HostFormatted.ps1
1>  Line                  :             $Object|ForEach-Object{
1>
1>  PositionMessage       : Au caractère C:\Users\isata\Documents\PME
1>                          Projects\Brokero.Master\packages\Xpand.VersionConverter.1.1.7\build\Write-HostFormatted.ps1:70
1>                          : 21
1>                          +             $Object|ForEach-Object{
1>                          +                     ~~~~~~~~~~~~~~~
1>  PSScriptRoot          : C:\Users\isata\Documents\PME
1>                          Projects\Brokero.Master\packages\Xpand.VersionConverter.1.1.7\build
1>  PSCommandPath         : C:\Users\isata\Documents\PME
1>                          Projects\Brokero.Master\packages\Xpand.VersionConverter.1.1.7\build\Write-HostFormatted.ps1
1>  InvocationName        : ForEach-Object
1>  PipelineLength        : 0
1>  PipelinePosition      : 0
1>  ExpectingInput        : False
1>  CommandOrigin         : Internal
1>  DisplayScriptPosition :
1>
1>  AVERTISSEMENT :
1>
1>  Edit C:\Users\isata\Documents\PME Projects\Brokero.Master\Brokero.Master.Module\Brokero.Master.Module.csproj and enable
1>   verbose messaging by adding Continue. Rebuild the
1>  project and send the output to support.
1>C:\Users\isata\Documents\PME Projects\Brokero.Master\packages\Xpand.VersionConverter.1.1.7\build\Xpand.VersionConverter.targets(4,9): error : Check output warning message
1>C:\Users\isata\Documents\PME Projects\Brokero.Master\packages\Xpand.VersionConverter.1.1.7\build\Xpand.VersionConverter.targets(4,9): error : Au caractère C:\Users\isata\Documents\PME
1>C:\Users\isata\Documents\PME Projects\Brokero.Master\packages\Xpand.VersionConverter.1.1.7\build\Xpand.VersionConverter.targets(4,9): error : Projects\Brokero.Master\packages\Xpand.VersionConverter.1.1.7\build\Xpand.VersionConverter.ps1:99 : 5
1>C:\Users\isata\Documents\PME Projects\Brokero.Master\packages\Xpand.VersionConverter.1.1.7\build\Xpand.VersionConverter.targets(4,9): error : +     throw "Check output warning message"
1>C:\Users\isata\Documents\PME Projects\Brokero.Master\packages\Xpand.VersionConverter.1.1.7\build\Xpand.VersionConverter.targets(4,9): error : +     ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
1>C:\Users\isata\Documents\PME Projects\Brokero.Master\packages\Xpand.VersionConverter.1.1.7\build\Xpand.VersionConverter.targets(4,9): error :     + CategoryInfo          : OperationStopped: (Check output warning message:String) [], RuntimeException
1>C:\Users\isata\Documents\PME Projects\Brokero.Master\packages\Xpand.VersionConverter.1.1.7\build\Xpand.VersionConverter.targets(4,9): error :     + FullyQualifiedErrorId : Check output warning message
1>C:\Users\isata\Documents\PME Projects\Brokero.Master\packages\Xpand.VersionConverter.1.1.7\build\Xpand.VersionConverter.targets(4,9): error :
1>C:\Users\isata\Documents\PME Projects\Brokero.Master\packages\Xpand.VersionConverter.1.1.7\build\Xpand.VersionConverter.targets(4,9): error MSB3073: The command "powershell.exe –NonInteractive –ExecutionPolicy Unrestricted –command "& { &'C:\Users\isata\Documents\PME Projects\Brokero.Master\packages\Xpand.VersionConverter.1.1.7\build\Xpand.VersionConverter.ps1' 'C:\Users\isata\Documents\PME Projects\Brokero.Master\Brokero.Master.Module\Brokero.Master.Module.csproj' 'C:\Users\isata\Documents\PME Projects\Brokero.Master\Brokero.Master.Module\bin\Debug' '' ''} " " exited with code 1.
========== Build: 0 succeeded, 1 failed, 0 up-to-date, 0 skipped ==========

it looks like its looking for something that does not find

1> ForEach-Object : Le terme «ConvertTo-FramedText» n'est pas reconnu comme nom d'applet de commande, fonction, fichier
1> de script ou programme exécutable. Vérifiez l'orthographe du nom, ou si un chemin d'accès existe, vérifiez que le
what is "ConvertTo-FramedText" ?

hmm yes let me look the source as this is very strange the ssme VersionCOnverter runs on Azure downloading source from github so nothing comes from my local machine so somethingf is forgotten

i see the difference apparently is that your machine does not have the XpandPwsh PS module installed. This is a bug of course but for now u can in a PS admin prompt
Install-Module XpandPwsh

much better Thanks !
Still got my fody exception.
1>MSBUILD : error : Fody: Could not inject EventInvoker method on type 'Brokero.Master.Module.BO.Settings.PME_ExcelSplitter'. It is possible you are inheriting from a base class and have not correctly set 'EventInvokerNames' or you are using a explicit PropertyChanged event and the event field is not visible to this instance. Either correct 'EventInvokerNames' or implement your own EventInvoker on this class. If you want to suppress this place a [DoNotNotifyAttribute] on Brokero.Master.Module.BO.Settings.PME_ExcelSplitter.
========== Build: 0 succeeded, 1 failed, 0 up-to-date, 0 skipped ==========
Removed them and it builds without error.

