A PodSecurity violate error is reported in subctl verify (Submariner v0.15.0-m1)

I deployed Submariner on two OCP clusters (4.11.5) on GCP  using subctl (v0.15.0-m1), check [1] for version details,
the PodSecurity violate error [2] is reported when running subctl verify.
Attached below [3] the subctl gather file.
[1]
$ oc version
Client Version: 4.12.0-ec.5
Kustomize Version: v4.5.7
Server Version: 4.11.5
Kubernetes Version: v1.24.0+3882f8f
$ subctl version
subctl version: v0.15.0-m1
$
[2]
` subctl verify --context cluster-a --tocontext cluster-b --only service-discovery,connectivity
Performing the following verifications: service-discovery, connectivity
Running Suite: Submariner E2E suite
Random Seed:<PHONE_NUMBER>
Will run 40 of 44 specs
W0105 09:43:31.042769  732594 warnings.go:70] would violate PodSecurity "restricted:latest": allowPrivilegeEscalation != false (container "nginx-demo" must set securityContext.allowPrivilegeEscalation=false), unrestricted capabilities (container "nginx-demo" must set securityContext.capabilities.drop=["ALL"]), runAsNonRoot != true (pod or container "nginx-demo" must set securityContext.runAsNonRoot=true), seccompProfile (pod or container "nginx-demo" must set securityContext.seccompProfile.type to "RuntimeDefault" or "Localhost")
W0105 09:43:42.255890  732594 warnings.go:70] would violate PodSecurity "restricted:latest": allowPrivilegeEscalation != false (container "netshoot" must set securityContext.allowPrivilegeEscalation=false), unrestricted capabilities (container "netshoot" must set securityContext.capabilities.drop=["ALL"]), runAsNonRoot != true (pod or container "netshoot" must set securityContext.runAsNonRoot=true), seccompProfile (pod or container "netshoot" must set securityContext.seccompProfile.type to "RuntimeDefault" or "Localhost")
•W0105 09:44:01.714758  732594 warnings.go:70] would violate PodSecurity "restricted:latest": allowPrivilegeEscalation != false (container "nginx-demo" must set securityContext.allowPrivilegeEscalation=false), unrestricted capabilities (container "nginx-demo" must set securityContext.capabilities.drop=["ALL"]), runAsNonRoot != true (pod or container "nginx-demo" must set securityContext.runAsNonRoot=true), seccompProfile (pod or container "nginx-demo" must set securityContext.seccompProfile.type to "RuntimeDefault" or "Localhost")
W0105 09:44:07.399297  732594 warnings.go:70] would violate PodSecurity "restricted:latest": allowPrivilegeEscalation != false (container "nginx-demo" must set securityContext.allowPrivilegeEscalation=false), unrestricted capabilities (container "nginx-demo" must set securityContext.capabilities.drop=["ALL"]), runAsNonRoot != true (pod or container "nginx-demo" must set securityContext.runAsNonRoot=true), seccompProfile (pod or container "nginx-demo" must set securityContext.seccompProfile.type to "RuntimeDefault" or "Localhost")
W0105 09:44:18.660389  732594 warnings.go:70] would violate PodSecurity "restricted:latest": allowPrivilegeEscalation != false (container "netshoot" must set securityContext.allowPrivilegeEscalation=false), unrestricted capabilities (container "netshoot" must set securityContext.capabilities.drop=["ALL"]), runAsNonRoot != true (pod or container "netshoot" must set securityContext.runAsNonRoot=true), seccompProfile (pod or container "netshoot" must set securityContext.seccompProfile.type to "RuntimeDefault" or "Localhost")
•W0105 09:44:32.279914  732594 warnings.go:70] would violate PodSecurity "restricted:latest": allowPrivilegeEscalation != false (container "nginx-demo" must set securityContext.allowPrivilegeEscalation=false), unrestricted capabilities (container "nginx-demo" must set securityContext.capabilities.drop=["ALL"]), runAsNonRoot != true (pod or container "nginx-demo" must set securityContext.runAsNonRoot=true), seccompProfile (pod or container "nginx-demo" must set securityContext.seccompProfile.type to "RuntimeDefault" or "Localhost")
W0105 09:44:38.015424  732594 warnings.go:70] would violate PodSecurity "restricted:latest": allowPrivilegeEscalation != false (container "netshoot" must set securityContext.allowPrivilegeEscalation=false), unrestricted capabilities (container "netshoot" must set securityContext.capabilities.drop=["ALL"]), runAsNonRoot != true (pod or container "netshoot" must set securityContext.runAsNonRoot=true), seccompProfile (pod or container "netshoot" must set securityContext.seccompProfile.type to "RuntimeDefault" or "Localhost")
•W0105 09:44:58.699433  732594 warnings.go:70] would violate PodSecurity "restricted:latest": allowPrivilegeEscalation != false (container "nginx-demo" must set securityContext.allowPrivilegeEscalation=false), unrestricted capabilities (container "nginx-demo" must set securityContext.capabilities.drop=["ALL"]), runAsNonRoot != true (pod or container "nginx-demo" must set securityContext.runAsNonRoot=true), seccompProfile (pod or container "nginx-demo" must set securityContext.seccompProfile.type to "RuntimeDefault" or "Localhost")
W0105 09:45:09.913430  732594 warnings.go:70] would violate PodSecurity "restricted:latest": allowPrivilegeEscalation != false (container "netshoot" must set securityContext.allowPrivilegeEscalation=false), unrestricted capabilities (container "netshoot" must set securityContext.capabilities.drop=["ALL"]), runAsNonRoot != true (pod or container "netshoot" must set securityContext.runAsNonRoot=true), seccompProfile (pod or container "netshoot" must set securityContext.seccompProfile.type to "RuntimeDefault" or "Localhost")
W0105 09:45:19.740307  732594 warnings.go:70] would violate PodSecurity "restricted:latest": allowPrivilegeEscalation != false (container "nginx-demo" must set securityContext.allowPrivilegeEscalation=false), unrestricted capabilities (container "nginx-demo" must set securityContext.capabilities.drop=["ALL"]), runAsNonRoot != true (pod or container "nginx-demo" must set securityContext.runAsNonRoot=true), seccompProfile (pod or container "nginx-demo" must set securityContext.seccompProfile.type to "RuntimeDefault" or "Localhost")
W0105 09:45:29.777402  732594 warnings.go:70] would violate PodSecurity "restricted:latest": allowPrivilegeEscalation != false (container "nginx-demo" must set securityContext.allowPrivilegeEscalation=false), unrestricted capabilities (container "nginx-demo" must set securityContext.capabilities.drop=["ALL"]), runAsNonRoot != true (pod or container "nginx-demo" must set securityContext.runAsNonRoot=true), seccompProfile (pod or container "nginx-d
emo" must set securityContext.seccompProfile.type to "RuntimeDefault" or "Localhost")`
[3]
submariner-20230105075616.zip

@tpantelis can you take a look at this?

@yboaron Do you still have a setup that reproduces the issue?

@yboaron Do you still have a setup that reproduces the issue?

I’ve got one, I can send you the kubeconfigs.

These warnings are emanating from the service discovery tests where we create various nginx and netshoot deployments/pods.  These are created in the generated E2E test namespace where we set the pod-security.kubernetes.io/enforce=privileged label which should avoid these warnings in OCP 4.11.x.
A little background...
Originally we saw these warnings with OCP 4.11 and was addressed by this PR which added the pod-security.kubernetes.io/enforce=privileged label.
Then OCP 4.12 came along which added default functionality to attempt to figure out what the pod-security mode should be for a namespace (from SCC's etc) and override/ignore an explicit setting. It defaulted to restricted whereas in 4.11 it defaulted to warn.  This PR addressed that  by specifically set the SecurityContext for nettest pod images.
We then saw another issue with OCP 4.12 which was addressed by [this PR](Disable OCP namespace pod security label sync) to disable the pod-security label syncing via another label (security.openshift.io/scc.podSecurityLabelSync`).
So the question is why is this now popping up again with 4.11... Perhaps something changed in a later 4.11 release such that now it's now ignoring our pod-security label setting, doing the label syncing and setting it to warn. Note that we don't see the warning with the connectivity tests b/c those pods set a SecurityContext.  Similarly setting the SecurityContext for the service discovery test pods alleviates the warnings.

Note that @yboaron’s tests ran on 4.11, but my environment was running 4.12.

@manosnoam @MaxBab are you seeing any of this in your recent downstream testing with OCP 4.11/4.12?

Note that @yboaron’s tests ran on 4.11, but my environment was running 4.12.

Hmm... I thought yours was 4.11 as well.  With 4.12 the security.openshift.io/scc.podSecurityLabelSync label disables the syncing so it keeps our privileged setting. But by emitting the warning it's acting as though the level is warn, at least according to how it's documented.  Either way they're only warnings and doesn't affect functionality. And as I mentioned setting the SecurityContext for the service discovery test pods does alleviate the warnings although, based on the OCP docs and what we're currently doing, we shouldn't need to do that even though it's good to reduce privileges if we don't need them.

@manosnoam @MaxBab are you seeing any of this in your recent downstream testing with OCP 4.11/4.12?

With Submariner 0.14 on OCP 4.11 and 4.12 we haven't seen podSecurity issues recently, but we did not test Submariner 0.15 yet...

With Submariner 0.14 on OCP 4.11 and 4.12 we haven't seen podSecurity issues recently, but we did not test Submariner 0.15 yet...

We've only had one sprint with 0.15 and there weren't any changes in this area.

Correction on 0.14 d/s tests - I do see podSecurity issue, but just a warning when creating the klusterlet for ACM managed cluster - I don't see it when running subctl E2E.
$ oc  apply -f "./acm-osp-nmanos-b2-import.yaml"
namespace/open-cluster-management-agent created
serviceaccount/klusterlet created
clusterrole.rbac.authorization.k8s.io/klusterlet unchanged
clusterrole.rbac.authorization.k8s.io/klusterlet-bootstrap-kubeconfig unchanged
clusterrole.rbac.authorization.k8s.io/open-cluster-management:klusterlet-admin-aggregate-clusterrole unchanged
clusterrolebinding.rbac.authorization.k8s.io/klusterlet unchanged
Warning: would violate PodSecurity "restricted:v1.24": allowPrivilegeEscalation != false
(container "klusterlet" must set securityContext.allowPrivilegeEscalation=false),
unrestricted capabilities
(container "klusterlet" must set securityContext.capabilities.drop=["ALL"]),
runAsNonRoot != true (pod or container "klusterlet" must set securityContext.runAsNonRoot=true), seccompProfile
(pod or container "klusterlet" must set securityContext.seccompProfile.type to "RuntimeDefault" or "Localhost")

deployment.apps/klusterlet created
secret/bootstrap-hub-kubeconfig created
klusterlet.operator.open-cluster-management.io/klusterlet created

@tpantelis noted that we don't see this error on 0.14.0, so removed the backport label.


[Bug Fix]: CMS association not detected when API form is rendered

Addresses: https://github.com/restarone/violet_rails/issues/1321
DEMO
https://user-images.githubusercontent.com/25191509/216947478-5b87efcf-f047-4e44-aca4-63a30ced1fa0.mov

@donrestarone I have added further test cases. We proceed with this PR.


