Spongycastle having openssl issue. App rejected by google play

Hi
I have uploaded an updated apk to play store which has spongycastle added in gradle script.
But the apk got rejected by google play who sent me a message

OpenSSL
The vulnerabilities were addressed in OpenSSL 1.02f/1.01r. To confirm your OpenSSL version, you can do a grep search for:
$ unzip -p YourApp.apk | strings | grep "OpenSSL"
You can find more information and next steps in this Google Help Center article.

I followed the steps and found these

OpenSSLPBKDF
!$PBEWithMD5And128BitAESCBCOpenSSL
!$PBEWithMD5And192BitAESCBCOpenSSL
!$PBEWithMD5And256BitAESCBCOpenSSL
BLorg/spongycastle/crypto/generators/OpenSSLPBEParametersGenerator;
QLorg/spongycastle/jcajce/provider/symmetric/AES$PBEWithMD5And128BitAESCBCOpenSSL;
QLorg/spongycastle/jcajce/provider/symmetric/AES$PBEWithMD5And192BitAESCBCOpenSSL;
QLorg/spongycastle/jcajce/provider/symmetric/AES$PBEWithMD5And256BitAESCBCOpenSSL;
BLorg/spongycastle/jcajce/provider/symmetric/OpenSSLPBKDF$Mappings;
?Lorg/spongycastle/jcajce/provider/symmetric/OpenSSLPBKDF$PBKDF;
9Lorg/spongycastle/jcajce/provider/symmetric/OpenSSLPBKDF;
MLorg/spongycastle/openssl/jcajce/JceOpenSSLPKCS8DecryptorProviderBuilder$1$1;
MLorg/spongycastle/openssl/jcajce/JceOpenSSLPKCS8DecryptorProviderBuilder$1$2;
KLorg/spongycastle/openssl/jcajce/JceOpenSSLPKCS8DecryptorProviderBuilder$1;
ILorg/spongycastle/openssl/jcajce/JceOpenSSLPKCS8DecryptorProviderBuilder;
CLorg/spongycastle/openssl/jcajce/JceOpenSSLPKCS8EncryptorBuilder$1;
ALorg/spongycastle/openssl/jcajce/JceOpenSSLPKCS8EncryptorBuilder;
OpenSSLPBKDF
"PBEWithMD5And128BitAES-CBC-OpenSSL
"PBEWithMD5And192BitAES-CBC-OpenSSL
"PBEWithMD5And256BitAES-CBC-OpenSSL
PBKDF-OpenSSL
Unable to create OpenSSL PBDKF:
+com.android.org.conscrypt.OpenSSLSocketImpl
7org.apache.harmony.xnet.provider.jsse.OpenSSLSocketImpl
OpenSSLDie
DH_OpenSSL
DSA_OpenSSL
ECDH_OpenSSL
ECDSA_OpenSSL
%s(%d): OpenSSL internal error, assertion failed: %s
You need to read the OpenSSL FAQ, http://www.openssl.org/support/faq.html
OpenSSL CMAC method
OpenSSL PKCS#3 DH method
OpenSSL DH Method
OpenSSL DSA method
OpenSSL EC algorithm
OpenSSL ECDH method
OpenSSL ECDSA method
OpenSSL HMAC method
OpenSSL RSA method
OpenSSL 'dlfcn' shared library method
OpenSSL default
EVP part of OpenSSL 1.0.1c 10 May 2012
cU!
}AES part of OpenSSL 1.0.1c 10 May 2012
ASN.1 part of OpenSSL 1.0.1c 10 May 2012
Big Number part of OpenSSL 1.0.1c 10 May 2012
lhash part of OpenSSL 1.0.1c 10 May 2012
RAND part of OpenSSL 1.0.1c 10 May 2012
SHA1 part of OpenSSL 1.0.1c 10 May 2012
SHA-256 part of OpenSSL 1.0.1c 10 May 2012
DlSHA-512 part of OpenSSL 1.0.1c 10 May 2012
Stack part of OpenSSL 1.0.1c 10 May 2012
Diffie-Hellman part of OpenSSL 1.0.1c 10 May 2012
DSA part of OpenSSL 1.0.1c 10 May 2012
(1ECDH part of OpenSSL 1.0.1c 10 May 2012
ECDSA part of OpenSSL 1.0.1c 10 May 2012
RSA part of OpenSSL 1.0.1c 10 May 2012
X.509 part of OpenSSL 1.0.1c 10 May 2012
ECONF part of OpenSSL 1.0.1c 10 May 2012
MD5 part of OpenSSL 1.0.1c 10 May 2012
CONF_def part of OpenSSL 1.0.1c 10 May 2012
OpenSSLDie
DH_OpenSSL
DSA_OpenSSL
ECDH_OpenSSL
ECDSA_OpenSSL
OpenSSL_add_all_ciphers
OpenSSL_add_all_digests
UI_OpenSSL
%s(%d): OpenSSL internal error, assertion failed: %s
OpenSSL 1.0.0p 8 Jan 2015
OpenSSL default
OpenSSL PKCS#3 DH method
OpenSSL DH Method
OpenSSL DSA method
OpenSSL 'dlfcn' shared library method
OpenSSL EC algorithm
OpenSSL ECDH method
OpenSSL ECDSA method
OpenSSL HMAC method
You need to read the OpenSSL FAQ, http://www.openssl.org/support/faq.html
OpenSSL RSA method
OpenSSL default user interface
AES part of OpenSSL 1.0.0p 8 Jan 2015
ASN.1 part of OpenSSL 1.0.0p 8 Jan 2015
Blowfish part of OpenSSL 1.0.0p 8 Jan 2015
Big Number part of OpenSSL 1.0.0p 8 Jan 2015
CONF_def part of OpenSSL 1.0.0p 8 Jan 2015
CONF part of OpenSSL 1.0.0p 8 Jan 2015
DES part of OpenSSL 1.0.0p 8 Jan 2015
libdes part of OpenSSL 1.0.0p 8 Jan 2015
Diffie-Hellman part of OpenSSL 1.0.0p 8 Jan 2015
DSA part of OpenSSL 1.0.0p 8 Jan 2015
^ECDH part of OpenSSL 1.0.0p 8 Jan 2015
ECDSA part of OpenSSL 1.0.0p 8 Jan 2015
EVP part of OpenSSL 1.0.0p 8 Jan 2015
lhash part of OpenSSL 1.0.0p 8 Jan 2015
MD4 part of OpenSSL 1.0.0p 8 Jan 2015
MD5 part of OpenSSL 1.0.0p 8 Jan 2015
PEM part of OpenSSL 1.0.0p 8 Jan 2015
RAND part of OpenSSL 1.0.0p 8 Jan 2015
RC2 part of OpenSSL 1.0.0p 8 Jan 2015
RC4 part of OpenSSL 1.0.0p 8 Jan 2015
RIPE-MD160 part of OpenSSL 1.0.0p 8 Jan 2015
RSA part of OpenSSL 1.0.0p 8 Jan 2015
SHA1 part of OpenSSL 1.0.0p 8 Jan 2015
SHA-256 part of OpenSSL 1.0.0p 8 Jan 2015
DlSHA-512 part of OpenSSL 1.0.0p 8 Jan 2015
Stack part of OpenSSL 1.0.0p 8 Jan 2015
TXT_DB part of OpenSSL 1.0.0p 8 Jan 2015
X.509 part of OpenSSL 1.0.0p 8 Jan 2015
OpenSSLDie
OpenSSL 1.0.0p 8 Jan 2015
SSLv2 part of OpenSSL 1.0.0p 8 Jan 2015
SSLv3 part of OpenSSL 1.0.0p 8 Jan 2015
TLSv1 part of OpenSSL 1.0.0p 8 Jan 2015

I'm wondering if you can help to give me some advice on this?
Thanks

@xiaogegexiao  Did you solved this issue, are you still facing this?


Can you force youtube-dl to use a specific extractor?

Sometimes when a particular extractor is used the download goes well, but if it switches to the generic extractor for the same site it says unsupported url.
This is more of a general question.

if it switches to the generic extractor for the same site it says unsupported url.

That would be a bug/missing feature. Force a specific extractor does not make sense as extractors are designed to handle a set of known URL patterns.


No error if '-k=21,33,41,59,79' cannot get parsed

Hi,
luckily I realized that the output file is exactly same with my input by comparing checksums. It appears to me the -k values were ignored, with I assume a spurious message output speaking about k-mer sizes 21 and 59 only:
fmlrc2 -t 16 -C 10 -k=21,33,41,59,79 comp_msbwt.npy input.fastq.gz output.fasta
[2021-10-13T20:22:51Z INFO  fmlrc2] Input parameters (required):
[2021-10-13T20:22:51Z INFO  fmlrc2] 	BWT: "comp_msbwt.npy"
[2021-10-13T20:22:51Z INFO  fmlrc2] 	Input reads: "input.fastq.gz"
[2021-10-13T20:22:51Z INFO  fmlrc2] 	Output corrected reads: "output.fasta"
[2021-10-13T20:22:51Z INFO  fmlrc2] Execution Parameters:
[2021-10-13T20:22:51Z INFO  fmlrc2] 	verbose: false
[2021-10-13T20:22:51Z INFO  fmlrc2] 	threads: 16
[2021-10-13T20:22:51Z INFO  fmlrc2] 	cache size: 10
[2021-10-13T20:22:51Z INFO  fmlrc2] Correction Parameters:
[2021-10-13T20:22:51Z INFO  fmlrc2] 	reads to correct: [0,<PHONE_NUMBER>3709551615)
[2021-10-13T20:22:51Z INFO  fmlrc2] 	k-mer sizes: [21, 59]
[2021-10-13T20:22:51Z INFO  fmlrc2] 	abs. mininimum count: 5
[2021-10-13T20:22:51Z INFO  fmlrc2] 	dyn. minimimum fraction: 0.1
[2021-10-13T20:22:51Z INFO  fmlrc2] 	branching factor: 4
[2021-10-13T20:22:51Z INFO  fmlrc::bv_bwt] Loading BWT with 1 compressed values
[2021-10-13T20:22:51Z INFO  fmlrc::bv_bwt] Loaded BWT with symbol counts: [1, 0, 0, 0, 0, 0]
[2021-10-13T20:22:51Z INFO  fmlrc::bv_bwt] Allocating binary vectors...
[2021-10-13T20:22:51Z INFO  fmlrc::bv_bwt] Calculating binary vectors...
[2021-10-13T20:22:51Z INFO  fmlrc::bv_bwt] Constructing FM-indices...
[2021-10-13T20:22:51Z INFO  fmlrc::bv_bwt] Building 10-mer cache...
[2021-10-13T20:22:52Z INFO  fmlrc::bv_bwt] Finished BWT initialization.
[2021-10-13T20:22:52Z INFO  fmlrc2] Starting read correction processes...
[2021-10-13T20:23:04Z INFO  fmlrc2] Processed 10000 reads...

By reading https://github.com/HudsonAlpha/rust-fmlrc/issues/7#issuecomment-761107717 I see the syntax shuld be different. Please improve the parsing or at least, improve the README.md and give an example how to use multiple k-mer sizes.
Could fmlrc2 output a summary how many correction changes it did per dataset?

fmlrc2 -t 16 -C 10 -k 21 33 41 59 79 comp_msbwt.npy input.fastq.gz output.fasta
...
error: The following required arguments were not provided:
    <COMP_MSBWT.NPY>
    <LONG_READS.FA>
    <CORRECTED_READS.FA>

Please provide an example other than default. -k 21 59 79 127 does not work for example and follwing the instructions it should?


