🐛 Bug Report: Auth response is missing cookie nonce

📜 Description
I try and access CI/CD.
https://backstage-dev.mydomain.com/api/auth/github/handler/frame?env=development. renders a blank screen.
This is the callback URL I have in the github app.
This is running on K8
Here are some entries from app-config.yaml
app:
title: Developer Portal
baseUrl: http://localhost.  <--- No idea what this is supposed to be or whether it is even relevant.
organization:
name: My Org
backend:
baseUrl: http://localhost.  <--- No idea what this is supposed to be.  I have tried lots of combinations.  localhost:7007 etc
listen:
port: 7007
auth:
experimentalExtraAllowedOrigins:
- "https://*.mydomain.com"
The documentation is great for getting a local deployment up and running.  yarn dev works great.  The docs are not so great for getting anything up and running in production though.
👍 Expected behavior
prompt me to log into github
👎 Actual Behavior with Screenshots

👟 Reproduction steps
deploy on kubernetes
📃 Provide the context for the Bug.
No response
🖥 Your Environment
I try and access CI/CD.
https://backstage-dev.mydomain.com/api/auth/github/handler/frame?env=development. renders a blank screen.
This is the callback URL I have in the github app.
This is running on K8
Here are some entries from app-config.yaml
app:
title: Developer Portal
baseUrl: http://localhost.  <--- No idea what this is supposed to be or whether it is even relevant.
organization:
name: My Org
backend:
baseUrl: http://localhost.  <--- No idea what this is supposed to be.  I have tried lots of combinations.  localhost:7007 etc
listen:
port: 7007
auth:
experimentalExtraAllowedOrigins:
- "https://*.mydomain.com"
The documentation is great for getting a local deployment up and running.  yarn dev works great.  The docs are not so great for getting anything up and running in production though.
👀 Have you spent some time to check if this bug has been raised before?

[X] I checked and didn't find similar issue

🏢 Have you read the Code of Conduct?

[X] I have read the Code of Conduct

Are you willing to submit PR?
Yes I am willing to submit a PR!

There's likely something that prevents cookies from working in your setup. Double check that you don't have any proxies in-between the browser and the auth-backend that would break cookies.
The callback at .../handler/frame is supposed to render a blank screen. All it does is send the session information to the parent window.
Both the app and backend base URLs should be the externally reachable URLs for each of them. In your case it's likely what you actually have instead of https://backstage-dev.mydomain.com
Any suggestions for how we could improve the documentation are welcome! 🙏

I tried the suggestion provided but I am still seeing the same error.
In the UI
GitHub
Auth response is missing cookie nonce

In the logs
{"level":"info","message":"::ffff:<IP_ADDRESS> - - [21/Jun/2023:14:16:32 +0000] \"GET /api/auth/github/refresh?optional&scope=repo&env=development HTTP/1.1\" 401 - \"-\" \"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/<IP_ADDRESS> Safari/537.36\"","service":"backstage","type":"incomingRequest"}
Below is the output from backstage-cli info
OS:   Darwin 22.5.0 - darwin/arm64
node: v16.20.0
yarn: 1.22.19
cli:  0.22.7 (installed)
backstage:  1.13.0
Dependencies:
@backstage/app-defaults                          1.3.1
@backstage/backend-app-api                       0.4.3
@backstage/backend-common                        0.18.5
@backstage/backend-dev-utils                     0.1.1
@backstage/backend-plugin-api                    0.5.2
@backstage/backend-tasks                         0.5.2
@backstage/catalog-client                        1.4.1
@backstage/catalog-model                         1.3.0
@backstage/cli-common                            0.1.12
@backstage/cli-node                              0.1.0
@backstage/cli                                   0.22.7
@backstage/config-loader                         1.3.0
@backstage/config                                1.0.7
@backstage/core-app-api                          1.8.0
@backstage/core-components                       0.13.1
@backstage/core-plugin-api                       1.5.1
@backstage/errors                                1.1.5
@backstage/eslint-plugin                         0.1.3
@backstage/integration-aws-node                  0.1.3
@backstage/integration-react                     1.1.13
@backstage/integration                           1.4.5
@backstage/plugin-api-docs                       0.9.3
@backstage/plugin-app-backend                    0.3.45
@backstage/plugin-auth-backend                   0.18.3
@backstage/plugin-auth-node                      0.2.14
@backstage/plugin-catalog-backend-module-github  0.3.0
@backstage/plugin-catalog-backend                1.9.1
@backstage/plugin-catalog-common                 1.0.13
@backstage/plugin-catalog-graph                  0.2.30
@backstage/plugin-catalog-import                 0.9.8
@backstage/plugin-catalog-node                   1.3.6
@backstage/plugin-catalog-react                  1.6.0
@backstage/plugin-catalog                        1.11.0
@backstage/plugin-events-node                    0.2.6
@backstage/plugin-github-actions                 0.5.18
@backstage/plugin-org                            0.6.8
@backstage/plugin-permission-common              0.7.5
@backstage/plugin-permission-node                0.7.8
@backstage/plugin-permission-react               0.4.12
@backstage/plugin-proxy-backend                  0.2.39
@backstage/plugin-scaffolder-backend             1.14.0
@backstage/plugin-scaffolder-common              1.3.0
@backstage/plugin-scaffolder-node                0.1.3
@backstage/plugin-scaffolder-react               1.4.0
@backstage/plugin-scaffolder                     1.13.1
@backstage/plugin-search-backend-module-catalog  0.1.1
@backstage/plugin-search-backend-module-pg       0.5.6
@backstage/plugin-search-backend-module-techdocs 0.1.1
@backstage/plugin-search-backend-node            1.2.1
@backstage/plugin-search-backend                 1.3.1
@backstage/plugin-search-common                  1.2.3
@backstage/plugin-search-react                   1.6.0
@backstage/plugin-search                         1.3.0
@backstage/plugin-tech-radar                     0.6.4
@backstage/plugin-techdocs-backend               1.6.2
@backstage/plugin-techdocs-module-addons-contrib 1.0.13
@backstage/plugin-techdocs-node                  1.7.1
@backstage/plugin-techdocs-react                 1.1.6
@backstage/plugin-techdocs                       1.6.2
@backstage/plugin-user-settings                  0.7.3
@backstage/release-manifests                     0.0.9
@backstage/test-utils                            1.3.1
@backstage/theme                                 0.3.0
@backstage/types                                 1.0.2
@backstage/version-bridge                        1.0.4

@darrell-hart both the app and backend baseUrls should be the externally reachable URLs, i.e. what you put in your browser address bar. Most likely that does not include the :7007 port as that's generally not the port that is used externally. I would try to remove the trailing /'s in both URLs though. We aim to support them but it may be that there is some case where they break the login flow.

Is this issue resolved for you. If yes please can you provide the solution here also.

I'm seeing the same - did you ever solve it @darrell-hart ?

I have the same problem, I don't know how to proceed

Try to upgrade to latest backstage release - then you are rid of this problem but get a new.

I updated to 1.20.3 and the error persists :(

Hi @davidkarlsen, could you share the new issue you are getting?

@vinzscam that was my own ignorance in #21865


fix: implement user sorting column (#3469)

fix: implement user sorting column

fix: implement user sorting column

fix: string column

isOrderByLower

Co-authored-by: Livio Amstutz<EMAIL_ADDRESS>

fixed with https://github.com/zitadel/zitadel/pull/3500


ARROW-6721: [JAVA] Avro adapter benchmark only runs once in JMH

Related to ARROW-6721.
The current AvroAdapterBenchmark actually only run once during JMH evaluation, since the decoder was consumed for the first time and the follow-up invokes will directly return.
To solve this, we use BinaryDecoder explicitly in benchmark and reset its inner stream first when the test method is invoked.

We should try to rerun the failed job to make sure the timeout doesn't repeat

build passed, seems previous failure is unrelated.

+1, thank you.


Support for ZTE Core Router ZXR10 M6000-S

Hi,
I woul like to make a feature request for the support of ZTE Core Router ZXR10 M6000-S

Peering Manager uses NAPALM drivers for its network interaction pieces. You can see the list of support NAPALM drivers here https://napalm.readthedocs.io/en/latest/support/
If ZTE is not there then you may need to log a feature request on the NAPALM GitHub.


network, handler: Use receiver at handler funcs

What this PR does / why we need it:
Which issue(s) this PR fixes (optional, in fixes #<issue number>(, fixes #<issue_number>, ...) format, will close the issue(s) when PR gets merged):
Fixes #
Special notes for your reviewer:
The NetworkUtilsHandler functions where using the global bar Handler
instead of the receiver, they should use the receivers instance.
Release note:

NONE

/uncc @omeryahud
/cc @maiqueb

/approve


Learning Pathways Content to match MS Learning Center?

[x] Question
[ ] Typo
[ ] Bug
[ ] Additional article idea

Is there a plan to have the content available through Learning Pathways match what is on the Microsoft Training Center?
For example, Planner in Learning Pathways shows two tracks, MS Training Center has four. Learning Pathways track for "Use Planner" is "Ideas for your board" on the MS Training Center. The MS Training Center "Use Planner" is not available in the Learning Pathways content.

We can't promise an exact match but we are planning an update this quarter to refresh our content in Learning Pathways to more closely align with what's on the Office Training Center. Thanks for the feedback.

Close to inactivity


director does not free memory and overflows during testing.

director does not free memory and overflows during testing.
I run a test to check that all scenes are valid. Each new test run does not release memory and causes a leak.
_register - never calls clear ()
_register.clear () - does not clear test_directors = {} and does not destroy Director objects. Director continues to contain heavy structures and a null pointer "object"
The collection continues to contain empty objects.
_register is Object and never frees.

I have to break encapsulation.
	_registry.clear()
	for director in _registry.test_directors.values() :
		director.free()
	_registry.test_directors.clear()

Ah okay. This is a poor assumption on my part where clear should be be called when the Test Class is finished but the option should exist to clear it after each method as well. I could probably add an enum setting like CLEAR_IN_POST, CLEAR_IN_END when doubling items to solve this. Maybe with a default in project settings.

What can I do now to make it work now?

You could add a check around line 48 here for "if hook = "post" and then call clear on the director.

Added a clear() method to director so you can call it at the end of a post hook (or even during a test if you want for whatever reason)? See f04cdc48f07521c8b774e7f4f4bf3051c55dd0f7
Closing this but feel free to comment if issues persists.


Self Hosted Netbird + Authentik - Error: failed retrieving a new idp manager with err: authentik IdP configuration is incomplete, TokenEndpoint is missing - Error: failed creating JWT validator: Get ... EOF

