Attempted import error: 'event' is not exported from 'd3-selection'.

I'm trying to use this with Next.js, and when I import it using import render from "d3-render" I get this error:
./node_modules/d3-render/dist/d3-render.esm.js
Attempted import error: 'event' is not exported from 'd3-selection'.

I looked at d3-selection in my node-modules and it looks like event is no longer exported from it.
For now, I just remove event from import { select, namespace, event, selection } from 'd3-selection' in d3-render/dist/d3-render.esm.js, and it works (but obviously without whatever events did).
I don't really need events right now for my use case. I also want to say thank you for this module and your great tutorial on your bubble chart!

I am having this exact same issue in Next.js. My solution was to downgrade d3-selection to v1.4.2. This is not an ideal solution but the best I can do for now without altering the contents of node-modules.

Just hit that this morning as well. That would be because d3-selection v2 removed d3.event and got released in August last year, whereas this repo's package.json still only specify a dependency >= 1.4.0. Either the peer dependency needs bumping to >= 2.0.0 and the code updating accordingly (looks straightforward according to https://observablehq.com/embed/@d3/d3-selection-2-0?cells=events ) or the package.json should be updated to limit the peer dependency's range to < 2.0.0.

I've opened #13 which would fix this issue by updating the D3 dependency to ^6.
If the desire is to stick with v5 I am happy to submit another PR instead to restrict the peer deps versions.
@unkleho thoughts?

I've just published v0.3.0, should be compatible with D3 v6 and selection v2. Thanks again for your help @Cgg.

My pleasure! Thank you for making this, and reviewing my PR :-)

Just updated my dependency and all is well, this can be closed.


Hang on launch for ~1 minute

After around a minute or so of hanging, the application will become responsive.
In console, is this log:

4/1/15 20:37:17.349 KeepingYouAwake[25023]: Unbalanced call to enableRelaunchOnLogin:  enableRelaunchOnLogin was called without a preceding call to disableRelaunchOnLogin

I am using the latest stable v1.2.
Thanks!

Thanks für reporting! I removed the affected line from the source code and will test it for a while. This "fix" will ship with the next stable update (should be 1.2.1).
Please reopen the issue if this still persists in the next version.

I went home, and confirmed the fix.
It's to remove the check to if(itemURL) in NSApplication+LoginItem.
It did not cause issues for me when there was NULL or dead-linked Login Items.


ANS108 - systemctl command used in place of systemd module

Hi
I those 2 examples below I see following error:
ERROR: [ANS108] rule 'Commands should not be used in place of modules' not met
- name: Start graphical target
  ansible.builtin.command:
    cmd: "systemctl isolate graphical.target"

- name: Set default system target to graphical
  ansible.builtin.command:
    cmd: "systemctl set-default graphical.target"

However I do not see any module which could be used in place of "ansible.builtin.command"
Is there a workaround to suppress ANS108 only for those 2 tasks e.g, using # noqa: ANS108 inline?
Thanks!

Hi, sorry, no this is not possible. You might want to give ansible-lint a try, as I plan to discontinue ansible-later soon.

ansible-later is discontinued now, please use ansible-lint instead.


"Attempted to load class btf for invalid side SERVER", particles are being loaded serverside

Minecraft Version: 1.12.2
Forge Version: <IP_ADDRESS>01
Advanced Rocketry Version: 1.12.2-1.2.6-50
LibVulpes Version: 1.12.2-0.2.7-25-universal
is this the latest curseforge build?
#Please Pastebin crash
Crash Report: https://gist.github.com/Yantrio/c17d4495eb36bc87eedca03c4ce7b3b0
Explain issue in detail: Looks like the mod is trying to load a particle server side.

fixed in build 1.12.2-1.2.6-52 and later

Confirmed to be fixed in latest unstable version, thanks 👍


Add user to angular-formly site: New User: Panax.io

Add Panax.io to users
Project/Company Name: Panax.io
Link: http://panax.io/
Logo:

Short Description:
Panax is a stack of technologies to generate applications automatically based on a relational data model. Customization and extensibility is done via configuration, nevertheless Panax aim is to generate an usable app with less possible interaction from the developer (based on heuristics, assumptions, etc).
One of the most important UI for an application are forms, therefore we heavily rely on angular-formly to ease it's generation.

We will release our Beta soon. If you want to keep updated with the news please subscribe to our newsletter at http://panax.io/#subscribe

:+1:


operator [N] trustify-operator (.0.0-alpha.3)

Automated changes by create-pull-request GitHub action

Closing as this contains wrong data


Debugger failed to attach: handshake failed - connection prematurally closed

Hello, It's really exciting for me to debug java programs in VSCode.
But if I choose Java Console App, it pops up a window and says "Debugger failed to attach: handshake failed - connection prematurally closed".
I am a beginner so I cannot work out what has happened.
By the way, if I choose Java, nothing happened.

Have you tried setting breakpoints, does the code stop where it gets to that line?
The Java Console App configuration is useful because it opens up a console in which Scanner can read your input.
I get the same error as you did, but it still works normally nonetheless.

@jakoberzar Thanks for your reply.
I tried setting breakpoints, but it cannot stop where it gets to that line.
And Scanner doesn't work in the Java Console App.

@zhaidoudou123 see #16

See #8


Support Django 2.0

Django 2.0 breaks if user.is_authenticated(): (utils.py, line 74), which needs to become if user.is_authenticated: -- this should also work from Django 1.10 onwards, see: https://docs.djangoproject.com/en/2.0/releases/1.10/#using-user-is-authenticated-and-user-is-anonymous-as-methods

Would you mind to prepare a PR?

PR added.

Guess this can be closed then, given the PR has been merged. Hope you'll push out a release soon :)

Thanks @Anteru!


how to limit number of partitions assigned to consumer

For Kafka, partitions provide a way for consumption to scale. Hence, it is necessary that consumers needs to scale horizontally as well.

Is there any way to limit number of partitions per consumer, so that we can add more consumers so that all partitions are assigned to one of the consumers (total consumers *  partitions per consumer = total partitions of the topic)? How can I do this?

What should the configuration of the node in this case? What logic can be used for size a consumer for a given number of partitions?

@nitin302 I suggest that you look into https://github.com/Shopify/sarama/pull/1099 which has been merged and released, as sarama-cluster is now deprecated. You can configure a custom https://godoc.org/github.com/Shopify/sarama#BalanceStrategy which can plan the partition allocation to consumers based on a consumer's UserData. Hope that helps!

@dim can you please add "deprecated"  in the github description for this repo?  it will help the new users.


Fixed bug where GenerateSasUri did not honor TrimBlobNameSlashes when creating the SAS

Resolves #34591
I already checked through the other GenerateSasUri methods on the other Blob Clients and they did not need this fix. I also checked some other methods which only were using BlobUriBuilder(Uri) without the TrimBlobNameSlashes parameter and they did not need that parameter to be specified.

API change check
API changes are not detected in this pull request.


Is it possible to do upsampling using NAT ?

As the title saying, how can i apply NAT to upsample the feature map?

Hello and thank you for your interest.
Just to make a clarification, NA is the attention pattern, NAT is the hierarchical transformer model.
If you're asking how to upsample feature maps using NA, we have not yet explored direct upsampling using NA.
One very easy approach to upsample with attention involved is to upsample the query tensor in self attention (via interpolation or any other upsampling operation). However, this will still have a quadratic time and space complexity.
While it's unlikely that there's a theoretical limit to doing something similar with NA, NA is bound to the implementation in NATTEN, which means the input tensors (query, key and value) have to be of the same shape. This means it's not possible to upsample the query feature map and apply NA, because there would have to be a mapping between the feature map sizes, and the implementation would have to support it.
If we were to recommend anything, it would be either upsampling everything before or after applying NA, which is pretty trivial. You could even replace the QKV projections or the final projection with an upsampling layer as well.
I hope this answers your question.

Closing due to inactivity. Feel free to reopen if you still have questions.


Error when I cross compile for arm64 under Windows

C:\Program Files\Microsoft Visual Studio\2022\Enterprise\VC\Tools\MSVC\14.37.32822\include\xmmintrin.h(27): fatal error C1189: #error:  This header is specific to X86, X64, ARM64, and ARM64EC targets

I think the only file (of ours) that would include this is in basisu_kernals_sse.cpp. Can you try setting BASISU_SUPPORT_SSE to 0 and building again?

I think the only file (of ours) that would include this is in basisu_kernals_sse.cpp. Can you try setting BASISU_SUPPORT_SSE to 0 and building again?

Setting BASISU_SUPPORT_SSE to 0 still gives the same error.


Fix unused result warnings.

Android has enabled _FORTIFY_SOURCE for our host builds now, which
enables the unused result attributes on a number of functions in the C
library. This change quiets those warnings.
The result from pipe(2) is now properly plumbed to report errors, but
read(2) and write(2) only handle EINTR now; any real errors will still
be a problem. I haven't done any more because I was unsure about how
errors should be handled in those cases.

It fails because in some cases, CRemoteProcessorServer::init is never called: ParameterMgr is not the only user of the RemoteProcessorServer class: TestPlatform is also using it but in a different way.
ParameterMgr calls createRemoteProcessosServer because it uses the remote-processor library thourgh dlopen() wheras test-platform can call RemoteProcessorServer's constructor because it is dynamically linked against it. (I agree that it isn't consistent nor foolproof...) So, in test-platform's case, the init() method is never called. Your patch changed RemoteProcessorServer's contract.
I'm submitting a new version reusing your patch and a patch from an existing pull request: https://github.com/krocard/parameter-framework/commit/a910835dcae20e44ed41772b710e59ba92d0e1f2

Pushed the aforementioned changes into dawagner/android-m.


AppDynamics changes to IBM Liberty BP

PR contains changes specific to appdynamics.

Are there any blockers to merge this PR into master ?
@pkumar-appd: Can you also squash the multiple commits into single commit to keep the git history clean ?

@nkatre Raised a new PR with single commit.
Closing this PR.


Python wheels not PEP 599 compliant; wheels should include libgomp.so.1

Description
PEP 599 and PEP 513 describe a spec for broadly compatible wheels. They include a list of dynamic libraries that wheels are allowed to dynamically link against without bundling the so in the wheel. The LightGBM wheel depends on libgomp.so.1 but does not include in the wheel package. To fix this, you can use auditwheel. I have not tested this, but it probably involves adding line like this, here.
auditwheel repair dist/lightgbm-$LGB_VER-py3-none-$PLATFORM.whl

Specs:
PEP 599 -- The manylinux2014 Platform Tag
PEP 513 -- A Platform Tag for Portable Linux Built Distributions
Reproducible example
This works on Linux on x86_64 and aarch64.
docker run -it --rm amazonlinux sh -c "yum install -y python3-pip && pip3 install lightgbm && python3 -c 'import lightgbm'"

...
Traceback (most recent call last):
  File "<string>", line 1, in <module>
  File "/usr/local/lib/python3.7/site-packages/lightgbm/__init__.py", line 8, in <module>
    from .basic import Booster, Dataset, register_logger
  File "/usr/local/lib/python3.7/site-packages/lightgbm/basic.py", line 95, in <module>
    _LIB = _load_lib()
  File "/usr/local/lib/python3.7/site-packages/lightgbm/basic.py", line 86, in _load_lib
    lib = ctypes.cdll.LoadLibrary(lib_path[0])
  File "/usr/lib64/python3.7/ctypes/__init__.py", line 437, in LoadLibrary
    return self._dlltype(name)
  File "/usr/lib64/python3.7/ctypes/__init__.py", line 359, in __init__
    self._handle = _dlopen(self._name, mode)
OSError: libgomp.so.1: cannot open shared object file: No such file or directory

Environment info
LightGBM version or commit hash: lightgbm-3.2.1
Command(s) you used to install LightGBM
pip3 install lightgbm

Thank you very much for this excellent report @AWSjswinney ! Are you interested in contributing this feature? If not, would it be alright for maintainers to @ you for a review in the future if/when this work is picked up?