NIFI-7393: add max idle time and max idle connections parameter to InvokeHTTP

Expose connectionPool parameters to Nifi
Adds max idle time and max idle connections parameters to InvokeHTTP;  fixes NIFI-7393
In order to streamline the review of the contribution we ask you
to ensure the following steps have been taken:
For all changes:

[x] Is there a JIRA ticket associated with this PR? Is it referenced
in the commit message?

[x] Does your PR title start with NIFI-XXXX where XXXX is the JIRA number you are trying to resolve? Pay particular attention to the hyphen "-" character.

[x] Has your PR been rebased against the latest commit within the target branch (typically master)?

[x] Is your initial contribution a single, squashed commit? Additional commits in response to PR reviewer feedback should be made on this branch and pushed to allow change tracking. Do not squash or use --force when pushing to allow for clean monitoring of changes.

For code changes:

[x] Have you ensured that the full suite of tests is executed via mvn -Pcontrib-check clean install at the root nifi folder?
[ ] Have you written or updated unit tests to verify your changes?
[x] Have you verified that the full build is successful on both JDK 8 and JDK 11?
[ ] If adding new dependencies to the code, are these dependencies licensed in a way that is compatible for inclusion under ASF 2.0?
[ ] If applicable, have you updated the LICENSE file, including the main LICENSE file under nifi-assembly?
[ ] If applicable, have you updated the NOTICE file, including the main NOTICE file found under nifi-assembly?
[ ] If adding new Properties, have you added .displayName in addition to .name (programmatic access) for each of the new properties?

For documentation related changes:

[ ] Have you ensured that format looks appropriate for the output in which it is rendered?

Note:
Please ensure that once the PR is submitted, you check travis-ci for build issues and submit an update to your PR as soon as possible.

@Woutifier Other than my comment on validating that the time period is > 0 the code looks good. Is there an easy way to test this (not necessarily a unit test)?

@Woutifier Other than my comment on validating that the time period is > 0 the code looks good. Is there an easy way to test this (not necessarily a unit test)?

Hey @jfrazee thanks for your review. I'll add the >0 check. I'll see if I can come up with some way to verify that this actually does something (I did test it locally against one of our servers but would be nice to have a small test scenario).

@Woutifier I was able to test this by watching the stats given by the NGINX stub_status module. I can confirm that the Max Idle will cap the number of waiting connections to the expected number and that the Idle Timeout indeed controls how long those are kept alive after stopping InvokeHTTP.

Nice, what steps do you think we (I?) need to take to get this merged?

@Woutifier We'll be good to go after that little name() / displayName().

That's no problem, I just went with what the other properties had for consistency.


[iOS] Try add xcodebuild for ios build workflow

This reverts commit 2c264a68ab252a91056736b6de1e019c77776e16.
Issue

close #ISSUE_NUMBER

This PR might be working... https://github.com/DroidKaigi/conference-app-2023/pull/693

Overview (Required)

Links

Screenshot

Before
After

@tomoya0x00
This seems like working. Please check this? 🙏🏼


[RPD-254] no state file after destroying resources

This PR patches over the issue of tracking destruction events leading to errors.
This is done by having two conditionals which check the type of analytic event being tracked, and executing the call to the associated function in the appropriate place inside the track decorator.
This is only a temporary fix and will be entirely removed by the imminent re-writing of the track decorator. This will remain a draft until I have successfully ran the entire pipeline without issue tomorrow.
Checklist
Please ensure you have done the following:

[x] I have read the CONTRIBUTING guide.
[ ] I have updated the documentation if required.
[ ] I have added tests which cover my changes.

Type of change
Tick all those that apply:

[x] Bug Fix (non-breaking change, fixing an issue)
[ ] New feature (non-breaking change to add functionality)
[ ] Breaking change (fix or feature that would cause existing functionality to change)
[ ] Other (add details above)

When testing these changes I seem to get the following error at the end of running matcha destroy:
⏳ Destroying Remote State resources...

⠦ 0:00:56 Destroying
Error while creating Azure Storage client: Error while loading state configuration: [Errno 2] No such file or directory:
'/Users/user/matcha/matcha.config.json'

Can we fix this error too?

@KirsoppJ is investigating this in a separate ticket - I don't believe this bug has been brought in by the changes in this PR


Testing chained actions inside integration tests with Axios

Version Number
^5.0.0
Code Example
Hi, thanks so much for this terrific middleware. I believe I am approaching a test case that has not been mentioned here and would really appreciate some advice. This will impact the way we do test cases a lot going forward potentially at Red Hat, Inc. (as promise-middleware has made the cut in our current fold 😄 )
I'm currently attempting to write integration tests whereby actions/reducers are fully run (my actions are hooked via axios responses) and then I am asserting snapshots on the reduced connected component state. I've noted that the redux-mock-store will not accept reducers, so an alternative path I've attempted is using a "real" Redux store and and wiring everything up like I do normally...
This all works fine for a single initial action being fired (dispatched) and I am able to receive the incoming state. However, if I want to fire subsequent actions in my integration test, the Redux store does not dispatch them...
Here is the full test case I have now:
import React from 'react';
import thunk from 'redux-thunk';
import promiseMiddleware from 'redux-promise-middleware';
import { createStore, applyMiddleware, combineReducers } from 'redux';
import { mount } from 'enzyme';
import { Provider } from 'react-redux';
import { initialState } from '../overview.fixtures';
import Overview from '../Overview';
import OverviewContainer, { reducers } from '../index';

import { coreComponents } from '../../../../../components';
import componentRegistry from '../../../../../components/componentRegistry';

jest.mock('../../../../../components/componentRegistry');
componentRegistry.registerMultiple(coreComponents);

describe('Overview integration test', () => {
  const middlewares = [thunk, promiseMiddleware()];
  const generateStore = () =>
    createStore(
      combineReducers({ ...reducers }),
      {
        overview: initialState
      },
      applyMiddleware(...middlewares)
    );

  const mountComponent = store =>
    mount(
      <Provider store={store}>
        <OverviewContainer />
      </Provider>
    );

  it('should mount the Overview with mapStateToProps reduced', () => {
    const store = generateStore();
    const wrapper = mountComponent(store);

    // query the unconnected component to assert reduced props
    const component = wrapper.find(Overview);

    expect(component.props()).toMatchSnapshot();
  });
});

Snapshot (of reduced initial state):
// Jest Snapshot v1, https://goo.gl/fbAQLP

exports[`Overview integration test should mount the Overview with mapStateToProps reduced 1`] = `
Object {
  "hideMappingWizard": false,
  "hidePlanWizard": false,
  "mappingWizardVisible": false,
  "planWizardVisible": false,
  "showMappingWizardAction": [Function],
  "showPlanWizardAction": [Function],
}
`;

All of this code can currently be found here:
https://github.com/priley86/miq_v2v_ui_plugin/blob/master/app/javascript/react/screens/App/Overview/__test__/index.test.js
I know there are examples of how to mock the store and the store's dispatch in this projects sample tests w/ Sinon, however those aren't very familiar to me....
Would someone be willing to get a few examples w/ axios / Jest and show how to correctly mock store and integrate subsequent actions?
P.s. I have had no troubles testing Actions individually w/ redux-mock-store...and that much is working great ;)
Those are looking like this:
import configureMockStore from 'redux-mock-store';
import thunk from 'redux-thunk';
import promiseMiddleware from 'redux-promise-middleware';
import * as actions from '../MappingWizardClustersStepActions';
import {
  initialState,
  requestSourceClustersData,
  requestTargetClustersData
} from '../mappingWizardClustersStep.fixtures';
import {
  mockRequest,
  mockReset
} from '../../../../../../../../../common/mockRequests';

const middlewares = [thunk, promiseMiddleware()];
const mockStore = configureMockStore(middlewares);
const store = mockStore(initialState);

afterEach(() => {
  store.clearActions();
  mockReset();
});

describe('mappingWizard actions', () => {
  it('should fetch source clusters and return PENDING and FULFILLED action', () => {
    const { fetchSourceClustersUrl } = requestSourceClustersData;
    mockRequest({
      fetchSourceClustersUrl,
      status: 200
    });
    return store
      .dispatch(actions.fetchSourceClustersAction(fetchSourceClustersUrl))
      .then(() => {
        expect(store.getActions()).toMatchSnapshot();
      });
  });
  it('should fetch source clusters and return PENDING and REJECTED action', () => {
    const { fetchSourceClustersUrl } = requestSourceClustersData;
    mockRequest({
      fetchSourceClustersUrl,
      status: 404
    });
    return store
      .dispatch(actions.fetchSourceClustersAction(fetchSourceClustersUrl))
      .then(() => {
        expect(store.getActions()).toMatchSnapshot();
      });
  });

Expected Behavior
This is not a bug. Just a request for documentation examples.

Hi @priley86, thanks for the detailed issue and I'm glad to see Red Hat is using the middleware. 😄
Unless @tomatau beats me to it, I'll take a detailed look at this either over the weekend or next early next week and get back to you. I'm locked down with work for the next few days.

In the meantime, if you haven't already, looking at our tests for the middleware might be helpful.

thanks @pburtchaell - yea i understand the concepts there, but I'm struggling w/ how to map those to axios. Your help is much appreciated here...

@priley86 I've taken an initial look at this, but I can't make any suggestions or go anywhere with it since the example code is so closely tied to your project.
I'll need you to reproduce the issue in a more isolated environment—something not so tied to the https://github.com/priley86/miq_v2v_ui_plugin repo. A good start would be to fork this repo, set up your test environment using the complex example and make a PR. Even if the tests aren't running, this is a better environment for me to debug your setup.
Let me know if you have any questions.

@pbuertchaell sure, happy to do this...I’ll setup a codesandbox when I get a chance. Thanks!

@priley86 any progress here?

@pburtchaell apologies (have been swamped). I will try to get you a codesandbox later today or tomorrow ;)

Personally for running integration tests I take a step back away from the details of actions, reducers, etc... and focus on hitting routes or events in my application then spy on the network traffic using things like sinon's xml server or libraries like fetch-mock. This way if the implementation changes, the integration test can stay exactly the same. I do this A LOT. So much I even presented about it:
https://www.youtube.com/watch?v=8gIAeEVZfJ4&t=213s

Hi all, I'm following up on this issue since it's grown stale. I'm going to close it, but if you'd like to revisit it, please just reopen it.

Thanks and apologies for not being able to fit this into my schedule. I will provide a better description /demo boiler next time when we are ready on this side 👍


Update hca-dcp file entity list config

Need
The hca-dcp entity list configurations are currently in a deprecated format and needs to be incrementally updated to match the current preferred paradigm. We will approach the refactor incrementally, starting with the files entity.
Approach

Follow the approach/spec described in the configuration guide for configuring entity lists.
Use the ncpi-catalog studiesEntityConfig.ts and its corresponding view builder and transformer as an example.
Replace any reference to the Text component to use the Cell component instead. For example,

export const filesToFileNameColumn = (
  file: FilesResponse
): React.ComponentProps<typeof C.Text> => {
  if (!file.files?.[0]) {
    return {};
  }

  return {
    children: file.files[0].name,
    customColor: "ink",
    variant: "text-body-400",
  };
};

should be replaced with
export const buildFileName = (
  file: FilesResponse
): React.ComponentProps<typeof C.Cell> => {
  return {
    value: getFileName(response),
  };
};

Notes

The existing FilesResponse response model can be reused as-is but needs to be moved to the appropriate location.
The existing filesTransfomer.ts is currently a mix of a view model builder and transformer functionality. Split/move/update the functionality as needed then remove this file.
There is a slight modification to the location of thehca-dcp view builders and transformers: they both need to fall under an azul directory. So for example, viewModelBuilders/azul/hca-dcp/ and apis/azul/hca-dcp/.

