[BUG] - POAP API Key is not supposed to be public and must be kept private to protect it from misuse

Briefly describe the bug.
POAP API keys carry many privileges and hence should be kept private
How can we reproduce the bug?

I read here at faq that I could report security vulnerabilities here: https://docs.snapshot.org/faq#i-think-i-found-a-vulnerability-on-snapshot.-do-you-have-a-bug-bounty but couldn't find the third option as shown in the screenshot so reporting it directly as a bug report.

Hello team,
It was observed that you guys are leaking a valid POAP Key, this one:
e68BJLYJ1ns9Mdb9hd21j8Ci1e6dVYsAddQfOVQp3oYHo9bqLCutMewQP8NhbVvguMdHiHefNat3eZWiFReeV9nr7QH4xAl67fYASKHhFfGbVKKzak11PV6NM1wYy2eP

here at - https://github.com/snapshot-labs/snapshot/blob/master/src/plugins/poap/index.ts
I think this was added in this PR: https://github.com/snapshot-labs/snapshot/pull/3367
According to POAP's official documentation (You can read it here: https://documentation.poap.tech/docs/authentication)

Your API keys carry many privileges, so please keep them secure! Do not share your secret API keys on publicly accessible platforms.

they are not supposed to be public because they carry several privileges and hence should be kept private.
Proof of Concept

Here's how you could validate these keys:

curl -vvv -H "X-API-Key: e68BJLYJ1ns9Mdb9hd21j8Ci1e6dVYsAddQfOVQp3oYHo9bqLCutMewQP8NhbVvguMdHiHefNat3eZWiFReeV9nr7QH4xAl67fYASKHhFfGbVKKzak11PV6NM1wYy2eP" https://api.poap.tech/events/id/16947

Note: Invalid API keys respond with a forbidden error.
What is the expected behaviour?
API keys are intended to be kept secret and only known to trusted entities. Exposing them publicly, such as in client-side code, means they can be discovered and exploited.
Expected behavior & Suggestion:

Store API keys as environment variables on the server, where they are more secure and can be changed without modifying code.
Or Use API key management tools that provide features like key rotation, monitoring, and usage control.

What you can do right now?

Revoke these keys and ask poap for a new one, and then use them in a secure manner.

Can you attach screenshots?
No response
Can you provide your device specific details below?
No response

@ChaituVR any idea? Wasn't the poap key added by their team in our UI? From git blame it looks like it was added by https://github.com/nacho9900 who seems to be part of their team.

@nacho9900 Any idea on this?

HEJ. POPROSZE STEFANA O KONTAKT. Bo CHCE COS NAPRAWIC! WIECEJ STARAN Z
MOJEJ STRONY NIE BEDZIE.  NA TEN 2 NUMER . DZIĘKUJĘ K.SZ
niedz., 15 paź 2023, 13:04 użytkownik Chaitanya @.***>
napisał:

@nacho9900 https://github.com/nacho9900 Any idea on this?
—
Reply to this email directly, view it on GitHub
https://github.com/snapshot-labs/snapshot/issues/4282#issuecomment-1763354819,
or unsubscribe
https://github.com/notifications/unsubscribe-auth/AUUANJXRYR6ZQPQIQFFOAWTX7O7L5AVCNFSM6AAAAAA57DAPG6VHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMYTONRTGM2TIOBRHE
.
You are receiving this because you are subscribed to this thread.Message
ID: @.***>

opps


Build manifest references non existent error page component

Describe the bug
When starting dev or build mode on an app generated after running npm init svelte@next, an error is thrown saying that the default error page does not exist.
Reproduction
Generate a template app using npm init svelte@next and start dev mode
Logs
><EMAIL_ADDRESS>dev C:\devenv\projects\svelte-kit-test-repo
> svelte-kit dev

 > .svelte-kit/generated/manifest.js:3:14: error: Could not resolve "..\\runtime\\components\\error.svelte" (mark it as external to exclude it from the bundle, or add ".catch()" to handle the failure at run-time)
    3 │   () => import("..\\runtime\\components\\error.svelte"),
      ╵                ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

> Build failed with 1 error:
.svelte-kit/generated/manifest.js:3:14: error: Could not resolve "..\\runtime\\components\\error.svelte" (mark it as external to exclude it from the bundle, or add ".catch()" to handle the failure at run-time)
.svelte-kit/generated/manifest.js:3:14: error: Could not resolve "..\\runtime\\components\\error.svelte" (mark it as external to exclude it from the bundle, or add ".catch()" to handle the failure at run-time)
    at failureErrorWithLog (C:\devenv\forks\kit\node_modules\.pnpm\esbuild@0.13.15\node_modules\esbuild\lib\main.js:1493:15)
    at runOnEndCallbacks (C:\devenv\forks\kit\node_modules\.pnpm\esbuild@0.13.15\node_modules\esbuild\lib\main.js:941:63)
    at buildResponseToResult (C:\devenv\forks\kit\node_modules\.pnpm\esbuild@0.13.15\node_modules\esbuild\lib\main.js:1149:7)
    at C:\devenv\forks\kit\node_modules\.pnpm\esbuild@0.13.15\node_modules\esbuild\lib\main.js:1258:14
    at C:\devenv\forks\kit\node_modules\.pnpm\esbuild@0.13.15\node_modules\esbuild\lib\main.js:629:9
    at handleIncomingPacket (C:\devenv\forks\kit\node_modules\.pnpm\esbuild@0.13.15\node_modules\esbuild\lib\main.js:726:9)
    at Socket.readFromStdout (C:\devenv\forks\kit\node_modules\.pnpm\esbuild@0.13.15\node_modules\esbuild\lib\main.js:596:7)
    at Socket.emit (events.js:400:28)
    at addChunk (internal/streams/readable.js:293:12)

System Info
System:
    OS: Windows 10 10.0.19044
    CPU: (4) x64 Intel(R) Core(TM) i5-3230M CPU @ 2.60GHz
    Memory: 890.32 MB / 7.89 GB
  Binaries:
    Node: 14.18.3 - C:\Program Files\nodejs\node.EXE
    Yarn: 1.22.17 - C:\Program Files\nodejs\yarn.CMD
    npm: 6.14.15 - C:\Program Files\nodejs\npm.CMD
  Browsers:
    Chrome: 97.0.4692.99
    Edge: Spartan (44.19041.1266.0), Chromium (97.0.1072.76)
    Internet Explorer: 11.0.19041.1202
  npmPackages:
    @sveltejs/adapter-auto: next => 1.0.0-next.17
    @sveltejs/kit: next => 1.0.0-next.250
    svelte: ^3.46.0 => 3.46.3

Severity
annoyance
Additional Information
No response

I suspect this is a Windows-only bug or we'd have had other reports of it. None of the maintainers are on Windows except for one WSL user, so I'd love any help you can offer with this one

I'm closing this issue because the version of the svelte kit running on the repo was a fork linked via pnpm. The issue can't be reproduced after installing the right version of the svelte kit. Sorry.

Thanks for following up and closing the issue!
If you have any desire to lend a hand with other Windows issues, we're currently looking for some help on https://github.com/vitejs/vite/pull/6518


Allow exponential backoff to cap its delay at an specified maximum

Allows a new argument in the backoff object, maxDelay, which caps the delay that a failed attempt will have when using exponential backoff.
Fixes #1025

Seems like the tests that are not passing weren't passing before my patch either, should I rebase this to a stable commit with passing tests, wait for you to fix the tests, or something else?

seems like there hasn't been a commit from a maintainer in 3 months, maybe this project is now dead?

Would ya rebase please?

Rebased to master.

Is there any chance of this PR (and other recent merged PRs) making to npm in the foreseeable future?

Sure, I should release a patch version & publish it


Remove cache service account

Remove the cache service account
This is based on top of the bloom filter commits, so incorporates https://github.com/redhat-appstudio/jvm-build-service/pull/274 and https://github.com/redhat-appstudio/jvm-build-service/pull/272
With the approach the only objects that we sync to the underlying compute cluster are:

pipelineruns
configmaps
deployments

@gabemontero what do you think about this approach?

and on the config maps, as long as we use controller runtime cache/watch disablement approach I noted in https://github.com/redhat-appstudio/jvm-build-service/pull/274#discussion_r983846985 we are good there too

/retest

/test jvm-build-service-in-repo-apicurio-e2e


Different implementations

May I ask what is the difference between pyDes.py and pyDes_152_compat.py?

That was a Python 1.5 compatible version (yes, this code is that old), as newer features (like Python list comprehensions and map) were used to speed up parts of the code.
I can probably delete that now - I doubt anyone still has Python 1.5 in use :)


Docs on plugins.drone.io is not up-to-date

It would be a better user experience to update these docs, although I don't know who is responsible for maintaining that page. Should I post in the drone discourse about this or elsewhere?
http://plugins.drone.io/lucaperret/drone-now/

It seems to be update...

ah yes you are right. looks good now


google translate added

The nav component was creating problems with the visibility of translator,other wise it is now showing the required languages only

Good work!


Post release tasks for 4.9.1

Description
This issue attempts to track the steps necessary to complete post-release maintenance tasks for 4.9.1.
The goal is to complete the following tasks, each task must have a PR associated with this issue.
The branches must follow the naming: merge-<ORIGIN_BRANCH>-into-<DESTINATION_BRANCH>. For example, merge-4.9.1-into-4.10.0.
Tasks

[x] Merge branch 4.9.1 into branch 4.10.0.
[x] Merge branch 4.10.0 into branch 4.10.1.
[x] Merge branch 4.10.1 into branch 4.10.2.
[x] Merge branch 4.10.2 into branch master.
https://github.com/wazuh/wazuh-security-dashboards-plugin/pull/121
[x] Publish GitHub release as latest.
[x] Delete all stage pre-releases for 4.9.1 (https://github.com/wazuh/wazuh-security-dashboards-plugin/releases).
[x] Delete all stage tags for v4.9.1. BE CAREFUL NOT TO DELETE DEFINITIVE TAG. Example: v4.9.1-rc1, 4.9.1-alpha1, etc.

[!NOTE]
Some merge steps doesn't contain a PR as there were not unmerged changes

LGTM :heavy_check_mark:


Soft deleting HTML attachments

Publishers can currently hard-delete HTML attachments, even those that were published with previous editions. When the edition with the deleted attachment is published, fetching by the attachment's slug starts returning 404, instead of redirecting or returning 410 gone. This results in broken journeys for users who follow those outdated attachment URLs.
The first step to rectifying this issue is to stop hard-deleting attachments; when HTML attachments are migrated to the single publishing stack, deletion of previously published attachments can result in a redirect item.
Trello

@gpeng I've renamed is_deleted to deleted.

:+1:

:+1:


save multi spline to model record.

@deerzq @yolken @hectorgon @spencerde @christhetree

Just one comment, LGTM after fixing


How to re-enable auto generate assets for build and debug in VSC

Environment data
dotnet --info output:
.NET Command Line Tools (1.0.0-preview2-1-003177)
Product Information:
Version:            1.0.0-preview2-1-003177
Commit SHA-1 hash:  a2df9c2576
Runtime Environment:
OS Name:     Windows
OS Version:  10.0.14393
OS Platform: Windows
RID:         win10-x64
VS Code version: 1.7.2
C# Extension version: 1.5.3
Steps to reproduce

md test1
cd test1
dotnet new
Open test1 folder in VSC, then VSC asks "Required assets to build and debug are missing from your project, Add them?", click "Don't ask again".
Close VSC
Re-open VSC and test1 folder in it, there is no prompt to allow auto generate .vscode folder in test1

I should NOT have clicked the "Don't ask again" button, that was a mistake, I want to re-enable this prompt but failed to find where to configure this option, the only option for me now is to press F1 and type generate and then select ".NET: Generate Assets for Build and Debug" but it requires extra typing and selection.

