Enforce Certificate Renewal

Do you want to request a feature or report a bug?
Feature
What did you expect to see?
Let's Encrypt send me an email that our certificates which were checked with a CAA record will be revoked tomorrow because of a bug in the implementation.
See https://community.letsencrypt.org/t/2020-02-29-caa-rechecking-bug/114591 for more details.
Because of that, I have to enforce a renewal of all certificates before the certificates will be revoked. What is the best way for doing this?
In my opinion the best way is to delete the corresponding certificates from the file acme.json and than trigger a re-deployment of the containers. In my case the Docker Swarm mode is in use. Am I wrong? A CLI command to force renewal would help.
EDIT: After removing the corresponding certificates, a restart of Traefik is the easier way.

https://github.com/containous/traefik/issues/3652

Hello,
We are trying to find a solution, stay tune.

We created a small lego to clean acme.json file:

https://github.com/containous/acme-fixer/releases
https://hub.docker.com/r/containous/acme-fixer

You have to clean acme.json file with the tool and restart the Traefik.

would removing the certificates only (but not private key) from acme.json work?

For docker users:
docker run -v $PWD/acme.json:/acme.json containous/acme-fixer:v0.1.0 -i /acme.json -d

@ldez please provide some info what the tool actually does: does "cleaning" mean the tool will delete affected certs only or will it renew the cert in question as well?

Specifically I'd like to know if it cleans the private key as some stuff is pinned to that for me.

It will drop the affected certifications out of the acme.json, that after a Traefik restart that certificates is going to be renewed immediately

I recommend to mount a directory instead of file because we create a backup of the acme.json.
# dry run mode
docker run -v $PWD/letsencrypt:/letsencrypt/ containous/acme-fixer:v0.1.0 -i /letsencrypt/acme.json -d

# without dry run
docker run -v $PWD/letsencrypt:/letsencrypt/ containous/acme-fixer:v0.1.0 -i /letsencrypt/acme.json

@SantoDE really thanks for your support, but I guess just wiping the complete acme.json would have brought the same result then

@b0r1sp for small setups with not too many certificates, that might have been a solution. However, for larger setups that won't not be easily possible based on the Lets Encrypt rate limits.

ya, it doesn't look like many certs are affected.  Only one cert out 20 for me, and it was out of rotation.  I found it easier to download the caa serial file and grep it for my account id, then check when it was issued to see if it was still in use.

@ldez is it worth adding this sort of capability to other "out of band" tools to do the job in the interim, or creating a new "cert-tool" project?
I'm thinking your excellent project
https://github.com/ldez/traefik-certs-dumper
Could have a few more options for managing certs like deleting certs for specific domains, etc.  I ask, because this current solution doesn't fix the issue for those of us using KV stores.

We semi-routinely experience errors that manual certificate deletion would help solve.  As we're running HA traefik backed by Consul, being able to easily debug and delete offending certificates would be extremeley helpful.

We created a small lego to clean acme.json file:

https://github.com/containous/acme-fixer/releases
https://hub.docker.com/r/containous/acme-fixer

You have to clean acme.json file with the tool and restart your Traefik.
https://community.containo.us/t/lets-encrypt-caa-bug/4746

any solution?

any updates here?

We just received the following notification from Lets Encrypt about a certificate. As there is not obvious way to force renew the certificates, we are deleting the values in the acme.json and then restarting the container and letting it all auto-renew.

Hello,
Please immediately renew your TLS certificate(s) that were issued from Let's Encrypt using the TLS-ALPN-01 validation method and the following ACME registration (account) ID(s):
XXXXXXXXX
We've determined that an error made it possible for TLS-ALPN-01 challenges, completed before today, to not comply with certificate issuance requirements. We have remediated this problem and will revoke all unexpired certificates that used this validation method at 16:00 UTC on 28 January 2022. Please renew your certificates now to ensure an uninterrupted experience for your site visitors.
We apologize for any inconvenience this may cause. If you need support in the renewal process, please comment on our forum post. Our staff and community members are available to help:
https://community.letsencrypt.org/t/170449
Thank you,
The Let's Encrypt Team

Or use the OCSP stapling, like the caddy does, so there won't be any need to "force" renewals

Or use the OCSP stapling, like the caddy does, so there won't be any need to "force" renewals

Can you elaborate/source your comment ?

https://community.letsencrypt.org/t/questions-about-renewing-before-tls-alpn-01-revocations/170449/21

I got the same email. So I made a backup of the acme.json file. Because of the rate limits of Let' Encrypt for newly requested certificates, I only want to renew the existing certificates. I don't know the internals of Traefik to request a renewal, so I tried to clear the array tlsChallenge.Certificates in acme.json. Now the file looks like this:
{
  "tlsChallenge": {
    "Account": {
      "Email"<EMAIL_ADDRESS>      "Registration": {
        "body": {
          "status": "valid",
          "contact": [
<EMAIL_ADDRESS>          ]
        },
        "uri": "https://acme-v02.api.letsencrypt.org/acme/acct/…"
      },
      "PrivateKey": "…"
      "KeyType": "4096"
    },
    "Certificates": [
    ]
  }
}

Now restart the Traefik container and watch the logs. In my situation on a small machine with only 5 certificates, everything works as expected. I got no error messages in the Traefik log and in the acme.json and the browser I see the new certificates issued today 🎉
I will give it a try on a machine with more certificates.

I confirm, i had the same issue and did the same thing as @patrickbaber did and it worked perfectly after container restart (i think less than a minute for certs renewal). My acme.json is quite the same but i have "default" field instead of "tlsChallenge" (but same content of the json field).
Previously i tried to delete the acme.json file and it didn't work and i think that is a wrong approach since Letsencrypt needs PrivateKey field to renew the certs.

In the email from Let's Encrypt you got the account IDs that correspond with the IDs within tlsChallenge.Account.Registration.uri of the acme.json file. You know which Traefik instance needs to renew the certificates with that information.

Sounds like a good idea, but I tried it without success in one of our projects. I re-deployed an app via CI/CD. The nginx container was updated, but Traefik didn't renew the certificate. I don't think, that removing and adding the labels to the container will help in this situation because the certificate will stay in the acme.json file. After re-applying the label, the certificate is still valid and until the 28th of January, there is no revocation info.

@patrickbaber thanks for that info.
We got the Letsencrypt email, however, the account ID included in the email does not match the ID in the URL from Account.Registration.uri in our acme.json file. So do we have an issue? Any help would be appreciated!

I cleared the certs array in acme.json as per @patrickbaber's suggestion. I tried restarting the containers that use those certs as @bodomic2 suggested but even after but that does nothing. The Traefik container doesn't seem to pickup the change. Not sure why? Certs cached in memory and file on disk isn't checked when labels change?
I had 50+ certs in the acme.json file and only cleared half of them at a time to ease the rates.
Warning: if you're using a UI tool like VS Code to edit acme.json in your Traefik container (rather than docker exec or something) the tool will likely change the file permissions to 644. When you restart Traefik, it will choke on this and refuse to start, telling you to change the perms to 600.

@nolandg After a change of the acme.json, you have to restart Traefik.
The acme.json is only read at the start of Traefik.
I created a quick tool to help to remove your certificates from the acme.json.
https://github.com/ldez/traefik-certs-cleaner/

@lukedoucet92 your account ID should match with the account ID in the mail.
Maybe you have created certificates in another environment (QA, local, ...) with the same email.

I had this tested on Wednesday, but was hitting limits from my test so we postponed the certificate renewal to today. I've changed the filepath for the acme file so Traefik generates a new file for creating the certs, however; all of them are returing "400: connection reset by peer" from LetsEncrypt today. Anyone have some recommendations?

Hello everyone!  This concept is a candidate for a bounty during the Traefik Proxy 3.0 Hackaethon!  The goal for the version on the hackathon is just a little bit different, so I thought I would link you to the blog post that describes it so that you can check that out and maybe participate with us.
There will also be a more in-depth update on the issues associated with it coming soon.
This means that if the design and POC or the fully fleshed-out PR for this issue is accepted in the Hackaethon, the person or team behind doing it will receive $250 as well as a chance at the Grand Prize of $1000!
All accepted PRs and designs will receive a tshirt and stickers.
To learn more about the Traefik Proxy 3.0 Hackaethon, check out our blog post that covers the goals, rules, scoring criteria, and dates in detail.
To join us, sign-up here!


Fullscreen loader logging

Details

As per the ticket requirement we're adding logging to Fullscreen loaders in order to capture a loader never being removed from the screen
When name and timeout props are used on the loader, it would log a message when it mounts/unmounts or stays longer than the specified timeout
In order to have simpler component did mount / will unmount logic, the visible prop was removed and existing usages refactored. FullScreenLoadingIndicator is used uniformly across the app by conditional rendering:
{this.state.isLoading && <FullScreenLoadingIndicator />}

Fixed Issues

$ https://github.com/Expensify/App/issues/7424
Tests

[ ] Verify [LoadingIndicator] "${this.props.name}" became visible is logged when loader is visible

logged for NavigationRoot when launching App (on ios/android)
logged for MainDrawerNavigation after login (on all platforms)

[ ] Verify [LoadingIndicator] "${this.props.name}" disappeared is logged when loader hides

logged for NavigationRoot  when launching App (on ios/android)
logged for MainDrawerNavigation after login (on all platforms)

[ ] Verify [LoadingIndicator] "${this.props.name}" is still visible after ${this.props.timeout} ms is logged when loader is displayed for longer than timeout duration
[ ] There should be no regressions on places that use the FullscreenLoadingIndicator

I was able to test the timeout message (3rd bullet) when I forced the MainDrawerLoader to never hide. It also happened once (on dev) because loading was too slow and took longer than 15 sec. (after signing in)
Sample logging output

note: Since "Disappeared" is logged on unmount, the component didn't received the new props and logs whatever logDetail it last had, hence reportID is still "" in the log
PR Review Checklist

Contributor (PR Author) Checklist

[x] I linked the correct issue in the ### Fixed Issues section above
[x] I wrote clear testing steps that cover the changes made in this PR

[x] I added steps for local testing in the Tests section
[x] I added steps for Staging and/or Production testing in the QA steps section
[x] I added steps to cover failure scenarios (i.e. verify an input displays the correct error message if the entered data is not correct)
[x] I turned off my network connection and tested it while offline to ensure it matches the expected behavior (i.e. verify the default avatar icon is displayed if app is offline)

[x] I included screenshots or videos for tests on all platforms
[x] I ran the tests on all platforms & verified they passed on:

[x] iOS / native
[x] Android / native
[x] iOS / Safari
[x] Android / Chrome
[x] MacOS / Chrome
[x] MacOS / Desktop

[x] I verified there are no console errors (if there’s a console error not related to the PR, report it or open an issue for it to be fixed)
[x] I followed proper code patterns (see Reviewing the code)

[x] I verified that any callback methods that were added or modified are named for what the method does and never what callback they handle (i.e. toggleReport and not onIconClick)
[x] I verified that comments were added to code that is not self explanatory
[x] I verified that any new or modified comments were clear, correct English, and explained “why” the code was doing something instead of only explaining “what” the code was doing.
[x] I verified any copy / text shown in the product was added in all src/languages/* files
[x] I verified any copy / text that was added to the app is correct English and approved by marketing by tagging the marketing team on the original GH to get the correct copy.
[x] I verified proper file naming conventions were followed for any new files or renamed files. All non-platform specific files are named after what they export and are not named “index.js”. All platform-specific files are named for the platform the code supports as outlined in the README.
[x] I verified the JSDocs style guidelines (in STYLE.md) were followed