Check themes for accessibility before making them available for download

Some themes like Tomorrow Bright, Monokai and others produce color combinations which are hard/impossible to distinguish things/text on terminals. Try it yourself, choose Tomorrow Bright and open htop which is a widely used system monitor kind of cli application, the portion where cpu usage is shown like -
1  [                               0.0%]

The 0.0% part and similarly other texts won't be visible to you because the background is black and text color is also black there. Several themes make them dark grey on black which is also harder to distinguish. I have tried all themes and there were several which were acting strange with all kinds of cli applications. So I propose to try the themes in atleast these cli applications before releasing them - ranger htop top vim nano.

your right
pull request are wellcome :)

Does this really have to be performed manually? I think it should suffice to analyse once which colours are used for adjoint elements of the mentioned CLI applications, e.g. htop uses COLOR_1 for the percentage values in the CPU-& RAM-usage bars on a BACKGROUND_COLOR background.
Having identified all such pairs of colours, we can assess a theme's accessibility/legibility by calculating the difference in terms of hue/brightness for each pair. A small difference will indicate that some CLI application uses the colours of the respective pair for neighbouring elements.
It's just an idea in case someone wants to tackle this issue using a semi-automated approach.

Well, you could invert the install process, as in by selecting the theme, it'd only change the current settings and then ask whether that theme should be kept or not. At this point it'd be the easiest to do it for each terminal-type individually, as not all terminals support changing current settings immediately.


feat: add agent proxy

What type of PR is this?

/kind feature
What this PR does / why we need it:
add kc-proxy to resolve network issues in edge scenarios.
Which issue(s) this PR fixes:

Fixes #
Special notes for reviewers:
1.kc-proxy server for port forwarding
2.fix: synchronization update for proxy
  metadata add ProxyServer、ProxyAPIServer、ProxySSH
  nats server cert san add proxy.kubeclipper.io
  mq and static server address replace by proxy if specify.
  update address in kubeconfig.
3.kcctl proxy cmd for deploy proxy

Does this PR introduced a user-facing change?

None

Additional documentation, usage docs, etc.:

Details docs

Codecov Report

Merging #125 (9d57d46) into master (6e3615b) will increase coverage by 0.03%.
The diff coverage is 17.52%.

@@            Coverage Diff             @@
##           master     #125      +/-   ##
==========================================
+ Coverage   11.78%   11.82%   +0.03%
==========================================
  Files          98      100       +2
  Lines       15108    15204      +96
==========================================
+ Hits         1781     1798      +17
- Misses      13092    13171      +79
  Partials      235      235

Impacted Files
Coverage Δ

pkg/cli/deploy/deploy.go
16.28% <0.00%> (ø)

pkg/proxy/proxy.go
0.00% <0.00%> (ø)

pkg/proxy/util.go
100.00% <100.00%> (ø)

/assign @x893675

/milestone v1.2.0

/lgtm

Under the current scheme, we can independently deploy kc-agent for nodes with an unconnected network, and only need to deploy kc-proxy on a node with an unobstructed network, so that kc-proxy can proxy kc-agent with an unconnected network, so that it can communicate with kc-server. kc-server and kc-agent are imperceptible.

/lgtm

/cc @x893675

/lgtm
/approve


Implement CoW reflink on Linux

Detailed description
Do a copy-on-write (CoW) filesystem-aware reflink-copying when item_rep is identical to the source content (item_rep.item). This is like a hardlink, except the two files are detached when either of them are changed. So you get the deduplication benefit, without the risk of accidentally changing a source file when modifying an output file. This assumes that item_rep.item.filename is a file on the disk and that it’s a source file. Fallback to a hardlink or full copy, as per the old implementation.
Supports Btrfs and XFS on Linux 4.5+.
Requires the Linux-only reflink gem. Feature is not enabled by default, but kicks in when this gem is installed.
To do?

[ ] Document optional gem in installation instructions.
[ ] Existing tests cover the basic functionality. Adding tests to inspect the filesystem to determine whether a file extent is a hardlink, reflink, or regular file would be nice. However, this is a huge task and requires more specific test OS environments.

Will open another pull with additional support for macOS.


[BUG] duplicate classes issue after add store dependency that hasn't solved after excluding duplicate dependencies

Describe the bug
I have a project boosted by bunch of common dependencies. After adding a store (implementation 'com.dropbox.mobile.store:store4:4.0.0-alpha07') I can't build the app with error:
Duplicate class kotlinx.coroutines.AbstractCoroutine found in modules kotlinx-coroutines-core-1.3.4.jar (org.jetbrains.kotlinx:kotlinx-coroutines-core:1.3.4) and kotlinx-coroutines-core-jvm-1.3.9.jar (org.jetbrains.kotlinx:kotlinx-coroutines-core-jvm:1.3.9)
Here is dependency tree ((*) or () indicates duplicate libs):

+--- com.dropbox.mobile.store:store4:4.0.0-alpha07
|    +--- org.jetbrains.kotlin:kotlin-stdlib-jdk8:1.4.0
|    |    +--- org.jetbrains.kotlin:kotlin-stdlib:1.4.0 ()
|    |    --- org.jetbrains.kotlin:kotlin-stdlib-jdk7:1.4.0 ()
|    +--- com.dropbox.mobile.store:cache4:4.0.0-alpha07
|    |    --- org.jetbrains.kotlin:kotlin-stdlib-jdk8:1.4.0 ()
|    +--- com.dropbox.mobile.store:multicast:4.0.0-alpha07
|    |    +--- org.jetbrains.kotlin:kotlin-stdlib-jdk8:1.4.0 ()
|    |    --- org.jetbrains.kotlinx:kotlinx-coroutines-core-jvm:1.3.9
|    |         +--- org.jetbrains.kotlin:kotlin-stdlib:1.4.0 ()
|    |         --- org.jetbrains.kotlin:kotlin-stdlib-common:1.4.0
|    --- org.jetbrains.kotlinx:kotlinx-coroutines-core-jvm:1.3.9 ()

and here is an attempt to remove duplicates:

implementation('com.dropbox.mobile.store:store4:4.0.0-alpha07') {
    exclude group: 'org.jetbrains.kotlinx', module: 'kotlinx-coroutines-core'
    exclude group: 'org.jetbrains.kotlin', module: 'kotlin-stdlib'
    exclude group: 'org.jetbrains.kotlin', module: 'kotlin-stdlib-jdk7'
    exclude group: 'org.jetbrains.kotlin', module: 'kotlin-stdlib-jdk8'
    exclude group: 'org.jetbrains.kotlinx', module: 'kotlinx-coroutines-core-jvm'
}

but after launch the app crashes and reports variety of NoSuchMethodError
I plan to try this lib from scratch next week and isolate the issue, but had a thought it may be worth to share it with you.
To Reproduce
Steps to reproduce the behavior:

Check the app https://github.com/Gelassen/government-rus or use dependencies from it in new project (deps.gradle and app/build.gradle)
Add dropbox/store implementation 'com.dropbox.mobile.store:store4:4.0.0-alpha07'
Run the app
See error

Expected behavior
App runs without crash
Smartphone:

Device: Nexus 5
OS: Android 6

Thanks, it resolved issue.

Updating all of your project's coroutine dependencies to 1.3.9 solved this for me.

didn't work for me

@NahroTo How to update the entire project coroutine dependency to  1.3.9?


Update GRPC to latest release

@beorn7 @codesome
In the latest release, we had to rollback the GRPC release.
Can we now update GRPC for v1.31.0? (see #7621)
It is annoying not to update it because in the last month some dependencies depend on newer releases.

And looks like it is going to take some time https://github.com/etcd-io/etcd/issues/12124#issuecomment-674368288, but I see some push there. Upgrading gRPC in Prometheus would entirely block Cortex from vendoring Prometheus :/
If the dependencies in Prometheus which depend on latest gRPC are not critical to be upgraded or not blocking any work, we could consider waiting for it to be upgraded in etcd.

This comment in go.mod led me to this issue, but this issue can almost certainly be closed and that comment removed since I see many newer versions of grpc in go.sum


Toothpick rule missing in 2.X

Hi,
When we upgraded to Toothpick 2.0.0 we got the following error. Has this class been depreciated?
Unresolved reference: ToothPickRule

great thanks
wasn't sure if i needed a new dependency
On Wed, Feb 6, 2019 at 2:26 AM Stéphane Nicolas<EMAIL_ADDRESS>wrote:

[image: image]
https://user-images.githubusercontent.com/1832925/52283392-3d3e7200-2917-11e9-97b1-946521862be9.png
In any GH project, you can use the find file button to look for a class.
—
You are receiving this because you authored the thread.
Reply to this email directly, view it on GitHub
https://github.com/stephanenicolas/toothpick/issues/322#issuecomment-460679220,
or mute the thread
https://github.com/notifications/unsubscribe-auth/AE9j0grIhqXNhzD9RJ4Y3AI8zmGhdiLuks5vKaKLgaJpZM4aiftx
.

You can just use the junit 4 one, it will use tp-testing transitively..


Small Documentation Update

Small change in README.md to correct the script name

Thanks @glow-mdsol, merged ✨


Script to set up new project clone

Changes
Adds a bash script that can be used to copy config files from one instance of the project to another.
Requirements
If you could run the original setup bash script, you should be able to run this.
PR Dependencies
Depends on: None
Merged Branches and Other Dependencies
Merged branch(es): None
Other dependencies: None
Preview
N/A
Testing
Manual: Read through the script then try running it.

@rlnsy would it make sense to add this to some sort of a dev readme so future devs also know about this useful resource?

Good idea.


tpl: Add "contains" operator in where tpl function

Add "contains" operator in "where" tpl function to compare whether the given field value contains match value or not, in fact which does the similar logic as "in" operator but exchanged the comparsion
objects. This is useful when filter pages collection under nested subdir.
See #4131

 Thank you for your submission, we really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.Ryan Fan seems not to be a GitHub user. You need a GitHub account to be able to sign the CLA. If you have already a GitHub account, please add the email address used for this commit to your account.You have signed the CLA already but the status is still pending? Let us recheck it.

Test Case:

Organize content files with nested subdir

- content/
   - blog/
       - program/
          - golang/
          - python/
       - cloud/
         ...

make sure _index.[language code].md files created in each subdir including root section

- content/
   - blog/
        - _index.en.md
        - _index.zh.md
        - program/
            - _index.en.md
            - _index.zh.md
            - golang/
                   - _index.en.md
                   - _index.zh.md
                   golang-pitfalls.md
                   golang-test.md
            - python/
       - cloud/
         ...

create layouts/_default/section.html as below:

{{ $currentDir := .Dir }}
{{ $paginator := .Paginate ( where (where .Site.AllPages "Kind" "page") "Path" "contains" $currentDir ) }}
{{ range $paginator.Pages }}
     {{ .Title }}
{{ end }}

Tested with below urls to see if it list out all nested pages under given path/dir:

http://localhost/blog/
http://localhost/blog/program
http://localhost/blog/program/golang/
...

@rfancn, please add tests to where_test.go.

@moorereason Fixed the previous commit error, and put "contains" operator logic in one block, also added tests again following cases:

string contains substring
slice contains another slice with the same type:

int8,int16,int32,int64
string
timeType

interface{} object contains corresponding value


Question about the project

I am looking for a asynchronous proxy server, that will allow me to tunnel requests over a message queue to a server that is behind a firewall. I do not want to allow incoming connections to the server from the internet.
I was thinking of running a proxy server on an internet exposed server, which will push the request to a message queue (Redis / RabbitMQ). A client instance running on the internal server will fetch the request from the queue and replay it locally, and save the response back into the queue.
The proxy server on the internet exposed server will fetch the response from the queue and pass it on the the original requester.
Does goxyq support the above use case?

Sorry @JoyceBabu, it wouldn't work for your case. This implementation is for a very specific HTTP Proxy use case, but it would be interesting to support also RabbitMQ and a message oriented approach. I will give it a look in my spare time.
Cheers,


Secondary Button Border disappears

When defining a secondary styled button as an anchor tag the button loses its border.
This is caused by the :enabled
This is a screenshot of the broken button with as="a" property set. as you can see the border is missing.