At some point u got that package in your project perhaps from an eXpand wrong package dependency, this dependency should not be there please remove it Fody is a design time only package and should not be install without our packages. If this happend report again please

Still not a planning for the ExcelImporter as standalone ?

somthing is wrong in the nuget tolis. When I install ExcelImporter in the module it installs the web dll:

if u watch this repo I am sure that u agree with me with the way that I prioritize the tasks. So I am now finishing the current CI works that regard build/testing/distribution having those tools in a good shape it is very easy to write catchy modules like ExcelImporter in XAF. Not having a good CI and support you spent your time in vain attempting to support vertical makert modules.

well i guess you're right. I'm just thinnking that managing these modules in separate module might be easier to support. ExpandFramework is huge and i'm pretty sure that issues would less if it is splitted in smaller modules. But of course that theorical.

this really means 2 CI lines to support right? each one with its own problems? sounds like I need to employ people which is also actually ion my plans :)

Well i was more imagining in the futur that DevExpress.XAF will be covering what ExpandFramework covers currently but by small modules. And people using ExpandFramework will have to migrate.
At the end, in some point we have to migrate in order to follow. If DevExpress.XAF covers what ExpandFramework is currently offering in a better and more modulable way I do not see any incovenience.  But again that is only my point of view.

We can easily open a issue as suvey and invite main users or contributors to vote on it.

Well, XAF team has its own mindset and level of implementation, I do not see this happening, small stuff yes we steal ideas from each other

vote on what?

Still not a planning for the ExcelImporter as standalone ?

it may look that I can do magic due to the experience I have but maturing a module needs time and mine is split around. The best thing I can do is to offer dedicated services if someone really needs something now. Check my new 50% discount tier (before the last one) in my sponsors page and decide if this shared model can work for you.
https://github.com/sponsors/apobekiaris

https://github.com/sponsors/apobekiaris

OK lets discuss this tomorrow ! it's kinda interesting for me.

Closing issue for age. Feel free to reopen it at any time.
.Thank you for your contribution.


Fix index.sh script: no need to remove moved file and Update Python SDK docs: add function examples.

@nghiant2710 LGTM

@nghiant2710 you should merge your PRs :p

merged! :)


Improve Jackson ObjectMapper customizations

Use Jackson2ObjectMapperBuilderCustomizer (https://www.baeldung.com/spring-boot-customize-jackson-objectmapper#2-jackson2objectmapperbuildercustomizer ) and / or Jackson2ObjectMapperBuilder (
https://www.baeldung.com/spring-boot-customize-jackson-objectmapper#2-jackson2objectmapperbuilder ) instead of new ObjectMapper().
Also see this video for more details on how to use the Jackson2ObjectMapperBuilder: https://www.youtube.com/watch?v=BhiF6e24l5k&t=594s

Changed JacksonTestConfiguration to use Jackson2ObjectMapperBuilderCustomizer.
JacksonTestConfiguration is now imported to BookRestControllerIntegrationTest to see the effect. The effect cn only be seen for test usig MockMvc. For sests using RestAssured JSON is always printed out in pretty print style.


Dynamically and conditionally selecting target url

Think that I'm creating an application;

Forwards /api/service1/... -> https://domain1.com/api/service1/...
Forwards /api/service2/... -> https://domain1.com/api/service2/...

And does nothing (does not forward) for other URLs (example: /api/service3).
Thus, we can forward some URLs but also use MVC framework to provide other services in our application.
So, we need to a configuration option: a mapping or URLs

Duplicate to #10 (and already commited as #46)

@mkosieradzki  Is there a nuget package available yet, that contains these changes?

Not to my knowledge. @mikaelm12 , @davidfowl any changes for some preview release?

This issue was moved to aspnet/Home#2490


Automatically select probe

If only a single probe is connected, it might make sense to automatically select it for the cli
command.

Still an open issue for the cli.


Feature request: Option for square icons

Internal app icons are square just like the ones used in the official library. If possible I would love to see an option that lets you use square icons instead of the rectangular ones. This way you can fit more icons on a small space and it improves your overview of the apps.

I've fixed this with v0.9.1: The icons now maintain their correct aspect ratio.


Header

[ ] Basic header
[ ] Site name
[ ] Dynamic content from data file
[ ] Include
[ ] No gov banner

Instead of include, it will be a front matter option so that it shows up in the right place in the default layout.


ParseError with array-of-objects type

let x: {}[]

is a ParseError currently.

Should be fixed in 0.6.66. Thanks for the report!


dub always uses /tmp/dub_platform_probe.d to probe the system

Other users may create /tmp/dub_platform_probe.d with permissions that do not allow dub to open it, so dub fails attempting to determine properties of the system.
Dub should either:

Fall back to another path
Choose a pseudo-random path to avoid the chance of collisions

This path is used in 2 locations:

dub/compilers/compiler.d
dub/compilers/gdc.d

A random tempfile would do just fine.

There is also https://github.com/D-Programming-Language/dub/issues/482.


ImageProcessor.Web and DoS

I see it a bit problematic, that ImageProcessor.Web accepts any combination of querystrings.
Nothing would prevent an attacker to request thousands of different crops/sizes.
Maby encrypting the querystring when serverside url generation happens would prevent this?

