error 25001

When I write code like this:
const body = 'test for send message';

const numbers = ['+861663610424239', '+8618015581301802', '+86158266342'];

const service = twilio.notify.services(notifyServerId);

const bindings = numbers.map((number) => {
  return JSON.stringify({ binding_type: 'sms', address: number });
});
console.log('bindings: ', bindings);
const notification = service.notifications
  .create({
    toBinding: bindings,
    body: body,
  })
  .then(() => {
    console.log('[notifications]: ', notification);
  })
  .catch((err) => {
    console.error('[notifications]: error: ', err);
  });

But I can not receive message.The console log has some error:
Message Text
bindingType | "sms"
primaryCorrelationId | "duahduahucjznjncaudhuahudhau"
requestId | "nsdhuhuhudhaucnzjnjnjuahu"
notificationSid | "dahudhuahudhuqhuehuqnaj"
module | "SMS_BA"
description | "Invalid sms binding with address '+861663610424239' sid 'null': Address of sms binding must be a valid phone number"

Can you help me? Thanks!

Hey, I saw you asked this on Stack Overflow too. As far as I can tell, the numbers you are sending aren't valid phone numbers. There's more detail in my answer on Stack Overflow.


Cache error

tried running the readme example, but sadly stuck on this error

➜ deno --version
deno 1.17.1 (release, x86_64-apple-darwin)
v8 <IP_ADDRESS>
typescript 4.5.2

Any guesses?

@jeff-hykin it's due to macOS — apparently i forgot to run deno_bindgen for mac and linux. i'll make sure i add support for it here soon!

i'm going to close this issue until progress on "pallet" (the part of the crate project that deals with native applications) is started back up again. currently it's just a web-based framework, but eventually i'll work my way back down and pallet will return.


[CI] Print program memory usage (PM) along with kernel time

This will be useful to see how close we are to overflowing program memory (16384 B). Note that we will still get these values printed, even if we are destined to overflow, because the error is only thrown at linking (after elf generation).
UPDATE: the size if the .elf file isn't what we want, the elf file contains other stuff. I discovered that the program memory size is stored at byte 72 of the elf (see https://github.com/newling/aie-rt/commit/d0f08bc4a37092a919d6a0d51a44d9f0ae274bb9 for how I found this)

Something isn't as expected, the printed ranges for elf sizes are too large, https://github.com/nod-ai/iree-amd-aie/actions/runs/12147431541/job/33875335756
32 KB and still working?

Something isn't as expected, the printed ranges for elf sizes are too large, https://github.com/nod-ai/iree-amd-aie/actions/runs/12147431541/job/33875335756
32 KB and still working?

Yeah, those sizes don't look correct.

Something isn't as expected, the printed ranges for elf sizes are too large, https://github.com/nod-ai/iree-amd-aie/actions/runs/12147431541/job/33875335756
32 KB and still working?

So here the assumption is the elf file size exactly equals to program memory usage? Not sure if it has any other contents which makes it larger than program memory.

Something isn't as expected, the printed ranges for elf sizes are too large, https://github.com/nod-ai/iree-amd-aie/actions/runs/12147431541/job/33875335756
32 KB and still working?

So here the assumption is the elf file size exactly equals to program memory usage? Not sure if it has any other contents which makes it larger than program memory.

Yeah that was my assumption, and it's incorrect. Ultimately we want the number checked here, where the error is thrown we go OOM: https://github.com/Xilinx/aie-rt/blob/3fdf8d8d9a7a2abcd8df76155f950680607eac8a/driver/src/core/xaie_elfloader.c#L229
but I don't think there's a simple way to get that. The call stack down to there looks like
// in the iree-amd-aie side:
aie2xclbin ->
generateCDO ->
AIETranslateToCDODirect ->
generateCDOBinariesSeparately ->
addAieElfsToCDO ->
addElfToTile ->
// on the aie_rt side:
XAie_LoadElf ->
XAie_LoadElfPartial ->
_XAie_LoadElfFromMem ->
_XAie_WriteProgramSection ->
_XAie_LoadProgMemSection
Those last 2 calls are slicing into the elf C object using pointers which I don't think we can reasonably access. That is on the side where the elf is used to create the CDO. Before that there's a step for creating the elf (see aie2xclbin function), but I don't see anything in there either which will give us the magic number.

I see. So if this number doesn't accurately show the PM usage, I think it's not very useful to print it out.

Yup. I'm going to do some experiments to see if it as a good indicator of PM though, and if it is then it might be useful.

@jtuyls @yzhang93  the value printed is exactly the program memory, turns out the program memory size is stored at a fixed offset in the elf files. Please re-review because this if you like

@jtuyls @yzhang93 the value printed is exactly the program memory, turns out the program memory size is stored at a fixed offset in the elf files. Please re-review because this if you like

Thanks, looks good to me. We could consider throwing errors to catch it when this changes, but it won't be a 100% guarantee. We could check for example that the value is in range ]0, 16KB] or even [1KB, 16KB] or so.

@jtuyls @yzhang93 the value printed is exactly the program memory, turns out the program memory size is stored at a fixed offset in the elf files. Please re-review because this if you like

Thanks, looks good to me. We could consider throwing errors to catch it when this changes, but it won't be a 100% guarantee. We could check for example that the value is in range ]0, 16KB] or even [1KB, 16KB] or so.

Makes sense, I'll add a check for <= 16384 bytes. I realized that my comment in the description that we'll see this number even when we go OOM is wrong. For that, we'd need to analyze the elf in aie2xclbin. Follow-up work...

or even [1KB, 16KB]

For the tiny matmul_truncf_16_16_bf16_f32 test the memory is only 768 bytes!


Utilize CoAP client in OpenThread

This PR utilizes recently introduces CoAP client in OpenThread.
Dummy responses sent for Thread Ntf/Qry/Ans_CON requests do not include Payload Marker now (previously added by Finalize function) as they do not carry any payload. Additionaly I've fixed a bug in CoAP Header parser, that returned error when message did not carry payload (no Payload Marker).
Three troublesome classes were not refactored - Joiner, JoinerRouter and Commissioner (CoAP over DTLS and CoAP encrypted with KEK). Please refer to #731 for discussion.

Current coverage is 73.30% (diff: 76.37%)

Merging #851 into master will decrease coverage by 0.08%

@@             master       #851   diff @@
==========================================
  Files           110        110
  Lines         16512      16315   -197
  Methods        2257       2247    -10
  Messages          0          0
  Branches       1983       1975     -8
==========================================
- Hits          12118      11960   -158
+ Misses         3724       3680    -44
- Partials        670        675     +5

Powered by Codecov. Last update 606b6e5...648a949

@rlubos, unfortunately you'll have to resolve the conflicts before I can merge.

I did some investigation why one of the tests failed. I think that there is an issue with compability of test framework and spinel-cli. In get_addr16 function, test framework expects 4 hex digits, and it is ok for OpenThread CLI impelmentation as it formats the output this way. But using spinel-cli gives the following output:

It seems that at some point it loses the formating, so the test failed for rloc 0x0000 as only one digit was passed. If my understanding is correct it would also fail for Router Id's 1, 2 and 3, so that's the reason (at least one of) of occassional test failures.


Update README.md

Hello sir,
I'm Deepika Kumari GitHub id - deep2002deepika
I did a contribution by adding a new free course in the repo,"Become an Ethical Hacker".
Kindly consider it, & for this, I'll very grateful to you.
Thank you.

now you can contribute in other repo , two pr is enough in one repo , thank you :)


node-crawler.org url hijacked

The repo's home page url (node-crawler.org) goes nowhere/redirects to spam.

Could anyone please have a look into this? /cc @mike442144

Hey, I gave up the domain which add no value to our repo. That's it.

It definitely gives value to the new domain owner, since you're linking to it from the repo's page. :)

I have removed the link, thanks guys.


Add minietwitter android demo app.

Major changes are:

removed unused docs directory
added android-examples directory
added minnie-twitter demo app into android-examples
modified build.graddle of minnie-twitter demo app.

gradlew build generates apk files properly.

@sungwook-moon The old minnie-twitter in sapphire/appexamples/minnietwitter directory will be removed later.
I chose adding a new project, rather than moving the existing project, for two reasons. First, I would like to keep existing app for a while and remove it (or move it) until I have thoroughly tested the new project. Right now I have not tested on running the android app. Second, creating a new project from scratch is a little bit easier. And by diff the new project and existing project, it is easy for me to troubleshoot.


Fix page control padding on iPhone X

Fit to layout according for safe area.
iPhone X Support? #190

👍


SSR/RSC Rendering Behaviour

So I have been unable to work around an issue I am having using a server side query along with some suspense queries and how they are being rendered. This is how things are currently setup:
layout.tsx
export const dynamic = 'force-dynamic'

export default async function OrderOnlineLayout({ children }: React.PropsWithChildren) {
  const { data } = await query<BusinessOpenQuery, BusinessOpenQueryVariables>({
    query: BusinessOpenDocument,
    variables: {
      ids: [env.NEXT_PUBLIC_BUSINESS_ID],
      open: true
    },
    fetchPolicy: 'network-only',
    notifyOnNetworkStatusChange: true,
    context: {
      noCache: true
    }
  })

  if (data && data.businesses.length <= 0) return <OrderOnlineUnavailable operatingWeek={data.businessHours[0]?.operatingWeek} />

  return children
}

page.tsx
export default async function OrderOnlinePage({ searchParams }: PageProps) {
  const product = parseAsString.parseServerSide(searchParams.pid)
  const type = parseAsStringEnum(Object.values(OrderType)).parseServerSide(searchParams.type)

  return (
    <Suspense fallback={<LoadingIndicator className="min-h-screen" />}>
      <OrderOnline
        business_id={env.NEXT_PUBLIC_BUSINESS_ID}
        product_id={product}
        defaultOrderType={type}
        enable_analytics={env.NEXT_PUBLIC_ENVIRONMENT === 'production'}
        classNames={{ tabs: { wrapper: 'bg-primary', trigger: 'text-white data-[state=active]:bg-secondary data-[state=active]:text-primary' } }}
      />
    </Suspense>
  )
}

The issue that is happening is that when either directly going to the page, or navigating to the page from another for the first time, the conditional OrderOnlineUnavailable component is being rendered, followed by the suspense fallback, followed by the OrderOnlineUnavailable component again with the correct content.
I want / it should render directly into the LoadingIndicator by either the loading.tsx file however the awaited query doesnt seem to be being awaited at all.
In addition to that, if I load this page initially, then navigate to another page and come back, the query does not get run again even though the cache is set to cache: 'no-store' and the query fetchPolicy is set to network-only. I am only able to get the function to run again when reloading the page entirely.
Not sure if you have any insights here as far as either of these issues.

