Error while Installing react-scripts with create a new project

Description
I get an error after creating new react app. It's say about Error at spawn ENOTDIR
Expected behavior
Project should created and add list of files inside a package. For me it's a first time i'm using it (begginer with ReactJS), so mb something wrong with my settings or anything else related with it.
Actual behavior
Its just fall with an error. CRA can't install react scripts.
Environment
MBP
Run these commands in the project folder and fill in their results:

npm ls react-scripts (if you haven’t ejected):
node -v: v7.2.1
npm -v: 4.0.3

Then, specify:

Operating system: MacOS Sierra 10.12.1
Browser and version: Chrome 54.0.2840.98 (64-bit)

Reproducible Demo
This is screenshot of my terminal window:

One thing that looks a bit weird is you're runnjng the command from inside the Trash folder. Is this intentional? I don't know if there's anything preventing that but just curious if you tried creating a project outside of it

Yes, really weird... Now i try to create in non-Trash folder. And again same result:

@fson Looks like Yarn detection code needs a try catch?

I don’t understand why this happens.
Can you give me the output of:

echo $PATH
which yarn
create-react-app --version

Then could you try to run npm i -g<EMAIL_ADDRESS>and try again. This way we can tell if it’s a new regression or not.

Ohh, yes! I forget instal yarn.. Sorry guys, it was my mistake. Now it's okay.

Hmm, it still shouldn't fail without Yarn. Yarn is not required for CRA.
I'm going to put try / catch around this code and release an update.

Great! Thank you.

@SerhiiHrudakov Could you still share the output of commands in https://github.com/facebookincubator/create-react-app/issues/1200#issuecomment-265757559?

Then list of files and next:

Sorry, could you run these commands in the terminal:
echo $PATH
which yarn
create-react-app --version

Ohh, sorry. Here it is:

Thanks!
As a matter of experiment, could you remove Yarn and try again with<EMAIL_ADDRESS>I just released?
npm uninstall -g yarn
npm install -g<EMAIL_ADDRESS>
create-react-app my-app

I just want to make sure the issue is fixed. Feel free to install Yarn again afterwards (it's faster) :-)

This is deleting yarn:

Then create new CRA:

And result:

There is a typo in uninstall command so it didn't get uninstalled.
You typed usinstal, not uninstall.
Could you try this again please?
Sorry for bugging you.

Ooo...really... Wait a minute please.

Hmm, you still have Yarn. Maybe you didn't install it via npm?
Anyway, don't worry, it's not super important. I'm glad it works for you now.


Java multiline text blocks highlighted incorrectly

Java 15+ supports multiline text blocks via triple quotes. The documentation states "there is no need to escape the embedded double quotes." However, when there is a double quote within the text block, Pygments incorrectly interprets it as the end of the string literal.
Code (Quine - Wikipedia):
public class Quine {
	public static void main(String[] args) {
		String textBlockQuotes = new String(new char[]{'"', '"', '"'});
		char newLine = 10;
	    String source = """
public class Quine {
	public static void main(String[] args) {
		String textBlockQuotes = new String(new char[]{'"', '"', '"'});
		char newLine = 10;
		String source = %s;
		System.out.println(source.formatted(textBlockQuotes + newLine + source + textBlockQuotes));
	}
}
""";
        System.out.println(source.formatted(textBlockQuotes + newLine + source + textBlockQuotes));
	}
}

(looks like GitHub's highlighter is also broken)
Expected:

Actual:

Hi, we're a group of students from the University of Adelaide and we're currently contributing to open-source as a part of a course. This will be done over 8 weeks, and we would like to take on this issue if it's still open.
With that said, for most of us this is our first contribution to OSS so we would appreciate any advice you could give us :)

Looking at the JavaLexer in pygments/lexers/jvm.py, I see the following rules for strings:
'root': [
    ...
    (r'"', String, 'string'),
    ...
],
...
'string': [
    (r'[^\\"]+', String),
    (r'\\\\', String),  # Escaped backslash
    (r'\\"', String),  # Escaped quote
    (r'\\', String),  # Bare backslash
    (r'"', String, '#pop'),  # Closing quote
],
...

This has no support for triple-quoted strings: the """ is taken as first "", an empty string, then one more " starting a new string, and any " in the triple-quoted string matches that ", ending the string. You want to add a new rule for """ before the one for " in the root state, and make it push a triple-quoted-string state on the stack, which should be similar to the string state but adapted for triple quotes.

Fixed by https://github.com/pygments/pygments/pull/2132 ?


Tour the SAP Community

Tutorial URL: https://developers.sap.com/tutorials/community-start.html
Please specify the step you are referring to
I've completed all steps but unfortunately at step 11 when I click on "done" it does not turn the status to completed. I'm afraid if I refresh the page, progress on the other 10 steps will be lost..

@marie-bn I opened the tutorial and was able to do step 11. Can you try again? Also, refresh the tutorial -- once you get the green your status is automatically stored in the backend.
@WorkJerryJanda FYI

@thecodester I've reopened the tutorial but none of the progress (1-10) was saved, meaning I probably have to tick all off again?

@thecodester Thanks I tried it again (after laptop reboot and network change) and could finally complete step 11 as well.


Javadoc: Unable to find javadoc command when JAVA_HOME is set

I'm getting the following error while building anserini using mvn clean package appassembler:assemble:
[INFO] ------------------------------------------------------------------------
[INFO] BUILD FAILURE
[INFO] ------------------------------------------------------------------------
[INFO] Total time:  17.543 s
[INFO] Finished at: 2019-08-15T20:01:00Z
[INFO] ------------------------------------------------------------------------
[ERROR] Failed to execute goal org.apache.maven.plugins:maven-javadoc-plugin:3.1.0:jar (attach-javadocs) on project anserini: MavenReportException: Error while generating Javadoc: Unable to find javadoc command: The environment variable JAVA_HOME is not correctly set. -> [Help 1]

JAVA_HOME is set and I've added the bin directory under it to PATH as well.
$ echo $JAVA_HOME
/usr/lib/jvm/java-11-openjdk-amd64

Using maven 3.6.0, Java 11.0.3, Ubuntu 18.04.1.

A workaround is adding -Dmaven.javadoc.skip=true verify to the mvn command.

Turns out javadoc is not installed. I'll check my environment.

My bad, turns out I was setting up a new environment and installed JRE instead of JDK.

How do you fix it? I came across the same issue.

Setting JAVA_HOME is OS and environment specific. You should be able to find an answer via web search.


TFRS - Compliance report filtering by 'last status update' in ascending order does not persist when navigating to next page

Describe the Bug
For IDIR users on the compliance reporting tab, when applying an ascending filter on the 'Last Status Update' column, the filter does not persist when the user navigates to the next page. The filter reverts back to descending order when you navigate to the next page.
Expected Behaviour
The expected behaviour is that the "Last Status Update" filter in ascending order persists even when a user navigates to the next page of the table.
Actual Behaviour
The actual behaviour is that the "Last Status Update" filter in ascending order reverts back to descending order when a user navigates to the next page of the table.
Implications
The implication is that a IDIR user searching through compliance reports can be easily confused if the 'Last Status Update' filter reverts back to a different sorting order from page to page. One way around this for now is to expand the rows before filtering, but different users have reported that they use the 'next' button and are frustrated with the reset back to descending on the next page
Steps To Reproduce
Steps to reproduce the behaviour:
User/Role: IDIR

Go to 'Compliance Reporting' tab and view the table
Click on 'Last Status Update' filter in ascending order (listed by earliest date to latest date)
Click on 'Next' button
See error that has relisted reports in descending order

We may not do this as we are trying to limit development in TFRS and we have been spending quite a bit of time fixing critical bugs.

Not doing this.


fix: Lazy-load functions post worker fork

To ensure that all user code is loaded and executed within the same process, delay module execution until the application and server have been created, and after the worker has forked.

@di Can you check why the Conformance tests are failing? I see a JSON error, but am unable to see the connection with the PR

@shreejad They seem to be failing on master, it's unrelated to this PR: https://github.com/GoogleCloudPlatform/functions-framework-python/runs/3414035673

Can anyone proceed with merging this? It looks like this can be the cause of the https://github.com/googleapis/python-logging/issues/412

Hi Dustin, would you mind syncing this PR? Thank you!

@KaylaNguyen I'm not a maintainer of this repo anymore, and thus don't have write access to this branch.

Hi @spew, can you help to route this fix to an appropriate owner? This could fix all fork-related issues for Python libraries with C-Extensions.
Why post-fork loading is okay? In today's functions-framework-python setup, the gunicorn uses 1 worker, and 8 threads. The 8 threads are managed by gthread worker, which is basically a thread pool without any magic.
By using this, we are implicitly requiring users to write their code in a thread-safe manner, or it will have data races.
For the only gunicorn worker, the module-level code will be executed only once, then the state is shared with 8 threads.
If we conduct complex operations before fork, in this case, creating gRPC channels, we will have non-trivial states in both Python and C-Extensions (see https://github.com/grpc/grpc/blob/master/doc/fork_support.md for why it's hard to clean).
For future owner of this PR, please consider move this effort forward.

can anyone proceed with merging this PR?

@anniefu Can you help to take another look? See if there are any blockers?

FYI, looks like resolving the merge conflicts removed much of the added functionality in 45f3ae8591edc48855b48ad2400ee78351f8f5e1.

Yes, the last commit will be reverted. Need to do more fine-grain merging.

@di, do you want to resolve the conflicts of your PR to get this in a mergable state?
Or do you want to have others patch the PR?

Gentle ping.

@grant I'm not a maintainer here anymore so I can't actually resolve conflicts on this PR because the branch is on the upstream repo.

We've had a change in Functions Framework since the original PR to use decorators (i.e. functions_framework.cloud_event) on the target function to detect the function signature type. Unfortunately, we need that information at app setup time, so we can't lazy load the user function's module anymore.
Given that, I'm going to close this PR now, but if anyone has any suggestions that are compatible with function decorators feel free to open an new Issue for a new fix.


Add new CookiePolicy middleware

Fixes https://github.com/aspnet/HttpAbstractions/issues/42
cc @Tratcher @divega @lodejard @davidfowl @blowdart
Note: one quirk of the new instance based options Use methods .  Configure<CookiePolicyOptions> in ConfigureServices will ALWAYS be ignored silently.

Naive question: why submitting this thing here and not in aspnet/HttpAbstractions or aspnet/BasicMiddleware?

@PinpointTownes HttpAbstractions can't have any real middleware due to repo layering. Hosting depends on HttpAbstractions, so HttpAbstractions can't have any web app samples or TestHost tests.  BasicMiddleware was considered, it was a toss up between it and Security. I think Security only won because this feature may help make your site more secure.

Updated PR, wrapping Cookies feature now and fixed other feedback

:shipit:

Updated with the test refactoring, I'm thinking this will be how the security tests end up looking too, as its similar already

Nice, :shipit:

5cc1fea40045041f77a6bb2bd23e231e24f82da7


Typo in formula

Patch( IceCream, Lookup( IceCream, Flavor = "Chocolate" ), { Quantity: 400 } )
In the above formula, 'Lookup' should be 'LookUp'. With uppercase 'U'.

Document Details
⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

ID: fa25d2ca-ccc1-0e10-e065-731926bb673c
Version Independent ID: fa25d2ca-ccc1-0e10-e065-731926bb673c
Content: Patch function in Power Apps (contains video) - Power Platform
Content Source: power-platform/power-fx/reference/function-patch.md
Service: power-platform
Sub-service: power-fx
GitHub Login: @gregli-msft
Microsoft Alias: gregli

@kamaleshbhamare Thank you for the feedback. The typo has been corrected.
Thank you,
Mints


New issues

My pid : 425967
Moxie protocol TVL : 260,903KMOXIE (My TVL : 320.763K MOXIE)

reason : I'm not a bot. I'm asking to unlock my account because it seems to be locked incorrectly. I promise to follow all the rules on the platform, and I want a chance to continue using this account. Please review it and resolve it quickly. Thank you.

unflagged


[VC_1.11.0] Failed to parse SPECjvm metrics from results because index was outside the bounds of the array if run more than 2 times.