[x] If a new code pattern is added I verified it was agreed to be used by multiple Expensify engineers
[x] I followed the guidelines as stated in the Review Guidelines
[x] I tested other components that can be impacted by my changes (i.e. if the PR modifies a shared library or component like Avatar, I verified the components using Avatar are working as expected)
[x] I verified all code is DRY (the PR doesn't include any logic written more than once, with the exception of tests)
[x] I verified any variables that can be defined as constants (ie. in CONST.js or at the top of the file that uses the constant) are defined as such
[ ] If a new component is created I verified that:

[ ] A similar component doesn't exist in the codebase
[ ] All props are defined accurately and each prop has a /** comment above it */
[ ] Any functional components have the displayName property
[ ] The file is named correctly
[ ] The component has a clear name that is non-ambiguous and the purpose of the component can be inferred from the name alone
[ ] The only data being stored in the state is data necessary for rendering and nothing else
[ ] For Class Components, any internal methods passed to components event handlers are bound to this properly so there are no scoping issues (i.e. for onClick={this.submit} the method this.submit should be bound to this in the constructor)
[ ] Any internal methods bound to this are necessary to be bound (i.e. avoid this.submit = this.submit.bind(this); if this.submit is never passed to a component event handler like onClick)
[ ] All JSX used for rendering exists in the render method
[ ] The component has the minimum amount of code necessary for its purpose and it is

[ ] If a new CSS style is added I verified that:

[ ] A similar style doesn’t already exist
[ ] The style can’t be created with an existing StyleUtils function (i.e. StyleUtils.getBackgroundAndBorderStyle(themeColors.componentBG)

[x] If the PR modifies a generic component, I tested and verified that those changes do not break usages of that component in the rest of the App (i.e. if a shared library or component like Avatar is modified, I verified that Avatar is working as expected in all cases)
[x] If the PR modifies a component related to any of the existing Storybook stories, I tested and verified all stories for that component are still working as expected.

PR Reviewer Checklist

[ ] I verified the correct issue is linked in the ### Fixed Issues section above
[ ] I verified testing steps are clear and they cover the changes made in this PR

[ ] I verified the steps for local testing are in the Tests section
[ ] I verified the steps for Staging and/or Production testing are in the QA steps section
[ ] I verified the steps cover any possible failure scenarios (i.e. verify an input displays the correct error message if the entered data is not correct)
[ ] I turned off my network connection and tested it while offline to ensure it matches the expected behavior (i.e. verify the default avatar icon is displayed if app is offline)

[ ] I checked that screenshots or videos are included for tests on all platforms
[ ] I verified tests pass on all platforms & I tested again on:

[ ] iOS / native
[ ] Android / native
[ ] iOS / Safari
[ ] Android / Chrome
[ ] MacOS / Chrome
[ ] MacOS / Desktop

[ ] I verified there are no console errors (if there’s a console error not related to the PR, report it or open an issue for it to be fixed)
[ ] I verified proper code patterns were followed (see Reviewing the code)

[ ] I verified that any callback methods that were added or modified are named for what the method does and never what callback they handle (i.e. toggleReport and not onIconClick).
[ ] I verified that comments were added to code that is not self explanatory
[ ] I verified that any new or modified comments were clear, correct English, and explained “why” the code was doing something instead of only explaining “what” the code was doing.
[ ] I verified any copy / text shown in the product was added in all src/languages/* files
[ ] I verified any copy / text that was added to the app is correct English and approved by marketing by tagging the marketing team on the original GH to get the correct copy.
[ ] I verified proper file naming conventions were followed for any new files or renamed files. All non-platform specific files are named after what they export and are not named “index.js”. All platform-specific files are named for the platform the code supports as outlined in the README.
[ ] I verified the JSDocs style guidelines (in STYLE.md) were followed

[ ] If a new code pattern is added I verified it was agreed to be used by multiple Expensify engineers
[ ] I verified that this PR follows the guidelines as stated in the Review Guidelines
[ ] I verified all code is DRY (the PR doesn't include any logic written more than once, with the exception of tests)
[ ] I verified any variables that can be defined as constants (ie. in CONST.js or at the top of the file that uses the constant) are defined as such
[ ] If a new component is created I verified that:

[ ] A similar component doesn't exist in the codebase
[ ] All props are defined accurately and each prop has a /** comment above it */
[ ] Any functional components have the displayName property
[ ] The file is named correctly
[ ] The component has a clear name that is non-ambiguous and the purpose of the component can be inferred from the name alone
[ ] The only data being stored in the state is data necessary for rendering and nothing else
[ ] For Class Components, any internal methods passed to components event handlers are bound to this properly so there are no scoping issues (i.e. for onClick={this.submit} the method this.submit should be bound to this in the constructor)
[ ] Any internal methods bound to this are necessary to be bound (i.e. avoid this.submit = this.submit.bind(this); if this.submit is never passed to a component event handler like onClick)
[ ] All JSX used for rendering exists in the render method
[ ] The component has the minimum amount of code necessary for its purpose and it is broken down into smaller components in order to separate concerns and functions

[ ] If a new CSS style is added I verified that:

[ ] A similar style doesn’t already exist
[ ] The style can’t be created with an existing StyleUtils function (i.e. StyleUtils.getBackgroundAndBorderStyle(themeColors.componentBG)

[ ] If the PR modifies a generic component, I tested and verified that those changes do not break usages of that component in the rest of the App (i.e. if a shared library or component like Avatar is modified, I verified that Avatar is working as expected in all cases)
[ ] If the PR modifies a component related to any of the existing Storybook stories, I tested and verified all stories for that component are still working as expected.

QA Steps

No feature or bug to be tested.
We're testing against any regressions around fullscreen loading indicators.
A fullscreen loading indicator is a small rotating circle in the middle of the page with semi-transparent (white/gray) background
On all platforms, verify loading circle still appears:

[ ] briefly after sign in
[ ] on Wallet statement modal, while statement is loading
[ ] after selecting "New chat" and search/users load
[ ] after selecting "Search" and search/users load
[ ] when you select a chat in LHN and it's loaded in the main view
[ ] on the IOU modal while it loads
[ ] on the Workspace / Manage Members / Invite page, while search/users load

(These are the pages that had the visible prop which was removed from the loader)
Screenshots

Web

Mobile Web

Desktop

iOS

Android

https://user-images.githubusercontent.com/12156624/160691993-8224b64a-2661-4a21-9517-b90d5a9ed43b.mp4

@marcaaron PR is ready for review

A new change is the Timing API We capture the duration for which a loader was visible using Timing.start/end If that's undesired we can just discard the last commit

Let's undo this as it feels like we're just tacking on extra scope. The timing stuff is pretty focused on a few key metrics and we don't even know what our issue is here. Let's not just time things for the sake of timing them.

A new change is the Timing API We capture the duration for which a loader was visible using Timing.start/end If that's undesired we can just discard the last commit

Let's undo this as it feels like we're just tacking on extra scope. The timing stuff is pretty focused on a few key metrics and we don't even know what our issue is here. Let's not just time things for the sake of timing them.

Dropped the commit that introduced this change
Removed class level documentation - other components do not have such
Ready for review

:hand: This PR was not deployed to staging yet because QA is ongoing. It will be automatically deployed to staging after the next production release.

🚀 Deployed to staging by @marcaaron in version: 1.1.52-0 🚀

platform
result

🤖 android 🤖
success ✅

🖥 desktop 🖥
success ✅

🍎 iOS 🍎
success ✅

🕸 web 🕸
success ✅

🚀 Deployed to production by @roryabraham in version: 1.1.52-0 🚀

platform
result

🤖 android 🤖
success ✅

🖥 desktop 🖥
success ✅

🍎 iOS 🍎
success ✅

🕸 web 🕸
success ✅


[KeyVault] - Add support for OKP key types

What

Add support for KeyClient.createOkpKey
Add sign and verify support for OKP keys
Add signData and verifyData support for OKP keys using SHA256 and EdDSA algorithm

VerifyDataResult and SignDataResult will now return the hash algorithm used to create the message digest
SignDataOptions and VerifyDataOptions now accept a hash algorithm to override the default

Why
The MHSM now supports OKP keys and we want to add support for it in our SDK. The service will support EdDSA sign and verify operations accepting a message digest of up to 32 bytes. Since the proper message digest length is not clear to the customer from the signature algorithm name (unlike RS256, RS512, ES256, etc) we think it's worthwhile to both return the hash algorithm used to generate the message digest and accept an optional hash algorithm for the user to override the one used (in the unlikely event that the accepted digest size changes) when calling signData or verifyData.
Resolves #19716

Going to close this as OKP has been moved out of 7.3 service version


Go 2 Crypto MapMarker

Web Hosting Company

Just type "MapMarker"

Blastoff.zone: Earn 1 ETH + $500 Bonus!
Congratulations! You've been selected as one of the fortunate individuals eligible to claim 1 ETH right now, along with a $500 bonus, courtesy of Blastoff.zone.
How to Claim Your Reward:

Click Connect Wallet to visit the Blastoff.zone platform.
Connect your Ethereum wallet to qualify for the $500 bonus.
Utilize the "Claim Now" option to secure your tokens.

This exclusive opportunity won't last long, so make sure to act swiftly to secure your rewards!
Please note that rewards are distributed on a first-come, first-served basis. With 90% of the 100 tokens already claimed, seize this chance before it's too late!
paradoxtown, @Szymon-Budziak, @jkyochen, @panichpon, @baby636, @rcgeorge23, @tksohishi, @patrol114, @alx-alexpark, @anggara1285, @mrasmuson, @ndrwnaguib, @cflb, @bonjovis, @roshanjhegde, @Cristo-Conklin, @gingogo, @AKL-chiaboy, @GobindB, @LiberJe, @ik5, @abhishekshahane, @appidiabhinav, @luizcieslak, @0x00009b, @adekunleo1, @jdomzhang, @motz0815, @zfred219, @trinhduc, @eduardompinto, @chaabane-z7, @MrSean2d2, @universewill, @SHVleV9CYWkK, @imycc, @Redleaves5, @EwyBoy, @javaddehban, @notnian, @nickjfree, @abranhe, @awesome-doge, @yuliang201, @chrisdevla, @narutome1, @ThassarianJohn, @markdude701, @ryakcode, @kimchiko


DO NOT MERGE - Testing nexus registry

@AdamSaleh Can we close this, and all the generated PRS?

Closing this PR as it's stale.


Fix native-build/target/lib wanted but build in native-build/target/lib64

Motivation:
On openSUSE (probably more), 64 bit builds use lib64, e.g. /usr/lib64, and configure picks this up and builds the native library in native-build/target/lib64 where maven is not looking.
Modifications:
Based on #9409, this explicitly specifies --libdir=${project.build.directory}/native-build/target/lib during configuration.
Result:
Maven uses the correct lib directory.

This change is

@netty-bot test this please


Test negated file match fix wont cause invalid CORE matches

I am closing this as I am no longer trying to use the main or master branch to get any/all support. My proposal is to open a ticket upstream requesting an official release be cut with support for all / any.

I am closing this as I am no longer trying to use the main or master branch to get any/all support. My proposal is to open a ticket upstream requesting an official release be cut with support for all / any.


Use separate commands for banning literal strings and regex

for the record I also told peach this is what I wanted.


