[Snyk] Security upgrade juicy-chat-bot from 0.6.6 to 0.8.0

This PR was automatically created by Snyk using the credentials of a real user.![snyk-top-banner](https://github.com/andygongea/OWASP-Benchmark/assets/818805/c518c423-16fe-447e-b67f-ad5a49b5d123)
Snyk has created this PR to fix 1 vulnerabilities in the npm dependencies of this project.
Snyk changed the following file(s):

package.json

Vulnerabilities that will be fixed with an upgrade:

Issue
Score

Regular Expression Denial of Service (ReDoS) SNYK-JS-ASYNC-7414156
  631

[!IMPORTANT]

Check the changes in this PR to ensure they won't cause issues with your project.
Max score is 1000. Note that the real score may have changed since the PR was raised.
This PR was automatically created by Snyk using the credentials of a real user.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.
For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic

Learn how to fix vulnerabilities with free interactive lessons:
🦉 Regular Expression Denial of Service (ReDoS)

Checkmarx One – Scan Summary & Details – de360f3c-e019-481a-b2ff-1bab7b0b3327
New Issues

Severity
Issue
Source File / Package
Checkmarx Insight

CVE-2015-9235
Npm-jsonwebtoken-0.1.0
Vulnerable Package

CVE-2015-9235
Npm-jsonwebtoken-0.4.0
Vulnerable Package

CVE-2016-1000223
Npm-jws-0.2.6
Vulnerable Package

CVE-2017-18214
Npm-moment-2.0.0
Vulnerable Package

CVE-2019-10744
Npm-lodash-2.4.2
Vulnerable Package

CVE-2019-10775
Npm-ecstatic-3.3.2
Vulnerable Package

CVE-2020-15084
Npm-express-jwt-0.1.3
Vulnerable Package

CVE-2020-8203
Npm-lodash-2.4.2
Vulnerable Package

CVE-2021-23337
Npm-lodash-2.4.2
Vulnerable Package

CVE-2021-3807
Npm-ansi-regex-2.1.1
Vulnerable Package

CVE-2022-23539
Npm-jsonwebtoken-0.1.0
Vulnerable Package

CVE-2022-23539
Npm-jsonwebtoken-0.4.0
Vulnerable Package

CVE-2022-23540
Npm-jsonwebtoken-0.1.0
Vulnerable Package

CVE-2022-23540
Npm-jsonwebtoken-0.4.0
Vulnerable Package

CVE-2022-24785
Npm-moment-2.0.0
Vulnerable Package

CVE-2022-25881
Npm-http-cache-semantics-3.8.1
Vulnerable Package

CVE-2022-25887
Npm-sanitize-html-1.4.2
Vulnerable Package

CVE-2022-3517
Npm-minimatch-3.0.4
Vulnerable Package

CVE-2023-26136
Npm-tough-cookie-2.5.0
Vulnerable Package

CVE-2023-32314
Npm-vm2-3.9.17
Vulnerable Package

CVE-2023-32695
Npm-socket.io-parser-4.0.5
Vulnerable Package

CVE-2023-37466
Npm-vm2-3.9.17
Vulnerable Package

CVE-2023-37903
Npm-vm2-3.9.17
Vulnerable Package

CVE-2023-42282
Npm-ip-2.0.1
Vulnerable Package

CVE-2023-46233
Npm-crypto-js-3.3.0
Vulnerable Package

CVE-2024-37890
Npm-ws-7.4.6
Vulnerable Package

CVE-2024-38355
Npm-socket.io-3.1.2
Vulnerable Package

CVE-2024-4068
Npm-braces-2.3.2
Vulnerable Package

Cx0b414307-5d4b
Npm-lodash-2.4.2
Vulnerable Package

Cx10578cb2-c0fc
Npm-cypress-9.7.0
Vulnerable Package

Cx89601373-08db
Npm-debug-3.2.7
Vulnerable Package

Cx89601373-08db
Npm-debug-2.6.9
Vulnerable Package

Cx8bc4df28-fcf5
Npm-debug-3.2.7
Vulnerable Package

Cx8bc4df28-fcf5
Npm-debug-4.3.1
Vulnerable Package

Cx8bc4df28-fcf5
Npm-debug-2.6.9
Vulnerable Package

Cx8bc4df28-fcf5
Npm-debug-4.3.5
Vulnerable Package

Cxb3ca64d2-9cd1
Npm-mocha-8.4.0
Vulnerable Package

Cxdca8e59f-8bfe
Npm-inflight-1.0.6
Vulnerable Package

Cxdd801a12-8c33
Npm-jsonwebtoken-0.1.0
Vulnerable Package

Cxdd801a12-8c33
Npm-jsonwebtoken-0.4.0
Vulnerable Package

Cxe299c2b0-ccc8
Npm-domutils-1.1.6
Vulnerable Package

Cxf6e7f2c1-dc59
Npm-yauzl-2.10.0
Vulnerable Package

Cxffc79d87-98d9
Npm-jws-0.2.6
Vulnerable Package

Missing User Instruction
/Dockerfile: 1
A user should be specified in the dockerfile, otherwise the image will run as root

SQL_Injection
/data/static/codefixes/loginJimChallenge_4.ts: 20
Attack Vector

SQL_Injection
/data/static/codefixes/loginAdminChallenge_1.ts: 20
Attack Vector

SQL_Injection
/data/static/codefixes/loginAdminChallenge_1.ts: 20
Attack Vector

SQL_Injection
/routes/login.ts: 36
Attack Vector

SQL_Injection
/routes/login.ts: 36
Attack Vector

SQL_Injection
/data/static/codefixes/dbSchemaChallenge_1.ts: 3
Attack Vector

SQL_Injection
/routes/search.ts: 21
Attack Vector

SQL_Injection
/data/static/codefixes/unionSqlInjectionChallenge_1.ts: 3
Attack Vector

SQL_Injection
/data/static/codefixes/dbSchemaChallenge_3.ts: 5
Attack Vector

SQL_Injection
/data/static/codefixes/unionSqlInjectionChallenge_3.ts: 3
Attack Vector

SQL_Injection
/data/static/codefixes/loginBenderChallenge_1.ts: 20
Attack Vector

SQL_Injection
/data/static/codefixes/loginBenderChallenge_1.ts: 20
Attack Vector

SQL_Injection
/data/static/codefixes/loginJimChallenge_4.ts: 20
Attack Vector

Stored_XSS
/data/static/codefixes/dbSchemaChallenge_1.ts: 6
Attack Vector

Stored_XSS
/data/static/codefixes/unionSqlInjectionChallenge_1.ts: 7
Attack Vector

Stored_XSS
/data/static/codefixes/dbSchemaChallenge_2_correct.ts: 8
Attack Vector

Stored_XSS
/data/static/codefixes/unionSqlInjectionChallenge_2_correct.ts: 8
Attack Vector

Stored_XSS
/data/static/codefixes/unionSqlInjectionChallenge_3.ts: 11
Attack Vector

Stored_XSS
/data/static/codefixes/dbSchemaChallenge_3.ts: 12
Attack Vector

Stored_XSS
/routes/search.ts: 24
Attack Vector

Stored_XSS
/data/static/codefixes/loginJimChallenge_4.ts: 21
Attack Vector

Stored_XSS
/data/static/codefixes/loginAdminChallenge_1.ts: 21
Attack Vector

Stored_XSS
/data/static/codefixes/loginBenderChallenge_1.ts: 21
Attack Vector

Stored_XSS
/routes/login.ts: 37
Attack Vector

Stored_XSS
/data/static/codefixes/loginBenderChallenge_1.ts: 21
Attack Vector

Stored_XSS
/data/static/codefixes/loginAdminChallenge_1.ts: 21
Attack Vector

Stored_XSS
/data/static/codefixes/loginJimChallenge_4.ts: 21
Attack Vector

Stored_XSS
/routes/login.ts: 37
Attack Vector

Stored_XSS
/routes/vulnCodeFixes.ts: 82
Attack Vector

Stored_XSS
/routes/vulnCodeFixes.ts: 82
Attack Vector

Stored_XSS
/routes/vulnCodeFixes.ts: 30
Attack Vector

CVE-2016-1000237
Npm-sanitize-html-1.4.2
Vulnerable Package

CVE-2016-4055
Npm-moment-2.0.0
Vulnerable Package

CVE-2017-16016
Npm-sanitize-html-1.4.2
Vulnerable Package

CVE-2018-16487
Npm-lodash-2.4.2
Vulnerable Package

CVE-2018-3721
Npm-lodash-2.4.2
Vulnerable Package

CVE-2019-1010266
Npm-lodash-2.4.2
Vulnerable Package

CVE-2020-28500
Npm-lodash-2.4.2
Vulnerable Package

CVE-2020-7639
Npm-eivindfjeldstad-dot-0.0.1
Vulnerable Package

CVE-2021-23566
Npm-nanoid-3.1.20
Vulnerable Package

CVE-2021-23771
Npm-notevil-1.3.3
Vulnerable Package

CVE-2021-26539
Npm-sanitize-html-1.4.2
Vulnerable Package

CVE-2021-26540
Npm-sanitize-html-1.4.2
Vulnerable Package

CVE-2021-32822
Npm-hbs-4.2.0
Vulnerable Package

CVE-2021-4231
<EMAIL_ADDRESS>Vulnerable Package

CVE-2022-23541
Npm-jsonwebtoken-0.1.0
Vulnerable Package

CVE-2022-23541
Npm-jsonwebtoken-0.4.0
Vulnerable Package

CVE-2022-33987
Npm-got-8.3.2
Vulnerable Package

CVE-2022-36313
Npm-file-type-11.1.0
Vulnerable Package

CVE-2022-36313
Npm-file-type-6.2.0
Vulnerable Package

CVE-2022-36313
Npm-file-type-4.4.0
Vulnerable Package

CVE-2022-36313
Npm-file-type-3.9.0
Vulnerable Package

CVE-2022-36313
Npm-file-type-5.2.0
Vulnerable Package

CVE-2022-41940
Npm-engine.io-4.1.2
Vulnerable Package

CVE-2023-28155
<EMAIL_ADDRESS>Vulnerable Package

CVE-2023-28155
Npm-request-2.88.2
Vulnerable Package

CVE-2023-32313
Npm-vm2-3.9.17
Vulnerable Package

CVE-2023-44270
Npm-postcss-7.0.39
Vulnerable Package

CVE-2024-21501
Npm-sanitize-html-1.4.2
Vulnerable Package

CVE-2024-28863
Npm-tar-4.4.19
Vulnerable Package

CVE-2024-4067
Npm-micromatch-3.1.10
Vulnerable Package

CVE-2024-4067
Npm-micromatch-4.0.7
Vulnerable Package

Container Capabilities Unrestricted
/docker-compose.test.yml: 7
Some capabilities are not needed in certain (or any) containers. Make sure that you only add capabilities that your container needs. Drop unnecessa...