Describe the bug
Failed to parse SPECjvm metrics from results because index was outside the bounds of the array if run more than 2 times.
To Reproduce
Steps to reproduce the behavior:

All VirtualClient  versions has this issue(1.0-1.11);
VirtualClient --profile=PERF-CPU-COREMARK.json --iterations=3 --parameters="CompilerVersion=11" --packages=https://virtualclient.blob.core.windows.net/packages
System under test configuration (OS, VM size, architecture, etc)
Failed on both Ubuntu 20.04 & 22.04 & redhat8.2, failure rate 100%

Expected behavior
Parse passed for multiple SPECjvm iterations.
Screenshots
See as the attachment.
Additional context
Only 1st time result could be parsed successfully;
It will be still failed if delete the old VC version and then enable a new one;

Hi @xuwangfe thanks for reporting, acknowledged, looking into it.

To unblock you please check if you could find anything in vc/packages/specjvm2008/results/*.txt and delete that.

We delete files after parsing so still trying to repro this.

There is no *.txt file in the /home/VC_1.11/content/linux-x64/packages/specjvm.2008.0.0/results path.
All the test results is list as SPECjvm2008.001, 002, 003...
And only 1st results was parsed and has htmlsub/summary data, other results only has the raw data.
We even tried to delete the whole VC_1.11 folder and then enable a new VC folder, but it was also failed.

It would help me a lot if you could help package the results folder so that I can debug right away. Otherwise my run will finish in a couple hours so I will check tomorrow.

Sorry for that i couldn't sent the data results to you due to the policy limitation.
It's OK for me to get your feedback on the tomorrow.
Thanks for your help.

Unfortunately, I was not able to repro, I ran iterations=2 and it finished successfully. I also got 18 metrics with "ops/m" (9 each run). I understand that you couldn't share your results with us, we still have a couple of ways we could debug this.

The culprit is likely in the SPECjvm2008.002.txt that VC fails to parse every time. Compare that with the example we used for our unit test
https://github.com/microsoft/VirtualClient/blob/main/src/VirtualClient/VirtualClient.Actions.UnitTests/Examples/SPECjvm/SPECjvm2008.012.txt . See if you got a complete result file, especially in this section
. The fact you are not getting a .summary file might mean something went wrong in the java process.

If you are open to it, you could scramble (but keep digits the same) the important numbers in SPECjvm2008.002.txt so that it does not validate your policy. I can run it through our unit test and see if it fails.

Another thing I would like to confirm is, if you completely deleted VC_1.11 and ran VirtualClient inside that new folder, because I'm seeing SPECjvm run from 001->011. Would just like to confirm that 11 runs were run after you deleted everything.

Total 4 files in the SPECjvm2008.002 folder: SPECjvm2008.002.txt, SPECjvm2008.002.html, SPECjvm2008.002.raw, images folder
Only SPECjvm2008.002.raw file has the raw data, but both SPECjvm2008.002.html & SPECjvm2008.002.txt & images folder were empty((The empty file size is 0 in above picture.));
The SPECjvm2008.002.txt file is empty, so that it's no necessary to upload to you, any other log files could be useful?
I confirmed that we tried the delete experiments, including deleting the whole VC folder, deleting all specjvm.2008 folder from packages path, changing different  VC versions, also tried re-install OS(Ubuntu20.04, 22.04) or install & setup a new OS environment(redhat8.2), but all failed.

Could you install a new OS in the host environment directly and try again? The failure rate is 100% in my side.

Thank you @xuwangfe , I did exactly #4 with a fresh VM with Ubuntu2004. The fact SPECjvm2008.002.txt is empty is the problem. Our parser failed to parse because the file is empty.
If you can't share the log files, would you be open to run SPECjvm without VC and see what happens? The command looks like this Regex, you need to adjust GCThreads and memory you are using. VC uses 85% of total memory by default.
java -XX:ParallelGCThreads=[0-9]+ -XX:+UseParallelGC -XX:+UseAES -XX:+UseSHA -Xms[0-9]+m -Xmx[0-9]+m -jar SPECjvm2008.jar -ikv -ict compress crypto derby mpegaudio scimark serial sunflow

It could be passed with below command and generate the logs normally.
/home/VC_1.11/content/linux-x64/packages/microsoft-jdk-17.0.5/linux-x64/bin/java -XX:ParallelGCThreads=104 -XX:+UseParallelGC -XX:+UseAES -XX:+UseSHA -Xms328229m -Xmx328229m -jar SPECjvm2008.jar -ikv -ict compress crypto derby mpegaudio scimark serial sunflow

Sorry I couldn't unblock you right now without being able to reproduce the issue. However I still have a question, did you remove the SPECjvm2008.001-011 folders? Because looks like when you manually ran it, it started from SPECjvm2008.012 instead of SPECjvm2008.001, which makes me think you didn't delete the whole VC_1.11 when reinstalling. Please confirm you removed the whole /specjvm.2008.0.0/results and then reran. Thank you.

Specjvm with VC framework was still failed after JAVA command directly;

I moved VC_1.11 as VC_1.11_old and re-new a VC_1.11_new folder to re-run, it was failed.

3.Upload the VC_1.11_new logs as below, hope that could be useful for you.
vc_1.11_new_nohup.txt
metrics-20231027.zip
SPECjvm2008.zip

Hi xuwangfe, when you copy to VC_1.11_old or VC_1.11_new, you are also copying over the results folder which has the empty folder. So doesn't matter if you are copying, VC will still be looking at that empty result file first. You want that removed.

Please run this
sudo rm -r /home/VC_1.11/content/linux-x64/packages/specjvm.2008.0.0/results/
Let me know if you are open to a Zoom/Teams meeting where I help resolve this quickly.

The steps which i tried were list as below:

~# mv /home/VC_1.11/ /home/VC_1.11_old
~# mkdir -p /home/VC_1.11_new
~# cd /home/VC_1.11_new/
~# cp -rf /home/VC_1.11_old/virtualclient.1.11.0.zip /home/VC_1.11_new/virtualclient.1.11.0.zip     //1.11.zip package which download from MSFT
~# unzip virtualclient.1.11.0.zip
~# chmod 777 * -R
~# echo "export PATH=$PATH:/home/VC_1.11_new/content/linux-x64/" >> /roor/.bashrc
~# source /roor/.bashrc
~# VirtualClient --profile=PERF-SPECJVM.json --iterations=2 --parameters="CompilerVersion=11" --packages=https://virtualclient.blob.core.windows.net/packages

I think this is as same as the rm.
Please feel free to open Teams meeting, thanks.

I would be interested to know the "ls /home/VC_1.11_new/content/linux-x64/packages/specjvm.2008.0.0/results/" after the installation, it should be empty after the unzip.
May I know your timezone? I would try to accommodate your working hour.

Beijing time and 9:00 - 17:00 is OK for me

Thanks for YangPan's help.
This issue could be solved after add sudo command~


[FEATURE] The parameter source_index of transform supports array

Is your feature request related to a problem?
An user of OpenSearch asked in the OpenSearch forum about how to specify multiple indices in the parameter source_index when creating transform jobs: question, currently the parameter source_index only support ordinary string or wildcard, but users cannot specify multiple concrete indices.
What solution would you like?
The parameter source_index can support array.
What alternatives have you considered?
No workaround.
Do you have any additional context?

Could I be assigned this issue? Thanks.

#226 seems to be the same request as this one
#656 is a popular and related issue to this one


Fix tracking and add duration / type tracking

First PR:

Fixed some things tracking
Added duration tracking
Updated and require gems
Add charts (highcharts / alpinejs / tailwind)

@KostasKostogloy CI fixed. Added some comments to explain my choices and make the review more pleasant :D


Bridge request for journalducoin.com

Bridge request

General information

Host URI for the bridge: https://journalducoin.com/

Which information would you like to see?
I would like to have an RSS feed for all the new actuality articles on the website.

Which of the following parameters do you expect?

[X] Title
[X] URI (link to the original article)
[ ] Author
[ ] Timestamp
[X] Content (the content of the article)
[ ] Enclosures (pictures, videos, etc...)
[ ] Categories (categories, tags, etc...)

Options

[ ] Limit number of returned items

Default limit: 5

[ ] Load full articles

Cache articles (articles are stored in a local cache on first request): yes
Cache timeout (max = 24 hours): 24 hours

[X] Balance requests (RSS-Bridge uses cached versions to reduce bandwith usage)

Timeout (default = 5 minutes, max = 24 hours): 5 minutes

Please note that even tough the website does provide an RSS feed it seems to not be working with RSS agregator (in this case TTRSS) that's why I'm making this request.
Sincerely

The RSS feed of the website was fixed. No need to implement this bridge anymore.


Add phantomjs browser.

test this please

This is not live yet sorry :(

No worries.

Can one of the admins verify this patch?

And its now live :)
test this please

test this please

test this please

retest this please

retest this please


Code Quality

Change Helper file design pattern to classify support except functional structure
CamelCase code style for defining attributes
Method's comments should contain author and since params.
Please restyle your code with code sniffer PSR-2 code style

removed the helper functions from source
and added a trait SideNavHelpers to project for
use in SideNav object

CamelCase code style has been complated
and Method's comments has author and since now
also the codes has PSR-2 code style


correct comma position

Is this the correct syntax?
FORMAT ( value, format [, culture ] )
Isn't it like that?
FORMAT ( value, format, [ culture ] )
I'm not sure that's why I'm asking.
Best regards!

Document Details
⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

ID: L2VuLXVzL3NxbC90LXNxbC9mdW5jdGlvbnMvZm9ybWF0LXRyYW5zYWN0LXNxbA==
Version Independent ID: L2VuLXVzL3NxbC90LXNxbC9mdW5jdGlvbnMvZm9ybWF0LXRyYW5zYWN0LXNxbA==
Content: FORMAT (Transact-SQL) - SQL Server | Microsoft Docs
Content Source: docs/t-sql/functions/format-transact-sql.md

FORMAT ( value, format [, culture ] ) is correct. Parts inside the brackets ([]) are optional. If FORMAT ( value, format, [ culture ] ) were the correct syntax, then when you omit a value for culture you would have to have a trailing comma (,):
SELECT FORMAT(GETDATE(),'dd/MM/yyyy',);

If you try that, you'll get an error.

@trynio -- thank you for your question.
@LarnuUK -- thank you for your answer  :^)
I am closing this issue now.  You are welcome to @ mention me for any followup.
We hope to hear from you again.


demo not working

https://next14.thesaasfactory.dev/en
Onboarding is not working

Thanks for letting me know. The problem was the limit of free Clerk organizations, I already deleted several manually and I plan to create a script as soon as possible to eliminate the oldest ones as new ones are created.

When you click on sign in, even though you don't have an account, it seems like working but it throws error after onboarding


AuTest: Pipfile update to use microserver 1.0.5

The latest version of microserver applies SO_REUSEADDR on the socket it
binds to. This will hopefully address the flaky behavior we've seen with
the tls tests.
This update to microserver is another attempt to address:
https://github.com/apache/trafficserver/issues/6842

Cherry-picked to v9.0.x branch.


[spiral/core] Add Singleton attribute instead of SingletonInterface

Q
A

Bugfix?
❌

Breaks BC?
❌

New feature?
❌

The Spiral\Core\Container\SingletonInterface interface is marked as deprecated. It is recommended to use the Spiral\Core\Attribute\Singleton attribute instead. In all classes, the usage of SingletonInterface has been replaced with the attribute.