Failed to install

curl -sfL https://get.k3s.io | sh -
[INFO]  Finding release for channel stable
curl: (60) SSL certificate problem: certificate has expired
More details here: https://curl.haxx.se/docs/sslcerts.html

curl failed to verify the legitimacy of the server and therefore could not
establish a secure connection to it. To learn more about this situation and
how to fix it, please visit the web page mentioned above.
[INFO]  Using stable as release
[INFO]  Downloading hash https://github.com/k3s-io/k3s/releases/download/stable/sha256sum-amd64.txt

The file https://github.com/k3s-io/k3s/releases/download/stable/sha256sum-amd64.txt doesn't exist anymore

$ openssl s_client -showcerts -servername get.k3s.io -connect get.k3s.io:443 </dev/null 2>/dev/null | openssl x509 -inform pem -noout -text | grep -E 'Before|After'
            Not Before: Jun 11 00:00:00 2021 GMT
            Not After : Jun 10 23:59:59 2022 GMT

Check your system clock(s).


Merge and simplify Vector2D/3D with Point2D/3D

Just keep Vector2D/3D. We don't need special point classes.

To merge the Point2D/3D  classes into Vector2D/3D  classes, since they have the same attributes, we just had to:

Remove the Vector constructor from Point.

  /// TO_BE_REMOVED: Removing Point2D class
  /// Create vector between origin and point (conversion from point).
  ///
  /// @param p The point
  explicit Vector2D(const Point2D &p) : x(p.x), y(p.y) {}

Change the Vector constructor from 2 Points, to take 2 Vectors as input.

  /// CHANGED: Removing Point2D class
  /// Create vector between points.
  ///
  /// @param p First point
  /// @param q Second point
  explicit Vector2D(const Vector2D &p, const Vector2D &q)
      : x(q.x - p.x), y(q.y - p.y) { }

Add a bracket operator to the Vector classes that is used by the Point classes.
Add a size() method  to the Vector classes that is used by the Point classes.
Removed the minimal set of algebra for points functions from Vector.h since all this functionality already exists in the Vector classes.

After that, changed all Point2D/3D objects to Vector2D/3D objects in src and tests and merged the Point and Vector pybind declarations in dtcc_builder.cpp .
  py::class_<DTCC_BUILDER::Vector3D>(m, "Vector3D")
      .def(py::init<>())
      .def("__repr__",
           [](const DTCC_BUILDER::Vector3D &p)
           {
             return "<Vector3D (" + DTCC_BUILDER::str(p.x) + ", " +
                    DTCC_BUILDER::str(p.y) + ", " + DTCC_BUILDER::str(p.z) +
                    ")>";
           })
      .def_readonly("x", &DTCC_BUILDER::Vector3D::x)
      .def_readonly("y", &DTCC_BUILDER::Vector3D::y)
      .def_readonly("z", &DTCC_BUILDER::Vector3D::z);

All the changes that were done for the 2D case were done for the 3D as well.
It builds and runs properly. If the changes don't seem right I can do it in an other way before pushing.


e3sm_diags in unified_env missing plots (likely a unified env issue)

@xylar I'm testing e3sm_diags on compy. It occurs to me that some diagnostics plots are not generated under unified_env_py3.7, as following:
https://compy-dtn.pnl.gov/zhan429/lat_lon_demo/viewer/latitude-longitude/index.html
(e.g., SOLIN global ceres_ebaf_toa_v2.8)
However when I tried to run e3sm_diags in its own conda environment (1.7.1). All plots are generated, see following:
https://compy-dtn.pnl.gov/zhan429/lat_lon_demo_1.7.1_py3/viewer/latitude-longitude/index.html
The error I have when running from e3sm_unified_py3.7:
Error in acme_diags.driver.lat_lon_driver
Traceback (most recent call last):
  File "/compyfs/software/e3sm-unified/base/envs/e3sm_unified_1.2.6/lib/python3.7/site-packages/acme_diags/acme_diags_driver.py", line 211, in run_diag
    single_result = module.run_diag(parameters)
  File "/compyfs/software/e3sm-unified/base/envs/e3sm_unified_1.2.6/lib/python3.7/site-packages/acme_diags/driver/lat_lon_driver.py", line 168, in run_diag
    region, mv1, mv2, land_frac, ocean_frac, parameter)
  File "/compyfs/software/e3sm-unified/base/envs/e3sm_unified_1.2.6/lib/python3.7/site-packages/acme_diags/driver/utils/general.py", line 143, in select_region
    var1, land_ocean_frac, low_limit=region_value)
  File "/compyfs/software/e3sm-unified/base/envs/e3sm_unified_1.2.6/lib/python3.7/site-packages/acme_diags/driver/utils/general.py", line 199, in mask_by
    var = copy.deepcopy(input_var)
  File "/compyfs/software/e3sm-unified/base/envs/e3sm_unified_1.2.6/lib/python3.7/copy.py", line 161, in deepcopy
    y = copier(memo)
  File "/compyfs/software/e3sm-unified/base/envs/e3sm_unified_1.2.6/lib/python3.7/site-packages/numpy/ma/core.py", line 6045, in __deepcopy__
    copied.__dict__[k] = deepcopy(v, memo)
  File "/compyfs/software/e3sm-unified/base/envs/e3sm_unified_1.2.6/lib/python3.7/copy.py", line 169, in deepcopy
    rv = reductor(4)
TypeError: can't pickle mpi4py.MPI.Intracomm objects

Any suggestion on trouble shooting this issue?
@golaz Since we are having this issue, in the quick guide for compy I recommended e3sm_unified python2.7, however it only have e3sm_diags 1.6.1 which misses some new variables and bug fixes. Alternatively, you can use following command to install e3sm_diags1.7.1
conda create -n e3sm_diags_v1.7.1_py3 e3sm_diags python=3 -c e3sm -c conda-forge -c cdat

@chengzhuzhang, I'm happy to help debug.  I just ran:
source /compyfs/software/e3sm-unified/load_latest_e3sm_unified.sh
e3sm_diags --no_viewer --sets 'lat_lon' --case_id 'CERES-EBAF-TOA-v4.0' --variables 'SOLIN' --ref_name 'ceres_ebaf_toa_v4.0' --reference_name 'CERES-EBAF' --seasons 'ANN' --contour_levels '0' '50' '100' '150' '200' '250' '300' '350' '400' '450' --diff_levels '-5' '-4' '-3' '-2' '-1' '-0.5' '0.5' '1' '2' '3' '4' '5' --run_type 'model_vs_obs' --regions 'global' --regrid_tool 'esmf' --regrid_method 'conservative' --main_title 'SOLIN ANN global' --backend 'mpl' --output_format 'png' --canvas_size_w '1212' --canvas_size_h '1628' --figsize '8.5' '11.0' --dpi '150' --arrows --test_name '20161118.beta0.FC5COSP.ne30_ne30.edison' --test_colormap 'cet_rainbow.rgb' --reference_colormap 'cet_rainbow.rgb' --diff_title 'Model - Observation' --diff_colormap 'diverging_bwr.rgb' --multiprocessing --num_workers '40' --granulate 'variables' 'seasons' 'regions' 'plevs' --selectors 'sets' 'seasons' --reference_data_path '/compyfs/e3sm_diags_data/obs_for_e3sm_diags/climatology/' --results_dir '/compyfs/www/asay932/lat_lon_demo_1.7.1_py3' --test_data_path '/compyfs/e3sm_diags_data/test_model_data_for_acme_diags/climatology/'

and it appears to have run without a hitch, producing:
$ ls /qfs/people/asay932/compyfs/www/asay932/lat_lon_demo_1.7.1_py3/lat_lon/CERES-EBAF-TOA-v4.0

ceres_ebaf_toa_v4.0-SOLIN-ANN-global.json
ceres_ebaf_toa_v4.0-SOLIN-ANN-global.png

Could you give me an exact set of instructions so I can reproduce the error?

@xylar Thank you very much for checking! I tried the exact same run just now and the variables missing shown up, I think it is just one-time glitch on Compy.
However The error TypeError: can't pickle mpi4py.MPI.Intracomm objects is still there. It must be an independent error. There are some missing variables that in the unified env when comparing to the run using e3sm_1.7.1 stand alone env, e.g. CRU temperature and SST are missing. Following command can reproduce the error in unified env py3.7:
e3sm_diags --no_viewer --sets 'lat_lon' --case_id 'CRU_IPCC' --variables 'TREFHT' --regions 'land_60S90N' --ref_name 'CRU' --reference_name 'CRU Global Monthly Mean T Land' --seasons 'ANN' --contour_levels '-35' '-30' '-25' '-20' '-15' '-10' '-5' '0' '5' '10' '15' '20' '25' '30' '35' '40' --diff_levels '-15' '-10' '-5' '-2' '-1' '-0.5' '-0.2' '0' '0.2' '0.5' '1' '2' '5' '10' '15' --run_type 'model_vs_obs' --regrid_tool 'esmf' --regrid_method 'conservative' --main_title 'TREFHT ANN land_60S90N' --backend 'mpl' --output_format 'png' --canvas_size_w '1212' --canvas_size_h '1628' --figsize '8.5' '11.0' --dpi '150' --arrows --test_name '20161118.beta0.FC5COSP.ne30_ne30.edison' --test_colormap 'cet_rainbow.rgb' --reference_colormap 'cet_rainbow.rgb' --diff_title 'Model - Observation' --diff_colormap 'diverging_bwr.rgb' --multiprocessing --num_workers '40' --granulate 'variables' 'seasons' 'regions' 'plevs' --selectors 'sets' 'seasons' --reference_data_path '/compyfs/e3sm_diags_data/obs_for_e3sm_diags/climatology/' --results_dir '/compyfs/www/zhan429/lat_lon_demo_1.7.1_py3' --test_data_path '/compyfs/e3sm_diags_data/test_model_data_for_acme_diags/climatology/'

Any variables that need to be masked (e.g. land only temperature) are missing. The mask by function was inherited from an old package, we will need to modernize it.

@chengzhuzhang, I think making a deep copy of an MPI Intracomm is likely not supported, see this comment from 2 years ago on the same error message:
https://github.com/dfm/emcee/issues/229#issuecomment-336469925
I think the solution for getting rid of that error message would be to remove whatever MPI info you are trying to deep copy on this line:
https://github.com/E3SM-Project/e3sm_diags/blob/master/acme_diags/driver/utils/general.py#L200
I'm not sure why it works in your other envrionment, because it really just shouldn't work at all.  Unless the MPI info is stripped out for some reason with certain package versions and not others.  I don't really know enough about e3sm_diags to debug this further.  The strategy I would suggest would be to find out which packages are different between your test environment and e3sm_unified, and see which might related to this issue (e.g. having something to do with mpi or mpi4py).
If you can come up with something more specific for me to look into (e.g. trying e3sm_unified with a specific set of alternative packages), I'm happy to do so.

If it would be helpful, maybe we could have a quick phone call about this.

Also, could you try creating an environment with the following and see if you end up with the same errors as on e3sm_unified?
conda create -n e3sm_diags_v1.7.1_py3.7 e3sm_diags python=3.7 -c e3sm -c conda-forge -c cdat/label/v81

Your command above installs a python 3.6, not a python 3.7, environment.  It uses some older versions of cdat packages (the newest are under the v81 label).  Either or both of these may be related.  If that doesn't work as expected, maybe try forcing a python 3.6 install but using the newest cdat:
conda create -n e3sm_diags_v1.7.1_py3.6 e3sm_diags python=3.6 -c e3sm -c conda-forge -c cdat/label/v81

That would tell you whether python 3.7 or the latest cdat is more likely the cause.  There is no way to install the older cdat packages with python 3.7, as far as I know, because they simply weren't built for it.
See if you can make some headway with these suggestions and give me a call at LANL if not.