I think for anchors we use the <Link /> components. Not sure if it will fit your needs, you can finde it here https://zopauk.github.io/react-components/#/Components/Atoms/Link

Unfortunately the link component doesn't carry the same styles as the button and we would prefer not to duplicate the button styling in shopfront.
The link component won't let us use as={Button} because this fails ts type checking
Property 'as' does not exist on type 'IntrinsicAttributes & ILinkProps & { children?: ReactNode; }'

@moshie types fix is on the way.
I advise you thought to be spare with the use of as, specially when you try to render a component through it:
<Link as="button" />
<Link as={Button} /> // vs

as, while being very convenient is quite TS non-friendly due to how dynamic it can become. Hence I recommend you use it to override the HTML tag rather than the component being rendered.
Can you ellaborate what's your use-case to do something like: <Link as={Button} /> or <Button as="a" />? I think is better if we stick to render <Button /> as <button /> if we can?

The current <Button /> implementation was done before even as was available on styled-components and hence was done assuming <Button /> would always render <button />.
Hence we should treat <Button /> for now as non as friendly 😉
If we want to make it as friendly though we need to decouple then the styling to the  enabled attribute.
We might want to lock as on <Button /> to <button /> as something like <Button as="span" /> might not be what we want.

But this issue raises up another missing feature:

The border is missing for a secondary disabled button <Button styling="secondary" disabled>Text</Button>

Good catch @dfvalero 💯, we probably can already address this issue while we think what to do with as 👍

Speaking with @moshie we agreed it makes sense to be able to render <Button /> as a | button | span.

<button /> should be what's rendered by default
<a /> handy to make the CTA SEO friendly in some scenarios
<span /> to make  the entire CTA "clickable" not just the button

So this is ready to work as well 👍🏻

FYI, This also breaks the hover state

With this solution We will lose the disabled styles when we render <Button /> as a | span because those HTML elements doesn't understand disabled attribute.

That should be fine as we would never have scenarios where an a | span would be disabled

:tada: This issue has been resolved in version 2.3.2 :tada:
The release is available on:

npm package (@latest dist-tag)
GitHub release

Your semantic-release bot :package::rocket:


how to change text?

Vue.js version:2

how to change text?
Showing {from} to {to} of {count} records

Hi @dimult22 .
here is a example:
:options="texts: { count: 'Showing {from} to {to} of {count} records|{count} records|One record' }}"


DocsArchive-<IP_ADDRESS>Auto archive content

Please don't merge this PR until target archive repo PR https://github.com/OPS-E2E-PPE/docs-archive-test-target/pull/505 is merged into live branch.
Auto archive content to https://github.com/VSC-Service-Account/docs-archive-test-target.git

Docs Build status updates of commit 4329577:
:x: Validation status: errors
Please follow instructions here which may help to resolve issue.

File
Status
Preview URL
Details

:x:Error

Details

[Error-BackendEngineExceptionError] An exception occurred during the build process. Please check the raw log and retry building your content again. If the issue persists, please open a ticket in https://SiteHelp and include the URL of publishing report as well as below information: One or more errors occurred..

For more details, please refer to the build report.
Note: Broken links written as relative paths are included in the above build report. For broken links written as absolute paths or external URLs, see the broken link report.
Note: Your PR may contain errors or warnings unrelated to the files you changed. This happens when external dependencies like GitHub alias, Microsoft alias, cross repo links are updated. Please use these instructions to resolve them.
For any questions, please:Try searching in the Docs contributor and Admin GuideSee the frequently asked questionsPost your question in the Docs support channel


Compare Python & NumPy versions from configure/build time to runtime

Fixes #545
Additions

Add src/core/NGen_Python_Build_Versions.in] to have CMake generate a corresponding .cpp file with the Python/NumPy versions

Changes

Get versions of Python and NumPy seen at runtime
Check runtime versions against configure/build-time versions

Testing

Tests fail if I pip install numpy==1.24.0 in my virtual environment after building with 1.25.0 installed

Checklist

[x] PR has an informative and human-readable title
[x] Changes are limited to a single goal (no scope creep)
[x] Code can be automatically merged (no conflicts)
[x] Code follows project standards (link if applicable)
[x] Passes all existing automated tests
[x] Any change in functionality is tested
[x] New functions are documented (with a description, list of inputs, and expected output)
[x] Placeholder code is flagged / future todos are captured in comments
[ ] Project documentation has been updated (including the "Unreleased" section of the CHANGELOG)
[x] Reviewers requested with the Reviewers tool :arrow_right:

On reading a bit further into this, it will maybe be more straightforward to just do the full-up string comparisons, rather than component-wise comparisons.

Python: platform.python_version()
NumPy: np.version.full_version

The PR template checklist says this

Project documentation has been updated (including the "Unreleased" section of the CHANGELOG)

Are we actually doing this? This PR has been noted as something that should be communicated to users. I just don't see anything at all in the change log

I see how this make the compile time python version available but where is the runtime check? I would have expected modification to Ngen.cpp where the runtime check is made.

I'm assuming @donaldwj found the runtime checks he referred to, but yes, for future reference, they're here:
https://github.com/NOAA-OWP/ngen/pull/558/files#diff-3605ac7d3b4e8fb163eb3ee233ee2573740249d9961efc54675c0a571196dd4eR102-R108


Migrate to GitHub Actions.

Travis CI has a new pricing model which places limits on open source.

https://blog.travis-ci.com/2020-11-02-travis-ci-new-billing
https://www.jeffgeerling.com/blog/2020/travis-cis-new-pricing-plan-threw-wrench-my-open-source-works

Many projects are moving to GitHub Actions instead, including Jazzband projects:

https://github.com/orgs/jazzband/projects/1
https://github.com/jazzband-roadies/help/issues/206

This is based on https://github.com/jazzband/contextlib2/pull/26.
It drops support for Python 3.5 because GitHub Actions doesn't fully support them. It's EOL anyway.
Python 3.9 support is also added.
TODO:

[x] @jezdez to add JAZZBAND_RELEASE_KEY to the repo secrets.

@martey Hey there, just a heads-up that I've also asked a review from a few other Jazzband members that have been helping with the big move to GitHub Actions in other Jazzband projects.
FWIW This won't change much for this project, except actually enables the Jazzband release pipeline for you. Please let me know if you have any questions.

@martey Hey there, just a heads-up that I've also asked a review from a few other Jazzband members that have been helping with the big move to GitHub Actions in other Jazzband projects.
FWIW This won't change much for this project, except actually enables the Jazzband release pipeline for you. Please let me know if you have any questions.

Thanks @jezdez!

Thanks @jezdez!


Takes a significant amount of time to get look up links

Currently look up file is being opened and searched line by line for EVERY bibliographic record.
Create way of loading look up into memory for quicker processing.

Resolved by #2


Error: Looks like "https://charts.deis.com/workflow" is not a valid chart repository

I'm trying minikube with deis. Has something changed now? It was pulling the repo 2 hours ago
$ helm repo add deis https://charts.deis.com/workflow
Error: Looks like "https://charts.deis.com/workflow" is not a valid chart repository
or cannot be reached: Get https://charts.deis.com/workflow/index.yaml: net/http:
TLS handshake timeout

Seeing this too:
><> helm repo up
Hang tight while we grab the latest from your chart repositories...
...Skip local chart repository
Writing to /Users/bacongobbler/.helm/repository/cache/stable-index.yaml
...Successfully got an update from the "stable" chart repository
...Unable to get an update from the "deis" chart repository (https://charts.deis.com/workflow):
	Get https://charts.deis.com/workflow/index.yaml: dial tcp: lookup charts.deis.com on <IP_ADDRESS>:53: read udp <IP_ADDRESS>:51010-><IP_ADDRESS>:53: i/o timeout
Update Complete. ⎈ Happy Helming!⎈

The issue seems to have been a temporary. I'm able to add and update the repo:
 $ helm repo add workflow https://charts.deis.com/workflow
"workflow" has been added to your repositories
 $ helm repo update
Hang tight while we grab the latest from your chart repositories...
...
...Successfully got an update from the "workflow" chart repository

Nevertheless, this is still an issue warranting further investigation.

Yes, it's working for me now. Maybe it was something temporary at the servers, maybe has to do with the migration to Azure Services? Just guessing

I am seeing this issue today? Any clues?

I am getting this error as well when I try >helm repo add deis https://charts.deis.com/workflow
How to solve this?
Error: Looks like "https://charts.deis.com/workflow" is not a valid chart repository or cannot be reached

@ampsarfraz I'm not seeing problems here. Maybe just a transient network error? Helm doesn't always report those errors in a useful way--for example if you unplug from the network and try the same thing you can see misleading errors about missing x509 certs...
I tried it with the debug flag as well but it doesn't seem to add any output:
$ helm repo add --debug deis https://charts.deis.com/workflow
"deis" has been added to your repositories

😕

@ampsarfraz I was having this problem on Windows. It appears to be more reliable if I explicitly set the HELM_HOME environment variable. e.g. in PowerShell $env:HELM_HOME = "C:.helm". Try setting this and then adding the repo again.

This issue was moved to teamhephy/workflow#23


Fine tune google/byt5-small

Greetings,
I tried fine tuning with google/byt5-small, it seemed to work well, but when trying to generate with learn.blurr_generate just outputs gibberish. As a comparison, fine tuning  t5-small with the same data works well both on training and text generation with learn.blurr_generate.
What could I be missing?
Thanks

Its not you missing anything :)
I need to adjust the tokenizer to work the the byt5 models.  It's on my list :). Will comment back here once I have something working.

Thanks! Looking forward to it.

Its not you missing anything :)
I need to adjust the tokenizer to work the the byt5 models. It's on my list :). Will comment back here once I have something working.

I wonder if this affects the training process or just the text generation afterwards?

Thanks!


figure out how to test the deploy command

We need to figure out how to test the deploy command.
We can create a local Git repository and bootstrap an app in it to deploy, but then there's the question of how to test that deployment pushes it to its origin remote, which is normally on GitHub.
But deploy doesn't actually depend on GitHub itself, only on there being an origin "remote", which could presumably be another local repository. So it should be possible to test deploy without a dependency on a GitHub server.
We would just need to create two local repositories, one of which has the other as its origin; build the app in the first repository; and then test that the deploy command pushes the build output to the gh-pages branch in the origin repository.

Looks interesting, I'll take a stab at it.

Marco, these tests broke the next time I merged a change to master (https://travis-ci.org/mozilla/oghliner/builds/85199186), because the tmp dir was apparently preserved across builds:

Deploy should update the gh-pages branch in the origin repo and publish files to it:
Error: EEXIST, file already exists 'tmp'
at Error (native)
at Object.fs.mkdirSync (fs.js:747:18)
at Context. (test/testDeploy.js:49:8)

The temp folder/file creation library I used in https://github.com/mozilla/oghliner/pull/63/files#diff-c792d04edfea01487109cfd6450c9ef8R4 worked pretty well.

@mykmelez I think it was a timeout, which then caused the "tmp" directory to be preserved and thus the second test to fail.
It's likely that the test could actually need more time, as in this successful build (https://travis-ci.org/mozilla/oghliner/builds/85199186, which is yours retriggered) the test took 673ms (which is relatively close to the current timeout of 2 seconds).
Let's file a new issue if it happens again.
I'll also submit a PR to avoid failing following tests when the first runs out of time.


Trigger an event when a widget area is created

This allows customization of the widget area and other actions when a widget area is created.