Definition of Done

Files entity config is updated to match spec.
hca-dcp-specific view builders file created.
hca-dcp-specific transformers file created (with the existing fileTransfomer.ts removed).

Just to check: Is it just the view builders and transformers that need to go in an Azul folder or does the entities.ts need to as well?

entities.ts (containing the FilesResponse) should go into an Azul folder under apis.


Create opentelemetry-announced-support-for-profiling

staging until proper announcement time (tomorrow)

@austinlparker I think technically if you merge it now it won't update until the 19th, but feel free to merge whenever you like (such as on stage maybe? your call)


AAD GA is required for registration

Docs Build status updates of commit 034f8f0:
:white_check_mark: Validation status: passed

File
Status
Preview URL
Details

MicrosoftCollaboratePortal/registration.md
:white_check_mark:Succeeded

For more details, please refer to the build report.
Note: Broken links written as relative paths are included in the above build report. For broken links written as absolute paths or external URLs, see the broken link report.
For any questions, please:Try searching the docs.microsoft.com contributor guidesPost your question in the Docs support channel


zos not exiting terminal when using HDWalletProvider and Infura

Not sure where the issue is in details, but all zos commands exit cleanly when using --network local.
Using any infura network thats been setup with HDWalletProvider within truffle.js is hanging even when executing correctly on the last step and needs to be cancelled manually
For instance
[ZosNetworkFile] Successfully written zos.rinkeby.json
0x3a1bc630ce85bda9c63bab2aa....... //stuck here
^C //manual cancel

My first though was this was due to writing the file, but even zos status --network rinkeby is hanging at the end

That's odd, thanks for the report @haraldini!

Got the same behaviour when using another node with HDWalletProvider, so I don't think its Infura related.

Which version of the HDWalletProvider are you using @haraldini ?

0.0.6,
It hasn't been updated in 6 month


Static path conflicting with get routes

Hey,
playing around with static folders and get routes i realized that if you serve static files at root '/' it conflicts with all other get routes.
app.static('/', './public/')
app.get("/test", async ctx => await ctx.json({success: true}));

This code results in following error:
error: Uncaught Error: '/test' in new path '/test' conflicts with existing wildcard '/*filepath' in existing prefix '/*filepath'
              throw new Error(
                    ^
    at Node.addRoute (https://deno.land/x/router@v0.1.0/node.ts:150:21)
    at Router.add (https://deno.land/x/abc/router.ts:21:10)
    at Application.add (https://deno.land/x/abc/app.ts:151:17)
    at Application.get (https://deno.land/x/abc/app.ts:97:17)
    at file://.../app.ts:27:5

FYI:
I bypassed the problem by only serving special static files at their regarding routes and then rendering the html files with their routes.
e.g.
app.renderer = {
    render<T>(name: string, data?: T): Promise<Deno.Reader> {
        return renderFile(name, data!);
    },
};

app
    .static("/js", "./public/js")
    .static("/css", "./public/css")

app.get("/", async ctx => await ctx.render("./public/index.html"));
app.get("/test", async ctx => await ctx.json(ctx.cookies));

This might somehow be related to #67.
I don't know if this is/was intended regarding the previously mentioned issue :)
~ Lars
P.S.: To be clear there is no directory named test in public/

I am rewriting the router. Ideally, we should always match static routes first instead of throwing conflict exceptions

@LarsVomMars Fixed in https://github.com/zhmushan/abc/commit/ad63d65ec0f73bfeabc3bc80fb1ae6ae5e25904f


ingress microservice test cases

-Manage Table Service Test
-Input Document Service Test
-Table Delete Service Test

create another branch


[Bug?]Clear Record disappears quickly

Like the video below:\
When I right click on a cell to clear record, it disappeared quickly
https://user-images.githubusercontent.com/13215013/188766453-af1f7af9-7f02-4215-a0c0-231c52b0622e.mp4

Interesting (thanks for the video)! I can't seem to reproduce it. What environment are you using (OS, Obsidian version, plugin version)?

Obsidian version: 0.16.2
OS: Win 10
Plugin version: 0.8.0

And this still happened now.


Reduce dependabot running frequency

Reduce dependabot running frequency so that it runs once a months instead of weekly.

Fixed with introduction of renovate bot


Setup MariaDB to work with an external volume

Currently it saves the data within the docker image

Please note that the docker volume is not deleted when the image is loaded or unloaded. I also tested pruning all the dangling images and network adapters and the volume is not deleted.

Sample config to test the mariadb image and it's reliability:
docker-compose.yml
version: '3'
services:
  ovehub-ove-asset-db:
    image: mariadb
    ports:
    - "3306:3306"
    volumes:
      - "ovehub-ove-asset-db-data:/var/lib/mysql"
    environment:
      MYSQL_RANDOM_ROOT_PASSWORD: "yes"
      MYSQL_DATABASE: "dev_assets"
      MYSQL_USER: "dev_a_m"
      MYSQL_PASSWORD: "long&strongPassword"

volumes:
  ovehub-ove-asset-db-data:


Add support for time namespace

The time namespace is a new kernel feature available in 5.6+ to
isolate the system monotonic and boot-time clocks.
I'm sorry I mistook and closed the existing request https://github.com/opencontainers/runtime-spec/pull/1062
Signed-off-by: Kenta Tada<EMAIL_ADDRESS>

monotonicNanosecs and boottimeNanosecs do not use the negative number.
And I noticed that  the value of offset-nanosecs is not greater than 999,999,999.
So I changed those types from int64 to uint32 in this new PR.

@KentaTada could you update the PR?

@AkihiroSuda @tianon
I updated this pr from your comments.
If I remember correctly, Secs was required and NanoSecs was optional because of the kernel implementation.
But we changed the definition of LinuxTimeOffset from specific to generic. So, I changed Secs to optional.
I may be slow to respond, but I'll check reviews. Sorry.

(Silly) questions;

Do Windows containers allow for time to be namespaced? (possibly not for this proposal, but in case it's added to the Windows counterpart in future)
As the discussion above appears to be focussing on signedness and size of integers (because we're trying to do a 1:1 mapping of the Linux kernel to the Spec), I'm wondering if we MUST follow the linux Kernel here, or if it would be beneficial to pick our own definition (does RFC3399 officially support nanoseconds and a "duration", or is there an RFC for that?).

Perhaps it's not an option, and I know many of the options were a 1:1 mapping of kernel features (out of convenience?) I also know that some of those choices made it less agnostic/portable than desired, which is why I was considering if another format would be beneficial / future proof (as long as it's not ambiguous, and documented how runtimes must interpret the config and convert it to (currently) what Linux provides).

windows

I think windows is out of the scope of this PR, and windows support can be added in the config-windows.md spec separately in the future when somebody needs it.

I think windows is out of the scope of this PR, and windows support can be added in the config-windows.md spec separately in the future when somebody needs it.

For sure! Mostly exploring if there's an platform-agnostic way to specify this configuration (and if there is, and it wouldn't be "crippling" either side, the same format could be used for Windows)

@KentaTada Do you plan to open a PR for runc (or other runtimes)?

Hello @AkihiroSuda san
Recently, I don't have enough resources to focus on the container runtime.
But @chethanah and team members are interested in implementing time namespace in runc.
If it is ok to send the PR to runc instead of me, I'll ask him to take over my activity.

@chethanah san
Especially, I have no idea about the special-handling case for time namespace.
For example, when it comes to IPC namespace, it affects the changeable kernel parameters(fs.mqueue.*)
https://github.com/opencontainers/runc/blob/v1.1.7/libcontainer/configs/validate/validator.go#L184
So we need to investigate the properties related with time namespace at first.
Could you create the new issue in runc? If it is difficult or takes a lot of time, please feel free to ask me in the issue's page.

issue in runc

https://github.com/opencontainers/runc/issues/2345

👋 Hi @KentaTada @chanezon FYI: crun's implementation https://github.com/containers/crun/pull/1184


merge package from arlac77/npm-package-template

package.json

chore(package<EMAIL_ADDRESS>chore(scripts): cover@#overwrite c8 --temp-directory build/coverage ava && c8 report -r lcov --temp-directory build/coverage
chore(package): add nyc from template
chore(package): set $.ava.require='esm' as in template
chore(package): set $.ava.files='tests/-test.js,tests/-test.mjs' as in template
chore(package): set $.ava.extensions='js,mjs' as in template

Coverage remained the same at ?% when pulling 1213f0439a753419bc929ff7280ee7c2b1a295ac on template-sync-1 into 65387fab575f234544919166756fc52132d6402d on master.

:tada: This PR is included in version 8.1.4 :tada:
The release is available on:

npm package (@latest dist-tag)
GitHub release

Your semantic-release bot :package::rocket:


Questions about ligrec in squidgy

Is it mainly constructed by cellphonedB? Is the result of this method same as cellphonedB result?
If I intend to find the number of significant pairs, what should I do? Thanks.

Hi @ChineseBest

Is it mainly constructed by cellphonedB?

We use our reimplementation of the cellphoneDB algorithm and get the receptor-ligand pairs from Omnipath (though you can
also specify cellphoneDB as the only resource).

Is the result of this method same as cellphonedB result?

The best way to answer this is forr you to take a look at this thread (particularly the comment I'm linking): https://github.com/theislab/squidpy/issues/308#issuecomment-812473384
and have a look at the reproducibility notebook here.
In short, the p-values correlate highly with the original cellphoneDB implementation and the means should all match.

If I intend to find the number of significant pairs, what should I do?

Please have a look at our example here: https://squidpy.readthedocs.io/en/stable/auto_examples/graph/compute_ligrec.html
Hope this answers your questions!

Thanks for your answer. In fact, I wonder if there are more ways to analyze cell-cell interaction without using cell type label as cluster keywords. Thanks.


Update snake_app.py

Automatic update Board_Size properties

This is not needed as the border is just a padding from the edges. The 10 here does not represent the size of the board, but rather the amount to pad edges by.


Make all AMPI entry methods [expedited]

Original issue: https://charm.cs.illinois.edu/redmine/issues/1067

AMPI does not use message priorities, so we can tag all of its entry methods as expedited to avoid the RTS checking the Prioritized Message Queue.
Study the performance of expedited vs. regular messages in AMPI. We need to be conscious of this change if/when we try to interoperate AMPI + Charm++.

Original date: 2016-05-14 14:42:53

~~https://charm.cs.illinois.edu/gerrit/#/c/1202/~~ https://github.com/UIUC-PPL/charm/commit/03a22afe043d0744db177e2dc71c19e490b7944a


Fixed Python version check to keep working for Python 4+

This changes ensures the library keeps working in Python 4+.

thanks for you contirbution. As there's no Python 4 on the horizon, and it won't be for quite a while, we'll hold on this one.

That's fine, though it's fair to say that the string / integer changes won't be reverted in Python 4.


Update Exchange-Teams-interact.md

Scheduling a meeting with Outlook and the Teams add-in for the user itself is supported without EWS/OAuth etc. When it comes to delegation it's not possible to schedule a meeting on behalf without some basic requirements. The lack of information in our public docs leads into widely confusion in our customers. Espacially as a result of several C-19 Teams rollouts. Please add a hint here. THX
https://dev.azure.com/Supportability/UC/_wiki/wikis/UC.wiki/3769/Teams-Delegate-Meeting-Requirements-and-Limitations

https://github.com/MicrosoftDocs/OfficeDocs-SkypeForBusiness/issues/4523

@carolynblanding - since you recently updated the topic for oauth, can you take a look at this change and confirm its accuracy?

@JohanFreelancer9 Copy editing is needed for this PR. Thanks.

@dstrome @carolynblanding PR has been copyedited and is ready for final review, could you please check and merge? Thanks!

