Fix service.yaml template error: handle nil values for service.ports

Previously, an error occurred when trying to access .Values.service.ports in the template, leading to a nil pointer dereference. This commit corrects the issue by ensuring that service.ports is checked for existence before attempting to access it, preventing the error from occurring.
Changes:

Updated service.yaml to use {{- with .Values.service }}...{{- end }} for conditional rendering of ports.

{{- if .Values.service.ports }} already tests for existence of .service.ports
The only thing is you can test for existence of .Values.service via
{{- if (.Values.service).ports }}


[Bug] Losing OwnerShip of Vehicle.

Hello.
If you access to an Interior or something else that Teleport you away from your personally vehicle.
Then you will lose the Ownership and will not be able to put your Vehicle into your garage again.
It works fine it the Vehicle gets DV, then you can take it out again..

What version ? 0.5, 1.0 (vrpex) ?

I think its on all versions? :) Always been a bug i think.
We are using Before vrpex merge

vRP doesn't aim to do backward support, that's the reason people should update their resources to the last stable version so everyone can update the framework.

Can you tell us which part of VRP 2 solves this issue? I really need to fix that in my server to disable /dv.
I will be really gladful if you can just tell me which part of the code cause the ownership loss..


fix: Style tag is displayed in FluentSelect 3.1.1

🐛 Bug Report
Fluent UI Blazor 3.1.1
.NET 6
Blazor WebAssembly
💻 Repro or Code Sample

Hello, world!

<FluentSelect Items="select" TOption="string"/>

@code {
    IQueryable<string> select = new List<string> { "Microsoft MVP for Developer Technologes", "Microsoft MVP for  AI", "Microsoft MVP for  Windows and Devices for IT" }.AsQueryable();
}

https://github.com/tomokusaba/FluentUI3Dotnet6

🤔 Expected Behavior
I want you to apply Style.

😯 Current Behavior
Style tag is displayed

💁 Possible Solution

🔦 Context

🌍 Your Environment

OS & Device: Windows11
Browser :Edge
.NET and FAST Version : .NET 6 Fluent UI Blazor 3.1.1

Thank you for your feedback.
This problem seems to occur only with .NET6 (but not with .NET7 or higher).
Let me check how to solve that.

Fixed in the PR #805 and will be included in the next release.
(in the meantime, if you upgrade your project to .NET7, the problem will be solved)

Same story on .Net 8 - any updates?
OS & Device: Windows11
Browser :Edge
.NET 8
Microsoft.FluentUI.AspNetCore.Components, Version=4.3.1


Sort frameworks & libraries (closes #54)

👋 Hey! Sorry for the delay – I was out of town. Thank you for this, Frankie 👍 🎉


avoid writing to a file you are reading from

cookbook recipe #206

@budziq  Done! :)

Merged, Well done!


Add a version tag to py-mmd-tools at current state

Also alert users that they should bin to this version before we start rewriting the tools.

Created v1.1.5. Next should probably be 2.0.0...


isapprox generating macro?

Hi Stephan,
Next to the == and isequal for structs, I'm always writing isapprox functions for my structs that contain floating point fields. One day I am going to write a macro for that. Would this package be a good place for it?
It's a bit more complex maybe, due to combinations of types that need isapprox and those that need isequal.
Here's what it always roughly looks like:
struct MyStruct
  a::Float64
  b::Vector{Float64}
  c::Int
end

function Base.isapprox(m1::MyStruct, m2::MyStruct; kwargs...)
    return isapprox(m1.a, m2.a; kwargs...) &&
           isapprox(m1.b, m2.b; kwargs...) &&
           isequal(m1.c, m2.c)
end

Hi @matthijscox thank you for the idea and the connection to StructEquality.
It took some weeks, but just now I have it implement in the develop branch, tests are created and running, but I still need to write documentation for it be pushed to the next version.
I renamed the macros and the one for isapprox is called @struct_isapprox.
It would be great if you could give it a try and test whether things are working as intended
] dev https://github.com/schlichtanders/StructEquality.jl#develop

Seems to work so far:
using StructEquality
using Test

@struct_isapprox Base.@kwdef struct Foo{T}
    name::String = "myfoo"
    value::T = 5.0
end

@struct_isapprox Base.@kwdef struct Bar{T}
    name::String = "mybar"
    foo::Foo = Foo()
    value::T = 1.0
end

b = Bar()
b2 = Bar()
@test b ≈ b2

b = Bar()
b2 = Bar(value = 1.1)
@test isapprox(b, b2, atol=0.11)
@test isapprox(b, b2, rtol=0.11)

b = Bar()
b2 = Bar(value = 2.0)
@test !(b ≈ b2)

b = Bar()
b2 = Bar(foo = Foo(value = -1.0))
@test !(b ≈ b2)

I am going to include it into the code if this is okay with you

Sure, go ahead
I also quickly tested that I can still add docstrings
"""
Can I still add docstrings?
"""
@struct_isapprox Base.@kwdef struct Bar{T}
    name::String = "mybar"
    foo::Foo = Foo()
    value::T = 1.0
end
Base.doc(Bar)

On the REPL this indeed shows me the doc string. I don't know a way to easily test this.


Plugin OVRPlugin.dll is used from several locations

XRTK - Mixed Reality Toolkit Bug Report
Describe the bug
Upon targeting Windows Universal and trying to build I get the following error:
Plugin 'OVRPlugin.dll' is used from several locations:
 Packages/com.xrtk.oculus/Plugins/1.42.0/Win/OVRPlugin.dll would be copied to <PluginPath>/OVRPlugin.dll
 Packages/com.xrtk.oculus/Plugins/1.42.0/Win64/OVRPlugin.dll would be copied to <PluginPath>/OVRPlugin.dll
Please fix plugin settings and try again.

As the error message suggests the issue can be solved by fixing the plugin settings for the OVRPlugin DLLs to exclude WSAPlayer when building.
Your Setup (please complete the following information)

Unity 2019.3.0f3
Development Branch

Target Platform (please complete the following information)

WMR / WinUniversal

This has been resolved in 0.1.10.  And it's been checked in 0.1.11 (with API 1.44) to ensure it's not an issue.

Gonna reopen this until it's resolved


Add POC for a proposed ListAll func for paginated resources

🔧 Changes
This PR contains a proposed POC for a ListAll func on all paginatable resources. This PR shouldn't get merged as the purpose of it is just to facilitate discussions over the solution. Tests were omitted as well in case the function signature needs adjustments.
📚 References

🔬 Testing

📝 Checklist

[ ] All new/changed/fixed functionality is covered by tests (or N/A)
[ ] I have added documentation for all new/changed functionality (or N/A)

Codecov Report
Patch coverage has no change and project coverage change: -0.39% :warning:

Comparison is base (1f5853c) 94.89% compared to head (51a69a9) 94.51%.

Additional details and impacted files
@@            Coverage Diff             @@
##             main     #261      +/-   ##
==========================================
- Coverage   94.89%   94.51%   -0.39%
==========================================
  Files          46       46
  Lines        8441     8475      +34
==========================================
  Hits         8010     8010
- Misses        337      371      +34
  Partials       94       94

Files Changed
Coverage Δ

management/client.go
61.53% <0.00%> (-25.21%)
:arrow_down:

:umbrella: View full report in Codecov by Sentry.
:loudspeaker: Have feedback on the report? Share it here.

@willvedd @Widcket  I've removed the limit argument to keep this as strictly a "paginate all" API and also added a small test to cover it so it should be good for review

Interestingly, on node-auth0 v4 getAll() does not use pagination at all, so it does not, in fact, "get all": https://github.com/auth0/node-auth0/blob/beta/src/management/__generated/managers/clients-manager.ts#L109.
So not entirely sure we should go by that token here, given how we typically look at the node-auth0 v4 implementation to model things.

Good point raised @Widcket, however I think that we shouldn't necessarily follow stricly what node-auth0 is doing, we can stay curious and do the best DX for the given programming language. Naming something getAll and not actually returning all the resources is not intuitive IMO.

I think that we shouldn't necessarily follow stricly what node-auth0 is doing, we can stay curious and do the best DX for the given programming language.

Oh I totally agree, was just pointing out observed behavior.
Given that this PoC was originally created after https://github.com/auth0/auth0-cli/pull/797 was raised, to try and find a way to reduce the code needed to add new resources, and that as it stands now it won't be able to fulfill this purpose:

Do we want to keep this new functionality as getAll and add a new method that can be used for the CLI, that allows specifying a limit?
Do we want to rename this method to something else that does not imply "getting all", as the name is a problem?
Do we want to keep this new functionality as getAll and not add anything else that can be used for the CLI?

I'm going to close this PR as we have decided that for now we do not wish to add a ListAll function into the SDK, we will instead look to improve our documentation for functions and link to the pagination documentation as necessary (see #328)


nixio doesn't support lazy loading.

After installing Neo 0.6.1, I tried to load a Nix file using Neo with the following lines:
neo_file = NixIO(filename, "ro")
block = neo_file.read()

which prompted the following error:
Traceback (most recent call last):
  File "C:/Users/CPL/PycharmProjects/ephys_analysis/ephys_analysis/free_playground.py", line 85, in <module>
    raw_signal = get_electrode_data(h5_filename, LFP_electrode_name)
  File "C:\Users\CPL\PycharmProjects\ephys_analysis\ephys_analysis\elephant_main.py", line 21, in get_electrode_data
    block = neo_file.read()
  File "C:\python_venv\lib\site-packages\neo\io\baseio.py", line 116, in read
    return self.read_all_blocks(lazy=lazy, **kargs)
TypeError: read_all_blocks() got an unexpected keyword argument 'lazy'

I fixed this error by adding the lazy keyword to the read_all_blocks() function. While this bypasses the error, the lazy keyword is still going to raise an exception if set to True, because Nix does not support lazy loading.
Additionally, we changed the assert to an exception because we are value checking, and an assert is not appropriate for this.

Hello @werthiness! Thanks for submitting the PR.

In the file neo/io/nixio.py, following are the PEP8 issues :

Line 202:5: E129 visually indented line with same indent as next logical line

Coverage decreased (-0.006%) to 50.299% when pulling 79781af4b61adef354d942cc81ac505a2d33973f on werthiness:patch-1 into 12d73305c8c0cab6d63bf7c3fe813ed62822260a on NeuralEnsemble:master.

Thank you for the patch.
Effectivelly, we removed lazy load for all IO that are not based on raw.
So nixio dot not support lazy. But there are some plan to modify NixIO to NixRawIO, so that it will support again in futur version.
The main goal is to implement a new lazy load API with proxy object see #461.
It more or less already working in that branch but need more work.
This futur lazy load will behave like this:
The first example is without lazy, so it consume more memory:

    lim0, lim1 = -500*pq.ms, +1500*pq.ms
    seg = reader.read_segment(lazy=False)
    triggers = seg.events[0]
    anasig = seg.analogsignals[0]  # here anasig contain the whole recording in memory
    all_sig_chunks = []
    for t in triggers.times:
        t0, t1 = (t + lim0), (t + lim1)
        anasig_chunk = anasig.time_slice(t0, t1)
        all_sig_chunks.append(anasig_chunk)
    apply_my_fancy_average(all_sig_chunks)

The second example use lazy so it consume fewer memory::
    lim0, lim1 = -500*pq.ms, +1500*pq.ms
    seg = reader.read_segment(lazy=True)
    triggers = seg.events[0].load(time_slice=None)  # this load all trigers in memory
    anasigproxy = seg.analogsignals[0]  # this is a proxy
    all_sig_chunks = []
    for t in triggers.times:
        t0, t1 = (t + lim0), (t + lim1)
        anasig_chunk = anasigproxy.load(time_slice=(t0, t1))  # here real data are loaded
        all_sig_chunks.append(anasig_chunk)
    apply_my_fancy_average(all_sig_chunks)

Let's merge.