Seems like a good idea to me, thanks!


Running get-TeamsUsage script generates a token related error

Category

[ ] Suggested sample, script, or tool
[ ] Bug in existing sample, script, or tool
[*] Question / Feedback

Issue Details
After registering the application according to following guide:
Login to Portal.Azure.Com
Navigate to "Azure Active Directory" > "App Registrations"
Click "New Application Registration"
Give your application a friendly name, Select application type "native", and enter a redirect URL in the format "urn:foo" and click create
Click on the App > Required Permissions
Click Add and select the "Microsoft Graph" API
Grant the App the "Read All Usage Reports" permission
Record the Application ID and use that for ClientID parameter in this script
and running the script as suggested:
.\Get-TeamsUsage.ps1 -tenantName "contoso.onmicrosoft.com" -ClientID "{your app id}" -GroupsReport getOffice365GroupsActivityDetail -Period D7 -redirectUri "urn:foo"
I get following error:
Get-ADALAccessToken : AADSTS7000218: The request body must contain the following parameter: 'client_assertion' or 'client_secret'.
Seems to me that the token wasnt generated at all - did I miss something during the app config?
Thank you for any hints,
Tomas
Suggested Sample, Script, or Tool
Full error:
Get-ADALAccessToken : AADSTS7000218: The request body must contain the following parameter: 'client_assertion' or 'client_secret'.
Trace ID: 779c1917-647f-48ba-9afb-8af916059000
Correlation ID: 10e63320-d698-466d-a27d-877ff4a2ba42
Timestamp: 2021-06-11 10:23:26Z
At C:\Users******\Desktop\Get-TeamsUsage.ps1:116 char:14

$token = Get-ADALAccessToken `

         ~~~~~~~~~~~~~~~~~~~~~

CategoryInfo          : NotSpecified: (:) [Write-Error], WriteErrorException
FullyQualifiedErrorId : Microsoft.PowerShell.Commands.WriteErrorException,Get-ADALAccessToken

No token was created. Please review all parameters to ensure they are correct
Bug in existing sample, script, or tool
Expected / Desired Behavior
Expected behavior is for the script to run as described:)
Observed Behavior
Error above
Steps to Reproduce
Question / Feedback

Thanks for the feedback, I am looking into this. It appears at first glance this may be an issue with one of the dependencies this script has, and you likely are doing everything just fine on your end for the app registration at least to this point.

thank you for your commentary, please let me know once you have any update

hello, any update?

Hello, thank you for your patience as I look into options here. Unfortunately it looks like it would be a significant change on the provided script side to address this error with the way this script is written on a community dependency module.
That said, there is a Teams usage report already available in the Teams admin center as documented here: https://docs.microsoft.com/en-us/microsoftteams/teams-analytics-and-reports/teams-usage-report. Additionally there is a report in the M365 admin center that provides the exact same data as this script, as documented here: https://docs.microsoft.com/en-us/microsoft-365/admin/activity-reports/office-365-groups-ww?view=o365-worldwide. Please take a look at both of these, and note that you can export both of these from the respective admin center views as well.

Hello dwhitney7, thank you for your comment
I know there are reports like this, but what I need is to built some kind of automation on this report., I need to somehow run such report with powershell, and to work further with the results I get from it
Thats the point - I need to have automatically generated the last activity field

I have updated the dependency module the script uses to address the authentication token issue. Please feel free to re-open if it does not work for you. Thanks for your patience!

Hello dwhitney7, tank you for the update - just one additional question - where should I run the script? In Azure as a runbook? Or from a local server? since I can see that the script is referring to a certain variables/parameters within it
THank you

The script is interactive (asks for credentials) so is expected to be run on a workstation/local server. It also installs a few PowerShell modules on the workstation if not present already.

Hello dwhitney7, many thanks for your help so far. Do you think you can help me to configure the AZ app that the script is referring to, according to its permissions, redirect URI etc?
Input parameters the script is asking for are described like this:
.EXAMPLE
.\TeamsUsageReport.ps1     -TenantName "contoso.onmicrosoft.com"
-ClientID "afl724e4-5ac1-1b9c-be7c-917c95fq1w28"     -GroupsReport getOffice365GroupsActivityDetail
-Period D7 `
-redirectUri "urn:foo"
but I am not sure what permissions should I grant for the AZ app, and what redirect URI should I use
do you think you can share your app config that you use for the script with me?
Thank you very much

Hello dwhitney7,
one more thing to ask - when I run the script, authenticate when asked to, provide admin consent for the related app (i tried with one that I configured earlier but not sure it is correct)
I end up with this:
Sign in
Sorry, but we’re having trouble signing you in.
AADSTS500113: No reply address is registered for the application.
Can you advise what reply address to put into the AZ app?
Thank you very much

Hello dwhitney7, do you think you can share your AZ app config related to this script? thank you!


add linux_{default,latest} to linuxKernel.kernels

this improves discoverability, as many users (including me) have been confused why only custom kernels are available
fixes #260636
Description of changes

Things done

Built on platform(s)

[ ] x86_64-linux
[ ] aarch64-linux
[ ] x86_64-darwin
[ ] aarch64-darwin

For non-Linux: Is sandboxing enabled in nix.conf? (See Nix manual)

[ ] sandbox = relaxed
[x] sandbox = true

[ ] Tested, as applicable:

NixOS test(s) (look inside nixos/tests)
and/or package tests
or, for functions and "core" functionality, tests in lib/tests or pkgs/test
made sure NixOS tests are linked to the relevant packages

[ ] Tested compilation of all packages that depend on this change using nix-shell -p nixpkgs-review --run "nixpkgs-review rev HEAD". Note: all changes have to be committed, also see nixpkgs-review usage
[ ] Tested basic functionality of all binary files (usually in ./result/bin/)
24.11 Release Notes (or backporting 23.11 and 24.05 Release notes)

[ ] (Package updates) Added a release notes entry if the change is major or breaking
[ ] (Module updates) Added a release notes entry if the change is significant
[ ] (Module addition) Added a release notes entry if adding a new NixOS module

[x] Fits CONTRIBUTING.md.
[x] tested that there are no recursion errors by calling relevant attributes in the repl

Add a :+1: reaction to pull requests you find important.

This pull request has been mentioned on NixOS Discourse. There might be relevant details there:
https://discourse.nixos.org/t/prs-ready-for-review/3032/4599


[Feature Request] multi-step wizards

Problem:
Creating multi-step wizards with form validation and data operations (CRUD), requires a lot of repetitive Python code and custom callbacks. This makes it hard to reuse code and slows down development.
Propsal:
DMC already has powerful tools like Stepper for navigation, TextInput, Button, Validation and notifications, and many other for inputting and dispalying data. By combining these into a reusable multi-step wizard that includes:

Built-in validation (e.g., checking required fields before moving to the next step)
Easy data handling (like integrating with CRUD operations)
Modular components that developers can configure and reuse

Imagination of usage
Let’s say we want a registration wizard where users must complete required fields before moving to the next step.
Step 1: Create Steps
step1 = WizardStep(
    label="User Info",
    components=[
        dmc.Text("Enter your name:", weight=500),
        dmc.TextInput(id="username-input", placeholder="Your Name")
    ]
)
step2 = WizardStep(
    label="Contact Details",
    components=[
        dmc.Text("Enter your email:", weight=500),
        dmc.TextInput(id="email-input", placeholder="Your Email", type="email")
    ]
)

Step 2: Set Required Fields
required_components = [
    {"step": 0, "component": {"id": "username-input", "property": "value"}},
    {"step": 1, "component": {"id": "email-input", "property": "value"}}
]

Step 3: Build the Wizard
wizard = FormWizard(
    app=app,
    steps=[step1, step2],
    wizard_id="my-wizard",
    required_wizard_components=required_components
)

Final Layout:
app.layout = dmc.Container(
    [
        dmc.Title("Registration Wizard", order=2),
        wizard.component
    ],
    style={"padding": "2rem"}
)

if __name__ == "__main__":
    app.run_server(debug=True)

In which WizardStep defines each individual step with its components, while FormWizard manages the entire multi-step process, including navigation, validation, and layout integration.
More ideas; tryformly.com

Hi @mohammadaffaneh
This would be a great component, but it would be better as a separate project.  The Dash Mantine Components aims to mirror the upstream Mantine library.
Check out this great project for making forms that uses DMC:   https://github.com/RenaudLN/dash-pydantic-form
You could likely use this along with the Stepper to create your forms Wizard

Thanks for the reference, agree on your point.
Appreciate the support!


Improve RGB scripts devtool

Properly support primary and secondary colors (and hide input fields, depending on algo.acceptColors)
Fixed issue when "Start test" has been clicked multiple times
Fixed missing # in cell.style.backgroundColor which lead to sometimes uncolered cells
Add title to cells so you can easily check a specific cell's position and color
Use modern HTML form element features (like input type number, min/max)
Refactor JS logic, e.g. by using global variables instead of always reading input element values

I'm also thinking about adding support for API version 2 parameters – do you want to wait for this first or should I open a new PR then?

Thanks for this! :+1:
It definitely needed some fresh air. Let's merge this for now.
If you want to add parameters support, you're very welcome.


Add support for PremiumVanish and SuperVanish

Adds support for my vanish-plugins which share the same api, please just add SuperVanish's jar to your build path.
I've also fixed an import for you to make it compatible with CraftBukkit, too.
It's untested but it should work.
https://www.spigotmc.org/resources/supervanish.1331/
https://www.spigotmc.org/resources/premiumvanish-1-8-packet-level-hider.14404/
Thanks for this plugin btw, looks great!

Thanks a lot for the pull request! I'll be building a new version asap :)


Ensure unit_id  is not returned on CDD

User Story
As the EPA I want unit id to be removed from the CDD so that CAMPD is compatible with the CBS integration
Acceptance Criteria
Given that  a user has previewed data
When the data elements are displayed
Then Unit_ID  is not displayed in the data table
Given that a user has previewed data
When the data file is downloaded (csv or json)
Then the file does not contain unit_id as a data element
Context
The UI shall automatically include an exclude parameter to remove unit id

Unit_ID is not being returned on the CDD or in file downloads.


Updated Apache-Beam-Jobs.md

Implementation of  error handling in the expand method

Closing due to inactivity


Cannot find vivado_side.7z

Where is VIVADO_SIDE.7z package?

Hi. Please go to hw/readme.md for guide on regenerating the vivado project.
I’ll update the project description


/sdcard has encryption enabled and files are not useable

After booting into the recovery and browsing the filesystem, everything looks a little bit "garbled". Especially the /sdcard doesn't seem to be alright. Here you can only see folders with "GUID"-like names and no contents. Also there are two drives with zero bytes able to select when trying to change between external and internal memory.
My guess is, that the fstab is either not compatible or flat out wrong. Maybe a switch to that ominous fstab v2 format could fix it, but I need to do some more research.

76ecfab6baef54647872a46ab82bc4e563cf4ddb
Although my pattern is not recognized at least /data/system_de/<userid> gets decrypted now.

Without a pattern or a password everything gets decrypted as expected.
So there is still something missing (like a "salt") for the correct generation of the encryption key.

Next hurdle:
The log tells gatekeeper verification failed.
The gatekeeper service respose code is -1 (ERROR_GENERAL_FAILURE).
So quite obvious the gatekeeper service is not set up correctly.