Yes, I will definitely be happy to answer any questions from maintainers. Also, if I find the the time, I may test and submit a pull request myself.

Thanks very much!

If I remember correctly, we are not including OpenMP libraries in wheels intendedly to avoid the following error:

OMP: Error #15: Initializing libiomp5.dylib, but found libomp.dylib already initialized.
https://lightgbm.readthedocs.io/en/latest/FAQ.html#lightgbm-crashes-randomly-with-the-error-like-initializing-libiomp5-dylib-but-found-libomp-dylib-already-initialized

Related: https://github.com/dmlc/xgboost/issues/1715 and https://github.com/apache/incubator-mxnet/issues/20095#issuecomment-841314954.
Instead, we are asking to install OpenMP system-widely. But we do it only for macOS. I think we can do the same for Linux.
https://github.com/microsoft/LightGBM/tree/master/python-package#install-from-pypi
Speaking about manylinux*** tags, we are planning to migrate to PEP600 once this tag becomes more or less mature (https://github.com/microsoft/LightGBM/pull/3421#issuecomment-711559332).

I opened a pull request to update the documentation to mention this. Does this seem like an acceptable compromise?


Update-AzDataLakeGen2AclRecursive - Problem with “rwx” permission - Mask is not set automatically and user is unable to edit the file

Hi,
When setting the “rwx” permission for group 2, the message "The following access permissions are bounds of the mask for this entity: Write" is displayed. What does this mean, the mask must be set manually?
`
# 1. Get permissions
$acl = (Get-AzDataLakeGen2Item -Context $Ctx -FileSystem $FileSystemName -Path $Path).ACL

# 2. Set permissions
## a. Set Access
$acl = Set-AzDataLakeGen2ItemAclObject -AccessControlType group -EntityId $GroupId -Permission $DirectoryACL -InputObject $acl

## b. Set Default Access
$acl = Set-AzDataLakeGen2ItemAclObject -AccessControlType group -EntityId $GroupId -Permission $DirectoryACL -InputObject $acl -DefaultScope

# 3. Update permissions
Update-AzDataLakeGen2AclRecursive -Context $Ctx -FileSystem $FileSystemName -Path $Path -Acl $acl

`

When "rwx" is not set for the mask, it is not possible to change the file:

Saving blob failed. Error: 'otherErrors: CYCLIC_OBJECT
responseJSON: {"error":{"code":"AuthorizationFailed","message":"The client<EMAIL_ADDRESS>with object id '69e8e690-xxxxxxxxxxxxxxxx' does not have authorization to perform action 'Microsoft.Storage/storageAccounts/listKeys/action' over scope '/subscriptions/4587b013-ba27-xxxxxxxxxxx/resourceGroups/rg-xxx/providers/Microsoft.Storage/storageAccounts/dlsxxx' or the scope is invalid. If access was recently granted, please refresh your credentials."}}
status: 403
Below is the step by step, can you check if something is missing, please?
1. Create files and directories

2. Check current permission
No permissions have been set.

3. Create code to set permissions in the file system, parent directory and directory
`
Set variables
$ResourceGroupName = "rg-xxx"
$DataLakeName = "dlsxxx"
$FileSystemName = "container"
$DirectoryName = "dir1/subdir2"
$FileSystemACL = "r-x"
Get Data Lake context
$dataLakeAccount = Get-AzStorageAccount -ResourceGroupName $ResourceGroupName -Name $DataLakeName
$Ctx = $dataLakeAccount.Context
Create function to set ACL on the file system
function Set-AclFileSystemDataLake {
param (
[Parameter(Mandatory = $true)]
[Microsoft.WindowsAzure.Commands.Common.Storage.LazyAzureStorageContext]$Ctx,
    [Parameter(Mandatory = $true)]
    [string]$FileSystemName,

    [Parameter(Mandatory = $true)]
    [string]$GroupId,

    [Parameter(Mandatory = $true)]
    [string]$FileSystemACL
)

# Get the origin ACL
$acl = (Get-AzDataLakeGen2Item -Context $Ctx -FileSystem $FileSystemName).ACL

# Update permission of a new ACL entry (if ACL entry with same AccessControlType/EntityId/DefaultScope not exist, will add a new ACL entry, else update permission of existing ACL entry)
$acl = Set-AzDataLakeGen2ItemAclObject -AccessControlType group -EntityId $GroupId -Permission $FileSystemACL -InputObject $acl

# Set the new acl to file system
Update-AzDataLakeGen2Item -Context $Ctx -FileSystem $FileSystemName -Acl $acl > $null

}
Create function to set ACL on parent directories
function Set-AclParentDirectoryDataLake {
param (
[Parameter(Mandatory = $true)]
[Microsoft.WindowsAzure.Commands.Common.Storage.LazyAzureStorageContext]$Ctx,
    [Parameter(Mandatory = $true)]
    [string]$FileSystemName,

    [Parameter(Mandatory = $true)]
    [string]$Path,

    [Parameter(Mandatory = $true)]
    [string]$GroupId

)

$parent = Split-Path $Path

if ($parent) {

    Write-Output "Set new acl to the parent directory: $parent`n"

    # Get and set permissions
    $aclParent = (Get-AzDataLakeGen2Item -Context $Ctx -FileSystem $FileSystemName -Path $parent).ACL
    $aclParent = Set-AzDataLakeGen2ItemAclObject -AccessControlType group -EntityId $GroupId -Permission 'r-x' -InputObject $aclParent

    # Set the new acl to the parent directory
    Update-AzDataLakeGen2Item -Context $Ctx -FileSystem $FileSystemName -Path $parent -Acl $aclParent > $null

    # Search for next parent
    Set-AclParentDirectoryDataLake -ctx $Ctx -fileSystemName $FileSystemName -path $parent -GroupId $GroupId

}

}
Create function to set ACL on the directory and its files
function Set-AclDirectoryDataLake {
param (
[Parameter(Mandatory = $true)]
[Microsoft.WindowsAzure.Commands.Common.Storage.LazyAzureStorageContext]$Ctx,
    [Parameter(Mandatory = $true)]
    [string]$FileSystemName,

    [Parameter(Mandatory = $true)]
    [string]$Path,

    [Parameter(Mandatory = $true)]
    [string]$GroupId,

    [Parameter(Mandatory = $true)]
    [string]$DirectoryACL
)

# 1. Get permissions
$acl = (Get-AzDataLakeGen2Item -Context $Ctx -FileSystem $FileSystemName -Path $Path).ACL

# 2. Set permissions
## a. Set Access
$acl = Set-AzDataLakeGen2ItemAclObject -AccessControlType group -EntityId $GroupId -Permission $DirectoryACL -InputObject $acl

## b. Set Default Access
$acl = Set-AzDataLakeGen2ItemAclObject -AccessControlType group -EntityId $GroupId -Permission $DirectoryACL -InputObject $acl -DefaultScope

# 3. Update permissions
Update-AzDataLakeGen2AclRecursive -Context $Ctx -FileSystem $FileSystemName -Path $Path -Acl $acl

}
`
4. Set read permission to GROUP1
Permission has been successfully set
`
$Group1 = "3d53012d-0b1e-43d7-ae57-ec67b3a43b78"
$DirectoryACL = "r-x"
Set-AclFileSystemDataLake -Ctx $Ctx -FileSystemName $FileSystemName -GroupId $Group1 -FileSystemACL $FileSystemACL
Set-AclParentDirectoryDataLake -Ctx $Ctx -FileSystemName $FileSystemName -Path $DirectoryName -GroupId $Group1
Set-AclDirectoryDataLake -Ctx $Ctx -FileSystemName $FileSystemName -Path $DirectoryName -GroupId $Group1 -DirectoryACL $DirectoryACL
`

Group 1 - Ok

Mask - Ok

5. Set write permission to GROUP2
`
$Group2 = "18fe35a0-3d99-438a-9ba8-eae424ea1b3e"
$DirectoryACL = "rwx"
Set-AclFileSystemDataLake -Ctx $Ctx -FileSystemName $FileSystemName -GroupId $Group2 -FileSystemACL $FileSystemACL
Set-AclParentDirectoryDataLake -Ctx $Ctx -FileSystemName $FileSystemName -Path $DirectoryName -GroupId $Group2
Set-AclDirectoryDataLake -Ctx $Ctx -FileSystemName $FileSystemName -Path $DirectoryName -GroupId $Group2 -DirectoryACL $DirectoryACL
`

Group 2 - Warning

Mask - No write permissions

File - Warning

6. Edit file
Unable to edit the file.

7. Set mask manually

Directory

File

8. Edit file again
After manually changing the directory and file mask, it was possible to edit it.

Best regards,
Cristina

Document Details
⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

ID: a3aa443a-b30f-2914-5cb8-b032be075c07
Version Independent ID: ece80543-b5c2-7415-776c-06cdf55d2006
Content: Set ACLs recursively for Azure Data Lake Storage Gen2
Content Source: articles/storage/blobs/recursive-access-control-lists.md
Service: storage
Sub-service: data-lake-storage-gen2
GitHub Login: @normesta
Microsoft Alias: normesta

@crisansou Thanks for the question! We are investigating and will update you shortly.

Hi @crisansou - thx for reporting! There's a lot of investigation around these issues happening now. I'll post back any doc updates. Thank you!

Closing issue for now as after some investigation, it appears not to be related to the recursive ACL feature itself. The issue is being investigated and tracked with Azure portal team. Thank you for raising @crisansou!

#please-close

Closing issue for now as after some investigation, it appears not to be related to the recursive ACL feature itself. The issue is being investigated and tracked with Azure portal team. Thank you for raising @crisansou!

This isn't really helfpul! Do you have a link to the issue being investigated by the Azure portal team??


Fix OLM bundle failing because of incorrect CSV filename

Signed-off-by: Michail Resvanis<EMAIL_ADDRESS>

Thanks for that PR @mresvanis
/ok-to-test
/lgtm
/approve


OIDC support

We should build in support for authentication with OpenID Connect.
This is complicated by isomorphic rendering. i.e. Really the initial login should be done via SSR but the client should take over the handling of tokens as well as allow us to inspect the login information from the token. Meanwhile, any API endpoints need to support inspecting tokens outside of React. (And in fact, that is the most important point to get right in terms of security.)
It would probably be best if the SSR React component would put the tokens in a cookie. I think this is how louketo-proxy works. I'd like to avoid forcing a server-side session store if at all possible.