Weird await behaviour in async components sounds to me like it would either be a bug in React, or you're maybe accidentally rendering an async component in a Client Tree and not a browser tree? I'm sorry I have no better suggestions here :/

In addition to that, if I load this page initially, then navigate to another page and come back, the query does not get run again even though the cache is set to cache: 'no-store' and the query fetchPolicy is set to network-only. I am only able to get the function to run again when reloading the page entirely.

This sounds to me like the Next.js router cache which caches server components for 60 seconds or so client-side without ever rerunning them.


Allow turning on SSL in Docker

What kind of change does this PR introduce? (Bug fix, feature, docs update, ...)

This PR adds a feature (USE_SSL environment variable to control the Docker entrypoint) and documentation for it.

What is the current behavior? (You can also link to an open issue here)

Currently there's no way to tell the docker entrypoint script to use SSL, so the Docker always produces a frontend that wants to talk to a "ws://" endpoint. This doesn't work behind an SSL-terminating reverse proxy.

What is the new behavior (if this is a feature change)?

Now you can set USE_SSL=1 along with the HOST and PORT variables, to tell the Docker to serve a frontend that expects to be behind HTTPS.

Other information:

:+1:


feat: Add support for writing to top-level dir of statstore

closes #127, paired with @abangser

Waiting for tests to pass before merging


Restore from File share snapshot

Which version of the SDK was used?
latest (v0.8.0)
Which platform are you using? (ex: Windows, Linux, Debian)
Linux
What problem was encountered?
There is no way to create a new volume from a file share snapshot.
How can we reproduce the problem in the simplest way?
Have you found a mitigation/solution?

Hi @akankshakumari393, could you please clarify how that relates to the SDK?

Hi @zezha-msft
I am looking for a way to take snapshot of a Flle share and then use the same snapshot to restore in some file share. Now for this, I could find this function to take snapshot https://pkg.go.dev/github.com/Azure/azure-storage-file-go/azfile#example-ShareURL.CreateSnapshot.
But I didn't find anything which would restore from the snapshot. Is this implemented?

Hi @akankshakumari393, that's not a data-plane operation to the best of my knowledge. This repo is the data-plane SDK.
The management plane SDK is here: https://github.com/Azure/azure-sdk-for-go/tree/main/services/storage/mgmt


MSL : nested cbuffer structs have incorrectly aligned members

basically fix for https://github.com/KhronosGroup/SPIRV-Cross/issues/457 broke packing of members of nested structs. thats a huge regression for us

I'll preemptively ask for an example GLSL/SPIR-V file which triggers this issue.
Given there have been two regressions now in a row on MSL packing, I suspect a refactor/redesign is in order ...

for us this particular issue results in "error: size of constant buffer cannot exceed 65536" because size of the array of this nested structs was carefully chosen to fit 65536 bytes. not sure how do we test this without doing actual msl source compilation

The title says HLSL, it's MSL, right?

its hlsl -> msl . for whatever reason i thought title should have source language

Right. First step will need to be getting a small HLSL or GLSL source file which shows a clear difference before and after that commit and go from there. I can't tell from that commit why this regression would happen.

-			if (mbr_type.type_alias)
 -			{
 -				auto &mbr_type_alias = get<SPIRType>(mbr_type.type_alias);
 -				mark_as_packable(mbr_type_alias);
 -			}

because of that? type is not marked as packable anymore. i'll try to come up with a hlsl repro tomorrow

Right, I'm just not sure why nested structs start failing (and not everything would break in half).

The code that @fatkas highlights was removed to fix #457. The issue there was that the SPIR-V included two sets of identical (including names) nested structs.
One set was used as an shader input and needed to be aligned correctly. The other nested struct was used as a local function only, does not include Offset decorations, and therefore cannot be aligned.
SPIRV-Cross type-aliases the input struct pair to the local function pair to avoid a name conflict.
The problem was that the code above incorrectly attempts to aligned the set of structs that are used for local function variables, because they are type-aliased from the input set of structs.
The change on #464 passed all the regression tests...and some other tests I ran.
As @HansKristian-ARM requested...can we get a sample GLSL (not HLSL) shader that triggers this new issue, please? I'm asking for a GLSL shader so that we can include it in the SPRIV-Cross regression tests.

For the record, it is also possible to use HLSL for regression tests, through assembly shaders.
Random idea on why it's failing: The "master" type of the type_alias is probably not a block type in this case ... The type alias system needs an overhaul, that much is clear.

Fair enough about HLSL...but GLSL is simpler to understand, and play with. So I would prefer a GLSL example...unless there is something stopping it from being available.
Yeah...I'm thinking that we may need to reinstate the code above...but put some additional storage or decoration tests around it to filter out those that don't need to be aligned.
It will be interesting to see how the SPIR-V from a sample shader submitted for this issue differs from that for the shader submitted for #457.

I'm confident we'll figure it out at any rate :)

glsl source https://gist.github.com/fatkas/d3ea12425384726436d28857ee4863d6
old msl https://gist.github.com/fatkas/124ad624c8d6e49876fbf7dd1872a361
new msl https://gist.github.com/fatkas/7e0aac83c16e2a431898c490e4a116e5

Hey everyone,
We are walking into the same issue. I have attached two glsl files that should have the same result; but due to wrong packing, produce very different results.
working.glsl.txt
broken.glsl.txt
working.mtl.txt
broken.mtl.txt
On another note: @billhollings congrats with opening up the source for MoltenVK! :)
Cheers,

Just some info that might help pinpoint the issue.
We found that the first access to the struct matters; thus updating the main of broken.glsl.txt with the following code, "solves" the issue.
void main()
{
    if(false)
        buf0[0].a;

    T1 v = buf0[0];
    float x = v.b;
    buf1[gl_GlobalInvocationID.x] = x;
}

Moving the if statement under the T1 assignment, breaks the code again.
We found that in the case where it goes wrong; the function emit_struct_member, seems to be entered a type of TypeType of the struct instead of the TypeVariable of the struct.
Cheers,

I think the main problem comes down to whether or not to emit the "clean" version of the struct, or the padded version of the struct. I fear we might need to emit both. Right now, we only emit one (probably the first one declared in the SPIR-V), so the statement order probably affects the result here.
@billhollings, have you had a chance to look at this yet? If not, I can have a look.

#483 solved the issues for us!
Cheers,


Non ASCII Japanese characters not rendered

I am currently using xhtml2pdf 0.0.6 and I have installed a japanese  font on my system. I'm also providing @font-face css as below -
@font-face {
        font-family: "DejaVuSansMono";
                src: url({{data.font_url}})
        }

        html {
                font-family: "DejaVuSansMono", sans-serif;
        }

But unfortunately it comes up with black boxes instead of japanese text. Below is the code snippet in which I am passing arguments to pisaDocument -
result = CStringIO.StringIO()
encoded_html = CStringIO.StringIO(html.encode("UTF-8"))
pdf = pisa.pisaDocument(encoded_html, result, debug=1, encoding='UTF-8')
if not pdf.err:
	if int(embed) == 1:
		return HttpResponse(result.getvalue(), content_type='application/pdf')
	response = HttpResponse(result.getvalue(), content_type='application/octet-stream', status=200)

	response['Content-Disposition'] = "attachment; filename=PDF Summary-"+str(model_obj.field_id).zfill(5)+".pdf"
	return response

I don't understand where I am doing wrong. Please advise

Can anyone please suggest some fix?

url({{data.font_url}})  look like an internal url, so the generated html there have http://domain part?

Yes is has.

Try upgrading to version 0.2b and try again. If it isn't working there I can try and determine a fix for it.

It seems this is a font issue in reportlab that I can't figure out.

PR #505 Fixed Asian font support, but checking the font used in the example this font has not support to Japanese characters.
We checked with other fonts that has support Japanese and worked.


canAuthenticate return false everytime

Hello.
i am trying to implement biometric for my application.
i am always getting false in canAuthenticate.
My Device is Google Pixel 1 - Android Version 10

if you are on the emulator, you will have to enroll into biometrics.
You can try calling requestBioAuth('title', 'msg') directly. The error thrown will have a more descriptive reason.

The library currently has device credentials as fallback. The reason was if a user knows the pin, they can change the biometric entry from device settings anyway.
But I will check if it's possible only accept biometrics.
Thanks 🙌


AMCBLDC: Inspect suspect regression in simulation

While working on AMCFOC Testing I tried to run a motor control simulation, using the latest devel branch.
To my surprise, the simulated pmsm could not spin because there was no commutation between phases:

We can see that 3-phase currents and voltages remain somewhat constant, while they actually should have this kind of waveform:
Closed loop current control:

Open loop voltage control:

So I checked the AMCBLDC project, to verify if upstream everything was working fine.
Most specifically I used the testing model https://github.com/robotology/icub-firmware-models/blob/devel/boards/amcbldc/tests/control/control_pmsm.slx , and I noticed the same behaviour happening starting from the PR regarding D-axis alignment, even though the physical motor spins with no problem.
I can make some tests to see which changes in this PR affect the simulation.
cc @Nicogene @pattacini @sgiraz

When I said that I used the PMSM model for a test lately, actually I only oversaw the current response, neglecting the speed. Therefore, this can explain why I didn't realize the problem[^1].
Changing the alignment types can be significant for the motor, indeed.
[^1]: Full tests are always helpful 😃

We need to change this, most likely:

You might be right @pattacini , because if I switch back to Q-Axis alignment everything works.

I'm doing some tests for validation.

We need to change this, most likely:

Yep, that was it:

Thanks for the tip @pattacini !

Fixed via:

#77

It was fast 😆
Great debugging indeed 🚀


make subprocess generate viztmp file

Currently, subprocess will not generate a viztmp file. So it's possible that the result.json misses some process data of subprocess.

Codecov Report
All modified and coverable lines are covered by tests :white_check_mark:

Comparison is base (68b7784) 100.00% compared to head (e5c8a20) 98.84%.

:exclamation: Your organization needs to install the Codecov GitHub app to enable full functionality.
Additional details and impacted files
@@             Coverage Diff             @@
##            master     #389      +/-   ##
===========================================
- Coverage   100.00%   98.84%   -1.16%
===========================================
  Files           21       21
  Lines         2249     2250       +1
===========================================
- Hits          2249     2224      -25
- Misses           0       26      +26

:umbrella: View full report in Codecov by Sentry.
:loudspeaker: Have feedback on the report? Share it here.


Add Streaming

Add a curated list of awesome streaming (stream processing) frameworks, applications, readings and other resources

Thanks for the suggestion. Would you mind reading the contributing guidelines and the awesome manifest :)

Thanks, I've added a contributing guide to the repo.

In the top description, I would linkify "stream processing" to an article like maybe https://en.wikipedia.org/wiki/Stream_processing.

Added.

Great! Thanks!


add the SetParameters method

This should address the issues in https://github.com/guregu/kami/issues/26

Thanks, LGTM. I will put this in. I doubt anyone will use this outside of testing, but I might want to add a warning about it not being concurrency safe later. We could also change the implementation to store one value per key instead of storing a map, but that'd just cause more allocations so I'll probably leave it a map.