EVP_EncryptUpdate() relying on memory layout

https://github.com/openssl/openssl/blob/7a908204ed3afe1379151c6d090148edb2fcc87e/crypto/evp/evp_enc.c#L324
This line seems to be relying on in not being in the proximity of NULL to correctly determine if the input and output buffers overlap.
Since out being NULL is a valid value that could become a problem, albeit probably only on exotic platforms or customized kernels.

From the documentation I would not expect in or out to be NULL.
However grep sees some of these, even clearly overlapping ones:
apps/speed.c:            EVP_EncryptUpdate(ctx, buf, &outl, buf, lengths[testnum]);
apps/speed.c:            EVP_EncryptUpdate(ctx, NULL, &outl, NULL, lengths[testnum]);
apps/speed.c:            EVP_EncryptUpdate(ctx, buf, &outl, buf, lengths[testnum]);
crypto/cms/cms_pwri.c:        if (!EVP_EncryptUpdate(ctx, out, &dummy, out, olen)
crypto/cms/cms_pwri.c:            || !EVP_EncryptUpdate(ctx, out, &dummy, out, olen))
crypto/pem/pem_lib.c:            || !EVP_EncryptUpdate(ctx, data, &j, data, i)
demos/evp/aesgcm.c:    EVP_EncryptUpdate(ctx, NULL, &outlen, gcm_aad, sizeof(gcm_aad));
demos/evp/aesccm.c:    EVP_EncryptUpdate(ctx, NULL, &outlen, NULL, sizeof(ccm_pt));
demos/evp/aesccm.c:    EVP_EncryptUpdate(ctx, NULL, &outlen, ccm_adata, sizeof(ccm_adata));

The documentation I meant is https://wiki.openssl.org/index.php/EVP_Authenticated_Encryption_and_Decryption#Authenticated_Encryption_using_GCM_mode

AAD data is passed through in zero or more calls to EVP_EncryptUpdate, with the output buffer set to NULL

Hmm, I looked there: doc/man3/EVP_EncryptInit.pod
EVP_EncryptUpdate() encrypts B<inl> bytes from the buffer B<in> and
writes the encrypted version to B<out>. This function can be called
multiple times to encrypt successive blocks of data. The amount
of data written depends on the block alignment of the encrypted data:
as a result the amount of data written may be anything from zero bytes
to (inl + cipher_block_size - 1) so B<out> should contain sufficient
room. The actual number of bytes written is placed in B<outl>. It also
checks if B<in> and B<out> are partially overlapping, and if they are
0 is returned to indicate failure.

I could update the manpage to include mention of setting out to NULL for AEAD purposes and that fully overlapping buffers are valid.
Also, skipping the is_partially_overlapping() part if out == NULL seems like a good idea to me.
Should I implement this?

Sure.

I am not sure that the overlapping test can be missed.  Ping @dot-asm

Where are we on this?  I know that there's been some effort that tried to deal with partial overlaps, but haven't quite followed.  @bernd-edlinger and @dot-asm, care to comment?

My try to clean up the partial overlap code (and documentation) is in #5427.
But we do not agree on the general direction of the PR.
I found there are more hidden problems, and too little test coverage in this area.
IMHO the problem starts when you try to give a correct definition of "partial overlap".
What the code currently does is hard to describe, which is due to the fact that it is
partially broken (not only around NULL in/out special cases).
And of course we can not take back anything that is currently allowed as partial overlap.

Not a 1.1.1 specific issue, so removing that milestone.

Marked as inactive to be closed at the end of 3.5 development cycle.


Only set z-index on dialog backdrop if needed

I have no idea why this test fails. 😢

@diegohaz
https://github.com/ariakit/ariakit/discussions/1335#discussioncomment-2708361
If I set z-index on backdrop but not dialog, it will be overwritten to "auto" by Ariakit.

@diegohaz
https://github.com/ariakit/ariakit/discussions/1335#discussioncomment-2708361
If I set z-index on backdrop but not dialog, it will be overwritten to "auto" by Ariakit.

Can't you set zIndex on the dialog instead?

@diegohaz Yes I can, but set z-index on a static-positioned element seems weird. Feel free to close this PR if you don't like this workaround. I have no strong opinion on this. 😊

It would be nice if we could update the backdrop zIndex only if the dialog property has been manually set. But my concern with this change is that the backdrop zIndex will not update if the zIndex property is set on the dialog after the first render. That is, only the very first zIndex value will be taken into account.
We should probably add this to the docs. But, yeah, I think having this restriction of only setting zIndex on the dialog element, for now, has better tradeoffs.


Typo in parameters name

> Parameters
>
> Address of the caller's I/O status block. This parameter is required and cannot be NULL.
Parameter block, not IOSB.
Some documentation of the parameters would be great (but an act of supererogation)

Document Details
⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

ID: d54580f8-53ef-db25-71e1-dfccd8bfff5e
Version Independent ID: ce8ef8a9-708b-a915-9bb6-1004e1842ec2
Content: NtFlushBuffersFileEx function (ntifs.h) - Windows drivers
Content Source: wdk-ddi-src/content/ntifs/nf-ntifs-ntflushbuffersfileex.md
Product: windows-hardware
Technology: windows-devices
GitHub Login: @lorihollasch
Microsoft Alias: loriwhip

Also, it can be null because thats what happens when you call NtFlushBuffersFile

Also

If the call to the NtFlushBuffersFileEx function occurs in user mode, you should use the name "NtFlushBuffersFileEx" instead of "NtFlushBuffersFileEx".

And from looking at it in windbg the parameter must be NULL and the parameter size must be zero

@rodwiddowson , thanks for flagging this. Turns out that Parameters is currently not used, and that you are correct about NULL and zero settings. I've updated the page accordingly.


[wiki-tutorial] Restore of vdso fails

Hello, thank you for the cool software!
I'm trying to run the simple migration example in the wiki: https://github.com/ssrg-vt/TransProc/wiki/Migrate-a-Simple-Program
I'm using the (recommended) emulated environment: https://github.com/ssrg-vt/TransProc/wiki/Emulated-Environment-Setup
For some reason, the restore step fails on aarch64, stumbling on a vdso issue:
...
task_args->pid: 5707
task_args->nr_threads: 1
task_args->clone_restore_fn: 0x117d8
task_args->thread_args: 0x23500
(00.200134) pie: 5707: Switched to the restorer 5707
(00.202826) pie: 5707: vdso: Remap rt-vdso 0xffffbed03000 -> 0x29000
(00.204472) pie: 5707: vdso: Remap rt-vvar 0xffffbed02000 -> 0x28000
(00.205349) pie: 5707: vdso: Using gettimeofday() on vdso at 0x29498
(00.216395) pie: 5707: vdso: Using gettimeofday() on vdso at 0x29498
(00.217201) pie: 5707:  mmap(0x4ff000 -> 0x500000, 0x3 0x12 3)
(00.218696) pie: 5707:  mmap(0x500000 -> 0x508000, 0x7 0x12 3)
(00.219331) pie: 5707:  mmap(0x600000 -> 0x602000, 0x1 0x12 3)
(00.219913) pie: 5707:  mmap(0x700000 -> 0x702000, 0x3 0x12 3)
(00.220553) pie: 5707:  mmap(0x800000 -> 0x802000, 0x3 0x32 -1)
(00.221626) pie: 5707:  mmap(0x803000 -> 0x804000, 0x1 0x12 3)
(00.222916) pie: 5707:  mmap(0x900000 -> 0x901000, 0x1 0x12 3)
(00.223950) pie: 5707:  mmap(0xa00000 -> 0xa02000, 0x1 0x12 3)
(00.225060) pie: 5707:  mmap(0x7ffcf91a1000 -> 0x7ffcf91c2000, 0x3 0x132 -1)
(00.226071) pie: 5707:  mmap(0xffffacaa5000 -> 0xffffacaa6000, 0x3 0x32 -1)
(00.227615) pie: 5707:  mmap(0xffffacaa6000 -> 0xffffacaa7000, 0x7 0x32 -1)
(00.228614) pie: 5707: Preadv 0x500000:8192... (6 iovs)
(00.233700) pie: 5707: `- returned 45056
(00.234791) pie: 5707:    `- skip pagemap
(00.235264) pie: 5707:    `- skip pagemap
(00.235658) pie: 5707:    `- skip pagemap
(00.236045) pie: 5707:    `- skip pagemap
(00.236427) pie: 5707:    `- skip pagemap
(00.236808) pie: 5707:    `- skip pagemap
(00.237806) pie: 5707: vdso: Parsing at 0xffffacaa6000 0xffffacaa7000
(00.239048) pie: 5707: vdso: PT_LOAD p_vaddr: 0x0
(00.239743) pie: 5707: vdso: DT_HASH: 0x120
(00.240178) pie: 5707: vdso: DT_STRTAB: 0x1e0
(00.240663) pie: 5707: vdso: DT_SYMTAB: 0x150
(00.241072) pie: 5707: vdso: DT_STRSZ: 0x77
(00.241563) pie: 5707: vdso: DT_SYMENT: 0x18
(00.242585) pie: 5707: vdso: nbucket 0x3 nchain 0x6 bucket 0xffffacaa6128 chain 0xffffacaa6134
(00.243685) pie: 5707: vdso: image [vdso] 0xffffacaa6000-0xffffacaa7000 [vvar] 0xffffacaa5000-0xffffacaa6000
(09.180370) Error (criu/cr-restore.c:1562): 5707 killed by signal 11: Segmentation fault
(09.184215) Error (criu/cr-restore.c:2483): Restoring FAILED.

Do you know what the issue might be? I have tried running the vdso/vdso.sh script to initialize the vdso templates (although this step is not needed for the emulated environments provided), but it didn't work.
Not sure if this repo is still maintained, but I appreciate your time in any case.

Ok, it seems that even though the kernel versions were the same major revision between the architectures:
5.4.0-193-generic aarch64

vs
5.4.0-196-generic x86_64

I still had to apply the steps to update the vdso templates on both hosts. And, also, transfer the updated templates between the hosts.
Now, it works.

Ok, it seems that even though the kernel versions were the same major revision between the architectures:
5.4.0-193-generic aarch64

vs
5.4.0-196-generic x86_64

I still had to apply the steps to update the vdso templates on both hosts. And, also, transfer the updated templates between the hosts.
Now, it works.

Yes, you will need to update the vdso templates. Sorry for seeing this issue late.

Ok, it seems that even though the kernel versions were the same major revision between the architectures:
5.4.0-193-generic aarch64

vs
5.4.0-196-generic x86_64

I still had to apply the steps to update the vdso templates on both hosts. And, also, transfer the updated templates between the hosts.
Now, it works.

Yes, you will need to update the vdso templates. Sorry for seeing this issue late.

No problem, thanks a lot for your reply!


Move to GitHub actions

Change Summary
Move all tests to run on github actions.
This combined and extends #1293 and #1304. Thank you very much @StephenBrown2 for your work on both, they were very helpful when working on this. I decided it was easiest to start a new PR to combined results, I hope you don't mind.