Describe the problem
I am facing lots of different issues during the setup of Netbird and Authentik (self hosted).
Following the tutorial is quite straightforward and most of the things seem to work.
I am stuck in the part that relates to the "netbird-management" container.
I use Cloudflare Proxy DNS and I had "Your SSL/TLS encryption mode" set to "Off". Now I turned it to "Full (Strict)" based on some guidelines on Cloudflare.
I also added <IP_ADDRESS> auth.MYDOMAIN.TLD to /etc/hosts (on the Podman Host) but that did not really solve the issues.
There are just too many redirects / connection refused / sometimes invalid X509 certificate (the latter probably when using the /etc/hosts entry line) going on here.
2024-03-09T19:39:09Z INFO management/cmd/management.go:447: loading OIDC configuration from the provided IDP configuration endpoint https://auth.MYDOMAIN.TLD/application/o/netbird/.well-known/openid-configuration
Error: failed reading provided config file: /etc/netbird/management.json: failed fetching OIDC configuration from endpoint https://auth.MYDOMAIN.TLD/application/o/netbird/.well-known/openid-configuration Get "https://auth.MYDOMAIN.TLD/application/o/netbird/.well-known/openid-configuration": stopped after 10 redirects
2024-03-09T19:41:37Z INFO management/cmd/management.go:447: loading OIDC configuration from the provided IDP configuration endpoint https://auth.MYDOMAIN.TLD/application/o/netbird/.well-known/openid-configuration
2024-03-09T19:41:38Z INFO management/cmd/management.go:452: loaded OIDC configuration from the provided IDP configuration endpoint: https://auth.MYDOMAIN.TLD/application/o/netbird/.well-known/openid-configuration
2024-03-09T19:41:38Z INFO management/cmd/management.go:454: overriding HttpConfig.AuthIssuer with a new value https://auth.MYDOMAIN.TLD/application/o/netbird/, previously configured value:
2024-03-09T19:41:38Z INFO management/cmd/management.go:458: overriding HttpConfig.AuthKeysLocation (JWT certs) with a new value https://auth.MYDOMAIN.TLD/application/o/netbird/jwks/, previously configured value:
2024-03-09T19:41:38Z INFO management/cmd/management.go:463: overriding DeviceAuthorizationFlow.TokenEndpoint with a new value: https://auth.MYDOMAIN.TLD/application/o/token/, previously configured value:
2024-03-09T19:41:38Z INFO management/cmd/management.go:466: overriding DeviceAuthorizationFlow.DeviceAuthEndpoint with a new value: https://auth.MYDOMAIN.TLD/application/o/device/, previously configured value:
2024-03-09T19:41:38Z INFO management/cmd/management.go:474: overriding DeviceAuthorizationFlow.ProviderConfig.Domain with a new value: auth.MYDOMAIN.TLD, previously configured value:
2024-03-09T19:41:38Z INFO management/cmd/management.go:484: overriding PKCEAuthorizationFlow.TokenEndpoint with a new value: https://auth.MYDOMAIN.TLD/application/o/token/, previously configured value:
2024-03-09T19:41:38Z INFO management/cmd/management.go:487: overriding PKCEAuthorizationFlow.AuthorizationEndpoint with a new value: https://auth.MYDOMAIN.TLD/application/o/authorize/, previously configured value:
2024-03-09T19:41:38Z INFO management/server/telemetry/app_metrics.go:177: enabled application metrics and exposing on http://<IP_ADDRESS>:8081
2024-03-09T19:41:38Z INFO management/server/store.go:94: using SQLite store engine
Error: failed retrieving a new idp manager with err: authentik IdP configuration is incomplete, TokenEndpoint is missing
2024-03-09T19:45:00Z INFO management/cmd/management.go:447: loading OIDC configuration from the provided IDP configuration endpoint https://auth.MYDOMAIN.TLD/application/o/netbird/.well-known/openid-configuration
2024-03-09T19:45:01Z INFO management/cmd/management.go:452: loaded OIDC configuration from the provided IDP configuration endpoint: https://auth.MYDOMAIN.TLD/application/o/netbird/.well-known/openid-configuration
2024-03-09T19:45:01Z INFO management/cmd/management.go:454: overriding HttpConfig.AuthIssuer with a new value https://auth.MYDOMAIN.TLD/application/o/netbird/, previously configured value:
2024-03-09T19:45:01Z INFO management/cmd/management.go:458: overriding HttpConfig.AuthKeysLocation (JWT certs) with a new value https://auth.MYDOMAIN.TLD/application/o/netbird/jwks/, previously configured value:
2024-03-09T19:45:01Z INFO management/cmd/management.go:463: overriding DeviceAuthorizationFlow.TokenEndpoint with a new value: https://auth.MYDOMAIN.TLD/application/o/token/, previously configured value:
2024-03-09T19:45:01Z INFO management/cmd/management.go:466: overriding DeviceAuthorizationFlow.DeviceAuthEndpoint with a new value: https://auth.MYDOMAIN.TLD/application/o/device/, previously configured value:
2024-03-09T19:45:01Z INFO management/cmd/management.go:474: overriding DeviceAuthorizationFlow.ProviderConfig.Domain with a new value: auth.MYDOMAIN.TLD, previously configured value:
2024-03-09T19:45:01Z INFO management/cmd/management.go:484: overriding PKCEAuthorizationFlow.TokenEndpoint with a new value: https://auth.MYDOMAIN.TLD/application/o/token/, previously configured value:
2024-03-09T19:45:01Z INFO management/cmd/management.go:487: overriding PKCEAuthorizationFlow.AuthorizationEndpoint with a new value: https://auth.MYDOMAIN.TLD/application/o/authorize/, previously configured value:
2024-03-09T19:45:01Z INFO management/server/telemetry/app_metrics.go:177: enabled application metrics and exposing on http://<IP_ADDRESS>:8081
2024-03-09T19:45:01Z INFO management/server/store.go:94: using SQLite store engine
Error: failed retrieving a new idp manager with err: authentik IdP configuration is incomplete, TokenEndpoint is missing

To Reproduce
Steps to reproduce the behavior:

compose.yml file

version: "3"
services:
  #UI dashboard
  dashboard:
    image: wiretrustee/dashboard:latest
    restart: unless-stopped
    container_name: netbird-dashboard
    #ports:
    #  - 80:80
    #  - 443:443
    networks:
      - traefik
    environment:
      # Endpoints
      - NETBIRD_MGMT_API_ENDPOINT=https://netbird.MYDOMAIN.TLD:33073
      - NETBIRD_MGMT_GRPC_API_ENDPOINT=https://netbird.MYDOMAIN.TLD:33073
      # OIDC
      - AUTH_AUDIENCE=<CLIENT_ID>
      - AUTH_CLIENT_ID=<CLIENT_ID>
      - AUTH_CLIENT_SECRET=
      - AUTH_AUTHORITY=
      - USE_AUTH0=false
      - AUTH_SUPPORTED_SCOPES=openid profile email offline_access api
      - AUTH_REDIRECT_URI=
      - AUTH_SILENT_REDIRECT_URI=
      - NETBIRD_TOKEN_SOURCE=accessToken
      # SSL
      #- NGINX_SSL_PORT=443
      # Letsencrypt
      #- LETSENCRYPT_DOMAIN=
      #-<EMAIL_ADDRESS>#    volumes:
#      - netbird-letsencrypt:/etc/letsencrypt/
    labels:
    - traefik.enable=true
    - traefik.http.routers.netbird-dashboard.rule=Host(`netbird.MYDOMAIN.TLD`)
    - traefik.http.services.netbird-dashboard.loadbalancer.server.port=80

  # Signal
  signal:
    image: netbirdio/signal:latest
    container_name: netbird-signal
    restart: unless-stopped
    volumes:
      #- netbird-signal:/var/lib/netbird
      - ~/containers/data/netbird/signal:/var/lib/netbird
    networks:
      - traefik
    #ports:
    #  - 10000:80
  #      # port and command for Let's Encrypt validation
  #      - 443:443
  #    command: ["--letsencrypt-domain", "", "--log-file", "console"]
    labels:
    - traefik.enable=true
    - traefik.http.routers.netbird-signal.rule=Host(`netbird.MYDOMAIN.TLD`) && PathPrefix(`/signalexchange.SignalExchange/`)
    - traefik.http.services.netbird-signal.loadbalancer.server.port=80
    - traefik.http.services.netbird-signal.loadbalancer.server.scheme=h2c

  # Management
  management:
    image: netbirdio/management:latest
#    restart: unless-stopped
#    restart: no
    container_name: netbird-management
    depends_on:
      - dashboard
    volumes:
#      - netbird-mgmt:/var/lib/netbird
      - ~/containers/data/netbird/management:/var/lib/netbird
#      - netbird-letsencrypt:/etc/letsencrypt:ro
      - ~/containers/config/netbird/management.json:/etc/netbird/management.json
    networks:
      - traefik
    #ports:
    #  - 33073:443 #API port
  #    # command for Let's Encrypt validation without dashboard container
  #    command: ["--letsencrypt-domain", "", "--log-file", "console"]
    command: [
      "--port", "80",
      "--log-file", "console",
      "--disable-anonymous-metrics=true",
      "--single-account-mode-domain=netbird.MYDOMAIN.TLD",
      "--dns-domain=MYDOMAIN.TLD"
      ]
    labels:
    - traefik.enable=true
    - traefik.http.routers.netbird-api.rule=Host(`netbird.MYDOMAIN.TLD`) && PathPrefix(`/api`)
    - traefik.http.routers.netbird-api.service=netbird-api
    - traefik.http.services.netbird-api.loadbalancer.server.port=80

    - traefik.http.routers.netbird-management.rule=Host(`netbird.MYDOMAIN.TLD`) && PathPrefix(`/management.ManagementService/`)
    - traefik.http.routers.netbird-management.service=netbird-management
    - traefik.http.services.netbird-management.loadbalancer.server.port=80
    - traefik.http.services.netbird-management.loadbalancer.server.scheme=h2c

  # Coturn
  coturn:
    image: coturn/coturn:latest
    container_name: netbird-coturn
    restart: unless-stopped
    domainname: netbird.MYDOMAIN.TLD
    volumes:
      - ~/containers/config/netbird/turnserver.conf:/etc/turnserver.conf:ro
    #      - ./privkey.pem:/etc/coturn/private/privkey.pem:ro
    #      - ./cert.pem:/etc/coturn/certs/cert.pem:ro
    networks:
      - traefik
    network_mode: host
    command:
      - -c /etc/turnserver.conf

#volumes:
#  netbird-mgmt:
#  netbird-signal:
#  netbird-letsencrypt:

networks:
  traefik:
    external: true

Run podman compose up -d
See that netbird-management is not running when issueing podman ps'
Run podman logs netbird-management

Expected behavior
The container netbird-management to start successfully. Not being stuck in a redirect / too many redirects loops causing the netbird-management container to automatically restart, traefik attemping a certificate renewal and ending up banned from Letsencrypt for a few hours.
Are you using NetBird Cloud?
Self-Hosted Control Panel.
NetBird version
Cannot enter management console since it keeps crashing  / restarting ...
Was installed & pulled from Docker Hub today.
NetBird status -d output:
Cannot enter management console since it keeps crashing  / restarting ...
Was installed & pulled from Docker Hub today.
Screenshots
N/A
Additional context
Running podman instead of docker.
Installed on Debian AMD64 12 Bookworm with APT Pinning of Podman (and conmon, podman-compose, ...) from Trixie/Testing.
podman info shows
host:
  arch: amd64
  buildahVersion: 1.33.5
  cgroupControllers:
  - cpu
  - memory
  - pids
  cgroupManager: systemd
  cgroupVersion: v2
  conmon:
    package: conmon_2.1.10+ds1-1_amd64
    path: /usr/bin/conmon
    version: 'conmon version 2.1.10, commit: unknown'
  cpuUtilization:
    idlePercent: 91.15
    systemPercent: 2.63
    userPercent: 6.22
  cpus: 1
  databaseBackend: sqlite
  distribution:
    codename: bookworm
    distribution: debian
    version: "12"
  eventLogger: journald
  freeLocks: 2034
  hostname: ra
  idMappings:
    gidmap:
    - container_id: 0
      host_id: 1001
      size: 1
    - container_id: 1
      host_id: 165536
      size: 65536
    uidmap:
    - container_id: 0
      host_id: 1001
      size: 1
    - container_id: 1
      host_id: 165536
      size: 65536
  kernel: 6.1.0-18-amd64
  linkmode: dynamic
  logDriver: journald
  memFree: 112033792
  memTotal:<PHONE_NUMBER>
  networkBackend: netavark
  networkBackendInfo:
    backend: netavark
    dns:
      package: aardvark-dns_1.4.0-5_amd64
      path: /usr/lib/podman/aardvark-dns
      version: aardvark-dns 1.4.0
    package: netavark_1.4.0-3_amd64
    path: /usr/lib/podman/netavark
    version: netavark 1.4.0
  ociRuntime:
    name: crun
    package: crun_1.14.1-1_amd64
    path: /usr/bin/crun
    version: |-
      crun version 1.14.1
      commit: de537a7965bfbe9992e2cfae0baeb56a08128171
      rundir: /run/user/1001/crun
      spec: 1.0.0
      +SYSTEMD +SELINUX +APPARMOR +CAP +SECCOMP +EBPF +WASM:wasmedge +YAJL
  os: linux
  pasta:
    executable: /usr/bin/pasta
    package: passt_0.0~git20230309.7c7625d-1_amd64
    version: |
      pasta unknown version
      Copyright Red Hat
      GNU Affero GPL version 3 or later <https://www.gnu.org/licenses/agpl-3.0.html>
      This is free software: you are free to change and redistribute it.
      There is NO WARRANTY, to the extent permitted by law.
  remoteSocket:
    exists: true
    path: /run/user/1001/podman/podman.sock
  security:
    apparmorEnabled: false
    capabilities: CAP_CHOWN,CAP_DAC_OVERRIDE,CAP_FOWNER,CAP_FSETID,CAP_KILL,CAP_NET_BIND_SERVICE,CAP_SETFCAP,CAP_SETGID,CAP_SETPCAP,CAP_SETUID,CAP_SYS_CHROOT
    rootless: true
    seccompEnabled: true
    seccompProfilePath: /usr/share/containers/seccomp.json
    selinuxEnabled: false
  serviceIsRemote: false
  slirp4netns:
    executable: /usr/bin/slirp4netns
    package: slirp4netns_1.2.0-1_amd64
    version: |-
      slirp4netns version 1.2.0
      commit: 656041d45cfca7a4176f6b7eed9e4fe6c11e8383
      libslirp: 4.7.0
      SLIRP_CONFIG_VERSION_MAX: 4
      libseccomp: 2.5.4
  swapFree: 604762112
  swapTotal:<PHONE_NUMBER>
  uptime: 320h 15m 8.00s (Approximately 13.33 days)
  variant: ""
plugins:
  authorization: null
  log:
  - k8s-file
  - none
  - passthrough
  - journald
  network:
  - bridge
  - macvlan
  - ipvlan
  volume:
  - local
registries:
  search:
  - registry.fedoraproject.org
  - registry.access.redhat.com
  - docker.io
  - quay.io
store:
  configFile: /home/podman/.config/containers/storage.conf
  containerStore:
    number: 9
    paused: 0
    running: 8
    stopped: 1
  graphDriverName: overlay
  graphOptions:
    overlay.mount_program:
      Executable: /usr/bin/fuse-overlayfs
      Package: fuse-overlayfs_1.13-1_amd64
      Version: |-
        fusermount3 version: 3.14.0
        fuse-overlayfs: version 1.13-dev
        FUSE library version 3.14.0
        using FUSE kernel interface version 7.31
    overlay.mountopt: nodev,metacopy=on
  graphRoot: /home/podman/containers/storage
  graphRootAllocated:<PHONE_NUMBER>8
  graphRootUsed:<PHONE_NUMBER>
  graphStatus:
    Backing Filesystem: extfs
    Native Overlay Diff: "false"
    Supports d_type: "true"
    Supports shifting: "true"
    Supports volatile: "true"
    Using metacopy: "false"
  imageCopyTmpDir: /var/tmp
  imageStore:
    number: 12
  runRoot: /run/user/1001
  transientStore: false
  volumePath: /home/podman/containers/storage/volumes
version:
  APIVersion: 4.9.3
  Built: 0
  BuiltTime: Thu Jan  1 01:00:00 1970
  GitCommit: ""
  GoVersion: go1.21.6
  Os: linux
  OsArch: linux/amd64
  Version: 4.9.3