Should it be merged into the master?


RAC-4395 - Updated scripts to use the rackhd 2.0 api

RackHD API 1.1 is being deprecated for the Release 2.0.
This PR changes references to the /api/1.1 to /api/2.0 in the test scripts.
The scripts and the Vagrant file are used in the testbed creation during the PR gate.

test this please

@johren @keedya @panpan0000

Why do we have both test.sh and test.sh.in under source control.  Shouldn't test.sh be generated from test.sh.in?

Link to last build:  http://rackhdci.lss.emc.com/job/on-build-config/294

I opened RAC-4485 to deal with the generated files.


Argument Count Error

I am running the version of Closure Compiler that I downloaded yesterday.
I would think the below code would produce a warning regarding the number of arguments used in the call to staticMethod (within onload).  It does not.  But if privatelyUsedMethod's declaration and reference (within staticMethod) are deleted, I get the warning I would expect.
var StaticClass = {
  privatelyUsedMethod : function() {},
  staticMethod : function(msg) {
    alert(msg);
    StaticClass.privatelyUsedMethod();
  }
};
window.onload = function() { StaticClass.staticMethod(); };

Also, I would think the below code would give me a warning too, but since StaticClass is declared after the reference to staticMethod (in onload), no warnings are displayed.  But when I reference staticMethod after declaring StaticClass, I see the warnings I would expect.
window.onload = function() { StaticClass.staticMethod(); };
var StaticClass = {
  staticMethod : function(msg) {
    alert(msg);
  }
};

I believe these are bugs.  Would someone help please?  Thanks.

@concavelenz, thank you.  Shouldn't both circumstances produce warnings?  I would think so.  I want to make sure I'm understanding you.

It should but I've seen problems around this before.  Hopefully, the new type inference handles circular type references correctly.

@dimvar and @concavelenz, I've been checking back on this issue for years, watching for any activity.  Just for the record, this bug is still present.  Thank you for your time.

Created internal issue - http://b/140445611

I suspect that the issue here is that StaticClass is not treated as a namespace, so the compiler does not keep track of the types of its properties as strictly.  It's instead just an "ad-hoc" object type, so I think the function types are treated as "inferred" rather than "declared", making it more permissive.  You can see the issue in the debugger by looking at the bottom of the generate AST - the final GETPROP node (third line from the bottom) has type ? instead of function(?): undefined.
If you mark it as @const (or use the const keyword) then you do get the errors you're looking for.
So the question is what makes the difference?  It looks like it's the recursive reference to StaticClass, though it's also seemingly important that the call be in a closure, rather than top-level (removing the onload also recovers the expected error).
I don't have a clear picture of the interactions here, but it seems like aggressive use of const should address any issues - given that this is an easy workaround, is this actually blocking anything?

Thank you for the suggestion.  I can add const.  I still see this as a bug since I might easily forget to add const to one of my static classes.  But at least this is a workaround.  Thank you again.


role="tree" on navigation accordion menus is bad for accessibility, should be removed/changed

What is wrong now ?
Currently the ul element for an accordion menu is given the role "tree". This has a significant negative impact on accessibility via screen readers because many screen reader users navigate via links only, e.g. the "Find the next link" command in voiceover for Mac, and any links inside role="tree" are completely passed over when navigating this way.
Possible solution
Don't add role="tree" to accordion menus
Context
After accessibility testing our site (which uses the accordion menu for it's main navigation) on multiple visually impaired users using different screen readers, a number of them were completely unaware of the existence of the navigation links until it was suggested they use tabbing to navigate rather than going from link to link as they often would.

Foundation version(s) used: 6.6.3
Browser(s) name and version(s): Chrome
Device, Operating System and version: Mac/Windows

Checklist

[x ] I have read and follow the CONTRIBUTING.md document.
[x ] There are no other issues similar to this one.
[x ] The issue title and template are correctly filled.

I am also exploring this same issue. Raised by our client on Windows/JAWS and I can confirm also on Mac/VoiceOver.
VoiceOver announces the wrapping Navigation, and then next item I step into announces as a table. If I step through the actual items, it does not read the titles of the links.
I have applied the following workaround: Remove the role attribute on all  and  elements in this component after Foundation has initializated it. VoiceOver steps through the nested list and reads titles and toggles as expected.

I am also exploring this same issue. Raised by our client on Windows/JAWS and I can confirm also on Mac/VoiceOver.
VoiceOver announces the wrapping Navigation, and then next item I step into announces as a table. If I step through the actual items, it does not read the titles of the links.
I have applied the following workaround: Remove the role attribute on all  and  elements in this component after Foundation has initializated it. VoiceOver steps through the nested list and reads titles and toggles as expected.


LEGO: Pull request from lego/hb_839_20170315232242945 to master

LEGO: Pull request from lego/hb_839_20170315232242945 to master with localized lcls

This seems like a small (but important) contribution, so no Contribution License Agreement is required at this point. We will now review your pull request.
Thanks,
Microsoft Pull Request Bot


Add trading fee to AccountInfo @ BTC-e and Hitbtc

BTC-e API currently reports fee of .002 (.2%) for all listings, so I put one of the values in the AccountInfo.
Hitbtc fees vary between listings, so AccountInfo.getTradingFee() return value is configurable through xchange.properties.
All the fees are available through HitbtcTradingServiceHelper
ANX: make AccountInfo.getTradingFee() return fraction instead of percent.

Note that calling BTCExchange.init() is not strictly required, but it allows AccountInfo,getTradingFee() to return a non-null


Update dependency nunomaduro/collision to v8

This PR contains the following updates:

Package
Type
Update
Change

nunomaduro/collision
require-dev
major
^7.0 -> ^8.0

Release Notes

nunomaduro/collision (nunomaduro/collision)
v8.1.0
Compare Source
Added

Laravel v11 support
PHPUnit v11 support
Pest v3 support

v8.0.1
Compare Source
v8.0.0
Compare Source
Added

Symfony v7 support

Removed

Symfony v6 support

Configuration
📅 Schedule: Branch creation - "before 10am on Monday" in timezone Asia/Tokyo, Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.

[ ] If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

⚠ Artifact update problem
Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.
♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

any of the package files in this branch needs updating, or
the branch becomes conflicted, or
you click the rebase/retry checkbox if found above, or
you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:
File name: src/composer.lock
Command failed: composer update nunomaduro/collision:8.1.0 --with-dependencies --ignore-platform-req='ext-*' --ignore-platform-req='lib-*' --no-ansi --no-interaction --no-scripts --no-autoloader --no-plugins
Loading composer repositories with package information
Updating dependencies
Your requirements could not be resolved to an installable set of packages.

  Problem 1
    - Root composer.json requires phpunit/phpunit ^11.0, found phpunit/phpunit[11.0.0, 11.0.1, 11.0.2, 11.0.3] but the package is fixed to 10.5.10 (lock file version) by a partial update and that version does not match. Make sure you list it as an argument for the update command.
  Problem 2
    - Root composer.json requires nunomaduro/collision ^8.0 -> satisfiable by nunomaduro/collision[v8.1.0].
    - nunomaduro/collision v8.1.0 requires nunomaduro/termwind ^2.0.0 -> found nunomaduro/termwind[v2.0.0] but these were not loaded, likely because it conflicts with another require.

Use the option --with-all-dependencies (-W) to allow upgrades, downgrades and removals for packages currently locked to specific versions.


Switch to project default at the beginning of each test.

Switch to project default at the beginning of each test.

[test]

[test]

Rebased on the top of master
[test]

I see that this change is for the openshift tests, so I will run also the openshift testsuite.
[test-openshift]


Add support for ICUTokenizerFactory and customizing the rule file in ICU tokenizer

There has been a commit in lucene (http://svn.apache.org/viewvc?view=revision&revision=1416629) that adds a ICUTokenizerFactory which allows to create a ICUTokenizer with a special config argument enabling the customization of the rule based iterator by providing a custom rules files.
Is it possible to expose that argument in the elasticsearch icu plugin ? This would allow to define an elasticsearch tokenizer like:
{
    "index" : {
        "analysis" : {
            "tokenizer" : {
                "custom-icu-tokenizer" : {
                    "type" : "icu_tokenizer",
                    "rulefiles": "Latn:Latin-break-only-on-whitespace.rbbi"
                }
            }
        }
    }
}

This allows tailoring the output of the tokenization process (in this example, not splitting on hyphens in the latin script)
Also see the original solr discussion here: https://issues.apache.org/jira/browse/SOLR-4123

Is there any progress on this? This could also help us with keywords like c++, c# and R&D. With the current tokenizer, all these special characters are being removed.

This issue was moved to elastic/elasticsearch#13146


feat: Configurable opacity transition

Exposes an additional configuration parameter called disableOpacity, which will prevent the view from fading out when scrolling if set to true (defaults to false).
Should solve #168

1+ for this please.

v5.10.0 is published with this fix. Thanks a lot! @ericdsw


libjsoncpp error after upgrading to fedora 33

After upgrading to Fedora 33, launching polybar from the terminal returns a libjsoncpp error
Usually polybar would just launch after typing "polybar bar name" in the terminal, but after the upgrade it gives back this:
polybar: error while loading shared libraries: libjsoncpp.so.22: cannot open shared object file: No such file or directory
It was working fine before i upgraded
I don't think my config is to blame, but i append it
config.txt
WM: dwm 6.2
Distro: Fedora 33 Workstation

This normally happens after updating jsoncpp. Try re-building polybar from scratch.

Ok, im gonna try

It went flawlessly, i don't know why yesterday the compiling process failed midway
Thank you

Should i close

No problem, I will close the issue.


webpack not in package.json, is it intended ?

Hi !
simple curiosity, not really an issue
Is it normal that webpack itself isn't a dependency on this project ?
If yes could you explain why ?
Cheers,
Julien.

Webpack is not a library needed for this project -- instead we need loader-utils. Webpack should be installed to your local project, and use this loader.


Review terminology

After reading the documentation, I realized that the "voting room" terminology was confusing so I moved away from it in favour of "proposal".
Also review some of the documentation

@Szymx95 What do you think? Does it make sense? Was there a strong reason for using a "voting room" name? (or is it something I asked?)

We decided to differentiate between polling and voting so 'voting room' kind of made sense if you like proposal more you can change it, I don't strong feelings about it


[Event Request] table 5964 "Service Contract Line" - multiple publishers

Hello, would it be possible to add OnValidateServiceItemNoOnBeforeOnValidate, OnValidateServiceItemNoOnBeforeCheckServContractHeaderStatus event to table 5964 "Service Contract Line", like this:
        field(5; "Service Item No."; Code[20])            trigger OnValidate()
...
                  IsHandled: Boolean;
                 DoExit: Boolean;
             begin
                 IsHandled := false;
>                 OnValidateServiceItemNoOnBeforeOnValidate(Rec, xRec, IsHandled); //New Event
                 if not IsHandled then
                     exit;
                 TestStatusOpen();
                 GetServContractHeader();

        field(5; "Service Item No."; Code[20])            trigger OnValidate()
...
                      then
                         Error(Text025, ServiceItemLine.TableCaption(), ServContractHeader.FieldCaption("Expiration Date"));
                 end;
                 IsHandled := false;
>                 OnValidateServiceItemNoOnBeforeCheckServContractHeaderStatus(Rec, xRec, IsHandled); //New Event
                 if not IsHandled then
                     if (ServContractHeader.Status = ServContractHeader.Status::Signed) and
                        (not "New Line")
                     then

     [IntegrationEvent(false, false)]
     local procedure OnValidateServiceItemNoOnBeforeOnValidate(ServiceContractLine: Record "Service Contract Line"; xServiceContractLine: Record "Service Contract Line"; var IsHandled: Boolean)
     begin
     end;

     [IntegrationEvent(false, false)]
     local procedure OnValidateServiceItemNoOnBeforeCheckServContractHeaderStatus(ServiceContractLine: Record "Service Contract Line"; xServiceContractLine: Record "Service Contract Line"; var IsHandled: Boolean)
     begin
     end;

Thanks for reporting this. We agree, and we’ll publish a fix asap, either in an update for the current version or in the next major release. Please do not reply to this, as we do not monitor closed issues. If you have follow-up questions or requests, please create a new issue where you reference this one.
Build ID: 11007.