Happy to do the legwork to get it started, I'd imagined they'd get combined in the end anyways.

Not sure if it's relevant, but do you want to add or move to manylinux2014 wheels (vs manylinux2010) as well?
https://cibuildwheel.readthedocs.io/en/stable/options/#examples_4
https://www.python.org/dev/peps/pep-0599/#the-manylinux2014-policy

done, now builds manylinux1 and manylinux2014 binaries. Hope that is correct.


--help for the various commands should always print the help, do nothing, and exit 0

Ideally you should use argparse for all your argument parsing, but regardless, twitter-log --help tries to authenticate to the internet, twitterbot --help prints a message that it needs ircbot, and twitter-follow --help just exits 1 (all three exit 1).

👍


KastriFMX.dproj does not compile

Trying to compile KastriFMX, as this seems to be the project to isntall the native controls, does result in the error that OnLongPress; in DW.NativeButton.pas is not present in the base class.
Commenting this out makes the project compile. But there's still a warning
[dcc32 Warnung] KastriFMX.dpk(44): W1033 The Unit 'DW.NativeControlModel' has been implicietely imported in package 'KastriFMX'

Fixed


Use the Pro client API for security status information

Move from using the JSON output of the UA client to the new Pro client API, which is expected to stay stable for longer:
https://canonical-ubuntu-pro-client.readthedocs-hosted.com/en/latest/references/api.html
I also added a helpful error message to alert people that the Ubuntu Pro client was not working correctly and probably needed to be installed or updated.
Run some basic tests:

16.04 and 18.04 initially give an error with helpful text advising that ubuntu-advantage-tools needs updating, as the version included in these old releases does not support the Ubuntu Pro API.
16.04 and 18.04 without Ubuntu Pro show unpatchable updates, as expected (as these releases are in ESM only for all updates)
16.04 Pro and 18.04 Pro show no unpatchable updates, as Ubuntu Pro has esm-infra, which will let these updates be patched
20.04 and 22.04 without Ubuntu Pro had no unpatchable updates by default, as these are still in standard security maintenance. I installed pdfresurrect, which is a universe package with an ESM update in esm-apps. 20.04 and 22.04 then showed 1 unpatachable update, as expected, and 16.04 and 18.04 showed an additional unpatchable update. Applying Ubuntu Pro to these instances resolved these to 0.

Thanks. I think I have resolved the "nits" and retested on 16.04, 18.04, 20.04 and 22.04 Ubuntu Server and Ubuntu Pro on Azure. In-place upgrade to Ubuntu Pro from Ubuntu Server also resolves the output in the way one would expect (reducing e.g. the 208 unpatchable ESM updates on Ubuntu Server 16.04 to 0 once the instance is upgraded to Ubuntu Pro).


INSTALLED_APPS random order problem

When you use the INSTALLED_APPS = list(set(TENANT_APPS + SHARED_APPS)) the order of the apps becomes random which causes a problem with the admin. You will find that the custom admin doesn't always work. one what of getting round this is to repeat the apps again. I don't like this so a function is required such as
def get_installed_apps(shared_app, tenant_app):
    installed_app = list(shared_app)
    for app in tenant_app:
        if app not in installed_app:
            installed_app.append(app)
    return installed_app

Found that the docs already had this
INSTALLED_APPS = list(SHARED_APPS) + [app for app in TENANT_APPS if app not in SHARED_APPS]


Persistent odometry

Driver remembers odometry in case board restarts and starts reporting from zeros. Driver also resets odometry to 0, 0 if it restarts but board is still reporting other values.

Ugh, sorry - it grabbed the wrong commit. The only difference should be style but I'm going to close this and PR the one that only highlight my code addition, not every line that vscode autoformatted.


alembic upgrade head failed: ModuleNotFoundError: No module named 'pydantic_settings'

I've read issues here related to alembic migrations, but looks like the failure message I got is different, so I'd make a post for help.
In my .env file, I added my url as following (suppose my app has the prefix MYAPP with a remote postgresql server ip: <IP_ADDRESS>):
<EMAIL_ADDRESS>Then in my local computer's terminal, when I execute the following command:
alembic upgrade head

I got errors that complain pydantic_settings not found:
File "/Users/user1/myapp/myapp/db/migrations/env.py", line 10, in <module>
    from myapp.settings import settings
  File "/Users/user1/myapp/./myapp/settings.py", line 6, in <module>
    from pydantic_settings import BaseSettings, SettingsConfigDict
ModuleNotFoundError: No module named 'pydantic_settings'

Looks like a path issue for loading pydantic_settings package. anyone has seen similar issues?

Hello. pydantic-settings is an external package. It might be a problem with dependencies. Have you got pydantic_settings in your pyproject.toml? Have you installed all dependencies? Are you executing commands in virtual environment?

made it work by using pyenv to set up a virtual environment for my project. Thanks


Ability to view some information about clients

Checklist

[X] I searched existing Issues, and did not find a similar enhancement request
[X] This enhancement request is about the VPN setup script, and not WireGuard VPN itself
[X] I read the README
[X] I followed instructions to configure VPN clients

Describe the enhancement request
It would be nice to see some information about clients, such as time of last connection and traffic that it spends, in the list of clients. I don't suggest implementing ability of logging, just some general information that would allow to know about traffic spending and time of use.
Is your enhancement request related to a problem? Please describe.
Additional context

@Futyn-Maker Hello! Thank you for your suggestion. This feature is outside the scope of this project. However, you can refer to the WireGuard documentation to see whether there is a way to get these stats from the WireGuard binary or related utilities.


Error : Prepared statement needs to be re-prepared

This issue has been moved from the zendframework repository as part of the bug migration program as outlined here - http://framework.zend.com/blog/2016-04-11-issue-closures.html

Original Issue: https://api.github.com/repos/zendframework/zendframework/issues/7331
User: @balalinux
Created On: 2015-03-17T05:29:20Z
Updated At: 2015-11-06T21:38:55Z
Body
Hi Team,
Not really sure if this is a bug. Im getting the below error while using Zend\Db\Adapter with Mysqli driver.
"Prepared statement needs to be re-prepared"
This happens only for the queries which uses the mysql views.
Any idea on why this occurs ? Google search suggests to use Pdo_Mysql driver to get rid of this problem.
Is this a known issue with Zend2 + Mysqli ?
Please let me know.
Thanks.

Comment
User: @visitek
Created On: 2015-03-24T20:17:12Z
Updated At: 2015-03-24T20:17:12Z
Body
We had this problem on old mysql. Update is needed.

Comment
User: @balalinux
Created On: 2015-03-25T06:59:33Z
Updated At: 2015-03-25T06:59:33Z
Body
I see that we use 10.0.15-MariaDB-1~trusty-log. Any idea on from which version this would work fine ?

Comment
User: @balalinux
Created On: 2015-05-12T10:24:04Z
Updated At: 2015-05-12T10:24:04Z
Body
Can you please tell me on which version you found this working ?

Comment
User: @Martin-P
Created On: 2015-05-12T14:49:17Z
Updated At: 2015-05-12T14:49:17Z
Body
Perhaps the notes in the MySQL bug report can help: http://bugs.mysql.com/bug.php?id=42041

I've fixed it temporarily with:
$_reflection = new \ReflectionObject($model);
			$_property   = $_reflection->getProperty('isInitialized');
			$_property->setAccessible(true);
			$_property->setValue($model, false);
			$_property->setAccessible(false);
			$_property = $_reflection->getProperty('sql');
			$_property->setAccessible(true);
			$_property->setValue($model, null);
			$_property->setAccessible(false);


Enhancement: another type of default window placement - book sheet tiles

Recently I got motivated by https://github.com/joewing/jwm/issues/269 to write the following proposal.
Over the last 7 years I've developed a lot of different adjustments to different existing window placement algorithms as well as came up with totally different and usually quite complex ones (many of them tested on FVWM). But now I'm already more than 2 years successfully using the following simple algorithm (both on small and larger screens).
The main idea is to divide the screen only vertically and thus arranging windows in one horizontal row while stretching (or shrinking) them into equally sized tiles (if the window didn't request a smaller width in which case the request is satisfied and we have more space to divide for other windows). If it's not possible to change window size, then centering window vertically in the tile and narrowing/expanding the tile horizontally to fit the window width. In case of too small height or width of the screen/virtual_desktop, falling back to purely manual placement for this specific virtual desktop (this might happen e.g. after connecting your wide-screen high-resolution notebook to an old 4:3 projector with very low resolution).
If the width of the tile with stretchable/shrinkable window should be lower than a specified value (usually in the form of a fraction from the whole screen width - e.g. 1/3), then the tiles are left with the 1/3 width, but stacked in the form of book sheets while having the newly appeared window on top:

If the number of windows on one desktop should decrease, then the algorithm is run again and takes, of course, into consideration the initially requested window sizes by windows (e.g. when the last but one window has been removed, the last remaining window should get precisely the initially requested size potentially cut down to fit the screen if the initially requested size exceeded either height or width or both).
This placing algorithm is also triggered when moving windows between virtual desktops.
I've experimented with generalization to use more than one row of the "book sheets", but it didn't work well (it became too complex and was useful only in very weird situations - e.g. when one uses extremely tiny fonts).
This algorithm has quite a few very nice properties, especially that it preserves the dimension (not position) wishes of the windows if there is enough space. E.g. if you're using Gimp with separated tool window and the main drawing window, then the tool window will request and get only a narrow tile and the main drawing window will have the whole rest. An open dialog will then shrink the main drawing window by half and once the open dialog is closed, the main drawing window will again double it's width.
Maximalization of windows works the same way as in purely manual placement mode except for the fact, that the placement algorithm is triggered after demaximalization (that's very useful, because some stretchable/shrinkable windows request too small sizes and to "convince" them to become larger one would need to use mouse; but if one maximizes the window and then again minimizes which triggers the algorithm, which in turn will cut down the size from the maximized state to fit the tile - all that without touching a mouse and chasing pixels one by one by hand; this gets also quite important when moving windows between desktops).
Tip: it's very convenient to add keyboard shortcuts to move window focus (including raising the window) to the window on the left and on the right neighbouring side as well as left & right shortcuts for swapping two neighbouring windows (be it tiles or "book sheets") - this way one can propagate any window anywhere using bubble sort :wink:.
This was btw the first placement algorithm which handled about 40 open PDFs on one virtual desktop on 15" screen (the minimum width for a window was a fraction 1/2 of the screen width), while still being usable.

https://www.desktopneo.com/
or the video
http://www.youtube.com/watch?v=9WZVPM-zZWM
This describes a desktop similar to what you want.
There are other things in this video also, such as a persistent 'home' screen desktop window, and file management based on hashtags.
But I did like the tiling idea, which is very similar to your proposal.
some of this functionality is partially built in in JWM.
we have maxright/maxleft
@joewing also recently added smarter tiling support.
The other part of the idea would be adding swiping features to JWM.  Such as 3 finger swipes, etc...
And this would also make JWM very usable on a touch screen, having this 'book' mode

@Israel- thanks, Desktop Neo looks really good to me (I didn't know about it). The main issue is, that Desktop Neo doesn't exist :wink:. In that context my proposal may be percieved as a transitional technology between the current desktop full of totally inconsistent GUI applications and the highly integrated Desktop Neo approach.
Either way, my proposal seems to fit very well the current inconsistent world of GUI apps and also includes the ability to easily handle tenths of windows on one virtual desktop while still being highly productive. With Desktop Neo already more than 2 windows/panels are getting quite cumbersome, because there are only two solutions - minimization to a vertical bar, and swiping - both without overlap and both requiring user input in comparison to the fully automated approach I've proposed :smile:.
Add also the Desktop Neo's requirement to use touchpad and pointing device extensively (which is probably not what e.g. power users like @joewing or me want as they might use vi-like keybindings and will want to leave their hands on the keyboard all the time nearly without touching any TrackPoint :wink:).