There are a few options in terms of existing React libraries. Although many of them seem to be poorly documented.

https://github.com/bjerkio/oidc-react
Nice and simple interface. Uses React Context API and provides a hook. Less popular. Not clear if it supports SSR.
https://github.com/AxaGuilDEv/react-oidc
Provides React Context API option. Not clear if it supports SSR.
https://github.com/maxmantz/redux-oidc
Requires Redux but should support SSR.

They all seem to use the same underlying library: https://github.com/IdentityModel/oidc-client-js
(So perhaps we should consider that for protecting API endpoints.)

Whilst the use of Redux for this feels wrong to me, (it only needs to store some tokens doesn't it? I wouldn't think there would be that much async stuff going on. Then again, maybe there is...) perhaps it wouldn't be the end of the world if we already need Redux for #125.

Possibly, Redux is useful for handling the updating of access tokens.
Then again, I wonder if that would be so infrequent that it could be done synchronously.

Another concern for this work is the security of tokens. I suspect that cookies might be better than local storage.
Or perhaps we could be even more cautious. Perhaps the server could return the tokens in headers (or a cookie) and the app could just put them in memory and delete any cookies.

oidc-react appears to not support SSR. Issue raised at: https://github.com/bjerkio/oidc-react/issues/329

It occurs to me that this isn't necessarily a React issue. We could solve most of this problem with just a middleware on the server.
The problem would only arise once the access token expires. As at that point queries to GraphQL would start to fail.

Another contender might be https://github.com/react-keycloak/react-keycloak .
However this would make the solution specific to Keycloak and I'm not sure what the benefit of that would be. - If Keycloak implements OIDC then surely we can just work with that?

So far the libraries appear to be oriented towards the client-side and even require a client with a 'public' access type (no client secret). - We would normally only use 'confidential' on UIs and 'bearer-only' on APIs.
I wonder if it would be better to write our own one specifically for isomorphic applications. To my mind the ideal process would be:

User visits website without a valid access token.
Server redirects user to Keycloak to login
User logs in, gets redirected back with an auth code
Server exchanges the auth code with Keycloak for a access and refresh tokens, using its client id and secret, and places the access token in a cookie. (We'd also want to send the refresh token to the client but I'm not sure how. We should check what louketo-proxy does.)
The client hydrates and takes over responsibility for keeping the access token up to date using the refresh token.

i.e. The client would never need to do an actual login as it would be receiving tokens from the server.
I'm not sure anything out there works like this currently. It's also possible that I've misunderstood something.

Looks like louketo-proxy puts the refresh token in a separate cookie called kc-refresh: https://github.com/louketo/louketo-proxy/blob/26d77f1635fba0a0503b5da584929f43d95b5a47/doc.go#L68
It looks like it is encrypted: https://github.com/louketo/louketo-proxy/blob/master/docs/user-guide.md#encryption-key
It also looks like it's possible to use a server-side data store for them instead.
It makes sense to take more care over handling the refresh token as it is a longer-lived credential. However, if we want the client to handle updating the access token we will need to find a way of sharing the refresh token with it in an unencrypted form. We could have a special endpoint that the client could hit in order to receive the unencrypted refresh token?

(I say unencrypted, but I only mean unencrypted at rest; TLS would be in place for the transit, at least in production.)

Another alternative might be to not have the client even do the refreshing of access tokens. Perhaps the client could simply refresh the page when the access token expires and let the server do it.

Typically, refresh tokens are only used with confidential clients. However, since it is possible to use the authorization code flow without a client secret, the refresh grant may also be used by clients that don’t have a secret. If the client was issued a secret, then the client must authenticate this request. Typically the service will allow either additional request parameters client_id and client_secret, or accept the client ID and secret in the HTTP Basic auth header. If the client does not have a secret, then no client authentication will be present in this request. - https://www.oauth.com/oauth2-servers/access-tokens/refreshing-access-tokens/

Perhaps, rather than ever holding the (unencrypted) refresh token, the client could hit a special endpoint on the server to get a new access token?

The server then checks whether the refresh token is valid, and has not expired. If the refresh token was issued to a confidential client, the service must ensure the refresh token in the request was issued to the authenticated client.

https://www.oauth.com/oauth2-servers/access-tokens/refreshing-access-tokens/
This suggests that it is the server that should get the new access token.
It does sort of imply that the request token is the real credential here. i.e. What's the point of the access token?

What's the point of the access token?
I suppose it means that you are checking in with the auth / SSO service. i.e. The Auth service can refuse you a new access token if the session has been revoked.

The question then becomes, should we have a special endpoint for getting a new access token or should the server simply try to replace expired access tokens as and when it receives them. (Which is what louketo-proxy does, I think.)
If we go down the route of doing this automatically, there's really nothing for the client to do on the auth side. (Maybe we could even just use louketo-proxy and be done with it.) We would want get the information from the token in to the client though.

The automatic way feels a bit wrong for API endpoints (including /graphql) but I can't think of anything actually wrong with it.

Perhaps the first pass for implementing this is the following:

Just use louketo-proxy
Place louketo-proxy's userinfo (from 'X-Auth-*` headers) into the application props (this comes from the token so shouldn't be confidential)
Set up a React context (with hook) for accessing the userinfo data

Upsides( to this 'first pass'):

Quick and easy
Simple to do functional testing on apps
... as one can test different access levels simply by adding role headers

Downsides:

No auth on prototypes in Netlify
If we do the auth flow in the Node.js app we can protect even things in Netlify which would make it a more suitable deployment target for prototypes.

Doing auth in the app could be a 'second pass' and be enabled (or disabled!) with a feature flag to maintain ease of testing.

They all seem to use the same underlying library: https://github.com/IdentityModel/oidc-client-js
(So perhaps we should consider that for protecting API endpoints.)

Part of my suggesting the hapi toolset was because of how it dealt with authentication and security, might be worth a spike?

Whilst the use of Redux for this feels wrong to me, (it only needs to store some tokens doesn't it? I wouldn't think there would be that much async stuff going on. Then again, maybe there is...) perhaps it wouldn't be the end of the world if we already need Redux for #125.

It feels like trying to React without Redux is something you can't really do for long, and the longer you try, the worse your problems become when you finally given...

Another concern for this work is the security of tokens. I suspect that cookies might be better than local storage.
Or perhaps we could be even more cautious. Perhaps the server could return the tokens in headers (or a cookie) and the app could just put them in memory and delete any cookies.

Is part of the goal here to not use KeyCloak gatekeeper (or whatever they're calling KeyCloak proxy these days)?

It occurs to me that this isn't necessarily a React issue. We could solve most of this problem with just a middleware on the server.
The problem would only arise once the access token expires. As at that point queries to GraphQL would start to fail.

This whole issue feels like a server-side problem that is at a higher level than the rendering library; all the RBAC stuff should be handled before any React work, all that React should be doing is rendering one page when RBAC has successfully finished or an error when there's a problem with the roles/access.

Another alternative might be to not have the client even do the refreshing of access tokens. Perhaps the client could simply refresh the page when the access token expires and let the server do it.

Why would you bother refreshing the page when you can use ajax or an iframe?

What's the point of the access token?

I suppose it means that you are checking in with the auth / SSO service. i.e. The Auth service can refuse you a new access token if the session has been revoked.

...or has expired, in which case the client would have to re-login (a common activity when using KC)

The question then becomes, should we have a special endpoint for getting a new access token or should the server simply try to replace expired access tokens as and when it receives them. (Which is what louketo-proxy does, I think.)
If we go down the route of doing this automatically, there's really nothing for the client to do on the auth side. (Maybe we could even just use louketo-proxy and be done with it.) We would want get the information from the token in to the client though.

The client should be essentially dumb as far as RBAC goes, it should just pass back whatever tokens the server issued after first (or most recent) login. This means an access token will work until it expires, then the refresh token will mean new access tokens can be issued, until that too expires at which point the client will have to login again (but this login should be possible without interfering with the user's session).

Perhaps the first pass for implementing this is the following:

Just use louketo-proxy
Place louketo-proxy's userinfo (from 'X-Auth-*` headers) into the application props (this comes from the token so shouldn't be confidential)
Set up a React context (with hook) for accessing the userinfo data

I'm not sure I see why React would need access to information about the user, all RBAC work should be handled outside of the scope of React. All React should be doing is rendering the resulting information.

Downsides:

No auth on prototypes in Netlify
If we do the auth flow in the Node.js app we can protect even things in Netlify which would make it a more suitable deployment target for prototypes.

Again, look at how hapi handles security

Part of my suggesting the hapi toolset was because of how it dealt with authentication and security, might be worth a spike?

What was it about HAPI's handling of auth and security that you liked?

It feels like trying to React without Redux is something you can't really do for long, and the longer you try, the worse your problems become when you finally given...

I'm not sure that's true though. I've been doing pretty well without it. People are saying that React's context API fulfils most of the use cases for Redux. So I suppose the question is, what do you think we need it for?

Is part of the goal here to not use KeyCloak gatekeeper (or whatever they're calling KeyCloak proxy these days)?

I think it would be nice to not require it, in the long-run. So far we support serverless deployment so it would be nice to keep that rather than require a proxy is in place.

This means an access token will work until it expires, then the refresh token will mean new access tokens can be issued, until that too expires at which point the client will have to login again (but this login should be possible without interfering with the user's session).

Well the question is how we pull that off without having the app just break when things expire. (Refreshing the page would be a cheap way to achieve this.)

I'm not sure I see why React would need access to information about the user, all RBAC work should be handled outside of the scope of React. All React should be doing is rendering the resulting information.

It's fairly normal to show who you are currently logged in as. So that would be one use case.
The other would be to preempt what the user will be able to do and provide them with a helpful message.

The different schemes and strategies for authentication seems relevant here, you can configure basic auth, session cookies, or deferred auth through simple config. Enabling the security features flexibly by route/path was also straight forward. I'd really need to re-watch that video I posted in slack to remind me...
Maybe Redux can be avoided, but it's so widely used by the react community that lots of things assume you're already using it for your data store.
Yes I agree, it would be much better (especially for NGU) not to rely on anything KC!
Rather than refreshing the page, we should be able to just fire off an ajax request and handle the process without a reload.
Basic user information (by which I mean essentially static, non-role/access based details) could be stored locally, but anything authoritative should only be handled on the server. Nothing should be "preempted", the server should always be part of CRUD or access processes, even if it's handled as a background process.

Maybe Redux can be avoided, but it's so widely used by the react community that lots of things assume you're already using it for your data store.

I think that's the thing. For simple data-stores the new 'context API' can be used. The rest of Redux's use-case seems to be around managing events and I'm not sure that we need that if we are sticking to having SSR as a fall-back.