OK I resolved the missing TokenEndpoint by putting:
"TokenEndpoint": "https://auth.MYDOMAIN.TLD/application/o/netbird/oauth/v2/token"

In management.json
(based on the findings from https://github.com/netbirdio/netbird/issues/750)
But now I get a different error
2024-03-09T19:39:09Z INFO management/cmd/management.go:447: loading OIDC configuration from the provided IDP configuration endpoint https://auth.MYDOMAIN.TLD/application/o/netbird/.well-known/openid-configuration
Error: failed reading provided config file: /etc/netbird/management.json: failed fetching OIDC configuration from endpoint https://auth.MYDOMAIN.TLD/application/o/netbird/.well-known/openid-configuration Get "https://auth.MYDOMAIN.TLD/application/o/netbird/.well-known/openid-configuration": stopped after 10 redirects
2024-03-09T19:41:37Z INFO management/cmd/management.go:447: loading OIDC configuration from the provided IDP configuration endpoint https://auth.MYDOMAIN.TLD/application/o/netbird/.well-known/openid-configuration
2024-03-09T19:41:38Z INFO management/cmd/management.go:452: loaded OIDC configuration from the provided IDP configuration endpoint: https://auth.MYDOMAIN.TLD/application/o/netbird/.well-known/openid-configuration
2024-03-09T19:41:38Z INFO management/cmd/management.go:454: overriding HttpConfig.AuthIssuer with a new value https://auth.MYDOMAIN.TLD/application/o/netbird/, previously configured value:
2024-03-09T19:41:38Z INFO management/cmd/management.go:458: overriding HttpConfig.AuthKeysLocation (JWT certs) with a new value https://auth.MYDOMAIN.TLD/application/o/netbird/jwks/, previously configured value:
2024-03-09T19:41:38Z INFO management/cmd/management.go:463: overriding DeviceAuthorizationFlow.TokenEndpoint with a new value: https://auth.MYDOMAIN.TLD/application/o/token/, previously configured value:
2024-03-09T19:41:38Z INFO management/cmd/management.go:466: overriding DeviceAuthorizationFlow.DeviceAuthEndpoint with a new value: https://auth.MYDOMAIN.TLD/application/o/device/, previously configured value:
2024-03-09T19:41:38Z INFO management/cmd/management.go:474: overriding DeviceAuthorizationFlow.ProviderConfig.Domain with a new value: auth.MYDOMAIN.TLD, previously configured value:
2024-03-09T19:41:38Z INFO management/cmd/management.go:484: overriding PKCEAuthorizationFlow.TokenEndpoint with a new value: https://auth.MYDOMAIN.TLD/application/o/token/, previously configured value:
2024-03-09T19:41:38Z INFO management/cmd/management.go:487: overriding PKCEAuthorizationFlow.AuthorizationEndpoint with a new value: https://auth.MYDOMAIN.TLD/application/o/authorize/, previously configured value:
2024-03-09T19:41:38Z INFO management/server/telemetry/app_metrics.go:177: enabled application metrics and exposing on http://<IP_ADDRESS>:8081
2024-03-09T19:41:38Z INFO management/server/store.go:94: using SQLite store engine
Error: failed retrieving a new idp manager with err: authentik IdP configuration is incomplete, TokenEndpoint is missing
2024-03-09T19:45:00Z INFO management/cmd/management.go:447: loading OIDC configuration from the provided IDP configuration endpoint https://auth.MYDOMAIN.TLD/application/o/netbird/.well-known/openid-configuration
2024-03-09T19:45:01Z INFO management/cmd/management.go:452: loaded OIDC configuration from the provided IDP configuration endpoint: https://auth.MYDOMAIN.TLD/application/o/netbird/.well-known/openid-configuration
2024-03-09T19:45:01Z INFO management/cmd/management.go:454: overriding HttpConfig.AuthIssuer with a new value https://auth.MYDOMAIN.TLD/application/o/netbird/, previously configured value:
2024-03-09T19:45:01Z INFO management/cmd/management.go:458: overriding HttpConfig.AuthKeysLocation (JWT certs) with a new value https://auth.MYDOMAIN.TLD/application/o/netbird/jwks/, previously configured value:
2024-03-09T19:45:01Z INFO management/cmd/management.go:463: overriding DeviceAuthorizationFlow.TokenEndpoint with a new value: https://auth.MYDOMAIN.TLD/application/o/token/, previously configured value:
2024-03-09T19:45:01Z INFO management/cmd/management.go:466: overriding DeviceAuthorizationFlow.DeviceAuthEndpoint with a new value: https://auth.MYDOMAIN.TLD/application/o/device/, previously configured value:
2024-03-09T19:45:01Z INFO management/cmd/management.go:474: overriding DeviceAuthorizationFlow.ProviderConfig.Domain with a new value: auth.MYDOMAIN.TLD, previously configured value:
2024-03-09T19:45:01Z INFO management/cmd/management.go:484: overriding PKCEAuthorizationFlow.TokenEndpoint with a new value: https://auth.MYDOMAIN.TLD/application/o/token/, previously configured value:
2024-03-09T19:45:01Z INFO management/cmd/management.go:487: overriding PKCEAuthorizationFlow.AuthorizationEndpoint with a new value: https://auth.MYDOMAIN.TLD/application/o/authorize/, previously configured value:
2024-03-09T19:45:01Z INFO management/server/telemetry/app_metrics.go:177: enabled application metrics and exposing on http://<IP_ADDRESS>:8081
2024-03-09T19:45:01Z INFO management/server/store.go:94: using SQLite store engine
Error: failed retrieving a new idp manager with err: authentik IdP configuration is incomplete, TokenEndpoint is missing
2024-03-10T08:47:40Z INFO management/cmd/management.go:447: loading OIDC configuration from the provided IDP configuration endpoint https://auth.MYDOMAIN.TLD/application/o/netbird/.well-known/openid-configuration
2024-03-10T08:47:41Z INFO management/cmd/management.go:452: loaded OIDC configuration from the provided IDP configuration endpoint: https://auth.MYDOMAIN.TLD/application/o/netbird/.well-known/openid-configuration
2024-03-10T08:47:41Z INFO management/cmd/management.go:454: overriding HttpConfig.AuthIssuer with a new value https://auth.MYDOMAIN.TLD/application/o/netbird/, previously configured value:
2024-03-10T08:47:41Z INFO management/cmd/management.go:458: overriding HttpConfig.AuthKeysLocation (JWT certs) with a new value https://auth.MYDOMAIN.TLD/application/o/netbird/jwks/, previously configured value:
2024-03-10T08:47:41Z INFO management/cmd/management.go:463: overriding DeviceAuthorizationFlow.TokenEndpoint with a new value: https://auth.MYDOMAIN.TLD/application/o/token/, previously configured value: https://auth.MYDOMAIN.TLD/application/o/netbird/oauth/v2/token
2024-03-10T08:47:41Z INFO management/cmd/management.go:466: overriding DeviceAuthorizationFlow.DeviceAuthEndpoint with a new value: https://auth.MYDOMAIN.TLD/application/o/device/, previously configured value:
2024-03-10T08:47:41Z INFO management/cmd/management.go:474: overriding DeviceAuthorizationFlow.ProviderConfig.Domain with a new value: auth.MYDOMAIN.TLD, previously configured value:
2024-03-10T08:47:41Z INFO management/cmd/management.go:484: overriding PKCEAuthorizationFlow.TokenEndpoint with a new value: https://auth.MYDOMAIN.TLD/application/o/token/, previously configured value: https://auth.MYDOMAIN.TLD/application/o/netbird/oauth/v2/token
2024-03-10T08:47:41Z INFO management/cmd/management.go:487: overriding PKCEAuthorizationFlow.AuthorizationEndpoint with a new value: https://auth.MYDOMAIN.TLD/application/o/authorize/, previously configured value:
2024-03-10T08:47:41Z INFO management/server/telemetry/app_metrics.go:177: enabled application metrics and exposing on http://<IP_ADDRESS>:8081
2024-03-10T08:47:41Z INFO management/server/store.go:94: using SQLite store engine
2024-03-10T08:47:41Z INFO management/cmd/management.go:159: update config with activity store key
2024-03-10T08:48:12Z INFO management/cmd/management.go:171: geo location service has been initialized from /var/lib/netbird/
2024-03-10T08:48:12Z INFO management/server/account.go:849: single account mode enabled, accounts number 0
2024-03-10T08:48:12Z WARN management/cmd/management.go:185: TrustedPeers are configured to default value '<IP_ADDRESS>/0', '::/0'. This allows connection IP spoofing.
2024-03-10T08:48:14Z WARN management/server/account.go:889: failed warming up cache due to error: Post "https://auth.MYDOMAIN.TLD/application/o/netbird/oauth/v2/token": EOF
Error: failed creating JWT validator: Get "https://auth.MYDOMAIN.TLD/application/o/netbird/jwks/": EOF

Any update ? Or any idea what log file I should provide and how ?

@luckylinux, as stated in #1715, you are using Keycloak now. Do you want to continue troubleshooting this issue? If so, it seems like the IDP Manager configuration is incomplete; you can share its values by masking domains and secrets.
It is part of the management.json, with the key IdpManagerConfig

@mlsmaycon Well for now I'm not really using anything as nothing is working, for different reasons:

Authentik: the issue described here
Keycloak: unauthenticated
Zitadel: couldn't even try, the Zitadel container itself was causing I/O timeout issues probably due to very high CPU usage

So, for now, we can keep going with Keycloak (I don't really care, I just would like netbird+something+traefik+homeassistant to be able to access my home assistant instance remotely).

I masked 2 values and replaced them by AUTHENTIK_CLIENT_ID_SECRET and AUTHENTIK_CLIENT_PASSWORD_SECRET
    "IdpManagerConfig": {
        "ManagerType": "authentik",
        "ClientConfig": {
            "Issuer": "",
            "TokenEndpoint": "https://auth.MYDOMAIN.TLD/application/o/netbird/oauth/v2/token",
            "ClientID": "AUTHENTIK_CLIENT_ID_SECRET",
            "ClientSecret": "",
            "GrantType": "client_credentials"
        },
        "ExtraConfig": {
            "Password": "AUTHENTIK_CLIENT_PASSWORD_SECRET",
            "Username": "netbird"
        },
        "Auth0ClientCredentials": null,
        "AzureClientCredentials": null,
        "KeycloakClientCredentials": null,
        "ZitadelClientCredentials": null
    }

Thanks for sharing it @luckylinux , it seems the Issuer is also missing. These values get filled via the configure.sh script, if you still have your setup.env file, you can run it again and ensure that the TokenEndpoint and Issuer are set, as well as the client ID, Password, and Usernames.
As for the Username, the guide creates a Netbird user with uppercase N. Can you double-check that, too?
As an alternative, to get started, you can disable the IdpManagerConfig by setting the ManagerType to "none." that won't map user IDs to email addresses but should allow you to explore the platform.