For those interested, Desktop Neo was highly inspired by http://10gui.com/ .

@dumblob I also prefer using keyboard shortcuts to mouse gestures, I am sure many of the people here feel the same way, however making it available for users (like on touch screen devices) might be something to think about.
Your proposal of enhancing an existing desktop with more functionality is a good one.
Making JWM more functional for a larger set of use cases could only be a good thing, as long as it does not drop too much functionality. A blend between modern (all the nice svg icons and user friendly menus we can use in JWM) and functionality (like your custom vi-like bindings for JWM), so both power users and 'consumer users' can use JWM.
I will check your link out, thanks


feat(@angular/cli): add scope hoisting via webpack 3

This should result with significant bundle size reduction.
See https://medium.com/webpack/webpack-3-official-release-15fd2dd8f07b for details.
--vendor-chunk now defaults to false on --prod builds. This was changed because the separate vendor bundle affected potential size reduction from adding scope h
oisting, so it became sub-optimal to use a vendor bundle when deploying to production.

Blockers for this to get merged:

[x] Webpack 3 released (see https://medium.com/webpack/webpack-3-official-release-15fd2dd8f07b)
[x] ~Webpack 2.5.1+ bug with CommonsChunkPlugin https://github.com/webpack/webpack/issues/4850 fixed, it's breaking tests/e2e/tests/misc/common-async.ts~ (not a bug, just config https://github.com/webpack/webpack/issues/5109#issuecomment-311154920)
[x] Webpack 2.4.x+ build performance regression https://github.com/webpack/webpack/issues/4863
[x] ~extract-text-webpack-plugin generates css in the wrong order https://github.com/webpack-contrib/extract-text-webpack-plugin/issues/548~ (not applicable to CLI projects https://github.com/webpack-contrib/extract-text-webpack-plugin/issues/548#issuecomment-311326232)
[x] Packages allowing<EMAIL_ADDRESS>as a peer dependency:

[x] extract-text-webpack-plugin: https://github.com/webpack-contrib/extract-text-webpack-plugin/pull/540
[x] html-webpack-plugin: https://github.com/jantimon/html-webpack-plugin/pull/707
[x] less-loader: https://github.com/webpack-contrib/less-loader/pull/208
[x] webpack-dev-middleware: https://github.com/webpack/webpack-dev-middleware/pull/200
[x] webpack-dev-server: https://github.com/webpack/webpack-dev-server/pull/946

:shipit: It seems they released Scope hoisting and blog posted about it

Pushed an update that uses<EMAIL_ADDRESS>but there seem to be some performance regressions atm: https://github.com/webpack/webpack/issues/4863.

We have a few PRs we are hoping to land within this next few weeks. It should good the perf regressions, in theory.

@filipesilva - I'll see that the webpack-contrib related repos sorted this weekend.

@filipesilva - You can check less-loader off your list https://github.com/webpack-contrib/less-loader/releases/tag/v4.0.5
Extract Text will make the dist-tag tomorrow evening.

@d3viant0ne thank you for the heads up, I just updated this PR to use less-loader. For now it's still using<EMAIL_ADDRESS>but will be updated with 3.0.0 once it is released.

This PR no longer automatically turn off vendor chunking in production builds, since it's benefits might be conditional on a bug that needs to be fixed. This can be added at a future date if needed.

Updated to<EMAIL_ADDRESS>which was the last missing piece.
I'd like to extend my thanks to @d3viant0ne and @TheLarkInn, they've been awesome in communicating changes and releases in the Webpack 3 rollout, cheers!


can't run controller spec: undefined method `request=' for [controller]

I got spork running and it sped up my model spec's startup time, but I can't seem to run my controller specs.  First of all, one of my controllers has 'respond_to :html, :json' at the top, and it complains that 'respond_to' isn't defined on the controller.  (It works fine when running w/o spork.)  I commented out that line to see what would happen without it (running with that line commented out causes only one spec to fail w/o spork - the other 35 pass), and every spec fails with the error:
Failure/Error: Unable to find matching line from backtrace
undefined method `request=' for <[my controller]:0xb5...>
The whole stack trace is from spork (last line is forking.rb:13)
I am running @chrismdp's fork (which only has one change - something about spookie), but the standard gem wasn't working for me either (see issue #63).  I am running Rails 3.0.1, RSpec 2.1.0 and Bundler 1.0.7 (running tests like this: 'bundle exec rspec --drb spec/controllers/...')

I resolved this in a Rails4 app by adding :type => :request to the describe call in rspec.
So it looked like
describe API::V1::ModelName, :type => :request do

@KingsleyKelly awesome thanks! worked for me, while type: :controller failed

Thanks @KingsleyKelly , it resolved an issue of mine too !

thanks @KingsleyKelly


ci(cd): combine cd pipelines for all stages

:tada: This PR is included in version 2.15.0 :tada:
The release is available on GitHub release
Your semantic-release bot :package::rocket:


Ignore exceptions raised when assembling input kinds.

Those inputs will simply be left out of the collection.
We've installed the JMX app and the 'Splunk App for Streams' on our splunk server. Both of these apps have data inputs that cause the code in InputCollection to raise an exception - preventing any inputs from being enumerated. The modification here will just omit troublesome inputs from the InputCollection.

@earthling thanks for the PR! A few notes:

Can you sign the contributor agreement: http://www.splunk.com/goto/contributions
Can you make the PR target develop and not master?
What was the error that they were throwing? I'm curious if there is a legitimate issue.

I signed the contributor agreement. I'll try to make the PR target develop, but I'm frankly horrible at git. The stack trace for the exception being swallowed here looks like this:

com.splunk.HttpException: HTTP 404 -- <?xml version="1.0" encoding="UTF-8"?>
<response>
  <messages>
    <msg type="ERROR">
 In handler 'jmx': Invalid custom action for this internal handler (handler: jmx, custom action: helloworld, eai action: list).</msg>
  </messages>
</response>

	at com.splunk.HttpException.create(HttpException.java:84)
	at com.splunk.HttpService.send(HttpService.java:386)
	at com.splunk.Service.send(Service.java:1278)
	at com.splunk.HttpService.get(HttpService.java:138)
	at com.splunk.InputCollection.assembleInputKindSet(InputCollection.java:243)
	at com.splunk.InputCollection.assembleInputKindSet(InputCollection.java:268)
	at com.splunk.InputCollection.assembleInputKindSet(InputCollection.java:268)
	at com.splunk.InputCollection.assembleInputKindSet(InputCollection.java:268)
	at com.splunk.InputCollection.refreshInputKinds(InputCollection.java:279)
	at com.splunk.InputCollection.refresh(InputCollection.java:292)
	at com.splunk.InputCollection.refresh(InputCollection.java:26)
	at com.splunk.Resource.validate(Resource.java:174)
	at com.splunk.ResourceCollection.validate(ResourceCollection.java:350)
	at com.splunk.ResourceCollection.values(ResourceCollection.java:357)

@earthling something a bit more odd is going on here - I'm not sure this exception should be thrown.
What's the best way for us to reproduce this?

We installed the splunk jmx app (SPLUNK4JMX) and the splunk streams app (splunk_app_stream). Noth of them cause this exception. Our code is just calling into Service::getInputs.

@earthling coud you rebase the branch against develop so it will use the auto-run tests? If you don't think you can do it, let me know.

@earthling sorry for the delay. I've run this with both the streamfwd app and SPLUNK4JMX, and it works just fine. So a few more questions:

What version of Splunk are you running?
What OS are you running?

I just want to reproduce this so we can figure out the right fix.

It's likely this was due to some misconfiguration in our environment. I'll try again to reproduce it here. Thanks for getting back to me.

@earthling we're going to close this due to inactivity. If you're still facing this issue you can open another PR against the develop branch.


🌐(i18n) update translations

Purpose
New translations have been added on crowdin, we have to integrate them
in marsha before publishing a new release.
Proposal

[x] download new translations files

So I think it means no.

Should-it be mentioned in the CHANGELOG?

It's not needed.


[Docs] ggml: add README for the llava-1.6 execution command

Hello, I am a code review bot on flows.network.
It could take a few minutes for me to analyze this PR. Relax, grab a cup of coffee and check back later. Thanks!


migrate operator code

Signed-off-by: Kuan Feng<EMAIL_ADDRESS>

/retest

/lgtm

/lgtm

/retest


How do I create multiple sematic UI site projects?

I've cloned the repo and made quite a lot of customizations in my child theme at npm/semantic-ui/src/site/ and compiled them using gulp. However, I now wish to create another child theme that uses most of the npm/sematic-ui/themes/default/ definitions.
I'm sure I can somehow manually get this working by creating a new site2 folder and changing the npm settings I suppose. But is there any other faster way of creating a new child-theme site folder and switching between each of these sub projects?
On a sidenote, how do I switch between themes like default,material design, github that are provided. How can I create separate workspaces/ projects to check out how each of the themes & childthemes compile?
PS: I could obviously git clone for every project but I'm sure I'm missing out a simple trick to handle "child-themes" using gulp and npm for semantic-ui

Hi @saikrishnadeep,
If I understood you correctly, I don’t think the framework supports multiple compilations like that. The fastest way is to have a separate SUI installation. If what you mean, is to switch on the fly, that’s not possible out of the box, for other usage please refer to this documentation section. The following is a standard reply.
Thank you for posting, but although it’s a valid usage question, we’ve limited GitHub Issues to bug reports and feature requests, keeping the board more manageable for maintainers; see the contributing guidelines for more information on what kind of posts should find themselves into the GitHub Issues board.
To get answers or feedback that might allow you to repost this issue, please use one of our other support resources:

Gitter chatroom
Official forums
StackOverflow


--prod build.  Function expressions are not supported in decorators in 'ɵ0'

I'm getting this error when I do an aot build.
ERROR in Error during template compile of 'LoginModule'
Function expressions are not supported in decorators in 'ɵ0'
'ɵ0' contains the error at src\app\components\login\login.module.ts(23,22)
Consider changing the function expression into an exported function.
I suspect it's because I have a lambda in my module...
JwtModule.forRoot({
config: {
tokenGetter: () => {
return '';
}
}
})

This lib is actually for Angular 1. You're looking for http://github.com/auth0/angular2-jwt


Remove reference to clipboard in OS class doc

accessing the clipboard is no longer done through the OS class, it's done with the DisplayServer. Closes https://github.com/godotengine/godot-docs/issues/6947.

Thanks!

Cherry-picked for 4.0.2.


Reducer Assertions when using createStore

This extracts the two generic reducer assertions (reducer sanity and never returning undefined) from combineReducers, so that they can be used with createStore's reducer.

Those checks are only in combineReducers() and not createStore() to allow for advanced users to opt-out of them, if they desire.

allow for advanced users to opt-out of them, if they desire.

Wouldn't that be better accomplished with process.env.NODE_ENV like https://github.com/rackt/redux/blob/master/src/utils/combineReducers.js#L128?

only in combineReducers() and not createStore()

Treating them differently seems odd.