According to dmesg gatekeeper & teed are running into an error:
<7>ERR GATEKEEPER:GetRTCBaseline:127: Warning: No RTC baseline found or it's corrupted, rebuilding
<1>ERR GATEKEEPER:__TEE_Panic:42: filename lib/libutee/tee_api_objects.c func_name TEE_CreatePersistentObject lineno 495 code 0xffff0000
<1>ERR GATEKEEPER:unwind_exec_insn:266: unwind: Unhandled instruction c9
<1>ERR TKCore:tee_svc_sys_return_helper:294: TA panicked with code 0xffff0000 usr_sp 0x101e44 usr_lr 0x205488
<1>ERR TKCore:tee_user_ta_enter:1407: TA panicked with code 0xffff0000
<1>DBG TKCore:tee_ta_invoke_command:2201:   => Error: ffff3024 of 3
<4>DBG TKCore:elf_load_body:450: Set TLS offset for TA: 0x20e0bc
<4>DBG TKCore:tee_ta_load:1172: Loaded TA at 0xf039b000
<4>DBG TKCore:tee_ta_load:1173: ELF load address 0x200000
<4>DBG TKCore:tee_ta_init_session_with_signed_ta:1884:       dyn TA : 02662e8e-e126-11e5-b8-6d-9a-79-f0-6e-94-78
<1>DBG TKCore:tee_ta_open_session:1990: [TA 02662e8e: 0] init session
But what's that RTC that is missing? Real Time Clock? Relay Text Client?
Searching won't help. -1:

I found tee_api_objects.c:
https://github.com/OP-TEE/optee_os/blob/master/lib/libutee/tee_api_objects.c
According to that the code 0xffff0000 means TEE_ERROR_GENERIC

Now I feel really dump: d8f963785548c4df5df1eee391d20ec1b9e57937
It seems that I completely missed out on the fact that init.vendor.trustkernel.rc wasn't copied over to the final image. Somehow along the way it was left out. Only during the work on removing the vendor blobs and once more checking if all needed files were found and copied I realized that this integral part of trustkernel was missing.


Fix/maintenance

What kind of change does this PR introduce?
[ ] Bugfix
[ ] Feature
[x] Code style update (formatting, local variables)
[x] Refactoring (no functional changes, no api changes)
[ ] Build related changes
[x] CI related changes
[ ] Documentation content changes
[ ] tooling / infrastructure changes
[x] Maintenance

No functional adjustments were made in this update. Mainly the dependencies were updated.
In addition, the node version for working in this repo has been upgraded to the latest Acive LTS version.

I'll rebase my gha pr to this branch in about an hour.

Lovely split of the checks!
I tried my hand at scss deps but wasn't successful. I'm not very familiar with lerna so I'm just tossing around with it.


Data generation scripts for RTMV: A Ray-Traced Multi-View Synthetic Dataset for Novel View Synthesis

Hi there, great work!
Any plans on releasing the data generation scripts for RTMV: A Ray-Traced Multi-View Synthetic Dataset for Novel View Synthesis? Thanks in advance.

@TontonTremblay is the guy to ask for this one. I don't personally see why this couldn't happen though. :)

Thanks! I got in touch with @TontonTremblay over email.


Prevent panic from nil request

Traefik 2.6.2 calls plugins with nil req pointer, this prevents plugin to panic.

Hello @jliebert,
Thanks for your contribution,
The request should never be nil, as a plugin is called when an http.Request is received. This means that something is wrong in the chain (an upstream middleware/plugin might call next.ServeHTTP with a nil request value).
Do you have a reproducible use case?
At least can you share your static, dynamic configurations and logs to investigate why the http.Request is nil?

I can't reproduce the case, it's only append on production, I have many entries like this in my log file:
Mar 31 12:34:37 swarm_manager_3 traefik-ha_V2--traefik[1140]: time="2022-03-31T10:34:37Z" level=error msg="plugins-storage/sources/gop-3499923535/src/github.com/traefik/plugin-blockpath/blockpath.go:48:17: panic" plugin=plugin-blockpath module=github.com/traefik/plugin-blockpath
Mar 31 12:34:37 swarm_manager_3 traefik-ha_V2--traefik[1140]: time="2022-03-31T10:34:37Z" level=error msg="plugins-storage/sources/gop-3499923535/src/github.com/traefik/plugin-blockpath/blockpath.go:48:17: panic" plugin=plugin-blockpath module=github.com/traefik/plugin-blockpath
Mar 31 12:34:37 swarm_manager_3 traefik-ha_V2--traefik[1140]: time="2022-03-31T10:34:37Z" level=error msg="plugins-storage/sources/gop-3499923535/src/github.com/traefik/plugin-blockpath/blockpath.go:48:17: panic" plugin=plugin-blockpath module=github.com/traefik/plugin-blockpath
Mar 31 12:34:37 swarm_manager_3 traefik-ha_V2--traefik[1140]: time="2022-03-31T10:34:37Z" level=error msg="plugins-storage/sources/gop-3499923535/src/github.com/traefik/plugin-blockpath/blockpath.go:48:17: panic" plugin=plugin-blockpath module=github.com/traefik/plugin-blockpath
Mar 31 12:34:37 swarm_manager_3 traefik-ha_V2--traefik[1140]: time="2022-03-31T10:34:37Z" level=error msg="plugins-storage/sources/gop-3499923535/src/github.com/traefik/plugin-blockpath/blockpath.go:48:17: panic" plugin=plugin-blockpath module=github.com/traefik/plugin-blockpath
I use only two simple plugins in my traefik.yaml:
pilot:
token: "my token"
entryPoints:
http:
address: :80
https:
address: :443
providers:
providersThrottleDuration: 2s
docker:
watch: true
network: webgateway
exposedByDefault: false
swarmMode: true
swarmModeRefreshSeconds: 15s
http:
endpoint: http://certbot/dynamic_conf.yaml
api:
insecure: true
dashboard: true
log:
level: INFO
accessLog: {}
certificatesResolvers:
experimental:
plugins:
blockpath:
modulename: "github.com/traefik/plugin-blockpath"
version: "v0.2.1"
blockuseragent:
modulename: "github.com/agence-gaya/traefik-plugin-blockuseragent"
version: "v0.1.5"
The http://certbot/dynamic_conf.yaml is like this:
http:
middlewares:
block-badbots:
plugin:
blockuseragent:
regex:
- ^$
- ^trendkite-akashic-crawler$
- (\bLieBaoFast\b|\bMQQBrowser\b|\bMb2345Browser\b|\bPetalBot\b|\bMJ12bot\b|\bCsnibot\b)
block-badpath:
plugin:
blockpath:
regex:
- ^/autodiscover/autodiscover.xml$
- ^/AutoDiscover/autodiscover.xml$
- ^/(w00tw00t|phppath/|pma/|phpMyAdmin|phpmyadmin)
- ^/%70%68%70%70%61%74%68/
- /.env(?.|)$
- .(bak|backup|conf|log|properties|sql|tar)(?.|)$
- ^/Private/
- typo3conf/ext/(.)/Configuration/(TypoScript|FlexForms|TCA|ExtensionBuilder)/
- .inc.php(?.|)$
block-badpath-drupal:
plugin:
blockpath:
regex:
- wp-(admin|login|content)
block-badpath-typo3:
plugin:
blockpath:
regex:
- wp-(admin|login|content)
tls:
certificates:

certFile: /etc/letsencrypt/archive/8b800c738f27e1bea5d3ed274dc6d1d7/fullchain19.pem
keyFile: /etc/letsencrypt/archive/8b800c738f27e1bea5d3ed274dc6d1d7/privkey19.pem
certFile: /etc/letsencrypt/archive/199a3ee32300bc409819fec4adaeb41c/fullchain6.pem
keyFile: /etc/letsencrypt/archive/199a3ee32300bc409819fec4adaeb41c/privkey6.pem
certFile: /etc/letsencrypt/archive/20e4d9d697d897f8ca7f9f2d0a79fa0a/fullchain8.pem
keyFile: /etc/letsencrypt/archive/20e4d9d697d897f8ca7f9f2d0a79fa0a/privkey8.pem
certFile: /etc/letsencrypt/archive/fc55b732dcf79f3fe7ee7eba600ee13b/fullchain19.pem
keyFile: /etc/letsencrypt/archive/fc55b732dcf79f3fe7ee7eba600ee13b/privkey19.pem
certFile: /etc/letsencrypt/archive/bb6441f69a87d5a225fd8f4344311202/fullchain6.pem
keyFile: /etc/letsencrypt/archive/bb6441f69a87d5a225fd8f4344311202/privkey6.pem
options:
default:
cipherSuites:

TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305
TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305
TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256
minVersion: VersionTLS12
sniStrict: true
old:
cipherSuites:
TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305
TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305
TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256
TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256
TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA
TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA
TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA
TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA
TLS_RSA_WITH_AES_128_GCM_SHA256
TLS_RSA_WITH_AES_256_GCM_SHA384
minVersion: TLSv1
stores:
default: {}

I have patched agence-gaya/traefik-plugin-blockuseragent with a test of nil on req but I continue to have panic on this plugins also, I'm in stuck.
https://github.com/agence-gaya/traefik-plugin-blockuseragent/blob/master/blockuseragent.go#L49

Maybe the URL is nil (even if I think should never happen), the request cannot be nil, it's impossible.

Mar 31 12:52:46 swarm_manager_3 traefik-ha_V2--traefik[1140]: time="2022-03-31T10:52:46Z" level=error msg="plugins-storage/sources/gop-3499923535/src/github.com/agence-gaya/traefik-plugin-blockuseragent/blockuseragent.go:49:5: panic" module=github.com/agence-gaya/traefik-plugin-blockuseragent plugin=plugin-blockuseragent
Line 49:
https://github.com/agence-gaya/traefik-plugin-blockuseragent/blob/master/blockuseragent.go#L49
I don't understand how a panic can append here.
Did you now if it's possible to have more detail about a panic in a plugins ?

in your plugin:
func (b *blockUserAgent) ServeHTTP(rw http.ResponseWriter, req *http.Request) {
	if req == nil {
		fmt.Println("the request is nil")
		return
	}

	if req != nil {
		userAgent := req.UserAgent()

		for _, re := range b.regexps {
			if re.MatchString(userAgent) {
				log.Printf("Block User-Agent: '%s'", userAgent)
				rw.WriteHeader(http.StatusForbidden)

				return
			}
		}
	}

	b.next.ServeHTTP(rw, req)
}

Like that we will have a message if the request is nil

I have checked the code directly in the container, I have the test "if req != nil" but I continue to get panic, so the trouble is in other place despit to panic refering this line.
I can't switch now to debug mode on production server where the trouble append, I will try when I get lower user activities on it.

it can be a bug inside our interpreter (https://github.com/traefik/yaegi)

I think we can close/cancel this PR, I will open an issue on Traefik when I get more informations with debug mode.


Future produced by IO is untyped

Repro
// x: IO<number>
const x = IO.pure(1)
// y: Future<{}>, should be Future<number> I guess
const y = x.run()

I think there's a unnecessary type parameter A here https://github.com/funfix/funfix/blob/eacf892d1f1de14bc1b01c4bef04a89cf4b09ffb/packages/funfix-effect/src/io.ts#L390

Thanks for noticing that @gcanti, not sure how I missed it.

Released fix in v6.2.1


Use PowerShell to manage spoofed senders

In Step 2: "Edit the CSV file to add or modify the SpoofedUser (email address) and AllowedToSpoof (Yes or No) values. Save the file, read the file, and store the contents as a variable named $UpdateSpoofedSenders", can we change this to represent what we really need to add to the CSV: Sender, SpoofedUser, AllowedtoSpoof and SpoofType?
Just adding SpoofedUser and AllowedtoSpoof for a new line will just give you errors telling you to fill in the other listed fields.