Container Capabilities Unrestricted
/docker-compose.test.yml: 3
Some capabilities are not needed in certain (or any) containers. Make sure that you only add capabilities that your container needs. Drop unnecessa...

Cx3fe16d6b-d031
Npm-sanitize-html-1.4.2
Vulnerable Package

Cx5c009a1a-2054
Npm-moment-2.0.0
Vulnerable Package

Cx7c42edbf-d5f1
Npm-base64url-0.0.6
Vulnerable Package

Cx7d063416-6f02
Npm-sanitize-html-1.4.2
Vulnerable Package

Healthcheck Not Set
/docker-compose.test.yml: 3
Check containers periodically to see if they are running properly.

Healthcheck Not Set
/docker-compose.test.yml: 7
Check containers periodically to see if they are running properly.

Image Version Not Explicit
/Dockerfile: 1
Always tag the version of an image explicitly

Memory Not Limited
/docker-compose.test.yml: 3
Memory limits should be defined for each container. This prevents potential resource exhaustion by ensuring that containers consume not more than t...

Memory Not Limited
/docker-compose.test.yml: 7
Memory limits should be defined for each container. This prevents potential resource exhaustion by ensuring that containers consume not more than t...

Missing_HSTS_Header
/data/static/codefixes/dbSchemaChallenge_1.ts: 12
Attack Vector

NPM Install Command Without Pinned Version
/Dockerfile: 4
Check if packages installed by npm are pinning a specific version.

Security Opt Not Set
/docker-compose.test.yml: 7
Attribute 'security_opt' should be defined.

Security Opt Not Set
/docker-compose.test.yml: 3
Attribute 'security_opt' should be defined.

Unpinned Package Version in Apk Add
/Dockerfile: 3
Package version pinning reduces the range of versions that can be installed, reducing the chances of failure due to unanticipated changes

Angular_Usage_of_Unsafe_DOM_Sanitizer
/data/static/codefixes/restfulXssChallenge_3.ts: 45
Attack Vector

Angular_Usage_of_Unsafe_DOM_Sanitizer
/data/static/codefixes/restfulXssChallenge_4.ts: 59
Attack Vector

Angular_Usage_of_Unsafe_DOM_Sanitizer
/frontend/src/app/score-board/score-board.component.ts: 182
Attack Vector

Angular_Usage_of_Unsafe_DOM_Sanitizer
/data/static/codefixes/localXssChallenge_1.ts: 6
Attack Vector

Angular_Usage_of_Unsafe_DOM_Sanitizer
/data/static/codefixes/localXssChallenge_3.ts: 6
Attack Vector

Angular_Usage_of_Unsafe_DOM_Sanitizer
/data/static/codefixes/localXssChallenge_4.ts: 6
Attack Vector

Angular_Usage_of_Unsafe_DOM_Sanitizer
/data/static/codefixes/xssBonusChallenge_2.ts: 6
Attack Vector

Angular_Usage_of_Unsafe_DOM_Sanitizer
/frontend/src/app/about/about.component.ts: 85
Attack Vector

Angular_Usage_of_Unsafe_DOM_Sanitizer
/frontend/src/app/administration/administration.component.ts: 51
Attack Vector

Angular_Usage_of_Unsafe_DOM_Sanitizer
/frontend/src/app/administration/administration.component.ts: 66
Attack Vector

Angular_Usage_of_Unsafe_DOM_Sanitizer
/frontend/src/app/data-export/data-export.component.ts: 45
Attack Vector

Angular_Usage_of_Unsafe_DOM_Sanitizer
/frontend/src/app/last-login-ip/last-login-ip.component.ts: 36
Attack Vector

Angular_Usage_of_Unsafe_DOM_Sanitizer
/frontend/src/app/search-result/search-result.component.ts: 126
Attack Vector

Angular_Usage_of_Unsafe_DOM_Sanitizer
/frontend/src/app/search-result/search-result.component.ts: 152
Attack Vector

Angular_Usage_of_Unsafe_DOM_Sanitizer
/frontend/src/app/track-result/track-result.component.ts: 42
Attack Vector

Chown Flag Exists
/Dockerfile: 31
It is considered a best practice for every executable in a container to be owned by the root user even if it is executed by a non-root user, only e...

Cpus Not Limited
/docker-compose.test.yml: 7

More results are available on AST platform


Update Composer dependencies (2020-03-19-00-02)

Visual regression test passed!
View the visual regression test report


Change the VM move note details

In one note it says:
"You must disable disk encryption prior to moving the key vault to a new resource group or subscription."
Even if that's the right action, this is AKV's documentation and we should not be recommending things that are out of scope for our product/support team. Please remove the line.

Document Details
⚠ Do not edit this section. It is required for learn.microsoft.com ➟ GitHub issue linking.

ID: fc648f77-1e4c-2722-f3a5-8cbb7565a593
Version Independent ID: cfbf4697-6ddd-fdb9-b97e-875ecc21f9e7
Content: Azure Key Vault moving a vault to a different subscription
Content Source: articles/key-vault/general/move-subscription.md
Service: key-vault
Sub-service: general
GitHub Login: @msmbaldwin
Microsoft Alias: mbaldwin

@FabianGonzalez-MSFT
Thanks for your feedback! We will investigate and update as appropriate.

Hi @FabianGonzalez-MSFT
Thanks for your contribution. Please add your ideas in below link, so our production team can review it and update the same.
Ideas · Community (azure.com)

@FabianGonzalez-MSFT
We are going to close this thread, if there are any further questions regarding the documentation, please tag me in your reply and we will be happy to continue the conversation.

@FabianGonzalez-MSFT We are going to close this thread, if there are any further questions regarding the documentation, please tag me in your reply and we will be happy to continue the conversation.

@Naveenommi-MSFT this is not an idea, this is a doc feedback and I expect it to be reviewed by doc authors and adjusted as needed. The Ideas community you shared is not the right site for doc changes. Please send this to authors for reviewal.
@jlichwa FYI

/unresolve

@FabianGonzalez-MSFT
I Apologies for this, I've delegated this to content author @jlichwa, who will review it and offer their insightful opinions.

@jlichwa
Could you please review add comments on this, update as appropriate.

@Naveenommi-MSFT it is correct. We have CSS to provide feedback and our team with @msmbaldwin to review it.
@FabianGonzalez-MSFT in that particular case I would recommend to follow up with Jack Richins (who own encryption across Azure) who likely put that note based on customer feedback .

@FabianGonzalez-MSFT I hope the explanation helps that we provided that guidelines based on customer feedback to warn them before the Key VAult is moved.
#please-close


Improvements for Audio Subsystem tests

The problem you're addressing (if any)
AUD001.001 and AUD001.002 present inconsistent behavior. These two test are Ubuntu and Windows variants of audio detection.
AUD001.001 (Ubuntu) uses sysfs to peek a chip_name property from predefined path. This ignores if the device is actually used as output device, and presents the state more from kernel's perspective.
AUD001.002 (Windows) uses powershell to get audio devices, but this might fail, if no output device is available (HDMI display or other). This is closer to "user-space perspective".
Describe the solution you'd like
Match behavior of both these tests. In case of fail, we could notify user to make sure that proper device is connected.
Where is the value to a user, and who might that user be?
No response
Describe alternatives you've considered
Replace Get-WmiObject with Get-CimInstance, which is more modern according to MS Documentation. This however does not fix the issue.
There is also Get-PnpDevice which will detect all audio devices, no matter the device state.
Additional context
No response

Commit e37d38251ef763e269f986e8d161817a72d9dcce in a draft branch addresses this issue.


doc: Update package details

Increase package description
Make repo public so homepage can be reached

Closed with #6


inf and nan not supported

Infinity and Not-a-Number are described in the Float section of the TOML spec.
toml doesn't recognize them as floating point numbers and tries to use int for conversion as can be seen in this minimal example:
>>> toml.loads("""
... a = inf
... """)
Traceback (most recent call last):
...
[...]/site-packages/toml.py", line 664, in _load_value
    v = int(v)
ValueError: invalid literal for int() with base 10: 'inf'

Same error for nan, and also for arrays containing them.
I'm using toml 0.9.4.

Fixed on master, sorry for the noise.

This support should also be present in the latest release - toml 0.9.6 :)

Hm, I tried that, but it gave the same error. I think the relevant commit dates to before that release, but got merged after it and is not part of 0.9.6.


Document plan on how API can support auto-scaling and other auto* features

This issue tracks an evaluation of the API to make sure that it can support the use cases for auto-scaling and any other auto* features.
This issue should cover any API changes as well. Specific implementation changes should be tracked as separate issues.
cc @krousey @roberthbailey @mwielgus

cc @krzysztof-jastrzebski

/cc @krzysztof-jastrzebski

This issue was moved to kubernetes-sigs/cluster-api#50


[SPARK-42209][CORE][CONNECT] Introduce ExtendedConnectTest to make user can disable tests related to RemoteSparkSession selectively

What changes were proposed in this pull request?
This PR aims to add ExtendedConnectTest to disable tests related to RemoteSparkSession selectively.
Why are the changes needed?
RemoteSparkSession related tests need to be prepared shaded connect-server.jar, so this causes developers must to run sbt package or maven clean install -DskipTests to prepare shaded connect-server.jar before testing connect-client-jvm, it seems a little cumbersome, so this pr add a new test tag ExtendedConnectTest to make developers have the ability to disable relevant test cases through -Dtest.exclude.tags=org.apache.spark.tags.ExtendedConnectTest.
Does this PR introduce any user-facing change?
No
How was this patch tested?