WARNING:main:make_standalone_toolchain.py is no longer necessary.

It seems like generating standalone toolchains in not necessary any more as of a certain NDK version.
WARNING:__main__:make_standalone_toolchain.py is no longer necessary. The
$NDK/toolchains/llvm/prebuilt/linux-x86_64/bin directory contains target-specific scripts that perform
the same task. For example, instead of:

    $ python $NDK/build/tools/make_standalone_toolchain.py \
        --arch arm --api 24 --install-dir toolchain
    $ toolchain/bin/clang++ src.cpp

Instead use:

    $ $NDK/toolchains/llvm/prebuilt/linux-x86_64/bin/armv7a-linux-androideabi24-clang++ src.cpp

Sounds to me like this would reduce build times by a bit, and would reduce the complexity of the rust-android-gradle plugin! Seems also like it would fix things like #15, since it removes the need for toolchain dirs.
(I couldn't find an issue describing this yet, feel free to close if I looked over it.)

You're looking for https://github.com/mozilla/rust-android-gradle/#prebuilttoolchains

... it's even documented. Sorry for the noise, thanks for the link!


JAVA-3053: Add test that reads ignore db/collection readConcern in txn

Updated read-concern.java with new tests.
Evergreen patch: https://evergreen.mongodb.com/version/5c07e4cf0305b97b4ef34173

As far as I could tell, the test is enough. Is there something particular in the logs that you would look for? I would like to make sure we are compliant.

I was thinking more about code inspection than log inspection.  I took a quick look at the spec changes and I don't see any problems.
LGTM


[BUG] faild to build

Hi, today while I was updating the hyde-ext package to 1.3.1-1, this error appeared, how can I resolve it? Thanks for the help. PS I also tried to build it manually, download it again, clear the cache, but I always get the same result

Sorry, I was still testing the github action that automatically publishes to AUR after release. The directory name to cd into in makepkg was incorrect. I've repaired it.
I apologize for the inconvenience. Check out the latest version 1.3.3. Also, please let me know in Discussions what features you would want to see.

Hi, thanks for the fix, it worked.
A theme editor tools would be interesting as a feature also to create new ones,
...I tried to create new ones, but with poor results :'(.


Move verify_marlin_supported to GPTQMarlinLinearMethod

FIX https://github.com/vllm-project/vllm/issues/8149
We fail when constructing the GPTQMarlin config on unsupported platforms, meaning that GPTQMarlin.get_min_capability() can't be queried to check for support without failing to allow for GPTQ fallback. This PR moves the check to when we actually need it in the GPTQMarlinLinearMethod construction

@xiaotukuaipao12318 can you help verify if this fixes the problem?


GetSrt seems to be missing

I don't know if it was a one time bug but at 1 point I tried to make a program using GetStr()  Wasn't even registering as a actual command

In Kernel/SerialDev/Message.CC :
U8 *StrGet(U8 *message=NULL, U8 *default=NULL, I64 flags=NONE)


It is possible to specify a queue size greater than 256

I do it like this
iox::popo::SubscriberOptions subscriberOptions;
subscriberOptions.queueCapacity = 5000U;
iox::runtime::PoshRuntime::initRuntime(name_app);
iox::popo::Listener listener;
iox::popo::UntypedSubscriber subscriber_ses({"SES", run_context, "Event"},subscriberOptions);

after
listener
    .attachEvent(subscriber_ses,
         iox::popo::SubscriberEvent::DATA_RECEIVED,
         iox::popo::createNotificationCallback(get_events_wrapper))
     .or_else([](auto) {
          ::fmt::print("Error\n");
});

I get this message
[Warning]: Requested queue capacity 5000 exceeds the maximum possible one for this subscriber, limiting from 5000 to 256
Sorry for the stupid question, but can I increase the queue?
I found it here https://iceoryx.io/latest/advanced/configuration-guide/
I tried to build it like this
 cmake -Bbuild -Hiceoryx_meta -DBUILD_SHARED_LIBS=ON -DIOX_MAX_PUBLISHER_HISTORY=32768
but it didn't help
my publishers produce a lot of messages and I would like to get a little more than 256 at a time, can I do it somehow? I really need help :)

It is a compile time option. When you run cmake there is this output
-- [i] <<<<<<<<<<<<< Start iceoryx_posh configuration: >>>>>>>>>>>>>
-- [i] Using m:n communication!
-- [i] IOX_MAX_PUBLISHERS: 512
-- [i] IOX_MAX_SUBSCRIBERS: 1024
-- [i] IOX_MAX_INTERFACE_NUMBER: 4
-- [i] IOX_MAX_SUBSCRIBERS_PER_PUBLISHER: 256
-- [i] IOX_MAX_CHUNKS_ALLOCATED_PER_PUBLISHER_SIMULTANEOUSLY: 8
-- [i] IOX_MAX_PUBLISHER_HISTORY: 16
-- [i] IOX_MAX_CHUNKS_HELD_PER_SUBSCRIBER_SIMULTANEOUSLY: 256
-- [i] IOX_MAX_PROCESS_NUMBER: 300
-- [i] IOX_MAX_NODE_NUMBER: 300
-- [i] IOX_MAX_NODE_PER_PROCESS: 1
-- [i] IOX_MAX_SHM_SEGMENTS: 100
-- [i] IOX_MAX_NUMBER_OF_MEMPOOLS: 32
-- [i] IOX_MAX_NUMBER_OF_CONDITION_VARIABLES: 1024
-- [i] IOX_MAX_NODE_NAME_LENGTH: 87
-- [i] IOX_MAX_ID_STRING_LENGTH: 100
-- [i] IOX_MAX_RUNTIME_NAME_LENGTH: 87
-- [i] IOX_MAX_RESPONSES_PROCESSED_SIMULTANEOUSLY: 16
-- [i] IOX_MAX_RESPONSE_QUEUE_CAPACITY: 16
-- [i] IOX_MAX_REQUEST_QUEUE_CAPACITY: 1024
-- [i] IOX_MAX_CLIENTS_PER_SERVER: 256
-- [i] IOX_MAX_NUMBER_OF_NOTIFIERS: 256
-- [i] IOX_MAX_REQUESTS_PROCESSED_SIMULTANEOUSLY: 4
-- [i] IOX_DEFAULT_RESOURCE_PREFIX: iox1
-- [i] IOX_EXPERIMENTAL_POSH_FLAG: false
-- [i] <<<<<<<<<<<<<< End iceoryx_posh configuration: >>>>>>>>>>>>>>

This means you need to run cmake with -DIOX_MAX_CHUNKS_HELD_PER_SUBSCRIBER_SIMULTANEOUSLY=257

Thanks for the help, but I also had to do this
iox::popo::SubscriberOptions subscriberOptions;
subscriberOptions.historyRequest = 5000;
subscriberOptions.queueCapacity = 5000;

iox::popo::UntypedSubscriber subscriber({"Radar", "FrontLeft", "Object"}, subscriberOptions);

and when building the project, he indicated
-DIOX_MAX_CHUNKS_HELD_PER_SUBSCRIBER_SIMULTANEOUSLY=32000

Thanks for the help, but I also had to do this
iox::popo::SubscriberOptions subscriberOptions;
subscriberOptions.historyRequest = 5000;
subscriberOptions.queueCapacity = 5000;

iox::popo::UntypedSubscriber subscriber({"Radar", "FrontLeft", "Object"}, subscriberOptions);

and when building the project, he indicated
-DIOX_MAX_CHUNKS_HELD_PER_SUBSCRIBER_SIMULTANEOUSLY=32000


Prowlarr Backfill: Add option to specify request days

Details
Describe the solution you'd like:
With prowlarr activated option backfill it can happen, that the exporter times out or prowlarr crashes, because of too many items in history.
It would be nice to introduce an environment variable or cli flag to specify an amount of days to request, like you can do on the prowlarr stats page itself.

the added environment variable or cli flag should specify the amount of days to request.
so from that exportarr should request prowlarr with the backwards calculated amount of days from now, specified in the cli or environment variable

The Problem
The issue with backfill in general is making sure the counter stays consistent, since we don't keep any sort of external state. So the way it works right now:
Backfill Disabled: When backfill is disabled, we start from 0 each process start. So you start prowlarr, and in 60 days, you accrue 500 grabs. When you restart, this starts. again at 0, and monotonically increases. Prometheus is pretty smart about restarts, and increase(), sum(), etc will all see the counter decrease, and assume the counter was reset. So even if you're grabbing stuff quickly, and the counter resets from 500 to 20, because there were 20 grabs after restart before prometheus polled, increase() over that period will still show 20. In this situation, you lose the benefit of being able to look at a single datapoint as a snapshot of lifetime grabs, but prometheus always considers this an unintended side effect, and everything else works as expected.
Backfill Enabled: When backfill is enabled, we fill from the entire backlog in prowlarr on each boot. So assume to date you've had 1000 grabs. We'd backfill, start the counter at 1000, and then each poll period we'd get the delta and add it -- so say exportarr runs for 60 days, and accrues another 500 grabs. When you restart, we'll backfill from the beginning of time again, and start our cache from 1500 grabs. To prometheus, there is no interruption to the counter, and it continues monotonically increasing.
So now let's look at the idea of a partial backfill: You start prowlarr for the first time, and we backfill one month of data -- in that month, you've accrued 500 grabs. You leave it running for a week, and accrue 20 more grabs, taking the counter to 520. A couple days later, you restart the service, and leave the backfill flag enabled. Prowlarr dutifully looks back one month for the first datapoint again, and sees something like 515 grabs, as the first week of the prior backfill fell off. So now you have a period in your graph where the counter drops from 520 to 515. Now, when you run increase() over this period, prometheus will return 515, when it should return 0 -- prometheus assumes that because the counter decreased, it was reset to zero at some point, and therefore thinks those 515 grabs are new.
What it means
This means that if we add a backfill duration, it will be extremely important to only run the backfill once, and then turn off the backfill option, or you'll see strange results in your metrics. That honestly worries me a little, that's the type of side-effect that's really easy for folks to miss, and mess up their metrics. The risk could be reduced by keeping a small amount of external state, but the trade-offs don't seem right (caching the counter value to a file adds unnecessary i/o, and putting anywhere else adds unnecessary complexity).
So the actual implementation here isn't particularly difficult (probably --enable-backfill and --backfill-period flags for the prowlarr subcommand), but I'm not sure I like the side-effects.

Was thinking about this a bit this morning -- one option might be to have a "backill-since-date" flag, so that the backfill is consistent. This still isn't fire & forget -- at some point that first query may get long enough that it causes timeouts, but it wouldn't cause broken metrics, at least

@Y0ngg4n I agree that would be a better user experience, but it will lead to broken metrics -- see the problem I outlined above. With a duration window as you describe, when exportarr is restarted,  that window will point to a different start date. As such, the actual count after restart can be lower than before restart. Prometheus will interpret this as a counter reset, and assume that that entire count is "new". So if the counter prior to restart is 1000, and the 90 backfill after restart comes up with 900, and you query increase(<metric>), prometheus will return 900, when in reality the answer is zero or close to zero.
So using a rolling window, based on the relative behaviors of prowlarr & prometheus is a non-starter.