Fix hang during fork on Python 3.

On Python 3, the Python interpreter calls PyEval_ReInitThreads in the
child process during a call to os.fork. As a fork only copies the
current thread (typically a handler), the Python runtime is thus free to
garbage collect objects from other threads including the _Server
object. This causes a call to _stop which hangs the incomplete child
process.
To prevent this, only try and stop _Server if the current PID matches
the PID that created the Server object. To avoid errors, the forked
thread should only call async-signal-safe functions before making a call
to one of the exec functions.
Fixes: GH-17093

@dcoles, thanks for the PR. Can you please add the reason why this is not an issue in Python 2.7? Does the garbage collector kicks in later?

@srini100 Python 3.4 introduced python/cpython@8408cea0cdc0ccd5900acd99a9a51dd9161ae319 which causes Python to destroy all threads except the current one during PyEval_ReInitThreads (https://github.com/python/cpython/blob/3.6/Python/ceval.c#L330) which is called by PyOS_AfterFork in the new child.
From the Python 3.4 release notes:

Stale thread states are now cleared after fork(). This may cause some system resources to be released that previously were incorrectly kept perpetually alive (for example, database connections kept in thread-local storage). (bpo-17094.)

Objective-C binary sizes
*****************STATIC******************
  New size                      Old size
 2,020,224      Total (=)      2,020,224

 No significant differences in binary sizes

***************FRAMEWORKS****************
  New size                      Old size
11,154,228      Total (<)     11,154,230

 No significant differences in binary sizes

Thanks very much for the detailed analysis, reproduction steps, and this PR. I was able to replicate similar behavior on Python 3.5.3 as well. It appears that obtaining a lock in a __del__ method (as we are doing here in the server's destructor via the call to _stop()) is a bad idea for a multi-threaded application: it's easy to recreate this behavior without gRPC involved, simply by creating two threads, one which allocates an object with a __del__ method that grabs a lock, and forking from the second thread. The child process will initiate cleanup of the other thread's state and invoke the __del__ method of the (now-deceased) thread's instance object, which can hang and never give the forked process a chance to exec. The fix here is valid, but I'm worried about our other deallocation methods and I would like to pursue addressing the root cause directly first.
My initial impression is that we need to revisit how gRPC Python shuts down servers and, more generally, how we rely on garbage collection in our Python and Cython layers. We have just seen a related issue where a server is not completely shutting down because of how we rely on GC to finish the shutdown process, and this being unreliable in terms of when/if it occurs. I think the full solution here has two parts: (a) remove, as much as possible, all heavy-weight actions from our destructors, including obtaining locks, and (b) modify the existing server.stop() method completely handle server shutdown, instead of partially off-loading some work to methods that must later triggered by the garbage collector. (a) alone would solve issue #17288, but by itself would would exacerbate problems like #17258.
We will work on getting this solution put together. I would like to avoid checking pids in every deallocator, but if we would otherwise break users who are currently depending on our shut-down-via-deallocation behavior, it may be tricky to find an alternative.

Closing this PR since this should now be fixed by #17444.


Upgrade simplex plugin to 0.0.2

This upgrade switches the code to use the production servers rather than
the sandbox.

@teneighty Does this fix the error we were seeing?

Yup. This fixes it.


RandLaNet results not close to what is claimed using provided parameters

The results I got after training RandLaNet were nowhere near the results claimed (using the parameters provided).  Looking at the competition board, I see others are able to achieve similar results to the claims.  Anyone able to provide a parameter set that could put me in that ballpark?

I have the same issue. I used the code of this repo but only got a max mIoU of 48.02, which is far from the reported result (58.64 in Table 3).
@QingyongHu Do you use some other settings, such as pre-trained weight, or hyperparameters different from those in tool.py?

I have the same issue. I used the code of this repo but only got a max mIoU of 48.02, which is far from the reported result (58.64 in Table 3).
@QingyongHu Do you use some other settings, such as pre-trained weight, or hyperparameters different from those in tool.py?

I encountered the same issue, how did you solve it?


Add implicit_call_tearoffs to core rules

The lint prepares for a language change.
Apparently I had mentioned this in a comment instead of filing an issue...
https://github.com/dart-lang/lints/issues/92#issuecomment-1331162922

Approved for core.


Apply the new "Quick Access" icon on customized W10 v1809, with W11 icons.

What's the Problem?
With applied W11 icons on a W10 v1809, a registry modification had to be done to make the new Quick Access icon assignment in the classic Windows "File Explorer".
"Files v2" displays all W11 new icons correctly (located in C:\Windows\System32 in this version, instead of C:\Windows\SystemResources as from 1903) except from the Quick Access one, exactly like in the classic File Explorer before the registry modification.

Solution/Idea
Could an equivalent registry command file for this assignment be created ?

New Quick Access icon assignmment on Classic "File Explorer" :
("to fa icon.reg" file)
Windows Registry Editor Version 5.00
[HKEY_CLASSES_ROOT\CLSID{679f85cb-0220-4080-b29b-5540cc05aab6}\DefaultIcon]
@=hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,74,00,25,
00,5c,00,73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,69,00,6d,00,
61,00,67,00,65,00,72,00,65,00,73,00,2e,00,64,00,6c,00,6c,00,2c,00,2d,00,31,
00,30,00,32,00,34,00,00,00
[HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Classes\CLSID{679f85cb-0220-4080-b29b-5540cc05aab6}\DefaultIcon]
@=hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,74,00,25,
00,5c,00,73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,69,00,6d,00,
61,00,67,00,65,00,72,00,65,00,73,00,2e,00,64,00,6c,00,6c,00,2c,00,2d,00,31,
00,30,00,32,00,34,00,00,00

(reverse "default.reg"file)
Windows Registry Editor Version 5.00
[HKEY_CLASSES_ROOT\CLSID{679f85cb-0220-4080-b29b-5540cc05aab6}\DefaultIcon]
@=hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,74,00,25,
00,5c,00,73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,73,00,68,00,
65,00,6c,00,6c,00,33,00,32,00,2e,00,64,00,6c,00,6c,00,2c,00,2d,00,35,00,31,
00,33,00,38,00,30,00,00,00
[HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Classes\CLSID{679f85cb-0220-4080-b29b-5540cc05aab6}\DefaultIcon]
@=hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,74,00,25,
00,5c,00,73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,73,00,68,00,
65,00,6c,00,6c,00,33,00,32,00,2e,00,64,00,6c,00,6c,00,2c,00,2d,00,35,00,31,
00,33,00,38,00,30,00,00,00

Alternatives
Maybe including the "shell32.dll.mun" file from a 1903 (or higher) version, in the "SystemResources" folder, would be enough to fix the assignment. - (?)

Files Version
v<IP_ADDRESS>

Windows Version
Windows 10 LTSC 1809

Additional comment
"Registry edition file for the Quick Access icon" from :
Quick Access Icon Changer which is part of the
Windows 11 Icons Theme by niivu on DeviantArt.

Files uses whatever icon is present on the system, we recommend updating to Windows 11 in order for Files to use the new icons.

Thank you for answering @yaichenbaum, and for this great app you are providing.
All Windows 11 icons appear with great succes on my Windows 10, as I explained.
I cannot switch to 11 for the time being, and as long as it works nicely on my system, I'm very happy with it.
Just ONLY the Quick Access icon needs switching, and I guessed you could have helped me just by indicating the registory key that displays it (like the classic example I joined).
Thank you for considering,
and for the great work you are doing.

@TizianoMad thanks! We try to stay away from modifying the registry as much as possible. The one exception we made was for setting Files as the default file manager, but changing icons is a bit more than we plan to do.

No worries, I will try to tweak this with the help of the icon theme creator.
It is funny you mentionned your Default explorer file, I just posted another request concerning this subject !
So see you later, and thanks again for your feedbacks.


Typeahead library causes warnings

Steps to reproduce:

Run npm run build
Expected results: no warnings in output
Actual Results: The following warnings appear:

ERROR in ./app/js/utils/typeahead.js
/home/rpokorny/Documents/center-ui/app/js/utils/typeahead.js
84:25  error  Expected a conditional expression and instead saw an assignment  no-cond-assign
313:21  error  Expected a conditional expression and instead saw an assignment  no-cond-assign
339:20  error  Expected a conditional expression and instead saw an assignment  no-cond-assign
360:20  error  Expected a conditional expression and instead saw an assignment  no-cond-assign
434:21  error  Expected a conditional expression and instead saw an assignment  no-cond-assign
994:21  error  Expected a conditional expression and instead saw an assignment  no-cond-assign
1175:21  error  Expected a conditional expression and instead saw an assignment  no-cond-assign
1181:21  error  Expected a conditional expression and instead saw an assignment  no-cond-assign
1183:28  error  Expected a conditional expression and instead saw an assignment  no-cond-assign
1558:25  error  Empty block statement
This was reported to me by a community member.

Check that the .eslintignore is working, It seemed to have been working earlier but perhaps it's not loading the ignore file during tests.

Fixed in https://github.com/ozone-development/ozp-center/pull/677

Passed on Staging.


Is there a Speech SDK for Node.JS?

I've found some reference to browser js code, but is there an official Azure Node.JS SDK, notably for the Speech service?
If not, what are your plans about releasing one?
(note that AWS provides a Node.JS SDK for all their services)

Document Details
⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

ID: efae7ff6-5557-221f-7539-5d2d1883127d
Version Independent ID: 4b868e15-0248-635c-aa2f-d591bbc77d65
Content: About the Cognitive Services Speech SDK - Microsoft Cognitive Services
Content Source: articles/cognitive-services/Speech-Service/speech-sdk.md
Service: cognitive-services
GitHub Login: @v-jerkin
Microsoft Alias: v-jerkin

@ea167 Thanks for your question. Can you please share the url, if there is a particular Azure doc you have been following?

Hello Karishma,
Sure, here are the relevant URLS:
https://docs.microsoft.com/en-us/azure/cognitive-services/speech-service/speech-sdk#
(no mention of Node.JS)
https://www.npmjs.com/package/microsoft-speech-browser-sdk
Package that targets the browser and not the server-side, plus not in sync with latest APIs
described here https://docs.microsoft.com/en-us/azure/cognitive-services/speech/API-reference-rest/websocketprotocol
https://azure.microsoft.com/en-us/resources/samples/speechtotext-websockets-javascript/
Some code, but far from an SDK-level
https://docs.microsoft.com/en-us/javascript/api/overview/azure/cognitive-services?view=azure-node-latest
Some modules, but no Speech API

@ea167 Thanks for sharing the documents. I have updated the issue with doc details.
Thanks for the feedback! We are currently investigating and will update you shortly.

@ea167 Thanks for the feedback! I have assigned the issue to the content author to investigate further and update the document as appropriate.
@v-jerkin Hi, can you please check this document issue and update the document as necessary? Thanks a lot!