Pass GitHub Actions
Manual test

SBT
build/sbt clean "connect-client-jvm/test" -Dtest.exclude.tags=org.apache.spark.tags.ExtendedConnectTest

[info] Run completed in 2 seconds, 416 milliseconds.
[info] Total number of tests run: 24
[info] Suites: completed 4, aborted 0
[info] Tests: succeeded 24, failed 0, canceled 0, ignored 0, pending 0
[info] All tests passed.

All tests passed and ClientE2ETestSuite skipped
Maven
build/mvn clean install -pl connector/connect/client/jvm -am -DskipTests
build/mvn clean test -pl connector/connect/client/jvm -Dtest.exclude.tags=org.apache.spark.tags.ExtendedConnectTest

Run completed in 964 milliseconds.
Total number of tests run: 24
Suites: completed 5, aborted 0
Tests: succeeded 24, failed 0, canceled 0, ignored 0, pending 0
All tests passed.

All tests passed and ClientE2ETestSuite skipped

If the repl dependency fixes the issue, I'd like to avoid this addition, @LuciferYang .

OK, I will close this one

Thank you for investing all issues and alternatives, @LuciferYang !

Thanks for your help and correction @dongjoon-hyun


fix: EGG_SERVER_ENV support for seuqlieze cli

https://github.com/eggjs/egg/issues/2060

Codecov Report

Merging #40 into master will not change coverage.
The diff coverage is n/a.

@@          Coverage Diff          @@
##           master    #40   +/-   ##
=====================================
  Coverage     100%   100%
=====================================
  Files           5      5
  Lines          37     37
=====================================
  Hits           37     37

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update 7b57739...809d695. Read the comment docs.


Retry connection establishment

if client appears before server which listens, this PR allows the client to wait for UCXPY_CONN_RETRY_PERIOD seconds, and retry connection establishment for a maximum of EP_CONN_MAX_RETRIES attempts.

# client
akvenkatesh@prm-dgx-10:~/ucx-py$ UCXPY_CONN_RETRY_PERIOD=2 UCX_MEMTYPE_CACHE=n UCX_RNDV_SCHEME=put_zcopy python3 tests/send-recv-py-obj.py -o cupy -s IP -p 13337
[1558033604.520057] [prm-dgx-10:81187:1]   rdmacm_iface.c:401  UCX  ERROR received event RDMA_CM_EVENT_UNREACHABLE. status = 1. Peer: IP:13337.
connection failed. Retrying in 2 seconds
[1558033606.523174] [prm-dgx-10:81187:1]   rdmacm_iface.c:401  UCX  ERROR received event RDMA_CM_EVENT_UNREACHABLE. status = 1. Peer: IP:13337.
connection failed. Retrying in 2 seconds
[1558033608.526044] [prm-dgx-10:81187:0]   rdmacm_iface.c:401  UCX  ERROR received event RDMA_CM_EVENT_UNREACHABLE. status = 1. Peer: IP:13337.
connection failed. Retrying in 2 seconds
about to reply
talk_to_server done

# server which arrives later
akvenkatesh@prm-dgx-10:~/ucx-py$ UCX_MEMTYPE_CACHE=n UCX_RNDV_SCHEME=put_zcopy python3 tests/send-recv-py-obj.py -o cupy
about to send
about to recv
server sent:  array([48, 48..., dtype=uint8) <class 'cupy.core.core.ndarray'>
server recv:  array([48, 48..., dtype=uint8) <class 'cupy.core.core.ndarray'>
talk_to_client done

@mrocklin or @rjzamora I'd appreciate a review when you get a chance.

@mrocklin Made some changes approximately along the lines we discussed. As it stands now, the client will keep trying every timeout seconds.

As it stands now, the client will keep trying every timeout seconds

Ah, sorry, the intent of timeout is "keep trying for timeout seconds, if you still haven't connected by then, then give up and raise an exception"
    async def connect(self, timeout=None):
        if timeout is not None:
            deadline = time() + timeout
        else:
            deadline = None
        while True:
            if try_to_connect():
                return self
            else:
                await gen.sleep(0.100)
                if time() > deadline:
                    raise TimeoutError("Failed to connect to %s after %f seconds" % (self.address, timeout))

@mrocklin Fixed the meaning of timeout. Any other comments?

You might consider a test for the timeout behavior
@pytest.mark.asyncio
async def test_timeout():
    with pytest.raises(TimeoutError) as info:
        start = time()
        await ucp.get_endpoint('<IP_ADDRESS>', 9999, timeout=0.1)

    assert time() < start + 2
    assert time() > start + 0.1
    assert "9999" in str(info.value)
    assert "<IP_ADDRESS>" in str(info.value)

@mrocklin Addressed your comments. Thanks!


encrypt the password

i found that the password of users is plain text, if one can get the iso ,he can get the password.
so,can this generator provide the password encrypted

i found that the password of users is plain text, if one can get the iso ,he can get the password. so,can this generator provide the password encrypted

Simply click the option to Obscure all account passwords in your autounattend.xml file with Base64

Simply click the option to Obscure all account passwords in your autounattend.xml file with Base64 located in the User Accounts section.

Yes, but note that this is not a proper encryption. An attacker will still be able to read the passwords, albeit with a little more effort.


DNS Resolution Debian 11 and 12 not working as expected - Name or Service not known

Hi together,
I am currently trying the selfhosted installation of netbird. So far everything is working properly, but I have some issues with the dns resolution.
It seems, that the dns resolver is not resolving the fqdn of connected peers under debian VMs.
I have some peers added to the netbird mesh but I am not able to reach a peer by its fqdn from the linux / debian hosts. On Android and Windows, I can call the peers via fqdn.
ping app.netbird.selfhosted
ping: app.netbird.selfhosted: Name or service not known

ssh app.netbird.selfhosted
ssh: Could not resolve hostname app.netbird.selfhosted: Name or service not known

Connecting via the overlay IP is working without issues:
ping <IP_ADDRESS>
PING <IP_ADDRESS> (<IP_ADDRESS>) 56(84) bytes of data.
64 bytes from <IP_ADDRESS>: icmp_seq=1 ttl=64 time=0.351 ms
64 bytes from <IP_ADDRESS>: icmp_seq=2 ttl=64 time=0.262 ms
^C
--- <IP_ADDRESS> ping statistics ---
2 packets transmitted, 2 received, 0% packet loss, time 1029ms

Also using  dig, the fqdn seems to resolve correctly:
dig app.netbird.selfhosted

; <<>> DiG 9.18.24-1-Debian <<>> app.netbird.selfhosted
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 4865
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;app.netbird.selfhosted.                IN      A

;; ANSWER SECTION:
app.netbird.selfhosted. 300     IN      A       <IP_ADDRESS>

;; Query time: 3 msec
;; SERVER: <IP_ADDRESS>#53(<IP_ADDRESS>) (UDP)
;; WHEN: Fri Jul 05 12:00:49 UTC 2024
;; MSG SIZE  rcvd: 78

/etc/resolv.conf
# Generated by NetBird
# If needed you can restore the original file by copying back /etc/resolv.conf.original.netbird

options timeout:4 attempts:1
search netbird.selfhosted local
nameserver <IP_ADDRESS>
nameserver <ip of my local dns server>
nameserver <IP_ADDRESS>

I recognized, that the resolv.conf only gets updated, if I reconnect the netbird agent after rebooting the VM (netbird down and up). I think this is caused by the proxmox hypervisor, that is applying the global dns settings for my proxmox hosts.
Can anyone help me to solve this issue?
Thanks and best regards,
Frank

@VanLampe If you configure the nameserver in the NetBird Dashboard then it should work well.

Hi @pappz,
I already tried to configure a nameserver for all peers, but that did not work:

to get my *.netbird.cloud hosts to resolve under systemd-resolved I set the following
where DNS is the ip address of my wt0 interface:

# /etc/systemd/network/20-eth0.network

[Match]
Name=eth0

[Network]
DHCP=ipv4
DNS=100.x.x.x
Domains=~netbird.cloud

[DHCPv4]
UseDNS=false

in my particular case possibly because I'm running netbird in privileged podman containers under MicroOS

@VanLampe can you share your original /etc/resolv.conf with us? we have a known bug with debian's resolvconf and it seems to be the case with your setup.

@mlsmaycon I have same error when i ping to other client from debian (Ex. ping ldap.overlay.netbird i got Name or service not known.
Looks like netbird not update my /etc/resolv.conf
# Dynamic resolv.conf(5) file for glibc resolver(3) generated by resolvconf(8)
#     DO NOT EDIT THIS FILE BY HAND -- YOUR CHANGES WILL BE OVERWRITTEN
# <IP_ADDRESS> is the systemd-resolved stub resolver.
# run "resolvectl status" to see details about the actual nameservers.

nameserver <IP_ADDRESS>

And i got error on /var/log/netbird/client.log
2024-07-23T09:19:54+07:00 ERRO client/internal/dns/server.go:196: removing resolvconf configuration for wt0 interface, error: exit status 99
2024-07-23T09:19:54+07:00 ERRO iface/bind/udp_mux_universal.go:93: error while reading packet: shared socked stopped
2024-07-23T09:19:56+07:00 WARN client/internal/dns/unclean_shutdown_unix.go:27: detected unclean shutdown, file /var/lib/netbird/resolv.conf exists
2024-07-23T09:19:56+07:00 WARN client/internal/dns/unclean_shutdown_unix.go:45: restoring unclean shutdown dns settings via previously detected manager: resolvconf
2024-07-23T09:19:56+07:00 ERRO client/internal/connect.go:124: checking unclean shutdown error: restore unclean shutdown backup: restoring dns for interface wt0: removing resolvconf configuration for wt0 interface, error: exit status 99
2024-07-23T09:19:58+07:00 WARN client/internal/engine.go:602: running SSH server is not permitted
2024-07-23T09:19:58+07:00 ERRO client/internal/dns/server.go:322: apply config: applying resolvconf configuration for wt0 interface, error: exit status 99
2024-07-23T09:19:58+07:00 WARN client/internal/dns/upstream.go:196: probing upstream nameserver <IP_ADDRESS>:53: write udp <IP_ADDRESS>:35236-><IP_ADDRESS>:53: write: required key not available
2024-07-23T09:19:58+07:00 WARN client/internal/dns/upstream.go:275: Upstream resolving is Disabled for 30s
2024-07-23T09:19:58+07:00 ERRO [nameservers: [{<IP_ADDRESS> udp 53}]] client/internal/dns/server.go:525: Failed to apply nameserver deactivation on the host: apply config: applying resolvconf configuration for wt0 interface, error: exit status 99
2024-07-23T09:20:08+07:00 ERRO [nameservers: [{<IP_ADDRESS> udp 53}], error: apply config: applying resolvconf configuration for wt0 interface, error: exit status 99] client/internal/dns/server.go:555: reactivate temporary disabled nameserver group, DNS update apply

And config from /var/lib/netbird/resolv.conf
# Dynamic resolv.conf(5) file for glibc resolver(3) generated by resolvconf(8)
#     DO NOT EDIT THIS FILE BY HAND -- YOUR CHANGES WILL BE OVERWRITTEN
# <IP_ADDRESS> is the systemd-resolved stub resolver.
# run "resolvectl status" to see details about the actual nameservers.

nameserver <IP_ADDRESS>

@VanLampe can you share your original /etc/resolv.conf with us? we have a known bug with debian's resolvconf and it seems to be the case with your setup.