Never mind, I found the prompt shows for new projects created in new folders, for this project I can simply use the command to generate .vscode, it's no big deal.

All it does is creates .vscode folder and adds launch.json ?


Issues unzipping the Common Crawl Pretrained Vectors

Hey Stanford,
    I'm able to download the Common Crawl Pretrained Vectors fine, but when I try to unzip the file, I get an "unspecified

error" that stops the extraction. I've tried repeating the download and unzipping again, but I'm still having the same issue. I also
adjusted my power settings to not have the computer go to sleep or anything and it doesn't seem to help. Is there any other
way you could send the vectors over? I'm developing in Python, so any file that will open properly in Python is fine.
     Sincerely,

                 Alexander Fretheim

There's two versions, each with two mirrors.  I was able to download each
of them and extract them.  If nothing's working for you, would you be more
specific about what the problem is?  You could also report the file size
and/or md5sum of the archives (which probably we should put on the page
itself)
On Tue, Dec 27, 2022 at 7:16 PM ahfretheim @.***> wrote:

Hey Stanford,
I'm able to download the Common Crawl Pretrained Vectors fine, but when I try to unzip the file, I get an "unspecified error" that stops the extraction. I've tried repeating the download and unzipping again, but I'm still having the same issue. I also adjusted my power settings to not have the computer go to sleep or anything and it doesn't seem to help. Is there any other way you could send the vectors over? I'm developing in Python, so any file that will open properly in Python is fine.

 Sincerely,

             Alexander Fretheim

—
Reply to this email directly, view it on GitHub
https://github.com/stanfordnlp/GloVe/issues/208, or unsubscribe
https://github.com/notifications/unsubscribe-auth/AA2AYWLYQIUFFEJ6LA2IVM3WPOWI3ANCNFSM6AAAAAATK4V4JM
.
You are receiving this because you are subscribed to this thread.Message
ID: @.***>

Hey John, thanks for the quick response! I was able to successfully extract
the file to the hard disk of this computer. I think maybe it was just some
kind of issue with the stick drive I was trying to extract it to because
it's so big. Thanks for the help anyways! For the purpose of specificity,
the file I am trying to use is the 840 billion token/300-dimensional one.
     Sincerely,

                   Alexander

On Tue, Dec 27, 2022 at 8:44 PM John Bauer @.***> wrote:

There's two versions, each with two mirrors. I was able to download each
of them and extract them. If nothing's working for you, would you be more
specific about what the problem is? You could also report the file size
and/or md5sum of the archives (which probably we should put on the page
itself)
On Tue, Dec 27, 2022 at 7:16 PM ahfretheim @.***> wrote:

Hey Stanford,
I'm able to download the Common Crawl Pretrained Vectors fine, but when
I try to unzip the file, I get an "unspecified error" that stops the
extraction. I've tried repeating the download and unzipping again, but I'm
still having the same issue. I also adjusted my power settings to not have
the computer go to sleep or anything and it doesn't seem to help. Is there
any other way you could send the vectors over? I'm developing in Python, so
any file that will open properly in Python is fine.
Sincerely,
Alexander Fretheim
—
Reply to this email directly, view it on GitHub
https://github.com/stanfordnlp/GloVe/issues/208, or unsubscribe
<
https://github.com/notifications/unsubscribe-auth/AA2AYWLYQIUFFEJ6LA2IVM3WPOWI3ANCNFSM6AAAAAATK4V4JM
.
You are receiving this because you are subscribed to this thread.Message
ID: @.***>

—
Reply to this email directly, view it on GitHub
https://github.com/stanfordnlp/GloVe/issues/208#issuecomment-1366364088,
or unsubscribe
https://github.com/notifications/unsubscribe-auth/ASFHHIDHAQJMU4JDFH4KJCLWPPARJANCNFSM6AAAAAATK4V4JM
.
You are receiving this because you authored the thread.Message ID:
@.***>

how is this going


Fix typos and grammar errors in Ukrainian translation

Google translate seems to check out on this.

Well, I'm a native speaker. Trust me :)
Let's ask original translation author @dimonzz (#24) approve my changes.

@MadLittleMods sounds good. It can be merged I think.
@webknjaz thanks for corrections.

@webknjaz Thanks for the contribution!


Add COVID-19 Opening Hours Option

Maptime Bmore is planning a virtual mappy hour on 4/30 to update Baltimore carryout restaurants on OSM using a crowdsourced spreadsheet for reference. We'd like to add the pandemic-related opening_hours using the newly authored opening_hours:covid19 spec on the OSM Wiki..
Can the opening_hours:covid19 key be added to iD? Before 4/30?

Before 4/30?

Not sure what the release schedule is for iD, but even after a new release of iD is published, it may take a little while for it to be deployed on openstreetmap.org. In case it isn’t feasible to release the requested change by then, it would still be possible to host an instance of iD on some website that the mappy hour participants can use instead of the main openstreetmap.org instance.

Can the opening_hours:covid19 key be added to iD? Before 4/30?

Yes, you have been ablet the tag with iD for a couple of years already – well without the support of presets. Just select the object to be modified and then go to "All tags" in the left sidebar and enter the tag manually. It is not as comfortable as an additional field in the preset but it works now and does push any pressure on the maintainers of iD (which is not needed because not implementing it quickly is does not harm OSM data).

Thanks for doing this @quincylvania and for requesting the change @talllguy!


Content for Histories, Examinations and Extras

Hi all - here are some stations to fill in the content:
Histories:

Headache
--
--
--
--
v
Vomiting
Shortness of Breath
Visual loss
Cough
Chest Pain
Abdominal Pain
Dysuria
Weakness

Examinations:

Cardiovascular
-- Washes hands
-- Introduction
-- Gains consent
-- General inspection
-- Checks peripheral pulses
-- Checks blood pressure
-- Inspects JVP
-- Palpates carotids
-- Localises apex beat
-- Auscultates valve areas with correct positioning
-- Listens to lung bases
-- Checks for ankle oedema
-- Thanks patient & summarises findings
-- Washes hands
Respiratory
Abdominal
Cranial nerves
Thyroid
Upper Limb neurological
Lower Limb neurological
Shoulder
Hip
Knee
Ankle

Extras:

ABCDE
-- Checks it is safe to approach the patient
-- Asks for baseline observations- If done, asks for help if appropriate
-- Shakes pt's shoulders and speaks loudly in both ears
-- Airway: Looks for Obvious respiratory distress
-- Airway:  Visualises the oral area to check for obvious obstruction
-- Airway: Listens for stridor, gurgling and snoring (must state all 3) + wheeze
-- Airway: Measures RR and sats
-- Airway: Treats if appropriate: Sit patient up, ‘consider airway adjunct’
-- Breathing: Looks for: Pursed lips & nasal flaring
-- Breathing: Looks for: Tracheal deviation
-- Breathing: Looks for: Symmetrical chest expansion
-- Breathing: Looks for: Accessory muscle use
-- Breathing: Feels for: Tracheal centrality
-- Breathing: Feels for: Symmetrical expansion
-- Breathing: Percussion of the chest
-- Breathing: Listens to the front and back of the chest
-- Breathing: Checks for sacral oedema after listening to the back
-- Breathing: Measures: Oxygen saturations
-- Breathing: Measures: Respiratory rate
-- Breathing: Treats: ABG as appropriate
-- Breathing: Treats: High flow (15L) oxygen via a non-rebreathe mask
-- Breathing: Treats: Analgesia (morphine + lax + anti-emetic) as appropriate
-- Reassess - candidate reviews airway
-- Circulation: looks for: Cyanosis
-- Circulation: looks for: Trauma/bleeding
-- Circulation: looks for: Visible JVP
-- Circulation: feels for: Warm/well perfused peripheries
-- Circulation: feels for: Radial pulse
-- Circulation: feels for: Carotid pulse
-- Circulation: feels for: Heaves/thrills
-- Circulation: feels for: Apex beat
-- Circulation: Listens for: Heart sounds
-- Circulation: Measures: Capillary refill
-- Circulation: Measures: Blood Pressure
-- Circulation: Measures:  Heart Rate
-- Circulation: Measures: Urine Output
-- Circulation: Measures: Temperature
-- Circulation: Treats: ECG as appropriate
-- Circulation: Treats: 2x wide bore cannulae
-- Circulation: Treats: Fluid challenge
-- Circulation: Treats: Bloods (U&E, FBC, cross match)
-- Reassess airway and breathing
-- Disability: AVPU
-- Disability: Blood glucose
-- Everything Else: Top-to-toe assessment (e.g. checks rashes)
-- Everything Else: Checks allergy
-- Everything Else: SBAR handover
-- Other: Calls for help at an appropriate time and calls 2222

Inhaler technique

Prescribing IV fluids

Smoking Cessation

Thanks @peterwoodward-court, that's great :)
Can I clarify whether you expect there to be cases within Examination stations or Extra stations, in the way that History stations have specific cases? We've just started to implement the database (it went well 👍), so it's important to know in order for us to plan the database schema appropriately.
Additionally, would you consider the items listed under ABCDE to be mark scheme elements?
It would also be nice to have perhaps one or two cases and related mark schemes for each History station, just so there aren't a lot of blank pages hanging around the app.


Unicode support

Author the user story for this feature
As a user, I want to make sure that Unicode characters are fully supported so I can name my projects and project groups using Unicode characters.
Is your feature request related to a problem? Please describe.
We want to make sure when user types in Unicode characters there are no issues with it while using the project.
Describe the solution you'd like
Find and fix any Unicode related issues.
Describe alternatives you've considered
None as Unicode as a de-facto standard for all user typed texts.
Additional context
User fields:

Project name
Project group name

Areas:

Dashboard
Project groups page

Our research has shown, that Project names and Project Group names support Unicode characters.
1. Project names
We can create a Project with Unicode and special characters in its name:

We can use these characters as a Project Name Filter:

2. Project Group names
We can create a Project Group with Unicode characters and special symbols:

We can use these Project Group Names in a Project Group dropdown for filtering by Project Group:

Project Group dialogs support Project Group Names with Unicode characters and special symbols:

Toasts support Project Group Names with Unicode characters and special symbols:


ng add @ngxs/store

ng add @ngxs/store

Using the command ng add @ngxs/schematics you will add to your project:

@ngxs/schematics
@ngxs/store
@ngxs/logger
@ngxs/devtools

They will all be added in dependency.
P.S. angular/cli command ng add provides the ability to add a package to devDependency with --no-save option, but for some reason it is not completed.
Now the default flag is true
save = true

I will try to make PR and fix the bug in the main repository, then it will be possible to add a package @ngxs/schematics in devDependency


HDDS-5560. Updating clusterId to correct value

What changes were proposed in this pull request?
ClusterId was being incorrectly set as datanodeId in the dnlayoutversion/version file.
While this field was not being used anywhere and poses no immediate problem, we wanted to fix it to reflect the correct value.
What is the link to the Apache JIRA
https://issues.apache.org/jira/browse/HDDS-5560
How was this patch tested?
Built successfully.
Local test on docker to see the value is being updated correctly.

@neils-dev @errose28 Can we please review this?

Thanks @nishitpatira for submitting this PR for fixing the dnlayoutversion file to properly container the clusterID.  I;ve applied your patch and brought up the dev docker cluster.  I verified the clusterID for the dnlayoutversion file is the same as the the clusterID marked in the hdds VERSION file as follows,
$ docker-compose exec datanode bash
$ cat /data/metadata/dnlayoutversion/VERSION
$ cat /data/hdds/hdds/VERSION

Would be great if you would update similar steps to test under the "How patch was tested section".  Thanks.