@AndreasExner thanks for the update. It looks like you're from Microsoft so please take a moment and link your github and corpnet accounts. When you do this we can more easily identify you as a Microsoft contributor. Thanks!
https://review.docs.microsoft.com/en-us/office-authoring-guide/contribute-get-started-setup-github-ro?branch=master#link-your-github-and-microsoft-accounts


Make {CpuAccessibleBuffer,ImmutableBuffer}::from_data sound

from_data needs flat memory structures. Types which implement
Copy (either implicity or explicitly) ensure this property.
This commit adds the Copy trait bound to
{CpuAccessibleBuffer,ImmutableBuffer}::from_data and adapts the unit
tests accordingly.
This PR fixes issue #1484.

[x] Added an entry to CHANGELOG_VULKANO.md or CHANGELOG_VK_SYS.md if knowledge of this change could be valuable to users
[ ] Updated documentation to reflect any user-facing changes - in this repository
[ ] Updated documentation to reflect any user-facing changes - PR to the guide that fixes existing documentation invalidated by this PR.
[x] Ran cargo fmt on the changes

@stephan-cr Thank you for the fix. I didn't detect any issues on my local machine, tests are passing. Can you please resolve merging conflicts with changelog, and then I will proceed with merging.

@Eliah-Lakhin Merge conflict resolved.

@stephan-cr Merged. Thanks!


Top Menu Bar Must Be Anchored

The navigation banner that spans the top of the pages (found in Layout.Master) should be anchored to the top of all pages.

This is no longer a requirement because the layout changes made in issue https://github.com/MacMoogle/JayBird/issues/25 will cover this item.


It's always show Gradle:Download https://jitpack.io/com/github/navasmdc/MaterialDesign-1.5.pom

But i compile another lib  is normal ，and i use maven.aliyun is same invalid .Do you same as me? please fix it

Same here. And it ruin my gradle project sync time !

Add jcenter() to repositories if you don't have it already. It started working after a clean/rebuild
repositories {
jcenter()
}
dependencies {
compile 'com.github.navasmdc:MaterialDesign:1.5@aar'
}

@CrisAldroid


Issue #2054 Ask user to run setup when 'autostart-tray' set to true

When 'autostart-tray' is set to false, we can just delete the launchd
config of the tray to prevent it from starting automatically on login
but when 'autostart-tray' is set to true, we need have the daemon and
the tray executable, so better to ask the user to run 'crc setup'
Fixes #2054

If this is the case... can't we ASK the user to run setup and trigger the setup functions on yes? perhaps even finegrained to ONLY these calls?

If this is the case... can't we ASK the user to run setup and trigger the setup functions on yes? perhaps even finegrained to ONLY these calls?

One more thing we need to improve in the config code so we can do this without the code getting too messy :)

/lgtm


[Fix] Applies missing color attribution on textstyle created within default style builder of SuperReader (Resolves #1579)

[Fix] Applies missing color attribution on textstyle created within default style builder of SuperReader (Resolves #1579)
The Issue:
Colored attributions set on text passed to SuperReader isn't applied to the final rendered text within the document.

Solution:
Turns out that the readOnlyDefaultStyleBuilder used by SuperReader which is responsible for creating a text style based on set of text attributions wasn't applying the color attribution to the created text style.
This PR updates readOnlyDefaultStyleBuilder to include a check to see if incoming Attribution is of type ColorAttribution, if it's then updates text style color with color set within ColorAttribution.

@matthew-carroll Do you think we should add a common text styler for both SuperEditor and SuperReader? Currently both of them have independent text stylers, readOnlyDefaultInlineTextStyler for SuperReader and defaultInlineTextStyler for SuperEditor. They both achieve the same purpose at the end and their implementation isn't tied to either SuperEditor or SuperReader exclusively.

@matthew-carroll Updated with changes from the recent KeyEvent migration, #1593


Rollup

This PR uses rollup to bundle plugin files to improve dev server speed by reducing disk io and reducing bundler optimize jobs.

Pull Request Test Coverage Report for Build<PHONE_NUMBER>5
Details

0 of 0   changed or added relevant lines in 0 files are covered.
No unchanged relevant lines lost coverage.
Overall coverage remained the same at 58.636%

Totals

Change from base Build<PHONE_NUMBER>8:
0.0%

Covered Lines:
1168

Relevant Lines:
1794

💛  - Coveralls


KF3D in ablation study

Hi,
Have read your paper, i find that with kalman filter you achieve a high performance. Could you release the KF3D method?

Thank you

Hi, you can switch to the Kalman Filter model by using KalmanBox3DTracker instead of e.g. Embedding3DBEVMotionUncertaintyTracker in your config (test_cfg -> track -> type). No need to release any additional models. :)


Add request auto-retry options

When scaling an application onto multiple servers we want to be fail safe. Currently we have a health check system that is used for monitoring the availability of nodes. In case one of the nodes is not healthy or doesn't respond, the gateway will stop using it. But when the gateway already forwarded a request to such a node, the request will fail.
As an improvement we need to add extends the gateway with a retry strategy. When a node has become unavailable, the gateway should look for an alternative node for the requested procedure and try it again on that node before it fails.

I read some pages on MDN and for adding retry options, we will need to add an abort controller to our fetch() implementations.
But we also need to handle rejected fetch requests, as these indicate connectivity issues.

The Promise returned from fetch() won't reject on HTTP error status even if the response is an HTTP 404 or 500. Instead, as soon as the server responds with headers, the Promise will resolve normally (with the ok property of the response set to false if the response isn't in the range 200–299), and it will only reject on network failure or if anything prevented the request from completing.

We already check if the response code is what we expect and throw an error otherwise. But we need to think about handling 4xx and 5xx responses. These are probably issues we still want to reject and don't want to retry ?


Saving caches and versions file even if some frameworks fail to build

https://github.com/giginet/Scipio/blob/4c2cc399ab771993b2b94db6490fe9c926ee68aa/Sources/ScipioKit/Producer/FrameworkProducer.swift#L124-L141
Even if some frameworks fail to build, we can still save caches and version files for successfully-built frameworks. That would reduce build time for next attempts.

Hi @ikesyo, I have been following and admiring your project for a while.
I have started using Scipio to reduce build times in the projects I am working on. I would like to contribute by solving this issue. Could you please assign it to me?

Thanks for the comment! I just assigned you. 😃

should I create the development branch from the main branch?

Yes, please submit a pull request from a feature branch of your fork 🙏


Embedded buttons and fields

A neat idea for Mailman to have would be a free form (but VERY simple) gui elements system. Before the MergeTag swapping pass, it would swap out things like <<!Button!>> with an actul button or <<!Input!>> with a text entry field.
The crappy thing about this would be the fact that just supporting HTML would be far more powerful.
I got the idea from YAMM. See their blog post about it.

As of Dec 2017 Rich Text Mailman now supports HTML editing


Add parameter type_inference_mode to kompile

And use --type-inference-mode checked when kompiling using the test fixtures.

Will wait for the equivalent change to kprove to review, but looks good to me in principle.

I wanted to open a separate PR for that, In my opinion, this is a self-contained change.


🚸(frontend) hide console error in tests outputs

Purpose
When frontend tests are run, as console.error and console.warning are displayed, developer can think that some tests are failing.
Proposal
Capture console.error and console.warning on concerned tests, and assert they have been called.
Only test displaying errors has been modified for now, but if the approach is ok, remaining test has to be updated as well.
fixes https://github.com/openfun/richie/issues/1263

I've mixed your suggestions, @lunika @jbpenrath
What do you think ?

I've mixed your suggestions, @lunika @jbpenrath
What do you think ?

I found this file https://github.com/openfun/richie/blob/master/src/frontend/js/common/searchFields/getSuggestionsSection.spec.ts
and, after searching for meaning of const mockHandle: jest.Mock<typeof handle> = handle as any; which I begin to understand, I've decided to use the same approach.

I found this file https://github.com/openfun/richie/blob/master/src/frontend/js/common/searchFields/getSuggestionsSection.spec.ts
and, after searching for meaning of const mockHandle: jest.Mock<typeof handle> = handle as any; which I begin to understand, I've decided to use the same approach.

Well done ! ok_hand

Thanks ! :slightly_smiling_face:

Well done ! ok_hand

Thanks ! :slightly_smiling_face:

Can I do something to complete this PR ?

Can I do something to complete this PR ?

Can I do something to complete this PR ?

Nope thats good, the merge is blocked by a ci job failure. We have to improve our workflow to merge PR from forks. We identified a potential solution that we have to test (maybe on your PR rightly ^^)

Can I do something to complete this PR ?

Nope thats good, the merge is blocked by a ci job failure. We have to improve our workflow to merge PR from forks. We identified a potential solution that we have to test (maybe on your PR rightly ^^)

Can I do something to complete this PR ?

@kernicPanel Nope thats good, the merge is blocked by a ci job failure. We have to improve our workflow to merge PR from forks. We identified a potential solution that we have to test (maybe on your PR rightly ^^)

OK, thanks :)

Can I do something to complete this PR ?

@kernicPanel Nope thats good, the merge is blocked by a ci job failure. We have to improve our workflow to merge PR from forks. We identified a potential solution that we have to test (maybe on your PR rightly ^^)

OK, thanks :)

@kernicPanel CI issue has been fixed. Can you rebase your branch from master then push force?

@kernicPanel CI issue has been fixed. Can you rebase your branch from master then push force?

@kernicPanel CI issue has been fixed. Can you rebase your branch from master, fix merge conflict on CHANGELOD.md then push force?

Yes, it's done

@kernicPanel CI issue has been fixed. Can you rebase your branch from master, fix merge conflict on CHANGELOD.md then push force?

Yes, it's done


Dragging a file when there are no pipelines gives no feedback

Describe the bug
I was confused trying to drag a file to the pipeline editor and nothing was happening, to realize that I needed a pipeline first.
Expected behavior
The UI gives an error message or tells me what to do.
To Reproduce
Steps to reproduce the behavior:

Create a new project
Go to the pipeline editor
Create a new file
Try to drag it

Screenshots
https://user-images.githubusercontent.com/316517/171226937-e8bafd22-362a-40ea-bb5f-9d3887416554.mp4
Environment

OS: Linux Mint
Browser: Firefox 100
Orchest's version (in the settings page): v2022.05.4

I think this has been discussed before somewhere else, but it would be cool to hand hold the user a bit more with their first pipeline. Some proposed flows:

When the user creates a project, add a pipeline there. A bit intrusive.
When the user opens an empty project, a dialog asks "Create a pipeline? Yes/No" With a checkbox "Don't show this again".
A big call-to-action in the middle of the canvas saying "create a pipeline to start working" or similar

Since we now automatically create a Pipeline when a Project is created (#1261), it is now much less likely that someone will hit this case. In addition, as it stands currently, users have a hard time discovering the ability to drag-and-drop steps. Thus I would say that this issue has low priority.

In addition, as it stands currently, users have a hard time discovering the ability to drag-and-drop steps.

I agree with this, are we tracking that somewhere? Would be cool to have a more visible onboarding in that aspect

are we tracking that somewhere?

We are. It is part of some UX studies that @ncspost is running :raised_hands:


Switch audio subsystem to use BassMix

Check this issue:
https://github.com/ppy/osu-framework/pull/4291/files
Seems like it changes the new audio package.
not really sure should change it also.

The newwe version (newer than 2021.828.0) might cause the case that buffer size is smaller than before.
Got no idea why
Before: buffer will be 3000 at first callback, 34?? at second and below callback.
After: buffer will be 1920 (or 960) at first callback, 34?? at second and below callback.

Guess fixed.
Might open if found related issue.