Are you suggesting that advanced users set their NODE_ENV to 'production' as a way to opt-out? :)
Hmm, why does it seem odd? They're two different types of functions. createStore() creates your store, combineReducers() is a particular way of composing many reducers into one.
If the goal is to extract the sanity checks into a separate module, then perhaps we should export those modules separately, rather than force everyone to use them no matter what.

Are you suggesting that advanced users set their NODE_ENV to 'production' as a way to opt-out? :)

Yup.

Hmm, why does it seem odd?

Because they both handle reducers. I'd argue this is more important in createStore since it's the real API and combineReducers is just sugar to make making a reducer nicer. But combineReducers will always return an object, so it defeats the check in createStore, so it needs the checks as well. (I have a bad building analogy I'll spare you from. :wink:)
Really, anything that handles reducers should be guiding users to the "proper" way: never return undefined.

Setting NODE_ENV to 'production' is not a viable option; now you're opt-ing out of all warnings entirely.
I would rather see these sanity checks exported as a separate, opt-in module that wraps a reducer. createStore() should be exclusively concerned with state management.
I can see where you're coming from, though. I do agree with the "never return undefined" rule — even if you want to return nothing, you can return null instead. But every time someone suggests that we add more convenience features to createStore() (in the beginning, middleware, combineReducers(), and the thunk middleware were all built-in) I feel a moral obligation to push back. Indeed, if it were up to me, createStore() wouldn't perform an initial dispatch, but I already lost that battle :D

We like to think createStore is a core API with minimum limitations and perf hitting checks, and combineReducers is a helper designed for beginners to get up to speed quickly. So createStore errs on the side of flexibility, and combineReducers errs on the side of safety.

Wouldn't that be better accomplished with process.env.NODE_ENV like https://github.com/rackt/redux/blob/master/src/utils/combineReducers.js#L128?

Adding even a single option is a huge maintenance burden. For every issue, there are two possible code paths how it could've happened. We also never want to have different behavior for hard errors in development and production. If you turn an error assertion in production, it will surface later in code (because it's likely buggy) but stack traces will be useless because you won't be able to reproduce them in development.


[bug]theater.replay not working anymore as of 2.2.0

Well, the title is pretty clear. Since 2.2.0, a replay call in a Scene can't trigger the "Sequence:end" event, and shows that there is no name for that Scene. (Unable to get property 'name' of undefined or null reference
Open the console, and look at this fiddle  where the bug is easily reproducible - Just wait for the replay scene to start :)

Thanks for the heads up, it was due to the way .replay() works and is now fixed per 4c0b752a96740983ff7c6896f151e414284cebc5 which is included in v2.2.1's release.

You're welcome !
Mh, another thing, when does the sequence:end event get fired ? Actually, if I "theater.stop()" when a sequence:end event is set like that for example :
         .on('sequence:end', function () {               theater.stop(); //Do something               setTimeout(1400,theater.play());           });
since "theater.stop()" wait for the end of the sequence to stop, and that the end of the sequence play it again, it's getting somewhat complicated XD .
I guess something like that can't be fixed without editing the core mechanics of that event, so I'd like to know how to get the "state" of the current scene, to do a simple "if stopped" check before running the sequence:end function :)

Actually the sequence:end event is emitted when it ends so calling theater.stop() in a callback that listens for it won't prevent the sequence from ending but the next scene to play. But I'm not really sure to understand what you're trying to do, would you mind providing an example?

Sorry, It's a bit difficult to explain something in a language other than my native one.
I wouldn't mind at all, here's another fiddle
I figured out some things, so my question doesn't involve the sequence:end event anymore, but I'm still searching how to get the state of the scene, you'll understand with the fiddle :)

You are looking for theater.status which can be:

ready: nothing special is happening, the scenario is ready to be played
stopping: the scenario is about to stop
playing: the scenario is playing

So in your case, you could ensure that theater.status === 'ready':
if (theater.status === 'ready') {
  // welcome user
}


Remove a few more build warnings

Using app.config as the source name for he config file means the build understands the user-defined binding redirects in place when assembly resolution happens

After this build net40 gives

And build vs gives one warning:

And build vs test gives these two additional warninngs (easy enough to fix)


Removing redundant constant.

It looks like it was moved to google.api_core.gapic_v1.client_info and during the move the delete was forgotten.

Merging, as the BigQuery failure is #4587.


nixos/home-assistant: harden systemd service

Motivation for this change
This is what is still exposed, and it should still allow things to work
as usual.

✗ PrivateNetwork=                                             Service has access to the host's network                                            0.5
✗ RestrictAddressFamilies=~AF_(INET|INET6)                    Service may allocate Internet sockets                                               0.3
✗ CapabilityBoundingSet=~CAP_NET_ADMIN                        Service has network configuration privileges                                        0.2
✗ DeviceAllow=                                                Service has no device ACL                                                           0.2
✗ IPAddressDeny=                                              Service does not define an IP address allow list                                    0.2
✗ PrivateDevices=                                             Service potentially has access to hardware devices                                  0.2
✗ PrivateUsers=                                               Service has access to other users                                                   0.2
✗ AmbientCapabilities=                                        Service process receives ambient capabilities                                       0.1
✗ CapabilityBoundingSet=~CAP_NET_(BIND_SERVICE|BROADCAST|RAW) Service has elevated networking privileges                                          0.1
✗ RootDirectory=/RootImage=                                   Service runs within the host's root directory                                       0.1
✗ RestrictAddressFamilies=~AF_UNIX                            Service may allocate local sockets                                                  0.1

→ Overall exposure level for home-assistant.service: 1.9 OK 🙂

Things done

[x] Tested using sandboxing (nix.useSandbox on NixOS, or option sandbox in nix.conf on non-NixOS linux)
Built on platform(s)

[x] NixOS
[ ] macOS
[ ] other Linux distributions

[x] Tested via one or more NixOS test(s) if existing and applicable for the change (look inside nixos/tests)
[ ] Tested compilation of all pkgs that depend on this change using nix-shell -p nixpkgs-review --run "nixpkgs-review wip"
[ ] Tested execution of all binary files (usually in ./result/bin/)
[ ] Determined the impact on package closure size (by running nix path-info -S before and after)
[ ] Ensured that relevant documentation is up to date
[x] Fits CONTRIBUTING.md.

14:27 <hexa-> is setting +eip (in any combination) on a capability in a systemd unit useful?
14:27 <hexa-> like from what I understand CapabilityBoundingSet is basically the "p" (permitted)
14:27 <hexa-> and AmbientCapabilities could be interpreted as "e" (effective)
14:29 <hexa-> the manpage only states "Note that this option also affects the respective capabilities in the effective, permitted and inheritable capability sets."
14:30 <hexa-> so I feel like there is no point in setting +eip or any combination thereof

I've removed +eip from cap_net_admin for this reason. Sadly I believe @peterhoeg, who originally added those capabilities (presumably due to the bluetooth tracker component) migrated to OpenHAB. So we'd need someone else to test or confirm this.

Capabilities are now conditional based on components used.
✗ PrivateNetwork=                                             Service has access to the host's network                                            0.5
✗ RestrictAddressFamilies=~AF_(INET|INET6)                    Service may allocate Internet sockets                                               0.3
✗ DeviceAllow=                                                Service has no device ACL                                                           0.2
✗ IPAddressDeny=                                              Service does not define an IP address allow list                                    0.2
✗ PrivateDevices=                                             Service potentially has access to hardware devices                                  0.2
✗ RootDirectory=/RootImage=                                   Service runs within the host's root directory                                       0.1
✗ RestrictAddressFamilies=~AF_UNIX                            Service may allocate local sockets                                                  0.1

→ Overall exposure level for home-assistant.service: 1.3 OK 🙂

Core dump at my parents setup.
(gdb) bt full
#0  0x00007fdc8c223299 in syscall () from /nix/store/v8q6nxyppy1myi3rxni2080bv8s9jxiy-glibc-2.32-40/lib/libc.so.6
No symbol table info available.
#1  0x00007fdc52616cd6 in alloc_mmap () from /nix/store/79491jwy14lbfrhbwwl6jr6qnkkrrwb8-lapack-3/lib/liblapack.so.3
No symbol table info available.
#2  0x00007fdc526170d2 in blas_memory_alloc () from /nix/store/79491jwy14lbfrhbwwl6jr6qnkkrrwb8-lapack-3/lib/liblapack.so.3
No symbol table info available.
#3  0x00007fdc52617765 in adjust_thread_buffers () from /nix/store/79491jwy14lbfrhbwwl6jr6qnkkrrwb8-lapack-3/lib/liblapack.so.3
No symbol table info available.
#4  0x00007fdc52617bf0 in blas_thread_init () from /nix/store/79491jwy14lbfrhbwwl6jr6qnkkrrwb8-lapack-3/lib/liblapack.so.3
No symbol table info available.
#5  0x00007fdc523e507f in gotoblas_init () from /nix/store/79491jwy14lbfrhbwwl6jr6qnkkrrwb8-lapack-3/lib/liblapack.so.3
No symbol table info available.
#6  0x00007fdc8c8be9ee in call_init () from /nix/store/v8q6nxyppy1myi3rxni2080bv8s9jxiy-glibc-2.32-40/lib/ld-linux-x86-64.so.2
No symbol table info available.
#7  0x00007fdc8c8bead4 in _dl_init () from /nix/store/v8q6nxyppy1myi3rxni2080bv8s9jxiy-glibc-2.32-40/lib/ld-linux-x86-64.so.2
No symbol table info available.
#8  0x00007fdc8c25f0bc in _dl_catch_exception () from /nix/store/v8q6nxyppy1myi3rxni2080bv8s9jxiy-glibc-2.32-40/lib/libc.so.6
No symbol table info available.
#9  0x00007fdc8c8c2d88 in dl_open_worker () from /nix/store/v8q6nxyppy1myi3rxni2080bv8s9jxiy-glibc-2.32-40/lib/ld-linux-x86-64.so.2
No symbol table info available.
#10 0x00007fdc8c25f075 in _dl_catch_exception () from /nix/store/v8q6nxyppy1myi3rxni2080bv8s9jxiy-glibc-2.32-40/lib/libc.so.6
No symbol table info available.
#11 0x00007fdc8c8c25dd in _dl_open () from /nix/store/v8q6nxyppy1myi3rxni2080bv8s9jxiy-glibc-2.32-40/lib/ld-linux-x86-64.so.2
No symbol table info available.
#12 0x00007fdc8c500246 in dlopen_doit () from /nix/store/v8q6nxyppy1myi3rxni2080bv8s9jxiy-glibc-2.32-40/lib/libdl.so.2
No symbol table info available.
#13 0x00007fdc8c25f075 in _dl_catch_exception () from /nix/store/v8q6nxyppy1myi3rxni2080bv8s9jxiy-glibc-2.32-40/lib/libc.so.6
No symbol table info available.
#14 0x00007fdc8c25f10f in _dl_catch_error () from /nix/store/v8q6nxyppy1myi3rxni2080bv8s9jxiy-glibc-2.32-40/lib/libc.so.6
No symbol table info available.
#15 0x00007fdc8c5008f5 in _dlerror_run () from /nix/store/v8q6nxyppy1myi3rxni2080bv8s9jxiy-glibc-2.32-40/lib/libdl.so.2
No symbol table info available.
#16 0x00007fdc8c5002c6 in dlopen@@GLIBC_2.2.5 () from /nix/store/v8q6nxyppy1myi3rxni2080bv8s9jxiy-glibc-2.32-40/lib/libdl.so.2
No symbol table info available.
#17 0x00007fdc8c700533 in _PyImport_FindSharedFuncptr () from /nix/store/q6gfck5czr67090pwm53xrdyhpg6bx67-python3-3.8.9/lib/libpython3.8.so.1.0
No symbol table info available.
#18 0x00007fdc8c6ca4ac in _PyImport_LoadDynamicModuleWithSpec () from /nix/store/q6gfck5czr67090pwm53xrdyhpg6bx67-python3-3.8.9/lib/libpython3.8.so.1.0
No symbol table info available.
#19 0x00007fdc8c6c7f95 in _imp_create_dynamic () from /nix/store/q6gfck5czr67090pwm53xrdyhpg6bx67-python3-3.8.9/lib/libpython3.8.so.1.0
No symbol table info available.
#20 0x00007fdc8c609323 in cfunction_vectorcall_FASTCALL () from /nix/store/q6gfck5czr67090pwm53xrdyhpg6bx67-python3-3.8.9/lib/libpython3.8.so.1.0
No symbol table info available.
#21 0x00007fdc8c5c518f in PyVectorcall_Call () from /nix/store/q6gfck5czr67090pwm53xrdyhpg6bx67-python3-3.8.9/lib/libpython3.8.so.1.0
No symbol table info available.
#22 0x00007fdc8c59dd68 in _PyEval_EvalFrameDefault () from /nix/store/q6gfck5czr67090pwm53xrdyhpg6bx67-python3-3.8.9/lib/libpython3.8.so.1.0
No symbol table info available.
#23 0x00007fdc8c6a30af in _PyEval_EvalCodeWithName () from /nix/store/q6gfck5czr67090pwm53xrdyhpg6bx67-python3-3.8.9/lib/libpython3.8.so.1.0
No symbol table info available.
#24 0x00007fdc8c5c30d1 in _PyFunction_Vectorcall () from /nix/store/q6gfck5czr67090pwm53xrdyhpg6bx67-python3-3.8.9/lib/libpython3.8.so.1.0
No symbol table info available.
#25 0x00007fdc8c595dad in call_function () from /nix/store/q6gfck5czr67090pwm53xrdyhpg6bx67-python3-3.8.9/lib/libpython3.8.so.1.0