@rtrox ah yeah makes sense


👩💻 API next steps: checklist

The following contains a high-level view of what will be the next main enhancement steps. This document will be kept up-to-date and improved frequently. This work will be mainly conducted by @mk2510 and @henrifroese as part of their SummerOfCode project.

Version 1.10

[x] Every representation function to receive as input a TokenSeries #44
[x] Decouple TF-IDF L2-normalization and TF-IDF #76
[x] Rename term_frequency to count() + add functionterm_frequency #61
[x] Introduce HeroSeries
[x] Add ~ hero.norm(RepresetationSeries, "l1"/"l2")
[x] Can we avoid the use of VectorSeries/TokenSeries?
[ ] All representation functions to deal with HeroSeries + (DocumentTermDF) #43
[ ] Update README + getting-started.md
[ ] Push a new version to PyPi

Performance: speed-up the library

[ ] Most of Texthero data structure are list of list ([["a", "document"], ["another", "document"]]), can we leverage parallelization? We can learn from spaCy. Mandatory read: 100-times-faster-nlp; look at this for parallelization
[ ] Make spaCy function faster + Dask vs Spacy #65
[ ] Depending on the previous task, evaluate if we want to have as default tokenizer spaCy: #131

Software development:

[x] Integrate checking for correct Series types (#60, #55, ...)
[ ] Check hero functions work with np.nan #86

Support Embeddings through Flair

[ ] Add hero.embed(s, flairEmbedding)

Add Topic Modeling

[ ] Add topic modeling support under representation #42
This include also "topic modeling visualization" to get insights out of it
[ ] Add a blog article on how topic modeling with Texthero works

Extra

test coverage
expand multilingual: more languages; recognize languages and select correct one
(low priority) Text summarization (#38) and characteristic terms (#2)

Merge-Plan

#156 (representation series to multicolumn). Branched from Texthero Master
#157 (hero types in representation & DocumentTermDF in _types). Branched from #156
#117 (getting-started), #118 (README), #135 (getting-started hero-types). Branched from Texthero Master
#158 (add pandas setitem support for DocumentTermDF). Branched from #156
RELEASE NEW VERSION
#146  (Flair Embeddings). Branched from Texthero Master
#160 (Travis Clean-Up). Adds flair as dependency, so depends on #146
#161 (Pre-commit hook). Branched from Texthero Master


Datadog mobile app upload 1.0.1

What to do if the build fails?
At the moment contributors do not have access to the CI workflow triggered by StepLib PRs. In case of a failed build, we ask for your patience. Maintainers of Bitrise Steplib will sort it out for you or inform you if any further action is needed.
New Pull Request Checklist
Please mark the points which you did / accept.

[x] I will not move an already shared step version's tag to another commit
[x] I read the Step Development Guideline
[x] I have a test for my Step, which can be run with bitrise run test (in the step's repository)
[x] I did run bitrise run audit-this-step (in the step's repository - note, if you don't have this workflow in your bitrise.yml, you can copy it from the step template.)
[x] I read and accept the Abandoned Step policy

I'm unsure as to why it's marked the icons we've merged as part of this PR (https://github.com/bitrise-io/bitrise-steplib/pull/4159) as part of this one as well though 🤔

I'm unsure as to why it's marked the icons we've merged as part of this PR (#4159) as part of this one as well though 🤔

I think it's because your fork of the repo is a few commits behind the upstream (this repo). But don't worry, it's fine, we can merge this PR as-is.


s2s/s2t: show error message received from server

@virajkarandikar could you please review? thanks.


[Snyk] Fix for 74 vulnerabilities

This PR was automatically created by Snyk using the credentials of a real user.Snyk has created this PR to fix one or more vulnerable packages in the `maven` dependencies of this project.
Changes included in this PR

Changes to the following files to upgrade the vulnerable dependencies to a fixed version:

api/pacman-api-asset/pom.xml

Vulnerabilities that will be fixed
With an upgrade:

Severity
Priority Score (*)
Issue
Upgrade
Breaking Change
Exploit Maturity
Reachability

475/1000  Why? Has a fix available, CVSS 6.5
Directory Traversal SNYK-JAVA-COMAMAZONAWS-2952700
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.704
No
No Known Exploit
No Path Found

563/1000  Why? Has a fix available, CVSS 8.1
Deserialization of Untrusted Data SNYK-JAVA-COMFASTERXMLJACKSONCORE-1009829
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.704
No
No Known Exploit
No Path Found

563/1000  Why? Has a fix available, CVSS 8.1
Deserialization of Untrusted Data SNYK-JAVA-COMFASTERXMLJACKSONCORE-1047324
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.704
No
No Known Exploit
No Path Found

560/1000  Why? Has a fix available, CVSS 8.2
XML External Entity (XXE) Injection SNYK-JAVA-COMFASTERXMLJACKSONCORE-1048302
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.704
No
No Known Exploit
No Path Found

555/1000  Why? Has a fix available, CVSS 8.1
Deserialization of Untrusted Data SNYK-JAVA-COMFASTERXMLJACKSONCORE-1052449
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.704
No
No Known Exploit
No Path Found

555/1000  Why? Has a fix available, CVSS 8.1
Deserialization of Untrusted Data SNYK-JAVA-COMFASTERXMLJACKSONCORE-1052450
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.704
No
No Known Exploit
No Path Found

630/1000  Why? Proof of Concept exploit, Has a fix available, CVSS 8.1
Deserialization of Untrusted Data SNYK-JAVA-COMFASTERXMLJACKSONCORE-1054588
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.704
No
Proof of Concept
No Path Found

563/1000  Why? Has a fix available, CVSS 8.1
Deserialization of Untrusted Data SNYK-JAVA-COMFASTERXMLJACKSONCORE-1056414
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.704
No
No Known Exploit
No Path Found

630/1000  Why? Proof of Concept exploit, Has a fix available, CVSS 8.1
Deserialization of Untrusted Data SNYK-JAVA-COMFASTERXMLJACKSONCORE-1056416
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.704
No
Proof of Concept
No Path Found

563/1000  Why? Has a fix available, CVSS 8.1
Deserialization of Untrusted Data SNYK-JAVA-COMFASTERXMLJACKSONCORE-1056417
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.704
No
No Known Exploit
No Path Found

630/1000  Why? Proof of Concept exploit, Has a fix available, CVSS 8.1
Deserialization of Untrusted Data SNYK-JAVA-COMFASTERXMLJACKSONCORE-1056418
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.704
No
Proof of Concept
No Path Found

563/1000  Why? Has a fix available, CVSS 8.1
Deserialization of Untrusted Data SNYK-JAVA-COMFASTERXMLJACKSONCORE-1056419
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.704
No
No Known Exploit
No Path Found

630/1000  Why? Proof of Concept exploit, Has a fix available, CVSS 8.1
Deserialization of Untrusted Data SNYK-JAVA-COMFASTERXMLJACKSONCORE-1056420
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.704
No
Proof of Concept
No Path Found

630/1000  Why? Proof of Concept exploit, Has a fix available, CVSS 8.1
Deserialization of Untrusted Data SNYK-JAVA-COMFASTERXMLJACKSONCORE-1056421
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.704
No
Proof of Concept
No Path Found

563/1000  Why? Has a fix available, CVSS 8.1
Deserialization of Untrusted Data SNYK-JAVA-COMFASTERXMLJACKSONCORE-1056424
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.704
No
No Known Exploit
No Path Found

563/1000  Why? Has a fix available, CVSS 8.1
Deserialization of Untrusted Data SNYK-JAVA-COMFASTERXMLJACKSONCORE-1056425
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.704
No
No Known Exploit
No Path Found

630/1000  Why? Proof of Concept exploit, Has a fix available, CVSS 8.1
Deserialization of Untrusted Data SNYK-JAVA-COMFASTERXMLJACKSONCORE-1056426
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.704
No
Proof of Concept
No Path Found

630/1000  Why? Proof of Concept exploit, Has a fix available, CVSS 8.1
Deserialization of Untrusted Data SNYK-JAVA-COMFASTERXMLJACKSONCORE-1056427
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.704
No
Proof of Concept
No Path Found

555/1000  Why? Has a fix available, CVSS 8.1
Deserialization of Untrusted Data SNYK-JAVA-COMFASTERXMLJACKSONCORE-1061931
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.704
No
No Known Exploit
No Path Found

630/1000  Why? Proof of Concept exploit, Has a fix available, CVSS 8.1
Deserialization of Untrusted Data SNYK-JAVA-COMFASTERXMLJACKSONCORE-174736
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.704
No
Proof of Concept
No Path Found

525/1000  Why? Has a fix available, CVSS 7.5
Denial of Service (DoS) SNYK-JAVA-COMFASTERXMLJACKSONCORE-2421244
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.704
No
No Known Exploit
No Path Found

520/1000  Why? Proof of Concept exploit, Has a fix available, CVSS 5.9
Denial of Service (DoS) SNYK-JAVA-COMFASTERXMLJACKSONCORE-3038424
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.704
No
Proof of Concept
No Path Found

670/1000  Why? Proof of Concept exploit, Is reachable, Has a fix available, CVSS 5.9
Denial of Service (DoS) SNYK-JAVA-COMFASTERXMLJACKSONCORE-3038426
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.704
No
Proof of Concept
Reachable

520/1000  Why? Proof of Concept exploit, Has a fix available, CVSS 5.9
Deserialization of Untrusted Data SNYK-JAVA-COMFASTERXMLJACKSONCORE-450207
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.704
No
Proof of Concept
No Path Found

705/1000  Why? Mature exploit, Has a fix available, CVSS 8.1
Deserialization of Untrusted Data SNYK-JAVA-COMFASTERXMLJACKSONCORE-450917
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.704
No
Mature
No Path Found

555/1000  Why? Has a fix available, CVSS 8.1
Deserialization of Untrusted Data SNYK-JAVA-COMFASTERXMLJACKSONCORE-455617
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.704
No
No Known Exploit
No Path Found

555/1000  Why? Has a fix available, CVSS 8.1
Deserialization of Untrusted Data SNYK-JAVA-COMFASTERXMLJACKSONCORE-467014
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.704
No
No Known Exploit
No Path Found

675/1000  Why? Mature exploit, Has a fix available, CVSS 8.1
Deserialization of Untrusted Data SNYK-JAVA-COMFASTERXMLJACKSONCORE-467015
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.704
No
Mature
No Path Found

563/1000  Why? Has a fix available, CVSS 8.1
Deserialization of Untrusted Data SNYK-JAVA-COMFASTERXMLJACKSONCORE-467016
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.704
No
No Known Exploit
No Path Found

555/1000  Why? Has a fix available, CVSS 8.1
Deserialization of Untrusted Data SNYK-JAVA-COMFASTERXMLJACKSONCORE-469674
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.704
No
No Known Exploit
No Path Found

555/1000  Why? Has a fix available, CVSS 8.1
Deserialization of Untrusted Data SNYK-JAVA-COMFASTERXMLJACKSONCORE-469676
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.704
No
No Known Exploit
No Path Found

555/1000  Why? Has a fix available, CVSS 8.1
Deserialization of Untrusted Data SNYK-JAVA-COMFASTERXMLJACKSONCORE-471943
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.704
No
No Known Exploit
No Path Found

555/1000  Why? Has a fix available, CVSS 8.1
Deserialization of Untrusted Data SNYK-JAVA-COMFASTERXMLJACKSONCORE-472980
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.704
No
No Known Exploit
No Path Found

555/1000  Why? Has a fix available, CVSS 8.1
Deserialization of Untrusted Data SNYK-JAVA-COMFASTERXMLJACKSONCORE-540500
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.704
No
No Known Exploit
No Path Found

630/1000  Why? Proof of Concept exploit, Has a fix available, CVSS 8.1
Deserialization of Untrusted Data SNYK-JAVA-COMFASTERXMLJACKSONCORE-548451
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.704
No
Proof of Concept
No Path Found