Any updates about NodeJS?

There's now a JavaScript SDK for the Speech service. It's for use in the browser; but according to:
https://docs.microsoft.com/javascript/api/overview/azure/speech-service
An NPM package is coming soon.
I've asked the Speech developers for further comment.

I hope it will come with TypeScript typings. That would be awesome.

@v-jerkin Hi, any update?

I haven't heard anything about Node.js support yet, but the Speech team has been releasing monthly updates since May. Keep an eye on the Release Notes which I'm sure will announce Node.js support when it's released.
@YutongTie-MSFT Please note @erhopf is taking over the Speech service documentation going forward; this should probably be assigned to him.

@v-jerkin Sure.

@WSturman Thanks.
@ea167 We will now proceed to close this thread. If there are further questions regarding this matter, please respond here and @YutongTie-MSFT and we will gladly continue the discussion.

https://www.npmjs.com/package/microsoft-cognitiveservices-speech-sdk is available now
Cheers guys!


[Project-101] update version

@araton4ik Please sign the Contributor License Agreement!
Click here to manually synchronize the status of this Pull Request.
See the FAQ for frequently asked questions.


Ability to omit mavenBom version if it's provided elsewhere

I want to pull in library bar's BOM, and also pull in library bar.
Today I have to do something awkward like
dependencyRecommendations {
    map recommendations: ['com.foo:bar-lib': '0.47.3']
    mavenBom module: 'com.foo:bar-bom:0.47.3' // the version is now described twice
}

Would prefer to do something like
dependencyRecommendations {
    map recommendations: ['com.foo:*': '0.47.3']
    mavenBom module: 'com.foo:bar-bom' // can omit version
}

This works for me. You just need to use the map notation rather than the string notation:
dependencyRecommendations {
  map recommendations: ['com.foo:bar-lib': '0.47.3']
  mavenBom module: [group: 'com.foo', name: 'bar-lib']
}


Add testing documentation

Add documentation to markdown file that explains the flow of testing. The use case is that contributors may come along and want to see what tests are done and where they can help, and an overview of the way tests are implemented would be a useful place to start.

duplicate of issue #22. whoops :2nd_place_medal:
Closing.


Added U1, U2 and U3 deprecation warnings into Circuit Library

Summary
Added a deprecation warning in the circuit library pages of U1Gate, U2Gate and U3Gate.
Details and comments
Along with the warning, I also included some equivalences, most of which are taken from the Summary of Quantum Operators tutorial from Qiskit-tutorials with some corrections.

Pull Request Test Coverage Report for Build<PHONE_NUMBER>

0 of 0   changed or added relevant lines in 0 files are covered.
No unchanged relevant lines lost coverage.
Overall coverage increased (+0.003%) to 83.991%

Totals

Change from base Build<PHONE_NUMBER>:
0.003%

Covered Lines:
55885

Relevant Lines:
66537

💛  - Coveralls

I believe that problem is fixed in https://github.com/Qiskit/qiskit-terra/pull/8392 and is not due to your changes 🙂

While I was moving the formulas to Examples for the U2Gate I noticed that all the examples were just next to the other in the same line. There wasn't even a space between any of them. I cleaned that up.


DotSpatial map not inside DotSpatial.Controls

I'm trying to install DotSpatial using c# WinForm, to take a look to the Map control. I've installed DotSpatial.Controls using nuget from VS. Instalation succesfull. Added inside my toolBar the DotSpatial.Control.dll wich is inside ../bin/debug folder, but, just 3 controls are added: AppManager, SpatialDockManager, SpatialHeaderControl.
Why Map control is not there?
Thanks in advance.
DotSpatial version: 1.9

This sounds like you expect Map to show up in the Toolbox. Don't know why, but it seems nobody exposed it, so it won't show up there. But you can still create a Map object by code.

Before I read your comment I  First Added inside my toolBar the DotSpatial.Control.dll wich is inside myProjectName/packages/.. then just 3 controls are added: AppManager, SpatialDockManager, SpatialHeaderControl.
When I Added  DotSpatial.Control.dll inside ../bin/debug folder All control appear. Thank you.


Email setup

Hey there,
Is there a nice way to set up an email server alongside mongo etc so that I can send emails? Is this already built-in to mup? If not, could anyone advise me on what I need to do so my server will send me things?
Cheers,
Carl

See http://docs.meteor.com/#/full/email
This will allow you to send mail via SMTP.
Then use any SMTP provider like MailGun etc...

Ah, I must have been unclear - I meant setting up an SMTP server on a server when setting up with mup init. Mongo and Node etc are installed by the tool - why not postfix etc?

I believe it is out of scope for mup.  Otherwise you could then ask why not nginx or haproxy or something else.  I do not think mup is meant as a devops management system but rather a simple way to deploy your application.  A meteor app is reliant on mongo and node but not postfix.  If you really want it I imagine you could submit a pr.

I would say it is at least partially reliant on email - quite a large proportion of webapps use email in some form or another, and to get a completely deployed, production app using mup, email is definitely a part of that. I do see your point in regards to the slippery slope problem - however this is a feature that meteor natively supports that mup does not handle.
Given enough time (eg a few months, depending on the amount of Actual Paying Work I get) I would happily write a PR for this. I was mainly curious if it had been discussed before :)

I've actually just browsed through the source and noticed they're just shell scripts - if I have the time in the next few days I'll write a PR, didn't realise how little was involved to add this.

Also re: nginx: https://github.com/arunoda/meteor-up/pull/275 :)

Agreed.  I have had similar thoughts RE: nginx in mup but felt better to manage it with something like Puppet or Chef though.

Check out
https://github.com/arunoda/meteor-up/tree/mupx#
Probably a better solution if you go with docker.
Specifically see the nginx implementation now.


CUDA error: no kernel image is available for execution on the device

Hello，I run the following type
python exp_runner.py --mode train --conf ./confs/womask.conf --case <case_name>

and get the following error:

Could you help me to solve this problem?

Same issue

Same issue

You can install special pytorch with cuda from https://download.pytorch.org/whl/torch_stable.html if your pytorch isn't the one.


Error viewing container volumes when a same host path is mounted at different places in a container using .NET Aspire 9 RC1

Is there an existing issue for this?

[x] I have searched the existing issues

Describe the bug
Using .NET Aspire 9 RC1, if the container has two or more bind mounts where the host path is the same, trying to open the container resource details in the dashboard will fail with the error "An unhandled error has occurred. [Reload]."

There are cases where the same file or directory could be mounted in different places. It is common to mount a certificate authority bundle to these container paths:
/etc/ssl/certs/ca-certificates.crt                // Debian/Ubuntu/Gentoo etc.
/etc/pki/tls/certs/ca-bundle.crt                  // Fedora/RHEL 6
/etc/ssl/ca-bundle.pem                            // OpenSUSE
/etc/pki/tls/cacert.pem                           // OpenELEC
/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem // CentOS/RHEL 7
/etc/ssl/cert.pem                                 // Alpine Linux

This is valid in Docker Desktop:

Expected Behavior
No response
Steps To Reproduce
var builder = DistributedApplication.CreateBuilder(args);

builder.AddContainer("myapp", "mcr.microsoft.com/dotnet/samples", "aspnetapp")
    .WithBindMount("file.txt", "/foo/file.txt")
    .WithBindMount("file.txt", "/bar/file.txt");

builder.Build().Run();

Exceptions (if any)
No response
.NET Version info
No response
Anything else?
Nothing else, much love.

Thanks very much for the great bug report @asimmon.
This bug reproduces in release/9.0-rc1 but not in release/9.0. It was fixed in #6241.
FYI @JamesNK


Is it possible to fix this bubble?

Every time I open up a new solution, I get this bubble and I'm afraid to remove the files. I would like to make TFVC not even look for those kinds of files.

Can you add them to .tfignore?


fix reinstallation of packages when a token is configured

This fixes #384
But we need to figure out how to properly handle the token stuff ...

closing in favor of #401 which contains the changes from this one.


added link to github.com/Envoy-VC/awesome-badges in code comment

Added a comment in the code with a link to https://github.com/Envoy-VC/awesome-badges.
The reason is that it took me a long time to find additional examples of these badges. As your repo is all about saving time for devs, I thought it might be a good inclusion.

Great suggestion. Important to note that I have a link to "Image Shields," which are the badges used in the readme.
Here's the link for reference: https://shields.io/
I consider these as the OG badges! 😄
And they link to this repo with even more badges: https://github.com/badges/awesome-badges
Very soon, I will add a more obvious link to all the badges.

Many thanks for your kind answer and great to read that you'll add a more obvious link in the near future!
Just to clarify: I did follow the link to https://shields.io/ but it gives you so much information and options that as a first time user, you can't see the forest for the trees. The same applies to https://github.com/badges/awesome-badges that ends up redirecting you to other websites.
In my opinion - but feel free to ignore - the first thing a dev needs is a simple list of ready made, popular, badges and links to include them. It would be fantastic if you can include this. All the additional options can also be given, just in case devs are interested.
Many thanks! I'll now close this merge request :)


Locally scoped class names

https://github.com/css-modules/css-modules has locally scoped class names by default. It would be nice if elm-stylesheets has this possibility too.
(Great work btw!)

Totally agree! :+1:

Nice work! Going to try this soon!

There's a lot more on the mvp branch - see the PR :)


Support Repetition Field Values

Ensure that we can identify a repetition field within an X12 segment when the segment is translated to X12.
Example: EQ*98^34^44^81^A0^A3~

This change has been added to the feature branch for  #13


Deploy.load() Not Reloading App Immediately

Hi,
I'm working on getting the Deploy functionality working in my Ionic 2 -ts app. It's mostly there, but having a problem - the deploy.done() doesn't seem to be working for me. I'm not seeing the updated app until I manually close the app and reopen it.
I can reproduce this by deploying a new build to the production channel, then running 'ionic run ios -lc' with my device connected.
Any help would be appreciated. :)
Here's my 'ionic info':
Cordova CLI: 6.1.1
Gulp version:  CLI version 3.9.0
Gulp local:   Local version 3.9.1
Ionic Framework Version: 2.0.0-beta.9
Ionic CLI Version: 2.0.0
Ionic App Lib Version: 2.0.0
ios-deploy version: 1.8.6
ios-sim version: 5.0.8
OS: Mac OS X El Capitan
Node Version: v5.10.1
Xcode version: Xcode 7.3 Build version 7D175
Here's the relevant snippet from my app.ts:
platform.ready().then(() => {
// Check for updates then download and apply.
this.deploy.check().then((hasUpdate) => {
if (hasUpdate) {
deploy.download().then(() => {
deploy.extract().then(() => {
deploy.load();
}, (extractError) => {
console.log('Error extracting update: ' + extractError);
});
}, (updateError) => {
console.log('Error downloading update: ' + updateError);
});
}
}).then(() => {
deploy.getMetadata().then((metadata) => {
console.log(metadata.release);
}, (getMetadataErr) => {
console.log('getMetadataErr: ' + getMetadataErr);
});
}, (err) => {
console.log('Error checking for updates: ' + err);
});
});
Thanks,
Amy

I can conform this issue.