Rather than refreshing the page, we should be able to just fire off an ajax request and handle the process without a reload.

Can we though? What if the user needs to log-in?

The first pass of this (relying on headers from louketo-proxy) is now done. Specifically we can:

access information on the current user (via a React hook)
apply fine-grained (role-based) access control in GraphQL resolvers

This should allow us to protect our data and provide the user with helpful information when they don't have permission to perform certain actions.
We can also apply different authentication modes depending on the situation which should help with local development and functional testing.
For the second pass I'm considering using Passport.js.

Passport.js looks a lot like hapi security. It does say specifically 'Express-based' web apps, do you think the port to restify is trivial?

Yes, I think so. (Famous last words!)
The main difference with Restify is that you have to ensure that next() is called.

This is now done but will need future improvement as detailed in #158.


HTML in prompts is rendered instead of being escaped

I asked ChatGPT this question:

Semantically, if I'm presenting a group of checkboxes, should I present them as

<input type="checkbox"/>

? Is presenting them as a list important, or should I just do the checkboxes with their labels?

When I sent the question, the extension replaced my code with an HTML checkbox. The same happens when I put other bits of HTML in my questions.
Notably, ChatGPT's responses are properly escaped instead of being rendered as HTML--probably because they're enclosed in a triple-backtick (```) instead of a single backtick (`).

hmmm seems we need to convert the question to string to make sure it wont get transformed to html.

Thanks for reporting this @DawnPaladin, I will be working on this in the next release. Will keep you posted

Similar to #70

Please upgrade to V3.5.10 for the fix. Thanks for opening this issue again and let me know if you face it again.

Thank you for the fix!


How to deal with words without valid word embedding

Hi,
I noticed that some words in the test set don't have valid word embedding. How to deal with them? Are these categories ignored during evluation?
Thanks!

If a node has no word-embedding, we just set the vector to be zeros with same dimension.
Details could be found in Glove.__getitem__() in materials/glove.py.
They will not be ignored during evaluation, since their predictions depends on the graph context instead of their own word-embedding only.

That clarifys.
Thanks!


(tor-browser) Change to all locale installer and update metadata

Description
Switches from the list of locale specific installers in the .csv to the all locale installer. The locale parameters was removed. Updated AU script and package description accordingly.
Also updated a couple of links in the metadata, and updated the title and description to reflect that this is no longer the archive bundle, but an installer (must have been missed when the switch to the installers was made).
Motivation and Context
Fixes #2098
How Has this Been Tested?
Ran update.ps1 to validate that the update script works.
Installed and uninstalled in the test environment.
Screenshot (if appropriate, usually isn't needed):
Types of changes

[x] Bug fix (non-breaking change which fixes an issue)
[ ] New feature (non-breaking change which adds functionality)
[x] Breaking change (fix or feature that would cause existing functionality to change)
[ ] Migrated package (a package has been migrated from another repository)

Checklist:

[x] My code follows the code style of this repository.
[x] My change requires a change to documentation (this usually means the notes in the description of a package).
[x] I have updated the documentation accordingly (this usually means the notes in the description of a package).
[x] I have updated the package description and it is less than 4000 characters.
[x] All files are up to date with the latest Contributing Guidelines
[x] The added/modified package passed install/uninstall in the chocolatey test environment.
[x] The changes only affect a single package (not including meta package).

:white_check_mark: Package verification completed without issues. PR is now pending human review

This LGTM.

@TheCakeIsNaOH awesome work! Thanks for your contribution!


Is pgoapi v1.1.7 up to date? I got "Received two consecutive status_code 3" and might be banned

If I got Received two consecutive status_code 3 on account mike1234, probably banned. will that mean my account is banned?
Let's say if I added 10 small locations along a road, each with 100m radius, that will mean every 100 seconds, the same location is scanned. So in a day, that means 864 scan of the same location. Or, 864 scans of the same exact 10 locations.  But I think it might be expensive if they analyze the data in their log... the servers are probably busy serving data already.
Or can the location be randomized slightly when the app does the scan, such as for
37.77491330000001,<PHONE_NUMBER>7654321 make the last 3 or 4 digits some random numbers and it probably won't affect the scan location.
So can that get detected easily and get banned? (or I suppose if there are 864 x 10 scans per day and you didn't even catch a single Pokemon or spin a PokeStop.
Or it probably is not due to pgoapi v1.1.7 outdated?
2016-08-23 10:12:29,662 [     pgoapi] [   INFO] pgoapi v1.1.7 - Copyright (c) 2016 tjado <https://github.com/tejado>
2016-08-23 10:12:29,666 [       scan] [   INFO] Starting scan of 10 locations
2016-08-23 10:12:29,669 [     pgoapi] [   INFO] Attempting login: mike1234
2016-08-23 10:12:31,314 [     pgoapi] [   INFO] Login successful: mike1234
2016-08-23 10:12:32,762 [     pgoapi] [   INFO] Status code 3 returned. Performing get_player request.
2016-08-23 10:12:32,851 [     pgoapi] [   INFO] Unexpected error during request: Request throttled by server... slow down man
2016-08-23 10:12:32,943 [     pgoapi] [   INFO] Unexpected error during request: Request throttled by server... slow down man
2016-08-23 10:12:33,081 [     pgoapi] [   INFO] Unexpected error during request: Request throttled by server... slow down man
2016-08-23 10:12:33,174 [     pgoapi] [   INFO] Status code 3 returned. Performing get_player request.
2016-08-23 10:12:33,175 [     pgoapi] [   INFO] Received two consecutive status_code 3 on account mike1234, probably banned.

That account is likely banned.  You can verify by attempting to login via NOX and if you receive the banned splashscreen then you are locked out.  The best way to avoid this is to not skip around, and not run the scanner 24/7 you need to give it a cooldown.

thanks...  what is NOX?
I wanted to run the scan 27/7 because I was wondering what the stats are, or what appeared during when I was sleeping.  (such as a Lapras or Aerodactyl)

http://noxappplayer.com/pokemon-go-pc-download/

so you mean by logging into a real game... such as if I use my iPad or old iPhone and try to log in to Pokemon Go and see if I can...

yes, login using a device that is not linked to your main account just to be safe


unit test detected use of eval in tools/docsite/Doc.py

really really must not use eval.
======================================================================
ERROR: test0032_j_tools_docsites_test (tests.jumpscale_test.test09_js_dynamic_walker.TestJSDynamicWalkerTestSearch)
----------------------------------------------------------------------
Traceback (most recent call last):
  File "/home/lkcl/src/lib9/JumpscaleLib/tools/docsite/Doc.py", line 290, in _macros_process
    macro = eval(cmd) #is the result of the macro which is returned
  File "<string>", line 1, in <module>

## ERROR: links

- in doc: doc:links:/opt/code/github/threefoldtech/jumpscale_weblibs/docsites_examples/test/blog/Links.md