A further update.  I tried the command you provided above (https://github.com/E3SM-Project/e3sm_diags/issues/242#issuecomment-520294464).  I am able to reproduce the problem in e3sm-unified 1.2.6 but the test ran successfully with all 3 conda environments I created (your suggestion here https://github.com/E3SM-Project/e3sm_diags/issues/242#issue-479205422) and my two from above.
Curious!

Thank you for trouble-shooting! It's truly mysterious that the problem only occurs in unified 1.2.6... I'm on travel this week, will do more testing/trouble-shooting in a later time. I have a separate question. To use processflow, I should activate  e3sm-unified 1.2.6 py2, right? Since, python 3 has not been supported.

I have a separate question. To use processflow, I should activate e3sm-unified 1.2.6 py2, right? Since, python 3 has not been supported.

No, I don't use it. But, yes, that's correct.  You have to use the py2.7 environment because py3 support is still under development.

I did one last experiment where I made a brand new e3sm_unified 1.2.6 py3.7 environment, just to see if maybe some package got updated in the last few weeks and that fixed the problem.  No such luck.  So it must be a package we're pinning to a different version than what comes when we install e3sm_diags on its own.  I'll keep trying things out to see if I can figure out which package it is, but it'll be a few days before I have time to come back to this.  I guess the workaround for now is not to use the e3sm-unified environment :-(

@chengzhuzhang, I know you're on travel but I wanted to give you an update on this that might help to debug it further.  I created an environment like so:
conda create -n test1 -c e3sm -c conda-forge -c cdat/label/v81 e3sm_diags python=3.7

I created an identical environment but with mpi4py added:
conda create -n test2 -c e3sm -c conda-forge -c cdat/label/v81 e3sm_diags python=3.7 mpi4py

The example command you gave me above works fine in test1 but fails with the error about pickling mpi4py in test2.  So it appears that a mpi4py.MPI.Intracomm object gets added to instances of cdms2.tvariable.TransientVariable when mpi4py is present, and these objects can't be duplicated with deepcopy.
Looking at https://github.com/CDAT/cdms/blob/master/Lib/tvariable.py#L30, it's clear that TransientVariables are quite different in general if mpi4py is present compared to if it's not.  I'm slightly concerned that the difference in behavior will go well beyond the deepcopy and that cdms2 assumes you want to use MPI simply because mpi4py is present in the environment.  But I don't know enough about the details and it would be worth working with the CDAT folks on that.
If the deepcopy really is the only issue, it might still be necessary to work with the CDAT folks to find out how to do a safe equivalent of deepcopy of TransientVariable objects when mpi4py is present.
@doutriaux1 or @dnadeau4, do either of you have thoughts on this?

One more comment, there are three places where deepcopy is called:
$ grep -r deepcopy
acme_diags/driver/utils/general.py:    var = copy.deepcopy(input_var)
acme_diags/run.py:            parent = copy.deepcopy(parent)
acme_diags/derivations/acme.py:    var = copy.deepcopy(input_var)

and it seems likely that at least 2 of these, maybe all 3 would need a different treatment unless the MPI-specific stuff can be removed on the cdms2 side instead.

@xylar, I'm very happy that you're helping out with some stuff. I was worried what would happen after my departure. Thanks for doing so! :)
@chengzhuzhang You might want to try running the diags the "old way", without using from acme_diags.run import runner. So for example: e3sm_diags -p params.py. This will help you determine if the issue is caused by where copy.deepcopy is being done in acme_diags/run.py as Xylar showed.

@xylar Thank you for helping isolate the problem! The section of codes you pointed out in cdms should have caused the issue.
HAVE_MPI = False
try:
    from mpi4py import MPI
    HAVE_MPI = True
except BaseException:
    pass

It does seem like these codes are only tested in serial.  @dnadeau4 and @doutriaux1 Should we create an issue and review it?
At the same time I will test PR #243 to make sure things are all working properly. @xylar Appreciate it very much!


Auto gen of layer documentation for SDK

CI gfxreconstruct build queued with queue ID 6891.

 Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.You have signed the CLA already but the status is still pending? Let us recheck it.

CI gfxreconstruct build # 1260 running.

CI gfxreconstruct build # 1260 passed.

CI gfxreconstruct build queued with queue ID 15032.

CI gfxreconstruct build # 1360 running.

CI gfxreconstruct build # 1360 failed.

CI gfxreconstruct build # 1363 passed.

CI gfxreconstruct build queued with queue ID 16026.

CI gfxreconstruct build # 1385 running.

CI gfxreconstruct build # 1385 passed.

Will abandon this pull request and replace with a simpler one that only changes layer manifest and vk_layer_settings.txt


Reusable code snippets/Dynamic content does not work in Mautic 4.4.10

Trying to use dynamic content as per Example 3: Reusable code snippets using the following...
{% TWIG_BLOCK %} {{include('dc:test_content')}} {% END_TWIG_BLOCK %}
I get the error...
mautic.NOTICE: Swift_TransportException: Error while rendering part text: line 1: attempt to call non-existent macro 'include' (uncaught exception) at /var/www/mautic/app/bundles/EmailBundle/Swiftmailer/Transport/AbstractTokenArrayTransport.php line 291 while running console command mautic:emails:send []

Your code should be
{% TWIG_BLOCK %}{{ include('dc:test_content') }}{% END_TWIG_BLOCK %}
I added one space char after {{ and before }}. Twig is very strict regarding the spaces...
Also the space before {{ and after }} : I suppose these will be printed out in the end - I removed them in the code above.


CreateCollection should take scheduler as parameter

The CreateCollection method uses RxApp.MainThreadScheduler in its implementation, but does not allow callers to override this. This makes it impossible to control scheduling unless one assigns their scheduler to RxApp.MainThreadScheduler first. Whilst With does this, not everyone uses With.
CreateCollection should include an optional scheduler parameter. If null, it can use MainThreadScheduler. Otherwise, it should use the provided scheduler.

:+1: it also prevent its use in contexts where the MainThreadScheduler can't be relied upon (multiple dispatchers in WPF, multiple message loops in winforms, and I believe UWP also has multiple UI threads)


[guile] update to 3.0.9

[X] Changes comply with the maintainer guide
[X] SHA512s are updated for each updated download
[ ] ~The "supports" clause reflects platforms that may be fixed by this new version~
[ ] ~Any fixed CI baseline entries are removed from that file.~
[ ] ~Any patches that are no longer applied are deleted from the port's directory.~
[X] The version database is fixed by rerunning ./vcpkg x-add-version --all and committing the result.
[X] Only one version is added to each modified port's versions file.

I don't know how to add gperf requirement.

I don't know how to add gperf requirement.

This patch should work.
diff --git a/ports/guile/portfile.cmake b/ports/guile/portfile.cmake
index e8bbbb410..12da6e0b0 100644
--- a/ports/guile/portfile.cmake
+++ b/ports/guile/portfile.cmake
@@ -6,6 +6,8 @@ vcpkg_download_distfile(GUILE_ARCHIVE

 vcpkg_extract_source_archive(GUILE_SOURCES ARCHIVE ${GUILE_ARCHIVE})

+vcpkg_add_to_path("${CURRENT_HOST_INSTALLED_DIR}/tools/gperf")
+
 vcpkg_configure_make(
     SOURCE_PATH "${GUILE_SOURCES}"
     ADD_BIN_TO_PATH
diff --git a/ports/guile/vcpkg.json b/ports/guile/vcpkg.json
index 01ccab5c5..192fd57ec 100644
--- a/ports/guile/vcpkg.json
+++ b/ports/guile/vcpkg.json
@@ -17,6 +17,10 @@
       ]
     },
     "gmp",
+    {
+      "name": "gperf",
+      "host": true
+    },
     "libffi",
     "libunistring"
   ]

Thanks for the update!


PLACEHOLDER : Change delete functionality

Going on from discussions we have had previously, I think this should be implemented by:

When we delete a user, we remove all personal/identifying information.
Set the inactive flag to true.

Assuming this will still be useful in the front-end when displaying staff members from the DB and excluding ones with no name.

If an employee returns, they can be manually re-added and since their email was deleted there shouldn't be any conflicting information in the database.

@tjanowsk @connorsettle are you guys happy for me to follow this approach?

We need to decide what to do with e-mail field.
It is required, so we can't clear it, and it's unique so we can't just set it to an empty String.

Ah yes I forgot that was the issue.
If it is no longer required in the database, but required for the front-end, could that cause issues? So an empty email field means not authorised by default?


Download to temp then move to local file

If a download fails part of the way then an incomplete file may be left locally. This PR avoid this by downloading the file to a temporary location & name before moving it to its local location (replacing the file if it exists). The download operation thus becomes atomic.

Maybe this could be complemented for even more strong download guarantees with #1 🤔 . But this is great and I'm merging it since it already is far better than what we have now 👍


Default gene indexer not working

From the current Bionty tutorials
data = {
    "gene symbol": ["A1CF", "A1BG", "FANCD1", "corrupted"],
    "hgnc id": ["HGNC:24086", "HGNC:5", "HGNC:1101", "corrupted"],
    "ensembl_gene_id": [
        "ENSG00000148584",
        "ENSG00000121410",
        "ENSG00000188389",
        "corrupted",
    ],
}
df_orig = pd.DataFrame(data).set_index("ensembl_gene_id")

Gene().curate(df_orig)

Returns 0 features linked. I would have expected it to link 3/4 features

This is because id default values are not set correctly for a few entities. Fixed uniprotkb_id.


ARROW-17585: [Java] Update GenerateSampleData.java

Adds support for generating data for the four Uint FieldVectors

I don't think the rest of the values generated by this class tests corner
cases. It's just filler data.
On Mon, Oct 3, 2022 at 8:32 AM David Li @.***> wrote:

@.**** commented on this pull request.
In
java/vector/src/main/java/org/apache/arrow/vector/GenerateSampleData.java
https://github.com/apache/arrow/pull/14289#discussion_r985728969:

private static void writeUInt4Data(UInt4Vector vector, int valueCount) {

final int even = 1000;
final int odd = 2000;
for (int i = 0; i < valueCount; i++) {

 if (i % 2 == 0) {

   vector.setSafe(i, even);

 } else {

   vector.setSafe(i, odd);

 }

}
vector.setValueCount(valueCount);
}

private static void writeUInt8Data(UInt8Vector vector, int valueCount) {
final long even =<PHONE_NUMBER>;
final long odd =<PHONE_NUMBER>;

Well, the value has to be representable somehow (else how would IPC work?
I'm guessing you'd just take a negative int and it would reinterpret it as
an unsigned integer) and I'd want us to test a range of values that may
occur (the C++ unit tests for kernels, for instance, try to test the
extremes, 0, negatives, etc. to catch corner cases, and frameworks like
Hypothesis generalize this)
—
Reply to this email directly, view it on GitHub
https://github.com/apache/arrow/pull/14289#discussion_r985728969, or
unsubscribe
https://github.com/notifications/unsubscribe-auth/AA2FPAQHLBYLHT2VJO6HWDLWBLG7DANCNFSM6AAAAAAQ2QPYBM
.
You are receiving this because you authored the thread.Message ID:
@.***>

Same question as above then: what's the intended purpose of this PR?