Document Details
⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

ID: f1c0cbdb-062e-08e1-7c7c-cedab550f01b
Version Independent ID: 2791a840-3284-bc0d-7b9e-026b852797e6
Content: Configure spoof intelligence - Office 365
Content Source: microsoft-365/security/office-365-security/learn-about-spoof-intelligence.md
Product: m365-security
Technology: mdo
GitHub Login: @chrisda
Microsoft Alias: chrisda

@dkotars Hope this update is helpful for you. Thanks for taking out some time to open the issue. Appreciate and encourage you to do the same in future also.


Atom TypeScript linter shows error even tho it's disabled?

Just curious if someone else had similar issue in Atom. I even disabled all TypeScript related packages. I still get this linter error:

Ok guys I disabled all packages and restarted Atom and it's gone now. I wonder where it's coming from so I don't really need to disable packages when working on this project.

You're not supposed to be running typescript on flow projects. they are different technologies with different syntaxes and semantics


Configuration property to activate sending extra data in 4.0

Sentry 3 changed to not send tags/extra data anymore automatically
The Monolog handler does not set anymore the tags and extras on the event by extracting automatically the data from the record payload. You can decorate the class and set such data on the scope as shown below:

https://github.com/getsentry/sentry-php/blob/master/UPGRADE-3.0.md
I missed upgrade entry in 4.0 of this bundle or better an easy solution to configure this.
Can you add a configuration property for this and add it to Sentry\Monolog\Handler?
To activate it in our project again I copied your handler and added a setExtras call. This follows the upgrade guide of the sentry-php package. If this could be wrapped by a configuration property of the bundle for extra data and tags which is disabled by default, this would be a great addition
public function handle(array $record): bool
    {
        $result = false;

        withScope(function (Scope $scope) use ($record, &$result): void {
            //$scope->setTags();
            if (isset($record['context']['extra'])) {
                $scope->setExtras($record['context']['extra']);
            }

            $result = parent::handle($record);
        });

        return $result;
    }

This is a frequently requested question which can find its answer in getsentry/sentry-php#848. There are no plans to revert this change, but the UPGRADE file you found provides a solution using the decorator pattern which should work well with most use-cases

@ste93cry This feature request does not ask to revert this change. It asks for an easy way to activate it in this symfony bundle wrapper of the sentry package.
Are there any reasons against?

It asks for an easy way to activate it in this symfony bundle wrapper of the sentry package

It doesn't matter if behind a configuration option or not, asking for a way to enable a behaviour that has been dropped in the core SDK is like asking for the feature to be reimplemented, don't you agree?

It asks for an easy way to activate it in this symfony bundle wrapper of the sentry package

It doesn't matter if behind a configuration option or not, asking for a way to enable a behaviour that has been dropped in the core SDK is like asking for the feature to be reimplemented, don't you agree?

Yes I agree but that wasn't the discussion here.
I asked to re-add an old functionality instead of reverting this change.
I now read the linked issue in detail and see it was an unwanted feature. Still I don't see the reason to not now allow it behind an option. Especially if it is improved via serialization.

I'm closing this because an answer has been given: we don't plan to reintroduce this feature soon, nor to revert the decision we took in the past regarding this particular topic. As mentioned in the UPGRADE file, you can use the decorator pattern to log the data, with the added bonus that you are able to discern what to log and what not


Allow kubernete context to be supplied #554

I have not run the tests as I couldn't work out how to install the deps from my locked down environment.
Fixes #554

Merged, thanks!

@philpep will this be available via Pypi soon? Only 5.1.0 (Released: May 18, 2020) is showing up on pypi.org

@NickLarsenNZ sure, I just uploaded 5.2.1 including this. Happy upgrade!


Support type-checking to TSLint

Some features of tslint require to enable type-checking, these are not supported currently.
To enable type-checking, we have to provide a tsconfig.json file or compiler instance.
The issue is that the linting tasks are currently project-wide so there is no prefered tsconfig.json file.
An idea is to move tslint to the target level, but we could also keep the project-wide :lint task and invoke it for every target.

Solved in 0.15.0-beta.1.


HIVE-28153: Flaky test TestConflictingDataFiles.testMultiFiltersUpdate

What changes were proposed in this pull request?

Run the test with vectorization true
Why are the changes needed?

IOContext gets shared in unit test causing non-vectorized to be flaky.
Does this PR introduce any user-facing change?

Is the change a dependency upgrade?

No
How was this patch tested?

Unit test TestConflictingDataFiles

Should we do a flaky test to verify if the fix is good? http://ci.hive.apache.org/job/hive-flaky-check/

@zhangbutao
I have run the flaky test jenkins job on my fork and the test passed.
http://ci.hive.apache.org/job/hive-flaky-check/835/console

Hi @zhangbutao ,
I have started the flaky test jenkins job here: http://ci.hive.apache.org/job/hive-flaky-check/836/

The flaky test check has passed: http://ci.hive.apache.org/job/hive-flaky-check/836/

Thanks @deniskuzZ and @zhangbutao  for the review :)


Adjust confd log level

Description

Allow configuration of confd's log level on startup.
Todos

[ ] Tests
[ ] Documentation
[ ] Release note

Release Note

Added ability to configure confd log severity through the CALICO_CONFD_LOGLEVEL parameter.

Looks fine, but probably not the approach I would have taken.
The client code already listens to the BGPConfiguration, so I would have watched for updates to the LogSeverityScreen field for the node and globally and adjusted the log level real time based on that config.

@robbrockbank yes that sounds fine and I considered it. I don't think they're mutually exclusive changes.
I'm happy to do that if I have time, but this is much quicker.

Perhaps it should share an environment variable with BIRD at least though, to match the datastore config model.

If we do you environs - is the expected case that ENVs would trump etcd config if specified?

@robbrockbank yes, I think so.
Perhaps it should really be done in confd, and then this PR simply becomes removing the log-level option when starting confd.

@robbrockbank I've updated to not set the log level at all.
Once https://github.com/projectcalico/confd/pull/57 is merged we'll get the configuration bit back.

LGTM - ended up being a slightly different PR than originally intended :-)

sorry pressed the wrong button

Docs failure is an htmlproofer flake


scrollToNow don't work in with 1 day

First of all, congratulations for this upgrade, it is very successful and very fluid.
I managed to migrate without too many problems and this new update brings corrections compared to version 1. I noticed that when we have 1 day, the scroll to now is not done on the right day or is not done at all. Likewise with the goToDate function which is done 1 day before.
Thank you for your work

These issues are likely related to the timezone. Please provide me with the timezone on your device, and I will proceed to check and fix the error in the next version

Ah, I saw your comment on the previous issue. Just as I predicted, it’s a timezone-related bug. I’ll fix it soon.

Fixed in v2.0.3

Nice work, it's work perfectly. I propose a feature that was good on v1, it was the possibility of removing the half-time lines and in week view, above the week number, display the month with 3 letters. Otherwise very good job

There will definitely be an option to customize the half line in the upcoming version. I had planned to update it soon but unfortunately, I forgot.

To show the month, you can watch this video, you can customize it through custom hooks
https://github.com/howljs/react-native-calendar-kit/issues/117#issuecomment-2395124485


Add test for issue #78

This test is not passing without the code to make it pass. Listen, either you provide tested code or I'll continue to close your PR.


[DRG] Full 7.0 support

Pull request type

[x] This is a patch bump

Pull request details

[ ] The job(s) in this patch bump had only potency changes for this patch, which do not effect analysis

[x] I have updated the data files for all potency changes for this patch
[ ] The skills and jobs affected by these potency changes do not track potency for xivanaylsis purposes

[x] This is the last PR after all analysis changes for this job have been merged, and now the job is ready to be marked supported for this patch

Specific changes include adjusting cooldown for Geirskogul and duration for Battle Litany, along with fixing errors in the labels and descriptions for some of the suggestions. This should complete the changes needed to mark DRG as fully supported for 7.0 at the moment.
Testing / Validation

[ ] The changes being implemented with this bugfix include comments that contain example log(s) to test with

[x] I have submitted the example log(s) to the xivanalysis static on FFLogs for record keeping

[x] I used the log(s) listed below to develop and test this bugfix:

Validating good play in EX 1: https://www.fflogs.com/reports/hJ1bF3XTAja8kWYQ#fight=6&type=damage-done
Checking for known errors in my EX 1 logs: https://www.fflogs.com/reports/Ca6Wxynvk2Jb9G7F#fight=15&type=damage-done
Validating skills on the timeline (in xiva fflogs static): https://www.fflogs.com/reports/mYJAQdghzCq9PWGM

Job Maintenance

[x] I am active on the xivanalysis Discord and part of the job maintainers group for the job(s) in this PR

i probably should have made a clean branch off of dawntrail but i instead updated my fork, which is probably why all the old commits are in there too. let me know if this causes problems and i can try to rebase a new branch off of dawntrail

i probably should have made a clean branch off of dawntrail but i instead updated my fork, which is probably why all the old commits are in there too. let me know if this causes problems and i can try to rebase a new branch off of dawntrail

Given that there's i18n conflicts in this branch now, it's going to make it a lot easier to review and resolve this if you can rebase / cherry pick this apart, or otherwise merge things together so that the diff only shows the new content.

consolidated the changes in #1986


Can't use multisteps form with Parsley 2.0.7

Hello,
I'm working on a multisteps form and I'm using Parsley 2.0.7, I can't easily update my version but I saw that group support was added in 2.0.4 so I think I can use it but even with the parsley's given example I can't.
With Parsley 2.2.0 no problem the example works : https://jsfiddle.net/or3lie/z5f0zy2m/ but with Parsley 2.0.7 it doesn't work : https://jsfiddle.net/or3lie/d5tpue9t/ it always validate steps even if fields are empty. Parsley only shows error messages at the last step = the submit.
Of course I have the same problem on my dev website :(
Thanks a lot if you can help me !

I'm very sorry, but I am the only active maintainer and I will not support older versions of Parsley.
Please update or ask for help on StackOverflow...

Ok thanks for the information ;)


Unexpected HTTP status code: 500

Category

What is the current behavior?
I've just created a new account, changed my username and I'm now unable to edit the Books I've created because of the 500 HTTP error I get in the Mac app.
What is the desired behavior?

Additional information
Here's the screenshot: https://snag.gy/KlghnC.jpg

@cborodescu Since you're using the desktop editor. If you logged in before changing your username, you'll need to logout and relogin with the new username. Because the old username/auth is no longer valid.
I'll see if we can improve the error message we return, rather than a 500.

Nope, same error. Now, I'm trying to remove the books from Chrome and it gives me the same error. I would like to delete/remove my entire account and try again, but I can't delete it because it says that I have to delete the books first - which I can't :(

Hey @AaronO can somebody help me with this?

@cborodescu What are your usernames ?

@AaronO Changed it from "cborodescu" to "appticles"

@cborodescu Do you want me to remove your pre-existing books ?
Could you list the steps you made ? The git repos attached to your books appear empty and invalid. How did you create those projects ? Did you force push any local repos to them ? Anything noteworthy ? (trying to understand the core issue here)

@AaronO yes, please.
I logged in with GitHub, added those book titles, then changed the username. I didn't use the option to sync it with GitHub. And what's strange is that I had at one point 3 books and all of the sudden, after installing the Mac editor, one of those books simply vanished.
It was really odd ...

Is there anything else you can remember ? I feel like something must have went wrong whilst renaming your account, but I'm going to have to dig into our logs to see what.
As a side note, we do recommend teams/companies user organisation accounts (rather than single user accounts).

@cborodescu Did you ever edit/push any of your content ?