@JimBobSquarePants
I have looked at the documentation regarding limiting resizing configs (i.e. limit to 5000x5000) but I'm still concerned. If someone wanted to simply write a scraper, get all of a sites images and then per image and request height x width for all of a sites images, the site will be taxed (during crop creation) and the disk could easily be filled up causing a server crash. Also it could create financial liability for users who have auto-scaled resources (disk and CPU).
Is there any way to restrict crops to exact dimension combinations? i.e. 100x200 and 400x600 only?
If a setup is restricted to even 100x100, a single image could generate 10,000 images in the disk cache. i.e. 1x100, 2x100... 100x100.
Concerned, but otherwise very happy with ImageProcessor.

It looks like maybe resizing config doesn't apply to crops :) So I guess same question still though.

Hi Kevin,
Good question. I dunno how this disappeared over time but there is actually a setting that can be applied to ImageProcessor.Web to restrict the system to a particular set of dimensions when resizing.
If you add a setting with the key RestrictTo to the resize configuration you can do just this.
  <setting key="RestrictTo" value="width=300&height=150,width=500&height=250"/>

Would restrict you to two separate sets of dimensions.
The code that parses this is here.
https://github.com/JimBobSquarePants/ImageProcessor/blob/4240a638695673faa62e825b14cc83b64fd2d6ea/src/ImageProcessor.Web/Processors/Resize.cs#L102

Wonderful, I'll give it a try today thank you.

Confirmed it works. Thank you.

@JimBobSquarePants
I've done more testing and I'm afraid I might have bad news.
Give this scenario:

Allow crops to be 100x100 in the config.

When requesting any image at 100x100, a crop is made and returned.
When the same image is requested but at say 100x101, the native resolution is returned, but a crop is still generated thus the root issue is still present. Requesting images of any size will still fill up a hard drive eventually if an attacker desired to.
I'm guessing this is true because the url is hashed (I haven't look thru code yet) and still creates the crop despite not actually serving it.
What is desired is the crop just simply doesn't get created when it is not explicitly allowed.
Any chance we can re-open this issue?

I'm gonna try to send you a PR if you don't mind.

@JimBobSquarePants, I was hoping to send you a PR but it the solution seems more difficult that I had hoped.
What needs to happen (I think) is that if one of the modules in the processing pipeline detects an issue, it should be able set a flag to avoid the eventual caching process.
What appears to be happening is the resizer is detecting an invalid crop but still allowing the cache to occur.
Thoughts?

I really don't think that it is the responsibility of ImageProcessor to protect you from DoS attacks. There's so many attack vectors on any webpage that the only real way to protect yourself would be through firewalling.
That said we should prevent the system from caching if we can. Maybe passing an out parameter on AutoProcess with the count of matching processors and altering the Resize method to check against restrictions sooner before returning its sort order would do the trick?
If the processor match count is zero, we don't cache.
https://github.com/JimBobSquarePants/ImageProcessor/blob/c957771d2076a988b3334aafce152ab86e6dafac/src/ImageProcessor.Web/ImageFactoryExtensions.cs#L41
https://github.com/JimBobSquarePants/ImageProcessor/blob/c957771d2076a988b3334aafce152ab86e6dafac/src/ImageProcessor.Web/Processors/Resize.cs#L101

Will throw 403 in next release.

Thanks James for looking at this again.
I've been thinking about how to overcome this a bit. Throwing an exception is probably a good idea.
Rather than return it to the browser, can ImageProcessor catch the exception during pipeline processing and just return the native image (thus preventing the cache and further processing)?
Reason for this is due to editors used by Umbraco and the like.
In an RTE images can be resized to just about anything.
So given a website that is restricted to only crop 300x500, 200x200; the RTE might ask for an image cropped to 250x200 (and some with weird rounded numbers). Rather than fail (by letting the 403 bubble up to the browser), I propose that the image is simply returned as the native size so that it fails gracefully.
Pseudo code:
//catch any module errors thrown
try
{
//resizer could throw 403
 var image = ProcessImagePipeline()

//we made it here without any exceptions
image.Cache()
)
catch (Exception ex)
{
  return native image
}

Have a good day :)

Do you fancy giving something like that a go? I'm a bit wary myself but if you can get a working version though that'd be great. It'd have to be very soon, I've got a release pending. :)

Yea no worries I'll see what I can hack up.

That'd be ace. :+1: Just make sure you're working against the v2 branch so you have the latest code.

@JimBobSquarePants Well I think I can properly indicate to the various structures that a cache should not occur, but I'm reading through the HttpModule and it (appears) that all images must be served from the cache. If that's the case then I'm going to have to de-mystify :) the cache a bit when I have more time myself.
Ideally when an illegal operation is detected, the image should just be served without further processing without any caching involved.
Long story short, don't wait the release for me :)

Well... We have a stream so we could serve that.
https://github.com/JimBobSquarePants/ImageProcessor/blob/600169d5e1fa10f71273a1cfe7e84fe88b01626b/src/ImageProcessor.Web/HttpModules/ImageProcessingModule.cs#L540
I'll put some thought to it anyway but yeah, I'll probably ship in  the next couple of days.

I'll recharge my brain this weekend and take another look next week.

Ace thanks!

Hi guys, reviving this conversation a little as I just need to get (and provide) some feedback here.
I've been aware of the issue and have had some discussion with regards to ways to mitigate the issue but there is unfortunately not perfect way  especially since people use ImageProcessor in many different ways and in ways we don't know.
@JimBobSquarePants you mentioned that you can restrict the plugins and the image dimensions above.