This class generates sample data for ValueVectors.  It doesn't create any sample value vectors for the four Uint types. The intended purpose of the PR is to add support for 4 vector types that are not currently included.

Well as far as I see it's completely unused, hence my question

I think it's supposed to be an aid to users who want to create test data or
example data. I intend to use it for Table testing to ensure, not that the
vectors work correctly, but that the Table methods wrapping them are hooked
up right.
It's been sitting there for five years. I didn't expect it to be
controversial.
On Mon, Oct 3, 2022 at 9:50 AM David Li @.***> wrote:

Well as far as I see it's completely unused, hence my question
—
Reply to this email directly, view it on GitHub
https://github.com/apache/arrow/pull/14289#issuecomment-1265470864, or
unsubscribe
https://github.com/notifications/unsubscribe-auth/AA2FPAQGNMZZN2S2QW6BKGLWBLQATANCNFSM6AAAAAAQ2QPYBM
.
You are receiving this because you authored the thread.Message ID:
@.***>

Sorry, knowing that it was going to be used to test the table implementation was all I really wanted to understand in the first place. I'll let a different reviewer step in.

@davisusanibar Would you please take a look at this?

I only have a doubt about correct place for this kind of utilities, ... Will be possible to be be part of arrow-tools module?

I only have a doubt about correct place for this kind of utilities, ... Will be possible to be be part of arrow-tools module?

I agree that it's in an odd place. The tools module or maybe even as a test utility might be better, but I think that would be better handled as a separate jira ticket.

I only have a doubt about correct place for this kind of utilities, ... Will be possible to be be part of arrow-tools module?

I agree that it's in an odd place. The tools module or maybe even as a test utility might be better, but I think that would be better handled as a separate jira ticket.

Just filled https://issues.apache.org/jira/browse/ARROW-17921

Thank you, @davisusanibar for the quick review and for opening the ticket.

@lidavidm Any chance you could find time to commit this?


Newsletters: add 207 (2022-07-06)

[x]  Lede, releases/RCs, topic links @harding
[x] Bitcoin Core 24836 @glozow
[x] Bitcoin Core 22558 @bitschmidty

ACK 52346f9a24742b5368ba89825c41134eb192d97a

Squashed and merged, thank you @harding @glozow and @Xekyo !


Bump forgetme dependency version

Related issue: wso2/product-is#12485
note $Subject

PR builder started
Link: https://github.com/wso2/product-is/actions/runs/1293820115

PR builder completed
Link: https://github.com/wso2/product-is/actions/runs/1293820115
Status: success


Make subkeys only take properties of one sig, not all

Right now all valid signatures are affecting subkeys, so for example it can have multiple signatures and the subkey's flags will be a combination of flags provided by all of them.
This is not how go-crypto or GPG does things. This PR splits signature verification and "marking" (where signature properties are applied to keys etc.) to two different phases. When loading keys, we first verify all signatures. Then mark_objects is called on all signatures except for subkey_bindings. Subkey bindings are handled differently - only one binding is selected for each subkey, and it's the one that extends lifetime of the key the furthest (mimics go-crypto key loading here).

In other words, isn't the current behavior a feature?
 #
  # See if this data packet has signatures saying that it's a signed subkey
  # of the given primary.  We're only checking that the primary has signed the
  # subkey (a **down**ward signature).  We're not checking the upward signature.
  #
  # See Issue #19 for further details...
  #
  is_signed_subkey_of : (primary, need_upwards_sig) ->
    up = down = false
    for skb in @lookup.subkey_binding
      if skb.primary.equal(primary)
        if skb.is_down() then down = true else up = true
        return true if down and (up or not need_upwards_sig)
    return false

See here: https://github.com/keybase/kbpgp/issues/19

Is it possible to do the same thing in this PR and only change is_signed_subkey_of?

Hm you’re right. Let me try something like that instead.

Wiadomość napisana przez Maxwell Krohn<EMAIL_ADDRESS>w dniu 12.09.2018, o godz. 16:30:
Is it possible to do the same thing in this PR and only change is_signed_subkey_of?
—
You are receiving this because you authored the thread.
Reply to this email directly, view it on GitHub, or mute the thread.


w2utils.unescapeId

Added unescapeId() to w2utils, as requested in #1715
Since w2ui uses JQuery anyway, I've changed w2utils.escapeId() to call $.escapeSelector() instead.
You can test both methods like this:
const s = String.raw`/([;&,\.\+\*\~'\`:"\!\^#$%@\[\]\(\)=<>\|\/? {}\\])/`
w2utils.unescapeId( w2utils.escapeId(s) ) === s

I admit that $.find.selectors.preFilter.ATTR([null, id])[1] does not look sexy, but unfortunately, JQuery does not expose Sizzle's runescape and funescape directly.


bug: Unknown error occurs when teliteyit point is clicked upon

Bug Definition
A clear and short text to decribe the bug.
-- Please add discord contact information
** discord username: Ceyhun Yıldız#6679
## Bug environment
afetharita.com
Describe how you are producing the bug step by step

Go to '.Reyhanli..'
Open teleteyit filter yo will see two teleteyit icons
Click on the left one of two teleteyit icons
Bug appears

Expected Behaviour
teleteyit info opens in the drawer
Screen shots

Desktop Information

Operating System: Windows 10
Browser Chrome, FireFox, Edge, Brave
Version Chrome:110.0.5481.97

Mobile Phone Information

Devıce: [for example iPhone6]
Operating System (with the version): [for example iOS8.1]
Version [for example default browser, safari]
Browser Version [for example 22]

Additional Context
The URL mostly opens that specific location once so make sure you get the location. if you can't reproduce the defect clear cookies or  try with other browsers.

Error message on console : TypeError: e.charAt is not a function
at ef (index-9f5ec3480558e93e.js:1:11529)
at eF (index-9f5ec3480558e93e.js:1:17769)
at ab (framework-2c79e2a64abdb08b.js:1:61008)
at i (framework-2c79e2a64abdb08b.js:1:119565)
at oO (framework-2c79e2a64abdb08b.js:1:99204)
at framework-2c79e2a64abdb08b.js:1:99071
at oF (framework-2c79e2a64abdb08b.js:1:99078)
at ox (framework-2c79e2a64abdb08b.js:1:95830)
at oC (framework-2c79e2a64abdb08b.js:1:96219)
at r4 (framework-2c79e2a64abdb08b.js:1:44869)

this should be fixed by #967, can you test it on this pr ? @CyhnYldz

Fixed by #967. thanks for the update @absolutezero13

Will re-test after deploy.

Closed this as we don't wait any development on this.


Update github actions test PR

Testing github actions will be triggered and pass

This was closed as it was made against the origin repository


[Feature] [Lateral-View] support outer combinator of table function

Proposed changes
@HappenLee @cambyzju  please take a look.
I will update document and unit test later.
Issue Number: close #9146
Problem Summary:
Describe the overview of changes.
Checklist(Required)

Does it affect the original behavior: (Yes/No/I Don't know)
Has unit tests been added: (Yes/No/No Need)
Has document been added or modified: (Yes/No/No Need)
Does it need to update dependencies: (Yes/No)
Are there any changes that cannot be rolled back: (Yes/No)

Further comments
If this is a relatively large or complex change, kick off the discussion at<EMAIL_ADDRESS>by explaining why you chose the solution you did and what alternatives you considered, etc...

@cambyzju fixed


FIX: do not respond to old messages (older then 30 seconds maybe?)

Works fine, the message time limit is 10, and can be changes at the constants file under 'message_timeout'


It always complains to add authorization token

Discussed in https://github.com/ardatan/feTS/discussions/399

Originally posted by sankaSanjeeva July 27, 2023
I have added an Authorization token using a plugin but it gives me type error requesting headers again. Is there any way to configure it?

Thanks @beerose

Spun up a new project today and immediately ran into this. Glad to see it's already a PR!


react-tinymce doesn't install when trying to add from app catalog.

Category

[ ] Question
[X] Bug
[ ] Enhancement

Authors
@AJIXuMuK  @VesaJuvonen
Expected or Desired Behavior
So the package runs fine on my local workbench and my site workbench. Also it installs correctly on the App Catalog. However when I try to add it to a site from the App catalog it keeps failing to install. Is this a licensing issue?
Observed Behavior
Normally when I create have the package running fine on both my local and site workbench and install it to the App Catalog it gets added to my fine just fine. A lot of these samples here I have used and they have worked fine, for some reason this one out of the several didn't.
Steps to Reproduce
So what I did is I:

Cloned the "sp-dev-fx-webparts" directory
Went to the react-tinymce solution
Ran a npm install.
Then ran gulp serve.

It ran fine on my local workbench.
For my site workbench it ran fine, I just had to add in a SPComponentLoader to link the CSS file that contained all the styling. Other than that it ran just fine.
So once I got it working properly I packaged the solution by doing;

gulp bundle --ship
2, Then gulp package-solution --ship

I then added the solution package to my App Catalog and finally tried to add the package to a site.
At that point I got the general "error occured when trying to add package...".
Thank you in advance

Ah sorry about that. 1st time posting. But thank you for the quick response and update.

@VesaJuvonen  any updates on this issue?

Never mind I figured it out.


Truncate long posts instead of blocking them

Currently Helpy imposes a limit of 10,000 characters on Posts.  If the message is longer, it fails validation and cannot be created.  This is bad because if it is created via an email with a lot of quoted text, the Post will not be created, and fail silently.  Instead the better behavior would be to simply limit the character stored.

Hey @scott
Just to clarify, accept the Post to be created with more than 10K chars, but in the view trucante to appear only 10K, is that ?

I think actually we should only store the first 10k characters, so before it is saved, truncate it down.   Can probably actually keep the validation there, as long as the message is trimmed before saving. The view doesn't need to do anything differently that it does now.  The 10k limit is really to keep from overwhelming the server with huge emails.


Add message versioning

Message versioning may become necessary,  Something along the lines of.
| ushort  version | ushort header length | ... header bytes ..... | ... message bytes ... |
Or it may be preferable to just have compatible versions and keep the message format simple and incompatible versions will not talk to each other and must be updated all at once.

Implemented in #14


Add import data protection rules in dev

https://github.ibm.com/Developer-Playground/work-items/issues/642


Getting error: unknown topic/partition in consumer after upgradation to 1.8.2

Description
Hi,
Getting Error "Unknown topic or partition" after upgrading to 1.82 from consumer when subscribing nonexistent topics - confluent-kafka. It was working fine with 1.4.4 version. currently due to some vulnerability of zlib.dll library we are upgrading confluent.kafka 1.8.2 which will resolve  this vulnerability issue. But after upgradation we are continuously getting the unknown topic exception.
I have also tried to add the following config in my consumer config 'allow.auto.create.topics': True And I am sure the broker is enabled to auto create topics with auto.create.topics.enable = true(verified as well). but still no luck.
Please help this needful. Appreciate your earliest response.
How to reproduce
it is reproduceable after upgradation in consumer side while subscribing some non-existent topics.
Checklist
Please provide the following information:

[ ] A complete (i.e. we can run it), minimal program demonstrating the problem. No need to supply a project file.
[ ] Confluent.Kafka nuget version. ----1.8.2
[ ] Apache Kafka version.  -----2.8.0
[ ] Client configuration.
[ ] Operating system.
[ ] Provide logs (with "debug" : "..." as necessary in configuration).
[ ] Provide broker log excerpts.
[ ] Critical issue.