Everything that wants numpy relies on lapack/blas and that wants mmap, therefore I allowed the @resources group, which contains the mmap syscall.
✗ PrivateNetwork=                                             Service has access to the host's network                                                                 0.5
✗ RestrictAddressFamilies=~AF_(INET|INET6)                    Service may allocate Internet sockets                                                                    0.3
✗ DeviceAllow=                                                Service has no device ACL                                                                                0.2
✗ IPAddressDeny=                                              Service does not define an IP address allow list                                                         0.2
✗ PrivateDevices=                                             Service potentially has access to hardware devices                                                       0.2
✗ SystemCallFilter=~@resources                                System call allow list defined for service, and @resources is included (e.g. ioprio_set is allowed)      0.2
✗ RootDirectory=/RootImage=                                   Service runs within the host's root directory                                                            0.1
✗ MemoryDenyWriteExecute=                                     Service may create writable executable memory mappings                                                   0.1
✗ RestrictAddressFamilies=~AF_UNIX                            Service may allocate local sockets                                                                       0.1

→ Overall exposure level for home-assistant.service: 1.5 OK 🙂

Are you sure mmap was the actual issue there? You cannot even run the link-loader without mmap.

I guessed as much from the call trace up here https://github.com/NixOS/nixpkgs/pull/120526#issuecomment-826359009.

I also gave PrivateUsers a shot, though I could imagine that to be breaking things, like file permissions here and there.

Yeah, so this broke privilege elevation through capabilities. Let's leave this out for now.

@GrahamcOfBorg test home-assistant

I also gave PrivateUsers a shot, though I could imagine that to be breaking things, like file permissions here and there.

Yeah, so this broke privilege elevation through capabilities. Let's leave this out for now.

I also don't really consider this a security feature to be honest.

@Mic92 @fabaff @globin @etu @mvnetbiz
Can you guys test-drive this change, or do you trust me enough not to break your setup? :smiling_imp:

I'll check it out now.

Any idea what caps are needed for ZHA? (/dev/ttyUSBx access)

Any idea what caps are needed for ZHA? (/dev/ttyUSBx access)

My first thought is SupplementoryGroups = [ "dialout" ];

Figured it out, I had to add
{
  systemd.services.home-assistant.serviceConfig.DeviceAllow = [
    "/dev/serial/by-id/usb-Silicon_Labs_HubZ_Smart_Home_Controller_3120005E-if01-port0 rw"
    "/dev/serial/by-id/usb-Silicon_Labs_HubZ_Smart_Home_Controller_3120005E-if00-port0 rw"
  ];
}

DeviceAllow doesn't actually show up in the unit, but it is actually implied by ProtectClock=true, which I guess does DeviceAllow=char-rtc r behind the scenes. That was a bit confusing. It doesn't show up in systemd analyze security either, but maybe the purpose of that is to show what is explicitly done? I wonder if there is a way to show the actual enforced set of rules.

Works for me, but is there a way to warn that new settings might be needed for certain configurations? Should something like DeviceAllow be added to an explicit option in services.home-assistant?

That's somewhat disappointing. I was previously of the opinion, that I don't want to get into the rats nest of setting DeviceAllow=, but now I am reevaluating that. We could set to something along the lines of DeviceAllow=/dev/ttyUSB*,/dev/ttyACM*. Another option would be to drop ProtectClock= in favor of SystemCallFilter=~@clock, so we wouldn't set DeviceAllow= after all.

I wonder if there is a way to show the actual enforced set of rules.

Use systemctl show home-assistant.service.

I'm not personally annoyed at having to set it but it's probably best to remove it. I'm not sure what other devices I might ever connect to the same machine, but either way I will just keep these options in my personal config now, so whether or not you remove it I will have it. I think it's probably not a huge security issue in most setups, and where it is an issue it can be manually set in order to not cause anyone problems.

I have a change locally that should improve the situation quite a bit. I'm swamped right now, will push it later, needs some more finishing touches.

Maybe we can come up with a whole list of integrations that use local devices, and then if any of these is used, warn if DeviceAllow is empty. It doesn't look like the NixOS module supports H-A downloading modules from pip, so anybody using integrations is either putting the config in nix, or overriding extraPackages so I think users of this module will expect to check their configuration if there is a problem. I'm not sure if there is an approachable way to come up with such a list though.

Thanks, no hurry.

Nevermind, there's some components that may or may not use a local device and there's no way to tell which way ahead of time if it uses the GUI config flow.

Yeah, you always have to specify the component in your YAML config for its dependencies to be included. And I'm reusing the same logic for capabilities and devices now.

I see there's possibilities like using the zha component but with a zigbee coordinator that provides an IP-zigbee bridge instead of local USB /serial, so in that case setting DeviceAllow would be unnecessary

Hah, there is a limit to the complexity I'm willing to integrate here! :laughing:

Okay, here we are. I've allowed certain character devices, that are used for UART and other protocols. At the same time I've migrated the dialout group from the user into the service as SupplementaryGroups=.
@mvnetbiz That should allow zha to work without setting explicit DeviceAllow= per device.

And another change I had on that branch. Might as well add it here, it's minor.
Home-assistant supports signaling its supervisor, that it wants to restart, it sends exit code 100 for that. I added support for that using RestartForceExitStatus=100 and made the termination using that exit code a success using SuccessExitStatus=100. This gives us a clean restart of the python interpreter.
Calling the homeassistant.restart service from within home-assistant will now restart the systemd unit.
hass[17946]: 2021-04-28 19:16:31 INFO (MainThread) [aioesphomeapi.connection] <IP_ADDRESS>: Error while reading incoming messages: Error while receiving data: 0 bytes read on a total of 1 expected bytes
Apr 28 19:16:32 dione systemd[1]: home-assistant.service: Succeeded.
systemd[1]: home-assistant.service: Consumed 16.987s CPU time, received 266.4K IP traffic, sent 532.0K IP traffic.
systemd[1]: home-assistant.service: Scheduled restart job, restart counter is at 1.
dione systemd[1]: Stopped Home Assistant.
systemd[1]: home-assistant.service: Consumed 16.987s CPU time, received 266.4K IP traffic, sent 532.0K IP traffic.
systemd[1]: Starting Home Assistant...
systemd[1]: Started Home Assistant.
hass[18011]: 2021-04-28 19:16:36 WARNING (MainThread) [homeassistant.bootstrap] Skipping pip installation of required modules. This may cause issues

New version works without manually adding DeviceAllow=. I tested Bluetooth tracker with a USB adapter and got some recognized devices, looks like this is needed.
        RestrictAddressFamilies = [
          "AF_UNIX"
          "AF_INET"
          "AF_INET6"
        ] ++ optionals (useComponent "bluetooth_tracker" || useComponent "bluetooth_le_tracker") [
          "AF_BLUETOOTH"
        ];

I don't have a Bluetooth LE adapter, so I can't test that.

Indeed, that makes total sense. Pybluez opens an AF_BLUETOOTH socket from within Python. The Bluetooth LE tracker shelves out to hcitool, which likely does the same.


FAQS section is Missing

Addition of FAQS section is best for user experience
Importance of FAQ Section**
1.Improving Customer Experience:
An FAQ page organizes essential information that customers commonly seek. By addressing their queries directly, you streamline their experience and reduce frustration.
Clear answers to common questions help visitors navigate your site more efficiently, leading to a positive impression of your brand.
2.Quick Information Access:
FAQs provide concise answers, allowing users to find relevant details without digging through lengthy content.
When potential customers are considering a purchase, having quick access to essential information can influence their decision positively.
3.Reducing Employee Workload:
Instead of burdening your employees with repetitive inquiries, an effective FAQ section can handle simple questions.
This frees up your team’s time, allowing them to focus on more complex tasks and personalized interactions.
4.Enhancing Online Visibility:
Well-structured FAQ pages can improve your website’s search engine visibility.
When users search for specific questions related to your products or services, having an informative FAQ can lead them to your site.

@gupta-ritik you are assigned

Kindly Assign me this issue I want to work on this and Contribute under gssoc24


Failure to upload to isolate does not turn a Swarming task purple

See this task, whose tests succeeded but whose upload of isolated output failed: https://chromium-swarm.appspot.com/task?id=3287aa43f3454d10&refresh=10&show_raw=1
This task should be purple, not green.

I'm having a hard time finding where the call is for this failure. Was it on the task exit? If so it's an internal bug. If it is a problem in the recipes, which should be routed at crbug.com/new.