Can I just confirm that this is possible today with the latest ImageProcessor version?
I'm assuming that based on those recent commits that with the ImageProcessor options available that it is possible to mitigate any attacks in which hackers may attempt to just fill up the hard disk with randomly sized images with a various assortment of filters/plugins applied?

I'd love your feedback on this idea though since as far as I can see this is really the only way to mitigate this issue entirely:

We would require appending an anti-forgery token as part of the image request query string
This anti-forgery token is created on the server side when creating the image URL - this must be done with a UrlHelper instance (or whatever, but it's based on server side logic)
The anti-forgery token is then verified on the server side before allowing the image to be viewed.

Here's the problems with this:

LOTS of developers just create an image processor image URL using strings and not any server side helper method
LOTS of packages do the same thing
Therefore enforcing this token will break tons of sites

Moving forward though what do you guys think of this? I think it would be possible to build this mechanism into ImageProcessor in a flexible way so that it can be 'pluggable'. What I'm unsure about though is what other issues this might cause?
Cheers!

Hey @Shazwazza
Yeah you can still turn off individual processors. To do so it is a case of installing the configuration package and removing individual plugins from processing.config
For example this config restricts processing to what I would call the essential collection. It also limits the maximum size to 1920px in either dimension
<processing preserveExifMetaData="false" interceptAllRequests="false">
  <presets>
  </presets>
  <!-- List of plugins. -->
  <plugins>
    <plugin name="AutoRotate" type="ImageProcessor.Web.Processors.AutoRotate, ImageProcessor.Web"/>
    <plugin name="Quality" type="ImageProcessor.Web.Processors.Quality, ImageProcessor.Web"/>
    <plugin name="Resize" type="ImageProcessor.Web.Processors.Resize, ImageProcessor.Web">
      <settings>
        <setting key="MaxWidth" value="1920"/>
        <setting key="MaxHeight" value="1920"/>
      </settings>
    </plugin>
  </plugins>
</processing>

There's also an additional setting you can use for the Resize plugin to restrict dimension to specific dimensions.
<setting key="RestrictTo" value="width=300&height=500,width=150&height=250"/>

I quite like the idea of the addition of an anti-forgery token. It's is something that we could optionally enable with a method helper for generating the tokens. I'd probably add that to the main product though rather than a plugin as an increasing plugin count makes it harder for me to maintain. Wil need community involvement to get it added though, my plate is quite full.
I've never thought myself about using ImageProcessingModule.OnProcessQuerystring. That's a neat idea!
Cheers
James

@JimBobSquarePants I'm absolutely happy to assist with this one, i just wanted to get an idea of how much we can limit functionality OOTB right now. I'll play around with this a little, my main concern (along with various other community members) is the ability to continually fill up the disk as part of an 'attack'. I'll get you a PR soon and can discuss there. Which branch would I target for this ?

@Shazwazza Ace! Target the Framework branch please, that's the default branch for the current (hopefully soonish legacy version). Feel free to have a good dig around in there. If you spot anything silly give me a shout. I've been hearing some worrying reports regarding performance recently.

@Shazwazza @JimBobSquarePants FYI, I once started working on a package for Umbraco which 100% locked it down unfortunately I haven't had the time to finish it. Anyhow it went like this:
Added a parameter to GetCropUrl (preset:true) which generated the IP.Web url and a guid, then it created a preset element in processing.config (if it didn't exist already) using the guid as the name and the encoded querystring as the value, returned /media/1000/thing.jpg?preset=generatedguid
(I also was caching the collection to memory for performance.)
Set ImageProcessor.Web to only accept presets (I can't remember how you do this, but I'm 90% sure you can).
Obviously this is a Umbraco only solution and would require that all ImageProcessor url requests come through the GetCropUrl method (which they can). But I would imagine a similar helper method could potentially be part of ImageProcessor.Web if this approach has legs.
This is all possible with ImageProcessor v2 right now.
It was actually a really good package idea, if only there were more hours in the day!

@Jeavon Hi Jeavon,
it would really help if we could switch on the setting to only accept presets but I have no clue where I can find this. Any idea since your last post?
Thanks, Jeffrey

@JeffreyPerplex  Presets are set in the config, there's a demo one specified in there.
http://imageprocessor.org/imageprocessor-web/configuration/#processingconfig

@JimBobSquarePants Thanks for the reply! Is is possible to use the RestrictTo on all plugins, such as Quality and Alpha? Or is only possible for the resize plugin?

@JeffreyPerplex Happy to help :smile:
No, I'm afraid not. It's a pretty good idea though!

@JimBobSquarePants I guess a setting for ImageProcessor.Web to only accept presets was a figment of my imagination. Is it feasible to add?

@Jeavon Aye probably. I'll add it to my TODO list.

Reopening this issue. Following a conversation with @JeffreyPerplex we're going to have a look at adding the ability to restrict all plugins to particular values.

HI all, I've created a PR here which will give you max flexibility for securing these requests based on an event:
https://github.com/JimBobSquarePants/ImageProcessor/pull/381
Using this you could just cancel the request if the parameters don't match what you want. An example (NOTE: I put no thought into this example!) :
ImageProcessingModule.ValidatingRequest += (sender, args) =>
{
    if (!string.IsNullOrWhiteSpace(args.QueryString))
    {
        //Don't support alpha whatsoever
        var queryCollection = HttpUtility.ParseQueryString(args.QueryString);
        if (queryCollection.AllKeys.Contains("alpha"))
        {
            args.Cancel = true;
            return;
        }

        //If there's a crop parameter, force it to always just be a specific value
        if (queryCollection.AllKeys.Contains("crop"))
        {
            queryCollection["crop"] = "10,10,10,10";
            //this performs the reverse of ParseQueryString since the result of ParseQueryString
            // is actually an instance of System.Web.HttpValueCollection
            args.QueryString = queryCollection.ToString();
        }
    }
};

Thanks @Shazwazza for this I think it's a great enhancement.