Thanks for sharing it @luckylinux , it seems the Issuer is also missing. These values get filled via the configure.sh script, if you still have your setup.env file, you can run it again and ensure that the TokenEndpoint and Issuer are set, as well as the client ID, Password, and Usernames.
As for the Username, the guide creates a Netbird user with uppercase N. Can you double-check that, too?
As an alternative, to get started, you can disable the IdpManagerConfig by setting the ManagerType to "none." that won't map user IDs to email addresses but should allow you to explore the platform.

Netbird lowercase is intentional. My user is netbird :).
What should I set for issuert ? I do not have such a parameter in setup.env. How should I set it and to what ?

You can run:
apt install jq
curl https://auth.MYDOMAIN.TLD/application/o/netbird/.well-known/openid-configuration  | jq

That will give you JSON response with the issuer value.

OK ... That would be
issuer: "https://auth.MYDOMAIN.TLD/application/o/netbird/"

(I just grabbed it from Firefox :))

I fixed that in management.json by setting the issuer in IdpManagerConfig but the container netbird-management continuously crashes.
The logs show
2024-03-19T06:06:19Z INFO management/cmd/management.go:449: loading OIDC configuration from the provided IDP configuration endpoint https://auth.MYDOMAIN.TLD/application/o/netbird/.well-known/openid-configuration
Error: failed reading provided config file: /etc/netbird/management.json: failed fetching OIDC configuration from endpoint https://auth.MYDOMAIN.TLD/application/o/netbird/.well-known/openid-configuration Get "https://auth.MYDOMAIN.TLD/application/o/netbird/.well-known/openid-configuration": EOF

Very similar / same error as happened before.

Any update ? Google didn't return similar error messages ...
I could validate both using jq empty $file.json or cat $file.json | jq empty both for

/etc/netbird/management.json:
Contents of https://auth.MYDOMAIN.TLD/application/o/netbird/.well-known/openid-configuration (saved using Firefox)

Removed  auth.MYDOMAIN.TLD from /etc/hosts to try if it gave different results.
I could download locally (from the host serving the containers, i.e. remotely):
 curl https://auth.MYDOMAIN.TLD/application/o/netbird/.well-known/openid-configuration
Restarted all netbird containers.
Now I am getting:
2024-03-26T19:08:34Z INFO management/cmd/management.go:449: loading OIDC configuration from the provided IDP configuration endpoint https://auth.MYDOMAIN.TLD/application/o/netbird/.well-known/openid-configuration
2024-03-26T19:08:37Z INFO management/cmd/management.go:454: loaded OIDC configuration from the provided IDP configuration endpoint: https://auth.MYDOMAIN.TLD/application/o/netbird/.well-known/openid-configuration
2024-03-26T19:08:37Z INFO management/cmd/management.go:456: overriding HttpConfig.AuthIssuer with a new value https://auth.MYDOMAIN.TLD/application/o/netbird/, previously configured value: https://auth.MYDOMAIN.TLD/application/o/netbird/
2024-03-26T19:08:37Z INFO management/cmd/management.go:460: overriding HttpConfig.AuthKeysLocation (JWT certs) with a new value https://auth.MYDOMAIN.TLD/application/o/netbird/jwks/, previously configured value: https://auth.MYDOMAIN.TLD/application/o/netbird/jwks/
2024-03-26T19:08:37Z INFO management/cmd/management.go:465: overriding DeviceAuthorizationFlow.TokenEndpoint with a new value: https://auth.MYDOMAIN.TLD/application/o/token/, previously configured value: https://auth.MYDOMAIN.TLD/application/o/token/
2024-03-26T19:08:37Z INFO management/cmd/management.go:468: overriding DeviceAuthorizationFlow.DeviceAuthEndpoint with a new value: https://auth.MYDOMAIN.TLD/application/o/device/, previously configured value: https://auth.MYDOMAIN.TLD/application/o/device/
2024-03-26T19:08:37Z INFO management/cmd/management.go:476: overriding DeviceAuthorizationFlow.ProviderConfig.Domain with a new value: auth.MYDOMAIN.TLD, previously configured value: auth.MYDOMAIN.TLD
2024-03-26T19:08:37Z INFO management/cmd/management.go:486: overriding PKCEAuthorizationFlow.TokenEndpoint with a new value: https://auth.MYDOMAIN.TLD/application/o/token/, previously configured value: https://auth.MYDOMAIN.TLD/application/o/token/
2024-03-26T19:08:37Z INFO management/cmd/management.go:489: overriding PKCEAuthorizationFlow.AuthorizationEndpoint with a new value: https://auth.MYDOMAIN.TLD/application/o/authorize/, previously configured value: https://auth.MYDOMAIN.TLD/application/o/authorize/
2024-03-26T19:08:37Z INFO management/server/telemetry/app_metrics.go:177: enabled application metrics and exposing on http://<IP_ADDRESS>:8081
2024-03-26T19:08:37Z INFO management/server/store.go:92: using SQLite store engine
2024-03-26T19:08:39Z INFO management/cmd/management.go:172: geo location service has been initialized from /var/lib/netbird/
2024-03-26T19:08:39Z INFO management/server/account.go:848: single account mode enabled, accounts number 0
2024-03-26T19:08:39Z WARN management/cmd/management.go:186: TrustedPeers are configured to default value '<IP_ADDRESS>/0', '::/0'. This allows connection IP spoofing.
Error: failed creating JWT validator: invalid character 'e' looking for beginning of value

It would be nice if the line number of the error would also be reported ...
Any idea ?

Now actually it's going a bit further, netbird-management does not crash, but I still cannot see a webpage working...
2024-03-26T19:08:34Z INFO management/cmd/management.go:449: loading OIDC configuration from the provided IDP configuration endpoint https://auth.MYDOMAIN.TLD/application/o/netbird/.well-known/openid-configuration
2024-03-26T19:08:37Z INFO management/cmd/management.go:454: loaded OIDC configuration from the provided IDP configuration endpoint: https://auth.MYDOMAIN.TLD/application/o/netbird/.well-known/openid-configuration
2024-03-26T19:08:37Z INFO management/cmd/management.go:456: overriding HttpConfig.AuthIssuer with a new value https://auth.MYDOMAIN.TLD/application/o/netbird/, previously configured value: https://auth.MYDOMAIN.TLD/application/o/netbird/
2024-03-26T19:08:37Z INFO management/cmd/management.go:460: overriding HttpConfig.AuthKeysLocation (JWT certs) with a new value https://auth.MYDOMAIN.TLD/application/o/netbird/jwks/, previously configured value: https://auth.MYDOMAIN.TLD/application/o/netbird/jwks/
2024-03-26T19:08:37Z INFO management/cmd/management.go:465: overriding DeviceAuthorizationFlow.TokenEndpoint with a new value: https://auth.MYDOMAIN.TLD/application/o/token/, previously configured value: https://auth.MYDOMAIN.TLD/application/o/token/
2024-03-26T19:08:37Z INFO management/cmd/management.go:468: overriding DeviceAuthorizationFlow.DeviceAuthEndpoint with a new value: https://auth.MYDOMAIN.TLD/application/o/device/, previously configured value: https://auth.MYDOMAIN.TLD/application/o/device/
2024-03-26T19:08:37Z INFO management/cmd/management.go:476: overriding DeviceAuthorizationFlow.ProviderConfig.Domain with a new value: auth.MYDOMAIN.TLD, previously configured value: auth.MYDOMAIN.TLD
2024-03-26T19:08:37Z INFO management/cmd/management.go:486: overriding PKCEAuthorizationFlow.TokenEndpoint with a new value: https://auth.MYDOMAIN.TLD/application/o/token/, previously configured value: https://auth.MYDOMAIN.TLD/application/o/token/
2024-03-26T19:08:37Z INFO management/cmd/management.go:489: overriding PKCEAuthorizationFlow.AuthorizationEndpoint with a new value: https://auth.MYDOMAIN.TLD/application/o/authorize/, previously configured value: https://auth.MYDOMAIN.TLD/application/o/authorize/
2024-03-26T19:08:37Z INFO management/server/telemetry/app_metrics.go:177: enabled application metrics and exposing on http://<IP_ADDRESS>:8081
2024-03-26T19:08:37Z INFO management/server/store.go:92: using SQLite store engine
2024-03-26T19:08:39Z INFO management/cmd/management.go:172: geo location service has been initialized from /var/lib/netbird/
2024-03-26T19:08:39Z INFO management/server/account.go:848: single account mode enabled, accounts number 0
2024-03-26T19:08:39Z WARN management/cmd/management.go:186: TrustedPeers are configured to default value '<IP_ADDRESS>/0', '::/0'. This allows connection IP spoofing.
Error: failed creating JWT validator: invalid character 'e' looking for beginning of value
2024-03-26T19:11:55Z INFO management/cmd/management.go:449: loading OIDC configuration from the provided IDP configuration endpoint https://auth.MYDOMAIN.TLD/application/o/netbird/.well-known/openid-configuration
2024-03-26T19:11:56Z INFO management/cmd/management.go:454: loaded OIDC configuration from the provided IDP configuration endpoint: https://auth.MYDOMAIN.TLD/application/o/netbird/.well-known/openid-configuration
2024-03-26T19:11:56Z INFO management/cmd/management.go:456: overriding HttpConfig.AuthIssuer with a new value https://auth.MYDOMAIN.TLD/application/o/netbird/, previously configured value: https://auth.MYDOMAIN.TLD/application/o/netbird/
2024-03-26T19:11:56Z INFO management/cmd/management.go:460: overriding HttpConfig.AuthKeysLocation (JWT certs) with a new value https://auth.MYDOMAIN.TLD/application/o/netbird/jwks/, previously configured value: https://auth.MYDOMAIN.TLD/application/o/netbird/jwks/
2024-03-26T19:11:56Z INFO management/cmd/management.go:465: overriding DeviceAuthorizationFlow.TokenEndpoint with a new value: https://auth.MYDOMAIN.TLD/application/o/token/, previously configured value: https://auth.MYDOMAIN.TLD/application/o/token/
2024-03-26T19:11:56Z INFO management/cmd/management.go:468: overriding DeviceAuthorizationFlow.DeviceAuthEndpoint with a new value: https://auth.MYDOMAIN.TLD/application/o/device/, previously configured value: https://auth.MYDOMAIN.TLD/application/o/device/
2024-03-26T19:11:56Z INFO management/cmd/management.go:476: overriding DeviceAuthorizationFlow.ProviderConfig.Domain with a new value: auth.MYDOMAIN.TLD, previously configured value: auth.MYDOMAIN.TLD
2024-03-26T19:11:56Z INFO management/cmd/management.go:486: overriding PKCEAuthorizationFlow.TokenEndpoint with a new value: https://auth.MYDOMAIN.TLD/application/o/token/, previously configured value: https://auth.MYDOMAIN.TLD/application/o/token/
2024-03-26T19:11:56Z INFO management/cmd/management.go:489: overriding PKCEAuthorizationFlow.AuthorizationEndpoint with a new value: https://auth.MYDOMAIN.TLD/application/o/authorize/, previously configured value: https://auth.MYDOMAIN.TLD/application/o/authorize/
2024-03-26T19:11:56Z INFO management/server/telemetry/app_metrics.go:177: enabled application metrics and exposing on http://<IP_ADDRESS>:8081
2024-03-26T19:11:56Z INFO management/server/store.go:92: using SQLite store engine
2024-03-26T19:11:57Z INFO management/cmd/management.go:172: geo location service has been initialized from /var/lib/netbird/
2024-03-26T19:11:57Z INFO management/server/account.go:848: single account mode enabled, accounts number 0
2024-03-26T19:11:57Z WARN management/cmd/management.go:186: TrustedPeers are configured to default value '<IP_ADDRESS>/0', '::/0'. This allows connection IP spoofing.
2024-03-26T19:11:58Z WARN management/server/account.go:888: failed warming up cache due to error: unable to get authentik token, statusCode 405
2024-03-26T19:11:59Z INFO management/cmd/management.go:287: running gRPC backward compatibility server: [::]:33073
2024-03-26T19:11:59Z INFO management/cmd/management.go:319: management server version 0.26.3
2024-03-26T19:11:59Z INFO management/cmd/management.go:320: running HTTP server and gRPC server on the same port: [::]:80

@mlsmaycon: any News on this ? I just tried again with an Updated v0.29.3 Install now, but same Error.
Where is this originating from ?
[netbird-management] | Error: failed creating JWT validator: invalid character 'e' looking for beginning of value

That seems to be the only Error that I can see at least ... Possibly there is some other Stuff going on with Traefik Reverse Proxy and Cloudflare DNS Proxy ???