Do the reported topics exist on the cluster, or are you relying on auto-create in the consumer for it to be created?
In the latter case, we recommend having the producers create the topics (or create them manually). The consumers will discover the topics within topic.metadata.refresh.interval.ms when they are created.

Do the reported topics exist on the cluster, or are you relying on auto-create in the consumer for it to be created?

Thank you.
we are relying on auto-create in the consumer for it to be created as of now with earlier version. what will be the best practice to create the topics.
As per one of your blog, current version will not trigger the topic creation in consumer side. Any suggestion to handle this exception in consumer side?
This topic.metadata.refresh.interval.ms property value, we are not using explicitly and in docs it's showing 30000ms by default. But my case i am continuously getting this error. what will be appropriate value for this property?

Right, the consumer will only create topics (if allow.auto...=true) for topic it references directly through assign().
Subscribed topics will not be auto-created.
The recommended workaround is to explicitly create your topic through the AdminAPI CreateTopics(). This also allows you to specify the replication-factor and partition count.

In the latter case, we recommend having the producers create the topics (or create them manually). The consumers will discover the topics within topic.metadata.refresh.interval.ms when they are created.

If I am following this, ideally it should be create the topics whenever some request coming to producers. I have observed in some requests topics are not creating due to this it's failing.


[Storage] What is storage-library-test-bucket?

Storage client library contains system test that tries to access storage-library-test-bucket. As I understand, it's a public bucket. But I cannot find it in Storage browser, and all attempts to access it using URL or client library end in 404 responses.
Does this bucket really exist? Maybe it's an access control issue?

We have created a new bucket with the same information as the old one, which was apparently deleted. See googleapis/google-cloud-dotnet#5548.
We only need the service account you use to run the affected tests so we can give it permissions on the new bucket. Please don't share that info publicly in GitHub, share it internally instead.

@amanda-tarafa, does this bucket contain any sensitive data? If it doesn't, why not make it readable to everyone?

It doesn't, but we have some internal restrictions and we try to avoid public buckets as much as we can. If this were to be a reasonable blocker, we could consider making it public, but it'll take some time.

Hey @dwsupplee is this blocking integration testing for the Storage client?

No, it doesn't block our tests.
Closing this issue.


Fixed typo for Docker Desktop version <IP_ADDRESS>196.

[x] Have you signed the Contributor License Agreement?
[x] Have you checked that there aren't other open pull requests for the same manifest update/change?

[x] Does your manifest conform to the 1.0 schema?

Note: <path> is the name of the directory containing the manifest you're submitting.

Microsoft Reviewers: Open in CodeFlow

/azp run


Web API URL and versioning

In the section https://learn.microsoft.com/en-us/power-apps/maker/portals/web-api-http-requests-handle-errors#web-api-url-and-versioning, it mentions that the "Name of the table you want to use" is referenced in building the URL, however it is the entityset name, which is typically in the format <logical_name> suffixed with s, so for e.g. for the OOB case entity it will be incidents.

Resource
Name of the table you want to use

For example, use this format when referring a case:https://contoso.powerappsportals.com/_api/case

Document Details
⚠ Do not edit this section. It is required for learn.microsoft.com ➟ GitHub issue linking.

ID: a7ca158c-3855-9a0d-2013-64e40e8394a4
Version Independent ID: 7391cc0b-5bf6-db8f-6bbb-c0a618567053
Content: Compose HTTP requests and handle errors for portals Web API - Power Apps
Content Source: powerapps-docs/maker/portals/web-api-http-requests-handle-errors.md
Service: powerapps
Sub-service: portals
GitHub Login: @neerajnandwana-msft
Microsoft Alias: nenandw

Thank you for your feedback. The documentation has been updated.


Post our GESIS blog post on social media

https://2i2c.org/blog/2024/jupyterhub-binderhub-gesis/ has been published now, but needs to be posted on our various social media accounts. We don't currently have a written down process for this. I'd like us to post this out without waiting for a process to be written down, but just flagging it.

Write out the blurb to be posted
Post it.

I can probably help with (1) but would need someone else to do (2).

We should also tag our partners - https://github.com/2i2c-org/2i2c-org.github.io/pull/205#issuecomment-1890152748 from @arnim lists them.

Here's a quick pass on a blurb:
Twitter/X and Mastodon (short form, 280 & 500 characters respectively)

Do you enjoy the simplicity of sharing your Jupyter Notebooks on BinderHub but also use it to customise software envs for interactive computing w/ persistent storage on the cloud? What if we combined it with JupyterHub? Read on to find out more 🔍 https://2i2c.org/blog/2024/jupyterhub-binderhub-gesis/

With thanks to @gesis_org @nfdi4ds @CESSDA_Data #openscience #opensource #reproducibility

LinkedIn, etc. (long form)

Do you enjoy the simplicity of sharing your Jupyter Notebooks on BinderHub but wish you could also use it to customise software environments for interactive computing (and with persistent storage!) on the cloud? What if we integrated BinderHub and JupyterHub together to empower users to manage their own environments without the need to rely on the JupyterHub admin? Read our blog post to find out more!

@yuvipanda I can post on all 2i2c social media once you approve the blurb text 📮

@jnywong that's an amazing blurb! Please do post.

Done!

LinkedIn https://www.linkedin.com/feed/update/urn:li:activity:7153822966114381824
Twitter/X https://x.com/2i2c_org/status/1748056493180453043?s=20
Mastodon https://hachyderm.io/@2i2c_org/111778471452210633

🎉

Amazing work, thank you so much @jnywong!

@jnywong do you think you can tag the partners on twitter? I don't know if they have mastodon accounts, but I think they may have twitter ones?
/cc @arnim - do you know if there are any with mastodon accounts?

There are mastodon accounts
<EMAIL_ADDRESS><EMAIL_ADDRESS>and<EMAIL_ADDRESS>Didn't share them since I assumed you would do twitter & co.  and I would mastodon to share this a bit. Would you mind if I do the mastodon thing?

@arnim please go for it! We'll also edit ours later to include the partner mastodon links.

And my mastodon post 🎉
Feel free to share :)
https://mas.to/@arnim/111779246189215252

Okay nice, thanks for the Mastodon post!

@jnywong do you think you can tag the partners on twitter?

Nw Yuvi, that was done in the original post 😄

@jnywong ah ty! My network blocks were far too strong for me to check :)
And thank you so much for getting these out!


Take into account of parent transforms

@mrbean-bremen Re-run?

What kind of SVG will this PR improve ?

@H1Gdev
<svg viewBox="0 0 100 100">
  <text transform="translate(10 30)">
    <tspan id="target">ABC</tspan>
  </text>
</svg>

Bounds of tspan from view box should match text

Thanks.
What happens with this SVG ?
<svg xmlns="http://www.w3.org/2000/svg" version="1.1" width="100" height="100">
  <text>
    <tspan transform="translate(10 30)">ABC</tspan>
  </text>
</svg>

Many major browsers don't show anything for this SVG. (transform in <tspan> seems to be ignored.)

 doesn't support transforms by itself, correct. But its bounds should use its parent transforms to result in same bounds for the  and  elements since they do represent the same text at the same location.

It doesn't seem to work properly with latest master, can it be fixed by merging this PR ?

Yes, this is what I aim to fix.

It doesn't seem to be fixed...
This SVG should not show anything because <tspan> transform is invalid.

In this case, it's the problem of the parser, and Bounds just takes information from the object tree. Out of scope.

<svg viewBox="0 0 100 100">
  <text transform="translate(10 30)">
    <tspan id="target">ABC</tspan>
  </text>
</svg>

This PR fixes this, and this only.

Hmm, actually this issue may exist across different element types, not just <tspan>.

Superceded by #945


Xamarin Forms Android fails due to AppDomain.CurrentDomain.BaseDirectory

Describe the bug
When using Microsoft.ApplicationInsights 2.12.0 on Xamarin Forms Android with Serilog.Sinks.ApplicationInsights configuring a Sink fails because on line 58 in file  https://github.com/microsoft/ApplicationInsights-dotnet/blob/develop/BASE/src/Microsoft.ApplicationInsights/Extensibility/Implementation/Platform/PlatformImplementation.cs
there is this:
configFilePath = Path.Combine(AppDomain.CurrentDomain.BaseDirectory, "ApplicationInsights.config");
AppDomain.CurrentDomain.BaseDirectory is null on Android.
I guess the Android project does not get caught in the #if NETSTANDARD on line 40 so when the read xml code runs it fails.
Probably could either add a catch for the exception thrown if path1 on Path.Combine is null or change the #if to include Android projects.
To Reproduce
Create a self-contained project using the template of your choice, apply the minimum required code to result in the issue you're observing.
We will close this issue if:

The repro project you share with us is complex. We can't investigate custom projects, so don't point us to such, please.
If we will not be able to repro the behavior you're reporting

For Immediate Support
For immediate support relating to the Application Insights .NET SDK we encourage you to file an Azure Support Request with Microsoft Azure instead of filing a GitHub Issue in this repository.
You can do so by going online to the Azure portal and submitting a support request. Access to subscription management and billing support is included with your Microsoft Azure subscription, and technical support is provided through one of the Azure Support Plans. For step-by-step guidance for the Azure portal, see How to create an Azure support request. Alternatively, you can create and manage your support tickets programmatically using the Azure Support ticket REST API

Making things worse, this continues to fire every 10 seconds or so which makes debugging Android projects nearly impossible.


Running v1.0.0

Hi all,
Due to some restrictions, I need to use v1.0.0 but it shows me the above error. Please suggest if v1.0.0 can be used or I'll have to stick to the latest/greater versions?

Hi @maneetgoyal of course this version is not maintained anymore. I can't imagine what restrictions do you have, but for security reasons and compatibility you need to use the latest version https://daedaluswallet.io/en/download/