**ERROR:** problem with link:[something]("include_test.md")
found unsupported extension

[]
link:link:https://unsplash.com/
link:image:unsplash.jpeg
link:image:balance_inspiration_motivation_life_scene_wander_big.jpg
link:image:piggy_bank_400.png
link:image:piggy_bank_401.png
link:link:http://farming_slides.threefold.me
link:link:https://docs.google.com/presentation/d/11FE7i7DkBO39pYzPpIp_mdafiHdPUMuWN0BoIM0KFjc/edit?usp=drive_web&ouid=101460153806293923139
link:doc:include_test
link:doc:include_test.md
link::include_test.md
```python
ERROR IN MACRO*** TODO: *1 ***
cmd:
j.tools.docsites.macros.include(self,"test5",content=block)
ERROR:
'DocSites' object has no attribute 'macros'


Make accordion icon rotation more natural

Preview: https://deploy-preview-33292--twbs-bootstrap.netlify.app/docs/5.0/components/accordion/

Hmm, I’ve come back to this a couple times and I’m not sure one way or another. Any references for what makes this more natural versus what’s there currently?

This feels more natural to me as it's a clockwise rotation, but I guess in the end it's pretty subjective indeed.
In Microsoft or Google UIs I found both rotations are used (but I'm not sure they are designed like this on purpose, maybe it's a detail they don't care much about).
I feel generally "clockwise" is more intuitive as we see it everyday on clocks/watches.
Clockwise ≈ forward/develop, counter-clockwise ≈ backward/collapse ?

It could use rotateX(180deg) transition, so there's no discussion about the rotation anymore ;)

I'm fine merging this—I agree going with clockwise makes sense.


fix(page): fix GitHub page deployment

:tada: This PR is included in version 1.8.3 :tada:
The release is available on:

npm package (@latest dist-tag)
GitHub release

Your semantic-release bot :package::rocket:


🧑💻:  Add List of the episode.

:red_circle: Title : Add List of episode
:red_circle: Enhancement Aim : Added button View List of Eposode
:red_circle: Changes : On the right side of the enter button, there should be another button called "View List." When I click on it, a list of episodes should open on the model or on the right sidebar.
Screenshots 📷
No

:white_check_mark: To be Mentioned while taking the issue :

Full name : Add List of the episodes with number.
What is your participant role? GSSOC, SSOC (Mention the Open Source Program name. Eg. GSOC, GSSOC, SSOC, JWOC, etc.)

Happy Contributing 🚀
All the best. Enjoy your open source journey ahead. 😎

@ronisarkarexe not required. Before creating any issue, you have to gone through for the similar issue.


Improve semanticdb-scalac performance

Currently, semanticdb-scalac adds quite a bit of overhead (I've heard 20-30%) on compilation. Memory usage is also very high.
This overhead is an issue for larger projects (where compile times are already slow enough) and more interactive usage of the plugin (editor integrations).
I've heard the scalameta parser is a big culprit, -Yrangepos is another one. I think we could actually support 98% of the current functionality by replacing the -Yrangepos requirement and scalameta parse step by running the scalac tokenizer on the source contents and collect all identifier (start, end) pairs. The scalameta parser is used currently to handle resolved names to for example constructors and private[within], I'm sure we can come up with creative workarounds for those cases.
Another potential optimization, but likely not significant, is that we build scala.meta.Database that we convert to org.langmeta.internal.semanticdb.schema.Database, then to Array[Byte] and then write to file. We can probably remove scala.meta.Database and Array[Byte] without big loss of readability or maintainability.

Our experience in https://github.com/scalameta/language-server is that removing the scala.meta.Database => internal.schema.Database conversion can lead up to a ~10x speedup improvement during symbol indexing, this might be a good first step to improve performance in the compiler plugin.
Another cheap win might also be to delegate I/O to a separate thread, although I haven't measured that overhead yet.
Before we start optimizations, we need a good benchmark suite to ensure we're making progress.

I took a stab at this issue today and preliminary results are promising: overhead goes down from ~28% to ~17%.
WIP diff is here https://github.com/scalameta/scalameta/compare/master...olafurpg:perf?expand=1 I still haven't ported some of the more advanced features like naming resolution of named arguments/within/ctors, but symbols/synthetics/messages work like before
I was hoping for a bigger speedup more but this is still a pretty good start. I used -P:semanticdb:profiling:console and to measure the overhead and used scalap as a corpus.
# 2.1.2 baseline
time for i in {1..5}; do time scalac -d target/out -Yrangepos -Xplugin:/Users/ollie/.coursier/cache/v1/https/repo1.maven.org/maven2/org/scalameta/semanticdb-scalac_2.12.4/2.1.2/semanticdb-scalac_2.12.4-2.1.2.jar -P:semanticdb:profiling:console $(find corpus/scalap/a8c43dc/scalax/ -type f); done
# local fatjar from WIP branch
time for i in {1..5}; do time scalac -d target/out -Xplugin:/Users/ollie/dev/scalameta/scalameta/semanticdb-scalac-plugin/target/scala-2.12/semanticdb-scalac_2.12.4-2.1.2-3-af9a2660.jar -P:semanticdb:profiling:console $(find corpus/scalap/a8c43dc/scalax/ -type f); done

I tried to use the scala/compiler-benchmark JMH suite to measure the overhead but it takes a really long time to get any numbers and I don't have an idle computer lying around to run the tests. Using my laptop would mean taking a break from work for 1-2 hours.


Add filters on primary and secondary data use terms

Addresses
Details will soon be added.
Summary

Have you read Terra's Contributing Guide lately? If not, do that first.

Label PR with a Jira ticket number and include a link to the ticket
Label PR with a security risk modifier [no, low, medium, high]
PR describes scope of changes
Get a minimum of one thumbs worth of review, preferably two if enough team members are available
Get PO sign-off for all non-trivial UI or workflow changes
Verify all tests go green
Test this change deployed correctly and works on dev environment after deployment

One bit of functional feedback - If any of the Primary Use checkboxes are selected, one can only unselect at most 2 of the 3 available - the last one cannot be unchecked.


Test coverage for node and cluster listing

Mock data taken from live server
Fixes Jira ticket TEN-152 and TEN-153

Signed-off-by: Soumya Deb<EMAIL_ADDRESS>

@anivargi @gnehapk @kamleshverma1 ping for review.

@debloper Can you please check why this build is failing.

Tests are failing because:
FAILED TESTS:

  Unit Controller: clusterController
    ✖ "before each" hook for "Should get list of clusters"
      PhantomJS 2.1.1 (Linux 0.0.0)
    Can't find variable: _$location_
    test/unit/cluster-controller-test.js:28:36
    ...

  Unit Controller: nodeController
    ✖ "before each" hook for "Should get list of nodes"
      PhantomJS 2.1.1 (Linux 0.0.0)
    Can't find variable: _$location_
    test/unit/node-controller-test.js:28:36
    ...

Which means, my initial patch was correct, and removing $location by @kamleshverma1's suggestion broke the tests. I'll revert it.

@gnehapk @kamleshverma1 I hope it's alright now.

Added the unit tests for both list with the updated response to repositry. Hence closing this issue.


Resolve various issues with UDFs

What changes were proposed in this pull request?
Resolve a couple of issues with UDFs:

Add missing nullable parameters
Backport https://github.com/apache/spark/pull/18615

How was this patch tested?
Ran Spark tests.


Fix Observation#check_time

Fixes intermittent time-related bug in Observation#check_time
Example:
https://travis-ci.org/github/MushroomObserver/mushroom-observer/builds/717764885
For solution, see https://docs.rubocop.org/rubocop-rails/2.7/cops_rails.html#railsdate

Coverage remained the same at 92.163% when pulling 7221282a69bd79aa5af28f61341846c82604b0c2 on observation-check_date into cac3bf82506dde985007b991398567a38bffc912 on master.


Support for Symfony 5.x

Hi guys,
Could be possible the compatibility with symfony 5.x configs?
I'm trying to install Laravel 7 which uses symfony 5 components but minkextension is only compatible till symfony 4.
Thanks in advance

I have just done a pull request for this and I am in your same case.

It works like a charm so I wait for merge !

Perfect, thank you so much!

You could use this branch if you want : cdaguerre:sf-5-compat. Their are 2 other PR on this subjet, I close mine in favorite of this one : https://github.com/Behat/MinkExtension/issues/361 !

Ok, thanks. I'll try to use that branch. Let's see if it works with my project :)

Is any one has a solution to make it run on Symfony 5.x ?

Like this to resolve on my github repo that fix this dependencies:
{
    "repositories": [
        {
            "type": "vcs",
            "url": "https://github.com/chadyred/MinkExtension"
        }
    ],
    "require-dev": {
        "behat/mink-extension": "dev-upgrade/allow-symony-5 as 2.3",
    }
}

@AmokraneMancer  up

Thank you so much @chadyred. it works perfectly !

You're welcome !

Can't make it work as @chadyred suggested:
# composer.json
"require-dev": {
    "behat/mink-extension": "dev-upgrade/allow-symony-5 as 2.3",
...
# CLI
$: composer-2 update
Loading composer repositories with package information
Info from https://repo.packagist.org: #StandWithUkraine
Restricting packages listed in "symfony/symfony" to "5.4.*"
Updating dependencies
Your requirements could not be resolved to an installable set of packages.

  Problem 1
    - Root composer.json requires behat/mink-extension dev-upgrade/allow-symony-5 as 2.3, found behat/mink-extension[dev-master, v1.0.0, ..., 1.3.x-dev, v2.0.0, ..., 2.x-dev (alias of dev-master)] but it does not match the constraint.

Did you add this in your composer.json
{
    "repositories": [
        {
            "type": "vcs",
            "url": "https://github.com/chadyred/MinkExtension"
        }
    ],

I tried that with no luck tho. In the end I've switched to https://github.com/FriendsOfBehat/MinkExtension which works just fine without the need of aliasing and stuff.

You are right, this is the best way as the https://github.com/FriendsOfBehat/MinkExtension  is the main repository for MinkExtension and the maintain repository


Sollumz Not Functional

Do we have a update on the refractor? In its current state this sadly doesn't work - do we have a previous version that works with blender?

Duplicate of https://github.com/Skylumz/Sollumz/issues/35 ?

"Doesn't work" does not help me I need useful information what doesn't work. You can join the codewalker server to stay updated! https://discord.gg/BxfKHkk


🐛 Add issue to project GH action is failing with authentication token issue

Area
Other
Domain
gov.tools
Which wallet were you using?
No response
Context
Issue:

Maybe the authentication token has expired (?)
Workflow file:
https://github.com/IntersectMBO/govtool/blob/develop/.github/workflows/add-issue-to-project.yml
Example Run:
https://github.com/IntersectMBO/govtool/actions/runs/11591218447/job/32270484606 (this link can expire)
Steps to reproduce

Create an issue
Check the action 'add issue to project'
You might receive an email about failing action run

Actual behavior
The action execution fails with authentication error related to token
Expected behavior
The action should execute without issues.

done!

Verified and confirmed it works.


[kernel 5.11 + overlayfs + rootless] : apt-get fails with Invalid cross-device link

NOTE : This issue is same as https://github.com/moby/moby/issues/42055 but not a "dupe" of the Moby issue, because Moby (still) does not use containerd's overlayfs snapshotter
Description

Kernel 5.11 added official support for rootless: https://github.com/torvalds/linux/commit/459c7c565ac36ba09ffbf24231147f408fde4203
But it does not work with rootless containerd yet.
Steps to reproduce the issue:
The issue is easy reproducible with containerd-rootless-setuptool.sh included in nerdctl .
The issue is not specific to nerdctl of course.
$ containerd-rootless-setuptool.sh install
$ nerdctl --snapshotter=overlayfs run --rm ubuntu sh -ec "apt-get update && apt-get install -y sl"
Get:1 http://security.ubuntu.com/ubuntu focal-security InRelease [109 kB]
Get:2 http://archive.ubuntu.com/ubuntu focal InRelease [265 kB]
Get:3 http://security.ubuntu.com/ubuntu focal-security/restricted amd64 Packages [165 kB]
Get:4 http://archive.ubuntu.com/ubuntu focal-updates InRelease [114 kB]
Get:5 http://archive.ubuntu.com/ubuntu focal-backports InRelease [101 kB]
Get:6 http://security.ubuntu.com/ubuntu focal-security/universe amd64 Packages [670 kB]
Get:7 http://archive.ubuntu.com/ubuntu focal/multiverse amd64 Packages [177 kB]
Get:8 http://archive.ubuntu.com/ubuntu focal/main amd64 Packages [1275 kB]
Get:9 http://security.ubuntu.com/ubuntu focal-security/multiverse amd64 Packages [13.3 kB]
Get:10 http://security.ubuntu.com/ubuntu focal-security/main amd64 Packages [621 kB]
Get:11 http://archive.ubuntu.com/ubuntu focal/restricted amd64 Packages [33.4 kB]
Get:12 http://archive.ubuntu.com/ubuntu focal/universe amd64 Packages [11.3 MB]
Get:13 http://archive.ubuntu.com/ubuntu focal-updates/universe amd64 Packages [932 kB]