Using the new version of ionic-plugin-deploy, I presume? 0.6.0 or 0.6.1?

Using 0.6.0, happenings consistentst and I don't think the 0.6.1 fix is related.
It also loaded the originally packaged app on one occasion, after having updated some time before. A restart loaded the update back in. I can't reproduce that though.

@Fuiste, thoughts? Is the plugin's load() function broken?

Correct - I'm using 0.6.0.

@dwieeb I'll look into it, everything seems kosher on my testing app, but I'll try a fresh one as soon as I'm able.

@dwieeb and @amymarsh4work I've identified the problem, it was stemming from reloading the webview on redirect, specifically in iOS.
I'm cutting a new release now, going to move this issue to the deploy plugin and comment there when it's fixed.

This issue was moved to driftyco/ionic-plugin-deploy#86


fix: del Button.tsx useless comments

删除无用注释

Codecov Report
Base: 100.00% // Head: 100.00% // No change to project coverage :thumbsup:

Coverage data is based on head (ccae7be) compared to base (813fa1a).
Patch has no changes to coverable lines.

Additional details and impacted files
@@            Coverage Diff            @@
##            master        #7   +/-   ##
=========================================
  Coverage   100.00%   100.00%
=========================================
  Files            1         1
  Lines            6         6
  Branches         2         2
=========================================
  Hits             6         6

Help us with your feedback. Take ten seconds to tell us how you rate us. Have a feature suggestion? Share it here.

:umbrella: View full report at Codecov.
:loudspeaker: Do you have feedback about the report comment? Let us know in this issue.

test


Error when training on youtubemix

When running CUDA_VISIBLE_DEVICES=1,2,3,4,7 python -m train wandb=null experiment=sashimi-youtubemix dataset=youtubemix, I get the following error:
Traceback (most recent call last):
File "/data/al451/state-spaces/train.py", line 553, in main
train(config)
File "/data/al451/state-spaces/train.py", line 498, in train
trainer.fit(model)
File "/home/al451/.local/lib/python3.8/site-packages/pytorch_lightning/trainer/trainer.py", line 740, in fit
self._call_and_handle_interrupt(
File "/home/al451/.local/lib/python3.8/site-packages/pytorch_lightning/trainer/trainer.py", line 685, in _call_and_handle_interrupt
return trainer_fn(*args, **kwargs)
File "/home/al451/.local/lib/python3.8/site-packages/pytorch_lightning/trainer/trainer.py", line 777, in _fit_impl
self._run(model, ckpt_path=ckpt_path)
File "/home/al451/.local/lib/python3.8/site-packages/pytorch_lightning/trainer/trainer.py", line 1199, in _run
self._dispatch()
File "/home/al451/.local/lib/python3.8/site-packages/pytorch_lightning/trainer/trainer.py", line 1279, in _dispatch
self.training_type_plugin.start_training(self)
File "/home/al451/.local/lib/python3.8/site-packages/pytorch_lightning/plugins/training_type/training_type_plugin.py", line 202, in start_training
self._results = trainer.run_stage()
File "/home/al451/.local/lib/python3.8/site-packages/pytorch_lightning/trainer/trainer.py", line 1289, in run_stage
return self._run_train()
File "/home/al451/.local/lib/python3.8/site-packages/pytorch_lightning/trainer/trainer.py", line 1311, in _run_train
self._run_sanity_check(self.lightning_module)
File "/home/al451/.local/lib/python3.8/site-packages/pytorch_lightning/trainer/trainer.py", line 1371, in _run_sanity_check
self._evaluation_loop._reload_evaluation_dataloaders()
File "/home/al451/.local/lib/python3.8/site-packages/pytorch_lightning/loops/dataloader/evaluation_loop.py", line 170, in _reload_evaluation_dataloaders
self.trainer.reset_val_dataloader()
File "/home/al451/.local/lib/python3.8/site-packages/pytorch_lightning/trainer/data_loading.py", line 551, in reset_val_dataloader
self.num_val_batches, self.val_dataloaders = self._reset_eval_dataloader(
File "/home/al451/.local/lib/python3.8/site-packages/pytorch_lightning/trainer/data_loading.py", line 508, in _reset_eval_dataloader
if has_len_all_ranks(dataloader, self.training_type_plugin, module)
File "/home/al451/.local/lib/python3.8/site-packages/pytorch_lightning/utilities/data.py", line 118, in has_len_all_ranks
raise MisconfigurationException(
pytorch_lightning.utilities.exceptions.MisconfigurationException: Total length of Dataloader across ranks is zero. Please make sure that it returns at least 1 batch.
Set the environment variable HYDRA_FULL_ERROR=1 for a complete stack trace.

Hi, can you confirm if single GPU training works for you?


Bugfix/Downgrade rxjs 6

@bryphe seems I was too hasty in upgrading rxjs its been a fairly big release and they've seem to have worked quite hard to minimise the impact on users but basically the oni-types package has to have matching type definitions as oni-core so package versions seem to need to be in sync
I actually tried upgrading our rxjs in core to 6 as there's a compatibility plugin as well as a tslint code mod all of which ran well with only a few remaining warnings the main issue though is that redux-observable isn't ready for it yet an are planning a 1.0.0 release.
Think there might need to be a PR in core when every thing is settled to migrate this and oni-core (down the line)
I've actually tested this change by installing my branch of this package locally and building it seems the primary issue was the devDependency rather than dependency listing apologies for the up and down

Cool, thanks @Akin909 . I'm thinking it might make sense to remove the rxjs dependency on this project - it's only used to convert the Event to an Observable, which could be handled by a helper method in oni-core. That way, we only care about rxjs in oni-core.

I'll bring this in now! 👍


Unhandled exception when Swisscom Internet Box is not responsive

From time to time, Swisscom Internet Box fails to respond and this causes an exception, which is currently not handled by the code:
Traceback (most recent call last):
File "/srv/homeassistant/lib/python3.7/site-packages/homeassistant/components/device_tracker/setup.py", line 164, in async_device_tracker_scan
found_devices = await scanner.async_scan_devices()
File "/usr/local/lib/python3.7/concurrent/futures/thread.py", line 57, in run
result = self.fn(*self.args, **self.kwargs)
File "/srv/homeassistant/lib/python3.7/site-packages/homeassistant/components/swisscom/device_tracker.py", line 46, in scan_devices
self._update_info()
File "/srv/homeassistant/lib/python3.7/site-packages/homeassistant/components/swisscom/device_tracker.py", line 67, in _update_info
data = self.get_swisscom_data()
File "/srv/homeassistant/lib/python3.7/site-packages/homeassistant/components/swisscom/device_tracker.py", line 83, in get_swisscom_data
request = requests.post(url, headers=headers, data=data, timeout=10)
File "/srv/homeassistant/lib/python3.7/site-packages/requests/api.py", line 116, in post
return request('post', url, data=data, json=json, **kwargs)
File "/srv/homeassistant/lib/python3.7/site-packages/requests/api.py", line 60, in request
return session.request(method=method, url=url, **kwargs)
File "/srv/homeassistant/lib/python3.7/site-packages/requests/sessions.py", line 533, in request
resp = self.send(prep, **send_kwargs)
File "/srv/homeassistant/lib/python3.7/site-packages/requests/sessions.py", line 686, in send
r.content
File "/srv/homeassistant/lib/python3.7/site-packages/requests/models.py", line 828, in content
self._content = b''.join(self.iter_content(CONTENT_CHUNK_SIZE)) or b''
File "/srv/homeassistant/lib/python3.7/site-packages/requests/models.py", line 757, in generate
raise ConnectionError(e)
requests.exceptions.ConnectionError: HTTPConnectionPool(host='<IP_ADDRESS>', port=80): Read timed out.
I've just added a try-except around the post.
Breaking Change:

Description:
Related issue (if applicable): fixes #
Pull request with documentation for home-assistant.io (if applicable): home-assistant/home-assistant.io#<home-assistant.io PR number goes here>
Example entry for configuration.yaml (if applicable):

Checklist:

[ ] The code change is tested and works locally.
[ ] Local tests pass with tox. Your PR cannot be merged unless tests pass
[ ] There is no commented out code in this PR.
[ ] I have followed the development checklist

If user exposed functionality or configuration variables are added/changed:

[ ] Documentation added/updated in home-assistant.io

If the code communicates with devices, web services, or third-party tools:

[ ] The manifest file has all fields filled out correctly. Update and include derived files by running python3 -m script.hassfest.
[ ] New or updated dependencies have been added to requirements_all.txt by running python3 -m script.gen_requirements_all.
[ ] Untested files have been added to .coveragerc.

If the code does not interact with devices:

[ ] Tests have been added to verify that the new code works.

Hi @LeoCal,
It seems you haven't yet signed a CLA. Please do so here.
Once you do that we will be able to review and accept this pull request.
Thanks!


Fix galaxy-server/Dockerfile to be supported on RHEL8 with podman

I realized on RHEL8 or CENTOS 8, some python packages can't be installed with use_2to3 removed from python3-setuptools>v58.
What's funny, it seems the Dockerfile use python3-setuptools version 53?!?!?!?!?!?!
I added extra pip3 to install missed packages.

The new 24.1 image contains a lot of changes and reflects the latest developments in Galaxy. I would like to close this PR, but please feel free to reopen and rebase against the latest version.
Please give it a try:
docker run -p 8080:80 -p 8021:21 -p 4002:4002 --privileged=true -e "GALAXY_DESTINATIONS_DEFAULT=slurm_cluster_docker"   -v /tmp/galaxy-data/:/export/ quay.io/bgruening/galaxy:24.1

... or any other combination. The readme has been updated. Please add any useful tip to it.
For a list of changes, see the Changelog.