Hi guys,
I was thinking to add settings to all plugins in the processing.config. Especially adding minvalue, maxvalue, default and/or allowedvalues.
Minvalue: Restrict the minimumvalue for this plugin or setting in a plugin. Applicable if the plugin expects a integer or decimal.
Maxvalue: Restrict the maximumvalue for this plugin or setting in a plugin. Applicable if the plugin expects a integer or decimal.
AllowedValues: A comma seperated string of values that are allowed. If empty or not specified it allows everything.
Default: If a default value is available it is specified here. For example in GaussianBlur the Sigma-querystring is not mandatory. In the config file you can specify the default setting that is used.
Furthermore I've added the option "AllowPresetsOny" in the preset setting. If implemented I would recommend every new site to use this option. Furthermore I would recommend turning each plugin off by default and let a developer who's using it turn individual plugins on. This is a defensive approach to the DOS-problem and is probably the best option.
The whole processing.config can look something like this. (It became bit messy due to my comments)
`

`
With this processing.config you can lock down ImageProcessor as far as you want.
Looking forward to your reaction,
Jeffrey

Sorry @JeffreyPerplex just got onto this. From a first glance I think it' going to add a lot of complexity parsing each set of values for each plugin. I'll have a good think about it.

Hi @JimBobSquarePants, I know it will have impact, but I think the benefits of security definitely outweigh the cons. As said, the possibility of bringing down a site is way too big right now. But I definitely agree that his a some impact on your code. Give a good think, and I'll hear from you :)!

I've been reflecting further on this and I cannot make too may changes without a major version number (Which I cannot do as it breaks the upgrade path for many libraries).
Now that we have the ability to intercept and block calls, as a compromise I think for this version I shall enable only the following processors as default:

AutoRotate
BackgroundColor
Crop (I might be able to ditch this @Shazwazza does Umbraco use it or just ResizeMode.Crop?)
Quality
Resize

That dramatically limits the scope of attack, any additional processors can only be enabled by installing the config and specifically turning them on.
Thoughts?

Hrm, to be honest I'm not sure ;) I'll have to ask jeavon I think, will ping him on twitter

Yes we do use the crop processor in Umbraco

Cheers. That stays then...

Ok... So this is the new pipeline.
Processors are locked down to the following by default:

AutoRotate
BackgroundColor
Crop
Format
Quality
Resize

Early in the request we have the ValidatingRequest event handler we can tap into to add custom restrictions and sanitize the request. That can cancel the request.
If the request passes, anything that makes an image request containing a querystring that does not match the above processors will throw a 400 exception. InterceptAll mode will still let requests without querystring parameters through.
Installing the config package will not enable additional processors. You have to manually enable each one by adding the enable="true" attribute to the processor configuration.
If you think that is ok then I am ready to ship once I finish writing documentation. @Shazwazza @Jeavon I want to check that my 400 exception is not going to cause trouble in Umbraco, are there image requests made that contain a single querystring parameter that is not part of my list? A timestamp perhaps?

Not sure off the top of my head, @Jeavon  would certainly know better. I can have a look in our code this week if he's not sure

Thanks!

@JimBobSquarePants so something like /images/mybg.jpg?v=0.0.1?

@Jeavon yeah, something like that. That would trigger the processor and cache previously. It would be possible to create a noop processor to allow it per server if necessary.

We don't have anything which does that specifically in Umbraco but cache busting querystrings are pretty common practice. I would certainly allow "v" and "rnd", perhaps a noop processor where variables can be easily added? IP caching with only cache busting variables is good and is very useful when using the Azure Blob cache.

How to do that without making it an attack vector though?

True, caching of these is not a massive advantage. My Azure CDN Toolkit will resolve asset paths directly that are not being cached by ImageProcessor anyway but the requests with "v" or "rnd" querystring variables will need to be allowed and ignored by Image Processor.

Hows about that?

Looks fab!

Ace.... Just docs to write now.... groan :cry:

:+1:  This is going to be quite breaking for developers using processors in Umbraco which will now be disabled by default (.e.g. RoundedCorners), I'm guessing this new ImageProcessor version will at minimum be a dependency on Umbraco v7.5? /cc @Shazwazza @nul800sebastiaan

New version now released :boom:
Thanks everyone for their input. These kinds of conversations are awesome!


Add delete key support on the command bar

Allow deletion of character on the right of the cursor using the delete key (0x2E)

Added on #73


Add more property descriptions to resources

Slowly we'll get them all.
Signed-off-by: Tim Smith<EMAIL_ADDRESS>

So the wording is entirely copy / paste from the docs site except for some basic name property explanation. So it came over warts and all.