The relevant output is below, it seems to be in the swarming bot code which is running after the item completed?
2484 2016-11-16 20:52:30.637 E: Unable to open given url, https://isolateserver.appspot.com/api/isolateservice/v1/preupload, after 30 attempts.
HTTPSConnectionPool(host='isolateserver.appspot.com', port=443): Max retries exceeded with url: /api/isolateservice/v1/preupload (Caused by NewConnectionError('<third_party.requests.packages.urllib3.connection.VerifiedHTTPSConnection object at 0x038AFB90>: Failed to establish a new connection: [Errno 10060] A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond',))
2484 2016-11-16 20:52:30.653 E: Leaking out_dir c:\b\s\w\iofyhgof: Failed to execute preupload query
Traceback (most recent call last):
File "c:\b\s\swarming_bot.2.zip\client\run_isolated.py", line 538, in map_and_run
delete_and_upload(storage, out_dir, leak_temp_dir))
File "c:\b\s\swarming_bot.2.zip\client\run_isolated.py", line 336, in delete_and_upload
storage, [out_dir], None)
File "c:\b\s\swarming_bot.2.zip\client\isolateserver.py", line 2255, in archive_files_to_storage
uploaded = storage.upload_items(items_to_upload)
File "c:\b\s\swarming_bot.2.zip\client\isolateserver.py", line 580, in upload_items
for missing_item, push_state in self.get_missing_items(items):
File "c:\b\s\swarming_bot.2.zip\client\isolateserver.py", line 759, in get_missing_items
for missing_item, push_state in channel.pull().iteritems():
File "c:\b\s\swarming_bot.2.zip\utils\threading_utils.py", line 377, in _task_executer
result = func(*args, **kwargs)
File "c:\b\s\swarming_bot.2.zip\client\isolateserver.py", line 749, in contains
return self._storage_api.contains(batch)
File "c:\b\s\swarming_bot.2.zip\client\isolateserver.py", line 1243, in contains
'Failed to execute preupload query')
MappingError: Failed to execute preupload query


fix: adjust leading repo URL after renaming

Description
This PR adjusts the leading repo URL in the .tractusx metadata file to match the URL after repo rename
Fixes #31

FYI: @fabiodmota, @alexsilva-CGI
I could not request review from you directly. Should i add you to the Tractus-X contributor list? This would grant you triage permissions on this org and I guess then I could also request review

FYI: @fabiodmota, @alexsilva-CGI I could not request review from you directly. Should i add you to the Tractus-X contributor list? This would grant you triage permissions on this org and I guess then I could also request review

Hi @SebastianBezold if its possible yes please it will be more easy


NuthKaab fails without an error message when no data are available

When a TBA raster is empty (or at least when elevation_difference / slope is only nan), NuthKaab fails with an empty AssertionError. It would be quite easy to fix this, as the error message should just be something along "input raster values do not overlap", or "at least one of the rasters are empty".
https://github.com/GlacioHack/xdem/blob/f40e897761704bffe5ad54ff6b43e3db0730a6f1/xdem/coreg.py#L95

Fixed by #530, but leaving this open so that we add a test to check the error raised

This is closed by https://github.com/GlacioHack/xdem/blob/22dbe7c6a3020a5f556065008862842463933a4c/tests/test_coreg/test_base.py#L541


Custom songs are all FreakyMenu

Describe your bug here.
i tried to add a custom song to psych engine, i tried a lot of things but whenever i go to the chart editor or actually play the song it's just freakymenu
i do not know how to fix this
Command Prompt/Terminal logs (if existing)
No response
Are you modding a build from source or with Lua?
Source
What is your build target?
Windows
Did you edit anything in this build? If so, mention or summarize your changes.
yes, i edited the songs

if you're typing them correct it may work, if you want an example just type
the song you're looking for like pico milf and other's. try this yourself

if you're typing them correct it may work, if you want an example just type the song you're looking for like pico milf and other's. try this yourself

i typed them correctly, i checked multiple times

Check if your song is really OGG and if isn't corrupted.


React.PropTypes validation function warnings

Getting series of React.PropTypes warnings using snowflake v0.1.5.
Example message:
Warning:  You are manually calling a React.PropTypes validation function for the 'initialAction' prop on 'NavigationRootContainer'.
Seeing similar warnings for 'linkingActionMap', 'persistenceKey', etc.

Hi @wookiem - I just used Android GenyMotion and iOS Simulator and can't reproduce.  I did Login, Update Profile, Logout, etc. and can not see these warnings.
How are you able to reproduce?

I just cloned the repo, ran npm install then react-native run-ios and found the same errors

I am not able to reproduce.  I tried do ios Simulator -> Reset Content and
Settings and Rebooting the device and still dont see these warnings.
My XCode is "Version 7.3.1 (7D1014)" and my Mac  is 10.11.5.  When I run
from w/in XCode I see log:

*2016-08-18 10:12:12.435 [warn][tid:main][RCTEventEmitter.m:52] Sending
`websocketFailed` with no listeners registered.*

*2016-08-18 10:12:12.490 [warn][tid:com.facebook.react.JavaScript] The
regenerator/runtime module is deprecated; please import
regenerator-runtime/runtime instead.*

*2016-08-18 10:12:12.522 [info][tid:com.facebook.react.JavaScript] Running
application "snowflake" with appParams: {"rootTag":1,"initialProps":{}}.
__DEV__ === true, development-level warning are ON, performance
optimizations are OFF*

*```*

Do you see this in Android GenyMotion?  I don't see any Warnings there
either.

I'm on Snowflake 1.7 from last night's release.

On Aug 18, 2016 8:13 AM, "Paul Parton"<EMAIL_ADDRESS>wrote:

> I just cloned the repo, ran npm install then react-native run-ios and
> found the same errors
>
> [image: image]
> <https://cloud.githubusercontent.com/assets/5544897/17774918/50ac0526-6599-11e6-82cb-e0931a4772dc.png>
>
> —
> You are receiving this because you commented.
> Reply to this email directly, view it on GitHub
> <https://github.com/bartonhammond/snowflake/issues/121#issuecomment-240718708>,
> or mute the thread
> <https://github.com/notifications/unsubscribe-auth/ABORPGIvtKO4xF9Xu4_5kp26YjETyxPNks5qhFqDgaJpZM4JlvNA>
> .
>

Seeing the same result (with the same steps) as @paulparton.
I've also tried running it from Xcode and I see the same warnings as well.
XCode "Version 7.3.1 (7D1014)"
Mac 10.11.6
I've tried clearing my node_modules and also cache but it didn't help. (I am quite new to all of this, so I am just trying everything I know).

I just created new clone and did 'react-native start' in one terminal and
then 'react-native run-ios' in another terminal and I still don't see these
warnings.
I haven't been able to find any info about why they might have been cleared.
If you clear the warnings, are they gone when you 'reload' or when you
clone the app again?
On Sat, Aug 20, 2016 at 2:40 AM, lunateck<EMAIL_ADDRESS>wrote:

Seeing the same result (with the same steps) as @paulparton
https://github.com/paulparton.
I've also tried running it from Xcode and I see the same warnings as well.
XCode "Version 7.3.1 (7D1014)"
Mac 10.11.6
I've tried clearing my node_modules and also cache but it didn't help. (I
am quite new to all of this, so I am just trying everything I know).
—
You are receiving this because you commented.
Reply to this email directly, view it on GitHub
https://github.com/bartonhammond/snowflake/issues/121#issuecomment-241185369,
or mute the thread
https://github.com/notifications/unsubscribe-auth/ABORPOdXiZMVkDAdhvNRZ_ZaDf8azDh0ks5qhq-GgaJpZM4JlvNA
.

This looks like an open issue with react-native-router-flux https://github.com/aksonov/react-native-router-flux/issues/1009.

Anyone still seeing this?  I still have not.

No, not seeing this anymore.


Add Kubernetes getting-started example

Codecov Report

Merging #70 (92a9b6f) into main (d97bfef) will not change coverage.
The diff coverage is n/a.

@@           Coverage Diff           @@
##             main      #70   +/-   ##
=======================================
  Coverage   82.31%   82.31%
=======================================
  Files          14       14
  Lines         701      701
=======================================
  Hits          577      577
  Misses         88       88
  Partials       36       36

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update d97bfef...92a9b6f. Read the comment docs.


Modify the get organization API

Purpose

Modify the get organization API for fetching user role and summary

Goals

Allow users to fetch user role and summary along with the other data by calling getOrg API

Test environment

Ballerina 0.991, MySQL 5.7.25

Codecov Report

Merging #112 into master will not change coverage.
The diff coverage is n/a.

@@           Coverage Diff           @@
##           master     #112   +/-   ##
=======================================
  Coverage   14.27%   14.27%
=======================================
  Files          61       61
  Lines        2207     2207
  Branches      386      386
=======================================
  Hits          315      315
  Misses       1719     1719
  Partials      173      173

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update 59628e2...1bc3de9. Read the comment docs.


papirus-icon-theme: 20210201 -> 20210302

Motivation for this change
Things done

[x] Tested using sandboxing (nix.useSandbox on NixOS, or option sandbox in nix.conf on non-NixOS linux)
Built on platform(s)

[x] NixOS
[ ] macOS
[ ] other Linux distributions

[ ] Tested via one or more NixOS test(s) if existing and applicable for the change (look inside nixos/tests)
[x] Tested compilation of all pkgs that depend on this change using nix-shell -p nixpkgs-review --run "nixpkgs-review wip"
[ ] Tested execution of all binary files (usually in ./result/bin/)
[ ] Determined the impact on package closure size (by running nix path-info -S before and after)
[ ] Ensured that relevant documentation is up to date
[x] Fits CONTRIBUTING.md.

Result of nixpkgs-review pr 115036 at d255f8d8 run on aarch64-linux 1

2 packages built:

papirus-icon-theme
papirus-maia-icon-theme

2 suggestions:

warning: missing-phase-hooks
installPhase should probably contain runHook preInstall and runHook postInstall.
Near pkgs/data/icons/papirus-icon-theme/default.nix:27:3:
   |
27 |   installPhase = ''
   |   ^

warning: unclear-gpl
lgpl3 is a deprecated license, check if project uses lgpl3Plus or lgpl3Only and change meta.license accordingly.
Near pkgs/data/icons/papirus-icon-theme/default.nix:39:5:
   |
39 |     license = licenses.lgpl3;
   |     ^


add content type for gzip files, e.g.: txt.gz ?

This requires a discussion @apdavison @bweyers @olinux : How do we deal with file compression formats?
Write now we either ignore them (e.g. for nifit, where we just include the typical compression in the extension list), or we register them as separate content types (e.g. zip.jsonld, or vnd.espina.seg+zip.jsonld.
I'm not sure if we could deal with compressed formats a bit more elegantly than just registering them for any possible type.
For example: would it make sense to separate this from format within the file schema? Or include typical compression for file formats in the content type?
format: text/plain
compression: application/gzip
NOTE: the txt.gz is a missing format at the moment that I need to register soonish. Please let me know your thoughts as soon as you can.

This issue has not been addressed. @lzehl has this been resolved offline or should this still be discussed?


Changing a tooltip label or format is not reflected in graph

If a change a tooltip label in a Scatter plot called foo by performing:
foo.tooltip.labels[1] = 'new'
I can confirm the label has changed by checking the value of foo.tooltip.labels, but it is not reflected in the tooltip as seen on the Figure, which retains the original label.  Are tooltip labels not meant to be written to after they are created?
I see a similar behavior when I attempt to change foo.tooltip.formats[1].

Hi @JuanCab, in the current traitlets implementation, changes on a List-like trait trigger events only if the whole list is changed, not one of its elements.
In your case you want to do something like foo.tooltip.labels = ['old0', 'new1']


Use with Drop.js

Are there easy ways to use this lib with drop.js which is built on top of tether?
https://github.com/HubSpot/drop

Sorry, but no. I personally do not plan to support this since the same functionality is easily achieved with React.


Two-line subtitles in cells?

Subtitles could span two lines for better readability if needed. Discuss with the design team.
Remark: Having https://github.com/SRGSSR/playsrg-ios/issues/22 implemented would certainly make such layouts easier.