Table row not hiding when we hit Save button

Table row not hiding when we hit Save button on edit mode, showing the following error in the console .
angular.js:9959 TypeError: k.assign is not a function
at c.m.save (http://localhost:8289/vendor/xeditable/xeditable.min.js:6:7840)
at http://localhost:8289/vendor/xeditable/xeditable.min.js:6:12184
at Array.forEach (native)
at Object.forEach (http://localhost:8289/vendor/angular/angular.js:325:11)
at FormController.g.$save (http://localhost:8289/vendor/xeditable/xeditable.min.js:6:12146)
at val (http://localhost:8289/vendor/angular/angular.js:1054:18)
at c (http://localhost:8289/vendor/xeditable/xeditable.min.js:6:14324)
at Object.then (http://localhost:8289/vendor/xeditable/xeditable.min.js:6:14596)
at FormController.a (http://localhost:8289/vendor/xeditable/xeditable.min.js:6:11635)
at http://localhost:8289/vendor/angular/angular.js:1049:18
Please help me to resolve this issue.

Have similar issue,
TypeError: k.assign is not a function
at c.m.save (xeditable.min.js:170)
at xeditable.min.js:298
at Object.forEach (angular.js:332)
at FormController.g.$save (xeditable.min.js:297)
at val (angular.js:1029)
at c (xeditable.min.js:357)
at Object.then (xeditable.min.js:368)
at FormController.a (xeditable.min.js:275)
at angular.js:1024
at c (xeditable.min.js:357)

Can you provide a Plunker or JSFiddle showing your issue?

@exp-anoop are you still having an issue?

I think I solved this issue

OK, can you please close then?

Sure

@exp-anoop  could you please provide info on how you fixed it? I am facing the exact same issue. Thanks


fix: improve the logging behavior of slim_check

There was a bug in the tactic that meant it would always print "no goals to be solved".
This also promotes the code-generation from IO to CoreM, so that the output can be sent through the logging infrastructure rather than IO.println.
This is important, because tests are not allowed to be noisy, and we have no way to capture IO output.

bors merge


Menus not working

VSCode Version: Code 1.9.1 (f9d0c687ff2ea7aabd85fb9a43129117c0ecf519, 2017-02-09T00:26:45.394Z)
OS Version: Windows_NT ia32 10.0.15031
Extensions:

Extension
Author
Version

prettify-json
mohsen1
0.0.3

mssql
ms-mssql
0.2.1

csharp
ms-vscode
1.7.0

Menus not working (Same issue in VS Code Insider)
Steps to Reproduce:
1.Open Vs Code
2.Try Opening Menu

I have the same problem, nearly the same setup. The menus in e.g. Opera are not working either, so I guess the cause might be 15031.

I have the same problem and I am also using build 15031

Seems to be a Windows issue.


Get travis working

These changes get travis working on my fork.
There's a test failure, but that's out of scope for a PR just intended to get the tests running.
sudo: false - to get us on the new infrastructure
Removed apt-get installs (can't do that on sudo: false and they failed anyway - I'm not sure if they are really needed?
Install imagick with pecl
composer self-update || true stops the build failing if we can't update composer for whatever reason
composer install:

--prefer-dist it's faster than from source
--no-progress we don't need progress for our builds so lets turn it off for more succinct output
--no-suggest as above, we don't need this output for builds
--optimize-autoloader to hopefully speed up builds by making the autoloader a bit faster

Edit: I've added dist: trusty to try to get HHVM tests running and I've bumped the PHPUnit version because 3.x is pretty old now

wow - builds are much faster on trusty and the tests pass too!

Thanks alot!

Thanks again @dhensby  ... I have been trying to figure this out for weeks now.

No problem - glad to have helped. Travis can be a pain sometimes :/


update from .fo to .md

.fo was shut down
https://twitter.com/archiveis/status/1188222460598116353

Coverage remained the same at 56.923% when pulling 6b8e056eb8488a963a0e7eb5571cc40e5247fe64 on tonglil:master into f62ce855a562f574ef1f9e02b633acd4eae5b128 on pastpages:master.

I don't think any of the tests were ever passing on python 2.7.


creating multiple SQS and DeadLetterQueue with iam role and policy required using terragrunt

I am having some issue with my terragrunt configuration and main.tf configuration…I am trying to call my main.tf to use its configuration to create SQS and other resources in different environment but it wont create the SQS,DeadletterQueue ,role and the required policy in my desired environment.please what I’m i doing wrong.Below is the configuration that I have in my terragrunt and main.tf that I am trying to call.Also how do i pass the resource section of the policy as variable because those will be different based on environment.
Terragrunt.hcl
terraform {
         source = "../../../../..//module"
}

~~~ include {
  path = find_in_parent_folders()
}

inputs = {
  event_log_bucket_name = "trailbucket-sqs-logs"
  aws_sqs_queue_name               = "Trail_SQS"
  dead_letter_queue_name           = "Trail_SQS_DLQ"
  role_name                        = "ronix_access_role"
  description                      = "Role for ronix access"
  kms_key_arn                      = "ARN of the key"
}
}

main.tf

~~~ resource "aws_iam_role" "access_role" {
  name               = "access_role"
  description        = "Role For  Access"
  assume_role_policy = data.aws_iam_policy_document.trust_relationship.json
```
```Trust relationships policy document

data "aws_iam_policy_document" "trust_relationship" {
statement {
sid     = "AllowAssumeRoleForAccess"
actions = ["sts:AssumeRole"]

principals {
  type        = "AWS"
  identifiers = [var.account_id]
}

condition {
  test     = "StringEquals"
  variable = "sts:ExternalId"

  values = [var.external_id]
}
```
```data "aws_iam_policy_document" "policy_document"{
 statement{
 actions = [
  "sqs:DeleteMessage",
  "sqs:GetQueueUrl",
  "sqs:ReceiveMessage",
  "sqs:SendMessage",
  "sqs:SetQueueAttributes"
]
effect = "Allow"
resources =[
  "${aws_sqs_queue.Trail_SQS.arn}"
]
```
```resource "aws_iam_policy" "ronix_policy" {
 name = "ronix_access_policy"
 description = "ronix policy to access SQS"
 policy      = data.aws_iam_policy_document.policy_document.json
```

}

```resource "aws_iam_role_policy_attachment" "policy_attachment" {
  policy_arn = aws_iam_policy.policy.arn
  role       = aws_iam_role.access_role.id

```resource "aws_sqs_queue_policy" "Trail_SQS_DLQ"{
    queue_url = aws_sqs_queue.Trail_SQS_DLQ.id

    policy = <<POLICY

  "Version": "2012-10-17",
  "Id": "sqspolicy",
  "Statement": [
    {
      "Sid": "DLQ Policy",
      "Effect": "Allow",
      "Principal": {"AWS":"*"},
      "Action": "sqs:*",
      "Resource": "${aws_sqs_queue.Trail_SQS_DLQ.arn}"

```resource "aws_sqs_queue_policy" "trail_SQS_Policy" {
  queue_url = aws_sqs_queue.CloudTrail_SQS.id