@cborodescu I have successfully removed the invalid projects on your profile

@AaronO thanks. No I didn't get to push/edit anything. In fact, it was not working and that's the reason I installed the Mac editor.

@cborodescu From our logs, it appears cborodescu/frequently-asked-questions was removed ~1h30 after renaming your account.

Yup, everything works now. Thanks, really appreciate the help.

@cborodescu How did you create your projects ? Did you import them from a bare GitHub repo ?

Nope, just from your dashboard.

Can I remove my account? If I do I guess you'll still have the logs, right?

@cborodescu Yes, we'll still have the logs, so you can remove your account. Sorry for the error you encountered that's definitely a strange one, I'm going to dig into it.

@AaronO this is incredibly frustrating. I've removed my account, created a new one and an organization and now everything is frozen out ...

I received the e-mail and confirmed, but still nothing ...

@AaronO and by the way, I cleared my cache, cookies and also tried it with Incognito. Still the same. Maybe you can help with resetting the token or something ...

@cborodescu There's something really strange about the number of issues you're encountering. A member of our team logged into your account (using our admin dashboard) and everything worked smoothly.
Do you have the Grammarly plugin in Incognito mode too ?
Another user reported Grammarly causing lots of issues in the editor and co. (I believe their plugin messes with the DOM and our app doesn't like that).
Could you try disabling Grammarly, restarting your browser and trying the same page ?

@cborodescu Can you try in firefox / Safari or some other browser with no plugins? (I want to see if your plugins injecting things into our pages are the source of the issue)

@AaronO I don't have Grammarly. I have tried on Safari on my Mac, on one of my colleague's Mac (Chrome, Safari and Firefox) ... still the same error in console: "invalid or unexpected token".
I think there's an issue with the e-mail validation ... I only got this error after I validated it.

@cborodescu We've fixed it manually. In your descriptions (org & user) you had two "line break" unicode characters (8232 / 0x2028), those break the JSON/JS parsing done by the browser, thus breaking our frontend JS code (neither of those characters are escaped by default in JS).
We'll escape those characters moving forward in a upcoming deployment.
Where did you pull those descriptions from, did you copy paste them from Word or some other program ?

@AaronO thanks for the patience with this. It works now. I think it was a .page file.

No problem, I'm happy we found the core issue :) That was pretty obscure and annoying to debug.


Feature to disable the entire keyboard

Description of the new feature / enhancement
disable the keyboard keys from functioning
Scenario when this would be used?
This is useful espectially for laptop users, sometimes you want to write on a notebook on the laptop
Supporting information
This is an example program if you wanted to implement instead of making one from scratch, it's made with AutoHotkeys script, it is originally made by someone in www.howtogeek.com and I modified it to be able to right click the notification tray and Enable/Disable it.
Keyboard Locker V2.zip

Original file, I don't know why you would need it but ok
Keyboard-Locker.zip

/dup #20445


Overhaul project profile page

check it out

you may want to talk with @jfucci he has been working on a redesign of the project page and has a pr out that handles some changes too it.

Sorry for ignoring this for so long. I haven't worked on the project page in a while... I was going for a more drastic overhaul than this but this works well for me at the moment, especially since I don't plan on working on the profile page in the near future. Before I merge I want to make sure that merging into the rss branch is what you want to do... I presume after this is merged you are going to merge that branch into master?

Addresses  #12

@agundy @kmcnellis should this still be an open pr...? I think we should discuss as a group how we want to restructure the project page since its a pretty big change


Web Configurator for Available API Options

It could be nice to create a configurator / utility that generates the render with the respective, available API parameters for easily messing around with the options.
I could see this being a simple, static site deployed to GitHub Pages, and programmatically generating the relevant options from the code via some script and GitHub Actions. Alternatively, the generator can be hosted on Vercel along with the API.

Are you talking about a generator site where you can easily use the API ?
Like this ? box-shadow generator

@kyechan99 Yep, something similar to that. Any contentions?

ok. I don't know when it will be, but I'll try.

It took a really long time. 😭
Finally, Generator  was added.


supports anonymous S3 connect

Checks whether env var awsAnonymousCredential true
to use S3 resource config anonymous
addresses issue #1581
Signed-off-by: Malini Bhandaru<EMAIL_ADDRESS>
What this PR does / why we need it:
Which issue(s) this PR fixes (optional, in fixes #<issue number>(, fixes #<issue_number>, ...) format, will close the issue(s) when PR gets merged):
Fixes #1581
Special notes for your reviewer:

Please confirm that if this PR changes any image versions, then that's the sole change this PR makes.

Release note:

/ok-to-test

/ok-to-test

/ok-to-test

Thank you for your contribution Malini!
/lgtm

/approve


adding stitchchat to app showcase

Thanks for submitting a pull request! Please provide enough information so that others can review your pull request:
(You can skip this if you're fixing a typo or adding an app to the Showcase.)
Explain the motivation for making this change. What existing problem does the pull request solve?
Prefer small pull requests. These are much easier to review and more likely to get merged. Make sure the PR does only one thing, otherwise please split it.
Test plan (required)
Demonstrate the code is solid. Example: The exact commands you ran and their output, screenshots / videos if the pull request changes UI.
Make sure tests pass on both Travis and Circle CI.
Code formatting
Look around. Match the style of the rest of the codebase. See also the simple style guide.
For more info, see the "Pull Requests" section of our "Contributing" guidelines.

Hey, I'm really sorry for the churn, but we are changing up how the showcase works, and just focusing on apps that have some media presence or technical blog posts / other content. So I appreciate the spirit behind this pull request but I think we should close it.


fails when loading model

[1/5/2024 8:57:40 AM] [Information] [ModelPickerControl] [LoadModel] - 'dreamlike' Loaded., Elapsed: 3ms
[1/5/2024 8:57:43 AM] [Information] [ModelPickerControl] [LoadModel] - 'dreamlike' Loading...
[1/5/2024 8:57:43 AM] [Error] [ModelPickerControl] An error occured while loading model 'dreamlike'
Microsoft.ML.OnnxRuntime.OnnxRuntimeException: [ErrorCode:RuntimeException] D:\a_work\1\s\onnxruntime\core\session\provider_bridge_ort.cc:1193 onnxruntime::ProviderLibrary::Get [ONNXRuntimeError] : 1 : FAIL : LoadLibrary failed with error 126 "" when trying to load "C:\non-docker\OnnxStack_TensorRT\onnxruntime_providers_tensorrt.dll"
at Microsoft.ML.OnnxRuntime.SessionOptions.AppendExecutionProvider_Tensorrt(Int32 deviceId)
at OnnxStack.Core.Extensions.GetSessionOptions(OnnxModelConfig configuration)
at OnnxStack.Core.Model.OnnxModelSession..ctor(OnnxModelConfig configuration, PrePackedWeightsContainer container)
at OnnxStack.Core.Model.OnnxModelSet.<.ctor>b__3_1(OnnxModelConfig modelConfig)
at System.Collections.Immutable.ImmutableDictionary.<>c__DisplayClass9_03.<ToImmutableDictionary>b__0(TSource element)    at System.Linq.Enumerable.SelectListIterator2.MoveNext()
at System.Collections.Immutable.ImmutableDictionary2.AddRange(IEnumerable1 items, MutationInput origin, KeyCollisionBehavior collisionBehavior)
at System.Collections.Immutable.ImmutableDictionary2.AddRange(IEnumerable1 pairs, Boolean avoidToHashMap)
at System.Collections.Immutable.ImmutableDictionary2.AddRange(IEnumerable1 pairs)
at System.Collections.Immutable.ImmutableDictionary.ToImmutableDictionary[TSource,TKey,TValue](IEnumerable1 source, Func2 keySelector, Func2 elementSelector, IEqualityComparer1 keyComparer, IEqualityComparer1 valueComparer)    at System.Collections.Immutable.ImmutableDictionary.ToImmutableDictionary[TSource,TKey,TValue](IEnumerable1 source, Func2 keySelector, Func2 elementSelector)
at OnnxStack.Core.Model.OnnxModelSet..ctor(IOnnxModelSetConfig configuration)
at OnnxStack.Core.Services.OnnxModelService.LoadModelSet(IOnnxModelSetConfig modelSetConfig)
at OnnxStack.Core.Services.OnnxModelService.<>c__DisplayClass5_0.b__0()
at System.Threading.Tasks.Task`1.InnerInvoke()
at System.Threading.ExecutionContext.RunFromThreadPoolDispatchLoop(Thread threadPoolThread, ExecutionContext executionContext, ContextCallback callback, Object state)
--- End of stack trace from previous location ---
at System.Threading.ExecutionContext.RunFromThreadPoolDispatchLoop(Thread threadPoolThread, ExecutionContext executionContext, ContextCallback callback, Object state)
at System.Threading.Tasks.Task.ExecuteWithThreadLocal(Task& currentTaskSlot, Thread threadPoolThread)
--- End of stack trace from previous location ---
at OnnxStack.Core.Services.OnnxModelService.LoadModelAsync(IOnnxModelSetConfig model)
at OnnxStack.StableDiffusion.Services.StableDiffusionService.LoadModelAsync(IOnnxModelSetConfig model)
at OnnxStack.UI.UserControls.ModelPickerControl.LoadModel() in D:\Repositories\OnnxStack\OnnxStack.UI\UserControls\ModelPickerControl.xaml.cs:line 124
[1/5/2024 8:57:43 AM] [Information] [ModelPickerControl] [LoadModel] - 'dreamlike' Loaded., Elapsed: 3ms
I downloaded the huggingface repo in the readme and attempted to load, but get this in the logs.
I will note: this is looking for a file on the drive d, instead of a file in the download. I believe you may have fixed paths instead of relative paths in your repo.

Are you running this from OnnxStack.Console?
It sounds like you need to update the paths to your models in the appsettings.json file.
Can you share more information about:

What are you doing? Are you running the UI or the example console app?

Have you installed all the correct dependencies for the TensorRT version?
The error LoadLibrary failed with error 126  indicates that OnnxRuntime can't find one of the CUDA or TensorRT libraries.
The Cuda and TensorRT builds are experimental but do work, however you need to install a lot of Cuda dependencies

Name
ONNX EP
Device
Requirements
Status

OnnxStack_UI.zip
DirectML
CPU, AMD GPU, Nvidia GPU
At least Windows10
Stable

OnnxStack_UI_Cuda.zip
CUDA
CPU, Nvidia GPU
CUDA 11  and cuDNN toolkit
Experimental

OnnxStack_UI_TensorRT.zip
TensorRT
CPU, Nvidia GPU
CUDA 11 , cuDNN and TensorRT libraries
Experimental

I would recommend the DirectML default build as its more compatible
Links to the things that need to be installed for TensorRT if you would like.
CUDA 11 - https://docs.nvidia.com/cuda/cuda-installation-guide-microsoft-windows/index.html
CUDNN - https://developer.nvidia.com/cudnn
TensortRT https://docs.nvidia.com/deeplearning/tensorrt/install-guide/index.html

There are no instructions for the UI because its just a simple example app
Unfortunately this library may not be compatible with your card, its still new and does not have many testers


fix: local variable 'params' referenced before assignment

Issue #, if available:
Fix indent issue causing variable referenced before assignment errors

Closing in favour of safer alternative fix to be introduced by @dgraeber


PostgreSQL output file and compress functionality

Hi, right now, the output of the backup file is the plain text sql format. It is not very storage efficient. For postgres pg_dump command offers output format selection:
$ man pg_dump

...
-F format
       --format=format
           Selects the format of the output.  format can be one of the following:

           p
           plain
               Output a plain-text SQL script file (the default).

           c
           custom
               Output a custom-format archive suitable for input into pg_restore. Together with the directory output format, this is the most flexible output format in that it allows
               manual selection and reordering of archived items during restore. This format is also compressed by default.
...