A lot of work was made on cells. We'll improve the displayed information further in a near future. This issue is not relevant anymore.


feat(core,common): improve adapter resolution strategy

PR Type
What kind of change does this PR introduce?

[ ] Bugfix
[x] Feature
[ ] Code style update (formatting, local variables)
[ ] Refactoring (no functional changes, no api changes)
[ ] Build related changes
[x] CI related changes
[ ] Other... Please describe:

What is the current behavior?

As of today, the Automock iterates through the supported adapters, attempting to import each one until it successfully imports one. It is imperative to enhance this process for improved efficiency and reliability.
Issue Number: #193
What is the new behavior?
Added new functionality to read package.json extracting both dependencies and dev-dependencies and resolving the first supported adapter. This refined capability allows the system to intelligently resolve the first supported adapter with unparalleled precision and efficiency.
Does this PR introduce a breaking change?

[ ] Yes
[x] No

Other information

@yaron-shamul Nice work buddy!! 🚀 🚀


Reverse geocoding location blocks the UI thread

Summary:
The reverse geocoding location blocks the main UI thread.
Expected behavior:
It should run on an asynchronous background thread.  AsyncTask class allows us to perform long lasting tasks/background operations and show the result on the UI thread without affecting the main thread.
Screenshots:

@sashrikakaur Can I please work on this?

@jddeep I am currently working on this. I will send a PR soon.


Add test which confirms that receive log breaks when messages are deleted

Add a way to write integration tests.
Add a query to get messages by id to make writing an integration tests easy.
Fix incorrect error wrapping.

Related to https://github.com/planetary-social/scuttlego/issues/50.


Implement warehouse interface

As mentioned in issue #90, we're now at the point where we need to consider how to handle storage of manufactured items like road materials, building repair and maintenance items, robots, clothing, medicine and luxury goods.
My first thoughts are to use an enumerated type.
enum StorageItem
{
    ITEM_ROBOT,
    ITEM_CLOTHING,
    ITEM_LUXURY,
    ITEM_MEDICINE,
    ITEM_WHATEVER
};

Something along these lines. Then use a Warehouse interface (as opposed to a resource pool interface) to keep these tracked. I'll admit I'm not totally thrilled with this idea though.
One of the things I did with resources that Outpost 1 didn't do was simply keep a list of storage tanks, assign a max storage capacity for the storage tanks and then total them together and cap the players resources at that level.
We could do something similar with warehouses and storable items. Seeing what of each individual items is being stored in a particular warehouse seems superfluous so like resources I'm thinking it will be simpler to see how many active warehouses there are, use that as the maximum storage space available and then add storable items to a 'warehouse pool' type of structure.
We could also take a page from Outpost's book and have different items 'cost' different amounts of space. E.g., I can see storing maybe 10 robots in a Warehouse. So with 100 units of space, the Robot would 'cost' 10 units. Smaller things like luxury goods, medicine and clothing would all take up 1 unit of storage.

I've given this additional thought and this is the plan:
Robots will be housed within Robot Command Center's. Warehouses will be used exclusively for all other products.

Okay, been awhile but I'm noting down some finalized decision making.
All products (with the exception of some robots) will be stored in individual warehouse structures. The loss of a warehouse structure through disaster or maintenance issues will result in the loss of products. A bulldozed warehouse will simply offload its products to other warehouses -- any products that don't fit will be discarded.


Solves [COOK-4691] - adds ability to use IP address as hostname.

See COOK-4691 - Capacity to create chef server with IP address as a hostname.
On top of updating the code, I also updated the README.md files as well as the .kitchen.yml file with a suite name: no-fqnd and the .kitchen.cloud.yml with the same suite to test the changes.
Tested on Ubuntu 12.04 => after a bundle exec kitchen converge no-fqnd-ubuntu-1204, you can access the Chef server web UI through https://<IP_ADDRESS>
I could add a cucumber test that would check that the chef server web page is correctly displayed. Let me know.

I've integrated your changes into my branch for PR #71, and added a couple tests:
       chef-server-no-fqdn
         File "/etc/opscode/chef-server.rb"
           content
             should not match /^api_fqdn.*$/
         Command "chef-server-ctl test"
           exit_status
             should eq 0

       Finished in 1 minute 41.66 seconds (files took 0.3704 seconds to load)
       2 examples, 0 failures

       Finished verifying <no-fqdn-ubuntu-1404> (2m21.07s).

Thank you for this, and I'm sorry we never replied sooner.


GraphQL async function

Hello there,
perhaps a bit silly question, but still,
so docs says
"To make a new query, call the useQuery hook with at least:
A unique key for the query
An asynchronous function (or similar then-able) to resolve the data"
so let's say I want to call my GraphQL server, what do I put there as a 2nd argument please?
can I have an example please? how such a async function with should look like with please
right well,
I end up with below
 const getMe = async () => {
    const { data } = await axios({
      url: 'http://<IP_ADDRESS>:4000/graphql',
      method: 'post',
      data: {
        query: `{ me { id email } }`
      }
    });
    return data;
  };

and yes I can skip url and probably method with global axios config, but still, doesn't look great, especially when is comes to mutations with variables
any alternatives please?

Please watch this video https://egghead.io/lessons/react-use-react-query-s-usemutation-and-querycache?pl=use-react-query-s-hooks-to-query-and-mutate-data-in-your-react-components-64d6

in fact next video on the playlist explains it,
but anyway, thanks a lot,
I really wanted to avoid apollo-client on my frontend, now I have a clear solution,
thanks again

link to the correct video https://egghead.io/lessons/react-use-graphql-with-react-query-s-usequery


No longer applies to Skype for Business Online

This cmdlet does not exist in version <IP_ADDRESS> of the SkypeOnlineConnector module.

Document Details
⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

ID: b71059c2-5587-b5d3-f10c-7c58bda96860
Version Independent ID: 02d8870c-9e5b-069d-fa01-65819463c3de
Content: Get-CsOAuthConfiguration (skype)
Content Source: skype/skype-ps/skype/Get-CsOAuthConfiguration.md
Service: skypeforbusiness-powershell
GitHub Login: @tomkau
Microsoft Alias: tomkau

@officedocsbot assign @yogkumgit

Hello @danmyhre
That is the version I have and I have that cmdlet after importing the session

@get-itips  Thank you very much for the contribution and sharing this explanation. @danmyhre
Hope this comment is helpful for you. Thanks for taking out some time to open the issue. Appreciate and encourage you to do the same in future also.

Thanks, it was something on my machine.  I removed and reinstalled the module and now it is working.


codegen.ml: generating printf function and function_decls

build_function_body is still incompleted. Main function termination token not generated correctly.

yep, let's not merge it yet for now.

Not using Blocks now.


Disable CORS

http://stackoverflow.com/questions/27365303/what-is-the-issue-cors-is-coming-to-solve

So, I looked into this a bit more. We should either re-disable CORS because anyone can now fetch a user's authentication token. The more nuanced solutions that require more development are 1) allow CORS selectively on non-sensitive endpoints, or 2) move authentication to another domain which is hard because we will need to do the entire setup with PennKey once again. I'm re-enabling CORS because auth is currently live, but leaving this issue closed since it's resolved. Instead, I'll re-open a separate issue to look into these options.


Is it possible to clear the instance?

Is it possible to clear the imperium instance. I have a case where my roles and their respective permissions are stored in a database. When that database is updated, I need to be able to remove the actions and roles that were removed from the application.
It would also be nice to specify somewhere else to get the user id from within the middleware. Perhaps something like this (probably would streamline it a bit better than this to be honest):
app.put('/users/:userId', imperium.can([{ action: 'manageUser', user: async function (request) { return request.getContext().get('user'); } }]), ...)

Right now I have to do something like this instead:
const middleware = function(action) {
   return function(request, response, next) {
      let user = request.getContext().get('user');
      let id = -1;

      if (user) {
          id = user._id;
      }

      imperium.can([{ action: action, user: user._id }])(request, response, next);
   };
}
app.put('/users/:userId', middleware('manageUser'), ...)

I could myself add support for these features that I need, however I don't want to bother forking and adding features to the project without the support of the team.

Hey @KieronWiltshire,
First of all, really sorry for the late answer.
Imperium has been entirely rewritten with a new documentation website http://imperium.dimerapp.com, can you check again if this new version solves your issue?


Requirest for pre-trained model

Thank you for your amazing method！
We plan to research AI-generated content detection, however, we have found that only the encoder part of the model is provided in this code.
If you can provide complete pre-trained models for different encoders? We would greatly appreciate it!

Hello. Apologies, but due to the company's management policies, we are unable to provide pre-trained models at the moment.

Thank you for your patience and responses! We have noticed the updated dataset and will attempt to train the model with your code.


Link to correct call off contract and framework agreement on requirements page

For this story on Pivotal https://www.pivotaltracker.com/story/show/139281415
Will need a PR on the apiclient and a PR on the frameworks repo merging before tests will go green.
This PR adds meta information to give a buyer context when looking at one of their requirements page. It's modelled roughly on a similar thing we have when viewing a G-Cloud service, see the one third column here for an example.
This meta information is only displayed if the brief is published and includes the name of the framework the brief is on. This will help the buyer understand what framework they've published their link under. It also links them to the framework agreement for that framework for further context.
The link to the call off contract is also updated depending on the framework. The link text is also changed to provide further context.
URL's have been added to the frameworks repo messages for both DOS frameworks and are pulled in and used from there.
Screen shots!

👍


[feature] Window tag system

Considering how the scratchpad system works, I've been thinking of extending / revamping or simply just implement a separate feature that allow windows to be tagged.
Each tag would in some sense represent a group of windows, which will be referred to as a 'view' from now on. You could then have the option to show / hide a view on the focused (OSX) space.
This will allow for more dynamic grouping of windows, as a window can belong to multiple views.
The different views would probably have to be cached, and loaded upon restart of Kwm, so that information is not lost upon a crash or otherwise unexpected termination.

Would this be preserved between launches? I'm guessing that'd require some Cocoa integration.

Would this be preserved between launches? I'm guessing that'd require some Cocoa integration.

Relaunch of an application, probably not.
Relaunch of Kwm, yes.

Is the use-case here for perhap shaving a "dev" tag which includes terminal, editor, browser, etc then a "chat" tag which might include iMessage/Slack/Adium, whatever and a "research" tag which could also include browser and maybe Evernote, or whatever? That could be kinda nice if it was straight forward to use.

Is the use-case here for perhap shaving a "dev" tag which includes terminal, editor, browser, etc then a "chat" tag which might include iMessage/Slack/Adium, whatever and a "research" tag which could also include browser and maybe Evernote, or whatever? That could be kinda nice if it was straight forward to use.

Pretty much what I'd like to have, yes. Again, not sure if this is doable in a a straight forward way , but figured I'd mention it.

I'm not really sure what advantage this will bring. I already use spaces for this functionality.

I'm not really sure what advantage this will bring. I already use spaces for this functionality.

Basically, the advantage is that you can group windows by themes, rather than "workspace".
Consider the following:
Dev : editor + compiler + terminal + man pages
Web:  browser + irc / slack
Monitoring : netstat + ps

Sometimes you might want different combinations of these, like running your program (interactive) while doing some monitoring or switch the man pages with say a browser. This can now be done trivially by adding them both to a separate group <some name>.

Supercedes current scratchpad feature

It is Great!


Break up deis chart into separate charts with dependencies

As pointed out by @bacongobbler, splitting the "deis" chart into multiple charts with dependencies on each other will be more maintainable.

:+1:

:+1:

can we close this?