630/1000  Why? Proof of Concept exploit, Has a fix available, CVSS 8.1
Deserialization of Untrusted Data SNYK-JAVA-COMFASTERXMLJACKSONCORE-559094
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.704
No
Proof of Concept
No Path Found

630/1000  Why? Proof of Concept exploit, Has a fix available, CVSS 8.1
Deserialization of Untrusted Data SNYK-JAVA-COMFASTERXMLJACKSONCORE-559106
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.704
No
Proof of Concept
No Path Found

630/1000  Why? Proof of Concept exploit, Has a fix available, CVSS 8.1
Deserialization of Untrusted Data SNYK-JAVA-COMFASTERXMLJACKSONCORE-560762
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.704
No
Proof of Concept
No Path Found

563/1000  Why? Has a fix available, CVSS 8.1
Deserialization of Untrusted Data SNYK-JAVA-COMFASTERXMLJACKSONCORE-560766
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.704
No
No Known Exploit
No Path Found

563/1000  Why? Has a fix available, CVSS 8.1
Deserialization of Untrusted Data SNYK-JAVA-COMFASTERXMLJACKSONCORE-561362
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.704
No
No Known Exploit
No Path Found

563/1000  Why? Has a fix available, CVSS 8.1
Deserialization of Untrusted Data SNYK-JAVA-COMFASTERXMLJACKSONCORE-561373
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.704
No
No Known Exploit
No Path Found

630/1000  Why? Proof of Concept exploit, Has a fix available, CVSS 8.1
Deserialization of Untrusted Data SNYK-JAVA-COMFASTERXMLJACKSONCORE-561585
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.704
No
Proof of Concept
No Path Found

563/1000  Why? Has a fix available, CVSS 8.1
Deserialization of Untrusted Data SNYK-JAVA-COMFASTERXMLJACKSONCORE-561586
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.704
No
No Known Exploit
No Path Found

563/1000  Why? Has a fix available, CVSS 8.1
Deserialization of Untrusted Data SNYK-JAVA-COMFASTERXMLJACKSONCORE-561587
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.704
No
No Known Exploit
No Path Found

563/1000  Why? Has a fix available, CVSS 8.1
Deserialization of Untrusted Data SNYK-JAVA-COMFASTERXMLJACKSONCORE-564887
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.704
No
No Known Exploit
No Path Found

563/1000  Why? Has a fix available, CVSS 8.1
Deserialization of Untrusted Data SNYK-JAVA-COMFASTERXMLJACKSONCORE-564888
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.704
No
No Known Exploit
No Path Found

563/1000  Why? Has a fix available, CVSS 8.1
Deserialization of Untrusted Data SNYK-JAVA-COMFASTERXMLJACKSONCORE-570625
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.704
No
No Known Exploit
No Path Found

563/1000  Why? Has a fix available, CVSS 8.1
Deserialization of Untrusted Data SNYK-JAVA-COMFASTERXMLJACKSONCORE-572300
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.704
No
No Known Exploit
No Path Found

563/1000  Why? Has a fix available, CVSS 8.1
Deserialization of Untrusted Data SNYK-JAVA-COMFASTERXMLJACKSONCORE-572314
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.704
No
No Known Exploit
No Path Found

563/1000  Why? Has a fix available, CVSS 8.1
Deserialization of Untrusted Data SNYK-JAVA-COMFASTERXMLJACKSONCORE-572316
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.704
No
No Known Exploit
No Path Found

555/1000  Why? Has a fix available, CVSS 8.1
Deserialization of Untrusted Data SNYK-JAVA-COMFASTERXMLJACKSONCORE-6056407
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.704
No
No Known Exploit
No Path Found

780/1000  Why? Proof of Concept exploit, Is reachable, Has a fix available, CVSS 8.1
Deserialization of Untrusted Data SNYK-JAVA-COMFASTERXMLJACKSONCORE-608664
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.704
No
Proof of Concept
Reachable

563/1000  Why? Has a fix available, CVSS 8.1
Deserialization of Untrusted Data SNYK-JAVA-COMFASTERXMLJACKSONCORE-72448
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.704
No
No Known Exploit
No Path Found

563/1000  Why? Has a fix available, CVSS 8.1
Deserialization of Untrusted Data SNYK-JAVA-COMFASTERXMLJACKSONCORE-72449
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.704
No
No Known Exploit
No Path Found

563/1000  Why? Has a fix available, CVSS 8.1
Deserialization of Untrusted Data SNYK-JAVA-COMFASTERXMLJACKSONCORE-72450
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.704
No
No Known Exploit
No Path Found

563/1000  Why? Has a fix available, CVSS 8.1
Deserialization of Untrusted Data SNYK-JAVA-COMFASTERXMLJACKSONCORE-72451
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.704
No
No Known Exploit
No Path Found

563/1000  Why? Has a fix available, CVSS 8.1
Deserialization of Untrusted Data SNYK-JAVA-COMFASTERXMLJACKSONCORE-72882
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.704
No
No Known Exploit
No Path Found

563/1000  Why? Has a fix available, CVSS 8.1
Deserialization of Untrusted Data SNYK-JAVA-COMFASTERXMLJACKSONCORE-72883
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.704
No
No Known Exploit
No Path Found

563/1000  Why? Has a fix available, CVSS 8.1
Deserialization of Untrusted Data SNYK-JAVA-COMFASTERXMLJACKSONCORE-72884
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.704
No
No Known Exploit
No Path Found

525/1000  Why? Has a fix available, CVSS 7.5
Denial of Service (DoS) SNYK-JAVA-COMFASTERXMLJACKSONDATAFORMAT-1047329
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.704
No
No Known Exploit
No Path Found

475/1000  Why? Has a fix available, CVSS 6.5
Denial of Service (DoS) SNYK-JAVA-IONETTY-1020439
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.704
No
No Known Exploit
No Path Found

460/1000  Why? Has a fix available, CVSS 6.2
Information Disclosure SNYK-JAVA-IONETTY-1070799
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.704
No
No Known Exploit
No Path Found

460/1000  Why? Has a fix available, CVSS 6.2
Information Disclosure SNYK-JAVA-IONETTY-1082235
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.704
No
No Known Exploit
No Path Found

595/1000  Why? Mature exploit, Has a fix available, CVSS 5.9
HTTP Request Smuggling SNYK-JAVA-IONETTY-1317097
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.704
No
Mature
No Path Found

475/1000  Why? Has a fix available, CVSS 6.5
HTTP Request Smuggling SNYK-JAVA-IONETTY-2314893
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.704
No
No Known Exploit
No Path Found

550/1000  Why? Proof of Concept exploit, Has a fix available, CVSS 6.5
HTTP Request Smuggling SNYK-JAVA-IONETTY-469234
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.704
No
Proof of Concept
No Path Found

600/1000  Why? Proof of Concept exploit, Has a fix available, CVSS 7.5
HTTP Request Smuggling SNYK-JAVA-IONETTY-543490
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.704
No
Proof of Concept
No Path Found

600/1000  Why? Proof of Concept exploit, Has a fix available, CVSS 7.5
HTTP Request Smuggling SNYK-JAVA-IONETTY-543669
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.704
No
Proof of Concept
No Path Found

475/1000  Why? Has a fix available, CVSS 6.5
Denial of Service (DoS) SNYK-JAVA-IONETTY-5725787
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.704
No
No Known Exploit
No Path Found

600/1000  Why? Proof of Concept exploit, Has a fix available, CVSS 7.5
HTTP Request Smuggling SNYK-JAVA-IONETTY-6056419
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.704
No
Proof of Concept
No Path Found

490/1000  Why? Proof of Concept exploit, Has a fix available, CVSS 5.3
Allocation of Resources Without Limits or Throttling SNYK-JAVA-IONETTY-6483812
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.704
No
Proof of Concept
No Path Found

465/1000  Why? Recently disclosed, Has a fix available, CVSS 5.3
NULL Pointer Dereference SNYK-JAVA-JODATIME-6595834
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.704
No
No Known Exploit
No Path Found

415/1000  Why? Has a fix available, CVSS 5.3
Improper Input Validation SNYK-JAVA-ORGAPACHEHTTPCOMPONENTS-1048058
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.704
No
No Known Exploit
No Path Found

470/1000  Why? Recently disclosed, Has a fix available, CVSS 5.4
Open Redirect SNYK-JAVA-ORGSPRINGFRAMEWORK-6597980

Yes
No Known Exploit
No Path Found

(*) Note that the real score may have changed since the PR was raised.
Vulnerabilities that could not be fixed

Upgrade:

Could not upgrade<EMAIL_ADDRESS>to<EMAIL_ADDRESS>Reason could not apply upgrade, dependency is managed externally ; Location: https://maven-central.storage-download.googleapis.com/maven2/org/springframework/boot/spring-boot-dependencies/2.0.4.RELEASE/spring-boot-dependencies-2.0.4.RELEASE.pom
Could not upgrade<EMAIL_ADDRESS>to<EMAIL_ADDRESS>Reason could not apply upgrade, dependency is managed externally ; Location: https://maven-central.storage-download.googleapis.com/maven2/org/springframework/boot/spring-boot-dependencies/2.0.4.RELEASE/spring-boot-dependencies-2.0.4.RELEASE.pom

Check the changes in this PR to ensure they won't cause issues with your project.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.
For more information:
🧐 View latest project report
🛠 Adjust project settings
📚 Read more about Snyk's upgrade and patch logic

Learn how to fix vulnerabilities with free interactive lessons:
🦉 Directory Traversal
🦉 Deserialization of Untrusted Data
🦉 XML External Entity (XXE) Injection
🦉 More lessons are available in Snyk Learn

Checkmarx One – Scan Summary & Details – c7bf01d8-ecea-4574-bca9-5b1f8d98cb65
New Issues

Severity
Issue
Source File / Package
Checkmarx Insight

CVE-2023-34034
Maven-org.springframework.security:spring-security-web-5.0.7.RELEASE
Vulnerable Package

CVE-2023-34034
Maven-org.springframework.security:spring-security-config-5.0.7.RELEASE
Vulnerable Package

CVE-2023-52428
Maven-com.nimbusds:nimbus-jose-jwt-9.8.1
Vulnerable Package

CVE-2023-6481
Maven-ch.qos.logback:logback-core-1.3.5
Vulnerable Package

CVE-2023-6481
Maven-ch.qos.logback:logback-core-1.2.9
Vulnerable Package

CVE-2023-6481
Maven-ch.qos.logback:logback-core-1.2.3
Vulnerable Package

CVE-2023-6481
Maven-ch.qos.logback:logback-core-1.2.11
Vulnerable Package

CVE-2023-6481
Maven-ch.qos.logback:logback-core-1.1.11
Vulnerable Package

CVE-2024-22243
Maven-org.springframework:spring-web-5.0.8.RELEASE
Vulnerable Package

CVE-2024-22257
Maven-org.springframework.security:spring-security-core-5.0.7.RELEASE
Vulnerable Package

CVE-2024-22259
Maven-org.springframework:spring-web-5.0.8.RELEASE
Vulnerable Package

CVE-2024-23672
Maven-org.apache.tomcat.embed:tomcat-embed-core-8.5.32
Vulnerable Package

CVE-2024-23672
Maven-org.apache.tomcat.embed:tomcat-embed-websocket-8.5.32
Vulnerable Package

CVE-2024-24549
Maven-org.apache.tomcat.embed:tomcat-embed-core-8.5.32
Vulnerable Package

CVE-2024-29180
Npm-webpack-dev-middleware-5.3.0
Vulnerable Package

Missing User Instruction
/Dockerfile: 2
A user should be specified in the dockerfile, otherwise the image will run as root

Missing User Instruction
/dockerfile: 1
A user should be specified in the dockerfile, otherwise the image will run as root

Missing User Instruction
/dockerfile: 1
A user should be specified in the dockerfile, otherwise the image will run as root

Missing User Instruction
/dockerfile: 1
A user should be specified in the dockerfile, otherwise the image will run as root

Passwords And Secrets - Generic Password
/mysql-check.yaml: 10
Query to find passwords and secrets in infrastructure code.