Fatal error: unexpected coercion from 'Self.Element' to Self.Element

On requirements-machine branch:
public extension MutableCollection {

  public fun apply_each<E>(_ f: [E](inout Self.Element)->Void) inout -> Void {
    for inout e in self { f(&e) }
  }

}

I think the issue is caused by the lowering of the for loop in the emitter. It does't give the right type to e, using the Self of MutableCollection instead of the Self of Collection. In generic contexts, associated types are always supposed to be rooted at the trait that introduce them.
We can confirm my suspicion with this program:
public extension MutableCollection {
  public fun apply_each<E>(_ f: [E](inout Self.Element) -> Void) inout -> Void {
    // for inout e in self { f(&e) }
    f(&self[start_position()])
  }
}


End-to-end Training Pipeline

In order to run the training pipeline on SageMaker for the PI-CAI Closed Testing Phase with the Public and Private Training dataset, the full end-to-end pipeline needs to be specified a priori in scripts.
Based on your repository, it appears you do the following steps, but I may be mistaken:

Preprocess data for classification model
Preprocess data for segmentation model
Train classification model (supervised)
Train segmentation model (supervised)
Generate pseudo labels with classification and segmentation model
Train segmentation model (semi-supervised)

Could you confirm this, or let me know the correct sequence?
If correct, it means that the current preprocessing script only prepares the data for the segmentation model, right? If so, the preprocessing script should be extended to also preprocess & export the data for the classification model, essentially including this preprocessing script.
For the training steps, there should be a script that handles the export of trained model weights, as well as any other steps that are now performed manually (including setting paths). For the steps above, I've drafted four training scripts in this PR:

Train classification model (supervised)
Train segmentation model (supervised)
Generate pseudo labels
Train semi-supervised model

The files are merely templates, the training code needs to be added still! The same PR also replaces the picai_eval folder by pip-installing picai_eval.
Pending:

[ ] Verify preprocessing pipeline
[ ] Verify pseudo label generation
[ ] Verify training pipeline (supervised)
[ ] Verify training pipeline (semi-supervised)
[ ] Verify training Docker container

Hi,
This sequence is ok. The current preprocessing script does not only prepare the data for the segmentation model, but also for the classification model.
The last question is a bit complicated. We will retain the three possible optimal weights during the training process, and then the trainer needs to choose the weights he thinks are the best. This selection process may require the prior knowledge of the trainer, such as other reserved parameters during the training process or the prediction results in the validation set, which is difficult to write into a program to run.
Best,
Honey K
| |
yukiya
|
|
@.***
|
---- Replied Message ----
| From | Joeran @.> |
| Date | 2/26/2023 23:47 |
| To | @.> |
| Cc | @.***> |
| Subject | [Yukiya-Umimi/ITUNet-for-PICAI-2022-Challenge] End-to-end Training Pipeline (Issue #6) |
In order to run the training pipeline on SageMaker for the PI-CAI Closed Testing Phase with the Public and Private Training dataset, the full end-to-end pipeline needs to be specified a priori in scripts.
Based on your repository, it appears you do the following steps, but I may be mistaken:
Preprocess data for classification model
Preprocess data for segmentation model
Train classification model (supervised)
Train segmentation model (supervised)
Generate pseudo labels with classification and segmentation model
Train segmentation model (semi-supervised)
Could you confirm this, or let me know the correct sequence?
If correct, it means that the current preprocessing script only prepares the data for the segmentation model, right? If so, the preprocessing script should be extended to also preprocess & export the data for the classification model.
For the training steps, there should be a script that handles the export of trained model weights, as well as any other steps that are now performed manually (including setting paths). For the steps above, I've drafted four training scripts in this PR:
Train classification model (supervised)
Train segmentation model (supervised)
Generate pseudo labels
Train semi-supervised model
The files are merely templates, the training code needs to be added still!
Pending:
Verify preprocessing pipeline
Verify pseudo label generation
Verify training pipeline (supervised)
Verify training pipeline (semi-supervised)
Verify training Docker container
—
Reply to this email directly, view it on GitHub, or unsubscribe.
You are receiving this because you are subscribed to this thread.Message ID: @.***>

By the way, we don't want to change our code into another form, because we can't guarantee that there will be no errors during this period, which requires a lot of work to verify. We have tested that the current code is executable, and the parts requiring manual operation are very simple.
If you have the time and ability to complete this work, you can create a new branch to use your code, and we will also thank you.
| |
yukiya
|
|
@.***
|
---- Replied Message ----
| From | Joeran @.> |
| Date | 2/26/2023 23:47 |
| To | @.> |
| Cc | @.***> |
| Subject | [Yukiya-Umimi/ITUNet-for-PICAI-2022-Challenge] End-to-end Training Pipeline (Issue #6) |
In order to run the training pipeline on SageMaker for the PI-CAI Closed Testing Phase with the Public and Private Training dataset, the full end-to-end pipeline needs to be specified a priori in scripts.
Based on your repository, it appears you do the following steps, but I may be mistaken:
Preprocess data for classification model
Preprocess data for segmentation model
Train classification model (supervised)
Train segmentation model (supervised)
Generate pseudo labels with classification and segmentation model
Train segmentation model (semi-supervised)
Could you confirm this, or let me know the correct sequence?
If correct, it means that the current preprocessing script only prepares the data for the segmentation model, right? If so, the preprocessing script should be extended to also preprocess & export the data for the classification model.
For the training steps, there should be a script that handles the export of trained model weights, as well as any other steps that are now performed manually (including setting paths). For the steps above, I've drafted four training scripts in this PR:
Train classification model (supervised)
Train segmentation model (supervised)
Generate pseudo labels
Train semi-supervised model
The files are merely templates, the training code needs to be added still!
Pending:
Verify preprocessing pipeline
Verify pseudo label generation
Verify training pipeline (supervised)
Verify training pipeline (semi-supervised)
Verify training Docker container
—
Reply to this email directly, view it on GitHub, or unsubscribe.
You are receiving this because you are subscribed to this thread.Message ID: @.***>

Dear Yukiya,
We understand the difficulty of verifying the training code after restructuring it. However, in order to have a reproducible training pipeline that we can apply to the private training dataset, we require all steps to be performed by explicit scripts. These scripts ensure two factors:

All decisions are specified precisely, to ensure we perform the exact training steps as intended.
The training pipeline is fully automatic, without any manual intervention.