Release 0.17.0

[Breaking change] Update dependencies. Use esm instead of @std/esm, update Typescript to 2.8.3.
[Fix] Fix Node processes spawn on Windows (Mocha, Nyc)

Codecov Report

Merging #104 into master will increase coverage by 0.21%.
The diff coverage is 80%.

@@            Coverage Diff            @@
##           master    #104      +/-   ##
=========================================
+ Coverage   66.88%   67.1%   +0.21%
=========================================
  Files          38      38
  Lines         912     912
  Branches       99      98       -1
=========================================
+ Hits          610     612       +2
+ Misses        232     231       -1
+ Partials       70      69       -1

Impacted Files
Coverage Δ

src/lib/utils/mocha.ts
61.76% <ø> (ø)
:arrow_up:

src/lib/utils/nyc.ts
69.23% <80%> (+7.69%)
:arrow_up:

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update d14b2c4...9a102d3. Read the comment docs.


Storage decoder

This PR is fine, but I think the sturct member storage size calculation is wrong.


unix,win: introduce uv_reject call

This call will immediately close the accepted fd and continue with the queued fds.
Fixes: https://github.com/libuv/libuv/issues/1754

Note: before adding tests, I would like to receive some feedback and see if this works or what libuv expects/wants to have.
I'm testing using a quite simple tcp server https://github.com/juanarbol/uvxamples/blob/main/src/tcp/tcp-server.c and calling uv_accept_reject, it seems to works fine.

CI failure is a known flake https://github.com/libuv/libuv/issues/4106

Thanks for getting the ball rolling? Maybe this can just be uv_reject?

Apparently this PR woke up a couple things about how libuv polls connections. I will continue with this one after receiving a bit more input from @libuv/collaborators

After commenting the the uv__io_stop and arm that again. I'm getting some failures in delayed_accept; I guess it just makes sure that this EMFILE magic trick is always gonna work. See:
/* Implements a best effort approach to mitigating accept() EMFILE errors.
 * We have a spare file descriptor stashed away that we close to get below
 * the EMFILE limit. Next, we accept all pending connections and close them
 * immediately to signal the clients that we're overloaded - and we are, but
 * we still keep on trucking.
 *
 * There is one caveat: it's not reliable in a multi-threaded environment.
 * The file descriptor limit is per process. Our party trick fails if another
 * thread opens a file or creates a socket in the time window between us
 * calling close() and accept().
 */

https://github.com/libuv/libuv/blob/d2d92b74a8327daf9652a9732454937f3529bd30/src/unix/stream.c#L480
not ok 1 - delayed_accept
# exit code 6
# Output from process `delayed_accept`:
# Assertion failed in /Users/juanjose/GitHub/libuv/test/test-delayed-accept.c on line 61: `r == 0` (-35 == 0)

IMO the IO handle stop/start-again mechanism works like a lock to avoid other threads read a file or create a socket.

I think I just ensures that the uv_accept can be deferred.

I don't have a windows machine available rn, I'll work on the windows implementation in a couple days if the lord wants it like that.

Hi @juanarbol, If it works for you, I can handle the Windows implementation of this PR. Once I’m done, you can review it. Is it OK for you?

Hi @juanarbol, If it works for you, I can work on the Windows implementation of this PR. Once I’m done, you can review it. Is it OK for you?

Sure, no problem at all from my side! That is very kind, thank you.

Hey @juanarbol, I've opened a PR to merge the Windows version to your branch. You can review it there. Feel free to apply or change it.

After a log debug session, this seems to be the less intrusive way to implement stream rejections w/out breaking any other desired behaviors like delayed accept.
Special thanks to @huseyinacacak-janea for the windows implementation, added as co-author :)

server.accepted_fd doesn't exist in Windows so the CI fails. Feel free to apply the following patch to fix the error.
diff --git a/test/test-tcp-reject.c b/test/test-tcp-reject.c
index f2cee997..59cefb4b 100644
--- a/test/test-tcp-reject.c
+++ b/test/test-tcp-reject.c
@@ -40,7 +40,11 @@ static void connection_cb(uv_stream_t* tcp, int status) {
   ASSERT_OK(uv_reject(tcp));

   /* The server should not have accepted the connection */
+#ifdef _WIN32
+  ASSERT(server.tcp.serv.pending_accepts->accept_socket == INVALID_SOCKET);
+#else
   ASSERT(server.accepted_fd == -1);
+#endif

   /* Close the server */
   uv_close((uv_handle_t*) &server, NULL);

@huseyinacacak-janea I think Saúl is talking to you.

@saghul Thank you for the review. I've applied your suggestions and created the patch below.
@juanarbol This patch should fix the errors in the CI as well. Could you please apply it?

Patch
diff --git a/src/win/stream.c b/src/win/stream.c
index cb82a942..2a98dcb2 100644
--- a/src/win/stream.c
+++ b/src/win/stream.c
@@ -50,22 +50,27 @@ int uv_listen(uv_stream_t* stream, int backlog, uv_connection_cb cb) {

 int uv_reject(uv_stream_t* client) {
   int err = 0;
+  uv_pipe_t* pipe_client;
+  uv_tcp_accept_t* req;
+
   if (client == NULL) {
-      err = ERROR_INVALID_PARAMETER;
+    return uv_translate_sys_error(ERROR_INVALID_PARAMETER);
   }
+
   switch (client->type) {
     case UV_NAMED_PIPE:
-      if (((uv_pipe_t*)client)->u.fd == -1) {
-        CloseHandle(((uv_pipe_t*)client)->handle);
+      pipe_client = (uv_pipe_t*)client;
+      if (pipe_client->u.fd == -1) {
+        CloseHandle(pipe_client->handle);
       } else {
-        _close(((uv_pipe_t*)client)->u.fd);
+        _close(pipe_client->u.fd);
       }

-      ((uv_pipe_t*)client)->u.fd = -1;
-      ((uv_pipe_t*)client)->handle = INVALID_HANDLE_VALUE;
+      pipe_client->u.fd = -1;
+      pipe_client->handle = INVALID_HANDLE_VALUE;
       break;
     case UV_TCP:
-      uv_tcp_accept_t* req = ((uv_tcp_t*)client)->tcp.serv.pending_accepts;
+      req = ((uv_tcp_t*)client)->tcp.serv.pending_accepts;

       if (!req) {
         err = WSAEWOULDBLOCK;
@@ -75,10 +80,6 @@ int uv_reject(uv_stream_t* client) {
         err = WSAENOTCONN;
       }

-      if (shutdown(req->accept_socket, SD_BOTH) == SOCKET_ERROR) {
-        err = WSAGetLastError();
-      }
-
       closesocket(req->accept_socket);
       req->accept_socket = INVALID_SOCKET;
       break;
diff --git a/test/test-pipe-reject.c b/test/test-pipe-reject.c
index 71ad2c39..243bfbeb 100644
--- a/test/test-pipe-reject.c
+++ b/test/test-pipe-reject.c
@@ -37,6 +37,7 @@ static void connect_cb(uv_connect_t* _, int status) {

 static void connection_pipe_cb(uv_stream_t* server, int status) {
   ASSERT_OK(uv_reject(server));
+  ASSERT_OK(status);
   uv_close((uv_handle_t*) &server_handle, NULL);
 }

Could you please apply it?

Done! And thanks again!

Fixing the leak in linux

humble ping @saghul

humble ping @saghul

Done, sorry for the delay!

On the win side the big problem is you care closing the server handle, rather than the accepted connection. You need to peek into handle->pipe.serv.pending_accepts like you do for TCP.


Allow frontend caching backends to limit which hostnames they respond to

Allow backends to validate which hostnames they're run from. This is handled by a new HOSTNAMES configuration key.
Note that to ensure there's only 1 correct way of doing something, the previous CloudFront-specific configuration is removed in favour of this pattern.
Fixes https://github.com/wagtail/wagtail/issues/5059
This work has been sponsored by Oxfam America.

Merged in 7900055afa10af511e70788d02c324fcc4535d27


Modifier -> SwiftUI Updated -> View configuration: preferredSurroundingsEffect(_:) [BETA]

Doc: https://developer.apple.com/documentation/SwiftUI/View/preferredSurroundingsEffect(_:)

We have support for this already


Fixes Exception that might cause client freeze

Fixes #1575

putterer I know this name fom somewhere

Can u not rename on Github?


Body param

Add body parameters

paramaters.schema http://swagger.io/specification/#schemaObject
$ref will point to a schema object (most likely in definitions)

LGTM


Use official mariadb image

Mounting a volume to /var/lib/mysql allows users to keep a database across containers. The initialization scripts only get run (according to docs and my own tests) if no content exists in /var/lib/mysql.
Closes #326
Signed-off-by: David Lawrence<EMAIL_ADDRESS>(github: endophage)

Will this automatically run the migrations against mariadb so I can still docker compose up from a fresh clone?

The simplification here is awesome, thanks for looking into this.
In a similar vein to @NathanMcCauley's question: for users who are already using the original docker compose setup, do we have an easy way of getting them new migrations without making them delete their DBs?

@NathanMcCauley @riyazdf This doesn't use migrations, we have 2 options there:

We keep the intialization sql scripts up to date as to what the current DB looks like
We initialize with an empty DB and require the user to manually run the migrations.

I hadn't actually thought of 2. when I put this together but it might be the best way to do it as it mimics what one would be expected to do if setting up the database independently. I'll test if that works with the docker-compose up (bring up all 3 services, run the migration, and only then start running requests against server)

So it looks like a combination of the two is required. The initializing scripts will just create the databases and users, then the migrations can be run:
docker-compose build && docker-compose up

Then in a different terminal (assuming compose is attached in the previous one), at the root of the notary repo:
migrate -path=migrations/server/mysql -url="mysql://server@tcp(localhost:3306)/notaryserver" up
migrate -path=migrations/signer/mysql -url="mysql://signer@tcp(localhost:3306)/notarysigner" up

Added a notarymysql/data dir to mount as the data volume. Contains a gitignore that will ignore all other files in the dir so nobody commits their db files by accident.

@endophage should this be merged as is, or are you planning on adding some of the stuff we discussed this morning on this PR?

@diogomonica I'm working on the stuff discussed this morning.

@NathanMcCauley I think I've hit all the requests here.
This setup will migrate your database to the latest version whenever you run docker-compose up and uses a volume to persist the same database across container restarts.
If you're using the docker images directly, not the compose file, they do not run the migration (although they will have the migration tool installed).

I'm thinking if it is worth to do the breaking change on database. In production people will use a high availability MySQL and in non-production the present way is good enough.

@HuKeping we wrangled over how best to handle the database. Out thinking was the compose file should take a path of least surprise for those using it in development. With that in mind we decided it should auto-migrate the DB so that whenever you run docker-compose up, chances are everything will work.
We don't expect people to run the compose file included here in production. As you say, they are likely to be running their database in an HA configuration. The Dockerfiles for server and signer include the tools for migrations, but when used on their own, don't actually run a migration. That is achieve by changing the entrypoint and command parameters via the compose file.
FYI I'm also working on official images for the server and signer over here and we would expect people to use those in production.

FYI I'm also working on official images for the server and signer over here and we would expect people to use those in production.

Great to see this, thank you!

LGTM. Looks a lot simpler than before.

@NathanMcCauley thanks for pointing out the failure to migrate case. It now errors out and shuts down the container if the migration fails.

@diogomonica this is definitely going to help with database consistency given we now only have one place we need to update.