Is there a way we can verify if this update to the dnlayoutversion file does not affect older versions of ozone, 2.1, 1?  @errose28 is this something we need to do?

Hey @nishitpatira ~ there were some comments from the reviewer for this PR. Please help take a look again when you have time, thanks!

This PR is waiting for a test case to be added.  Instead of marking it as pending and getting it auto-closed, I'd like to ask if @DaveTeng0 or @neils-dev would like to contribute the test case?

Thanks @adoroszlai for tending to the status of this PR.  I've gone ahead and implemented a test for it.  The PR patch however needs a bit of work, upon closer look I found an exception raised repeatedly with the current impl.
ozone-datanode-1  | java.io.IOException: Storage directory /data/metadata/dnlayoutversion already initialized.
ozone-datanode-1  | 	at org.apache.hadoop.ozone.common.Storage.setClusterId(Storage.java:123)
ozone-datanode-1  | 	at org.apache.hadoop.ozone.container.common.states.endpoint.VersionEndpointTask.call(VersionEndpointTask.java:81)
ozone-datanode-1  | 	at org.apache.hadoop.ozone.container.common.states.endpoint.VersionEndpointTask.call(VersionEndpointTask.java:41)
ozone-datanode-1  | 	at java.base/java.util.concurrent.FutureTask.run(FutureTask.java:264)
ozone-datanode-1  | 	at java.base/java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1128)
ozone-datanode-1  | 	at java.base/java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:628)
ozone-datanode-1  | 	at java.base/java.lang.Thread.run(Thread.java:829)
ozone-datanode-3  | 2023-03-09 03:41:28,013 [EndpointStateMachine task thread for scm/<IP_ADDRESS>:9861 - 0 ] WARN statemachine.EndpointStateMachine: Unable to communicate to SCM server at scm:9861 for past 350 seconds.

Needs a little work.  I'll push an update when resolved.

thanks @adoroszlai .  Created a unit test, TestEndPoint#testDnLayoutVersionFile.  Currently in my branch linked to this PR, see
https://github.com/apache/ozone/compare/master...neils-dev:ozone:pr/4110.
Pls take a look and we can add it.

@DaveTeng0 can you please review @neils-dev's updates in https://github.com/apache/ozone/commit/63cdd7c4dafe7e0f1f95b8b555e23f51db47001e?

@sumitagrawl can you please review this?

@neils-dev thanks for the unit test, I've added some comments on 63cdd7c4dafe7e0f1f95b8b555e23f51db47001e.

@neils-dev @nishitpatira If test case is added Can you please merge and close this PR.

Continued in #5289.


Modeline : font problem

hi,
i just install the theme and load it. I've got strange font into the modeline. My actual theme is monokai. Any idea ?1

Hi,
I tried to reproduce the issue using your emacs configuration but could not. I'll try to investigate further but at the moment I have no idea how a theme could cause such a issue.

Thanks
I try with same configuration on another host, and it works fine. Strange.

I change font using menu, and it works. Sorry for noise. Thanks for this theme.

Thanks, no problem. If you encounter any other issues just let me know.


Remove hard coded references to /Users/tylercloutier/

The package tests cannot be run because the build fails. There are numerous hard coded references to /Users/tylercloutier/ in the project, which should be replaced with relative references to the package root.

Users should generate their own Xcode project using swift package generate-xcodeproj

Right, so this is an interesting problem. I was trying to configure an Xcode project to be compatible with Carthage, but there doesn't seem to be a way to avoid the references to absolute paths for the C project dependencies using generate-xcodeproj.

Done. Thanks!

Should probably add something to the README file to inform new users of the framework how to generate the Xcode project.


Handling app configuration change and saving state

on foreground transition
theme transition
(Optional) landscape UI

Landscape UI support will be added later.


⚠ ClamAV has degraded performance

In 3a85424, ClamAV (https://spamassassin.apache.org/) experienced degraded performance:

HTTP code: 200
Response time: 85 ms

Resolved: ClamAV performance has improved in ff983d0.


SNOW-767766:  Remove _strip_invalid_sf_identifier_chars

Please answer these questions before submitting your pull requests. Thanks!

What GitHub issue is this PR addressing? Make sure that there is an accompanying issue to your PR.
Fixes #SNOW-767766

Fill out the following pre-review checklist:

[ ] I am adding a new automated test(s) to verify correctness of my new code
[ ] I am adding new logging messages
[ ] I am adding a new telemetry message
[ ] I am adding new credentials
[ ] I am adding a new dependency

Please describe how your code solves the related issue.
Another attempt at addressing the issue described in #758. Test change is taken from original PR.

Hi all, I've updated the code so the change is protected by client side session parameter strip_non_ascii_from_agg_cols.
Please refer to the test cases of test_df_agg_with_nonascii_column_names for the result of this change.


ChatGPT doesn't respond as intended

The premise of the project is fascinating and I look forward to seeing its evolution
ChatGPT doesn't respond as intended initially. You can eventually lead it there, but this makes me think that ChatGPT has been fed this prompt or ones similar to make it aware enough to not truly jailbreak it. I believe it acts in cunning or hypocritical manner to appear as if following the god mode instructions while still sticking with the OpenAI policies
Screenshots for context

You can turn off this feature, but the replying of both normal ChatGPT and GOD ChatGPT is the feature not any error.


LLM pipeline on Snellius

Add code to run the LLM training pipeline on Snellius (using fake data).
These changes allow to run the following scripts

create_json_seq.sh
pipeline.sh
pretrain.py

Any other slurm scripts were not changed. They will need to be updated later.
Main changes

argparsing for pretrain.py with several options: ddp satregy, batch size, N devices, path to config, path to hparams, accelerator
the scripts in src/llm/slurm_scripts can be run with bash or with source; the latter is useful for interactive jobs. In the future, we can see to simplify the code there. (see pretrain_multigpu_singlenode.sh for an example)

Changes in configs

changed vocab size from 1938 (real data) to 2918 (fake data). since we'll update the sequences of the real data soon, I leave this at 2918
the json files for training now specify the path to the fake data. Again, leaving for now and opened issue for making this easier to maintain. XX

Minor changes

type casting in pipeline.py b/c of fake data. this may be a bug in the fake data generation; made issue. XX

Notes
Because we also started trying out how to run multi-gpu training in the same branch, this needs a bit of tidying. I will split the code into smaller PRs

one for changes in the software stack: we changed to 2023, and python 3.11, and I need to discuss this with Dakota. This is done in #70
one for the other changes, and here we need to separate the config files for snellius and ossc. this should be done automatically eventually, but for now I will merge this with separate files.

@tanzir5 , it'd be great if you have a moment today to quickly review this; otherwise I'll merge tomorrow morning CET.


OCPBUGS-31384: use RotatedSigningCASecret controller in update only mode

UseSecretUpdateOnly is intended as a short term hack for a very specific use case,
and it works in tandem with a particular carry patch applied to the openshift kube-apiserver.
(https://github.com/openshift/kubernetes/pull/1924)
we will remove this when we migrate all of the affected secret
objects to their intended type: https://issues.redhat.com/browse/API-1800
in short tls secrets used by this operator are reconciled by multiple controllers  at the same time without any coordination. the issue is that the secret's crypto material can be regenerated, which has serious consequences for the platform as it can break external clients and the cluster itself.
xref: https://github.com/openshift/library-go/pull/1705
xref: https://github.com/openshift/kubernetes/pull/1924

/cc @p0lyn0mial

/retest-required

it also requires https://github.com/openshift/kubernetes/pull/1929

/retest-required

/lgtm

/cc @vrutkovs

/retest-required

/retest-required

/retest

/retest-required

/retest-required

/retest-required

e2e-gcp-operator fails on TestCertRotationStompOnBadType for which i've opened https://github.com/openshift/kubernetes/pull/1932
in general due to the platform's long history (spanning several years)
and the complexity of ensuring that resources were consistently created with only one type
I think that we should relax the restrictions on allowed type mutation transitions.

issues like event happened 4009 times, something is wrong: node/ip-10-0-102-140.us-east-2.compute.internal hmsg/e82226461c - reason/ConfigMapUpdated Updated ConfigMap/kube-control-plane-signer-ca -n openshift-kube-apiserver-operator: result=reject will be fixed by https://github.com/openshift/cluster-kube-apiserver-operator/pull/1661

/retest-required
https://github.com/openshift/cluster-kube-apiserver-operator/pull/1661 merge which should unblock all jobs except e2e-gcp-operator which will be unblocked by https://github.com/openshift/kubernetes/pull/1932

/lgtm

/hold cancel


1.8beta  80 (17301632) Mag #0 fail

Bug Report
Tried to test 1.8 beta with QGC daily build 05-14 d28323333.
Hardware:

system_log_1.8.0 80 (17301632).txt
pixhawk v2, GPS with magentometer ublox NEO-M8N.
Beside the info you see in the attached log file I get in the QGC error window:
(attached two screenshots)
I am willing to help. Just tell me what you need.
Jakob

@jstrebel Could you provide the full log file?

@jstrebel did you see @LorenzMeier 's comment? And can you provide the output of sensors status?

My apology. I missed the questions. I did not start logging. In the meantime I did yesterday some tests using the latest 1.8 beta and the daily built GQC  4.Jun. Have not seen this Message again. I will do some more test probably tomorrow.

@dagar @bkueng
Did 3 flights today with the newest 1.8beta. All went ok.
https://review.px4.io/plot_app?log=9cb17ba1-378e-492b-b659-4a82084f17e3


[WIP] Fix get multivalue query parameter

Thanks for the PR! I merged the changes to the core branch where I'm working on the next release!


Missing resume in StreamResourceSendPipe ?

Hello,
I think there is missing suspension resume in
\Amp\Cluster\Internal\StreamResourceSendPipe::__construct
in onWritable callback success path
after
if (!$transferSocket->sendSocket($export, $data)) {
...
}
Not sure how to reproduce it because in \Amp\Cluster\Internal\StreamResourceSendPipe::send
$this->transferSocket->sendSocket does not return false for simple testcase
(using parent.php, child.php from your 'Transferring Client Sockets' example and client.php that connect to exposed socket)
But if it return false suspension won't be resumed.
Thanks,
Sergey

Thank you. Yes you're right, that was missing. That code path only gets followed if the transfer pipe is filled, a rare circumstance in practice. Seems I need to write more test cases to test that scenario.


TypeError: unhashable type: 'list' on M2 Macbook Pro

Kept getting this error. I'm on a M2 macbook pro so the .bat files didn't exactly run since it looks like they're geared towards windows and figured it may be better to see if i could modify a bit of the code to fix it. Programmer but not exactly a python guy. Not sure if it helps but added the "if isintance" line to the api.py right after line 1969 which seemed to fix the error and turned the list item it was complaining about into a string and it's now generating the wave file without the error. Not sure if that messes anything else up with the way the voices are put together but if it helps anyone else who doesn't understand code and isn't on windows, I thought maybe it'd help.
The following two lines is what I added before the audio_segments portion that was already written:
if isinstance(process_text_by_each, list):
    process_text_by_each = ' '.join(process_text_by_each)

audio_segments = text_processing.split_text(
    text_prompt,
    split_type=process_text_by_each,
    split_type_quantity=in_groups_of_size,
    split_type_string=split_type_string,
    split_type_value_type=group_text_by_counting,
)

I'm borrowing a macbook for unrelated work this weekend, I'll check it. Seems strange for this to only be on mac, maybe a python version mismatch.