Update Spin crate version to 2.0

Re: e2e failure -- hit by crates.io timeout.  HEAD commit on v2.0 previous to this version bump is green: https://github.com/fermyon/spin/actions/runs/6749590912


Feedback from testing

I'm writing these down as I find them:
When looking at Extend scraper functionality in input UI, I have no idea what is this and how to use it. At the very least, we could add a link to https://apify.com/vdrmota/twitter-scraper#extend-output-function in that section, and mention the functions are to be writter in JavaScript/Node.js (also mention this in README, it's quite important thing to mention). "Custom data" ... not sure what is this, which format, is it JSON? pls add to help
Login information
The readme info for "Login Cookies" links to https://apify.com/help-dev/en/articles/1444249-log-in-to-website-by-transferring-cookies-from-web-browser, instead of help.apify.com. BTW all the info about "Input Configuration" should be in help texts to make it easier to find.
Let's be consistent about "URLs". It should be upper-case, i.e. URL not url. Also "twitter" => "Twitter", but "Tweet" => "tweet"
Add user information feature - is there any reason why not to have this checked all the time? If so, pls mention it
Supported urls types => Supported Twitter URL types
Max. Tweets => Max Tweets, the help should say "The maximum number of tweets the actor will extract". BTW is there some upper limit? Can I enter 1M? If not, how much is the maximum?
ReadMe => README
Stealth option just says "Apply stealth to the browser", it would deserve some explanation and a link to more info. Shall I check it, or not? I don't know...
Login Cookies => Login cookies (let's be consistent about letter cases)

most of those are done. the only issue left is the known one on the input UI that makes the prefill/default values disappear (hopefully will be fixed by the new input). Extend scraper / output are documented and prefilled, but they might not show to the user.
also posted about the issue with latest being shown instead o version-1 on the platform

Awesome, thanks @pocesar ! Hopefully guys will fix the other issues soon too


android app: GPS, Compass and Audio in background

The current Android app behaves exactly like the web app, which means that when the phone is locked, it does not receive location updates. The goal is to enable background functionality so that you can put the phone in your pocket and the app will continue to work, similar to how Google Maps operates.

mm.... cannot a simple way to update the compass and location and update the sounds accordingly while the phone is locked... There are few plugins for background gps but could not find any for the compass and spatial audio...

Geolocation is the most important one, and I expect spatial audio would not be a separate plugin from background audio more generally.
FWIW, if we do want to have it work well in a pocket, we'd have to make the orientation detection a bit more sophisticated. I believe the original app detected when the user was moving, and if so assumed the user was facing the direction they were traveling. Right now, we rely solely on the device's physical orientation, but "pointing downward" will rarely be the intended direction

apparently the iPhone users use the iPod so the orientation comes from them, rather than from the phone. That is what gives the user a real immersive experience feeling as if the sounds are coming from the real beacons.

apparently the iPhone users use the iPod so the orientation comes from them, rather than from the phone. That is what gives the user a real immersive experience feeling as if the sounds are coming from the real beacons

Yeah, you're talking about the head tracking built into some headphones like EarPods. I have no idea if that sensor data is exposed to a web app.

yea... it looks like it is still under discussion... :thinking:  https://github.com/w3c/orientation-sensor/issues/68


Update docs for release of new plugins

We should track what parts of the user manual, guides and other documentation should be updated to reflect the new plugins, so that as much of the documentation is up to date as possible when the plugins are ready.

The main publishing chapter of the user manual
Native chapters of the user manual

Building native software
Software model concepts
Rule-based model configuration
Implementing model rules in a plugin
Extending the software model

Maybe the dependency management chapters of the user manual? These are rather JVM-centric right now.
Building C executables guide
Building C++ executables guide
Building C++ libraries guide

@big-guy Do you have some commits or a pull request to link to? I'm assuming this was closed because something was implemented, but I don't see any reference to that implementation.


detekt-formatting ignores .editorconfig

Expected Behavior

detekt-formatting should respect the same .editorconfig properties that ktlint does. For example, if the .editorconfig for a project specifies disabled_rules=no-wildcard-imports, then a wildcard import should not cause a detekt-formatting error.
Observed Behavior

detekt-formatting does not respect the .editorconfig properties. For instance, if .editorconfig specifies disabled_rules=no-wildcard-imports, and a file has a wildcard import, then you will see a Detekt error for the wildcard import:
formatting - 10min debt
        NoWildcardImports - [] at /some/dir/Foo.kt:8:1

Steps to Reproduce

Add detekt-formatting to your project as instructed in the README
Add disabled_rules=no-wildcard-imports to your editorconfig
Use a wildcard import in one of your Kotlin files
Run detekt on that module
Observe that it reports the wildcard import as an error.

Context

We use ktlint standalone to enforce code style rules. We've used the editorconfig mechanism to disable certain rules, especially if ktlint can't automatically fix them. This blocks us from switching to detekt-formatting unless we can figure out a way for it to obey the editorconfig.
Your Environment

Version of detekt used: 1.19.0
Version of Gradle used (if applicable): 7.4
Operating System and version: macOS Monterey 12.4

For example, if the .editorconfig for a project specifies disabled_rules=no-wildcard-imports, then a wildcard import should not cause a detekt-formatting error.

Sadly, we don't support this, and I don't think we should.
detekt-formatting is just a convenience wrapper around KtLint. The configuration needs to happen inside the Detekt Config file. I don't think we're going to implement a parser for .editorconfig at this stage.

That's fair, but KtLint itself parses the editorconfig. Shouldn't detekt-formatting support everything that KtLint does?

Shouldn't detekt-formatting support everything that KtLint does?

It supports all the Ktlint rules by creating wrapping rules on top of them. We support all the ktlint features. For instance, ktlint has a installGitPreCommitHook which we don't support.
The .editorconfig parsing is one of those feature.

Ok gotcha, makes sense.


[ldd-img_surface] image_id_2

Add image_id_2 as a sibling of image_id in img_surface:Image_Identifiers.
Can use the same description as image_id, or just say something as simple as "Second image_id for missions with two, same use cases".
VICAR keyword is, surprisingly, IMAGE_ID_2.
Background: back when we thought we'd handle EECAM tile reconstruction by supplying the size of the recon via image_id, it was determined that we needed more bits than the 32 in image_id. So the FSW added image_id_2 as an additional 32-bit field. We are no longer doing tile reconstruction in this way, so image_id_2 may or may not be used... but it should be captured in case it is.

Added image_id_2 for forthcoming v <IP_ADDRESS>


v0.10.1

@myleott would you entertain a PR to also package a conda artifact on new tags, too? not sure what the exact process is for publishing to the pytorch conda channel, but I can do some of the legwork there.

@erip yeah that sounds good.
I'm actually reworking this a bit, since auto-uploading the wheels seems a bit risky right now. Instead I'm using the upload-artifact action to produce the artifacts and then they can easily be downloaded and uploaded manually (example: https://github.com/fairseq/fairseq/runs/1419699104).
Assuming conda works similarly, it'd be great to have some automated build process to build conda packages in a similar way.


Remove redundant throws from services method signatures

This PR removes redundant throws from service and rpc methods. This also adds basic javadoc to RPC methods.

Thank you for doing that!


🗺 Fog of War

RFC: https://github.com/remix-run/react-router/discussions/11113

https://github.com/remix-run/react-router/pull/11626

https://github.com/remix-run/remix/pull/9600


fix: typo

 Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you all sign our Contributor License Agreement before we can accept your contribution.1 out of 2 committers have signed the CLA.:white_check_mark: caohuilin:x: 高博文高博文 seems not to be a GitHub user. You need a GitHub account to be able to sign the CLA. If you have already a GitHub account, please add the email address used for this commit to your account.You have signed the CLA already but the status is still pending? Let us recheck it.


Error 500 Class name must be a valid object or string

I try to use  as described in "Installation and usage" like this:
use Themsaid\CashierTool\CashierResourceTool;
...
public function fields(Request $request)
    {
        return [
            ID::make()->sortable(),
            ...
            CashierResourceTool::make()->onlyOnDetail(),
        ];
    }

this is freshly installed Nova 2.9.2 in Spark 9.0.0 and controller is standard Nova/User class.

You need to add your Stripe API key on services.stripe.secret and the user model on services.stripe.model keys.
'stripe' => [
    'secret' => env('STRIPE_SECRET'),
    'model' => env('CASHIER_MODEL'),
]

https://github.com/themsaid/nova-cashier-manager/blob/master/src/CashierToolController.php#L39


Would you please upload your data folder?

Hi nrennie!
I want to learn your script but I can't find the "./2022/data" folder，it is not convenient。 Would you please upload it or share it by other ways?My email is<EMAIL_ADDRESS>Hope for your reply!

Hi, if you look at the .gitignore file you can see that I have chosen not to upload the data folder. This is for two reasons:

the data folder is very large (>20GB) and it is not recommended or a good idea to upload a file of this size to github
all of the data that I used is already publicly available with sources cited in captions. I do not duplicate public data sources in general. If there is a particular source you cannot find, I can direct you to it more clearly, but "your script" doesn't tell me which one you can't find.

NB I chose to share my code even though I did not have to, and used my own personal time to do so - calling it "not convenient" is rather rude.


On some folder, Cmd+T always tells me "Project is empty"

As you can see on the screenshot below:

Atom was started with atom --safe <directoryname>.
OS X 10.10.3, Atom 1.0.
Other folders work well.
(moved from atom/atom#7520)

It's probably because that directory is in the .gitignore of its parent directory.
Reproduction:
git clone --depth 1 https://github.com/CocoaPods/Rainforest.git
cd Rainforest
rake bootstrap # you can Ctrl+C as soon as the CocoaPods directory has been cloned
atom --safe CocoaPods

Then if you press Cmd+T you will get the screenshot above.

Have the same problem and yes, I have another git repo above this project that ignores all folders to keep track of some general setting files that are applicable for all projects underneath. So my .gitignore has the line */. Is there a workaround to still be able to use the fuzzy finder?

Same issue here.
Happening for directories that are .gitignored in parent for me as well.

This is happening here also; I would expect the .gitignore which is up a few levels not to be read as the project itself has its own .git folder; is there a more appropriate place to raise this bug to do with the way ignoredNames are dealt with, or is this with the fuzzy-finder project?

^ further to this, it seems fuzzy finder is the only thing which is affected, everything else manages alright. So I think this is the correct place for this bug.

From what I can tell, the issue only seems to be with */ being ignored. If you simply ignore CocoaPods  it works as expected.

^ can confirm.
I have the following structure
/project
|
|-- things
|--|-- thing1
|--|-- thing2
|--|-- .gitignore
|
|-- .gitignore

If I put "things" in /project/.gitignore then fuzzy finder works as expected with thing1/thing2 folders as project base directories.
If I however put in /project/things/.gitignore :
*
!.gitignore

because I want the folder to remain empty in source control, then the fuzzy finder does not work correctly in the same situation.

Okay, #152 now includes a spec for this issue. So, regardless of whether my approach is settled on, if someone else wants a starting point for looking at it...

Here's instructions on how to reproduce this bug https://github.com/chrishiestand/atom-fuzzy-finder-git-bug so we can lose the needs-reproduction label.
I traced the code from fuzzy finder -> atom -> git-utils -> libgit2 and I'm not quite sure where the problem lies. If the repo and workdir information are being passed properly I'd imagine the bug is in libgit2 but I haven't spent the time to narrow it down further.
I don't know anything about scandal, but it would be great to have this bug fixed :-)

/cc @joshaber

It may be of note that Tree View does not share this problem (e.g. it correctly shows the files as not vcs ignored)

@chrishiestand :metal: Thanks for the repo and instructions!