@diogomonica @NathanMcCauley can you guys try this out on OSX with your various docker versions? @riyazdf is getting permissions errors from the mariadb (we also tried straight mysql) container. Seems unrelated to anything specific here and just a problem with volume mounts on OSX.

notarysigner_1 | /bin/bash: ./migrations/migrate.sh: No such file or directory
notaryserver_1 | /bin/bash: ./migrations/migrate.sh: No such file or directory
notary_notaryserver_1 exited with code 127
notary_notarysigner_1 exited with code 127

This time it ran, but the migrations didn't.
notarysigner_1 | {"level":"info","msg":"Version: 0.2, Git commit: e891420","time":"2016-02-05T22:11:15Z"}
notarysigner_1 | {"level":"debug","msg":"Default Alias: timestamp_1","time":"2016-02-05T22:11:15Z"}
notarymysql_1  | 2016-02-05 22:05:47<PHONE_NUMBER>55904 [Note] mysqld (mysqld 10.1.10-MariaDB-1~jessie) starting as process 1 ...
notarymysql_1  | 2016-02-05 22:05:47<PHONE_NUMBER>55904 [Note] InnoDB: Using mutexes to ref count buffer pool pages
notarymysql_1  | 2016-02-05 22:05:47<PHONE_NUMBER>55904 [Note] InnoDB: The InnoDB memory heap is disabled
notarymysql_1  | 2016-02-05 22:05:47<PHONE_NUMBER>55904 [Note] InnoDB: Mutexes and rw_locks use GCC atomic builtins
notarymysql_1  | 2016-02-05 22:05:47<PHONE_NUMBER>55904 [Note] InnoDB: Memory barrier is not used
notarymysql_1  | 2016-02-05 22:05:47<PHONE_NUMBER>55904 [Note] InnoDB: Compressed tables use zlib 1.2.8
notarymysql_1  | 2016-02-05 22:05:47<PHONE_NUMBER>55904 [Note] InnoDB: Using Linux native AIO
notarymysql_1  | 2016-02-05 22:05:47<PHONE_NUMBER>55904 [Note] InnoDB: Using SSE crc32 instructions
notarymysql_1  | 2016-02-05 22:05:47<PHONE_NUMBER>55904 [Note] InnoDB: Initializing buffer pool, size = 256.0M
notarymysql_1  | 2016-02-05 22:05:47<PHONE_NUMBER>55904 [Note] InnoDB: Completed initialization of buffer pool
notarymysql_1  | 2016-02-05 22:05:47<PHONE_NUMBER>55904 [Note] InnoDB: Highest supported file format is Barracuda.
notarymysql_1  | 2016-02-05 22:05:47<PHONE_NUMBER>55904 [Note] InnoDB: 128 rollback segment(s) are active.
notarymysql_1  | 2016-02-05 22:05:47<PHONE_NUMBER>55904 [Note] InnoDB: Waiting for purge to start
notarymysql_1  | 2016-02-05 22:05:47<PHONE_NUMBER>55904 [Note] InnoDB:  Percona XtraDB (http://www.percona.com) 5.6.26-76.0 started; log sequence number 1616839
notarymysql_1  | 2016-02-05 22:05:47<PHONE_NUMBER>30720 [Note] InnoDB: Dumping buffer pool(s) not yet started
notarymysql_1  | 2016-02-05 22:05:47<PHONE_NUMBER>55904 [Note] Plugin 'FEEDBACK' is disabled.
notarymysql_1  | 2016-02-05 22:05:47<PHONE_NUMBER>55904 [Note] Server socket created on IP: '::'.
notarymysql_1  | 2016-02-05 22:05:47<PHONE_NUMBER>55904 [Warning] 'proxies_priv' entry '@% root@d73fdb6f8854' ignored in --skip-name-resolve mode.
notarymysql_1  | 2016-02-05 22:05:47<PHONE_NUMBER>55904 [Note] mysqld: ready for connections.
notarymysql_1  | Version: '10.1.10-MariaDB-1~jessie'  socket: '/var/run/mysqld/mysqld.sock'  port: 3306  mariadb.org binary distribution
notaryserver_1 | {"level":"info","msg":"Version: 0.2, Git commit: e891420","time":"2016-02-05T22:14:20Z"}
notaryserver_1 | {"level":"info","msg":"Using remote signing service","time":"2016-02-05T22:14:20Z"}
notaryserver_1 | {"level":"info","msg":"Using mysql backend","time":"2016-02-05T22:14:20Z"}
notaryserver_1 | {"level":"info","msg":"Starting Server","time":"2016-02-05T22:14:20Z"}
notaryserver_1 | {"level":"info","msg":"Enabling TLS","time":"2016-02-05T22:14:20Z"}
notaryserver_1 | {"level":"info","msg":"Starting on :4443","time":"2016-02-05T22:14:20Z"}
notaryserver_1 | {"level":"error","msg":"Trust not fully operational: Trust is not healthy: DB operational:Cannot access table: private_keys; ","time":"2016-02-05T22:15:20Z"}
notaryserver_1 | {"http.request.host":"<IP_ADDRESS>:4443","http.request.id":"54c79728-cb4c-4c69-a365-e3139c427950","http.request.method":"GET","http.request.remoteaddr":"<IP_ADDRESS>:59302","http.request.uri":"/v2/","http.request.useragent":"Go-http-client/1.1","http.response.duration":"67.493µs","http.response.status":200,"http.response.written":2,"level":"info","msg":"response completed","time":"2016-02-05T22:15:35Z"}
notaryserver_1 |
notaryserver_1 | (Error 1146: Table 'notaryserver.tuf_files' doesn't exist)

@diogomonica @cyli @riyazdf done my last check and I think this is good to go. Can you all give it one last go to make sure it works correctly on Mac now, including starting up using an existing data volume

This works for me for new images and re-starting that same image now.  I also tried adding some table alterations, and they all got applied too.
I was wondering if we wanted to set this environment variable in the compose file?  https://github.com/dockerfile/mariadb/issues/3
Setting TERM=dumb in the notarymysql environment portion of the config file seemed to fix the issue for me.

@endophage @cyli Also worked for me on a new image, trying another run right now.

This works for me, but the debug log always says:
notarysigner_1 | 0.0046 seconds
notarysigner_1 | notarysigner database migrated to latest version
notarysigner_1 | {"level":"info","msg":"Version: 0.2, Git commit: 3cf000a","time":"2016-02-08T18:23:11Z"}
notarysigner_1 | {"level":"debug","msg":"Default Alias: timestamp_1","time":"2016-02-08T18:23:11Z"}
notaryserver_1 |
notaryserver_1 | 0.0042 seconds
notaryserver_1 | notaryserver database migrated to latest version
notaryserver_1 | {"level":"info","msg":"Version: 0.2, Git commit: 3cf000a","time":"2016-02-08T18:23:11Z"}

If I see "database migrated to latest version", I'm expecting that there was an actual change.

+1 on @cyli's suggestion to set a TERM env var so that it's easy to poke around in the docker container itself:
root@db86e533adf2:/# mysql
TERM environment variable not set.

I haven't had any issues with this compose when only interacting with notary though

@cyli @riyazdf TERM var now set for mariadb container.
@diogomonica added nice messaging around whether migrations were run or DB was already at most recent version (thanks @riyazdf for suggesting using the version command)
Other final improvements:

Naming of services has changed. The "notaryfoo" names are now simply "foo" because compose is using the parent dir to namespace so we were getting "notary_notaryfoo". The new scheme now produces simply "notary_foo"
MariaDB is now running with --innodb_file_per_table enabled (this is a better configuration if anyone is using a single database and constantly truncating the tables as it makes it possible to efficiently reclaim disk space).

LGTM!  All the migrations run fine and output the right messaging about migrations, I can run mysql from the mysql container, etc.

just tested successfully on OSX, LGTM :)


I need to decided wheel winning number already before spin after spin thous number will come

There is a tutorial which explains how to do this. Please take a look: http://dougtesting.net/winwheel/docs/tut14_setting_the_prize

Thanks You


Add advertisedAddress  and subscriptionExpirationTimeMinutes conf for broker and proxy

@Huanli-Meng could u pls help review? thanks

@codelipenghui  thank you


Added 10.2 Optional Reagents

Went in and added the new optional reagents along with the crests to allow for the sim to work properly instead of having it just miss the added recipe difficulty.

Thank you so much :) Ill take a look and then merge it


Postmark::InvalidMessageError: Received valid, but incompatible JSON input.

Looks like postmark changed their json format http://developer.postmarkapp.com/developer-build.html#attachments
Now attachments are not in message header.

AttachmentsFixForMail doesn't work with deliver!

Hi, no worries, the problem is related to deliver! method, there is no alias for it, so deliver! will not handle postmark attachments correctly.


授权登录页面没有出现添加官方账号为好友选项

喵神，使用line 授权登录时候打开授权登录页面没有出现添加官方账号为好友选项，该配置的地方都配置了，安卓是有的，能看下是什么问题吗？

Can you provide your Channel ID and a sample attempting date/time when this issue happens? So we can check to see if there is anything wrong with the request parameters or your channel configuration. Thanks.

1536315078 ，时间大概是8月19号11：20 左右

@xietaijian
Thanks for the information. We checked the logs of this channel around that time, but unfortunately we didn't find any suspicious things which can cause it.
So may I confirm these things before we can dig into it deeper. Please feel free to provide some details by sending me a mail to<EMAIL_ADDRESS>
By mentioning the time 11:20, is it a Beijing zone (+0800) or Japan zone (+0900) or any other timezones? I guess it is a Beijing time but I cannot find related logs with Bot Prompt as normal. There are several aggressive ones though. If it is a Japanese timezone, I can find some logs with normal setting, but all of them respond with correct linked bot so it should not happen.
1.1. It would be nice if you can tell us the timezone of yours.
1.2. Can you please make sure if you are using normal or aggressive? The normal setting will display a bot add action button on the same permission requesting page, while aggressive will display it on the next page after permission requesting.
If it is possible, can you please try to reproduce this issue again, and send me some screenshots to describe your steps as well as the reproducing date and time. It is also helpful if you can let me know the IP address (you can get it by visiting this site) so we can find you quickly.

Thanks!

我这边设置的是normal，日本时间：8月18号12：33左右
channelID:1656089815
附件为截图，麻烦看下，感谢！
------------------ 原始邮件 ------------------
发件人:                                                                                "line/line-sdk-ios-swift"                                                                                @.>;
发送时间: 2021年8月23日(星期一) 下午4:17
@.>;
<EMAIL_ADDRESS>主题: Re: [line/line-sdk-ios-swift] 授权登录页面没有出现添加官方账号为好友选项 (#169)
@xietaijian
Thanks for the information. We checked the logs of this channel around that time, but unfortunately we didn't find any suspicious things which can cause it.
So may I confirm these things before we can dig into it deeper. Please feel free to provide some details by sending me a mail to @.***
By mentioning the time 11:20, is it a Beijing zone (+0800) or Japan zone (+0900) or any other timezones? I guess it is a Beijing time but I cannot find related logs with Bot Prompt as normal. There are several aggressive ones though. If it is a Japanese timezone, I can find some logs with normal setting, but all of them respond with correct linked bot so it should not happen.
1.1. It would be nice if you can tell us the timezone of yours.
1.2. Can you please make sure if you are using normal or aggressive? The normal setting will display a bot add action button on the same permission requesting page, while aggressive will display it on the next page after permission requesting.
If it is possible, can you please try to reproduce this issue again, and send me some screenshots to describe your steps as well as the reproducing date and time. It is also helpful if you can let me know the IP address (you can get it by visiting this site) so we can find you quickly.
Thanks!
—
You are receiving this because you were mentioned.
Reply to this email directly, view it on GitHub, or unsubscribe.
Triage notifications on the go with GitHub Mobile for iOS or Android.