  policy = <<POLICY
{
  "Version": "2012-10-17",
  "Id": "sqspolicy",
  "Statement": [
    {
      "Sid": "AllowSQSInvocation",
      "Effect": "Allow",
      "Principal": {"AWS":"*"},
      "Action": "sqs:*",
      "Resource": "${aws_sqs_queue.CloudTrail_SQS.arn}"

```output "sqs_queue_id"{
    value       =    aws_sqs_queue.Trail_SQS.id
    description = "The URL for the created Amazon SQS queue."
}

output "sqs_queue_arn" {
  value       =  aws_sqs_queue.Trail_SQS.arn
  description = "The ARN of the SQS queue."
}

output "sqs_queue_url"{
  description = "The URL for the created Amazon SQS queue"
  value       = aws_sqs_queue.Trail_SQS.url
}

If I use for_each as you suggested in the terraform side does that mean I would have to alter the name of the queue input in my terragrunt.hcl configuration?


[SPARK-41436][CONNECT][PYTHON] Implement collection functions: A~C

What changes were proposed in this pull request?
Implement collection functions alphabetically, this PR contains A ~ C  except:

aggregate, array_sort - need the support of LambdaFunction Expression
the int count in array_repeat - need to support datatype in LiteralExpression in the Python Client

Why are the changes needed?
For API coverage
Does this PR introduce any user-facing change?
new APIs
How was this patch tested?
added UT

cc @HyukjinKwon @amaliujia @cloud-fan @grundprinzip @xinrong-meng

merged into master

late LGTM


cmd/compile: please cherry pick internal compiler error fix for #23504 for 1.10.4

@randall77 It looks perhaps like the fix for #23504 didn't make it to 1.10.x releases (it's not in 1.9.x either, but I already patch those locally and am upgrading so less concerned).
Cherry picking the fix (4313d7767d830e863e8f8b53a2b48ca8d0bf0a79) and rebuilding 1.10.3 works as expected for me.
What version of Go are you using (go version)?
go version go1.10.3 linux/amd64
What did you do?
https://play.golang.org/p/OWxLKfWXnnh
go build of
package main

func f(op string) {
        for len(op) > 1 && !(op[0] >= '0' || op[0] <= '9') {
        }
}

func main() {
        f("x")
}

What did you expect to see?
... no output ...
What did you see instead?
prog.go:4:16: internal compiler error: panic during layout while compiling f:

runtime error: index out of range

goroutine 7 [running]:
cmd/compile/internal/ssa.Compile.func1(0xc4203f3288, 0xc42000e500)
	/usr/local/go/src/cmd/compile/internal/ssa/compile.go:38 +0xc8
panic(0xbbc700, 0xf9d830)
	/usr/local/go/src/runtime/panic.go:502 +0x229
cmd/compile/internal/ssa.layout(0xc42000e500)
	/usr/local/go/src/cmd/compile/internal/ssa/layout.go:68 +0xdca
cmd/compile/internal/ssa.Compile(0xc42000e500)
	/usr/local/go/src/cmd/compile/internal/ssa/compile.go:70 +0x2bb
cmd/compile/internal/gc.buildssa(0xc420001200, 0x1, 0x0)
	/usr/local/go/src/cmd/compile/internal/gc/ssa.go:223 +0xb32
cmd/compile/internal/gc.compileSSA(0xc420001200, 0x1)
	/usr/local/go/src/cmd/compile/internal/gc/pgen.go:239 +0x39
cmd/compile/internal/gc.compileFunctions.func2(0xc4203e8180, 0xc4200125a0, 0x1)
	/usr/local/go/src/cmd/compile/internal/gc/pgen.go:289 +0x49
created by cmd/compile/internal/gc.compileFunctions
	/usr/local/go/src/cmd/compile/internal/gc/pgen.go:287 +0x11c

Please file a bug report including a short program that triggers the error.
https://golang.org/issue/new

(apologies, this is the output from the playground as i now have it fixed locally so no error and am too lazy to rebuild it 'broken' right now)

Thank you @cwedgwood for reporting this!
I believe @randall77 has been looking at backporting to 1.10.* but also /cc @FiloSottile @andybons for auto-cherry picking/backporting.

This is not a regression since it's been failing since Go 1.7.  Normally we do not backport to fix such issues.
The fix is super simple, though.  I'll put this issue in the queue for consideration.

@ianlancetaylor

I'm OK with backporting https://golang.org/cl/88955 to 1.10.  I'll send a CL.


window.openFilesInNewWindow: ignore workspaces

Current behavior: with window.openFilesInNewWindow set to off, if I open a file from outside the app, and the only VSCode window I have open is a workspace (or if that was the last active window), that file will open in the workspace window, regardless of whether the workspace includes that file's location.
Desired behavior: if the last/only VSCode window is a workspace, and I open a file that doesn't belong to that workspace, the file opens in the last active non-workspace window (or a new window).

Some previous issues that are similar:
#60663
#34143
#28429
#26216

This feature request is now a candidate for our backlog. The community has 60 days to upvote the issue. If it receives 20 upvotes we will move it to our backlog. If not, we will close it. To learn more about how we handle feature requests, please see our documentation.
Happy Coding!

This feature request has not yet received the 20 community upvotes it takes to make to our backlog. 10 days to go. To learn more about how we handle feature requests, please see our documentation.
Happy Coding!

:slightly_frowning_face: In the last 60 days, this feature request has received less than 20 community upvotes and we closed it. Still a big Thank You to you for taking the time to create this issue! To learn more about how we handle feature requests, please see our documentation.
Happy Coding!


[Event Request] table 5405 "Production Order": CreateDim

Object: table 5405 "Production Order"
Function: CreateDim
Integration Event:
OnBeforeCreateDim(Rec, IsHandled);
local procedure OnBeforeCreateDim(var ProductionOrder: Record "Production Order"; var IsHandled: Boolean)

Thanks for reporting this. We agree, and we’ll publish a fix asap, either in an update for the current version or in the next major release. Please do not reply to this, as we do not monitor closed issues. If you have follow-up questions or requests, please create a new issue where you reference this one.


Keeping track of applied changes

Hi @kimrutherford,
As we said today, let me know when you apply the changes from the files in the repo, and from which files, to copy those to a changelog.
We should probably think of a systematic way of keeping track of that. Maybe the script you use could print the rows that were used to apply changes to a separate file, and we append that at the top of an existing file in the repo? We should probably include a date as well. It could be then a file that looks identical to the changes file, but with an extra column with the date.
I did something in these lines with the svn modification data that I applied to the svn repo, although it does not have a date (I could add it):
https://github.com/pombase/allele_qc/blob/master/change_log/fixes_applied_external_data.tsv

Related to https://github.com/pombase/canto/issues/2689


util: Add more typing

This should be sufficient to allow mypy --check-untyped-defs to run.

Codecov Report
Base: 77.45% // Head: 76.66% // Decreases project coverage by -0.78% :warning:

Coverage data is based on head (01410c8) compared to base (69bf10d).
Patch coverage: 55.55% of modified lines in pull request are covered.

:exclamation: Current head 01410c8 differs from pull request most recent head 4ebef27. Consider uploading reports for the commit 4ebef27 to get more accurate results

Additional details and impacted files
@@            Coverage Diff             @@
##           master     #125      +/-   ##
==========================================
- Coverage   77.45%   76.66%   -0.79%
==========================================
  Files          16       16
  Lines        4058     4063       +5
  Branches      947      949       +2
==========================================
- Hits         3143     3115      -28
- Misses        690      720      +30
- Partials      225      228       +3

Impacted Files
Coverage Δ

myhoard/util.py
88.74% <55.55%> (-0.92%)
:arrow_down:

myhoard/restore_coordinator.py
75.90% <0.00%> (-3.13%)
:arrow_down:

myhoard/basebackup_operation.py
90.61% <0.00%> (-2.05%)
:arrow_down:

myhoard/controller.py
79.78% <0.00%> (+0.09%)
:arrow_up:

Help us with your feedback. Take ten seconds to tell us how you rate us. Have a feature suggestion? Share it here.

:umbrella: View full report at Codecov.
:loudspeaker: Do you have feedback about the report comment? Let us know in this issue.


Reg:File Transfer plugin issue

I am tried file transfer using file transfer plugin but after i installed type definition for file transfer its showing some error like "cannot find name FileEntry".Attached screen shot.

Any help Will be appreciated.

My ionic info:
Cordova CLI: 6.3.0
Ionic Framework Version: 2.0.0-beta.11
Ionic CLI Version: 2.0.0-beta.37
Ionic App Lib Version: 2.0.0-beta.20
OS: Windows 8.1
Node Version: v6.2.2


AssertsChexifyTest.test_uninspected_checks test failure

I'm seeing the following test failure when running the test suite:
============================= test session starts ==============================
platform linux -- Python 3.10.7, pytest-7.1.3, pluggy-1.0.0
rootdir: /build/source
collected 548 items

chex/chex_test.py .                                                      [  0%]
chex/_src/asserts_chexify_test.py ......F.....                           [  2%]
chex/_src/asserts_internal_test.py .s.s.........                         [  4%]
chex/_src/asserts_test.py ..s.s.s.s.s.s.s.s.s.s.s.s.s.s.s.s.s.s.s.s.s.s. [ 13%]
s.s.s.s.s.s.s.s.s.s.s.s.s.s.s.s.s.s.s.s.s.s.s.s.s.s..................... [ 26%]
........................................................................ [ 39%]
........................................................................ [ 52%]
.................................                                        [ 58%]
chex/_src/dataclass_test.py ...........................................  [ 66%]
chex/_src/dimensions_test.py .................                           [ 69%]
chex/_src/fake_set_n_cpu_devices_test.py s                               [ 69%]
chex/_src/fake_test.py ................................                  [ 75%]
chex/_src/restrict_backends_test.py ssssssssss                           [ 77%]
chex/_src/variants_test.py .....................s....s............s....s [ 85%]
..........................................................ssssssssssssss [ 98%]
sssssss                                                                  [100%]

=================================== FAILURES ===================================
__________________ AssertsChexifyTest.test_uninspected_checks __________________

self = <chex._src.asserts_chexify_test.AssertsChexifyTest testMethod=test_uninspected_checks>

    def test_uninspected_checks(self):

      @jax.jit
      def _pos_sum(x):
        chex_value_assert_positive(x, custom_message='err_label')
        return x.sum()

      invalid_x = -jnp.ones(3)
      chexify_async(_pos_sum)(invalid_x)  # async error

>     with self.assertRaisesRegex(AssertionError, 'err_label'):
E     AssertionError: AssertionError not raised

chex/_src/asserts_chexify_test.py:179: AssertionError
------------------------------ Captured log call -------------------------------
WARNING  absl:asserts_chexify.py:57 [Chex] Some of chexify assetion statuses were not inspected due to async exec (https://jax.readthedocs.io/en/latest/async_dispatch.html). Consider calling `chex.block_until_chexify_assertions_complete()` at the end of computations that rely on jitted chex assetions.
=============================== warnings summary ===============================
chex/_src/asserts_chexify_test.py: 12 warnings
  /build/source/chex/_src/asserts_chexify_test.py:58: FutureWarning: jax.tree_leaves is deprecated, and will be removed in a future release. Use jax.tree_util.tree_leaves instead.
    return jnp.all(jnp.array([(x > 0).all() for x in jax.tree_leaves(tree)]))

chex/_src/asserts_chexify_test.py::AssertsChexifyTest::test_static_assertion__with_jit
chex/_src/asserts_chexify_test.py::AssertsChexifyTest::test_static_assertion__without_jit
  /build/source/chex/_src/asserts_chexify_test.py:86: FutureWarning: jax.tree_leaves is deprecated, and will be removed in a future release. Use jax.tree_util.tree_leaves instead.
    return sum(x.sum() for x in jax.tree_leaves(tree))

chex/_src/asserts_chexify_test.py::AssertsChexifyTest::test_uninspected_checks
  /nix/store/4y9j6xdkgqwkdx5ki508l175smcjgs9l-python3.10-pytest-7.1.3/lib/python3.10/site-packages/_pytest/unraisableexception.py:78: PytestUnraisableExceptionWarning: Exception ignored in atexit callback: <function _check_if_hanging_assertions at 0x7ffddfe66d40>

  Traceback (most recent call last):
    File "/build/source/chex/_src/asserts_chexify.py", line 32, in _check_error
      checkify.check_error(err)
    File "/nix/store/2fcsbc07baqm4mfmibzr1qlh8bfvb6mc-python3.10-jax-0.3.23/lib/python3.10/site-packages/jax/_src/checkify.py", line 476, in check_error
      return assert_p.bind(err, code, payload, msgs=error.msgs)
    File "/nix/store/2fcsbc07baqm4mfmibzr1qlh8bfvb6mc-python3.10-jax-0.3.23/lib/python3.10/site-packages/jax/core.py", line 328, in bind
      return self.bind_with_trace(find_top_trace(args), args, params)
    File "/nix/store/2fcsbc07baqm4mfmibzr1qlh8bfvb6mc-python3.10-jax-0.3.23/lib/python3.10/site-packages/jax/core.py", line 331, in bind_with_trace
      out = trace.process_primitive(self, map(trace.full_raise, args), params)
    File "/nix/store/2fcsbc07baqm4mfmibzr1qlh8bfvb6mc-python3.10-jax-0.3.23/lib/python3.10/site-packages/jax/core.py", line 698, in process_primitive
      return primitive.impl(*tracers, **params)
    File "/nix/store/2fcsbc07baqm4mfmibzr1qlh8bfvb6mc-python3.10-jax-0.3.23/lib/python3.10/site-packages/jax/_src/checkify.py", line 483, in assert_impl
      raise_error(Error(err, code, msgs, payload))
    File "/nix/store/2fcsbc07baqm4mfmibzr1qlh8bfvb6mc-python3.10-jax-0.3.23/lib/python3.10/site-packages/jax/_src/checkify.py", line 123, in raise_error
      raise ValueError(err)
  ValueError: [Chex] chexify assertion failed [err_label] [failed at /build/source/chex/_src/asserts_chexify_test.py:173] (check failed at /build/source/chex/_src/asserts_internal.py:229 (_chex_assert_fn))

  During handling of the above exception, another exception occurred:

  Traceback (most recent call last):
    File "/build/source/chex/_src/asserts_chexify.py", line 62, in _check_if_hanging_assertions
      block_until_chexify_assertions_complete()
    File "/build/source/chex/_src/asserts_chexify.py", line 51, in block_until_chexify_assertions_complete
      wait_fn()
    File "/build/source/chex/_src/asserts_chexify.py", line 180, in _wait_checks
      _check_error(async_check_futures.popleft().result(async_timeout))