(WIP) (Modules-2709) Reuse power shell tests

Still working on tests

#165 contains this test now

This PR is obsolete. Closing


Bug: Output of harden-runner insight should use commit hash instead

I just testing and implementing harden-runner after starting with the scorecard action. Repo is here: https://github.com/jauderho/psfiles
So if the push is for actions to use commit hashes instead of version tags, the output page of the insights should utilize the commit hash instead.
For example, https://app.stepsecurity.io/github/jauderho/psfiles/actions/runs/1731266664
Recommendation is for
- uses: step-security/harden-runner@v1
  with:
    allowed-endpoints:
      api.github.com:443
      github.com:443

Instead, it really should be (and changing as necessary as the action gets updated)
- uses: step-security/harden-runner@14dc64f30986eaa2ad2dddcec073f5aab18e5a24 # v1
  with:
    allowed-endpoints:
      api.github.com:443
      github.com:443

Similarly, the README.md for this repo should indicate/recommend the use of hashes instead.

Thanks @jauderho for using harden-runner!
Good feedback. I will address it ASAP.
I observed you are setting the allowed-endpoints, but the egress-policy is set to audit. As a result the traffic is not restricted. The default value for egress-policy is block. So you can either remove egress-policy and just keep the allowed-endpoints or set egress-policy to block.
I will address this in the insights page as well and set egress-policy to block explicitly.
I will be happy to fix your workflows for you. Please let me know.

@varunsh-coder , I was leaving it to audit for a bit to see if any additional egress points get caught. I will change these to block in a few days.

@varunsh-coder while you are at it, if you can make the copy block on the insights page be the entire workflow (or at least make than an option), it will make it easier to do a complete cut and replace.

@varunsh-coder while you are at it, if you can make the copy block on the insights page be the entire workflow (or at least make than an option), it will make it easier to do a complete copy and replace.

@jauderho Great idea! I will make it same experience as the home page https://app.stepsecurity.io, where there is an editor and one can just copy and paste it without having to fix indentation etc.
Do let me know if you have more ideas to improve user experience or any other feedback. Thanks a lot!

I do have one nit but it's mostly me being OCD.
If I check the Add step-security/harden-runner action on https://app.stepsecurity.io/, I'd like to see an additionally newline inserted before the next step. It's a little easier to distinguish between the steps that way.

I do have one nit but it's mostly me being OCD.
If I check the Add step-security/harden-runner action on https://app.stepsecurity.io/, I'd like to see an additionally newline inserted before the next step. It's a little easier to distinguish between the steps that way.

Good feedback! I will address it. Please keep the feedback coming!

Also, do the insight links expire after a while? For example, https://app.stepsecurity.io/github/jauderho/psfiles/actions/runs/1731266664

No, they do not expire. Did you want them to expire?

Might be nice to have them expire in a few days (and an option to retain if needed). I’m just wondering about the use case where a private repo might accidentally leak endpoints if this is integrated in the workflow.

Also, the way things are set up means that we have to take two passes, once to audit and once to block.
I’m trying to think of a safe way to do this in one pass. I suppose one could have an action that modifies things after the fact but that would mean that the action needs write access and self modifying code could have unexpected outcomes.
Although, I think your tool appears to be able to have some knowledge of various actions so maybe that can be included as part of the suggested block of yaml. For instance, the CodeQL action is almost always going to be talking to the same set of hosts for everyone so it would make sense to just return github.com etc. as part of the allow list.
Does that make sense?

Might be nice to have them expire in a few days (and an option to retain if needed). I’m just wondering about the use case where a private repo might accidentally leak endpoints if this is integrated in the workflow.

Hi @jauderho harden-runner does not show insights for private repos as of now (I will add this to the readme). I think it would not be right for me to show the insights to public for a private repo. Other services like codecov show the test coverage to public for public repos, but require authentication and check repo access before showing results of private repos. I was thinking of doing the same. thoughts?

Also, the way things are set up means that we have to take two passes, once to audit and once to block.
I’m trying to think of a safe way to do this in one pass. I suppose one could have an action that modifies things after the fact but that would mean that the action needs write access and self modifying code could have unexpected outcomes.
Although, I think your tool appears to be able to have some knowledge of various actions so maybe that can be included as part of the suggested block of yaml. For instance, the CodeQL action is almost always going to be talking to the same set of hosts for everyone so it would make sense to just return github.com etc. as part of the allow list.
Does that make sense?

Yes, it would be ideal if one did not have to change the workflow while going from audit to block mode. In fact some users have asked for a warn-only mode for similar reason. In warn-only mode, one would select the allowed-endpoints in the insights website, and they will get saved in the backend (not in the workflow file). If a new endpoint is called, it will notify in annotations (as a warning). Then the developer can click on the insights link and add that to the allowed list if it should be allowed, or investigate why that outbound call was made. So, one option is for the block mode to also store allowed-endpoints in the backend. But some users have asked for it to be in the workflow yaml file, since it makes it clear what is allowed and what is not.

Might be nice to have them expire in a few days (and an option to retain if needed). I’m just wondering about the use case where a private repo might accidentally leak endpoints if this is integrated in the workflow.

Hi @jauderho harden-runner does not show insights for private repos as of now (I will add this to the readme). I think it would not be right for me to show the insights to public for a private repo. Other services like codecov show the test coverage to public for public repos, but require authentication and check repo access before showing results of private repos. I was thinking of doing the same. thoughts?

Yeah, not allowing for private repos without an explicit opt-in would be good. For example, I now have a GHA template repo which I plan to use to copy to new repos. Not allowing private repos will prevent inadvertent exposure.

@jauderho since you have a repo related to docker images, and you run security tools on those images, I wanted to ask you about this feature I am thinking about - automatic SBOM (software bill of materials)/ provenance generation.
As you know harden-runner monitors the runner and so it knows what dependencies are being downloaded, from where, and what artifact is generated. So, I would like to automatically generate SBOM, and then upload it either along with the docker container, or in the release tab (if there is a release).
This way developers will not need to think about SBOM generation, it will just happen as part of the build.
What do you think about this? Thanks!

It's on my todo list to figure out how to implement cosign and SBOMs for containers. I just figured it out for Go binaries (see bl3auto repo) but have not had cycles to work on this yet. Hopefully in the next few weeks...

@jauderho I have fixed the commit hash issue that you reported. The readme and the insights page have been updated.
For all your other suggestions, I have created separate issues to track them. I have improved the copy-paste experience, but it will take me more time to have the full workflow show up there. I will get it done soon though.
Thanks again for the feedback! I have added a Slack channel link in the readme, in case you want to join. Would love to have more discussions.
I will go ahead and close this issue. Thanks!

I see the fix. However, to match exactly as the other page, there should be a name: field before the uses:, so something like.
- name: Harden Runner
  uses: step-security/harden-runner@14dc64f30986eaa2ad2dddcec073f5aab18e5a24 # v1
  with:
    egress-policy: block
    allowed-endpoints:
      95s5acprodeus1file6.blob.core.windows.net:443
      api.github.com:443
      artifactcache.actions.githubusercontent.com:443
      auth.docker.io:443
      codeload.github.com:443
      dl-cdn.alpinelinux.org:443
      ghcr.io:443
      github.com:443
      production.cloudflare.docker.com:443
      proxy.golang.org:443
      registry-1.docker.io:443

@jauderho sorry, missed that. re-opening issue. will add it soon.

One observation: My https://github.com/jauderho/dockerfiles repo was previously set to default read/write for Actions but with all of these perm changes, I now have the repo set to default read.
While this is better, I've noticed that this changes the output of the insights URL from say https://app.stepsecurity.io/github/jauderho/psfiles/actions/runs/1741506002 to https://app.stepsecurity.io/github/***/psfiles/actions/runs/1741506002
Looks like the username is masked now. Not a showstopper but just to point out that the URL will not work. You might want to have a more verbose error message for folks that hit the https://app.stepsecurity.io/github/***/<REST_OF_URL endpoint to manually add their username back in.

https://github.com/jauderho/dockerfiles

Thanks for reporting this! This is definitely going to cause problems for some users as they will not know what is wrong with the URL. I will create another issue for it.

Noticed that https://github.com/step-security/harden-runner/blob/main/action.yml appears to be calling node12.
My understanding is that node 12 was EOL a while ago. See https://endoflife.date/nodejs
Should this be bumped to say node 16?

Noticed that https://github.com/step-security/harden-runner/blob/main/action.yml appears to be calling node12.
My understanding is that node 12 support was EOL (normal not security) a while ago. See https://endoflife.date/nodejs
Should this be bumped to say node 16?

Thanks a lot for feedback! I will create an issue to address.

If api.snapcraft.io is blocked for https://github.com/jauderho/dockerfiles/actions/runs/1742841293, should the job not fail so that someone can look into it?
Or should there be a block-hard-fail option type?

If api.snapcraft.io is blocked for https://github.com/jauderho/dockerfiles/actions/runs/1742841293, should the job not fail so that someone can look into it?
Or should there be a block-hard-fail option type?

Yes, I think I need user feedback on this. api.snapcraft.io is a special case. It is not used from the workflow, but from snapd. I had reported it to GitHub, but looks like it might not be fixed.
Let me create an issue to investigate block-and-fail mode, where job fails if there is call to endpoints not in the allowed list. Do you think block-and-fail should be the same as block or should it be a different option? I have already gotten feedback to have a warn-only mode, where allowed-endpoints are not stored in the workflow, but on the back-end, and there is just a warning if a new endpoint is called...So, I don't want to have too many options, else it gets hard for developers to decide.

Maybe it should be hard-fail and soft-fail or is that not sufficiently explanatory?
So you end up with just:

audit
hard-fail
soft-fail

It's unclear to me how much value is added by having a warn-only mode but maybe I'm failing to see the use case.

So I've run into a potential issue around how the allowed-endpoints are defined. If you look at my workflow for ansible (https://github.com/jauderho/dockerfiles/blob/main/.github/workflows/ansible.yml), it has a build matrix of building for both ubuntu and alpine.
Now the dependencies and hence the allowed-endpoints are different for ubuntu vs. alpine as some python wheels have to be manually built for alpine dependencies. In order to make this run successfully without having to break out the matrix into different jobs, I would have to end up using whatever the more permissive list would be.
Not a showstopper but might catch some folks down the line.

So I've run into a potential issue around how the allowed-endpoints are defined. If you look at my workflow for ansible (https://github.com/jauderho/dockerfiles/blob/main/.github/workflows/ansible.yml), it has a build matrix of building for both ubuntu and alpine.
Now the dependencies and hence the allowed-endpoints are different for ubuntu vs. alpine as some python wheels have to be manually built for alpine dependencies. In order to make this run successfully without having to break out the matrix into different jobs, I would have to end up using whatever the more permissive list would be.
Not a showstopper but might catch some folks down the line.
Example: https://app.stepsecurity.io/github/jauderho/dockerfiles/actions/runs/1742888941

Interesting case. Yes, I think the union of all endpoints for the matrix would need to be used in the workflow file. When the experience of showing the entire workflow in the editor in the insights page gets done, getting a list of all the endpoints across jobs in a matrix should get easier.