APIM SystemAssigned managed identity unable to get certificate stored in keyvault using Azure RBAC permission model

Hi,
I want to add custom domains to API Management that is deployed using internal VNET mode.
The keyVault using Azure RBAC permission model contains 3 certificates for the 3 custom hostnames of APIM.
Part of the APIM hostnameConfiguration is to link to the certificate valid for the custom hostname.
The APIM System assigned managed identity has ''Key Vault Administrator" (https://learn.microsoft.com/en-us/azure/key-vault/general/rbac-guide?tabs=azure-cli#azure-built-in-roles-for-key-vault-data-plane-operations) role assigned on the KeyVault resource.
I'm using the following Bicep template:
resource apim 'Microsoft.ApiManagement/service@2023-03-01-preview' = {
  name: 'apim-999-aha'
  location: location
  sku: {
    capacity: 1
    name: sku
  }
  identity: {
    type: 'SystemAssigned'
  }
  properties: {
    hostnameConfigurations: [
      {
        type: 'DeveloperPortal'
        hostName: apimDeveloperHostName
        keyVaultId: apimDeveloperKeyVaultId
        certificate: {
          expiry: apimDeveloperExpiry
          thumbprint: apimDeveloperThumbprint
          subject: apimDeveloperSubject
        }
        defaultSslBinding: false
        negotiateClientCertificate: false
      }
    ]
    publicIpAddressId: apim-pip
    publisherEmail: publisherEmail
    publisherName: publisherName
    virtualNetworkConfiguration: {
      subnetResourceId: subnetRef.id
    }
    virtualNetworkType: 'Internal'
  }
}

When executing the above template, I get the following error:
Check if Managed Identity of Type: SystemAssigned, ClientId: xxxxx-xxxx-xxxx-3558fc1628d0 and ObjectId:  has GET permissions on secrets in the KeyVault Access Policies
Does this mean that APIM system managed identity can only retrieve certificates inside a KeyVault which has the legacy Access Policies permission model (https://learn.microsoft.com/en-us/azure/key-vault/general/rbac-access-policy)?

@dewolfs Apologies for the late reply. Thanks for reaching out to us and reporting this issue.  The error message indicates that the APIM system managed identity does not have the required permissions to retrieve the certificates from the KeyVault. The error message suggests that the managed identity needs to have GET permissions on secrets in the KeyVault Access Policies.
To resolve this issue,  you need to ensure that the APIM system managed identity has the required permissions to retrieve the certificates from the KeyVault. I understand that you have already assigned the 'Key Vault Administrator' role to the managed identity, which should provide the necessary permissions. However, the error message suggests that the managed identity does not have the required permissions.
One possible reason for this issue is that the KeyVault is using the Azure RBAC permission model, which requires the managed identity to have the appropriate permissions assigned explicitly. You can try assigning the 'Secrets User' role to the managed identity explicitly to provide the necessary permissions to retrieve the certificates from the KeyVault.
Here is an example of how to assign the 'Secrets User' role to the managed identity using Azure CLI:

az keyvault set-policy --name  --object-id  --secret-permissions get list --subscription

This command assigns the 'Secrets User' role to the managed identity with the specified object ID for the specified KeyVault. The managed identity will have the 'get' and 'list' permissions on secrets in the KeyVault.
Alternatively, you can try using the legacy Access Policies permission model for the KeyVault, which should allow the managed identity to retrieve the certificates without requiring explicit permissions and check if that helps:
Here is an example of how to enable the legacy Access Policies permission model for the KeyVault using Azure PowerShell:

Set-AzKeyVaultAccessPolicy -VaultName  -EnabledForDeployment $true

This command enables the legacy Access Policies permission model for the specified KeyVault. Hope this helps.

@dewolfs I wanted to do quick follow-up to check if you had a chance to look at my above comment. Please let us know if you had any updates on this. Awaiting your reply.

Hi @navba-MSFT , thank you for your reply.  I did some additional investigation and got it working after all.  However it had nothing todo with missing access of the APIM system-managed identity to the keyvault.
I had to create 2 separate Bicep deployments/files:

file-1.bicep: this template contains the basic APIM config without hostnameConfigurations but with role assignment of the system-managed identity on the keyVault.
file-2.bicep: this template contains the same APIM config as file-1.bicep but with hostnameConfigurations.

If you put all the parameters in a single bicep template, it won't work.  Looks like you will have a race condition and end up with the error in this issue.  Tried with implicit and explicit dependsOn but did not had any luck.
This is an unfortunate way-of-working causing duplicate code and also it takes a long time to complete (this is to blame to the APIM resource, although it's a PaaS resource in the background it's a VMSS).


Add SocketCam support

User Story
As a user, I want to scan barcodes with the camera so I can count inventory when I don't have my Socket Mobile reader

Scenario: No reader connected

Given no reader is connected
And I tap the scan button
And the "No Socket scanner is connected" dialog appears
When I tap "Use Camera"
Then the SocketCam reader (camera preview) appears

Scenario: Continue using camera

Given I choose to use the camera
And no reader connects
When I tap "Scan"
Then the SocketCam reader immediately appears (no dialog)

Scenario: Prioritize Bluetooth readers

Given I choose to use the camera
And a Bluetooth reader connects
When I tap "Scan"
Then the Bluetooth reader starts scanning

Scenario: Prompt again after reader disconnects

Given I choose to use the camera
And a Bluetooth reader connects and disconnects
When I tap "Scan"
Then the "No Socket scanner is connected" dialog appears

@chiragsolanki-solutelabs I've updated the issue description with the acceptance criteria. For details on the implementation, see the link to the docs in my original email


Integration of mainline kernel to jetpack-nixos

Description of changes

Testing

ready to pull from Draft stage, testing is appreciated )


Resurrects ability to change collector and query ports

The collector and query ports used to be possible to change. This makes
that possible for all non-dev configurations. It also documents them.
Here are the new properties:
* `COLLECTOR_PORT`: Listen port for scribe and dependency apis
* `COLLECTOR_ADMIN_PORT`: Listen port for the ostrich admin http
* `COLLECTOR_LOG_LEVEL`: Log level written to the console
* `COLLECTOR_SAMPLE_RATE`: Updatable via POST /config/sampleRate

* `QUERY_PORT`: Listen port for the query thrift api
* `QUERY_ADMIN_PORT`: Listen port for the ostrich admin http
* `QUERY_LOG_LEVEL`: Log level written to the console

Note this removes some extraneous configuration and sets default log
level to INFO, not DEBUG.
Fixes #659

@wadey this one's for you


Stopping debugging while on a breakpoint crashes vscode

VSCode Version: Version 1.2.0-alpha, Commit 2833eb9d664db9c5a77bdf5fb19d7d7fefd4653c
OS Version: Ubuntu 16.04

Steps to Reproduce:

Debug an extension
Put a breakpoint
Hit the breakpoint
Press stop debugging button

@weinand candidate?

@Tyriar when I press the stop debugging button, the VS Code [extension development window] closes but VS Code stays open. This is the expected behaviour.
Are you seeing something different?

This happened twice in a row while I was doing general extension development, I was hoping the steps would be more reliable. It definitely happened though, the window grayed out after a short period and then crashed.

@Tyriar so you mean: all VS Code windows (as opposed to just the extension host window) closed after pressing the stop button?

@isidorn any idea why pressing stop could crash VS Code?

I had code alpha running full screen in the foreground and the extension host in the background. I hit the stop button and all windows closed after about 5-10 seconds. I'm not sure if the extension host closed first or not as it was in the background.

/cc @bpasero

I just tried 2 more times, no more repro. Maybe I hit some narrow edge case?

@weinand stop for debugging extension host development does nothing special on my side. We send the 'disconnect' request to node adapter. I believe then that the node adapter notifies the workbench to close the extension host window. It might be that in some edge case the workbench closes the wrong window - I know Ben has some funky logic of figuring out which window to close and there might be a flaw for some use cases.

@bpasero may be the 'funky logic' has an issue with fullscreen mode?

@weinand as far as I know ben uses workspace resource uris to identify each vscode window. Fullscreen mode has no influence here.
Ben can correct me if I am wrong

I could not reproduce the issue in Elementary OS and Ubuntu 15.10.
Currently I'm installing Ubuntu 16.04...

Are we really sure this is a native crash and not another edge case where I just close the window? @Tyriar do you get a core dump?

@bpasero no I didn't

Ok so it might be not a native crash. Actually one way to find out is to have a dirty file in the debugger to see if you get a prompt on shutdown.
Anyway, steps to reproduce are needed to debug this.


[BUG] dont rewrite user headers

        if json is not None:
            _update_header_line(header_lines, "Content-Type", "application/json")
        if isinstance(data, dict) and method != "POST":
            _update_header_line(header_lines, "Content-Type", "application/x-www-form-urlencoded")
        if isinstance(data, (str, bytes)):
            _update_header_line(header_lines, "Content-Type", "application/octet-stream")

You dont "Add content-type if missing" - you just rewrite it. Of course it breaks everything

Duplicate of #395, should be fixed in v0.7.3.

Duplicate of #395, should be fixed in v0.7.3.

Nope. In this code
        # Add content-type if missing
        if json is not None:
            _update_header_line(header_lines, "Content-Type", "application/json", replace=True)
        if isinstance(data, dict) and method != "POST":
            _update_header_line(header_lines, "Content-Type", "application/x-www-form-urlencoded")
        if isinstance(data, (str, bytes)):
            _update_header_line(header_lines, "Content-Type", "application/octet-stream")

you are REPLACE Content-Type
correct code
        if h.get("Content-Type") is None:

            # Add content-type if missing
            if json is not None:
                _update_header_line(header_lines, "Content-Type", "application/json")
            if isinstance(data, dict) and method != "POST":
                _update_header_line(header_lines, "Content-Type", "application/x-www-form-urlencoded")
            if isinstance(data, (str, bytes)):
                _update_header_line(header_lines, "Content-Type", "application/octet-stream")

Note the replace parameter:
https://github.com/lexiforest/curl_cffi/blob/06a161457fd4d4fb0c1d1770590ca701c2766482/curl_cffi/requests/session.py#L484-L489
https://github.com/lexiforest/curl_cffi/blob/06a161457fd4d4fb0c1d1770590ca701c2766482/curl_cffi/requests/session.py#L186-L187


Zappa certify fails on/after waiting for DNS propagation

Context
Running zappa 0.42.0 on py3.6, I followed the "custom domain with LE" part of the documentation. I got to the "waiting for DNS propagation" stage, which after ~45s errors with:
Setting DNS challenge..
Waiting for DNS to propagate..
Object of type 'bytes' is not JSON serializable

Possible Fix
When letsencrypt._send_signed_request is called, keyAuthorization is passed as bytes and not string.
This fixes the issue but is far from elegant:
def _send_signed_request(url, payload):
    """
    Helper function to make signed requests to Boulder
    """

    if 'keyAuthorization' in payload:
        try:
            payload['keyAuthorization'] = payload['keyAuthorization'].decode()
        except AttributeError:
            pass

Your Environment

Zappa version used: 0.42.0
Operating System and Python version: ubuntu16.04/py3.6

Can you try with master branch? I think this is already fixed.


Adding icon is not working properly

OS: OSX 10.11.2
Executing:
nativefier -n "Hubii News" -o -i ./Hubii_App_Icon.icns "http://hubii.com"

It doesn't attach the icon on the application. The small size of the icon is correctly attached while the big one show the default icon. If I add the app to the dock, I can see only the default app icon instead the one I'm trying to attach.
icns file:
Hubii_App_Icon.icns.zip
Result where you can see the small icon correctly attached but where the previsualization icon is not correctly attached.

If you need more info, please just tell me. If it's a normal behaviour, just close the ticket. Thanks!