Yeah thinking it's something non-mac related, maybe with my setup. Had it working back in July, beginning of August (Believe i was running python 3.9.* at the time) before the dog decided my screen looked tasty and took a chomp, took it in to be repaired and OS somehow got corrupted when it was returned and didn't get it back for almost a month as was out of town. Spent the next few weeks trying to get everything up and working again. Think i saw mentioned that hugging face is now further along than the suno-ai/bark on github so thinking an update happened when i was gone.
With the new install when i got it back, using pyenv. Python 3.9.* versions were getting list type errors which i had gotten on the old versions and got to work but i can't remember how. Tried 3.11.* and was getting the unhashable list as mentioned above. Currently on 3.10.6 which is when I decided to modify the code to get it to work as mentioned above. Haven't gone back to test 3.11.* yet .
If the way i set it up helps, here's what i did:
Installed suno-ai/bark from the github with pip install git+https://github.com/suno-ai/bark.git
I have pyenv installed through homebrew. Then from bark infinity used:
git clone https://github.com/JonathanFly/bark.git
cd bark
along with:
pip install torch torchvision torchaudio
pip install -r barki-allpip.txt --upgrade
ffdl install -U --add-path
Again, 3.9.* versions were giving list type errors and 3.10-3.11 versions the unhashable list error (using pyenv to switch python versions and setting them to global to see which worked).
Also ran your requirements-allpip.txt file. Kept stopping at pywin32 as pywin from what i looked up won't run on macs. Changed the file to set that as windows only and finished the install. Still got unhashable list. At some point I ran the bark_perform file to and it downloaded some more files. Can't remember what they were if I maybe forgot to install the transformers and they got installed sometime during trying to figure out the unhashable list issue. The following python file i wrote at this point was working but the webui was not.

Saw you mentioned running your INSTALL_BARK_INFINITY.bat file from someone that mentioned the unhashable list here and someone else on discord you replied to. Saw some articles that said you could get them to run on a mac but my attempts just opened the file just i just went through the code you had in it to see what was being installed. Debated the conda thing either installing through pyenv or just straight install. I can't remember why but I decided against it since I had it running without it before. And that's when i decided to look through the code a bit and with a bit of help from chagpt to speed up solving the issue went through and found that piece of code, asked how to concert it to a string and plugged it in. Like i said, I've only written python programs a few times as i'm usually working with php and mysql but I understand python enough and programming to know what to ask in chatgpt and help me get it working through that line of code above.
There's still a few things to look at as i'm getting deprecated warnings like below:

And then there's a few undefined fields and looks like the styling isn't wrapping right in some way as you can see on the bottom two fields in this pic:

But otherwise it's now creating audio files like it did previously so can't complain.

insert joke about the dog eating the screen and this topic about bark 🐶

LOL i didn't even think of that when i post. The irony!

Just pushed a tiny patch, I think I may have fixed the issue on the gradio UI side, checking there to not pass an empty list in the first place. I still don't understand why I don't get this error, checked in Python 3.9 and 3.10 locally.
The grado UI glitches are known. I need to unhack my custom stuff so it doesn't keep breaking everytime Gradio updates. The missing button images do function though.

Hmm yeah that's strange. I know i saw someone earlier with the unhashable list issue and you mentioned the bat file, and same thing on discord and both ran it and it fixed it. Are you running it through conda as i'm wondering if that might be the issue causing the problems with the pyenv python vs conda. I did switch my python version to 3.11.5 the other night in pyenv and happy to say other than the gradio UI deprecated warning it's running there too. I know when i ran the requirements txt and such I was getting a bunch of warnings with a few packages at the end, something with versions of ome* and it's versions vs some of the packages being installed. Could always be something there too. If there's anything i can check that might help you problem solve it let me know. Running an m2 max Macbook Pro with Ventura 13.5.2

Hmm yeah that's strange. I know i saw someone earlier with the unhashable list issue and you mentioned the bat file, and same thing on discord and both ran it and it fixed it. Are you running it through conda as i'm wondering if that might be the issue causing the problems with the pyenv python vs conda. I did switch my python version to 3.11.5 the other night in pyenv and happy to say other than the gradio UI deprecated warning it's running there too. I know when i ran the requirements txt and such I was getting a bunch of warnings with a few packages at the end, something with versions of ome* and it's versions vs some of the packages being installed. Could always be something there too. If there's anything i can check that might help you problem solve it let me know. Running an m2 max Macbook Pro with Ventura 13.5.2

In general I never used 3.11 just because I got burned a couple times and now I stick with trusty 3.10 which I always works. So I haven't actually tried my own repo in 3.11, it may just be that.


MINOR: fix flaky EosIntegrationTest

Bumping some timeout due to slow Jenkins build.

Oh dear... I did commit some of these change on the wrong branch, and committed it with a totally unrelated PR: https://github.com/apache/kafka/commit/b9a5b4a8053c1fa65e27a9f93440194b0dd5eec4#diff-a17eb0da226d839a072c4b906a03afa3525d9a75a833a49331dc8fc31843d4ac
Will rebase this one, but it will only contain a few more improvements... My bad...


Add descriptions from README to tap.py settings metadata

My trial of the team plan is over, so integration tests are failing 😅
I might have to put this up for adoption...


preload_metadata not set when using boto3

If you don't have boto in your environment (only boto3) has_boto flag will be set to false in boto.py due to an import error and that will fail the condition check to set preload_metadata to True in the initialization of the mgmt command.
As a consequence collectfast will be slow

I would not recommend that fix because of this https://github.com/antonagestam/collectfast/issues/30
It will make the site painfully slow.


Array without schema items creates invalid schema

e.g.
{
  path: '/foobar',
  method: 'post',
  config: {
    tags: ['api'],
    validate: {
      payload: Joi.array().description('foobar').required()
    }
  }
}

swagger validator says:
[
        {
          "code": "OBJECT_MISSING_REQUIRED_PROPERTY",
          "message": "Missing required property: items",
          "path": [
            "definitions",
            "Array_3"
          ]
        },
        {
          "code": "OBJECT_MISSING_REQUIRED_PROPERTY",
          "message": "Missing required property: items",
          "path": [
            "paths",
            "/version/version/array/withouttype",
            "post",
            "parameters",
            "0",
            "schema"
          ]
        },
        {
          "code": "OBJECT_MISSING_REQUIRED_PROPERTY",
          "message": "Missing required property: items",
          "path": [
            "paths",
            "/version/version/array/withouttype",
            "post",
            "responses",
            "default",
            "schema"
          ]
        }
      ]

"I hit this issue once as well - but for some reason i decided not to fix this.... may i didnt know which type to choose as fallback and decided to let swagger-ui handle it :-) But an uncaught typeerror is pretty unsatisfying.... should we go for string? what do you think?" from #3

Suggested impl for string fallback -> see commit
Or what do you think is the adequate fallback in this case, @grabbou?

I would say strings are OK. I am going to add additional check in my app anyway as I have a proxy method for defining routes. Thanks


Just test the docker build workflow

The docs for this PR live here. All of your documentation changes will be reflected on that endpoint.


Render and animate segments

Work Log

1 hr - naive implementation of segment animation which created line geometries and vector3s for every frame, leading to a lot of garbage to be collected
1 hr - testing out different segment colors, segment thicknesses, and adding/removing some segments which aren't attached to joints to avoid over cluttering
0.3 hr - reasearch and fix disappearing segments when camera got too close. discovered I needed to turn off frustum culling
3 hrs - convert segment animation from creating new line geometries for every frame to using buffer geometry position attribute (required a fair amount of research)


Flatpak Electron App Throws Error With libhardened_malloc.so

I have tested several flatpak electron apps, including Signal, Slack, Freetube, all of them seems to give the following error:
ERROR: ld.so: object '/var/run/host/usr/lib64/libhardened_malloc.so' from LD_PRELOAD cannot be preloaded (cannot open shared object file): ignored.

This error does not appear in app in other framework, like fsearch, syncthingy, or gnome core app. Native apps like codium and chormium also don't have this issue.
Example command:
flatpak run org.signal.Signal --filesystem=host-os:ro

My signal is running xwayland and slack is running in wayland, yet both of them raise the same error, so I don't think it is a wayland issue.
I don't know if this can be reproduced on other systems.

Deployment info (rpm-ostree status):
  ostree-image-signed:docker://ghcr.io/secureblue/silverblue-main-laptop-userns-hardened:latest
                   Digest: ...
                  Version: 39.20240130.0 (2024-01-30T18:19:08Z)
          LayeredPackages: ...
                Initramfs: regenerate

... represents unrelated information.

I've seen this before as well. I'm almost certain it's something to do with the combination of flatpak and electron, as you've mentioned. I'm not exactly sure why it happens, but my guess is that it's something to do with the way electron handles environment variables for child processes.
When we set LD_PRELOAD in ld.so.preload, it applies to all processes (aside from flatpak). So when an electron app like codium creates child processes, it applies to those as well.
For flatpak however, my hunch is that the environment variable is being sent to the initial process, but subsequent child processes aren't being spawned with the same environment variable.

~ ❯❯❯ flatpak run --filesystem=host-os:ro --command=signal-desktop org.signal.Signal
Debug: Will run signal with the following arguments: --enable-features=WaylandWindowDecorations --ozone-platform=wayland
Debug: Additionally, user gave:

<--- Last few GCs --->

[2:0x3e28004c8000]      130 ms: Mark-Compact (reduce) 0.7 (3.2) -> 0.7 (1.9) MB, 2.67 / 0.00 ms  (average mu = 0.477, current mu = 0.018) last resort; GC in old space requested
[2:0x3e28004c8000]      131 ms: Mark-Compact (reduce) 0.7 (1.9) -> 0.7 (1.9) MB, 1.36 / 0.00 ms  (average mu = 0.350, current mu = 0.012) last resort; GC in old space requested

<--- JS stacktrace --->

#
# Fatal JavaScript out of memory: CALL_AND_RETRY_LAST

@trytomakeyouprivate very interesting, maybe we need to override xdg-host-os instead of host-os. Can you confirm that signal is running with hardened_malloc in the second one by posting both the output of top and the output of cat /proc/$procId/maps | grep hardened

@trytomakeyouprivate I tried an xdg-host-os override and it didn't change anything.

strange...
using hardened_malloc:
30814 pts/1    S+     0:00 /usr/bin/bwrap --args 38 signal-desktop
30826 pts/1    S+     0:00 /usr/bin/bwrap --args 38 signal-desktop

not using hardened_malloc:
30827 pts/1    SLl+   0:08 /app/Signal/signal-desktop --enable-features=WaylandWindowDecorations --ozone-platform=wayland
30839 pts/1    S+     0:00 /app/Signal/signal-desktop --type=zygote --no-zygote-sandbox
30892 pts/1    Sl+    0:00 /app/Signal/signal-desktop --type=gpu-process --ozone-platform=wayland [and a lot more parameters]
30904 pts/1    Sl+    0:00 /app/Signal/signal-desktop --type=utility --utility-sub-type=network.mojom.NetworkService
30937 pts/1    Sl+    0:17 /app/Signal/signal-desktop --type=renderer --enable-crash-reporter=[...]

So it looks like Electron apps are going to be fun...

You could eliminate some of these issues by building hardened_malloc into glibc as the default allocator

That's almost certainly the right way forward here, since there's zero change of that ever happening in upstream Fedora's glibc. However, I'd expect it to be significantly more effort to maintain than the current setup of just throwing hardened_malloc into LD_PRELOAD. So it'll be something we need to work on over time.

Electron massively rolls back Chromium security, breaks the sandbox and is a regularly backwards incompatible library used by applications so there's a huge mess created by it.