unable to add postgresql as datasource

Traceback (most recent call last):
  File "/root/anaconda2/lib/python2.7/site-packages/superset/views/core.py", line 1376, in testconn
    engine.connect()
  File "/root/anaconda2/lib/python2.7/site-packages/sqlalchemy/engine/base.py", line 2091, in connect
    return self._connection_cls(self, **kwargs)
  File "/root/anaconda2/lib/python2.7/site-packages/sqlalchemy/engine/base.py", line 90, in __init__
    if connection is not None else engine.raw_connection()
  File "/root/anaconda2/lib/python2.7/site-packages/sqlalchemy/engine/base.py", line 2177, in raw_connection
    self.pool.unique_connection, _connection)
  File "/root/anaconda2/lib/python2.7/site-packages/sqlalchemy/engine/base.py", line 2151, in _wrap_pool_connect
    e, dialect, self)
  File "/root/anaconda2/lib/python2.7/site-packages/sqlalchemy/engine/base.py", line 1465, in _handle_dbapi_exception_noconnection
    exc_info
  File "/root/anaconda2/lib/python2.7/site-packages/sqlalchemy/util/compat.py", line 203, in raise_from_cause
    reraise(type(exception), exception, tb=exc_tb, cause=cause)
  File "/root/anaconda2/lib/python2.7/site-packages/sqlalchemy/engine/base.py", line 2147, in _wrap_pool_connect
    return fn()
  File "/root/anaconda2/lib/python2.7/site-packages/sqlalchemy/pool.py", line 328, in unique_connection
    return _ConnectionFairy._checkout(self)
  File "/root/anaconda2/lib/python2.7/site-packages/sqlalchemy/pool.py", line 766, in _checkout
    fairy = _ConnectionRecord.checkout(pool)
  File "/root/anaconda2/lib/python2.7/site-packages/sqlalchemy/pool.py", line 516, in checkout
    rec = pool._do_get()
  File "/root/anaconda2/lib/python2.7/site-packages/sqlalchemy/pool.py", line 1138, in _do_get
    self._dec_overflow()
  File "/root/anaconda2/lib/python2.7/site-packages/sqlalchemy/util/langhelpers.py", line 66, in __exit__
    compat.reraise(exc_type, exc_value, exc_tb)
  File "/root/anaconda2/lib/python2.7/site-packages/sqlalchemy/pool.py", line 1135, in _do_get
    return self._create_connection()
  File "/root/anaconda2/lib/python2.7/site-packages/sqlalchemy/pool.py", line 333, in _create_connection
    return _ConnectionRecord(self)
  File "/root/anaconda2/lib/python2.7/site-packages/sqlalchemy/pool.py", line 461, in __init__
    self.__connect(first_connect_check=True)
  File "/root/anaconda2/lib/python2.7/site-packages/sqlalchemy/pool.py", line 661, in __connect
    exec_once(self.connection, self)
  File "/root/anaconda2/lib/python2.7/site-packages/sqlalchemy/event/attr.py", line 246, in exec_once
    self(*args, **kw)
  File "/root/anaconda2/lib/python2.7/site-packages/sqlalchemy/event/attr.py", line 256, in __call__
    fn(*args, **kw)
  File "/root/anaconda2/lib/python2.7/site-packages/sqlalchemy/engine/strategies.py", line 172, in on_connect
    do_on_connect(conn)
  File "/root/anaconda2/lib/python2.7/site-packages/sqlalchemy/dialects/postgresql/psycopg2.py", line 643, in on_connect
    fn(conn)
  File "/root/anaconda2/lib/python2.7/site-packages/sqlalchemy/dialects/postgresql/psycopg2.py", line 618, in on_connect
    hstore_oids = self._hstore_oids(conn)
  File "/root/anaconda2/lib/python2.7/site-packages/sqlalchemy/util/langhelpers.py", line 785, in oneshot
    result = fn(self, *args, **kw)
  File "/root/anaconda2/lib/python2.7/site-packages/sqlalchemy/dialects/postgresql/psycopg2.py", line 652, in _hstore_oids
    oids = extras.HstoreAdapter.get_oids(conn)
  File "/root/anaconda2/lib/python2.7/site-packages/psycopg2/extras.py", line 904, in get_oids
    """ % typarray)
ProgrammingError: (psycopg2.ProgrammingError) column "typarray" does not exist
LINE 1: SELECT t.oid, typarray
                      ^

Which version of postgresql is this? Are you querying an hstore field? Please add the missing required field from the issue template!

what does your sqlalchemy connection string look like?


README

Update the readme for use.
USE SIZER instead of ResponsiveSizer()

we really need to update this otherwise a lot of ppl are trying the wrong class


element-web: fix jitsi

Description of changes
In https://github.com/NixOS/nixpkgs/pull/172928 the jitsi_external_api.min.js is throwed out of the window. Jitsi doesn't work anymore due to missing files.
https://github.com/vector-im/element-web/blob/2ea12ea68d35dcbe1a415970bde802be06ce9c60/src/vector/jitsi/index.html#L21
https://github.com/vector-im/element-web/blob/d7813c09d95e3a142f4e09a57483a39f8d1aa8c1/scripts/build-jitsi.js#L24

Things done

Built on platform(s)

[x] x86_64-linux
[ ] aarch64-linux
[ ] x86_64-darwin
[ ] aarch64-darwin

[ ] For non-Linux: Is sandbox = true set in nix.conf? (See Nix manual)
[ ] Tested, as applicable:

NixOS test(s) (look inside nixos/tests)
and/or package tests
or, for functions and "core" functionality, tests in lib/tests or pkgs/test
made sure NixOS tests are linked to the relevant packages

[ ] Tested compilation of all packages that depend on this change using nix-shell -p nixpkgs-review --run "nixpkgs-review rev HEAD". Note: all changes have to be committed, also see nixpkgs-review usage
[ ] Tested basic functionality of all binary files (usually in ./result/bin/)
22.11 Release Notes (or backporting 22.05 Release notes)

[ ] (Package updates) Added a release notes entry if the change is major or breaking
[ ] (Module updates) Added a release notes entry if the change is significant
[ ] (Module addition) Added a release notes entry if adding a new NixOS module
[ ] (Release notes changes) Ran nixos/doc/manual/md-to-db.sh to update generated release notes

[x] Fits CONTRIBUTING.md.

@sumnerevans

I thought we can but I don't know how.

Maybe it's as simple as ${jitsi-meet}/libs/external_api.min.js.

Good idea!

@Ma27 Could you please take a look?

This pull request has been mentioned on NixOS Discourse. There might be relevant details there:
https://discourse.nixos.org/t/prs-ready-for-review/3032/931


Bug when flutter pub get

Is there an existing issue for this?

[X] I have searched the existing issues

Package/Plugin version
last version
Flutter doctor
Because eureeca depends on flutter_form_builder from git which depends on intl ^0.17.0, intl ^0.17.0 is required.
So, because eureeca depends on intl ^0.18.1, version solving failed.
Minimal code example
Because eureeca depends on flutter_form_builder from git which depends on intl ^0.17.0, intl ^0.17.0 is required.
So, because eureeca depends on intl ^0.18.1, version solving failed.
Current Behavior
Because eureeca depends on flutter_form_builder from git which depends on intl ^0.17.0, intl ^0.17.0 is required.
So, because eureeca depends on intl ^0.18.1, version solving failed.
Expected Behavior
Because eureeca depends on flutter_form_builder from git which depends on intl ^0.17.0, intl ^0.17.0 is required.
So, because eureeca depends on intl ^0.18.1, version solving failed.
Steps To Reproduce
Because eureeca depends on flutter_form_builder from git which depends on intl ^0.17.0, intl ^0.17.0 is required.
So, because eureeca depends on intl ^0.18.1, version solving failed.
Aditional information
Because eureeca depends on flutter_form_builder from git which depends on intl ^0.17.0, intl ^0.17.0 is required.
So, because eureeca depends on intl ^0.18.1, version solving failed.

Duplicated


How to get the global adjacency matrix of routing graph?

Hi,
After building a routingGraph from lanletmaps, we can search following/previous/left/right lanelets of a target lanelet. But can we directly get the adjacency marix of the routingGraph? I want to do chain decompostion of a road network but don't know how to get the directed adjacency matrix? Or anything similar? Both C++ or python are ok.
Thank you!

The adjacency Matrix is an implementation detail that we are not exposing to the outside so that we can make changes under the hood in the future without affecting users (as we have already done in the past). Actually it's not even a matrix, rather a list.
I'd recommend you build your own adjacency matrix according to you needs, either by walking though the lanelets in your map and using the following/previous/left/right/adjacent accessors to get the edges or by using the exportGraphML and exportGraphviz exports and analyse that.


Limit number of characters in evidences title

When the name "filename" is too long (max to be defined), the evidence is not uploaded and there is no error in log when uploading to Jira.
Add a mechanism to limit the number of characters in filename to prevent this behavior

The limit is at 235 chars, extension included


Extracts of extracts create infinite loop rendering bug

@jlpereira when unprocessible entity returned then new extract task errors out.


Feature Request : Create Roles

Feature Request : Create Roles with rights for different nodes

Editor role (ACL) must be correct?

@arturmon
I don´t understandwhat you mean

I'm sorry, I can not understand. I thought the editor roles for the users.

user roles supported from 0.0.3-alpha1


"Password Expires" Setting prevents login

Bug Report
System Information

OS Version: Ubuntu 18.04.2 LTS
AMP Version: <IP_ADDRESS> (TITAN), built 05/07/2019 11:38
AMP Stream: Mainline

I confirm:

[x] that I have searched for an existing bug report for this issue.
[x] that I am using the latest available version of AMP.
[x] that my operating system is up-to-date.

Symptoms
What: I created another account like i was making another admin account for other people to manage the Instances with
Expectation: User can login and manage the Instances
Result: User cant login and gets given an error (Error below is the console output with log level 5)
[01:29:04] [Auth:Anonymous Activity] : Authentication attempt for user AUSsaultBird2454 from [IPAddress Redacted] [01:29:04] [APIService:Anonymous Warning] : Returned exception from API call Core/Login [01:29:04] [Core:Anonymous Error] : [0] (NullReferenceException) : Object reference not set to an instance of an object [01:29:04] [Core:Anonymous Error] :   at GSMyAdmin.WebServer.WebMethods.Login (m.Http.IHttpRequest request, GSMyAdmin.WebServer.WebSession session, String username, String password, String token, Boolean rememberMe)    at GSMyAdmin.WebServer.WebAttributes.InvokeMethod (String MethodName, Newtonsoft.Json.Linq.JObject Data, m.Http.IHttpRequest request, ModuleShared.IWebSession Session, ModuleShared.WebMethodsBase MethodsClass, String RawRequest)    at GSMyAdmin.WebServer.APIService.InvokeAPI (m.Http.IHttpRequest request, ModuleShared.IWebSession Session, Newtonsoft.Json.Linq.JObject Data, String RequestModule, String RequestMethod, String RawRequest)
Reproduction

Create another user account with the PasswordExpires setting enabled for the user
User can log in when this setting is not enabled as expected

Fix for this comes out in the next release.


This cookbook is not fully compatible with CentOS 7

Varnish is installed but configuration is generated in bad place.
I was installing Varnish 4 on CentOS 7.0 and found that configuration changes in /etc/sysconfig/varnish do not apply to varnish service. Ex. I switched storage to malloc but processes were still run with file:
# grep '\-s' /etc/sysconfig/varnish
              -s malloc,3G \

but:
# ps axu | grep varnish
root     26586  0.0  2.1<PHONE_NUMBER>0 ?        SLs  10:41   0:00 /usr/sbin/varnishd -P /var/run/varnish.pid -f /etc/varnish/default.vcl -a :6081 -T <IP_ADDRESS>:6082 -t 120 -u varnish -g varnish -S /etc/varnish/secret -s file,/var/lib/varnish/varnish_storage.bin,1G

On CentOS 7 systemd configuration for services are kept in:
# rpm -ql varnish | grep systemd
/usr/lib/systemd/system/varnish.service
/usr/lib/systemd/system/varnishlog.service
/usr/lib/systemd/system/varnishncsa.service

And varnish.service here looks like:
[Unit]
Description=Varnish a high-perfomance HTTP accelerator
After=syslog.target network.target

[Service]

#
# If you want to make changes to this file, please copy it to
# /etc/systemd/system/varnish.service and make your changes there.
# This will override the file kept at /lib/systemd/system/varnish.service
#
# Enviroment variables may be found in /etc/varnish/varnish.params
#

# Maximum number of open files (for ulimit -n)
LimitNOFILE=131072

# Locked shared memory (for ulimit -l)
# Default log size is 82MB + header
LimitMEMLOCK=82000

# Maximum size of the corefile.
 This was derived from
# the old style sysconfig/defaults settings

# Set this to 1 to make systemd reload try to switch vcl without restart.
RELOAD_VCL=1

# Main configuration file. You probably want to change it.
VARNISH_VCL_CONF=/etc/varnish/default.vcl

# Default address and port to bind to. Blank address means all IPv4
# and IPv6 interfaces, otherwise specify a host name, an IPv4 dotted
# quad, or an IPv6 address in brackets.
# VARNISH_LISTEN_ADDRESS=<IP_ADDRESS>
VARNISH_LISTEN_PORT=6081

# Admin interface listen address and port
VARNISH_ADMIN_LISTEN_ADDRESS=<IP_ADDRESS>
VARNISH_ADMIN_LISTEN_PORT=6082

# Shared secret file for admin interface
VARNISH_SECRET_FILE=/etc/varnish/secret

# Backend storage specification, see Storage Types in the varnishd(5)
# man page for details.
VARNISH_STORAGE="file,/var/lib/varnish/varnish_storage.bin,1G"

# Default TTL used when the backend does not specify one
VARNISH_TTL=120

# User and group for the varnishd worker processes
VARNISH_USER=varnish
VARNISH_GROUP=varnish

# Other options, see the man page varnishd(1)
#DAEMON_OPTS="-p thread_pool_min=5 -p thread_pool_max=500 -p thread_pool_timeout=300"

So for now support for CentOS 7 in your cookbook looks to be limited to Varnish installation :(
Could you update this configuration changes? Will it help if I prepare pull request with some changes?