Do it like the link for the .icns in the readme tells you. (Get info of an .icns, Click Icon in the Upper left, cmd+c // get Info ob your electron app (cmd+i), click the icon and hit cmd+v)
Takes a few seconds to take effect

@momosby but the idea is to build the app with the icon in the package.
I have the same issue as @miduga

My past experience indicates that running the script twice or using absolute path could work.

Hi, I believe this issue is because the .icns file you provided is missing certain assets. Could you try to provide a .png instead, after installing the dependencies specified in the readme for v6.7.0

I'll try it and I'll be back with more info.

Working nice with .png :+1: Good work!


unitCodes falsley fallged as not allowed

The unitCode BB gets flagged as not allowed, but is allowed according to the documentation.

FeRD includes in the current ZUGFeRD-Standard the Document EN16931 code lists values v8 - used from 2021-09-06.xlsx which is located in /zugferd22de.zip/DE/Dokumentation/. In that Excel are following Documents listed on row 24  UN/ECE   Recommendation N°20 and UN/ECE Recommendation N°21 — Unit codes. These documents can be found here:

UN/ECE Recommendation N°20
UN/ECE Recommendation N°21

The corresponding error message:
`Value of '@unitCode' is not allowed. from /xslt/ZF_221/FACTUR-X_EXTENDED.xslt)`

I edited the issue, you are right I can't find FLA either only BB. Sorry for that.


PCA support

would be nice to have pca, because then we could initialize umap/tsne with this

Implemented in the newest release


RFC:  PCIE: MSI: Fixes

Various MSI fixes

@najumon1980

Cherry-picked relevant patches to other PRs.


Release v.0.2.3 soon?

Looking forward to use this, but it doesn't seem to work on mill 0.10.0 with v0.2.2.
Noticed you already have commits to get this working. Any plans to push out a new release to maven soon?

It is already released. Double the 2nd colon in the coordinates.


May need to upgrade to Go 1.20 due to dependency

Upgrading getkin/openapi is failing.
https://github.com/grokify/spectrum/pull/112
The error is:
https://github.com/grokify/spectrum/actions/runs/6124055765/job/16623279560?pr=112
Error: ../../../go/pkg/mod/github.com/getkin/kin-openapi@v0.120.0/openapi3/schema.go:1989:32: compiledPatterns.CompareAndSwap undefined (type sync.Map has no field or method CompareAndSwap)
note: module requires Go 1.20

Fixed in bf2e2cbd101ed35dd15f3004fd40877df85c1dc1


.btn-link:hover styles are overridden

Prerequisites

[X] I have searched for duplicate or closed issues
[X] I have validated any HTML to avoid common problems
[X] I have read the contributing guidelines

Describe the issue
All the styles from .btn-link:hover are overridden by :not(.btn-check) + .btn:hover.
With the following variables values
$link-decoration = none;
$link-hover-decoration = underline;

the underline doesn't work for example.
Reduced test cases
https://codepen.io/team/bootstrap/pen/qBamdLj
What operating system(s) are you seeing the problem on?
macOS
What browser(s) are you seeing the problem on?
Chrome
What version of Bootstrap are you using?
5.2.1

Just ran into the same issue. It looks like the problem was introduced in this commit: https://github.com/twbs/bootstrap/commit/32c457db4b6ff389efbd35772b24746c7ffb0b6d
In our case, the problem is caused by the second selector in this group, since it applies to any button that is the first child of its parent. Seems way too broad for its stated purpose:
:not(.btn-check) + &:hover,
&:first-child:hover {

Looks like we will revert to 5.2.0 for now.


Update java-microprofile stack to run as non-root

Signed-off-by: Steven Groeger<EMAIL_ADDRESS>Checklist:

[x] Read the Code of Conduct and Contributing Guidelines.

[x] Followed the commit message guidelines.

[x] Stack adheres to Appsody stack structure.

Modifying an existing stack:

[x] Updated the stack version in stack.yaml

Update java-microprofile stack to run as non-root && reduce progress notification on mvn install
Contributing a new stack:

Describe how application dependencies are managed:

Explain how Appsody file watcher is utilized:

Describe other Appsody environment variables defined by the stack image:

Describe any limitations and known issues:

Related Issues:

So there's three parts here:

Use of java_user in Dockerfile
Use of -Dorg.slf4j.simpleLogger.log.org.apache.maven.cli.transfer.Slf4jMavenTransferListener=warn
Changes to incubator/java-microprofile/image/Dockerfile-stack

mounts
java_user
ENV APPSODY_USER_RUN_AS_LOCAL=true

For 1., I'm curious of the motive here?  Is this just a general best practice of not running as root or something more specific.
For 2., no objection but the comment mentions the Maven version in the base image not supporting:   --no-transfer-progress.  I see that was added in 3.6.1 and I thought the Ubuntu is past that level.  Maybe this was added from another route without realizing this?
For. 3, I'd like to know the goal here too.   In my experience the performance of installing Liberty into the bind-mounted target/liberty/wlp will be very bad..a few minutes of just sitting there while Liberty gets unzipped, and the perf. of this stack is already not good.   But the mounting is intertwined with the other changes... I'm not sure you can separate this from the other couple changes.

Finally, thinking out loud to myself...for the java-openliberty stack, I wonder if we need to do 1?    I don't think there's a rush for 2., though it was requested in #631.    But 3., the changes to use java_user is already in the works.

Scott, let me try and answer you questions

I think we are trying to modify all the stacks to run as non-root and for this reason we are creating a known user as part of the stack image creation. We don’t need to use a specific uid and gid but just create the id. Then we can setup the directories and files to be accessible by that id. One reason this was done for Kabanero is that running as non-root was a requirement for RedHat certification.

I tried using —no-transfer-progress and it failed. When I loaded the base image there is no maven installed hence why it then gets installled by the apt tool. In doing this it installs version 3.6.0. For this reason I used the other option to limit the output. If there is an easier way to get a later version of maven installed then happy to do that and switch to use the shorter option.

@groeges now that we are using APPSODY_RUN_AS_LOCAL=true, we'll be running with uid/gid of the host user... Do we still need to have the java_user/java_group here? I think we still need it in the Dockerfile, but perhaps not needed in Dockerfile-build now?
On the --no-transfer-progress seems much quieter and easier to read/understand so I would like to go for that and see how we get the maven upgraded.
The change to mounts was primarily done to allow writing to /target from within the container. We could possibly use APPSODY_DEPS to cache that folder, but I am not sure how much change we want with his stack.


Non-padding of the halo could cause incorrect computed values

The following example results in NaN values.

    grid = Grid(shape=(5,5))

    v = VectorTimeFunction(name="v", grid=grid, time_order=1, space_order=4)
    p = TimeFunction(name="p2", grid=grid, time_order=1, space_order=4, staggered=NODE)

    v[0].data[:] = 5.
    v[1].data[:] = 5.

    den = np.zeros((5,5), dtype=np.float32)
    den[:] = 2.

    B = Function(name="B", grid=grid, space_order=4, staggered=NODE)
    initialize_function(B, den, 0, dtype=np.float32)
    b = 1./B

    eq = Eq(p, div(b*v))
    op = Operator([eq])
    op.apply(time_M=0)

This NaN values are coming from non-padding of the halo in B. More precisely this occurs because the halo, non padded, is used in the derivative on B leading to 1/0.
As suggest by @mloubout padding the B as B._data_with_outhalo[:] = 2 solve this problem manually for this case.

a different symptom of the same issue is given in #1432


Env variable

https://github.com/sirocchj/sbt-api-builder/issues/4
Allow environment variables like apibuilder-cli. The main difference is the PROFILE variable is named APIBUILDER_PROFILE to avoid the very generic name.

Thanks again @plippe


Static generation

I found myself wishing often to have a statically generated auto-complete, because:

It's faster to load (initial auto-complete in a terminal) than running python to generate a string each time
It means I don't have to ship argcomplete with the project
People don't have to install argcomplete in their path
Allows better ZSH support via fpath=(my-app-zsh-completion-dir $fpath) which is even faster than sourcing a file and cleaner

As a pseudo-woraround I do $ register-python-argcomplete my-awesome-script.py >auto-complete-my-awesome-script.sh which is shipped with the software but this doesn't have all the benefits above.
The generator could read my current script once and generate a file to source for Bash and a file to add to fpath for ZSH.

Here's a 30 min hack I wrote that seems relevant to the conversation/request
although it was intended for dynamic use not static use, and there's 3 problems with it :
1 : There's no obvious way to resolve the filename afaik
2 : I'm notsure you could give this a dynamic name (IE #compdef *.py)
3 : It's bad code, (but not a bad concept)
#compdef argparsecompleter

ARGS=`python<<EOF
import subprocess
import re

def parse(l):
	parsed_args = []
	for i in l:
		try:
			short_arg = re.search(r'-[a-zA-z+],', i).group().strip(',')
		except AttributeError:
			short_arg = ''
		try:
			long_arg = re.search(r'--[a-zA-z+]    ', i).group().strip('    ')
		except AttributeError:
			long_arg = ''
		try:
			help_text = re.search(r'    .+', i).group().lstrip('    ')
		except AttributeError:
			help_text = ''
		parsed_args.append('{}||{}||{}'.format(short_arg,long_arg,help_text))
	return parsed_args

def build_associative_array(l):
	associative_array = ""
	for i in l:
		i = i.split('||')
		short_arg = i[0]
		long_arg = i[1]
		help_text = i[2]
		if short_arg != '':
			associative_array = "{}[{}]\n".format(short_arg, help_text)
		associative_array = "{}[{}]\n".format(long_arg, help_text)
	return associative_array

filename = '' #TODO: Resolve filename

p = subprocess.Popen(['python', filename, '--help'], stdout=subprocess.PIPE).communicate()[0].decode('utf-8').splitlines()
for n, i in enumerate(p):
	if i == 'optional arguments:':
		start_position = n

args_list = p[start_position+1:]
args = parse(args_list)
args = build_associative_array(args)
print(args)
EOF`

typeset -A opt_args
local context state line

_arguments -s -S \
	$ARGS

It basically calls the script with the --help flag, parses the output, and builds an associative array to hand back to zsh.
If anyone wants to do anything with that, consider this my blessing. I originally started writing this when I couldn't get argcomplete to work for me and wanted a dynamic quick and dirty replacement, after writting what I posted here I decided it'd probably be a better option to just figure out why argcomplete isn't working for me so my hack is not complete (nor is it recommended, mostly just posting it as a concept)

As reference: there is a project which can generate a completion script for bash and zsh using docopt: https://github.com/Infinidat/infi.docopt_completion

Second reference: python-fire is generating a static shell script too.
Not sure if this helps, but maybe it is possible to copy some ideas from these projects.


WIP: Adding system tests

System tests for hot call functions in json and http format

This is a WIP change at the moment, the tests are failing as I don't have pushed the two new images used in system tests.

@reclaro still WIP here ?

@reclaro there's ./images/fn-test-utils already, so I think you can just use that if that's easier. There's some examples on how to use it in runner_tests.go. Makefile already builds/prepares fn-test-utils, so it'll be faster and you don't need to do anything to build/pull it. See:
https://github.com/fnproject/fn/tree/master/images/fn-test-utils

@rdallman I am not working  on it right now I might have some time in the future no ETA at the moment, is that ok for you?

no worries - up to you, can leave it open if it's still wip

CLosing as we deleted the system tests.


when to show data-gifffer-alt

both in the examples and the source code, I don't know when the  data-gifffer-alt can show??

Sorry, what you mean "when"? Whatever you put in data-gifffer-alt will end up in a hidden paragraph.

just as a hidden paragraph, it will not show on error or onhover??

The main idea of gifffer is to replace your original image with a svg file and a button. Once clicked you get your original gif. We may indeed maybe put the alt text in a title tag of the svg but everything else goes beyond the responsibilities of the library.