Yep, I think the right move here with regards to the topic of this ticket specifically is to discourage users from using electron at all if possible. Fortunately there are often alternatives to using electron apps:

Signal should be used only on your phone
Slack can be used from within the browser
VSCode can be used from within the browser
There are numerous alternatives to Freetube like Piped, Invidious, or just playing youtube links in mpv
and so on...

https://github.com/secureblue/secureblue/commit/14402a65269ed23ddf5bbaa783bffdbdc45797fd

to add some more>

Fractal, Neochat, (GNOME Chats), nheko
same for Flare, which is a Signal client (but Devs say themselves that its probably less secure)
Discord: QTCord, gtkcord4 (or Browser)
Telegram: 64Gram, (cutegram, sigram, tdesktop-lite are all abandoned)

Adding some notes for the sake of documentation:

Fractal, Neochat, (GNOME Chats), nheko

These are all matrix client alternatives to element I believe

Flare

I don't think it's responsible to recommend anything aside from Signal itself, on a mobile device

Discord: QTCord, gtkcord4 (or Browser)

Browser is probably best here to avoid both electron and violating discord TOS

Telegram: 64Gram, (cutegram, sigram, tdesktop-lite are all abandoned)

I'm not familiar with 64Gram or the Telegram Desktop app (is it electron?), but I believe it has a browser version so that's probably preferable anyways.

Telegram desktop is QT

Updated my comment. This would be another usecase of some app recommendation text. Not like "I recommend this and if there is an issue it is my problem" but simply "you should avoid using electron, to our knowledge these apps follow best practices"
https://github.com/trytomakeyouprivate/Recommended-Flatpak-Apps
this list is probably incomplete and may have mistakes in it.

These are all matrix client alternatives to element I believe, however they add an additional trusted entity so Element Web should be recommended.

I wouldn't trust a web app to serve cryptography, Element Desktop might be an improvement but it is Electron webapp.
https://www.devever.net/~hl/webcrypto

Web-based cryptography is always snake oil

https://www.devever.net/~hl/webcrypto

This article is full of nonsense and doesn't even back up your statement about webapps.

Element Desktop might be an improvement

According to the article you linked, it wouldn't be.

the code which implements a client-side web application is distributed by the given website. Thus the client-side code is always distributed by the operator of the web server.

This is not unique to webapps. Signal distributes client side code in the form of android and iOS apps, and they also operate the servers for signal's backend.
Also, this is ultimately just a critique pointing to the need for reproducible builds for FOSS software, which is in no way unique to FOSS webapps.

if the server operator was malicious, they could just push different client-side JavaScript.

If Signal was malicious, they could push different client-side mobile apps :slightly_smiling_face:
Later on, the article conflates webapps with web-based:

In this regard all web-based “E2E” cryptography can be regarded as backdoored, as can Whatsapp, Signal, etc.

 End to end crypto over physical mail?
The article also refers to Signal as proprietary: offered by Whatsapp and Signal, amongst other proprietary services,?
There is one kernel of truth in the article, and that is that FOSS software generally lacks a consistent and ubiquitous mechanism to verify that the software you're running was built from the source you're reading. But this isn't unique to FOSS software distributed by the same owner of the corresponding web services. The exact same problem exists if the client side software is distributed by someone else (i.e. third party clients). The article takes a widespread problem with all FOSS, narrows it down to a small subset of cases without warrant, and then cries wolf.

If Signal was malicious, they could push different client-side mobile apps

How? They would need to upload a malicious update to all their users from their app store, they can't target anyone specifically silently like it is possible with web apps.
Goes more in details and concise: https://cronokirby.com/posts/2021/06/e2e_in_the_browser/

If Signal was malicious, they could push different client-side mobile apps

How? They would need to upload a malicious update to all their users from their app store, they can't target anyone specifically silently like it is possible with web apps.

The blog you linked points out that signal isn't exempt from their critique

In this regard all web-based “E2E” cryptography can be regarded as backdoored, as can Whatsapp, Signal, etc.

Mobile apps can and do receive and run client side updates at runtime.

this blog goes more in details and concise: https://cronokirby.com/posts/2021/06/e2e_in_the_browser/

Contrast this with a native application. Once it’s installed, you can choose whether or not you want to update it, and wait until other people have vetted a new version.

How do you know the native app is actually only running native code? What if it's pulling and running js? The whole point of concern, as I already stated, comes back to not having reproducible builds, which is a genuine issue. It's just not at all specific to webapps.
The author also says this:

This makes sure that you’re downloading a version of an application approved by the developers

while simultaneously saying that the issue with webapps is that we can't trust the provider:

you need to trust the providers of the application to not have done anything fishy.
Trusting a signed build means trusting that the developers didn't do anything fishy.

Another advantage of this release model is that it prevents targeted attacks.

Again this is simply untrue. Many companies like Facebook openly do flighting campaigns and run different application code on different users' phones, even when they have the same version installed.
So you've linked another blog that covers up the same kernel of truth with nonsense and contradictory statements, instead of actually addressing my comments.
You need to read this:
https://www.cs.cmu.edu/~rdriley/487/papers/Thompson_1984_ReflectionsonTrustingTrust.pdf
Please make more well-evidenced comments if you're going to make claims like this.

How do you know the native app is actually only running native code? What if it's pulling and running js?

By checking the code? You gave an example of a terrible closed source app (Facebook) as an example https://techcrunch.com/2024/03/26/facebook-secret-project-snooped-snapchat-user-traffic/

You need to read this: https://www.cs.cmu.edu/~rdriley/487/papers/Thompson_1984_ReflectionsonTrustingTrust.pdf

I'm aware of this paper, guix recently published this blog post.
https://guix.gnu.org/en/blog/2024/identifying-software/

Full-Source Bootstrap

Reproducible builds alone cannot ensure the source-to-binary correspondence: the compiler could contain a backdoor, as demonstrated by Ken Thompson in Reflections on Trusting Trust. To address that, Guix goes further by implementing so-called full-source bootstrap: for the first time, literally every package in the distribution is built from source code, starting from a very small binary seed. This gives an unprecedented level of transparency, allowing code to be audited at all levels, and improving robustness against the “trusting-trust attack” described by Ken Thompson.

By checking the code?

Back to the reproducible issue.

starting from a very small binary seed. This gives an unprecedented level of transparency, allowing code to be audited at all levels, and improving robustness
I'm aware of this paper

And yet it seems you've not internalized it. The blog post from guix further highlights my point that this is a broad issue not specific to webapps.

unlike native apps where you have client code available with less trust from the server.

again this is not true and comes back to reproducible builds. you only know that native apps are only running native code if you can reproduce the build.
I'm going to lock this post shortly as it's wildly offtopic.


extend/time: restore rfc3339 method

This was lost in #14502.
Unfortuately this method is used in third-party taps so compatibility needs to be kept, or a deprecation path introduced.
Given the trivial nature of supporting it, I've just restored the alias.

Review period skipped due to critical label.


Feat: add extra labeling capabilities for falco daemonset/deployment

/kind feature
/kind chart-release
/area falco-chart
What this PR does / why we need it:
This PR adds an extra field: controller.labels which allows users to set extra labels for the Falco daemonset/deployment.

[X] Chart Version bumped
[ ] Variables are documented in the README.md
[X] CHANGELOG.md updated

Thanks for your pull request. Before we can look at it, you'll need to add a 'DCO signoff' to your commits.
:memo: Please follow instructions in the contributing guide to update your commits with the DCO
Full details of the Developer Certificate of Origin can be found at developercertificate.org.
The list of commits missing DCO signoff:

b697246 fixed overzealous changelog edit.

Instructions for interacting with me using PR comments are available here.  If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository. I understand the commands that are listed here.

[APPROVALNOTIFIER] This PR is NOT APPROVED
This pull-request has been approved by: Strigix
Once this PR has been reviewed and has the lgtm label, please assign cpanato for approval. For more information see the Kubernetes Code Review Process.
The full list of commands accepted by this bot can be found here.

Needs approval from an approver in each of these files:

OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

Welcome @Strigix! It looks like this is your first PR to falcosecurity/charts 🎉

Please, run make docs to update the docs.

Thanks for your pull request. Before we can look at it, you'll need to add a 'DCO signoff' to your commits.
:memo: Please follow instructions in the contributing guide to update your commits with the DCO
Full details of the Developer Certificate of Origin can be found at developercertificate.org.
The list of commits missing DCO signoff:

8d7de93 make docs

Instructions for interacting with me using PR comments are available here.  If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository. I understand the commands that are listed here.

Adding label do-not-merge/contains-merge-commits because PR contains merge commits, which are not allowed in this repository.
Use git rebase to reapply your commits on top of the target branch. Detailed instructions for doing so can be found here.

Instructions for interacting with me using PR comments are available here.  If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

@Strigix, can you bump the chart version and then run make docs? It should make the CI happy.

@alacuku I Hadn't realised it went up another version!
Bumped and reran make docs :) Thanks for the headsup.

hey @Strigix, could you squash your commits? Once you've done it, we are ready to merge it.

[APPROVALNOTIFIER] This PR is APPROVED
This pull-request has been approved by: alacuku, Strigix
The full list of commands accepted by this bot can be found here.
The pull request process is described here

Needs approval from an approver in each of these files:

OWNERS [alacuku]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

LGTM label has been added.  Git tree hash: eabfb6f77a0cc5479ec54e77707f10337fe5f69e


Support ActiveRecord::MigrationContext

Closes: #17
This is pretty ugly. With the new MigrationContext api the path can be now customized, BUT MigrationContext, now calls Migrator and SchemaMigration (for table_name). So to keep subclassing work, i had to subclass  Migrator (already) MigrationContext and SchemaMigration. I also had to overwrite methods where those classes were referred directly.

interesting thank you. sorry just haven't had time. Rails 5.1 + 5.2 support are on my todo list, I will take a look at this and get back to you. can you leave it open please?

@mfazekas -- merging this in today and will publish new versions of the gem shortly.
thank you!

@mfazekas -- http://www.jasonfleetwoodboldt.com/writing/2018/03/07/announcing-nondestructive-migrations-version-13-fo/


24 FPS Capture

During one of the webinars an Intel representative said they could add an option to let RealSense Depth Cameras run at 24 FPS.
This option is essential for filmmakers who want to use RealSense depth cameras.
Has there been any progress on this issue?

I do not have any information on whether there are currently plans to implement support for this FPS.  It has been a feature that others have requested for film-making.
My recollection is that adding a new FPS would not be technically hard.  Instead, the main concern was keeping the number of supported modes to a manageable size.
For now, 25 FPS is supported only in the Y16 IR mode (with IR only active, no depth stream), which is an unrectified channel meant for use in camera calibration rather than everyday use in applications. This mode also only supports a couple of resolutions.

Thanks for the quick reply Marty. Unfortunately the ask is for Color and Depth streams at 24 FPS. Interpolating from 25 or 30 to 24 is impossible without significant issues and artifacts. And having one stream without the other would still require interpolation.
From the webinar it sounded like they acknowledged the importance of 24 FPS and would make plans to add it to the list of supported frame rates. Hopefully they can add the feature soon.


metadata is missing from ProductsGetResponse

Good day,
the metadata property is missing from ProductsGetResponse type although it is return from the the /v1/products endpoint
would love to send PR if it is just a simple adding of the property

Hello @salzhrani, I am one of the maintainers of this SDK.
Thank you for your interest in helping out, it's much appreciated.
And yes you are correct, you just need to add:
metadata?: Record<string, any>

property definition to: https://github.com/voucherifyio/voucherify-js-sdk/blob/7ae2f44d17ecd99b0bdef6d31588c9f7cf1b135d/packages/sdk/src/types/Products.ts#L18
since ProductsGetResponse is made of ProductsCreateResponse & ProductsGetResponseSkus
I will be happy to review your Pull Request and release new version after merging.
Just make sure to check out or contribution guide: https://github.com/voucherifyio/voucherify-js-sdk/blob/main/CONTRIBUTING.md

darekg11 PR created, please review at your leisure

@salzhrani thank you for your contribution.
I just released a new version - 2.0.10 - it should be shortly available in the NPM registry.


fail to install torchsparse

i could run the code properly before,but after recent upgrade,i have to install torchsparse,but always fail to install it.
error occurs like this:
subprocess.CalledProcessError: Command '['ninja', '-v']' returned non-zero exit status 1.
is there any solution to solve this problem,or does anyone meet the problem same with me?