Hi! I have the same problem.
$ ping server-1.netbird.cloud
ping: server-1.netbird.cloud: Name or service not known

$ cat /etc/resolv.conf
# Generated by NetBird
# If needed you can restore the original file by copying back /etc/resolv.conf.original.netbird

options timeout:4 attempts:1
search netbird.cloud .
nameserver <machine-netbird-ip>
nameserver <IP_ADDRESS>

Under systemd-resolved the DNS configuration doesn't really work.
Link X ()
    Current Scopes: DNS
         Protocols: +DefaultRoute -LLMNR +mDNS +DNSOverTLS
                    DNSSEC=no/unsupported
Current DNS Server: ...
       DNS Servers: ...
        DNS Domain: netbird.cloud

It only configures the search domain but no routing domain ~netbird.cloud

Hi together,
last weekend I completly reinstalled netbird and still experiencing the same DNS problems within my proxmox VMs.
I have also installed the netbird client on an external VPS outside my Proxmox hypervisor as a test. There the DNS resolution works wihtout issues (also debian os).
So it must be something with my proxmox DNS configuration.
I will play arround with the configuration and post an update here later.

After reinstalling netbird, I did not set a global nameserver for my peers again. After setting this, dns resolution is working fine now with the latest agents.
The resolv.conf is now also configured properly by the netbird agents. I have no idea, why it was working for my remote VPS without setting global nameserver - but nevermind.


add more unit tests to cover areas with low coverage

write unit tests to cover:

src/core/blockchain.cr
src/core/blockchain/dapps/indices.cr

done


Wrong indentation after single-line where and do

I realize this might not be good code style, but putting where or do blocks and their contents on a single line often makes the next line incorrectly indented.
instance Show A where show A = "A"
                      instance Show B where show B = "B"

run (Add a) = do modify (+a); get
                 run (Multiply a) = do modify (*a); get

Differentiating those cases from those where you do want the next line to be indented might be difficult though.

These cases are too hard to deal with in this plugin. This plugin is just an editing helper, not a perfect reformatter. There's no action to take for this issue so closing.

I noticed that I can't reproduce these cases.


Add 'user search'/autocomplete for member adding in Step2Form

Other minor cleanups aswell.

Need to look at the summary

Fixed ;)

Post to create_jira returns 422

You need to change email_short to email


Update message after finding CppInterOp

Check https://github.com/compiler-research/CppInterOp/pull/336

Codecov Report
All modified and coverable lines are covered by tests :white_check_mark:

Project coverage is 80.14%. Comparing base (e122401) to head (e1039a1).

Additional details and impacted files

@@           Coverage Diff           @@
##             main     #166   +/-   ##
=======================================
  Coverage   80.14%   80.14%
=======================================
  Files          19       19
  Lines         972      972
  Branches       93       93
=======================================
  Hits          779      779
  Misses        193      193

Closing and reopening so that CI runs again !

Merging as approved.


New Ory console

Preflight checklist

[X] I could not find a solution in the existing issues, docs, nor discussions.
[X] I agree to follow this project's Code of Conduct.
[X] I have read and am following this repository's Contribution Guidelines.
[X] This issue affects my Ory Network project.
[X] I have joined the Ory Community Slack.
[X] I am signed up to the Ory Security Patch Newsletter.

Describe the bug
The name where to add the new generic OIDC provider was in the old experience already a bit confusing, and now it is still a bit confusing.
Precisely, the name "Social Sign-in" does not really fit corporate use cases where a generic OIDC / "social sign-in" provider might be the company's Office 360 account.
In the old experience, this was incredibly confusing as a few menu items below there was a dedicated section for OIDC, so naturally, to set up a new OIDC provider, you'd go there but don't find the right place to configure a company's OIDC provider.
Now it's a bit better but still could be improved.
And especially when introducing SAML in the console, this would be really confusing IMO as I don't associate SAML to Social Sign-ins but consider OIDC and SAML a lot more related (from the user perspective, for the technical perspective that make sense yes)
Reproducing the bug
n/a
Relevant log output
No response
Relevant configuration
No response
Version
latest
On which operating system are you observing this issue?
None
In which environment are you deploying?
None
Additional Context
No response

I believe this has since been resolved - at least it's marked as solved internally.


[GOBBLIN-1141] add support for common job properties in helix job scheduler

Dear Gobblin maintainers,
Please accept this PR. I understand that it will not be reviewed until I have checked off all the steps below! @yukuai518  please review
JIRA

[x] My PR addresses the following Gobblin JIRA issues and references them in the PR title. For example, "[GOBBLIN-XXX] My Gobblin PR"

https://issues.apache.org/jira/browse/GOBBLIN-1141

Description

[x] Here are some details about my PR, including screenshots (if applicable):

It makes GobblinHelixJobScheduler save common job configs and apply them to every job it receives.
This way, we can handle common configs at one place.

does some minor codestyle changes which includes unnecessary to and fro conversions of Properties and Config

Tests

[x] My PR adds the following unit tests OR does not need testing for this extremely good reason:
trivial changes

Commits

[x] My commits all reference JIRA issues in their subject lines, and I have squashed multiple commits if they address the same issue. In addition, my commits follow the guidelines from "How to write a good git commit message":

Subject is separated from body by a blank line
Subject is limited to 50 characters
Subject does not end with a period
Subject uses the imperative mood ("add", not "adding")
Body wraps at 72 characters
Body explains "what" and "why", not "how"

Codecov Report

Merging #2977 into master will decrease coverage by 0.94%.
The diff coverage is 100.00%.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update 3624a4f...4df452e. Read the comment docs.

+1 LGTM


is not None is not working properly | #2kwfzpx

Summary or solution description
Made x is None and x is not None have the same behaviour as isinstance(x, None) and not isinstance(x, None).
How to Reproduce
https://github.com/CityOfZion/neo3-boa/blob/3d55492bb6ee826e2dcd1dfe08a923f579c56fff/boa3_test/test_sc/if_test/IfIsNone.py#L1-L15
https://github.com/CityOfZion/neo3-boa/blob/3d55492bb6ee826e2dcd1dfe08a923f579c56fff/boa3_test/test_sc/if_test/IfIsNotNone.py#L1-L15
Tests
https://github.com/CityOfZion/neo3-boa/blob/3d55492bb6ee826e2dcd1dfe08a923f579c56fff/boa3_test/tests/compiler_tests/test_if.py#L674-L690
Platform:

OS: Windows 10 x64
Python version: Python 3.7

(Optional) Additional context
Bugs regarding isinstance(x, None) and not isinstance(x, None) were not fixed and identity operations now have the same problems.
E.g.: it was necessary to replace the identity operation inside the if with another variable outside. Changing if from_address is not None: to if not isinstance(from_address) on the dev branch results in the same error.
https://github.com/CityOfZion/neo3-boa/blob/3d55492bb6ee826e2dcd1dfe08a923f579c56fff/boa3_test/examples/htlc.py#L136-L144

Task linked: CU-2kwfzpx is not None is not working properly


DocsArchive-<IP_ADDRESS>Auto archive content

Please don't merge this PR until target archive repo PR https://github.com/OPS-E2E-PPE/docs-archive-test-target_6cbabb43-ce44-445a-bcc0-1b0dd0229cd7/pull/1 is merged into live branch.
Auto archive content to https://github.com/opstest2/docs-archive-test-target_6cbabb43-ce44-445a-bcc0-1b0dd0229cd7.git

Docs Build status updates of commit 648c040:
:x: Validation status: errors
Please follow instructions here which may help to resolve issue.

File
Status
Preview URL
Details

:x:Error

Details

[Error-GitBranchDeletedOrForcePushed] Cannot sync git repo to specified commit because branch Release_Archive_master_2021-06-02-05-12-44 has been deleted or has been force pushed

For more details, please refer to the build report.
If you see build warnings/errors with permission issues, it might be due to single sign-on (SSO) enabled on Microsoft's GitHub organizations. Please follow instructions here to re-authorize your GitHub account to Docs Build.
Note: Broken links written as relative paths are included in the above build report. For broken links written as absolute paths or external URLs, see the broken link report.
Note: Your PR may contain errors or warnings unrelated to the files you changed. This happens when external dependencies like GitHub alias, Microsoft alias, cross repo links are updated. Please use these instructions to resolve them.
For any questions, please:Try searching the docs.microsoft.com contributor guidesPost your question in the Docs support channel


[BUG] Node js crashes when throwing an error inside a controller with UseAuth applied on class

Information

Version: 5.44.17
Packages:

 "dependencies": {
    "@sentry/node": "^5.26.0",
    "@sentry/tracing": "^5.26.0",
    "@tsed/common": "5.44.17",
    "@tsed/core": "5.44.17",
    "@tsed/di": "5.44.17",
    "@tsed/socketio": "^5.44.17",
    "@tsed/swagger": "5.44.17",
    "@tsed/testing": "5.44.17",
    "@tsed/typeorm": "5.44.17",
    "body-parser": "1.19.0",
    "compression": "1.7.4",
    "connect-typeorm": "^1.1.4",
    "cookie-parser": "1.4.4",
    "cookie-session": "^1.4.0",
    "cors": "2.8.5",
    "dotenv": "^8.2.0",
    "express": "4.17.1",
    "express-session": "^1.17.1",
    "google-auth-library": "^6.1.2",
    "method-override": "^3.0.0",
    "mysql": "^2.18.1",
    "node-cron": "^2.0.3",
    "pm2": "^4.2.3",
    "serve-static": "^1.13.1",
    "socket.io": "^2.3.0",
    "ts-httpexceptions": "^4.1.0",
    "typeorm": "0.2.24",
    "typeorm-naming-strategies": "^1.1.0",
    "typeorm-static": "^1.1.1"
  },
  "devDependencies": {
    "@types/chai": "4.2.10",
    "@types/chai-as-promised": "7.1.2",
    "@types/cors": "2.8.6",
    "@types/express": "4.17.3",
    "@types/http-proxy": "^1.16.2",
    "@types/mocha": "7.0.2",
    "@types/node": "13.9.1",
    "@types/node-cron": "^2.0.3",
    "@types/request-promise": "^4.1.42",
    "@types/sinon": "7.5.2",
    "@types/sinon-chai": "3.2.3",
<EMAIL_ADDRESS>"^2.1.11",
    "@types/supertest": "2.0.8",
    "@types/swagger-schema-official": "2.0.20",
    "chai": "4.2.0",
    "chai-as-promised": "^7.1.1",
    "concurrently": "5.1.0",
    "mocha": "7.1.0",
    "nyc": "15.0.0",
    "prettier": "^2.0.4",
    "pretty-quick": "^2.0.1",
    "rimraf": "^2.6.2",
    "sinon": "9.0.1",
    "sinon-chai": "3.5.0",
    "supertest": "4.0.2",
    "ts-node-dev": "^1.0.0-pre.44",
    "tsconfig-paths": "^3.9.0",
    "tslint": "6.1.0",
    "tslint-config-prettier": "^1.18.0",
    "typescript": "^3.8.3"
  }

If there is a UseAuth at class level, nodejs crashes when an error is thrown in any of the endpoints inside the controller. now if I move the UseAuth at endpoint level as in below the @Post, it doesn't crash.
I was at Node V12 a while ago but I upgraded to Node v14.15.3 to see if the error is fixed but it's not
Example
@Controller('/payments')
@UseAuth(EnsureAuthenticed, { role: Role.SUPER_USER })
export class PaymentCtrl {
  constructor(
    private invoiceRepository: InvoiceRepository,
    private invoicePaymentRepository: InvoicePaymentRepository,
    private agreementPaymentRepository: AgreementPaymentRepository,
    private companyCreditRepository: CompanyCreditRepository
  ) {}

  @Post('/invoice')
  async addInvoicePayment(@BodyParams() body: InvoicePayment) {
    const unpaidAmount = await this.invoicePaymentRepository.getUnpaidAmount(
      body.invoiceId
    );

    if (unpaidAmount <= 0) {
      throw new BadRequest('Invoice is already paid');
    }
...

 For me there is no issue, the decorator works as expected. I think it's related to your env and the middleware implementation itself. The stack error isn't conventional ^^
See you
Romain


dependency-check-report.html is not being generated with aggregate goal and modules option

Describe the bug
Running org.owasp:dependency-check-maven:5.2.0:aggregate goal on project generates single HTML report, while adding -pl module1, module2,... -am does not.
Version of dependency-check used
maven plugin 5.2.0
Are there any undocumented limitations about that?

does that also happen with a current version of the plugin?
does your parent pom have all modules listed?

Found that problem solves with adding final module name (from root pom.xml). Guess it is not the problem of OWASP, but some documentation update seems to be required.
Can I help with that somehow?

We accept PRs - the documentation is in the repo. If something is unclear or a tip can be added - please submit a PR.
Thanks!

@jeremylong - can you pinpoint the exact path to documentation, or should I make PR for README in root?

Each src/site directory contains the markdown used to generate the documentation site: https://jeremylong.github.io/DependencyCheck/
Maven documentation: https://github.com/jeremylong/DependencyCheck/tree/master/maven/src/site/markdown
Main page: https://github.com/jeremylong/DependencyCheck/tree/master/src/site/markdown


Mod description page

Pondering text update for Steam Workshop page (not any time soon, probably want to get the UI stuff done first).

I'm using github blockquotes to represent steam quote panels

Realistic road and rail traffic for your city - traffic uses all lanes, and follows the rules you set.

Unsubscribe the old Traffic Manager mod first. Your old settings and customisations will still work!
Incompatible Mods • Report a bug • User Guide

(date of latest change) - (very brief summary) More info...

Control your traffic
Set speed limits and vehicle restrictions, edit traffic lights and lane arrows, road rules...
(gif)
Split passenger and cargo trains
Sort trains on to different routes, make cargo trains yield to passenger trains...
(gif)
Extreme parking
It's like watching paint dry, only more extreme. Who knew parking could be so much fun?!
(gif)
Reckless drivers
Watch in horror as some drivers ignore traffic lights, speed limits and vehicle restrictions...
(gif)
Only use what you need
Disable features you don't use - the mod instantly recompiles itself to remove unwanted code to get the best possible performance.

Thanks.
I'm still fighting with those lane connections... 😕

@krzychu124 could we get description of LABS updated to following bbcode:
Realistic road and rail traffic for your city - traffic uses all lanes and follows the rules you set.

[quote]
[h1]LABS is where we beta test new features and bug fixes for Traffic Manager.[/h1]

[list]
[*] [LABS](https://steamcommunity.com/sharedfiles/filedetails/?id=1637663252) might contain bugs, but they are usually fixed quickly
[*] [STABLE](https://steamcommunity.com/sharedfiles/filedetails/?id=583429740) is more reliable, but gets updated much less frequently
[*] [b]Only use one version at a time - unsubscribe the other to avoid conflicts![/b]
[/list]

[url=https://steamcommunity.com/workshop/filedetails/discussion/1637663252/1678063648163943780/]Incompatible mods[/url] • [url=https://steamcommunity.com/linkfilter/?url=https://discord.gg/faKUnST]Discord chat[/url] • [url=https://tmpe.viathinksoft.com/wiki/index.php?title=Main_Page]User guide[/url]
[/quote]

[quote]
[h1]Version %whatever%:[/h1]

[list]
[*] %Release notes%
[/list]

[url=https://github.com/krzychu124/Cities-Skylines-Traffic-Manager-President-Edition/wiki/Report-a-Bug]Report a Bug[/url] • [url=https://github.com/krzychu124/Cities-Skylines-Traffic-Manager-President-Edition]Source Code[/url] • [url=https://github.com/krzychu124/Cities-Skylines-Traffic-Manager-President-Edition/wiki/Contributing]Contribute or Translate[/url]
[/quote]

Notable features:

Text intro first = shown in workshop tooltips
Shrunk everything down to two boxes
Fewer links, more gestalt :)

Note; Sometimes list and quote tags insert extra blank lines so the bbcode might need tweaking after update.

Made obsolete by #432


Output getting cut

As you can see from the image, stdout is getting cut after the first link it finds. I've noticed this happens a lot when there are multiple links found. The last link is the one that tends to get cut from my recollection.

I think I fixed it in the latest release (not exactly sure what precisely was the issue, but whatever)
Test it out and let me know/close the issue if it's fixed <3

You fixed it, but brought another issue. Now the window closes despite not having it as an active window and doing any sort of IO whether it's keyboard or mouse.
Case 1: Minimized tbf while it was searching. I about using my computer as per usual and noticed the window suddenly disappeared.
Case 2: Left tbf opened while it was searching. Upon finishing the search, I clicked anywhere on my screen and it just closed.

Ah, I think I found the issue: the crossterm library added the FocusGained and FocusLost events in the 0.25.0 update, and since my any_key_to_continue function just fires on any event, it closed the program on resize/focus change/etc.

Seems resolves now, thank you.

Seems like this is still happening whenever you get the following error,

Got the URL and it was NOT available on Twitch servers :(

Same issue as above where the window doesn't have to be focused but it will still listen for any events.

I can't seem to reproduce it:
https://user-images.githubusercontent.com/41237021/189074161-037b9e06-ed67-46d1-9c5a-62216f5e3a9e.mp4
Could you provide the specific URL you were trying out (or just the specific arguments, if you used a different function)? Might be something else that's unrelated to the event thing.

URL: https://streamscharts.com/channels/robcdee/streams/46104241165
https://user-images.githubusercontent.com/6964154/189077119-d019963b-c85c-4978-8589-f60a275bf921.mp4

Ah, I think I know what's up! You're using your PR branch with the StreamsCharts timestamp changes, but it doesn't have the commit that fixed the issue Hhhhehehehe
https://github.com/Infinitay/tbf/blob/streamscharts-exact-timestamps/src/util.rs#L69 vs https://github.com/vyneer/tbf/blob/main/src/util.rs#L57

The issue is on my end. I forgot that I re-downloaded the GitHub release and that it wasn't from the most recent commit that fixed this. Furthermore, when I tested it with my branch with the new exact timestamp feature, I noticed just now that my branch wasn't up to date either. Just fetched and rebased and is working just fine.
My apologies.

No worries! ❤


Adding Header Image to Classical Shadows Demo

Before submitting
Please complete the following checklist when submitting a PR:

[ ] Ensure that your tutorial executes correctly, and conforms to the
guidelines specified in the README.

[ ] Add a thumbnail link to your tutorial in beginner.rst, or if a
QML implementation, in implementations.rst.

[ ] All QML tutorials conform to
PEP8 standards.
To auto format files, simply pip install black, and then
run black -l 100 path/to/file.py.

When all the above are checked, delete everything above the dashed
line and fill in the pull request template.

Title:
Summary:
Relevant references:
Possible Drawbacks:
Related GitHub Issues:

@co9olguy This pull request adds the cartoon image to the header. Can you review?


Skip sub-projects of deselected projects

From documentation:
Since 3.10.1, "deselected" projects (mvn -pl !...) that contain changes will not be built, but their up- and downstream projects will be built (if not also deselected).
The behaviour concerning sub-modules is not specified. In this example:
A

B < I want to ignore all projects under B

C
D < a file is changed here
E, F, G... Many many more sub-projects

When I run mvn -pl '!:B' -Dgib.disable=true, Maven reactor excludes all modules under B.
But when I run mvn -pl '!:B', gib sees that D is changed and builds it.
Is it a bug or intended behaviour? If that's intended it would be great to have a configuration option to change this behaviour.