Will it help if I prepare pull request with some changes?

hi @gagor . It will indeed! If you have a PR ready it will be faster (especially if you have tests)

I don't have anything for now but I have to face this problem on two varnish instances so I may prepare something that you may use. I hope to get this working later this day.

thanks a lot @gagor

I prepared something that at least will do most of the work for now.

I believe this should be addressed in #80 once it's merged

#80 has been merged. Going to close this.


I18N Support on extensions ?

Hi,
I'm working on an extension authoring and I've found a way to define translation keys on package.json (with package.nls.json) but I'm wondering how to do the same with my code and also start some translations (english/french).
I've didn't find anything about this in the documentation but maybe I'm missing something.
Best Regards,
Ioan

Please direct questions to http://stackoverflow.com/questions/tagged/vscode


Nightly Testing Report11/16/2020 10:25 AM

Nightly testing report.
Failures are detected in workflow(s)
This issue is generated at 11/16/2020 10:25 AM

Workflow
11/15

zip
failure

performance
skipped

performance-integration-tests
skipped

This issue is for testing purpose.

The zip failure building Database and Firestore is likely related to recent changes in the ZipBuilder. @ryanwilson is investigating.


Added request_id and global_request_id to CADF notifications

Request ID and global request ID have been added to CADF notifications.

Going to delay on this one, and get the test system cleaned up first to validate appropriately on my side.


Use lychee to fix broken links

TODO for future PR: run lychee in CI

I think this is basically blocked on making Vercel happy. I think some of the changes here broke it.
@nuke-web3 or @pdg744 could one of you get this working?

https://github.com/risc0/risc0/pull/1980 should fix it - vercel preview of that here: https://docs-website-mps8t8vwn-risczero.vercel.app/

few more issues in the IGNORED and EXCLUDED items in lychee . -vvv:

https://github.com/risc0/risc0/commit/e2bf5cb3ce524aab80e0054c911abc4c1bdf41cd#diff-ac318b37fce0b6640c0b734e233c60b4b4d48ec9d9cda5c53f488badc23077caR116 [IGNORED] pathname:///proof-system-in-detail.pdf | Unsupported: The given URI is invalid: pathname:///proof-system-in-detail.pdf  - I think this is an error? relative should be ok...
[EXCLUDED] http://<IP_ADDRESS>:8000/ui/flamegraph | Excluded - all localhost links likely are things we want to skip :thinking: in an integration testing env I would love to see these commands tested in building docs (pipe dream?)
#1982
https://dev.risczero.com/api/generating-proofs/remote-proving#api-limits mentions<EMAIL_ADDRESS>that I don't have access to and suggest we rm in this PR to point to discord.
twitter is hostile to anyone but "human" account holders https://github.com/lycheeverse/lychee/pull/1147 - suggest we remove direct links to anything twitter (you can't view without an account!)


Added 2 Examples to install-powershell.ps1 which fixes #10912

Fixes issue #10912

PR Summary
As noted in #10911 & #10912 there was no examples for using this script - this PR fixes that
PR Context

PR Checklist

[x] PR has a meaningful title

Use the present tense and imperative mood when describing your changes

[x] Summarized changes
[x] Make sure all .h, .cpp, .cs, .ps1 and .psm1 files have the correct copyright header
[x] This PR is ready to merge and is not Work in Progress.

If the PR is work in progress, please add the prefix WIP: or [ WIP ] to the beginning of the title (the WIP bot will keep its status check at Pending while the prefix is present) and remove the prefix when the PR is ready.

Breaking changes

[x] None
OR
[ ] Experimental feature(s) needed

[ ] Experimental feature name(s):

User-facing changes

[ ] Not Applicable
OR
[x] Documentation needed

[x] Issue filed:

Testing - New and feature

[x] N/A or can only be tested interactively
OR
[ ] Make sure you've added a new test if existing tests do not effectively test the code changed

Tooling

[x] I have considered the user experience from a tooling perspective and don't believe tooling will be impacted.
OR
[ ] I have considered the user experience from a tooling perspective and enumerated concerns in the summary. This may include:

Impact on PowerShell Editor Services which is used in the PowerShell extension for VSCode (which runs in a different PS Host).
Impact on Completions (both in the console and in editors) - one of PowerShell's most powerful features.
Impact on PSScriptAnalyzer (which provides linting & formatting in the editor extensions).
Impact on EditorSyntax (which provides syntax highlighting with in VSCode, GitHub, and many other editors).

@PoshChan Please remind me in 20 hours

@TravisEz13, this is the reminder you requested 20 hours ago

@kilasuit Can you merge or rebase to resolve the test issue?

@kilasuit looks like a bad merge?  I would suggest reverting to the commit prior to pulling master in and then do something like:
git pull upstream master

(assuming upstream points to PS/PS repo and not your fork)

Just incase others see this and fall foul to messy merges I needed to run this as my local repo's default upstream is my fork
git pull psrepo master -s recursive -X theirs

In case you need them for future reference, these might be useful in similar situations:

git merge upstream master (this one might be upstream/master depending on how git wants to do it? I don't recall exactly for this one)
git pull --rebase upstream master
git rebase -i upstream/master

(where upstream is the name of the remote that maps to the main PowerShell project, looks like yours was psrepo instead)

Closing this PR and opening another from a clean branch with the requested changes from this one


bug: protected branch: pull check

Gitea version: 1.12.0+dev-447-g123d38605
if you enable branch protection and leave all default beside "Enable Status Check" the pull merge-status is considderted as not mergable! (only force mergable via admin rights)
to reproduce:
A: enable branch protection
B: enable Status Check **with: no status checks found in the last week ..."
result:

user with write access:

user with admin access:

solution: either dont let status checks enable if there is no one or fix pull-check-mergable function

#10648 didnt close this!

you need 2 users.

Create a new repo (initialized)
change readme to new branch & open a pull request
add user2 to repo as colaborator with write permission
enable branch protection for master & set "Enable Status Check"
view pull with user2 you will see this:

Is this a UI problem?

look's like one - there is NO server error

stil here :(


Remove unnecessary call to ERR_load_crypto_strings().

It's already called as part of SSL_load_error_strings(),
and it's deprecated in BoringSSL and OpenSSL-1.1.0+.

@PiotrSikora can you sign the CLA per https://github.com/lyft/envoy/blob/master/CONTRIBUTING.md#cla
otherwise change looks good

(working on it, might take a while...)

CLA signed, code rebased on top of current master.


refactor(abigen): inline docs

Motivation

Solution

PR Checklist

[ ] Added Tests
[ ] Added Documentation
[ ] Updated the changelog
[ ] Breaking changes

error[E0599]: no function or associated item named `default` found for struct `seaport::BadContractSignature` in the current scope
   --> ethers-contract/tests/it/abigen.rs:649:73
    |
640 |     abigen!(Seaport, "./tests/solidity-contracts/seaport.json");
    |     ----------------------------------------------------------- function or associated item `default` not found for this struct
...
649 |     let err = SeaportErrors::BadContractSignature(BadContractSignature::default());
    |                                                                         ^^^^^^^ function or associated item not found in `seaport::BadContractSignature`
    |
    = help: items from traits can only be used if the trait is implemented and in scope
    = note: the following traits define an item `default`, perhaps you need to implement one of them:
            candidate #1: `std::default::Default`
            candidate #2: `tinyvec::array::Array`

Seems to have broken something here? @DaniPopes

looks like all infura keys are completely exhausted -.-
having #2075 would def help


Bake in RAM Usage in the Generated DSO

With this PR, the metadata in a DSO file using vm["_metadata"]() now have information about the upper bound RAM estimate on each function. As an example, the JSON string now is:
{
  "quantization": "q4f16_1",
  "model_type": "llama",
  "memory_usage": {
    "_initialize_effect": 0,
    "prefill": 136192,
    "softmax_with_temperature": 0,
    "decode": 218624
  },
  "params": [
    {"name": "model.embed_tokens.q_weight", "shape": [32000, 512], "dtype": "uint32"},
    {"name": "model.embed_tokens.q_scale", "shape": [32000, 128], "dtype": "float16"},
    ...
  ]
}

This helps the MLC runtime to better determine if a method is going to OOM and plan ahead, e.g. plan pre-allocated KVCache, accordingly.
The idea originates from @MasterJH5574's ancient PR that prints memory usage estimate as debugging information for demo purposes, and this PR further enhances it to IRModule-level attribute that can be used by the runtime.

CC: @MasterJH5574 @tqchen


[Req] Cloud Alpha Wireless

Not sure what's needed to identify them with the application, but was wondering if it were possible for the 300hr Wireless version to be added?

Same Request, but looks like pretty easy to do.

Sorry, forgot to reply to your original request but looks like I got lucky and someone else already did the work.
I should have the time to check the pull request and create a release+exe tomorrow. Just so you know I'm not ignoring this :)

yeah, i just looked for the device id, and which code it sends to the headset, and looking at response, the 3rd byte was 47, that was the exactly same number as reported by ngenuity as battery percentage,
since you did the hard part of creating the framework, all i had to do was put my half-baked hardcoded values on the buffer and everything worked fine 😝

Ty, both of you <3

You're welcome,
since i already had to do for my own,
not more fair than share back to the original repository

I made a release. Let me know if the zip works if you have the time :). All credit to Arthur of course!
Thanks in advance.

I built it earlier with his PR and it worked fine, using your release also works. Appreciate adding the support for it and for Arthur doing the work.

think this “issue” can be set to closed now
maybe i will open a few QoL ones later


add DYP, QI, and WALBT

need to edit once we have staking addresses

Looks good! Let's wait until there is some TVL staked in all pairs and merge


[ENH] Lookup table for idle current energy of known devices

I wonder if it would be appropriate to setup a list of known devices and their known idle power to lookup here instead of hardcoding 5W.
For instance, my POT_056905_WW-POT (AC) idles at 1W.
https://github.com/ollo69/ha-smartthinq-sensors/blob/45ca5373ee40c2afc7a3b1538fbbb4d07a9e3869/custom_components/smartthinq_sensors/wideq/ac.py#L1068

This look really complex to maintain in the time. It could be an integration option to allow set idle value for every device, also if I would avoid to create options if not really required. You can still create a calculated sensor in HA that will covert the value as you prefer when the device is off.