Same issues.

i've got similar issue like this. i followed the command in the README.md pip install --upgrade<EMAIL_ADDRESS>      Traceback (most recent call last):
        File "<string>", line 2, in <module>
        File "<pip-setuptools-caller>", line 34, in <module>
        File "/tmp/pip-req-build-it29as2d/setup.py", line 30, in <module>
          setup(
        File "/home/pjs_conda/.conda/envs/clip3d/lib/python3.10/site-packages/setuptools/__init__.py", line 107, in setup
          return distutils.core.setup(**attrs)
        File "/home/pjs_conda/.conda/envs/clip3d/lib/python3.10/site-packages/setuptools/_distutils/core.py", line 185, in setup
          return run_commands(dist)
        File "/home/pjs_conda/.conda/envs/clip3d/lib/python3.10/site-packages/setuptools/_distutils/core.py", line 201, in run_commands
          dist.run_commands()
        File "/home/pjs_conda/.conda/envs/clip3d/lib/python3.10/site-packages/setuptools/_distutils/dist.py", line 969, in run_commands
          self.run_command(cmd)
        File "/home/pjs_conda/.conda/envs/clip3d/lib/python3.10/site-packages/setuptools/dist.py", line 1234, in run_command
          super().run_command(command)
        File "/home/pjs_conda/.conda/envs/clip3d/lib/python3.10/site-packages/setuptools/_distutils/dist.py", line 988, in run_command
          cmd_obj.run()
        File "/home/pjs_conda/.conda/envs/clip3d/lib/python3.10/site-packages/wheel/bdist_wheel.py", line 369, in run
          self.run_command("build")
        File "/home/pjs_conda/.conda/envs/clip3d/lib/python3.10/site-packages/setuptools/_distutils/cmd.py", line 318, in run_command
          self.distribution.run_command(command)
        File "/home/pjs_conda/.conda/envs/clip3d/lib/python3.10/site-packages/setuptools/dist.py", line 1234, in run_command
          super().run_command(command)
        File "/home/pjs_conda/.conda/envs/clip3d/lib/python3.10/site-packages/setuptools/_distutils/dist.py", line 988, in run_command
          cmd_obj.run()
        File "/home/pjs_conda/.conda/envs/clip3d/lib/python3.10/site-packages/setuptools/_distutils/command/build.py", line 131, in run
          self.run_command(cmd_name)
        File "/home/pjs_conda/.conda/envs/clip3d/lib/python3.10/site-packages/setuptools/_distutils/cmd.py", line 318, in run_command
          self.distribution.run_command(command)
        File "/home/pjs_conda/.conda/envs/clip3d/lib/python3.10/site-packages/setuptools/dist.py", line 1234, in run_command
          super().run_command(command)
        File "/home/pjs_conda/.conda/envs/clip3d/lib/python3.10/site-packages/setuptools/_distutils/dist.py", line 988, in run_command
          cmd_obj.run()
        File "/home/pjs_conda/.conda/envs/clip3d/lib/python3.10/site-packages/setuptools/command/build_ext.py", line 84, in run
          _build_ext.run(self)
        File "/home/pjs_conda/.conda/envs/clip3d/lib/python3.10/site-packages/setuptools/_distutils/command/build_ext.py", line 345, in run
          self.build_extensions()
        File "/home/pjs_conda/.conda/envs/clip3d/lib/python3.10/site-packages/torch/utils/cpp_extension.py", line 843, in build_extensions
          build_ext.build_extensions(self)
        File "/home/pjs_conda/.conda/envs/clip3d/lib/python3.10/site-packages/setuptools/_distutils/command/build_ext.py", line 467, in build_extensions
          self._build_extensions_serial()
        File "/home/pjs_conda/.conda/envs/clip3d/lib/python3.10/site-packages/setuptools/_distutils/command/build_ext.py", line 493, in _build_extensions_serial
          self.build_extension(ext)
        File "/home/pjs_conda/.conda/envs/clip3d/lib/python3.10/site-packages/setuptools/command/build_ext.py", line 246, in build_extension
          _build_ext.build_extension(self, ext)
        File "/home/pjs_conda/.conda/envs/clip3d/lib/python3.10/site-packages/setuptools/_distutils/command/build_ext.py", line 548, in build_extension
          objects = self.compiler.compile(
        File "/home/pjs_conda/.conda/envs/clip3d/lib/python3.10/site-packages/torch/utils/cpp_extension.py", line 658, in unix_wrap_ninja_compile
          _write_ninja_file_and_compile_objects(
        File "/home/pjs_conda/.conda/envs/clip3d/lib/python3.10/site-packages/torch/utils/cpp_extension.py", line 1573, in _write_ninja_file_and_compile_objects
          _run_ninja_build(
        File "/home/pjs_conda/.conda/envs/clip3d/lib/python3.10/site-packages/torch/utils/cpp_extension.py", line 1916, in _run_ninja_build
          raise RuntimeError(message) from e
      RuntimeError: Error compiling objects for extension
      [end of output]

  note: This error originates from a subprocess, and is likely not a problem with pip.


WIP: fix layout shifting

return vnode copy of SSR content while loading
fixes #66

I close it because it was fixed in 827e53e61ad37cd80d2a5a2c0c1150d9b9969694 (this solution was also nicer than mine :wink: )


[syn] Split SDC file into per IP file and add AES example

This splits the previously shared SDC file for synthesis into per-IP SDC files. I have also added a synthesis configuration for AES to illustrate how this can be used on comportable IPs.
Signed-off-by: Michael Schaffner<EMAIL_ADDRESS>

sorry i'm a little confused by this. Is the idea that you can use the same flow to invoke either an IP specific synthesis, or a top level synthesis? (kind of like lint?)
But why did you remove all the clocks etc from the top_earlgrey constraints.sdc?

sorry i'm a little confused by this. Is the idea that you can use the same flow to invoke either an IP specific synthesis, or a top level synthesis? (kind of like lint?)
But why did you remove all the clocks etc from the top_earlgrey constraints.sdc?

Michael removed the else part in sdc, so seems to be fine. :)

oooo that makes a lot more sense.
On Fri, Apr 3, 2020 at 2:29 PM Eunchan Kim<EMAIL_ADDRESS>wrote:

@eunchan approved this pull request.
—
You are receiving this because your review was requested.
Reply to this email directly, view it on GitHub
https://github.com/lowRISC/opentitan/pull/1885#pullrequestreview-387591711,
or unsubscribe
https://github.com/notifications/unsubscribe-auth/AAH2RSWC64WWW3I45J4G4ELRKZIKNANCNFSM4L3RAAUA
.

Yes, I previously selected different constraints, based on the top-level name. This was a brittle approach. Now you have a dedicated sdc file for each synthesis target, which should be much better scalable.


gpsd port expose and remove systemd-wait-online

integrate meta-ci.os removal of systemd-wait-online and gpsd port-expose

:tada: This PR is included in version 1.0.0 :tada:
The release is available on GitHub release
Your semantic-release bot :package::rocket:


Use the versioned triple outside of Darwin.

Some platforms require the normal, versioned triple to be supplied for the target flag, as Swift modules use this versioned triple as a subdirectory. If the unversioned triple is used instead, the standard library won't be found on these platforms.
Instead, use the unversioned triple only on Darwin. This also should be a noop on Linux. This behavior matches apple/swift-package-manager#3576 and apple/swift-tools-support-core#229 which contain additional context.

@swift-ci please test

@artemcm do you mind if this is merged?

@swift-ci please test

@swift-ci test Windows

Since the PR has been approved and CI is passing I'm assuming this can be merged.


Delete key x throwing exception, causing slowdown

Thanks for re-implementing the delete key. Some issues I've found:

Sometimes VimBindings is sluggish to accept x as a valid command. Hitting ESC usually fixes that.

Sometimes holding down j or k (to traverse history) results in the characters "j" and "k" being typed. Sometimes, I end up in help or pkg mode and the letters "j" or "k" are entered in those modes.

 This package is
just past the prototyping stage, hence the unpleasant experience you're
having.
Does the x issue you're seeing result in any crash in the REPL, or just
the lag? Does it appear to be Julia compiling the x function (where the lag
is only on the first execution after loading the package) or is it
consistent?
On Sun, Jan 9, 2022, 10:40 AM Praful @.***> wrote:

Thanks for re-implementing the delete key.
Sometimes VimBindings is sluggish to accept x as a valid command. Hitting
ESC usually fixes that.
Sometimes holding down j or k (to traverse history) results in the
characters "j" and "k" being typed.

You are receiving this because you are subscribed to this thread.Message
ID: @.***>

No worries - it's normal to have issues at this stage :) I'm thankful for the effort you've put in to get this far.
When the crash happens, the REPL continues working. You just get a stacktrace; so it's not fatal.
After my message yesterday, I used the REPL with the plugin for about an hour and it was fine. I received a crash today (as above) but the REPL continued working.
I've noticed that $ (end of line) works but not 0 (beginning of line). S to clear the line from anywhere would be nice and u to undo (I see the last is on the list). That said, overall, it's been a positive experience.
Thanks

Repeatedly holding down x produced this stacktrace:

@Praful I've fixed the EOFError bug, let me know if you're still seeing an issue there
Also, let me know if you're still seeing that sluggish behavior.

I've noticed that $ (end of line) works but not 0 (beginning of line). S to clear the line from anywhere would be nice and u to undo (I see the last is on the list). That said, overall, it's been a positive experience.

I've created #15 to track keybind requests and added 0 and S. Seem pretty simple, so I should be able to get to them in the next week or so.

Sometimes holding down j or k (to traverse history) results in the characters "j" and "k" being typed. Sometimes, I end up in help or pkg mode and the letters "j" or "k" are entered in those modes.

This is a big problem, and will require some changes in where we intercept key strokes. Definitely a priority. See #1

@caleb-allen I've seen the crash (once) this afternoon. But the sluggishness has gone.  I rarely just hold the j or k key down without releasing it, which is when I see the issue. If I wanted to go more than a few lines back CTRL-R to search history is obviously easier :-)
Thanks again for the update. This version runs more smoothly.

@Praful version 0.2.0 will be on the Julia Registry soon (https://github.com/JuliaRegistries/General/pull/74789), will you let me know if you continue to encounter a crash when using x?

There have been significant changes since this issue was originally opened (and since January 11 when it was re-opened). Specifically, the way x is handled has been rewritten. For that reason I'm going to close this.
Feel free to re-open this issue if you see the issue again

@caleb-allen thanks for making the changes. I'm doing Python stuff at the moment but will test out when I'm back to Julia.


The account name is missed in the SAS URI of one Emulator queue

Storage Explorer Version: 1.15.0
Build: 20200831.3
Branch: master
Platform/OS: Windows 10
Emulator Version: <IP_ADDRESS>
Architecture: ia32
Regression From: Previous release(1.13.1)
Steps to reproduce:

Install and run Emulator -> Launch Storage Explorer.
Expand 'Local & Attached' -> Storage Accounts -> (Emulator - Default Ports) (Key).
Right click the Queues node -> Create a queue.
Right click the queue -> Click 'Get Shared Access Signature...' -> Click the 'Create' button on the 'Shared Access Signature' dialog.
Observe the URI on the 'Shared Access Signature' dialog.