Thanks for reporting this!
In your example, are C, D etc. referencing B as their parent or not? This makes a difference because Maven considers C a downstream module of B when there is such a parent relationship.

I tested this briefly and when there is such a parent relation, mvn -pl '!:X' does not exclude the sub-modules of X.

I tested this briefly and when there is such a parent relation, mvn -pl '!:X' does not exclude the sub-modules of X.

I am so sorry, you're right. During my manual tests I forgot to add the required profiles of the sub-modules... I don't know if there is a "Maven way" to achieve what I want (build everything except B and its sub-modules, without having to list all of them)

No worries!
Maven 4 will actually make -pl recursive, so that -pl B will build all its sub-modules and -pl !B with neither build B nor its sub-modules.
The old behavior can be brought back with -N -pl ....
The problem with a custom implementation is that all upstream/downstream calculation in GIB is currently based on Maven core DependencyGraph (well, except a part of the BOM support).
I'll leave this open for now and think about this a bit more...

@don-vip In case there is also a module X under A (sibling of B), that depends on B or any of its sub-modules: Would you expect GIB to build X in case B or any of its sub-modules is changed but B excluded (and its sub-modules are)?

Good question. It doesn't make sense in my project. If it was the case I think I would exclude X as well. So I don't know what would be the best choice for GIB behaviour here.

Well, not building X in that case is the complicated part because GIB would need to evaluate all of its upstream modules to figure out whether is should be excluded or not. A graph analysis so to say, which can be rather slow for big repos if not done cleverly.
Just excluding B and its sub-modules should be the ways easier part.
I think I'll have a look how Maven 4 alpha behaves but I suppose the new recursive behavior of -pl !... will not exclude dependencies...

Status: I didn't have the time to look into this in detail for 3.14.0 (which I will release today) but I think we'll need a new GIB property for this, e.g. -Dgib.excludeDownstreamModules=B or similar, probably with wildcard support.


Please help me to disable this change that was a recent pull request via css

⚠ Please verify that this bug has NOT been raised before.

[X] I checked and didn't find similar issue

🛡 Security Policy

[X] I agree to have read this project Security Policy

📝 Describe your problem
This recent pull request:
https://github.com/louislam/uptime-kuma/pull/3219
has altered how my status page looks and added a time value like ‘12 minutes ago’ to the page. Unfortunately this is not compatible with a screen size of a monitoring device I use and while I am sure I am in the minority of who would like to turn it off, and dont have anything against it, would appreciate anyone can tell me in the css what to add to remove it.
Many thabks in advance :)
kind regards
Peter
📝 Error Message(s) or Log
No response
🐻 Uptime-Kuma Version
1.23.0
💻 Operating System and Arch
Docker
🌐 Browser
Safari
🐋 Docker Version
No response
🟩 NodeJS Version
No response

What you want is this setting (no custom css needed):

This issue is tracked in https://github.com/louislam/uptime-kuma/issues/3596
=> could you close this issue?

Ok thank you. I guess I also have the same issue then where it still shows for me :)


[NEW]:

Date
2022-02/23
Description
Space Crypto, a new play-to-earn game that launched on Feb. 15, announced this wednesday (Feb. 23) that users won't be able to withdrawl all their reward tokens. Without previously informing investors, they decided that players won't be able to withdrawl the amount of reward tokens ($SPE) necessary to repair all their ships, essentially locking everyone in to artificially extend the game's life. They also decided that the token exchange rate would be 5 in-game tokens = 1 $SPE (again, without any of this being specified in the Whitepaper), essentially hiding the true amount of in-game currency needed for ROI right until the last minute. The community is almost entirely enraged at this point, and the $SPE token price is melting very fast.
Here are some messages from the devs:
🎉🎉🎉GOOD NEWS - YOU CAN WITHDRAW $SPE NOW
🎉Tutorial
-Hit to refresh page F5
-When withdraw Cick Max then subtract 0.01. Example if you click max and you get 10.84, you have to type 10.83 to withdraw.
🎉You need to hold at least 1 SPG to withdraw your SPEs -> SPE. The withdraw Ratio is 5 SPEs = 1 SPE
🎉THE REPAIR FEE FOR FIXING SPACESHIPS
Regarding the last announcement, the SPEs is used for SpaceShip Maintenance and will be locked for maintenance/fix spaceships in-game.
The amount of locked SPEs = your number of spaceships * fixing cost
Rarity             |      SPEs Repair Cost
Common        |        10
Rare               |        10
Super Rare    |        12
Epic               |        16
Legend          |        24
Mythical        |        36
🎉Example: A user has 20 commons and 1 legendary and 800 SPEs. The SPEs locked is: (2010) + (124) = 224 SPEs. The result of allowing withdraw will be 800 - 224 = 576 SPEs
#SpaceCrypto #Metaverse  #PlayToEarn #GameFi #NFTs

📣Please spend your 5 minutes to think about it

Some people said we scam - Dev DID NOT sell a single token, check the dev wallet. all of it is still locked. in fact we are still working hard day by day to solve the issues.
You have invested in the project => you MUST protect your own assets.

HOW?!? => STOP THE FUD, we know there were some mistakes and you're suffering, but we're on your side, think about it!
Links
$SPE token price history: https://poocoin.app/tokens/0x74da4412b2c70644929479f4d169325e9ce35ddb
official devs twitter: https://twitter.com/SpaceCryptoGame
their Telegram channel: https://t.co/EwNqhxmhVj
White Paper: https://docs.spacecrypto.io/guides/readme
Agreement

[X] I irrevocably agree to release my contribution under the CC-BY 3.0 License

Attribution name
No response
Personal link
No response

Thank you! https://web3isgoinggreat.com/?id=2022-02-23-3


Tool does not use passwords in .pgpass file

Standard operating procedure for postgres commandline tools that leverage libpq (such as psql, pg_dump, etc) is that they will look for a password in the .pgpass file in the home directory of the running user. This allows for interacting with databases without having to supply a password in the clear on the commandline. https://www.postgresql.org/docs/12/libpq-pgpass.html
I attempted to run the tool without supplying the password expecting it would leverage .pgpass, but that did not work:
2020-10-29 16:09:39,632	PGMigrate	ERROR	fe_sendauth: no password supplied

Traceback (most recent call last):
  File "/Users/nickwilson/git/aiven-db-migrate/aiven_db_migrate/migrate/pgmigrate.py", line 947, in validate
    if self.source.version > self.target.version:
  File "/Users/nickwilson/git/aiven-db-migrate/aiven_db_migrate/migrate/pgmigrate.py", line 161, in version
    self._version = LooseVersion(self.params["server_version"])
  File "/Users/nickwilson/git/aiven-db-migrate/aiven_db_migrate/migrate/pgmigrate.py", line 154, in params
    params = self.c("SHOW ALL")
  File "/Users/nickwilson/git/aiven-db-migrate/aiven_db_migrate/migrate/pgmigrate.py", line 139, in c
    with self._cursor(dbname=dbname) as cur:
  File<EMAIL_ADDRESS>line 113, in __enter__
    return next(self.gen)
  File "/Users/nickwilson/git/aiven-db-migrate/aiven_db_migrate/migrate/pgmigrate.py", line 121, in _cursor
    conn = psycopg2.connect(**conn_info)
  File "/usr/local/lib/python3.8/site-packages/psycopg2/__init__.py", line 127, in connect
    conn = _connect(dsn, connection_factory=connection_factory, **kwasync)
  File "/usr/local/lib/python3.8/site-packages/psycopg2/extras.py", line 778, in wait_select
    state = conn.poll()
psycopg2.OperationalError: fe_sendauth: no password supplied

Can you provide an example source connection string you have used please?

Sure, it's simply a connection string without the password included:
postgres://username@hostname:port/dbname?sslmode=require
This works fine with a properly configured .pgpass file when using other tools like psql


[Snyk] Security upgrade webpack-dev-middleware from 5.3.1 to 5.3.4

This PR was automatically created by Snyk using the credentials of a real user.Snyk has created this PR to fix one or more vulnerable packages in the `yarn` dependencies of this project.
Changes included in this PR

Changes to the following files to upgrade the vulnerable dependencies to a fixed version:

package.json
yarn.lock

Note for zero-installs users
If you are using the Yarn feature zero-installs that was introduced in Yarn V2, note that this PR does not update the .yarn/cache/ directory meaning this code cannot be pulled and immediately developed on as one would expect for a zero-install project - you will need to run yarn to update the contents of the ./yarn/cache directory.
If you are not using zero-install you can ignore this as your flow should likely be unchanged.
Vulnerabilities that will be fixed
With an upgrade:

Severity
Priority Score (*)
Issue
Breaking Change
Exploit Maturity

763/1000  Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 7.4
Path Traversal SNYK-JS-WEBPACKDEVMIDDLEWARE-6476555
No
Proof of Concept

(*) Note that the real score may have changed since the PR was raised.
Check the changes in this PR to ensure they won't cause issues with your project.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.
For more information:
🧐 View latest project report
🛠 Adjust project settings
📚 Read more about Snyk's upgrade and patch logic

Learn how to fix vulnerabilities with free interactive lessons:
🦉 Path Traversal

 Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.You have signed the CLA already but the status is still pending? Let us recheck it.


More than two auto_increment fields doesn't work

Hi,
I found a bug that more than 2 auto_increment field doesn't work due to @@incrementor variable.
So bugfixed.
Just changed @@incrementor class variable to incrementor variable like closure.
Thanks.
class DocumentA
include Mongoid::Document
auto_increment :seq, :seed => 10
end
class DocumentB
include Mongoid::Document
auto_increment :seq # this overwrote DocumentA's @@incrementor
end
DocumentA.create!.seq # => 1 # should be 11 but 1
DocumentA.create!.seq # => 2
DocumentB.create!.seq # => 3
DocumentB.create!.seq # => 4
DocumentB.create!.seq # => 5

Thanks for this fix.  That was a pretty nasty bug.  I wish I could remember why I used the @@incrementor variable in the first place, but it doesn't seem like it was ever necessary.
Anyways, I'll package up a new gem once I get some more testing in.
Thanks again!