    File "/build/source/chex/_src/asserts_chexify.py", line 40, in _check_error
      raise AssertionError(msg)  # pylint:disable=raise-missing-from
  AssertionError: [Chex] chexify assertion failed [err_label] [failed at /build/source/chex/_src/asserts_chexify_test.py:173]

    warnings.warn(pytest.PytestUnraisableExceptionWarning(msg))

chex/_src/asserts_chexify_test.py::AssertsChexifyTestSuite::test_log_abs_fn_jitted
chex/_src/asserts_chexify_test.py::AssertsChexifyTestSuite::test_log_abs_fn_jitted
chex/_src/asserts_chexify_test.py::AssertsChexifyTestSuite::test_log_abs_fn_jitted
chex/_src/asserts_chexify_test.py::AssertsChexifyTestSuite::test_log_abs_fn_jitted_vmapped
chex/_src/asserts_chexify_test.py::AssertsChexifyTestSuite::test_log_abs_fn_jitted_vmapped
  /build/source/chex/_src/asserts_chexify_test.py:52: FutureWarning: jax.tree_leaves is deprecated, and will be removed in a future release. Use jax.tree_util.tree_leaves instead.
    if not all((x > 0).all() for x in jax.tree_leaves(tree)):

-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html
=========================== short test summary info ============================
FAILED chex/_src/asserts_chexify_test.py::AssertsChexifyTest::test_uninspected_checks
====== 1 failed, 461 passed, 86 skipped, 20 warnings in 84.47s (0:01:24) =======
error: builder for '/nix/store/f9icjsb9pbz4p8qpsyhp9gq1fvjvwwhz-python3.10-chex-0.1.5.drv' failed with exit code 1;
       last 10 log lines:
       > chex/_src/asserts_chexify_test.py::AssertsChexifyTestSuite::test_log_abs_fn_jitted
       > chex/_src/asserts_chexify_test.py::AssertsChexifyTestSuite::test_log_abs_fn_jitted_vmapped
       > chex/_src/asserts_chexify_test.py::AssertsChexifyTestSuite::test_log_abs_fn_jitted_vmapped
       >   /build/source/chex/_src/asserts_chexify_test.py:52: FutureWarning: jax.tree_leaves is deprecated, and will be removed in a future release. Use jax.tree_util.tree_leaves instead.
       >     if not all((x > 0).all() for x in jax.tree_leaves(tree)):
       >
       > -- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html
       > =========================== short test summary info ============================
       > FAILED chex/_src/asserts_chexify_test.py::AssertsChexifyTest::test_uninspected_checks
       > ====== 1 failed, 461 passed, 86 skipped, 20 warnings in 84.47s (0:01:24) =======

I'm using

jax v0.3.23
jaxlib v0.3.22
absl-py v1.2.0
dm-tree from commit https://github.com/deepmind/tree/commit/b452e5c2743e7489b4ba7f16ecd51c516d7cd8e3
numpy 1.23.3
toolz 0.12.0

just tested against dm-tree 0.1.7 but still seeing the same error

Hey @samuela, thanks for flagging! It should be fixed now.


add SwiftFortuneWheel

Project URL

https://github.com/sh-khashimov/SwiftFortuneWheel
Category

UI
Description

A cross-platform circular UIControl with rich customization. A useful framework for games like a spinning wheel.
Why it should be included to awesome-ios (mandatory)
Creating a circular UI is no easy task, especially with CoreGraphics.
Checklist

[x] Has 50 GitHub stargazers or more
[x] Only one project/change is in this pull request
[x] Isn't an archived project
[x] Has more than one contributor
[ ] Has unit tests, integration tests or UI tests
[x] Addition in chronological order (bottom of category)
[x] Supports iOS 9 / tvOS 10 or later
[x] Supports Swift 4 or later
[x] Has a commit from less than 2 years ago
[x] Has a clear README in English

@sh-khashimov We cannot merge your PR yet until you fill all of the contribution guideline requirements. Feel free to open PR once it is ready.
Please check our CONTRIBUTION GUIDELINES


Example project

Do you have an example project that uses this?

https://github.com/stevenvachon/broken-link-checker/blob/master/lib/cli.js

Thanks So much!


chore: poc of data ingestion

Linked issue(s):
What change does this PR introduce and why?
Please check if the PR fulfills these requirements

[ ] Include reference to internal ticket and/or GitHub issue "Fixes #NNNN" (if applicable)
[ ] Relevant tests for the changes have been added
[ ] Relevant docs have been added / updated

@yifanwu-kolena what's a good example usage for this script -- I'd like to try it out locally.

@munkyshi based on our syncing this morning, we will develop the coco ingestion all in galleon side, which will speed up the iteration without waiting release of kolena or worrying about any potential interface changes.
the next step will be solidify the backend endpoint and connects with FE. we will work on handing crowd and adding additional bbox attribute later after the whole flow is setup.
and will move all of the logic back to this repo when the data ingestion pattern is stable.

Can this be closed?


Getting indexes of selected items

I am new to using ReoGrid so this might be a very simple question. I would like to know if it is possible to get selected indexes and store this as a list. If possible how is this done?. I am attaching this screenshot to show my items.

Thanks.

You can store them in a list of RangePosition. You can use worksheet's SelectionRangeChanged event to fire the action.

Also the CellDataChanged event will returns the index of row and index of column.
The event will be fired when you changed the status of checkboxes.


Add alternate stylesheet feature.

I didn't find the alternate stylesheet feature on CanIUse so I decided to add it myself.
I filled out all the browsers I know about, plus some links to references. Browsers I don't know about I marked with u. Chrome does not support this feature but from what I've gathered the feature can be supported using a plugin. There doesn't seem to be a letter for that, so I just set it to n and mentioned the extension in the links.
I've set shown to false, because I don't know how many browsers we need to get a status on before it can be published on the site. However, may be a safe bet to assume only Firefox on desktop supports this out of the box.

Old Opera (<14) used to support this, and according to this page Internet Explorer supported this in 2001.

Added a commit to show that Opera <14 and Internet Explorer >=8 support this as well. Edge, however, really does not support this.

Thanks!


update vendor for k8s

update vendor/ for k8s.io/... to release-1.9

https://github.com/kubernetes/kubernetes/tree/release-1.9
https://github.com/k8s.io/api/tree/release-1.9
https://github.com/k8s.io/apimachinery/tree/release-1.9
https://github.com/k8s.io/client-go/tree/release-6.0

this looks like a duplicate of https://github.com/prometheus/prometheus/pull/3895 which is being tested by @FUSAKLA


ninja can spawn earlier, 1h reoccurence

About the PR
so far ive only seen ninja in 3 rounds:

a 2h round with 1 flukinja and 1 ninja that spawned as evac docked to centcom
another round i dont remember
just now ninja spawned 20s before evac
this lets them spawn 30m in which should make it more common for lizard

Why / Balance
ghosts want something to do + very rare
also i learned that reoccurence is a thing so why not
Technical details
no
Media
video of me waiting 43 mins 11 seconds for ninja spawn too big to upload sorry

[X] I have added screenshots/videos to this PR showcasing its changes ingame, or this PR does not require an ingame showcase

Breaking changes
no
Changelog
:cl:

tweak: Ninjas can spawn from 30 mins in, instead of 45.

that will be SO BAD for Salamander... fricking hell

one ninja on sala is already bad enough because they go on a rampage

with 60 min reoccurence it will at least force a no double ninja period

Increase the min player count from 15 to something a lot higher would save the lowpop servers as well as salamander, theres typically only one secoff per 10 players if I had to estimate


push should have method that takes in Installation

Current push methods take in two forms:

register(token)
register(token, templates)

We need an additional:

register(Installation)

that reflects https://msdn.microsoft.com/en-us/library/azure/microsoft.azure.notificationhubs.notificationhubclient.createorupdateinstallation.aspx.
There's no way for customers to pass tags in from the client side currently, hence they won't be able to take advantage of the app service push endpoint tags feature.
Chat with me when this is started. I'm trying to convince NH to release an Installation object PCL for convenience.

Hi there, please look at this section of the ReadMe that highlights the future of Azure Mobile Apps. At this time, we are not adding any new features in the SDK. Thanks!


reva failed due to next cloud configuration.

I installed reva on my machine but when I run reva command inside /cmd/revad folder but I am getting this error:

http service dataprovider could not be started,: Please specify 'endpoint' in '[grpc.services.storageprovider.drivers.nextcloud]

but I have this endpoint property in my /etc/revad/revad.toml :
[grpc.services.storageprovider.drivers.nextcloud]
endpoint = "http://localhost:8002/index.php/apps/sciencemesh/"
user_layout = "{{.Username}}"

Might be related to #2782 - I will dive into it next week!

Testing this out with the image from https://github.com/cs3org/ocm-test-suite/tree/main/servers/revad
and then docker run -it revad /bin/bash
Inside the container:
cd /reva/
git pull
apt install -y golang
make deps
make build-revad
./cmd/revad/revad -c ./examples/nextcloud-integration/

I was able to replicate the error:
"http service dataprovider could not be started,: Please specify 'endpoint' in '[grpc.services.storageprovider.drivers.nextcloud]'"

Fixed / obsoleted


Performance Tracking

@Shnatsel I'm moving performance tracking for crabz related things to here.
Run the same benchmarks as found here: https://github.com/zlib-ng/pigzbench with the different backends.
The zlib-ng benchmarks pretty clearly indicate that zlib-ng is the way to go as a backend, which matches what I see in benchmarks. zlib and the rust backends for flate2 perform about the same.

Yes! Definitely worth updating. I'm tweaking some things in gzp to make the api nicer in cases where num_threads is 0. Basically wrapping flate2 types under one trait so that it's transparent. After that is on the nicer side I'll rerun and update.
I also want to add an MVP of decompression as well. With that in place crabz in nominally usable even it doesn't have all the nobs that pigz has just yet.

Preview: using passthrough single threaded mode when 0 or 1 threads is selected (just like pigz):
❯ hyperfine './target/release/crabz -c 3 -p 1 < ../gzp/bench-data/shakespeare.txt' 'pigz -3 -p 1 < ../gzp/bench-data/shakespeare.txt' --runs 3
Benchmark #1: ./target/release/crabz -c 3 -p 1 < ../gzp/bench-data/shakespeare.txt
  Time (mean ± σ):      6.698 s ±  0.127 s    [User: 6.623 s, System: 0.073 s]
  Range (min … max):    6.557 s …  6.802 s    3 runs

Benchmark #2: pigz -3 -p 1 < ../gzp/bench-data/shakespeare.txt
  Time (mean ± σ):     11.481 s ±  0.091 s    [User: 11.379 s, System: 0.099 s]
  Range (min … max):   11.381 s … 11.561 s    3 runs

Summary
  './target/release/crabz -c 3 -p 1 < ../gzp/bench-data/shakespeare.txt' ran
    1.71 ± 0.04 times faster than 'pigz -3 -p 1 < ../gzp/bench-data/shakespeare.txt'

On the feature/sync_mode branch

README updated with exhaustive benchmarks comparing different backends as well as a summary of the findings. The surprise to me is that the rust backend is a tad faster than zlib.

bgzip can decompress in parallel a bgzipped file. Not sure I caught in the benchmarks or not.

It can, and I have benchmarked it. Crabz and bgzip have nearly identical performance. I didn't include anything other than pigz just because I don't intended for this to become a comprehensive benchmark suite.
In the benchmarks script you can see how to run with bgzip.
If you have ideas on how to present all the benchmark info in a tidy way that includes bgzip I'm open to PRs :)

Hmmm. Not sure I am much help on the PRs, just thinking about performance things. So if I understand you correctly, crabz can replace bgzip? If that were true, then this would potentially be a lot easier than installing htslib for some users. Maybe I am misunderstanding.

There is also https://github.com/Piezoid/pugz , but it really does not seem to work well in my hands.

Correct! For just compressing / decompressing bgzf format files crabz could replace bgzip, however bgzip does bring all the extras along for generating an index etc (which I would like to add to crabz)...
I guess maybe adding a benchmarks/ folder against other common tools would be useful and not blow up the README. I'll see about adding something like that.
pugz has also never worked well for me and has some serisous limitations like only supporting a subset of ascii characters: https://github.com/Piezoid/pugz#roadmaptodos

@jelber2 I finally added some! https://github.com/sstadick/crabz#crabz-pigz-and-bgzip
Also for what it's worth I ended up trying a bit harder to get pugz to work: https://twitter.com/ducktapeprogra1/status/1443723380436385792?s=20 tl;dr; it's not useful in its current state for bioinformatics mostly because it doesn't support bgzf formats.

Note that some of the original benchmarks for the different backends are a bit out of date at this point and crabz has gotten faster across the board, but the general trend with the different backends has remained the same (i.e. use a format that uses libdefalte if possible).


Add missing 'on the right' to exit instructions.

Fixes consistency so we're announcing on the right for all instructions. The more verbose alternative to https://github.com/Project-OSRM/osrm-text-instructions/pull/124.

I still think this is too verbose and we clutter 99% of cases, to cover a 1% case. My ideal design as mentioned in https://github.com/Project-OSRM/osrm-text-instructions/pull/116#discussion_r126152262:

remove the direction (on the left/right) from instructions, except when we have no way/destination/exit at all: Take the ramp on the right.

This is because I'd prefer this project to err on the side of being as concise as possible, since an annoying, too-verbose nav to me is worse than a too-concise nav (where the user can still look at the screen if I'm unsure). I understand though that this my own opinion and there may be no objective wrong or right.
Ideally we would eventually solve this by knowing the driving-side of the current country (upstream https://github.com/Project-OSRM/osrm-backend/issues/2772) and emit the direction only on divergence of the country norm.

From a code side, this looks okay. Changelog entry is missing.

I still think this is too verbose and we clutter 99% of cases, to cover a 1% case.