Get:14 http://archive.ubuntu.com/ubuntu focal-updates/main amd64 Packages [1029 kB]
Get:15 http://archive.ubuntu.com/ubuntu focal-updates/restricted amd64 Packages [198 kB]
Get:16 http://archive.ubuntu.com/ubuntu focal-updates/multiverse amd64 Packages [21.1 kB]
Get:17 http://archive.ubuntu.com/ubuntu focal-backports/universe amd64 Packages [4301 B]
Fetched 17.1 MB in 7s (2545 kB/s)
Reading package lists...
Reading package lists...
Building dependency tree...
Reading state information...
The following NEW packages will be installed:
  sl
0 upgraded, 1 newly installed, 0 to remove and 6 not upgraded.
Need to get 12.7 kB of archives.
After this operation, 60.4 kB of additional disk space will be used.
Get:1 http://archive.ubuntu.com/ubuntu focal/universe amd64 sl amd64 5.02-1 [12.7 kB]
debconf: delaying package configuration, since apt-utils is not installed
Fetched 12.7 kB in 1s (11.7 kB/s)
Selecting previously unselected package sl.
(Reading database ... 4121 files and directories currently installed.)
Preparing to unpack .../archives/sl_5.02-1_amd64.deb ...
Unpacking sl (5.02-1) ...
dpkg: error processing archive /var/cache/apt/archives/sl_5.02-1_amd64.deb (--unpack):
 unable to install new version of './usr/share/doc/sl': Invalid cross-device link
Errors were encountered while processing:
 /var/cache/apt/archives/sl_5.02-1_amd64.deb
E: Sub-process /usr/bin/dpkg returned an error code (1)

Describe the results you received:
apt should work
Describe the results you expected:
...
dpkg: error processing archive /var/cache/apt/archives/sl_5.02-1_amd64.deb (--unpack):
 unable to install new version of './usr/share/doc/sl': Invalid cross-device link
...

Output of containerd --version:
containerd github.com/containerd/containerd v1.5.0-beta.1-24-g096e99fe7 096e99fe7e3febdc96df26f743d45d18b8087b6d

Any other relevant information:
The issue is only reproducible on mainline kernel 5.11: https://kernel.ubuntu.com/~kernel-ppa/mainline/v5.11/amd64/
The issue does not happen on Canonical's kernel 5.8 (5.8.0-43-generic #49-Ubuntu), which supports rootless overlayfs by patching the kernel: https://kernel.ubuntu.com/git/ubuntu/ubuntu-groovy.git/commit/fs/overlayfs?h=Ubuntu-5.8.0-43.49&id=32e59dd0ef5746a61198c1a18d2ab57c83d28599
Rootful mode is unaffected.

Fixed in https://github.com/containerd/containerd/pull/5076


Allow fiscal host to choose where to "Bill To" automatic invoices

User story
As a host admin, I wanna be able to choose that all automated invoices are "Bill To" the collective itself and one of its admin, and not to the fiscal host.
This issue is basically the opposite of #5495 raised by Alanna. OCF and OC Europe have different needs on this point.
Best solution for this problem
Add a host setting to allow the host to have only automated invoices "Bill To" the collective.

Automated invoices can be "Bill To" the fiscal host (including address, tax number); or

Automated invoices can be "Bill To" the collective (including address, tax number)
P1 high frequency, high impact

[ ] @Betree to iterate on feedback and merge this week


[VERSION] 1.21.1

also a neoforge port would be nice

Will do this over the weekend

Forge 1.21.1 and NeoForge 1.21.1 have been released, you can either grab them at the releases from this repo or from the modrinth project.


Switch to v2 commands in all samples

Note:
1 - All Golang examples remain with prepare, will be converted in the api repo along with updates there
2 - The two step sign and submit sample (submit-order) needs to stay with prepare for now until core releases the updated v2 transaction endpoint on the Vega node


feat: add Time::toDatabase()

Description
Closes #6124

add Time::toDatabase()

Checklist:

[x] Securely signed commits
[x] Component(s) with PHPDoc blocks, only if necessary or adds value
[ ] Unit testing, with >80% coverage
[x] User guide updated
[x] Conforms to style guide

Added the docs.

This feature was removed by https://github.com/codeigniter4/CodeIgniter4/pull/6509


我是在ubuntu上跑的，不太确定windows上面能否运行。你这个问题我认为是没有正确安装pycuda，你可以去pycuda下面问一下


showErrors breaks on non-existing field

When using the showErrors() method and sending a field that does not exist (at that point) causes the plugin to break with:
Uncaught TypeError: Cannot read property 'name' of undefined
reproduce

here the field that has an error, test2, doesnt exist in the form and passing this rule to the showErrors call will break the script
fix:
in function idOrName add the following line
if (!element) return;

It's not clear to me that this is a good change. Shouldn't passing bad input to a method cause an error? I agree a better message would be nice, but I don't like the idea of just ignoring the bad input.

The idea behind it is that you currently cannot add rules to a field that
does not yet exist in the html form, tho it might be added later async. It
is not always the case that you can know the fields beforehand. Also
disregarding the faulty input should not matter that much as you will always
have to verify in code, you can never trust client-side javascript anyways.
Alternatively there could be another field in hte options or another method
added to support these kinds of input implemented like the dependant fields.
2011/10/11 Craig Stuntz <
<EMAIL_ADDRESS>
It's not clear to me that this is a good change. Shouldn't passing bad
input to a method cause an error? I agree a better message would be nice,
but I don't like the idea of just ignoring the bad input.
--
Reply to this email directly or view it on GitHub:
https://github.com/jzaefferer/jquery-validation/issues/212#issuecomment-2354935

this could be quite annoying when validation (at least, partly) is done on server side, and backend returns error for non-existing field. in that case, backend, obviously, needs to be fixed, but the exception message ("the element is not found" or something) is not helpful at all.


tsp, investigate Java type for TypeSpec decimal scalar

Maybe BigDecimal.
Currently do double https://github.com/Azure/autorest.java/pull/2388

handled by https://github.com/Azure/autorest.java/issues/2427


Translate domain structs to Ecto models

This involves

Initializing Ecto in our phoenix project, which was created with the --no-ecto flag.
Translating our existing domain structs into Ecto models and updating any existing usages/doctests.

This is somewhat blocked by #42.

Done!


Shared datasets in org group count text fix

Fixes #6150
Now it shows "1 shared dataset" instead of "1 shared map".

CR @xavijam

:+1:

✨


Fix sandcastle contributors guide link

Description
This is a very small edgecase scenario that happens when someone tries to open a sandcastle html file directly instead of using the local server. The page it was trying to direct to is on the Wiki we don't really use anymore and instead tried to create a page (if you have access) or redirects to the home page instead of the info you need.
There was one other instance of this check that did have a valid link so this just updates it to match that one
https://github.com/CesiumGS/cesium/blob/fddd0f17573373275d3026eaf502f8ede03c895d/Apps/Sandcastle/index.html#L36-L37

Issue number and link
No issue

Testing plan

Open the Sandcastle gallery in your file explorer
Open any html file directly
You should see an alert about using the local server and when clicking OK it should redirect you to the contributor docs.

Author checklist

[ ] I have submitted a Contributor License Agreement
[ ] I have added my name to CONTRIBUTORS.md
[ ] I have updated CHANGES.md with a short summary of my change
[ ] I have added or updated unit tests to ensure consistent code coverage
[ ] I have updated the inline documentation, and included code examples where relevant
[ ] I have performed a self-review of my code

Hi, what do you mean by this step?

Open any html file directly

Open the file directly, like double click it and open in a browser not loading it from the localhost server


fix: node not updating

Description of change
If updating node information, such as the URL, the node configuration list will NOT change accordingly and uses the old information (the edited information isn't overwriting the data in the networkConfig store variable).
Links to any relevant issues
None
Type of change

Fix (a change which fixes an issue)

How the change has been tested
Platforms:

MacOS (10.15.7)

Cases:

Add a valid node (devnet or mainnet), click on "Edit details", change URL to a different valid node and click "Update"

https://mainnet-node.tanglebay.com (current) and https://node.tanglebay.com (old) both work

Change checklist

[x] I have followed the contribution guidelines for this project
[x] I have performed a self-review of my own code
[x] I have commented my code, particularly in hard-to-understand areas
[x] I have made corresponding changes to the documentation
[x] I have added tests that prove my fix is effective or that my feature works
[x] I have checked that my latest changes pass CI tests
[x] New and existing unit tests pass locally with my changes

Because of #1910 this PR is no longer needed


weird behaviour

After being happy with tmux-copycat for months now it seems to behave a bit erratic with the matches
when i do prefix /  and search for someting it highlights more than the match..
prefix C-u doesn't do anything at all either.
I've been playing with GREP_COLORS and other things but i don't think that could be an issue:
##start vimode history and term colors
setw -g mode-keys vi
set -g default-terminal "xterm-256color"
set-option -g history-limit 5000
##end
##start copy to clipboard
bind-key -t vi-copy v begin-selection
bind-key -t vi-copy y copy-pipe "reattach-to-user-namespace pbcopy"
bind-key -t vi-copy Enter copy-pipe "reattach-to-user-namespace pbcopy"
##end
##start mouse and others
setw -g mode-mouse on
set-option -g mouse-select-pane on
set -g mouse-resize-pane on
##end
##start key binding to move around
bind-key -n C-S-Up resize-pane -U 10
bind-key -n C-S-Down resize-pane -D 10
bind-key -n C-S-Left resize-pane -L 25
bind-key -n C-S-Right resize-pane -R 25
##end
##start status bar colors and possition
#set-option -g pane-active-border-fg "#4775A3"
set-option -g pane-active-border-fg blue
set-option -g message-bg "#393B3D"
set-option -g message-fg white
set-option -g pane-border-fg "#273646"
set-option -g status-position top    # position the status bar at top of screen
source '/Users/jgarcia/.vim/bundle/powerline/powerline/bindings/tmux/powerline.conf'
##end
##start TPM Pluginx
set -g @tpm_plugins '
tmux-plugins/tpm
tmux-plugins/tmux-copycat
tmux-plugins/tmux-sensible
'
run-shell '~/.tmux/plugins/tpm/tpm'
##end

Hi Bruno I'm running 1.9a.
My laptop restarted yesterday for an update  ,  and when everything came back copycat was running just fine?
my copycat version is # v2.1.0, Jan 01, 2015
it all works just fine now ... weird , but thanks!!

Hey @bechampion,
yea, that's weird. Glad to hear everything is ok now.
I'll close the issue but please reopen if this happens again.


Is there any approach to get keys that match a pattern?

I want to get keys that match a specific pattern.
In redis-cli, it just likes
keys h*o

then will return all keys match that pattern. But, how can I approach it in redis-objects.

Did you figure this out?

redis-objects requires redis-rb. So I think it's a approach: $redis.keys 'foo*bar'


Restore-DbaDatabase - parameter for backups with passwords

Summary of new feature
If a backup file is password protected, there is no parameter to pass in for the password for restore
Proposed technical details (if applicable)
Example:
Restore database AdventureWorksDW from disk='D:\test.bak' With Password = 'pwd1'
Restore-DbaDatabase -server $Server -path "$FullBackupFilePath" -DatabaseName $DatabaseName -Password $Password
Latest version of dbatools as of writing
1.0.123

Working on it.
As the feature is deprecated in SMO I'm just going to implement the restore bits for now.

That's all in the restorepasswd branch now.  would you mind taking it for a 'real world' test drive before I merge it in.

And it turns  out I'd picked up on an old version of SMO on that dev machine. Unfortunately that means we can't do it now as it was deprecated, and removed in<PHONE_NUMBER>.0 completely.
Sorry about that :(


WIP windows support for kured

Signed-off-by: Mark Rossetti<EMAIL_ADDRESS>Here is a prototype that I have working for Windows support.
A few things to note include:

This requires WindowsHostProcessContainers feature (introduced in v1.22) to be enabled for kube-apiserver and kubelet

This also means that kubeclient/API refs must be v1.22 or greater
WindowsHostProcessContainers is on-track for beta in v1.23

InClusterConfig does not work with HostProcessContainers today (see not and linked issue in code)
An init container is used to register a scheduled task that runs on startup to delete c:\var\run\reboot-required if it exists. This way things outside of the Windows servicing stack can write the sentinel file and expect a reboot to be triggered once.
The script to check for pending reboots will write c:\var\run\reboot-required if one of several registry keys controlled by the servicing stack is set. These keys are cleared as servicing operations are processed.
Windows escapes "'s in command line args (these interfere with command construction if not trimmed)