I had to merge this manually for some reason, but your changes should be in master now.

Thanks a lot!
I updated my Gemfile for this gem.


(Maybe?) port binding generator to Rust libclang

The current binding generator in C++ is hard to compile and use, which increases friction if we want to upgrade PhysX version of expose more functionality.
I tried using the approximately equivalent Python libclang bindings to regenerate a 1:1 match of the current output but found that some info was missing around inheritance and fields, which would've lead to a complete breakage of physx-sys, which would be a hard sell.
We should investigate whether the Rust libclangd can be used to generate a more similar version of the bindings and struct-tests.

Has bindgen been looked at? It can generate C++ bindings with the major restrictions being around templates.

Ping @h3r2tic, hopefully he knows. :-)

Yup! It was the first thing I tried, and at least back then bindgen gave up on most of PhysX. I don't think it had any way of handling ABI differences between platforms either.

Digging into bindgen for C++ a bit more, this issue pops out because physx-sys had an issue like that, as well as an issue similar to what @tgolsson encountered with fields. This PR proposes changing bindgen from libclang to libtooling to resolve those issues because the latter exposes the information necessary to generate bindings appropriately, but it appears to have stalled. One of the issues raised on that PR was build difficulties, like the ones raised in this issue.  The issues @h3r2tic mentioned are fixable via a pretty hefty bindings.h but that may be preferable to duplicating translation code.
Another option is generating a cxx::bridge, perhaps using bindgen since cxx has at least some support for that. However, cxx is still somewhat immature so I'm not sure how viable it is for something as beefy as PhysX.

#183 transitioned pxbind to a Rust project that just clang's AST JSON output, much easier and no requirements on big clunky libraries.


Idea: Offer proxy factory

I tend to usually wrap clients I have with failsafe retry policy & circuit breaker, but perhaps a nice wholesale solution would be to offer a proxy factory.
/** Proxy class that retries operations and has a circuit breaker. */
protected class FailsafeInvocationHandler<T> extends AbstractInvocationHandler {

  private final T underlying;
  private final RetryPolicy retryPolicy;
  private final CircuitBreaker ciruitBreaker;

  public FailsafeInvocationHandler(T underlying, RetryPolicy retryPolicy, CircuitBreaker circuitBreaker) {
    this.underlying = Preconditions.checkNotNull(underlying);
    this.retryPolicy = Preconditions.checkNotNull(retryPolicy);
    this.circuitBreaker = Preconditions.checkNotNull(circuitBreaker);
  }

  /**
   * Create a Proxy around an underlying interface such that the method calls are wrapped with a
   * {@link RetryPolicy} and a {@link CircuitBreaker}
   */
  public static <T> T retryingProxy(T client, Class<T> clazz) {
    return Reflection.newProxy(clazz, new FailsafeInvocationHandler<>(client));
  }

  @Override
  protected Object handleInvocation(Object proxy, Method method, Object[] args) throws Throwable {
    return invokeWithRetry(underlying, method, args);
  }

  private Object invokeWithRetry(Object target, Method method, Object[] args)
      throws Throwable {
    try {
      return Failsafe.with(circuitBreaker)
          .with(retryPolicy)
          .get(() -> method.invoke(target, args));
    } catch (FailsafeException ex) {
      throw unwrapException(ex); //unwrap FailsafeException and InvocationTargetException
    }
  }
}

Then maybe you can have a fluent style factory like
EchoClient client = ....
client = Failsafe.with(RETRY_POLICY).with(CIRCUIT_BREAKER).proxy(client, EchoClient.class);

Neat!

Hi @fzakaria -
I had thought about this before. What I'm wondering is how generally useful this is (and for how many people), versus just passing a lambda expression or method reference into Failsafe:
FooService fooServiceProxy = Failsafe.with(retryPolicy).proxy(fooService, FooService.class);
fooServiceProxy.makeFoo();

vs
Failsafe.with(retryPolicy).run(() -> fooService.makeFoo());

I suppose it would depend on how heavily one uses Failsafe. Also worth considering is how many use cases would be limited by JDK proxies being interface based. I would probably want to support class based proxies via ByteBuddy or Cglib, but as an optional feature/dependency only since this would increase the distro size by a lot.
So yea - again, just generally wondering how useful this is to them. Input from anyone is welcome.

Interface-based proxies alone are still useful. The motivating case for me would be that of a service interface, where most of the methods of the interface might need some kind of common Failsafe handling. (The ones that don't won't be harmed by being wrapped unnecessarily.)
It doesn't add much conceptual weight, and the implementation, while straightforward, would be hard to roll on one's own.
So I'm in favor of this limited proxying, before even considering class-based proxies.

I can just remove the precondition check in the accompanying PullRequest for checking if the Class<T> is an interface and instead catch failures to create the Proxy and rethrow a nicer mesage like "You must add support for bytecode proxy factories like bytebuddy or asm".
We found this useful for the same reason @Tembrel mentioned.
We use Failsafe in conjunction with HTTP/RPC clients where the interface is the RPC definition. Wrapping the full service implementation with support for circuitbreaking / retry has been useful.

@Tembrel I remember previously you mentioned that you were concerned that wrapping Failsafe calls into Callables/Runnables would alter their semantics. Also, that offering a .wrap feature would decrease the power to weight ratio of the API. Proxying seems similar though. Any thoughts?

My objection to the Callable wrapper was that it would have enshrined a particular set of choices for how to handle exceptions from the Failsafe framework. One user might have been fine with the choices, but another might not.
In this case, it depends on what the implementation of unwrapException is. If it preserves the set of potential exceptions thrown by underlying, then the user doesn't have to think about it, and I'm OK with it.
If there's no agreement on what unwrapException does, then yes, I have a similar concern as before.
@fzakaria - What did you have in mind for unwrapException(ex)?

@Tembrel feel free to check out the pull-request https://github.com/jhalterman/failsafe/pull/108
Here is the relevant snippet for unwrapException
     /**
      * Unwrap the exception that Failsafe throws.
      */
     private static Throwable unwrapException(FailsafeException ex) {
         // There are two possibly layers of indirection here.
         //  1) Fail-safe wraps exceptions with FailsafeException
         //  2) Proxy clients use reflection to invoke methods, which wraps
         //     exceptions in InvocationTargetExceptions.
         Throwable inner = ex.getCause();
         if (inner instanceof InvocationTargetException) {
             inner = inner.getCause();
         }
         return inner;
     }

Basically I don't want to expose Failsafe or the fact that the interface is proxied.
This unwrapException unwraps the wrapping that Failsafe and Proxy provide.

This works for me.

I wrote a comment that said "This works for me", and then I deleted it, because I worry about the case where FailsafeException wraps an exception that isn't an InvocationTargetException. Just rethrowing that exception, if it isn't in the signature of the proxied method, could cause a "sneaky throw" of an undeclared checked exception (I think). Maybe such checked exceptions in that case should be wrapped in something unchecked? Some kind of Error, even?

Are you worried about an error / unexpected case ?
Let's discuss the specifics on the PR if we've agreed enough to move
forward with the idea (proxy creation) ?
On Sep 26, 2017 5:25 PM, "Tim Peierls"<EMAIL_ADDRESS>wrote:

I wrote a comment that said "This works for me", and then I deleted it,
because I worry about the case where FailsafeException wraps an exception
that isn't an InvocationTargetException. Just rethrowing that
exception, if it isn't in the signature of the proxied method, could cause
a "sneaky throw" of an undeclared checked exception (I think). Maybe such
checked exceptions in that case should be wrapped in something unchecked?
Some kind of Error, even?
—
You are receiving this because you were mentioned.
Reply to this email directly, view it on GitHub
https://github.com/jhalterman/failsafe/issues/107#issuecomment-332373240,
or mute the thread
https://github.com/notifications/unsubscribe-auth/AAk7jsQQEO-g6z-6rUBPE2G4pCiX7M9pks5smZX9gaJpZM4PiC7W
.

In my opinion this proxy factory is best suited to live in a separate library, but within failsafe directly. Maybe someone is willing to start a failsafe-proxy repo?


UI: translate alerts

resolve https://github.com/commaai/openpilot/issues/25092

We discussed this and we want to try to dynamically inject all the alert strings from events.py into the XML files, then compile

Closing since as @sshane said, we want to do this dynamically. I think the first step is to extract the static alerts into the translation files; we can do the alert callbacks later.


[Bug] Overlay is not displayed on external monitor when laptop screen is off

Describe the bug
I do not see any of the overlays for hints or the current mode or the command window. I think hinting is working as the cursor jumps around but the overlays visible in the GIF don't show up
Environment (please complete the following information):

Windows 10 Edition: Enterprise
OS Type: 64bit
OS Version: 1909
OS Build: 18363.19.16
win-vind Version: 4.2.1
win-vind Type: chocolatey
Is it reproducible?: I only have access to one device, but the problem always occurs for me.

I will try to prepare the same environment and see if I can reproduce it. Please wait a moment.
Thanks.

It seems to be the fact that I am using an external monitor with my laptop screen shut. If I open the laptop so that both screens are active the overlay shows correctly, if the laptop screen is shut then the overlay does not appear. The --Insert-- popup etc only shows on the laptop screen but the hints overlay appears on both.

It is the correct behavior that the virtual command line is only displayed on the primary monitor. If necessary, provide a way to show it on the extended monitor.
However, the fact that it does not show up on the closed laptop is most likely a bug. I will try on the same situation.
Thanks for the info.


I found the problem/fix for C:\tmp not changing in Preferences

I noticed I could not save to most folders and after some digging I found in:
src/lib/helpers/getTmp.ts  --  Line 18 : (process.platform !== "win32" || tmpPath.length < 35)
If the folder address is less than 35 characters it accepts the new address for the build location, otherwise it reverts back to C:/tmp
Eg: C:\Users\MyName\Desktop\tempfolder
works, but the address below causes it to revert back to default C:\tmp
Eg: C:\Users\MyName\Desktop\tempfolders
Possible fixes: Either remove (tmpPath.length < 35) or increase to a higher character count value
The reason for the hunt: The C:\tmp folder would always lock up (and become undeletable until a restart) )and did not allow any (build and run)'s even on a blank game.
Hope it helps,
Cheers!