Add Instead of Copy
/Dockerfile: 10
Using ADD to load external installation scripts could lead to an evil web server leveraging this and loading a malicious script.

Add Instead of Copy
/dockerfile: 10
Using ADD to load external installation scripts could lead to an evil web server leveraging this and loading a malicious script.

CVE-2023-33202
Maven-org.bouncycastle:bcprov-jdk15on-1.67
Vulnerable Package

CVE-2023-33202
Maven-org.bouncycastle:bcprov-jdk15on-1.56
Vulnerable Package

CVE-2024-29025
Maven-io.netty:netty-codec-http-4.1.27.Final
Vulnerable Package

CVE-2024-29025
Maven-io.netty:netty-codec-http-4.1.79.Final
Vulnerable Package

CVE-2024-29025
Maven-io.netty:netty-codec-http-4.1.77.Final
Vulnerable Package

CVE-2024-29025
Maven-io.netty:netty-codec-http-4.1.32.Final
Vulnerable Package

Image Version Not Explicit
/dockerfile: 1
Always tag the version of an image explicitly

Image Version Not Explicit
/Dockerfile: 2
Always tag the version of an image explicitly

Pip install Keeping Cached Packages
/dockerfile: 3
When installing packages with pip, the '--no-cache-dir' flag should be set to make Docker images smaller

Pip install Keeping Cached Packages
/dockerfile: 10
When installing packages with pip, the '--no-cache-dir' flag should be set to make Docker images smaller

Pip install Keeping Cached Packages
/Dockerfile: 4
When installing packages with pip, the '--no-cache-dir' flag should be set to make Docker images smaller

Pip install Keeping Cached Packages
/dockerfile: 4
When installing packages with pip, the '--no-cache-dir' flag should be set to make Docker images smaller

RUN Instruction Using 'cd' Instead of WORKDIR
/dockerfile: 4
When using RUN command 'cd' should only be used for full path. For relative path make use of WORKDIR command instead.

Unpinned Actions Full Length Commit SHA
/codeQl.yaml: 84
Pinning an action to a full length commit SHA is currently the only way to use an action as an immutable release. Pinning to a particular SHA helps...

Unpinned Actions Full Length Commit SHA
/codeQl.yaml: 50
Pinning an action to a full length commit SHA is currently the only way to use an action as an immutable release. Pinning to a particular SHA helps...

Unpinned Actions Full Length Commit SHA
/codeQl.yaml: 65
Pinning an action to a full length commit SHA is currently the only way to use an action as an immutable release. Pinning to a particular SHA helps...

Unpinned Package Version in Apk Add
/dockerfile: 3
Package version pinning reduces the range of versions that can be installed, reducing the chances of failure due to unanticipated changes

Unpinned Package Version in Apk Add
/Dockerfile: 4
Package version pinning reduces the range of versions that can be installed, reducing the chances of failure due to unanticipated changes

Unpinned Package Version in Apk Add
/dockerfile: 1
Package version pinning reduces the range of versions that can be installed, reducing the chances of failure due to unanticipated changes

Unpinned Package Version in Apk Add
/dockerfile: 10
Package version pinning reduces the range of versions that can be installed, reducing the chances of failure due to unanticipated changes

Unpinned Package Version in Pip Install
/dockerfile: 4
Package version pinning reduces the range of versions that can be installed, reducing the chances of failure due to unanticipated changes

Unpinned Package Version in Pip Install
/dockerfile: 10
Package version pinning reduces the range of versions that can be installed, reducing the chances of failure due to unanticipated changes

Unpinned Package Version in Pip Install
/dockerfile: 3
Package version pinning reduces the range of versions that can be installed, reducing the chances of failure due to unanticipated changes

Unpinned Package Version in Pip Install
/Dockerfile: 4
Package version pinning reduces the range of versions that can be installed, reducing the chances of failure due to unanticipated changes

Healthcheck Instruction Missing
/Dockerfile: 2
Ensure that HEALTHCHECK is being used. The HEALTHCHECK instruction tells Docker how to test a container to check that it is still working

Healthcheck Instruction Missing
/dockerfile: 1
Ensure that HEALTHCHECK is being used. The HEALTHCHECK instruction tells Docker how to test a container to check that it is still working

Healthcheck Instruction Missing
/dockerfile: 1
Ensure that HEALTHCHECK is being used. The HEALTHCHECK instruction tells Docker how to test a container to check that it is still working

Healthcheck Instruction Missing
/dockerfile: 1
Ensure that HEALTHCHECK is being used. The HEALTHCHECK instruction tells Docker how to test a container to check that it is still working

IAM Access Analyzer Not Enabled
/CloudFormation.yaml: 2
IAM Access Analyzer should be enabled and configured to continuously monitor resource permissions

MAINTAINER Instruction Being Used
/dockerfile: 2
The MAINTAINER instruction sets the Author field of the generated images. The LABEL instruction is a much more flexible version of this and you sho...

MAINTAINER Instruction Being Used
/Dockerfile: 3
The MAINTAINER instruction sets the Author field of the generated images. The LABEL instruction is a much more flexible version of this and you sho...

Multiple RUN, ADD, COPY, Instructions Listed
/dockerfile: 144
Multiple commands (RUN, COPY, ADD) should be grouped in order to reduce the number of layers.

Fixed Issues

Severity
Issue
Source File / Package

CVE-2022-38900
Npm-decode-uri-component-0.2.2


Server problem when Mongo is not running

It is probably related to Promises.
If Mongo is not running and client requests tweets then server never responds back. I see only OPTIONS request in console but never GET.
Client should have its own timeout it is for sure, but server should be smart as well. If Mongo is down then it should return some HTTP error code back with an error message.

what about something like this?
res.status(503).send('Database is down');

Or 'Database is not responding'. Maybe this is a better wording because there could be multiple issues related to connectivity even though database is up and running.

Now I'm trying to get connections errors but, in monk's docs I couldn't find any way to do this, it seems that monk doesn't provide a way to check for connection status.
For the moment I'm handling errors on promises  but, I this is not the best way to do it, because we don't know what kind of errors do we have, it could be connection error or errors in queries.
Nota: This is my first time using monk :)

Are you sure? Because I see that all promises have error handler
https://github.com/Automattic/monk#promises
https://github.com/Automattic/monk#streaming
I'm not a huge expert in monk either. If you believe some other NPM would make more sense and provide an explanation why so, we can totally switch.

Promises works well, I'm handling errors with promises but, the problem is when mongodb is not running, there is a bug related to this on monk's repo: https://github.com/Automattic/monk/issues/24
Maybe we can move to node-mongoskin or Mongoose

@anvk I have some code using node-mongoskin (note: monk is based on it) but, maybe you prefer another NPM package, if so, please let me know before I send a pull request.

@carloscarcamo could you do a little bit of a research on existing Mongo connectors in NPM and compare them. It just interesting to know at least some kind of a justification for picking one but not another.

Nice!


add .editorconfig

Maybe more development-friendly ?

I think this should go here https://github.com/nodejs/node-code-ide-configs

@ZYSzys no its for all configs, just with a poorly worded readme.


Wp.org assets

Currently header & icon assets are missing for plugin https://wordpress.org/plugins/woo-instamojo/ . These assets are important as it helps user to easily identify plugin.
This is how plugin is displayed:
Header image missing

Icon missing under main wordpress plugins

Icon missing under wordpress plugins backend

This pull request will add the necessary images.

Thanks! :-)

@ajitbohra  I just realized there's a typo in the image: "competative". Please fix it.

@ashwch done, check the PR #7 (typo fix)


Fps not working

im using reshade in XXMI, i started it with the 120 fps thing to start it, but it keeps being 60 fps! i tried looking the config and its allright, i dont know what to do!

Do you have V-Sync enabled?
Try disabling it under: Settings > Graphics > Custom > V-Sync.

i set my fps to 360 but i am getting around 120 only


Improve the UX for multiselect

Hi,
I believe that multi-select the way it is shown in the docs is not very intuitive for non power users. Few people know about cmd+click or shift+click. In our product we implemented checkboxes:

Beside adding a visual clue that rows are selectable, it offers the standard UI of "select all" that most people are used to. The issue now is that the user will select rows via the checkboxes but as soon as they click (by mistake or not) on anything, the entire selection is lost. It makes the UX very frustrating:

I was wondering if you would consider more granular options for the multiselect. Basically I would like to avoid that clicking actually select or unselect anything. Clicking should not do anything. But I would like to keep cmd+click and shift+click for power users. Is that something you are willing to consider?

@karellm I think thats a good idea. I can see that sort of behavior being pretty useful. Feel free to create a PR or I can look into it in a couple days.

@karellm do you have any code you could share for how you got the checkboxes to function like that? It's really nice and def a better implementation than the example

@jamesdixon I did something similar in my company's app. If I can squeeze it in, I'll extract the code into an addon.

@buschtoens thank you! much appreciated!

@jamesdixon I cannot publish all the code but can give you a pointer:

The select on each row relies on a simple select component that modifies the selection:

{{input
  type="checkbox"
  checked=row.selected
  click=(action "click")
  doubleClick=(action "click")
}}

import Component from '@ember/component';

export default Component.extend({
  actions: {
    click(event) {
      // NOTE so it does not trigger the click event on the row (which also
      //      manage row selection)
      event.stopPropagation();
    }
  }
})

The select all is slightly more complex:

{{input
  type="checkbox"
  checked=isChecked
  indeterminate=isIndeterminate
  change=(action "toggleSelection")
}}

import { observer } from '@ember/object';
import Component from '@ember/component';

export default Component.extend({
  isChecked: false,
  isIndeterminate: false,

  selectionChanged: observer(
    'table.rows.[]',
    'table.selectedRows.[]',
    function () {
      const rows = this.get('table.rows.length');
      const selectedRows = this.get('table.selectedRows.length');
      this.set('isChecked', (rows === selectedRows) && rows);
      this.set('isIndeterminate', (rows !== selectedRows) && selectedRows);
    }
  ),

  selectAll() {
    this.get('table.rows').setEach('selected', true);
  },

  deselectAll() {
    this.get('table.selectedRows').setEach('selected', false);
  },

  actions: {
    toggleSelection() {
      if (this.get('isChecked')) {
        this.deselectAll();
      }
      else {
        this.selectAll();
      }
    }
  }
})

I hope this helps.

@karellm thank you! This is fantastic. Going to give it a try this week.
@buschtoens is this any different than your implementation?

I'm not using observers, but actions, and have a configurable valuePath as opposed to always watching selected. But other than that, it's pretty much the same.
// light-table/columns/checkbox/component.js
import Column from 'ember-light-table/components/columns/base';
import { computed } from '@ember-decorators/object';
import mapBy from 'ember-awesome-macros/array/map-by';
import layout from './template';
import styles from './styles';

export default class CheckboxColumnComponent extends Column.extend({
  layout,
  styles,
  localClassNames: 'column'
}) {
  values = mapBy('table.rows', 'column.valuePath');

  @computed('values.[]')
  indeterminate = v => v.some((e, i, arr) => i > 0 && e !== arr[i - 1]);

  @computed('values.[]') value = v => v.every(Boolean);
}

{{!-- light-table/columns/checkbox/template.hbs --}}
{{one-way-checkbox value
  local-class="checkbox"
  update=(action (get tableActions column.actionName) null column)
  disabled=(get row columnd.disabledPath)
  indeterminate=indeterminate
}}

{{!-- light-table/cells/checkbox/template.hbs --}}
{{one-way-checkbox value
  local-class="checkbox"
  update=(action (get tableActions column.actionName) row column)
  disabled=(get row columnd.disabledPath)
}}

{{one-way-checkbox}} is deprecated, but swapping it with a native <input> shouldn't be much of a problem.