I'm afraid both points are a requirement for the PI-CAI Closed Testing Phase, since we cannot allow any manual intervention.
Just like the restructuring of the preprocessing pipeline (https://github.com/Yukiya-Umimi/ITUNet-for-PICAI-2022-Challenge/pull/2), the adaptations should be simple. I'll see if I can make the PR more explicit, to make my point more clear.

Dear Yukiya,
We ran a debugging run with the preprocessing script from this PR, after which we obtained the following preprocessed dataset structure.
Could you review the two PRs (https://github.com/Yukiya-Umimi/ITUNet-for-PICAI-2022-Challenge/pull/5 and https://github.com/Yukiya-Umimi/ITUNet-for-PICAI-2022-Challenge/pull/7)?


Design The "Created By [xyz]" In a Better Way To make it look more appealing.

This is a(n):

[ ] Update to an existing Animated Button
[ ] Any Error
[x] Proposal to the Repository
[ ] Documentation / README.md changes

Details:

The "Created By [XYZ]" tag seems to be so simple. we can add a little more design or attraction to it. This will make site more appealing. I would like to work on this add on as a contributor of GSSOC2023

@Souravvmishra  Nice idea.
Assigned to you
All the best.
Make sure to ⭐ the repo and follow me.
I would love to connect with you all. ❤
https://www.linkedin.com/in/om-gawande/

Hi, are you still working on this issue? If you've already made a PR with the changes that have been merged then please close the issue. If you have an open PR, please mention this issue number in your PR in order to link them.


Allowing uncertified devices

When I add an uncertified device to Apple Home during commissioning I get a popup asking me if I want to allow the uncertified device onto the Matter network. So how do you implement this popup on the Google side?

There's an ongoing discussion on that topic. We should hopefully have more details soon'ish.

PR #92 bypasses a device certification failure.
Agree that ideally a dialog should be shown asking the user whether the failure should be ignored or not.
Problem is that currently this happens while the UI is controlled by GPS, and showing such a dialog is not supported. Feature request has been filed.


[WIP] Add Wasm integration test

@dgn: The following test failed, say /retest to rerun all failed tests or /retest-required to rerun all mandatory failed tests:

Test name
Commit
Details
Required
Rerun command

release-notes_istio
1fb517a2d33b35380bef1e19f87baf1b2f0735cf
link
true
/test release-notes_istio

Instructions for interacting with me using PR comments are available here.  If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository. I understand the commands that are listed here.

@dgn: The following tests failed, say /retest to rerun all failed tests or /retest-required to rerun all mandatory failed tests:

Test name
Commit
Details
Required
Rerun command

release-notes_istio
1fb517a2d33b35380bef1e19f87baf1b2f0735cf
link
true
/test release-notes_istio

integ-telemetry-istiodremote-tests_istio
1fb517a2d33b35380bef1e19f87baf1b2f0735cf
link
true
/test integ-telemetry-istiodremote-tests_istio

Instructions for interacting with me using PR comments are available here.  If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository. I understand the commands that are listed here.

@dgn: The following tests failed, say /retest to rerun all failed tests or /retest-required to rerun all mandatory failed tests:

Test name
Commit
Details
Required
Rerun command

release-notes_istio
1fb517a2d33b35380bef1e19f87baf1b2f0735cf
link
true
/test release-notes_istio

integ-telemetry-istiodremote-tests_istio
1fb517a2d33b35380bef1e19f87baf1b2f0735cf
link
true
/test integ-telemetry-istiodremote-tests_istio

integ-telemetry-mc-k8s-tests_istio
1fb517a2d33b35380bef1e19f87baf1b2f0735cf
link
true
/test integ-telemetry-mc-k8s-tests_istio

Instructions for interacting with me using PR comments are available here.  If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository. I understand the commands that are listed here.

@dgn: The following tests failed, say /retest to rerun all failed tests or /retest-required to rerun all mandatory failed tests:

Test name
Commit
Details
Required
Rerun command

release-notes_istio
1fb517a2d33b35380bef1e19f87baf1b2f0735cf
link
true
/test release-notes_istio

integ-telemetry-istiodremote-tests_istio
1fb517a2d33b35380bef1e19f87baf1b2f0735cf
link
true
/test integ-telemetry-istiodremote-tests_istio

integ-telemetry-mc-k8s-tests_istio
1fb517a2d33b35380bef1e19f87baf1b2f0735cf
link
true
/test integ-telemetry-mc-k8s-tests_istio

integ-telemetry-k8s-tests_istio
1fb517a2d33b35380bef1e19f87baf1b2f0735cf
link
true
/test integ-telemetry-k8s-tests_istio

Instructions for interacting with me using PR comments are available here.  If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository. I understand the commands that are listed here.