I tried it and the output .pg file is about 15-20x smaller then the default .sql script file because of automatic compression. Except of that, the backuping process is much more faster and better for restoring because it is suitable for pg_restore command. It comes with many useful arguments like --table, --data-only, etc...
I believe it should be set as default output format for PostgreSQL.

Thanks for this issue @eriktelepovsky .
Effectively we should use PostgreSQL compression by default, but we should warn user to not compress again with DBBackup.

Is this 'question' going to be converted into an issue?
I think it is an issue that we are not able to define whether compression is to be used.

@GeoffThorpeFT Sorry for our latency
We plan to remake the DBCommand system (cf: #102), this enhancement is made for deal better with all options of backup systems.
Unfortunately, time is missing...
This issue is really pertinent and not considered only as question.


How detect stop server event ?

I want to listen for a server stop event to take an action if this happens

I tried it from php but it doesn't execute anything, I think what you give me is focused on javascript or I'm wrong

test.php
<?php
require_once __DIR__ . '/vendor/autoload.php';
use Workerman\Protocols\Http\Request;
use Workerman\Worker;
use Workerman\Connection\TcpConnection;

Worker::$onMasterStop = function () {
    echo "stoped\n";
};
$worker = new Worker('http://<IP_ADDRESS>:1234');
$worker->onMessage = function (TcpConnection $connection, Request $request) {
    $connection->send('hello');
};
Worker::runAll();

Run command php start.php start.

Run command php start.php stop in another console.

The first console printed 'stoped'

Thank you very much, do you know if there is any way to automatically initialize the server if it stops due to an error or for any reason?


fixes #74: Feature message encryption

📋 Description
We are going to create a logic a bit like WhatsApp. When users register, store their public keys in your database, while keeping their private keys secure (ideally, they should be stored only in the user's browser or local storage).

🔨 Changes Made

Message encryption
new modal to generate private key
route to handle encryption

✅ Checklist
Before submitting the PR, please make sure you have completed the following:

[x] My code follows the style guidelines of this project.
[x] I have performed a self-review of my own code.
[x] I have commented my code, particularly in hard-to-understand areas.
[x] I have made corresponding changes to the documentation (if applicable).
[x] My changes generate no new warnings.
[x] I have tested it locally and it works fine.
[x] Any dependent changes have been merged and published in downstream modules.

🏷 Types of Changes
What type of changes does your code introduce? (Check all that apply)

[ ] Bug fix (non-breaking change which fixes an issue) 🐛
[x] New feature (non-breaking change which adds functionality) ✨
[x] UI enhancement (non-breaking change which enhances UI) 🎨
[ ] Documentation update 📚

🤝 Related Issues

Fixes #74

📸 Screenshots (if applicable)
https://github.com/user-attachments/assets/f5c1a9cd-f5bb-44ce-ad11-5fbfcd50d80c

Thank you for contributing to Truth-Tunnel! We look forward to reviewing your PR and getting it merged!

@priyanshuverma-dev

@MitulSonagara fixed

@priyanshuverma-dev
Nice work bro


add migrations to abi-1.6 branch

so it gets updates like rdma_core version bumps

Hi! This is the friendly automated conda-forge-linting service.
I wanted to let you know that I linted all conda-recipes in your PR (recipe/meta.yaml) and found some lint.
Here's what I've got...
For recipe/meta.yaml:

❌ In conda-forge.yml: $ = {'abi_migration_branches': ['abi-1.6'], 'build_platform': {'linux_aarch64': 'linux_64', 'linux_ppc64le': 'linux_64', 'osx_arm64': 'osx_64'}, 'conda_build': {'error_overlinking': True}, 'conda_forge_output_validation': True, 'github': {'branch_name': 'main', 'tooling_branch_name': 'main'}, 'provider': {'linux_aarch64': 'default', 'linux_ppc64le': 'default'}, 'test': 'native_and_emulated'}.

Additional properties are not allowed ('abi_migration_branches' was unexpected)

Schema

This message was generated by GitHub Actions workflow run https://github.com/conda-forge/conda-forge-webservices/actions/runs/12391819319. Examine the logs at this URL for more detail.

Hi! This is the friendly conda-forge automerge bot!
I considered the following status checks when analyzing this PR:

linter: failed
azure: passed

Thus the PR was not passing and not merged.

Hi! This is the friendly conda-forge automerge bot!
Commits were made to this PR after the automerge label was added. For security reasons, I have disabled automerge by removing the automerge label. Please add the automerge label again (or ask a maintainer to do so) if you'd like to enable automerge again!

Hi! This is the friendly automated conda-forge-linting service.
I just wanted to let you know that I linted all conda-recipes in your PR (recipe/meta.yaml) and found it was in an excellent condition.


Shaders issue

The shaders don't work.....
also, can i apply for your team?
EDIT. the shaders work now...

Umm... I'm going to need a bit more details on what's your problem... and if you're interested, join the Discord server for Shadowlight Studios: https://discord.gg/VYUHEnB


TPV: mitochondrial proton-transporting ATP synthase, catalytic core (GO:0005754)

mitochondrial proton-transporting ATP synthase, catalytic core (GO:0005754)
for some reason has the parent
endoplasmic reticulum protein-containing complex?

Also
GO:0005756 | mitochondrial proton-transporting ATP synthase, central stalk
has
endoplasmic reticulum protein-containing complex

looks like both happened because GO:0000275 is_a GO:0140534 has been asserted, presumably by mistake


ecs-agent: use buildGoModule

Description of changes
ZHF: #199919
Things done

Built on platform(s)

[ ] x86_64-linux
[ ] aarch64-linux
[ ] x86_64-darwin
[ ] aarch64-darwin

[ ] For non-Linux: Is sandbox = true set in nix.conf? (See Nix manual)
[ ] Tested, as applicable:

NixOS test(s) (look inside nixos/tests)
and/or package tests
or, for functions and "core" functionality, tests in lib/tests or pkgs/test
made sure NixOS tests are linked to the relevant packages

[ ] Tested compilation of all packages that depend on this change using nix-shell -p nixpkgs-review --run "nixpkgs-review rev HEAD". Note: all changes have to be committed, also see nixpkgs-review usage
[ ] Tested basic functionality of all binary files (usually in ./result/bin/)
22.11 Release Notes (or backporting 22.05 Release notes)

[ ] (Package updates) Added a release notes entry if the change is major or breaking
[ ] (Module updates) Added a release notes entry if the change is significant
[ ] (Module addition) Added a release notes entry if adding a new NixOS module
[ ] (Release notes changes) Ran nixos/doc/manual/md-to-db.sh to update generated release notes

[ ] Fits CONTRIBUTING.md.

WFM, aarch64-linux.
Feel like adding yourself as a maintainer seeing the size of the overhaul you did on it?

I think i will pass. :)

Fair enough..


Corsair RGB k70 rapidfire french layout

Hi,
On my Corsair keyboard french layout, the "A" key seems to be inverted with "Q" and "W" key witch "Z".
The Aurora GUI layout is ok.

Are you on 0.6.0 pre-release? #287
If not, please see if your issue persists on that version.

I wasn't on the 0.6.0 pre-release.
Now i'm on it and still have this issue

Is it the lighting that is inverted? Or is it also the interaction effect?

Hello anton, first of all thx for your great job, then im a user of french layout and light are still inverted ( W > Z ; A > Q ... ) for all games, using ver0.6.0.
So interaction are inverted too.. it's quite disturbing. Hope this helps

@km972 What keyboard do you have? What localization? Have you set your localization in Aurora settings?

Have a K70 RapidFire RGB , lmocalization is set on French on Aurora settings. screen below

Issue still not resolved, any news ?

Which keys are inverted again? Is it just the lighting? Are interactive effects firing on correct keys in Aurora?

The keys inverted are :
w for z
q for a
as on the previous screen, by the way whatever the game i play, the lights and interaction works like i have an Qwerty layout instead of an Azerty.
Basically Aurora act like Azerty french layout doesnt exist.


Node Core Bot With Language failed to deploy to Linux

Describe the bug
My bot made from Node template "Core Bot With Language" deployed OK to Azure Windows, but errored deploying to Azure Linux.
To Reproduce
Using Composer 2.1.2 in Windows, I created a bot using the Node template "Core Bot With Language".
I chose a LUIS region of West US.
Creating a publishing profile, I chose:

App Service: Linux
Resource region: West US 2
LUIS region: West Europe

Publishing with that profile, the process ran for more than an hour, then errored with:
"{"name":"DEPLOY_ZIP_ERROR","message":"There was a problem publishing bot assets (zip deploy). "Getting status of zip upload processing failed. {"stack":"Error: Request failed with status code 403
    at createError (C:\Program Files\Bot Framework Composer\resources\app.asar.unpacked\extensions\azurePublish\dist\extension.js:105969:17)
    at settle (C:\Program Files\Bot Framework Composer\resources\app.asar.unpacked\extensions\azurePublish\dist\extension.js:105983:14)
    at IncomingMessage.handleStreamEnd (C:\Program Files\Bot Framework Composer\resources\app.asar.unpacked\extensions\azurePublish\dist\extension.js:106970:13)
    at IncomingMessage.emit (events.js:215:7)
    at endReadableNT (_stream_readable.js:1183:12)
    at processTicksAndRejections (internal/process/task_queues.js:80:21)","message":"Request failed with status code 403","config":{}}"","stack":"Error
    at new CustomizeError (C:\Program Files\Bot Framework Composer\resources\app.asar.unpacked\extensions\azurePublish\dist\extension.js:276830:25)
    at createCustomizeError (C:\Program Files\Bot Framework Composer\resources\app.asar.unpacked\extensions\azurePublish\dist\extension.js:276835:10)
    at BotProjectDeploy.deployZip (C:\Program Files\Bot Framework Composer\resources\app.asar.unpacked\extensions\azurePublish\dist\extension.js:277366:13)"}"

Publishing with this profile got the same error:

App Service: Linux
Resource region: West US
LUIS region: West US

Publishing with this profile succeeded:

App Service: Windows
Resource region: West US
LUIS region: West US

Suggested fix:
The guys here say that Composer deploys to Linux for all types of bots are broken, not just this one.
If the fix for this is not too difficult and is low risk, we suggest fixing it. Otherwise, the Composer Linux deploy option ought to be disabled.

Linking other issues:
https://github.com/microsoft/BotFramework-Composer/issues/8890
https://github.com/microsoft/BotFramework-Composer/issues/9360


Update README.md Preview Screenshots

Description

Fixes #ISSUE
Type of Change:

Bugs
New Feature
Documentation

How Has This Been Tested?

Checklist:

[ ] My PR follows the style guidelines of this project
[ ] I have performed a self-review of my own code or materials
[ ] I have commented my code or provided relevant documentation, particularly in hard-to-understand areas
[ ] My changes generate no new warnings
[ ] New and existing unit tests pass locally with my changes

Kindly link the issue in the description

ok

Done!


fn: exclude timeouts from failed error count

I'm wondering whether the logic should be the same as in transformTimeout (called immediately after this), which checks the isRetriable  flag as well as the error.
( transformTimeout converts the DeadlineExceeded  to a ErrCallTimeoutServerBusy which then causes HandleErrorResponse to set Retry-After to 15. However I don't see how this any effect on my simple test case)

Logic is the same since isRetriable flag is passed from the caller context. In these two if blocks, it's set to true.
Agent code does not retry in these cases except for async code. Is your test case an async case?