Update code to support v0.65.0

Believe Jan 16th target date for new testnet launch. After launch do:

Update bufbuild & wasm crate npm deps. Usually easiest to do pnpm up -r --latest. However, we have that vitest dep issue: https://github.com/penumbra-zone/web/issues/271 that we should avoid for this ticket.
Fix breaking changes. There are a few new view services changes.
Update Manifest version (probably should be v3.2.0): https://github.com/penumbra-zone/web/blob/5c8c369dbdad31e0258b375fd090429d011d05aa/apps/extension/public/manifest.json#L4
Merge
Make new release on this repo (same as manifest version)
New tag+release triggers approval for chrome extension submission.

It might be good to start making changes to support 0.65 in advance, in order to enable building key features like an approval dialog (which needs the new tx plan definitions). Going forward we won't be making breaking proto changes so this won't be a recurring issue, but in this case we could consider changing the extension/frontend to target preview a week in advance or so.
Maybe we flip a switch to aim the deployment at app.testnet-preview.penumbra.zone and don't publish an extension update?

Meeting discussion: Can start earlier and cause week of breaking changes in order to get ahead on this


Allow adding a unique suffix to segment name during batch ingestion

Currently, if a user creates segments from the batch data that

contains either no time column or
contains same time for all the records (e.g. Current data in yyyy-MM-dd format)

the generated segments have same names. This creates issue because the segments end up replacing each other even when the push type is set to APPEND
The solution is to either add a current timestamp column in the table or provide a config in SegmentNameGenerationSpec to append currentTimestamp, uuid or something else at the end of the segment name

InputFileSegmentNameGenerator handles only one scenario whereby it can create a unique segment per file. But if file names are same in subsequent runs of the Generation job, it can still create issues.

This makes sense, I think we can add a config to append creation time or random sequence_id to make the segment name unique.


Right View of Binary Tree in JAVA

Is your feature request related to a problem? Please describe.
Given a Binary Tree, find Right view of it. Right view of a Binary Tree is set of nodes visible when tree is viewed from right side.
Right view of following tree is:

Output: 10 30 60
Additional context
I want to work on this issue. Please assign this issue to me @Kumar-laxmi

refer #715


Add file extension as attribute

Please add the file extension as an attribute. I would like to style the entry depending on the extension.

Hi, @tim-hilde :)
I think it is better that adds an ext attribute if you want to set styles only. If you are OK, I'll implement it.

Yes, that looks good. Thank you!

I have fixed it. Please wait for the next release.

/* It works */
.another-quick-switcher__item[extension="png"] {
  background-color: red;
}

@tim-hilde
Released in v8.4.0 🚀


Filtering after searching

When looking at either list view or map view the user should be able to adjust the types of things they're looking at and/or be able to search by name.

Based on the photo in https://github.com/codeforokc/school-finder/issues/66


Update Links “tiktok-46”

Automatically generated by Netlify CMS

👷 Deploy Preview for distracted-hoover-7b89cc processing.
🔨 Explore the source changes: ced1ab388cf9e85d27a3ef4ac37a8f6d18866f7c
🔍 Inspect the deploy log: https://app.netlify.com/sites/distracted-hoover-7b89cc/deploys/614dc7fcca1aac000879e0cc


Add links to datasets for benchmarking?

David Haussler suggested including links to datasets that can be used for benchmarking in this repo, which I think is a good idea.  I suggest we might want 2 categories of data for each genome - high-confidence vcf/bed files and raw data files.  Does that make sense?
Here are the genomes I'll propose as a start:

NA12878

high-confidence vcf/bed from GIAB, Platinum Genomes, and RTG; maybe SVs from NIST, MetaSV, Bashir
fastq from Illumina WGS, WES, Proton WES, others?

NA12877 from Platinum Genomes?
Venter genome from Bina?
Baylor genome?
GIAB PGP trios when calls are available next year

Just to follow up on this, @pkrusche  had suggested creating a simple human and machine readable file that gives information about truth sets and their locations.  I'm thinking the following columns might be useful, and interested in other's suggestions:

Coriell_DNA_ID (e.g., NA12878)
NCBI_Biosample (e.g., SAMN03492678)
NIST_ID (e.g., HG001)
NIST_RM (e.g., 8398)
VCF_link (e.g., ftp://ftp-trace.ncbi.nlm.nih.gov/giab/ftp/release/NA12878_HG001/NISTv2.19/NISTIntegratedCalls_14datasets_131103_allcall_UGHapMerge_HetHomVarPASS_VQSRv2.19_2mindatasets_5minYesNoRatio_all_nouncert_excludesimplerep_excludesegdups_excludedecoy_excludeRepSeqSTRs_noCNVs.vcf.gz)
BED_link (e.g., ftp://ftp-trace.ncbi.nlm.nih.gov/giab/ftp/release/NA12878_HG001/NISTv2.19/union13callableMQonlymerged_addcert_nouncert_excludesimplerep_excludesegdups_excludedecoy_excludeRepSeqSTRs_noCNVs_v2.19_2mindatasets_5minYesNoRatio.bed.gz)
README_link (e.g., ftp://ftp-trace.ncbi.nlm.nih.gov/giab/ftp/release/NA12878_HG001/NISTv2.19/README.NIST.v2.19.txt)
Call_source (e.g., NIST/GIAB)

Does a tab-delimited file seem best to everyone for this?

Maybe also a version number?  Otherwise looks good!

PR #21 should address this.

@marghoob - Would you be interested in adding a description of the HuRef callset you made to our new list of benchmarking calls at https://github.com/ga4gh/benchmarking-tools/tree/master/resources/high-confidence-sets?

High-confidence sets added to  https://github.com/ga4gh/benchmarking-tools/tree/master/resources/high-confidence-sets


Scroll Screenshot Capture

Description of the new feature / enhancement
All users to capture screens while scrolling down on window
Scenario when this would be used?
When taking a screenshot of large window which has a scroll
Supporting information
No response

Stop

Tracked via #3388


Simple way to add borders to images

Describe the feature you'd like
I would like a quick way (a single button or dropdown menu) that allows us to add a border (or shadow) to embedded an image.
for example in word I can easily turn this:

into this:

which is much easier to view
Describe the benefits this would bring to existing BookStack users
We use bookstack a lot for sharing how to guides these often use a lot of screenshots from windows.
These screenshots often contain a lot of white that blurs into the white background of the page. A border or shadow defines where the edges of the picture are and can help distinguish between multiple pictures in a row.
Can the goal of this request already be achieved via other means?
It is possible to edit each image and manually add a border but this is very time consuming if there are a lot of images.
Adding a single cell table and putting the image in that works a little bit. The problem is the cell stretches the entire width of the page which is good if the image matches the page width but is bad otherwise.
Have you searched for an existing open/closed issue?

[X] I have searched for existing issues and none cover my fundamental request

How long have you been using BookStack?
1 to 5 years
Additional context
No response

Wow thanks, for the super quick reply and all the work you put in to this awesome product.
The alt text version for specific images would be my preference.
Thank you.

@lmartin-ah Okay, add this to your "Custom HTML Head Content" customization setting:
<style>
  .page-content img[alt*="bordered"] {
    box-shadow: 2px 2px 6px 3px rgba(0, 0, 0, 0.5);
  }
</style>

Then, just add bordered (case sensitive) to the alt text of an image, via clicking on the image then clicking the image icon to open the image options menu:

That image will then gain a border.
I've tried to emulate a similar kind of drop-shadow as per your example screenshots.

Wow, awesome solution. Thank you so much.

there's been little additional request for this in the last 8 years

Adding blur around images in a similar way discussed here was the very first thing I did after installing BookStack for the first time.
BookStack is for writing documentation which often involves displaying screenshots. Most screenshots blend into the page without adding some border like decoration around them.
I think BookStack should support (optionally) such a feature somehow, for both light and dark mode themes.


Build error on Ubuntu Trusty

java.lang.UnsupportedClassVersionError: com/gorylenko/GitPropertiesPlugin : Unsupported major.minor version 52.0

I was trying to build the code with command sudo ./gradlew build, but I got error with the message above.

I found the solution, it require JDK 1.8

Indeed, Sagan requires JDK8 minimum.


A+ Courses project template should not appear in new module creation

Related to fixed issue #867.
Ideally, A+ Courses project should only appear when creating a new project, not when creating a new module.
Based on our previous investigation, it seems that IntelliJ does not, however, support such distinction.
As a a workaround (kind of) we could make it so that it is not the choice selected by default. That could make it a bit less confusing for the students.

I opened a community question https://intellij-support.jetbrains.com/hc/en-us/community/posts/13867414023058-Custom-ModuleBuilder-only-for-new-projects-not-modules for some advice from the JetBrains team

The builder is not shown if the action launching the dialog contains "Module"


Configurator: add a unit test for the write_file() func + fixes in the CI

@michelececcacci

I really like this commit. Just a minor thing. Why are we making configurator be triggered by just paths?

LGTM


[Feature Request] Create ARM64 build for other OS

Right now, it seems that there are only ARM64 build for macOS. It would be helpful if you could build ARM64 binaries for other operating systems (like Linux) for this project as well, so that people working on ARM devices wouldn't have to compile this awesome project from source.

Sure. This week priority is to get the remaining critical features done.
Next week I will be focusing on setting up binaries across various package distributions

are there any news here? will there be a build for ubuntu arm ? (aarch64)

Awesome project :+1:
My daily driver is now a Pi5 so a deb ARM64 of this would be sweet! If I knew how to do a debian/ubuntu arm build I would PR it but I don't...so I wont  :(

Would appreciate this as well, using Asahi Linux which needs a aarch64 build.

I wanted this too and was having trouble getting it to work locally so I set up this branch with a POC circleci pipeline to make ARM64 linux builds (the github arm64 runner is in private beta still). You can find the artifacts here. Fair warning, I've only tested the deb

rpm build confirmed working too @brad

Is there any arm64 artifact for Debian, flatpak or AppImage? Any information when more arm64 Linux builds will officially be available? Thanks

Hi Bruno team
It would be nice to have native Windows arm64 builds.
I have one of those Snapdragon X Elite laptops and can run a test build if you want to check if it works before public release.

Hi Bruno team,
Can we get a arm64 build for Windows. Let me know if I can help?

+1 vote

Is there any arm64 artifact for Debian, flatpak or AppImage? Any information when more arm64 Linux builds will officially be available? Thanks

+1 for arm64 for linux.   I would like to run in ubuntu VM on apple silicon.

Running Asahi Linux an ARM flatpak build would be great!

I have a Surface Laptop with ARM CPU. Can we have an installer compatible with Windows ARM64 please? @helloanoop

+1 for arm64 Linux.

We are focusing on this during our December sprint. @anusree-bruno will share updates here in the coming days.

+1 for the Linux arm64 version.
I for example work on a company supplied Macbook but since I cannot stand MacOS, I develop in a graphical Linux VM.
(so I couldn't even try it out)


Automatic Table Fields Cause "INVALID_VALUE_FOR_COLUMN" Error

When using an auto field such as "Created Time", there is an error that happens in console which says:
{type: "INVALID_VALUE_FOR_COLUMN", message: "Field "date" cannot accept a value because the field is computed"}
Oddly, this happens sporadically, and sometimes the submission goes through without error.

Sorry this is like a year over due. I haven't kept up with this project much recently. I have been thinking about a new version though, so I'll look into this when the time comes.