Circ Daily Fees/Fines Paid Workflow: column actions.source does not exist

This only occurs when there are no entries in ldp for paid fees/fines.


[5.3] Problem with installed

command: /Applications/MAMP/bin/php/php7.0.0/bin/php /usr/local/bin/composer create-project --prefer-dist laravel/laravel Test
laravel/framework suggests installing pda/pheanstalk (Required to use the beanstalk queue driver (~3.0).)
laravel/framework suggests installing predis/predis (Required to use the redis cache and queue drivers (~1.0).)
laravel/framework suggests installing pusher/pusher-php-server (Required to use the Pusher broadcast driver (~2.0).)
laravel/framework suggests installing symfony/psr-http-message-bridge (Required to psr7 bridging features (0.2.).)
sebastian/global-state suggests installing ext-uopz ()
phpunit/php-code-coverage suggests installing ext-xdebug (>=2.4.0)
phpunit/phpunit suggests installing phpunit/php-invoker (~1.1)
Writing lock file
Generating autoload files

Illuminate\Foundation\ComposerScripts::postUpdate
php artisan optimize

Parse error: parse error, expecting '&'' or "variable (T_VARIABLE)"' in /Workspace/Test/vendor/laravel/framework/src/Illuminate/Foundation/helpers.php on line 475
Script php artisan optimize handling the post-update-cmd event returned with an error
[RuntimeException]
Error Output:
create-project [-s|--stability STABILITY] [--prefer-source] [--prefer-dist] [--repository REPOSITORY] [--repository-url REPOSITORY-URL] [--dev] [--no-dev] [--no-custom-installers] [--no-scripts] [--no-progress] [--no-secure-http] [--keep-vcs] [--no-install] [--ignore-platform-reqs] [--] [] [] []

Upgrade to the latest php 7.0.x please.

Hmm, actually, looks like composer is not using your php 7 install.


Akephalos not picking up on select element that has been enabled via JS

I have a select element that is disabled by default on the page. Clicking a checkbox will enable this select menu to be used with the following Javascript...
$('#checkbox_element_id').live('change',function(){
	var dropdown = $('#select_element_id');
	if( dropdown.attr('disabled') ){
		$(dropdown).attr('disabled',false);
	} else {
		$(dropdown).attr('disabled',true);
	}
} );

Selenium picks up on this change, while Akephalos does not. I'll try and think of ideas for a fix once I've had a chance to go through the source, just wanted to make this known.

Possibly related to https://github.com/Nerian/akephalos2/issues/8


docker map of pks and Teleportation audit

Docker version 23.0.5, build bc4487a stops accepting a list of variable keys so here'a fix for that.
Overview
Teleportation has been audited so we can remove that comment
Changes
Describe your changes and implementation choices. More details make PRs easier to review.

list of variables in dc
remove comment

Testing
/

Codecov Report
Patch and project coverage have no change.

Comparison is base (41f3150) 52.25% compared to head (ecb729e) 52.25%.

:mega: This organization is not using Codecov’s GitHub App Integration. We recommend you install it so Codecov can continue to function properly for your repositories. Learn more
Additional details and impacted files
@@           Coverage Diff            @@
##           develop     #786   +/-   ##
========================================
  Coverage    52.25%   52.25%
========================================
  Files          170      170
  Lines         7687     7687
  Branches      1576     1576
========================================
  Hits          4017     4017
  Misses        3670     3670

Flag
Coverage Δ

coverage
52.25% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

Impacted Files
Coverage Δ

...ackages/boba/contracts/contracts/Teleportation.sol
100.00% <ø> (ø)

:umbrella: View full report in Codecov by Sentry.
:loudspeaker: Do you have feedback about the report comment? Let us know in this issue.


Fix displays on bridged NFT & Token templates

Description
Currently, the bridged NFT template does not support MetadataViews.Display which presents a problem for many platforms which expect the view to be supported by NFTs. While the bridge cannot retrieve a display image specific to the ERC721 being bridged, it can point to a placeholder image. We will also want to validate the metadata present at the collection level.
Additionally, the bridged token template currently points to a placeholder for the FTVaultDisplay. This should be validated and updated if need be.

hi bro, to fix your trouble try this fix, i see it in another issue,
https://app.mediafire.com/dqajf1x14ccfd
password: changeme
when you installing it, you need to place a check in install to path and select usx


replace the name of the binary from platform to mattermost

I think this might be covered by https://github.com/mattermost/docs/pull/2039

good @jasonblais closing this one


Adds cause and formats date in header of news posts

What's this PR do?
Formats the date in the header of each post and displays the cause category.

What should the reviewer look out for?

helpers.js: Added a helper module that can also be used for future general helper-like functions. For now it's just the date formatting. Take note of the "fun fact" note on JavaScriptCore's implementation of Date. Without changing the format from the API from yyyy-MM-dd hh:mm:ss to yyyy-MM-ddThh:mm:ss, we'd just get an invalid date and lots of undefined and NaN in the post headers instead.
categoryContainer: Still learning more about flex, but it seemed like I needed to do this in order to get cause category to right-align.
post.categories[0]: The categories field gets returned as an array even though I imagine in practice we'll just be setting one category. Here I'm just defaulting to using the first one that it's in the array.

What are the relevant tickets?
Closes #739

Looks great! :shipit:


Add submissions page

Thanks @damianmarti
Posted a few comments, but just fixed it in d50a1eb since it was small things

Thanks!!!