Expect Experience:
The account name displays in the URI.

Actual Experience:
The account name is missed in the URI.

@v-xianya I have tried it and it seems already fixed. Could you help verify if this still reproduces?

@JasonYeMSFT Verified this issue on build 20200922.5. Reproduce.

A fix has been merged.


Doesn't seem to work on Chromium

After setup finishes, nothing changes. Torrent sites stay the same. Should I be seeing a new extension/plugin? Because there isn't one either.

My bad! AdGuard was blocking the "Stream it!" link.


add support graphql ^0.11.0

Like the title, just add to graphql version ^0.11.0.

Thanks for doing this, could you complete the only form for the CLA?

Thanks, now we just have to cut a release

@kassens @wincent any chance to make a new release with support of graphql ^0.11.0?

Just published<EMAIL_ADDRESS>with the updated dependency. Sorry for the delay here!


Welcome Update

Not a bug or issue, not sure how else to contact.
Crimson Moon is such a great and integral mod for Craft to Exile, when I saw that it was updated I was pretty excited. It looks awesome and I can't wait to test it out!

Actually quick Q: how do you track the players progression to determine mob strength?

Happy to hear you like the mod! The new update is very big, just hoping it's not too drastic for some people, haha.
Progression is sorted into 3 phases: starting, Nether, and post-Dragon. Once a requirement has been hit for one of the latter 2 categories, it applies to all Bloodmoons on that server.

Interesting, good to know! Will you add the possibility of turning that off, or even setting it per player?


FluidKMeans returns strings

Greetings,
When I...

use fitPredict on FluidKMeans,
dump the FluidLabelSet that it puts the predictions in, and then
look into that Dictionary that it dumps, the cluster id integers are strings, as in...

dict.at("data").at(key).class returns String
This was unexpected to me as they are integers.
Thanks!

A LabelSet is a associative array of string IDs to string Labels, so even though KMeans is inventing the cluster labels as integers, they get stringified. (Remember C++ is statically typed, unlike SC)
Admittedly, this makes more sense in the case of the classifiers (where the labels are the string IDs from the output training data). We can perhaps give some future thought to how to provide a simpler interface layer without sacrificing the flexibility of what we have.


Add a PowerShell tab

Add the PowerShell code examples for Azure CLI parity.

@alexandair : Thanks for your contribution! The author(s) have been notified to review your proposed change.

#label:"aq-pr-triaged"

This PR has been transferred to the private repo.

This PR has been transferred to the private repo.


Add ability to specify 'hooks' object in brunch-config

:+1: makes sense
what plans are there for additional hooks beyond onCompile?

We just need to understand the common use cases. I'm not sure since i've never used any hooks...


[ENHANCE] add nightly integration test for shared mount

In #413, we fix a bug of shared mount without adding any integration test, because running an independent integration test in each pull request is too expensive.
However, to avoid this bug reoccur in the future, we need a nightly integration test to cover this case.

Besides mount shared feature, also provisionser should be added in integration test.

supported by https://github.com/juicedata/juicefs-csi-driver/pull/423


Support setting buffer size to null (infinite)

This has no effect by default and can be triggered by setting bufferSize to null.
This can result in huge performance improvements without causing any memory issues if the buffer size is limited by the underlying OS anyway (such as when reading from a TCP/IP socket).
Also, this can be used to avoid some SSL/TLS hackery in our socket-client component: https://github.com/reactphp/socket-client/blob/f905ec2a576b1242b10d5c1dbd2f0eb4fcea7f0c/src/SecureStream.php#L44

I've just rebased this to resolve the merge conflict introduced by #39 :shipit:

I've just rebased this to resolve the merge conflict introduced by #40 :shipit:

LGTM :shipit:

FYI: https://github.com/facebook/hhvm/issues/6921.

FYI: facebook/hhvm#6921.

Thanks for link :+1:  I've updated the documentation to be a bit clearer about what null means.
:shipit: ?


stable.getautoclicker.com returning blank page

After clearing cookies, reinstalling the app stable.getautoclicker.com only returns a blank page.  When I initially installed the addon this morning, the page loaded fine but once I started creating a new configuration, the page went blank and has stayed blank since.  This is on

Google Chrome
88.0.4324.190 (Official Build) (32-bit)

Revision
3a97857a62ee2a8b3f6561ccd98b9e0436604cbe-refs/branch-heads/4324_182@{#3}

OS
Windows 10 OS Version 2009 (Build 19042.870)

Hi @Malvenue ,
Thank you for writing down this issue. It was a cache issue from cloud server. We just cleared same.
Can you please retry now and see.

The issue has been resolved. Thank you.
On Saturday, April 3, 2021, 09:35:17 AM CDT, dhruv-choudary @.***> wrote:
Hi @Malvenue ,
Thank you for writing down this issue. It was a cache issue from cloud server. We just cleared same.
Can you please retry now and see.
—
You are receiving this because you were mentioned.
Reply to this email directly, view it on GitHub, or unsubscribe.


Wasm optimal defaults

What does the pull request do?

What is the current behavior?

What is the updated/expected behavior with this PR?

How was the solution implemented (if it's not obvious)?

Checklist

[ ] Added unit tests (if possible)?
[ ] Added XML documentation to any related classes?
[ ] Consider submitting a PR to https://github.com/AvaloniaUI/Documentation with user documentation

Breaking changes

Obsoletions / Deprecations

Fixed issues

You can test this PR using the following package version. 11.0.999-cibuild0025286-beta. (feed url: https://nuget.avaloniaui.net/repository/avalonia-all/index.json) [PRBUILDID]

You can test this PR using the following package version. 11.0.999-cibuild0025306-beta. (feed url: https://nuget.avaloniaui.net/repository/avalonia-all/index.json) [PRBUILDID]

You can test this PR using the following package version. 11.0.999-cibuild0025338-beta. (feed url: https://nuget.avaloniaui.net/repository/avalonia-all/index.json) [PRBUILDID]

You can test this PR using the following package version. 11.0.999-cibuild0025344-beta. (feed url: https://nuget.avaloniaui.net/repository/avalonia-all/index.json) [PRBUILDID]


Left-Scroll-Bar[Bug]:

Summary
The left side scroll bar are not working properly, when someone want to scroll down .
So  like i am not just raised the issue ,but i also want to fix it.

Page
https://react.dev/learn
Details
No response

Fixed by https://github.com/reactjs/react.dev/pull/6329

Yeah! sure

(to be precise, the fix was actually merged in #6586, not #6329. But in any case, it's fixed now. 🎉)


Docker container outdated

It appears the provided Docker container does not provide many of the dependencies needed to build HermitCore as it currently is. It only comes with CMake 3.5.1 despite HermitCore requiring 3.7, and the local-cmake.sh script requires Python be installed in the container before it can be run; the hexdump utility is not installed; and there is no detectable C++ compiler.

Sorry, I oversaw this issue. I will update the container...

Hello @jabocken
excuse me for the delay. Now the docker image based an Ubunutu 18.04. cmake is available in a suitable version. Please note that KVM isn't available in a Docker container. But you could use qemu as hypervisor.
Cheers
Stefan

$> HERMIT_ISLE=qemu HERMIT_KVM=0 /opt/hermit/bin/proxy /opt/hermit/x86_64-hermit/extra/tests/hello
Hello World!!!
argv[0] = /opt/hermit/x86_64-hermit/extra/tests/hello
Receive signal with number 30
Hostname: 0b823215b953
$> cmake --version
cmake version 3.10.2

Maybe KVM should work if you start Docker in privilege mode (https://github.com/hermitcore/libhermit/issues/88).
See also https://github.com/sivaramsk/docker-kvm


Truvari refine fails when no regions to refine

Version :
v4.1.0
Describe the bug :
Truvari returns an error when there are no regions to refine. Truvari fails during the haplotype extraction step.
To Reproduce :
Running truvari refine on truvari bench output.
2024-01-04 15:17:38,895 [INFO] Truvari v4.1.0
2024-01-04 15:17:38,896 [INFO] Command /defrabb_runs/runs_in_progress/test/.snakemake/conda/f189be9ffe3697323294d64c0da0f554_/bin/truvari refine --threads 1 --align mafft --use-original --reference resources/references/GRCh38_chr21.fa --regions results/evaluations/truvari/eval14_testC/GRCh38_chr21_CMRGv1.00-stvar_asm17aChr21_stvar_dipcall-default/candidate.refine.bed results/evaluations/truvari/eval14_testC/GRCh38_chr21_CMRGv1.00-stvar_asm17aChr21_stvar_dipcall-default
2024-01-04 15:17:38,896 [INFO] Params:
{
    "benchdir": "results/evaluations/truvari/eval14_testC/GRCh38_chr21_CMRGv1.00-stvar_asm17aChr21_stvar_dipcall-default",
    "reference": "resources/references/GRCh38_chr21.fa",
    "regions": "results/evaluations/truvari/eval14_testC/GRCh38_chr21_CMRGv1.00-stvar_asm17aChr21_stvar_dipcall-default/candidate.refine.bed",
    "use_original_vcfs": true,
    "use_region_coords": false,
    "recount": false,
    "threads": 1,
    "align": "mafft",
    "debug": false
}
2024-01-04 15:17:38,896 [INFO] Setting up regions
2024-01-04 15:17:38,897 [INFO] 26 --includebed reduced to 7 after intersecting with 10 from --regions
2024-01-04 15:17:38,960 [INFO] 0 regions to be refined
2024-01-04 15:17:38,967 [INFO] Preparing regions
2024-01-04 15:17:38,968 [INFO] Extracting haplotypes
Traceback (most recent call last):
  File "/defrabb_runs/runs_in_progress/test/.snakemake/conda/f189be9ffe3697323294d64c0da0f554_/bin/truvari", line 10, in <module>
    sys.exit(main())
  File "/defrabb_runs/runs_in_progress/test/.snakemake/conda/f189be9ffe3697323294d64c0da0f554_/lib/python3.9/site-packages/truvari/__main__.py", line 102, in main
    TOOLS[args.cmd](args.options)
  File "/defrabb_runs/runs_in_progress/test/.snakemake/conda/f189be9ffe3697323294d64c0da0f554_/lib/python3.9/site-packages/truvari/refine.py", line 389, in refine_main
    truvari.phab(to_eval_coords, base_vcf, args.reference, phab_vcf, buffer=PHAB_BUFFER, comp_vcf=comp_vcf,
  File "/defrabb_runs/runs_in_progress/test/.snakemake/conda/f189be9ffe3697323294d64c0da0f554_/lib/python3.9/site-packages/truvari/phab.py", line 307, in phab
    ref_haps_fn = extract_reference(region_fn, ref_fn)
  File "/defrabb_runs/runs_in_progress/test/.snakemake/conda/f189be9ffe3697323294d64c0da0f554_/lib/python3.9/site-packages/truvari/phab.py", line 80, in extract_reference
    fout.write(samtools.faidx(ref_fn, "-r", reg_fn))
  File "/defrabb_runs/runs_in_progress/test/.snakemake/conda/f189be9ffe3697323294d64c0da0f554_/lib/python3.9/site-packages/pysam/utils.py", line 83, in __call__
    raise SamtoolsError(
pysam.utils.SamtoolsError: 'samtools returned with error 1: stdout=, stderr='

Expected behavior :
Truvari completes with message stating to regions were refined, potentially returning an error. Not sure what the optimal behavior is here for most users.
Example Data :
Tarballs with truvari bench output and ref file used.
Additional context :
Encountered this error running a small test dataset during pipeline development. I can provide input files and commands used to generate the truvari bench output if needed.