Maybe it should be hard-fail and soft-fail or is that not sufficiently explanatory?
So you end up with just:

audit
hard-fail
soft-fail

It's unclear to me how much value is added by having a warn-only mode but maybe I'm failing to see the use case.

The main difference is in terms of where the allowed-endpoints are stored. If stored in the workflow file, and they change often (which might not be the case for many workflows), then one would have to update the workflow often. In such a case one may want to store the allowed-endpoints in the backend using the insights page.

Where is this backend that you are referring to? I think that's where I'm missing understanding of.

Where is this backend that you are referring to? I think that's where I'm missing understanding of.

Backend is the API and data store that stores the correlated outbound traffic.
e.g. when you visit https://app.stepsecurity.io/github/jauderho/dockerfiles/actions/runs/1742888941, it fetches the data for that workflow run and shows it from the backend API.
Now, the idea is that instead of adding the allowed-endpoints in the workflow YAML file, you can simply check the endpoints that should be allowed, and save the policy using the insights page using a save policy button. Then the policy will get saved along with the insights in the backend. Next time the same workflow runs, harden-runner will fetch the policy from the backend and then hard-fail/soft-fail based on that policy. This way, if there is a new endpoint, one does not need to change the workflow YAML file (so no need to do pull request and update the YAML file). Just go to the insights page, and approve the new endpoint.
The downside is that the allowed-endpoints are not visible in the YAML file.

@jauderho I have fixed the UI bug. Can you please verify? The editor should show harden-runner in same way as the landing page.
- name: Harden Runner
  uses: step-security/harden-runner@14dc64f30986eaa2ad2dddcec073f5aab18e5a24 # v1
  with:
    egress-policy: block
    allowed-endpoints:
      95s5acprodeus1file6.blob.core.windows.net:443
      api.github.com:443
      archive.ubuntu.com:80

@jauderho since you have a repo related to docker images, and you run security tools on those images, I wanted to ask you about this feature I am thinking about - automatic SBOM (software bill of materials)/ provenance generation.
As you know harden-runner monitors the runner and so it knows what dependencies are being downloaded, from where, and what artifact is generated. So, I would like to automatically generate SBOM, and then upload it either along with the docker container, or in the release tab (if there is a release).
This way developers will not need to think about SBOM generation, it will just happen as part of the build.
What do you think about this? Thanks!

You may want to track signing with Docker here : https://github.com/docker/roadmap/issues/269

@jauderho I have fixed the UI bug. Can you please verify? The editor should show harden-runner in same way as the landing page.
- name: Harden Runner
  uses: step-security/harden-runner@14dc64f30986eaa2ad2dddcec073f5aab18e5a24 # v1
  with:
    egress-policy: block
    allowed-endpoints:
      95s5acprodeus1file6.blob.core.windows.net:443
      api.github.com:443
      archive.ubuntu.com:80

This appears to work. Just tested on one of my actions.

BUG: https://app.stepsecurity.io/github/jauderho/dockerfiles/actions/runs/1747044469 does not appear to return any output.
This is tied to a pretty large job with 150+ subtasks (51 simultaneous). Workflow file is here: https://app.stepsecurity.io/github/jauderho/dockerfiles/actions/runs/1747044469
It is unclear to me if the large number of jobs is causing an issue somewhere.

@jauderho I have fixed the UI bug. Can you please verify? The editor should show harden-runner in same way as the landing page.
- name: Harden Runner
  uses: step-security/harden-runner@14dc64f30986eaa2ad2dddcec073f5aab18e5a24 # v1
  with:
    egress-policy: block
    allowed-endpoints:
      95s5acprodeus1file6.blob.core.windows.net:443
      api.github.com:443
      archive.ubuntu.com:80

This appears to work. Just tested on one of my actions.

Thanks!  I will go ahead and close this bug. I will enable discussions on this repo.

@jauderho since you have a repo related to docker images, and you run security tools on those images, I wanted to ask you about this feature I am thinking about - automatic SBOM (software bill of materials)/ provenance generation.
As you know harden-runner monitors the runner and so it knows what dependencies are being downloaded, from where, and what artifact is generated. So, I would like to automatically generate SBOM, and then upload it either along with the docker container, or in the release tab (if there is a release).
This way developers will not need to think about SBOM generation, it will just happen as part of the build.
What do you think about this? Thanks!

So.... I think I have keyless cosign and SBOM generation working for a container image =) There are a bunch of moving parts so this may yet change.
Workflow is here: https://github.com/jauderho/dockerfiles/blob/main/.github/workflows/age.yml
Output is here: https://github.com/jauderho/dockerfiles/actions/runs/1755633128

@jauderho since you have a repo related to docker images, and you run security tools on those images, I wanted to ask you about this feature I am thinking about - automatic SBOM (software bill of materials)/ provenance generation.
As you know harden-runner monitors the runner and so it knows what dependencies are being downloaded, from where, and what artifact is generated. So, I would like to automatically generate SBOM, and then upload it either along with the docker container, or in the release tab (if there is a release).
This way developers will not need to think about SBOM generation, it will just happen as part of the build.
What do you think about this? Thanks!

So.... I think I have keyless cosign and SBOM generation working for a container image. There are a bunch of moving parts so this may yet change.
Workflow is here: https://github.com/jauderho/dockerfiles/blob/main/.github/workflows/age.yml
Output is here: https://github.com/jauderho/dockerfiles/actions/runs/1755633128
EDIT: I have not yet figured out how to use cosign to sign the scan output but it does seem possible. See https://github.com/pvnovarese/oss-2021-sbom-complete-workflow-demo/blob/main/.github/workflows/build-and-publish.yaml

Thanks @jauderho! I have created a discussion topic for SBOM and automatic signing.

@varunsh-coder
A somewhat related question for you. One of the OpenSSF Scorecard recommendations is to switch from using Docker image tag to digests. Given that you have an Action to covert from versions to commit hashes for GHA, do you know of or have any plans to create a similar page to https://app.stepsecurity.io/ that will allow for a cut/paste conversion for Docker tags?

One item that's unclear to me is we should include the version number while using the digest for point to an image. See https://github.com/jauderho/dockerfiles/issues/146

One item that's unclear to me is we should include the version number while using the digest for point to an image. See jauderho/dockerfiles#146

Yes, I think we should.


clickhouse-jdbc and liquibase-clickhouse --> Transactions are not supported

Hi guys,
We have a very basic setup of clickhouse and liquibase-clickhouse but it doenst work with the official Clickhouse Driver.
The official driver always gives error:
liquibase.exception.DatabaseException: liquibase.exception.DatabaseException: java.sql.SQLFeatureNotSupportedException: Transactions are not supported
	at liquibase.database.AbstractJdbcDatabase.setAutoCommit(AbstractJdbcDatabase.java:1234)
	at liquibase.changelog.ChangeSet.execute(ChangeSet.java:704)
	at liquibase.changelog.visitor.UpdateVisitor.visit(UpdateVisitor.java:49)
	at liquibase.changelog.ChangeLogIterator$2.lambda$null$0(ChangeLogIterator.java:111)
	at liquibase.Scope.lambda$child$0(Scope.java:177)

SpringLiquibase config:
    @Bean(name = CLICKHOUSE_DATASOURCE)
    public DataSource createClickhouseDataSource() {
        ClickHouseProperties properties = new ClickHouseProperties();
        properties.setPassword(yyy);
        properties.setUser(xxx);
       ...
        return new ClickHouseDataSource(zzz, properties);
    }

  @Primary
    @Lazy(false)
    @Bean(name = CLICKHOUSE_LIQUIBASE_BEAN_NAME)
    @DependsOn(CLICKHOUSE_DATASOURCE)
    public SpringLiquibase liquibaseClickhouse(@Qualifier(CLICKHOUSE_DATASOURCE) DataSource dataSource) {
        // Configure custom Clickhouse Liquibase settings
        ...
        DatabaseFactory.getInstance().register(new ClickHouseDatabase());

        SpringLiquibase liquibase = new SpringLiquibase();
        liquibase.setDataSource(dataSource);
        ....
        return liquibase;
    }

The official connection (ClickHouseConnectionImpl) does the following:
    @Override
    public void setAutoCommit(boolean autoCommit) throws SQLException {
        if (autoCommit) {
            return;
        }
        throw new SQLFeatureNotSupportedException("Transactions are not supported");
    }

I already tried to set runInTransaction="false" inside liquibase xmls but this doesnt change anything.
Version info:
clickhouse-jdbc: 0.3.1-patch    -->     https://github.com/ClickHouse/clickhouse-jdbc
clickhouse-liquibase: 0.6.1

This problem is introduced in the last version of clickhouse-jdbc 0.3.1-patch https://github.com/ClickHouse/clickhouse-jdbc/issues/708
You can try to use clickhouse-jdbc 0.3.1.


bug: middleware is loaded before plugins #19766

🐛 The bug
pnpm dev
console.log see first middleware after plugin.
but it should be the other way around. Plugins should come first and then middleware should come.

🛠 To reproduce
https://github.com/productdevbook/nuxt3bug1
🌈 Expected behaviour
first load plugins after middleware
ℹ Additional context

Operating System: Linux
Node Version:     v18.15.0
Nuxt Version:     3.3.1
Nitro Version:    2.3.1
Package Manager<EMAIL_ADDRESS>Builder:          vite
User Config:      modules
Runtime Modules<EMAIL_ADDRESS>Build Modules:    -

Not sure if is related @danielroe
import Cookies from 'js-cookie'

export default defineNuxtRouteMiddleware(() => {
  if (!Cookies.get('token')) {
    return navigateTo('/login')
  }
})

Will throw:
[Vue Router warn]: Detected an infinite redirection in a navigation guard when going from "/" to "/login". Aborting to avoid a Stack Overflow. This will break in production if not fixed.

@Tragio That will always redirect infinitely, because the middleware will be called on the new route too. You should check that the route path isn't already /login before redirecting.

I am encountering the same issue, it looks like middleware isn't properly handled. I started using a global middleware and using a provided helper from the plugin in this middleware. But is always null, if i change the middleware to a named variant and add it to a page, the helper variable is not null anymore.
Another approach I tried (inspired by https://github.com/wobsoriano/nuxt-firebase-auth-starter/blob/master/nuxt.config.ts) is adding two plugins, and from with one of the plugins registering a global middleware. But the global middleware isn't run whatsoever, putting a console log in the callback method does not get shown.
export default defineNuxtPlugin(() => {
    const user = useUser()

    addRouteMiddleware(
        'auth',
        (to) => {
            console.log(to)

            if (to.path === '/login' && user.value)
                return navigateTo('/vehicles')

            if (to.path !== '/login' && !user.value)
                return navigateTo('/login')
        },
        { global: true },
    )
})