Concision is good in general, but not at the expense of omitting information potentially relevant to safe driving. I agree that left-hand exits are a minority case (in right-handed countries), but that’s precisely why it’s so important that we inform the user of a left-hand exit. Ambiguity is only part of the problem; a wrong-sided exit requires a lot of additional time to get into the correct lane, because it branches from the fastest lane rather than the slowest.
As a thought experiment, let’s suppose we gain the ability to tell whether the left-hand exit is an anomaly, but a particular instruction needs to be abridged to fit in the allotted time (mapbox/mapbox-navigation-ios#331). In that case, it might be better to omit the exit number or destination (assuming there’s a ref) than to omit the fact that the exit is on the wrong side.


BUG: wec tab-completes to current WORKON_HOME instead of CONDA_HOME

wec == workon_conda

https://github.com/westurner/dotfiles/commit/82935c12447463467e3d87498de1b1bc1fd02559


Buff MovieClip: Added support for timed frames

Examle:
var animation = new MovieClip([
    { texture: Texture(...), time: 100 },    // show 100 ms
    { texture: Texture(...), time: 0 },      // skip frame
    { texture: Texture(...), time: 500 }     // show 500 ms
]);

console.log(animation.animatinSpeed);        // --> 1
animation.animationSpeed = 2;                // play animation twice as fast

Like last time feedback is welcome ;)
regards

:+1:

Thanks for you patience dude ;)

Of course!


Trailing comments following a namespace export declaration are stripped during formatting

Describe the bug
Deno version: 1.16.2
https://dprint.dev/playground/#code/PQKhCgAIUgBAXAlvANgU0gETQBzQOwBMCBjAT0gFsBDfagczUoPihlkMQDMvESBXFPAoAjNPUT58aAE5s48BgGdIJFIgA0kYjhQB7Mm2DhwoGADFE6AFyQAdMB1K78FSGOngkACoALDNj4epBoJHpKZErwTJC+1CrUqnr4AG4siMmQ8MEyaAC0aAAeOHoy8JDUKCiQuZR60dq4BMT4JIhoKlwyepSeFY04zq6QvOgV5fD+NXr1kHpcWVO5JXY+vogqANZouCq19Rg6zaTtSn2l9LSIAF5ohFq0hJCS-UqS9GO61CRoduBFJTK0AqKl88HgOBG3UokAARGCIUprMBHAQ9HYUI9gFFCLAAAx2ACMhIALHY8cAEThgHVCC4lLCANz-YqlcoweKQHDUSZQnpwqlIlEtdGYojY+C4gnEskU7mTGl6OmuJkmMyQSw2ew06iSenQDwoyAAeUmshGVg6qloz0ogIm63w9E60IGQ2c4CAA/language/typescript

Seems specific to export declarations. Maybe related to the feature that re-orders these (but doesn't occur with import decls for some reason).

Opened https://github.com/swc-project/swc/pull/2813

This was fixed a while ago.


feat: LayerNormalization

up

This PR was closed because it has been stalled for 10 days with no activity.

This is the most infuriating bot. Fills me with rage

update PR: #165


Improve bettertransformer benchmark script

We split the original model and bettertransformer benchmarks in two steps to avoid OOM issues.

The docs for this PR live here. All of your documentation changes will be reflected on that endpoint.


I can't place a Workflow node

Describe the bug
I can't place a FlowChain workflow node in my workflow, either through the node search menu, nor through the "Add node" submenu.
To Reproduce
Steps to reproduce the behavior:

Create a new fresh empty workflow
double-click to open node search, find flowchain workflow node, select it
...
nothing happens. No node placed, no error message, the node search menu collapses.

Expected behavior
A workflow node should be placed in my new workflow, and allow me to select workflows I saved in the api folder.
Desktop (please complete the following information):

OS: Mac OS 15.0.2
Browser Safari
Python 3.12.7

if you have a sample workflow JSON using the flowchain workflow node, share it and I'll load it and see if the node fails to load that way...

Ah actually, I thought to look in the browser console, and found this:
[Error] TypeError: undefined is not an object (evaluating 'Object.keys(app.lipsync_studio)')
keys
(anonymous function) — jsnodes.js:627
createNode — litegraph.es.js:2818
(anonymous function) — use_everywhere.js:280
addNodeOnGraph — app.ts:2968
(anonymous function) — NodeSearchBoxPopover.vue:81
callWithErrorHandling — runtime-core.esm-bundler.js:195
callWithAsyncErrorHandling — runtime-core.esm-bundler.js:202
emit — runtime-core.esm-bundler.js:726
callWithErrorHandling — runtime-core.esm-bundler.js:195
callWithAsyncErrorHandling — runtime-core.esm-bundler.js:202
emit — runtime-core.esm-bundler.js:726
onOptionSelect — index.mjs:521
callWithErrorHandling — runtime-core.esm-bundler.js:195
callWithAsyncErrorHandling — runtime-core.esm-bundler.js:202
(anonymous function) — runtime-dom.esm-bundler.js:693

	logError (index-DGAbdBYF.js:3325)
	handleError (index-DGAbdBYF.js:3306)
	callWithErrorHandling (index-DGAbdBYF.js:3249)
	callWithAsyncErrorHandling (index-DGAbdBYF.js:3255)
	emit (index-DGAbdBYF.js:3810)
	callWithErrorHandling (index-DGAbdBYF.js:3247)
	callWithAsyncErrorHandling (index-DGAbdBYF.js:3255)
	emit (index-DGAbdBYF.js:3810)
	onOptionSelect (GraphView-CVV2XJjS.js:1621)
	callWithErrorHandling (index-DGAbdBYF.js:3247)
	callWithAsyncErrorHandling (index-DGAbdBYF.js:3255)
	(anonymous function) (index-DGAbdBYF.js:12087)

Hi sorry about that,
Yes, I made a recent change. If you haven't done so, please update FlowChain. Don't worry about the variable name "lipsync_studio" — it's not very intuitive, but it actually contains the list of workflows. There's no need to be concerned about it.
Could you let me know if it's working now?

Seems to be working now on HEAD


accepting non 1-D data in pre_edge(), find_e0(), autobk(), possibly more functions

several functions that expect 1D arrays don't gracefully handle arrays with "single dimension axes", that is arrays that should be shaped (500,) but are taken from slices of multi-dimensional data, and so shaped as (500,1), or (1, 500), and so on.
We can simply apply ndarray.squeeze() to fix the issue.  The real question is how often this is needed....
Related wild idea:  support pandas dataframes as larch Groups.

partially addressed with 1eaa4bed170e2a83ac956c1f49df1dd95ee06f85


after install and run the js-to-ts getting command not found

I did install
$ npm install javascript-to-typescript
then i went to the root folder and type below command . noting works
user1 $ js-to-ts
-bash: js-to-ts: command not found
tell me how to set "js-to-ts" bash command.

Same here.
In archlinux and windows 10

Unfortunately it is not working anymore out-of-the-box on windows 10 after having installed in Git-Bash with "npm i javascript-to-typescript -D" (with -D for installing as dev-dependencies). Would have been a cool migrating feature.

is there any update on this issue? as of 5/8/18

I followed the documentation is not working and i have some question to ask.
is it possible to convert javascript  to typescript ?
if it is possible means how ?


fix: Bump irsa example dependencies to versions which work with TF 1.4

PR o'clock
Description
Bump irsa example deps to versions which work with Terraform 1.4
Checklist

[ ] CI tests are passing
[ ] README.md has been updated after any changes to variables and outputs. See https://github.com/terraform-aws-modules/terraform-aws-eks/#doc-generation

In description you have non valid version, I believe you want point terraform 0.14

In description you have non valid version, I believe you want point terraform 0.14


Not working with Source tree - OSX

git -c diff.mnemonicprefix=false -c core.quotepath=false -c credential.helper=sourcetree commit -q -F /var/folders/ww/ywcnmg254pldttlkx492k28m0000gn/T/SourceTreeTemp.RyTpl5
env: node: No such file or directory
Completed with errors, see above

Fixed on version 0.1.17
Verified on OSX El-Capitan v10.11.13


More base R functions to add

[x] curve
[x] rect
[x]  symbols
[x] polygon

Definitely more down the road, but I think these look straightforward.
See here:
https://svn.r-project.org/R/trunk/src/library/graphics/R/

:+1:


ERROR: cURL error 7: Failed to connect to player.vimeo.com port 443: Operation timed out

ERROR: cURL error 7: Failed to connect to player.vimeo.com port 443: Operation timed out
Hi, I got this problem, Could you tell me the reason?

@Germey 'player.vimeo.com' is blocked by the GFW.

@peinhu No, I have opened shadowsocks of global mode. And I can visit 'vimeo.com' normally.

@Germey You need VPN, I have had the same problem, but when I use the code on my VPS in other country, it works as normal, so it's the GFW‘s fault.

@Germey  You can modify this file App/Http/Resolver.php  function getRedirectUrl, And add proxy config, This is my codes, and it worked well for me:
    private function getRedirectUrl($url)
    {
        $response = $this->client->get($url, [
            'cookies'         => $this->cookie,
            'allow_redirects' => FALSE,
            'verify' => false,
            'proxy' => [
                'http' => 'tcp://<IP_ADDRESS>:1080',
                'https' => 'tcp://<IP_ADDRESS>:1080'
            ]
        ]);

        return $response->getHeader('Location');
    }

@troubleman Wow! It works! Thank you!


chore: Generate apps from development branch

Fixes #536

Modify update-apk.sh to accomodate DEPLOY_BRANCH and PUBLISH_BRANCH

@mejariamol @niranjan94 Please review

@niranjan94 Travis builds are happening but status reporting seems to be stuck. Can you please check it?

@mejariamol @niranjan94 Please review


Continous fragment mode timout fix

Marie Kondo

Codecov Report

Merging #131 (50e8189) into foxy (0bf0042) will not change coverage.
The diff coverage is 100.00%.

@@           Coverage Diff           @@
##             foxy     #131   +/-   ##
=======================================
  Coverage   48.01%   48.01%
=======================================
  Files          39       39
  Lines        1487     1487
  Branches      303      303
=======================================
  Hits          714      714
  Misses        567      567
  Partials      206      206

Impacted Files
Coverage Δ

rmw_microxrcedds_c/src/rmw_publish.c
46.34% <100.00%> (ø)

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update 0bf0042...50e8189. Read the comment docs.


Add Ubuntu Focal production support

We'd like to support Ubuntu Focal in production as soon after its official release as we can.
Here's an abbreviated TODO list:

[x] Support Ubuntu Focal in development
[x] Run Ubuntu Focal in CI (blocked on #14278).
[ ] Document support for Focal in development
[ ] Fix puppet issues with Ubuntu Focal (some work in #14571)
[ ] Test Ubuntu Focal in production
[ ] Document support for Focal in production
[ ] Test upgrade from Bionic to Focal and document.

Closing as resolved, though @arpit551 @alexmv have we confirmed we've tested the Bionic => Focal upgrade process?

I did test the Bionic -> Focal upgrade as currently doc'd, yup.


Type Invariance

Would it be possible for Crystal to enforce the Liskov Substitution principle by making sub-types which override their super-type Invariant to their super-type? This wouldn't apply to overloads or abstract methods. This would only apply to subtypes which override a defined field or a defined method.
The Liskov Substitution Principle is extremely important for software development. Especially in large projects. I believe that this would make Crystal the ideal OOP language.
I can see this being implemented in a number of ways:

Disallow overrides of non-abstract methods and overrides of defined fields. This would require that developers have to explicitly define the Composition of the two types without using the sub-types relationship.

Allow overrides, but break the sub-type relationship. Rather, duplicate the super-type and override its methods. The duplicate and the original super-type should be Invariant.

I recognize that this feature would be difficult to implement, but it would be an extremely useful feature to have. Additionally, by implementing the second solution, you would also be solving the second problem of Composition: namely that Composed types have to wrap re-used methods. With this solution, the duplicate type will duplicate methods and fields so the developer only has to write the overriden methods when using Composition.
There's probably another better solution, but these were two naive solutions that came to mind.
WDYT?

Wouldn't this just be a design pattern that the individual programmers would follow? I never follow LSP, so if crystal enforced it, this would make using crystal a lot harder for me. Any framework that currently violates the pattern would possibly need re-architecting. That's a big "if" because I don't know if any of them do or not; however, if they do, then that throws a huge wrench in to the progress of crystal.

Hello,
I modified some instances of the firstNonWhite variable, as it could possible have a racist undertone. "First non white person of whom?"
Also changed it to be more expressive for what that variable is actually doing (and less oppressive).
Since @mverzilli thinks it's okay to close my PR without any justification. You will get spammed. Enjoy!

Enforcing this for all Crystal users doesn't seem like something that would be appreciated in the community.
The design pattern can be used without compiler support. It should even be possible to support some kind of enforcement using the macro language in user code (maybe a shard idea?).
I don't think there is anything actionable here.


add IR Sequencer

I have a question about the install node in this file. i am not sure i did it right.

To follow some semblance of naming scheme for IR mods would it be ok with you to change the identifier to InfernalRobotics-Sequencer?
The supplied install stanza will install to the path GameData/MagicSmokeIndustries/MagicSmokeIndustries/ so you're correct in asking about it :)
The ending comma on line 15 isn't needed and is the reason the bot fails the build.
A better install stanza would probably be
"install" : [ { "find" : "IRSequencer",
"install_to" : "GameData/MagicSmokeIndustries" } ]

This will make CKAN able to find the folder even if you happen to release a .zip somewhere down the line with a slightly altered folderstructure, it will search for the topmost folder named IRSequencer. To use the "find" keyword in the install section you need to change spec_version to "v1.4" though. If you want to use "file" though the correct change is to have "install_to" : "GameData"
From the .zip file it would appear that ModuleManager is a dependency for this mod (seeing as it's bundled) but this is not reflected in the .netkan file.

@Dazpoet I just squashed the fixes and my first commit into a new commit. Is it ok that it failed the build?

Taking another look now after some sleep and you are missing the $kref field which tell us where to get stuff. Also you need to but citations around your spec_version, there being none around the 1 is a special case.