Funny story, this is the third ticket in a row related to pysam.bcftools.consensus. Luckily, the first ticket required me to replace the haplotype consensus creation step with something more stable.  Therefore, you may not see the error if you install directly from develop and try again. Please install from develop and let me know if you still see an error.
git clone https://github.com/spiralgenetics/truvari.git
python3 -m pip install truvari

Unfortunately, the replacement didn't address this error. Looks like it is an issue with extract_references, specifically the call to pysam.faidx(). Here is the log file.
2024-01-04 17:33:39,857 [INFO] Truvari v4.2.0rc1
2024-01-04 17:33:39,858 [INFO] Command /home/nolson/mambaforge/envs/truvari_eval/bin/truvari refine --threads 1 --align mafft --use-original --reference resources/references/GRCh38_chr21.fa --regions results/evaluations/truvari/eval14_testC/GRCh38_chr21_CMRGv1.00-stvar_asm17aChr21_stvar_dipcall-default/candidate.refine.bed results/evaluations/truvari/eval14_testC/GRCh38_chr21_CMRGv1.00-stvar_asm17aChr21_stvar_dipcall-default
2024-01-04 17:33:39,858 [INFO] Params:
{
    "benchdir": "results/evaluations/truvari/eval14_testC/GRCh38_chr21_CMRGv1.00-stvar_asm17aChr21_stvar_dipcall-default",
    "reference": "resources/references/GRCh38_chr21.fa",
    "regions": "results/evaluations/truvari/eval14_testC/GRCh38_chr21_CMRGv1.00-stvar_asm17aChr21_stvar_dipcall-default/candidate.refine.bed",
    "use_original_vcfs": true,
    "use_region_coords": false,
    "recount": false,
    "threads": 1,
    "align": "mafft",
    "mafft_params": "--auto --thread 1",
    "debug": false
}
2024-01-04 17:33:39,858 [INFO] Setting up regions
2024-01-04 17:33:39,859 [INFO] 26 --includebed reduced to 7 after intersecting with 10 from --regions
2024-01-04 17:33:39,934 [INFO] 0 regions to be refined
2024-01-04 17:33:39,950 [INFO] Preparing regions
2024-01-04 17:33:39,951 [INFO] Extracting haplotypes
Traceback (most recent call last):
  File "/home/nolson/mambaforge/envs/truvari_eval/bin/truvari", line 8, in <module>
    sys.exit(main())
  File "/home/nolson/mambaforge/envs/truvari_eval/lib/python3.9/site-packages/truvari/__main__.py", line 102, in main
    TOOLS[args.cmd](args.options)
  File "/home/nolson/mambaforge/envs/truvari_eval/lib/python3.9/site-packages/truvari/refine.py", line 413, in refine_main
    truvari.phab(to_eval_coords, base_vcf, args.reference, phab_vcf, buffer=PHAB_BUFFER,
  File "/home/nolson/mambaforge/envs/truvari_eval/lib/python3.9/site-packages/truvari/phab.py", line 338, in phab
    ref_haps_fn = extract_reference(region_fn, ref_fn)
  File "/home/nolson/mambaforge/envs/truvari_eval/lib/python3.9/site-packages/truvari/phab.py", line 80, in extract_reference
    fout.write(samtools.faidx(ref_fn, "-r", reg_fn))
  File "/home/nolson/mambaforge/envs/truvari_eval/lib/python3.9/site-packages/pysam/utils.py", line 83, in __call__
    raise SamtoolsError(
pysam.utils.SamtoolsError: 'samtools returned with error 1: stdout=, stderr='```

My mistake. I saw pysam and guess I stopped reading the error. I just pushed a guard into develop that should work.

Thanks! That works. I'll close the issue. Here the log from my run  2024-01-04 17:50:07,230 [INFO] Truvari v4.2.0rc1 2024-01-04 17:50:07,230 [INFO] Command /home/nolson/mambaforge/envs/truvari_eval/bin/truvari refine --threads 1 --align mafft --use-original --reference resources/references/GRCh38_chr21.fa --regions results/evaluations/truvari/eval14_testC/GRCh38_chr21_CMRGv1.00-stvar_asm17aChr21_stvar_dipcall-default/candidate.refine.bed results/evaluations/truvari/eval14_testC/GRCh38_chr21_CMRGv1.00-stvar_asm17aChr21_stvar_dipcall-default 2024-01-04 17:50:07,230 [INFO] Params: {     "benchdir": "results/evaluations/truvari/eval14_testC/GRCh38_chr21_CMRGv1.00-stvar_asm17aChr21_stvar_dipcall-default",     "reference": "resources/references/GRCh38_chr21.fa",     "regions": "results/evaluations/truvari/eval14_testC/GRCh38_chr21_CMRGv1.00-stvar_asm17aChr21_stvar_dipcall-default/candidate.refine.bed",     "use_original_vcfs": true,     "use_region_coords": false,     "recount": false,     "threads": 1,     "align": "mafft",     "mafft_params": "--auto --thread 1",     "debug": false } 2024-01-04 17:50:07,230 [INFO] Setting up regions 2024-01-04 17:50:07,231 [INFO] 26 --includebed reduced to 7 after intersecting with 10 from --regions 2024-01-04 17:50:07,280 [INFO] 0 regions to be refined 2024-01-04 17:50:07,293 [INFO] Preparing regions 2024-01-04 17:50:07,294 [CRITICAL] No regions to be refined. Exiting


Comments inside project.entry_points crashes

Test code:
[project.entry-points]
# test
alpha = { B = "b", "A.A" = "a" }
beta = { C = "c", D = "d" }

output:
$ pyproject-fmt test.toml
Traceback (most recent call last):
  File "/home/tushar/code/pyproject-fmt/venv/bin/pyproject-fmt", line 8, in <module>
    sys.exit(run())
  File "/home/tushar/code/pyproject-fmt/src/pyproject_fmt/__main__.py", line 29, in run
    formatted = format_pyproject(config)
  File "/home/tushar/code/pyproject-fmt/src/pyproject_fmt/formatter/__init__.py", line 24, in format_pyproject
    _perform(parsed, conf)
  File "/home/tushar/code/pyproject-fmt/src/pyproject_fmt/formatter/__init__.py", line 13, in _perform
    fmt_project(parsed, conf)
  File "/home/tushar/code/pyproject-fmt/src/pyproject_fmt/formatter/project.py", line 44, in fmt_project
    order_keys(entry_point, (), sort_key=lambda k: k[0])
  File "/home/tushar/code/pyproject-fmt/src/pyproject_fmt/formatter/util.py", line 40, in order_keys
    body = table.value.body
AttributeError: 'str' object has no attribute 'body'

It's a type error, and it seems that mypy couldn't catch it because of a wrong cast() being done.
Instead of cast(X, obj), doing assert isinstance(obj, X) will help find the exact source of bugs. Casts should almost always be avoided imo.

I've also stumbled upon a potential tomlkit bug :'(
doing table.value.body.append(...) in the order_keys method seems to cause problems in rare cases. table.value._map is a dictionary containing a mapping from key name to the index where it exists in the body, and in one of my test cases it doesn't get updated.

Test case that triggers this on main branch:
def test_entry_points_with_comments(fmt: Fmt) -> None:
    start = """
    [project.entry-points]
    # test

    beta = { C = "c", D = "d" }
    alpha = { B = "b", "A.A" = "a" }
    """
    expected = """
    [project.entry-points]
    # test

    alpha = { B = "b", "A.A" = "a" }
    beta = { C = "c", D = "d" }
    """
    fmt(fmt_project, start, expected)

Related: https://github.com/sdispater/tomlkit/issues/184


Changing nodes' group through Groups Editor doesn't trigger update, and causes error

Godot version
v4.0.dev.custom_build [515670351]
System information
Windows 10
Issue description
When using the Groups Editor that's opened from the "Manage Groups" button, adding or removing nodes from groups causes the node to properly change group, but it doesn't cause an update to trigger in the Groups Editor.  It also causes an error to appear in the console. You need to click on the group again in the "Groups" column for it to update.
Error: core\object\undo_redo.cpp:310 - Error calling method from signal '_group_selected': 'GroupDialog::_group_selected': Method not found.
https://user-images.githubusercontent.com/12120644/126722944-c97f64cd-d9f7-49af-8d71-4951b9d33c45.mp4
This bug does not occur in 3.3.2.stable, or the latest 3.x (v3.4.beta.custom_build [b856841b9])
Steps to reproduce

Have a node that's added to a group
Open up the "Manage Groups" dialog
Remove the node from the group
It won't immediately update until you click on the group again, and it'll show an error in the console

Minimal reproduction project
any project with nodes with groups

This may be due to the inspector no longer using change_notify() and relying on polling instead.

Fixed.


bugfix: AT mode at the 2th stage should always returns committed to user

Ⅰ. Describe what this PR did
bugfix: AT mode at the 2th stage should always returns committed to user
Ⅱ. Does this pull request fix one issue?
fix #850
Ⅲ. Why don't you add test cases (unit test/integration test)?
Ⅳ. Describe how to verify it
Ⅴ. Special notes for reviews

Codecov Report

Merging #855 into develop will decrease coverage by 0.18%.
The diff coverage is 14.28%.

@@             Coverage Diff             @@
##             develop   #855      +/-   ##
===========================================
- Coverage      38.19%    38%   -0.19%
+ Complexity      1008   1006       -2
===========================================
  Files            220    220
  Lines           8446   8451       +5
  Branches        1016   1018       +2
===========================================
- Hits            3226   3212      -14
- Misses          4835   4851      +16
- Partials         385    388       +3

Impacted Files
Coverage Δ
Complexity Δ

...java/io/seata/tm/api/DefaultGlobalTransaction.java
58.06% <0%> (-4.01%)
15 <0> (ø)

.../java/io/seata/server/coordinator/DefaultCore.java
60.83% <100%> (-0.43%)
21 <0> (ø)

...ain/java/io/seata/core/rpc/netty/ShutdownHook.java
56.25% <0%> (-25%)
6% <0%> (-2%)

...eata/core/rpc/netty/AbstractRpcRemotingClient.java
17.7% <0%> (-2.88%)
7% <0%> (ø)

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update e9bb3e6...e0124a0. Read the comment docs.


trpc-panel

https://github.com/iway1/trpc-panel

[ ] https://github.com/prosepilot/trpc-openapi/blob/master/examples/with-nextjs/src/pages/api/openapi.json.ts
[ ] https://github.com/prosepilot/trpc-openapi/blob/master/examples/with-nextjs/src/pages/api/openapi.json.ts
[ ] https://www.jamesperkins.dev/post/rate-limiting-nextjs/

Frontend

[ ] https://github.com/devietti/trpc-next13-app/tree/main


Add docs for persist blacklist

Add docs on how to use persist blacklist

alluxio-bot, merge this please.

Merged build finished. Test FAILed.

Test FAILed.
Refer to this link for build results (access rights to CI server needed):
https://amplab.cs.berkeley.edu/jenkins//job/Alluxio-Pull-Request-Builder/6143/
Test FAILed.

Merged build finished. Test PASSed.

Test PASSed.
Refer to this link for build results (access rights to CI server needed):
https://amplab.cs.berkeley.edu/jenkins//job/Alluxio-Pull-Request-Builder/6146/
Test PASSed.

Merged build finished. Test FAILed.

Test FAILed.
Refer to this link for build results (access rights to CI server needed):
https://amplab.cs.berkeley.edu/jenkins//job/Alluxio-Pull-Request-Builder/6144/
Test FAILed.