This PR does not address how the Windows container image should be built. I left some open questions / comments in the dockerfile / makefile for discussion tho

@marosset Are there any news on this? Is this still WIP?


feature: GET /extension/event/next API

Codecov Report

Merging #8 (a5398c1) into main (9f3f927) will decrease coverage by 0.88%.
The diff coverage is 91.17%.

@@            Coverage Diff             @@
##             main       #8      +/-   ##
==========================================
- Coverage   95.00%   94.11%   -0.89%
==========================================
  Files           4        5       +1
  Lines         120      153      +33
==========================================
+ Hits          114      144      +30
- Misses          4        6       +2
- Partials        2        3       +1

Impacted Files
Coverage Δ

internal/client.go
59.09% <40.00%> (-7.58%)
:arrow_down:

extension/api.go
100.00% <100.00%> (ø)

:mega: We’re building smart automated test selection to slash your CI/CD build times. Learn more


configured visible action do not match visible actions

Describe the bug
Einstellungen->Allgemeine Einstellungen->Anzeige->Sichtbare Nachrichtenaktionen
Englich: "visible message actions"(?)
is set to:
DELETE+ARCHIVE+MOVE+SPAM
The actually visible actions are:
ARCHIVE+DELETE+MARK (UN)REAT+PREVIOUS+NEXT
To Reproduce
should be obvious
Expected behavior
The 4 configured actions being visible and all other actions being in the menu, screen space permitting.
All visible actions actually being configurable.
("mark as unreat" isn't a very often used action for me and would do well being in the menu. Navigating to next/prev I never, ever use.)
Screenshots
(trying to find out how to upload screenshots in the desktop browser version)
Environment (please complete the following information):
JMAP DEV
Additional context
Logs

Trying to find out where this happens in the source code to propose a fix but I'm betting lost.

See MessageList.configureMenu().
I created a new issue proposing a more generic solution to this problem: #5300


Ported to version 4.0 and font spacing/colors aren't working

I'm not sure if this is dead or not but I ported this to 4.0 here:
https://github.com/mainframed/x3270/commit/dbcb2138668e59c66d3c0cfb4575bafb1b8a3726
And it compiles and works, sort of. Two issues: The font spacing doesn't put the characters in the right place, unless I highlight over them, also intense colors (bold) seems to put the background over the text.
I'm a little in over my head when it comes to writing X11 C code and any help would be appreciated.
Here's some examples (spacing issues):

vs

And here's what happens when you use the intense hilight for 3270:
Normal:

xft (monospace-12):

I'm not sure if this is dead or not but I ported this to 4.0 here:
mainframed/x3270@dbcb213
And it compiles and works, sort of. Two issues: The font spacing doesn't put the characters in the right place, unless I highlight over them, also intense colors (bold) seems to put the background over the text.
I'm a little in over my head when it comes to writing X11 C code and any help would be appreciated.
Here's some examples (spacing issues):

vs

And here's what happens when you use the intense hilight for 3270:
Normal:

xft (monospace-12):

Nice to see my patch is useful for someone :-)
It was a long time ago when I was experimenting with this code. I think I had the same issue with the font spacing, apparently the spacing doesn't account with these new fonts. Back then I didn't try to actually fix it in the code, but instead I was just setting the appropriate font size in the terminal. Not sure about the second issue though. Could you try to experiment with the font size (maybe some other related parameters like the terminal resolution, etc.) to check if it works fine with some appropriate size? Maybe it affects the second issue as well. If that's true then it could be used to normally fix the issue in the code.

Ok, can confirm that adjusting the font size fixed the kerning/spacing issue:

Maybe it affects the second issue as well. If that's true then it could be used to normally fix the issue in the code.

No change. I'm almost certain this has something to do with setting "intense" and I'm not familiar enough with X api to figure it out.
I think it's these lines:
    XGetGCValues(display, gc, GCForeground, &xgc_values);
    XRenderColor xr_color = {0x00ff, 0x00ff, 0x00ff, 0xffff};     /* Convert GC color to XRenderColor */
    memcpy((char*)&xr_color.red + 1, (char*)&xgc_values.foreground + 2, 1);
    memcpy((char*)&xr_color.green + 1, (char*)&xgc_values.foreground + 1, 1);
    memcpy((char*)&xr_color.blue + 1, (char*)&xgc_values.foreground + 0, 1);


Guice scope annotations are ignored

I have a Resource class annotated with com.google.inject.Singleton, with its constructor annotated with com.google.inject.Inject.  This ends up having RequestScope in Jersey and is instantiated on every request.
I don't understand the innards of the bridging mechanism, but given that it requires Guice's Inject annotation to work, shouldn't it also respect Guice's scope annotations?

Does this happen for all class registered as Singleton?


Settings path to userData

Hi,
I would need to configure the path to userData folder as in our app user should be able to configure the path where the application runs on using settings file on their home directory. However setting that path needs to happen before ready event gets called on Electron (see here: https://electronjs.org/docs/all#appsetpathname-path)
How could I set this path before the ready event gets called? :)

Hey,
when it comes to running your code before ready event this will be tricky because of the meteor-desktop architecture. It needs to be implemented as a new feature. What is your deadline for this?

We'll be dropping out new version today of our App, which for now only supports storing our own files in the defined path (not localstorage etc.). But after that, as soon as you have time to implement this feature, it would be greatly appreciated :)
We will usually have 2-3 weeks of downtime after releasing new update, so if this would be available within the next month, then I would highly appreciate it! :)


Add a Demo or Documentation for Tensor FLow Play and related tools

I would like to work on this issue. Can you please assign this to me?

@kashish0505kashyap go for it


No Way to Stage an Application Without First Starting it

Currently, the only way to stage an application is to attempt to start it at least once.  Doing a cf push --no-start is not sufficient to cause staging (which is a good thing!).  In addition, cf restage will not restage an application that has not been staged once before.  This was reasonable in a world where there was only a single process type (web) that was tied to start.
With the addition of tasks, we now need a way to stage a droplet, but since that code may not start the web process type successfully (or may not even have a web process type), we need a way to do it without requiring a start of the web process type.
A couple of non-binding suggestions are either a cf stage command, or expanding cf restage so that it works against applications that have not been staged before.

/cc @mminella @d4v3r @jbayer

I don't think there is a (non-experimental) API to stage an app? @SocalNick
cf restage returns an error if the app hadn't been staged before because the API call does.

@nebhale staging without starting can be done with the V3-API, we are beginning our next epic to put these APIs in the hands of the CLI to start developing V3 commands: https://www.pivotaltracker.com/epic/show/3189929

The v3-stage command in 6.31.0 calls the V3 API Nick referred to.


Python 2 On JupyterHub-Teaching

Good morning,
I am trying to deploy a JupyterHub teaching server and I have not found any problems so far. However, as I have seen, I can only use Python 3 kernels, and I was wondering if there is a way to install Python 2 so it can be used to.
Regards.

Yes, you can install Python 2. It's not part of this deployment, but on the system after deploying, you can create an env with Python 2 and register that as a kernel:
# create a conda env called 'py2' with Python 2 and IPython
/opt/conda/bin/conda create -yq -n py2 python=2 ipykernel

# make this env available globally as a kernel
/opt/conda/envs/py2/bin/ipython kernel install --prefix=/opt/conda

You can install any additional packages you want to be available in the Python 2 env:
conda install -n py2 numpy scipy matplotlib

etc.


fixes DeviceFilter initialization behavior (Issue #30 [IBeaconFilter] and the remaining filters), adds more restrictive MAC validation to BtAddrFilter

As already commented in the issue ( #30 ) it fixes the initialization for iBeacons. Now we check if the args are not None explicitly, because otherwise major/minor IDs == 0x00 won't be filtered correctly.

Coverage remained the same at 92.523% when pulling 776e10ec4c6de9ddc4b1fb2eeb28ddbac1e091c3 on cereal:patch-1 into bf14608c1a6bc7b876abcf2e77431758aba71be8 on citruz:master.

Only some linting issues - how did you disable this in your previous build @citruz ? :)
lint runtests: commands[0] | pylint beacontools
************* Module beacontools.structs.eddystone
beacontools/structs/eddystone.py:1:0: R0401: Cyclic import (beacontools.packet_types -> beacontools.packet_types.ibeacon -> beacontools.utils) (cyclic-import)
beacontools/structs/eddystone.py:1:0: R0401: Cyclic import (beacontools.packet_types -> beacontools.packet_types.estimote -> beacontools.utils) (cyclic-import)
beacontools/structs/eddystone.py:1:0: R0401: Cyclic import (beacontools.packet_types -> beacontools.packet_types.eddystone -> beacontools.utils) (cyclic-import)

I tried this patch, as it was recommended to be solution to problems on RPI 3B+, but I am getting
Exception in thread Thread-1:
Traceback (most recent call last):
  File "/usr/lib/python3.5/threading.py", line 914, in _bootstrap_inner
    self.run()
  File "/home/pi/venv3/lib/python3.5/site-packages/beacontools/scanner.py", line 98, in run
    self.set_scan_parameters()
  File "/home/pi/venv3/lib/python3.5/site-packages/beacontools/scanner.py", line 141, in set_scan_parameters
    filter_type)
struct.error: required argument is not an integer

running the same code...

I tried this patch, as it was recommended to be solution to problems on RPI 3B+, but I am getting
Exception in thread Thread-1:
Traceback (most recent call last):
  File "/usr/lib/python3.5/threading.py", line 914, in _bootstrap_inner
    self.run()
  File "/home/pi/venv3/lib/python3.5/site-packages/beacontools/scanner.py", line 98, in run
    self.set_scan_parameters()
  File "/home/pi/venv3/lib/python3.5/site-packages/beacontools/scanner.py", line 141, in set_scan_parameters
    filter_type)
struct.error: required argument is not an integer

running the same code that works without problems with beacontools installed from PyPi.

Hey, thanks for testing! I fixed it in https://github.com/citruz/beacontools/pull/31/commits/d92744a06251f6636cbe0811a14ec3ac6531a2f2 - can you please confirm, that it works now as expected?
Cheers

Sure! I will do so tonight and let you know.
--
Rafał Skolasiński
Software Engineer
GitHub: https://github.com/RafalSkolasinski
Kwant GitLab: https://gitlab.kwant-project.org/r-j-skolasinski
On Tue, 11 Dec 2018 at 13:35, Kai Oliver Quambusch<EMAIL_ADDRESS>wrote:

I tried this patch, as it was recommended to be solution to problems on
RPI 3B+, but I am getting
Exception in thread Thread-1:
Traceback (most recent call last):
File "/usr/lib/python3.5/threading.py", line 914, in _bootstrap_inner
self.run()
File "/home/pi/venv3/lib/python3.5/site-packages/beacontools/scanner.py", line 98, in run
self.set_scan_parameters()
File "/home/pi/venv3/lib/python3.5/site-packages/beacontools/scanner.py", line 141, in set_scan_parameters
filter_type)
struct.error: required argument is not an integer
running the same code that works without problems with beacontools
installed from PyPi.
Hey, thanks for testing! I fixed it in d92744a
https://github.com/citruz/beacontools/commit/d92744a06251f6636cbe0811a14ec3ac6531a2f2

can you please confirm, that it works now as expected?

Cheers
—
You are receiving this because you commented.
Reply to this email directly, view it on GitHub
https://github.com/citruz/beacontools/pull/31#issuecomment-446187253,
or mute the thread
https://github.com/notifications/unsubscribe-auth/AKa_9Rd2MPtUGpHZBdfu9jVhkWx8K-Ndks5u36aUgaJpZM4Y5-_w
.

I did pull just now. It solved the problem on RPI 3B+!

Guys, if you need someone to test it again on the hardware before merge, let me know!

Guys, if you need someone to test it again on the hardware before merge, let me know!

Yeah that would be great! :D

Thank you for validating, @RafalSkolasinski. From my point of view it's ready, I just merged the PR into a release branch. Now I will do some final tests and prepare the release.

@citruz Awesome! Just tested tip of this branch and yours release1.3.1.
All are fixing the problem mentioned in https://github.com/citruz/beacontools/issues/27 and seems to work properly. Thanks for this awesome library! I am happy to test some stuff in future if needed ;-)

Great! I'll get back to you as soon as I refactored the Scanner :)
thanks for testing!
Am Do., 13. Dez. 2018, 22:22 hat RafalSkolasinski<EMAIL_ADDRESS>geschrieben:

@citruz https://github.com/citruz Awesome! Just tested tip of this
branch and yours release1.3.1.
All are fixing the problem mentioned in #27
https://github.com/citruz/beacontools/issues/27 and seems to work
properly. Thanks for this awesome library! I am happy to test some stuff in
future if needed ;-)
—
You are receiving this because you authored the thread.
Reply to this email directly, view it on GitHub
https://github.com/citruz/beacontools/pull/31#issuecomment-447125216,
or mute the thread
https://github.com/notifications/unsubscribe-auth/AAJvWzO0oozWUaqrtxac5k942DXJ1BBzks5u4sUOgaJpZM4Y5-_w
.


VMCS -> VMXON

According to the intel IA32 development manual (Volume 3 C3 23.7):
"Before executing VMXON, software should allocate a naturally aligned 4-KByte region of memory that a logical
processor may use to support VMX operation. This region is called the VMXON region."

@krispybyte : Thanks for your contribution! The author(s) have been notified to review your proposed change.

@corob-msft : Thanks for your contribution! The author(s) have been notified to review your proposed change.


GraphQL input type is ignored

Workaround: Rename input to type before graphqlgen does not work.
It means we can not use the recommended input pattern.

Ok, it somehow works, me bad.


Add haplotype map reference

Done! I don't see why it wouldn't work

perhaps the file would be better suited under germline_resources instead of genome

yep sounds good, and a mention in the READme would also be good.

Done! Who do I bother for a merge?


Don't ever invalidate rt.jar

There are issues when using jdk > 8 where the rt.jar file can be
invalidated by ExternalHooks. This causes spurious rebuilds. I think
it's fair to assume that rt.jar never changes. If a dependency is named
rt.jar, then invalidation may not work correctly but I think that this
is the more important case to handle.
I verified that before this change, it was impossible to run
akka-actor/compile twice in a row using adopt jdk 11 and, after this
change, re-compilation worked as expected.

[ ] I've read the CONTRIBUTING guidelines

Fixes https://github.com/sbt/zinc/issues/622 in sbt at least.

Confirmed with Akka and sbt 1.3.0-RC1 in https://github.com/akka/akka/pull/26935 - this is a huge improvement, thanks!

Great, thanks!


Content Security Policy

Problem Description
Hello. I just bought divi and now I would like to use DIVI in connection with a plugin developed by us. Our customers attach great importance to security. Therefore, we have to activate a very strict Content Security Policy (CSP) on all pages that integrate our plugin. The DIVI Theme Builder uses e.g. unsafe scripts and unsafe css. Even the themes, generatet with DIVI uses the unsafe inline skripts/css. How can I get DIVI to be compatible with strict CSP?
Do you provide for example a list of automatic generates nouce for the scripts?
Steps To Reproduce

Use a strict CSP witch dosn't allow unsafe inline scripts & css.

Thanks.

Hello?
Any answer for your cutomer?

I would suggest you to                   mention the additional information while contacting                   with them which should be soon enough so they get your                   idea more clearly!                 Looks like you are not using                   the "Reply-to" email address when sending your last                   email to us here. When you reply back to us make sure                   you just hit the reply button in your mail client and                   not to forward or adjust the email address. Our system                   will then better recognize your message. Thanks so                   much!
--                                                                                Drin                         from                           Elegant Themes | -- |   | Drin                         from                           Elegant Themes
--
| Drin                         from                           Elegant Themes
On Mon, Feb 10, 2020 at                   07:51 AM<EMAIL_ADDRESS><EMAIL_ADDRESS>wrote:                                                                ok. please provide                         them with the additional informations, I give to                         them.                                              Viele Grüße Dirk Heymer Software-Entwicklung Datenschutz-Management                        Am 10.02.2020 um 16:49                         schrieb Drin from Elegant Themes:                                              Hi Dirk! https://elegant-themes-f149edab9071.intercom-mail.com/images/emojis/v2/72x72/1f44b.png                                              Drin here!                        Thank you for the                         patience, and sorry about what you are                         experiencing, in those cases I would give a few                         more days to the developers to reply back to you                         as they will do so!                       --                       https://elegant-themes-f149edab9071.intercom-mail.com/avatars/3293347/square_128/viber_image_2019-06-24_19-18-42-1561396952.jpg?1561396952                       Drin from                       Elegant Themes                        On Mon, Feb 10, 2020                         at 04:35 PM, "Dirk Heymer"<EMAIL_ADDRESS>                       wrote:                                               With another supplier                         - a plugin manufacturer - we found a solution to                         the problem that would also work in the DIVI                         case. This would benefit not only us, but also                         all other DIVI customers, since the DIVI theme                         would then no longer be a gateway for attacks on                         websites.                       The simple solution                         provides that you provide the inline scripts,                         which you cannot do without, with a nonce value.                         This nonce value can then simply be included in                         the CSP rules and the error is done.                       I hope to receive a                         solution from you shortly, otherwise I would                         have to advise our customers against DIVI for                         security reasons.                       sincersly                       Dirk Heymer                       Data security officer                        On Mon, Feb 10, 2020                         at 04:30 PM, "Dirk Heymer"<EMAIL_ADDRESS>                       wrote:                                               https://elegant-themes-f149edab9071.intercom-mail.com/i/o/183644771/7a880cb19a5792c5f97ccaa3/CSP-ERROR2.jpg                       We are not allowed to                         provide a URL or access to our system due to                         contractual obligations with our global                         corporate customers.                        On Mon, Feb 10, 2020                         at 04:27 PM, "Dirk Heymer"<EMAIL_ADDRESS>                       wrote:                                               We develop SaaS                         systems based on Wordpress. Our customers attach                         great importance to security - but would like to                         use your theme. The errors arise when strict                         CSPs are applied. So the divi theme is just too                         insecure.                        On Mon, Feb 10, 2020                         at 04:22 PM, "Dirk Heymer"<EMAIL_ADDRESS>                       wrote:                                               OK. More Details:                         Hello. I would like to use DIVI in connection                         with a plugin developed by us. Our customers                         attach great importance to security. Therefore,                         we have to activate a very strict Content                         Security Policy (CSP) on all pages that                         integrate our plugin. The DIVI Theme Builder                         uses e.g. unsafe scripts. How can I be                         compatible with DIVI e.g. reach by nouce?                       Your Theme is insecure                         and vulnerable.                       I see a couple of CSP                         errors!                       https://elegant-themes-f149edab9071.intercom-mail.com/i/o/183642179/1941b1cdbe7ccd889f23e3e0/CSP-ERROR.jpg                        On Mon, Feb 10, 2020                         at 04:21 PM, "Nikola"<EMAIL_ADDRESS>                       wrote:                                               Hi there https://elegant-themes-f149edab9071.intercom-mail.com/images/emojis/v2/72x72/1f600.png                                              We’re experiencing                         high chat volumes at the moment. Please add                           as much detail about your issue or question as                           you can, and be sure to include your                           website URL. You can also add screenshots                         if that's helpful :)                       If you close this chat                         box, don't worry, you will receive our response                         via email automatically. https://elegant-themes-f149edab9071.intercom-mail.com/images/emojis/v2/72x72/1f44d.png                                               On Mon, Feb 10, 2020                         at 04:20 PM, "Operator"<EMAIL_ADDRESS>                       wrote:                                               Elegant Themes                         typically replies in a day.                        On Mon, Feb 10, 2020                         at 04:20 PM, "Dirk Heymer"<EMAIL_ADDRESS>                       wrote:                                               Your employee Anupam                         referred me to your Github appearance on my last                         question regarding CSP. I entered my question                         there 5 days ago. Not even an answer that you                         saw my question. Is that your kind of support?                        On Tue, Jan 28, 2020                         at 12:51 PM, "Elegant Themes"<EMAIL_ADDRESS>                       wrote:                                               Hey                         there                        Can                         we answer questions you have about our plans and                         pricing?

Hi, I'm afraid Divi will not function properly with the CSP configured as you have in your example. While we may consider improving this in the future, it is not currently a priority. Sorry about that!

Is that your answer?
Should I understand that security is not a priority for your company? Is this your official answer that you want to publish?
So you are not ready to close a known vulnerability, although the solution is extremely simple to implement?
That is shocking!

CSP is a major issue. Cross-site scripting happens in many WordPress plugins lately. As confirmed by CVE reports on a daily basis.
Please consider looking into this as a high priority. Elegant Themes could be a leader in Theme and web security if effort is given to ensure XSS exploits don't occur.


Feature/platfowner/cross shard

Summary:

Add StateManager with skeleton code.
Integrate backupDb, node db, and consensus logic with the state manager.
Add tests for the state manager.
Apply some renaming.
Add enableStateVersionOpt feature flag and TODOs for the next step.

All comments addressed. PTAL @liayoo

All comments address! Now merging..


libmmal not found issue.

I followed the instructions but skipped enabling the camera as I had already verified the camera working.
Then... "no images". Some debugging shows:
tanky:~/RPi_Cam_Web_Interface> sudo su - www-data
www-data@tanky:~$ raspimjpeg
raspimjpeg: error while loading shared libraries: libmmal_core.so: cannot open shared object file: No such file or directory
www-data@tanky:~$

A google search for this error shows that I need to enable legacy support for the camera. Then the install document says to enable that in "raspi-config". So I ran raspi-config and found that "interface options" is no longer option 5 and the camera is not mentioned there.
I figured that one out before: Modern kernels auto-detect the camera, so it is enabled automatically, no longer requires a raspi-config entry.
So I downloaded a recent OS, should I have chosen an older one? There are plenty of hints that bookworm is supposed to be working.

Bullseye is OK for this software.
I don't know about Bookworm. They were threatening removing the legacy camera support at some time.

So "bullseye" is older, I indeed have to downgrade?
I have spent quite some time on getting everything ready. The camera stuff is not quite "the only thing" going on on this raspberry. :-(

Raspberry OS now have moved to a different way of interfacing to cameras (libCamera) instead of using the MMAL interface which had been used for all Raspberrys since they were introduced.
This software relies on the MMAL interface which is supported via the legacy camera option up to Bullseye but is not present in bookworm.
It is a lot of work to change this software to use the libCam interface, particularly as the MMAL interface provided some facilities which are not present in libCam.