Hi @LeftoverRemains I did a bit of digging to remember why that 35 character limit is there in the first place, back in 2019 it was noticed that Windows users were unable build any games if the tmp directory contained too many characters, if I remember rightly this was a big issue for users who installed via Itch.io's app and users with long Windows usernames. It's possible this issue no longer exists as we've updated many of the libraries that could have caused this, but currently I don't have a Windows machine to check on. I'll make a note to have another look at this


need to rescan directories when re-evaluating a filelist

Tired of this so going to fix it on some long flight or other. Typical scenario:

initial cell (the one creating a DirList) is evaluated. The filelist is now part of the dirlist
filelist cell evaluated, everything renders fine
reduction process creates new files
filelist cell re-evaluated -- file cell is not refreshed since parent dirlist hasn't been refreshed

Since in a typical workflow I often find myself rerunning individual cells rather than the whole notebook, this behaviour is becoming extremely annoying.

Need some systematic fixing of the rescan() behaviour.


Source Visibility not showing the sources of a scene

Even though I do have previously used the action of control source visibility for various buttons like the image below

Right now If I try to edit this one or crate new control source visibility action no sources is shown like bellow

This is the wrong repository. Use the plugin's repository instead.
https://github.com/manuelmayer-dev/Macro-Deck-OBS-WebSocket-Plugin


Fix watson directory

As suggested by @SpotlightKid

Oh yeah sorry about that, I'm always a bit confused about the behavior of .get and .pop.

My bad. I have added a test for this.

:+1:


Adding metadata creation to transform file

and adding required utils
more info on metadata here https://confluence.ons.gov.uk/pages/viewpage.action?pageId=190307047
What
Adding metadata generation
How to review
run the function with the tidy csv generated from the transform script
check the output looks like the template on confluence but with stuff in it
Who can review
anyone

Output metadata.json looks to me like the metadata template on Confluence


TypeScript type for EntityDTO with ManyToOne field is not correct

Describe the bug
When JSONify entities which has unpopulated ManyToOne fields, the return result has wrong TypeScript types.
Stack trace
To Reproduce
Steps to reproduce the behavior:

Given the following entities:

@Entity()
export class TeamMember extends BaseEntity<TeamMember, 'id'> {
  @PrimaryKey({ type: 'uuid', defaultRaw: 'uuid_generate_v4()' })
  id: string;

  @ManyToOne({ entity: () => Team, onDelete: 'CASCADE', onUpdateIntegrity: 'CASCADE' })
  team: IdentifiedReference<Team>;
}

@Entity()
export class Team extends BaseEntity<Team, 'id'> {
  @PrimaryKey({ type: 'uuid', defaultRaw: 'uuid_generate_v4()' })
  id: string;

  @OneToMany({ entity: () => TeamMember, mappedBy: (teamMember) => teamMember.team, orphanRemoval: true, cascade: [Cascade.ALL] })
  members = new Collection<TeamMember>(this);
}

Get the JSON verson of TeamMember record:

const teamMember = await orm.em.findOne(TeamMember, '{actual-team-member-id}');
const teamMemberJSON: EntityDTO<TeamMember> = teamMember.toJSON();
console.log(teamMemberJSON.team);
// 022b5aab-4a04-4c86-a9f0-e6c9748a7f74

teamMemberJSON.team's type now should be EntityDTO<Team>, but actually, it's a string id. So it causes some type errors
Expected behavior
Either set unpopulatd ManyToOne fields of JSONified object to string, or something like team: { id: '{actual-id}' };
Additional context
Versions

Dependency
Version

node
17

typescript
4.4.4

mikro-orm
5.0.0-dev.439

your-driver
postgresql

It can be PK or an object, depending of if you populate it. This information is available on the Loaded type, so even if we would have the EntityDTO type supporting it, you would basically erase it by explicitly defining your teamMemberJSON variable type (here it does not matter as you are not populating the relation).
Don't expec too much magic, those types will be always a bit wonky as we don't have the full context in many places. But in this particular example I hope we can handle it.

This will be finally resolved with the TS 4.8 update, including the inference for base entity methods. It will be slightly breaking (on type level) release for those who define custom toJSON methods - the signature will need to return EntityDTO<this> instead of EntityDTO<User> etc.


Abstract class

Create an abstract class for all the music classes (song, album, ...).
Requested features:

the main reason for this request is for dynamically creating the right class for the request. It should have a .from_spotify(uri) method that automatically generates the right spotify object depending on the uri (song, album, ...)
will need to see how this changes requests. will the Requests class still be necessary after this?
Maybe could have another higher level method request() which automatically classifies whether to create a spotify object or just query lyrics from genius? But then again this is already handled before...

Will definitely need to think this through before implementing.
The main reason for seperating is to have a consistent logic. Music things should be handled by the music class and the songcrawler class should be more of an interface to interact with
—
Created via Raycast

To make this work well the following changes need to be made:

The requests class should be a subclass of Songcrawler. Songcrawler is the only class that ever instantiates requests, so this makes sense. Mayyyybe leave the option open to directly create albums/songs/etc. from_spotify(), but primary access should happen through requests.
The request class will inherit all the parameters from Songcrawler. A fair bit of this can probably be handled through the super init. This will make it easier to make the correct request in the music class. TODO: Automatically get Spotify type in constructor if the request is of type spotify. More on this below in notes.
The music class recieves a .request(r) with r being a request object from songcrawler. The .request method is a classmethod which instantiates the correct music object (Artist, song, etc.)
When instantiating the object, the object will generally start querying automatically based on the request. The finished, queried object can then be returned to Songcrawler sc. If the type is album, then I need to still handle the logic for saving.
Maybe don't save when instantiating. Best to just return the object. The sc class then calls the .save method or in case of an artists queries each album and then .saves it. This allows for additional steps before saving, for example running sentiment analysis on the lyrics or smth like that.

Notes:
-Still need to handle all the genius stuff. May need to create additional a genius class wrapper? Need to look more into how the genius requests work, but for now I only support querying single songs from genius.

Priority is getting the requests thing to work first, then start working on making the other classes part of the abstract class.

The parallel querying from #6 should then be handled within the Album class.

Implemented and works (for spotify classes at least). Still need to work on genius classes, but created a new ticket for that #17


Error recovery?

Feature Request
Is it possible to support error recovery strategy?
For example, if some fields are invalid as schema, instead of failing, we might choose to coercing it (eg. the field should be in the range 1~10, we got 12,  clamp it to 10), drop it (if it's not required), give it a default value, or some customized recovery logic.

I can't understand what you want.

He wants the possibility of autocorrection (autofix, autorepair):
type T = number & tags.Minimum<10>;

If the input number is less than 10, it will be replaced by 10, there will be no error.
He can't do that now, and he doesn't really need to.


SpeedPerturb should return the new lengths in the forward

SpeedPerturb changes the lengths of the inputs, but doesn't return the new lengths. This means that when doing SpeedPerturb in batch form, the new lengths are unknown.
This results in issues like in TimeDomainSpecAugment, where the lengths given can't be correct when SpeedPerturb is applied
https://github.com/speechbrain/speechbrain/blob/4ea7fe1e630baffb0109bb5d2ebf53d319912a62/speechbrain/lobes/augment.py#L297

Hi @MarktHart,
sorry for the late reply. Thank you for reporting. This looks something to be fixed.

We will fix that in the next major version of speechbrain. Thank you for reporting this.

The same speed perturbation is applied to the entire batch, so the relative lengths of each item should remain the same.

Ah, I seemed to have missed that SpeedBrain uses relative lengths.
This raises another problem however, that you assume that the maximum length is equal to the padded batch. This is not always the case. For example, Ampere architecture is faster when padded to a multiple of 32. https://github.com/speechbrain/speechbrain/blob/0423bda83237070ad219d88b834d480f58cbe53e/speechbrain/lobes/models/huggingface_wav2vec.py#L319 does not always yield the correct mask in this case.

Its possible there is code in the toolkit that assumes the longest element of the batch has relative length of 1 but I see nothing in make_masks that assumes this. In a case like you've suggested, the relative lengths would all be less than 1. I do think perhaps we should be more clear in our documentation that "relative length" means "relative to the length of the tensor" and not "relative to the length of the longest element in the batch", even though in most cases these are functionally equivalent.

Hello,
Any news regarding this issue please?
Thanks.
Adel


[connect-fastify] status code always return 200

Describe the bug
I enjoying created a gRPC server using Fastify and Bufbuild plugin connect-fastify.
It works perfectly, but I have a problem with the return status code.
This uRes.status is always 200 even when I throw an error inside the routes routine.
https://github.com/bufbuild/connect-es/blob/f6bafee56893eb35a3c60a4d6ed00696bf88af02/packages/connect-fastify/src/fastify-connect-plugin.ts#L86
It makes my Datadog status trace always OK (200), but it isn't.
To Reproduce
I follow the tutorial from here https://connect.build/docs/node/getting-started
It covers the integration between Fastify and Bufbuild.
Then I add error throwing code to the router code to make the routine return error
import { ElizaService } from "./gen/eliza_connect";
import { Code, ConnectError } from "@bufbuild/connect";

export default (router: ConnectRouter) =>
  // registers buf.connect.demo.eliza.v1.ElizaService
  router.service(ElizaService, {
    // implements rpc Say
    async say(req) {
     throw new ConnectError("test", Code.FailedPrecondition);
      return {}
    },
  });

Environment (please complete the following information):

@bufbuild/connect-fastify version: 0.8.6
fastify: 4.17.0
Node.js version: 18.14.2

Hey Felix, this is how gRPC works - every response has a HTTP status code 200, and error codes are transmitted in the HTTP trailers. See the spec here. There are trailers-only responses, but not every gRPC implementation uses them.
This is one downside that motivated us to add the Connect protocol. For unary RPCs, the status is always reflected in the HTTP status code.


[WFLY-10590] Update ActiveMQServerService to use the new MSC API

[WFLY-10590] Update ActiveMQServerService to use the new MSC API
JIRA: https://issues.jboss.org/browse/WFLY-10590
--
@wildfly/mergers-full this PR contains a commit that is in https://github.com/wildfly/wildfly/pull/11357. I'm putting this PR on hold but I'd like to get @ropalka review on the use of new MSC API.

I reviewed MSC API usages @jmesnil and everything seems OK to me.
The proper way is to inspect DMR model before requiring optional dependency.
This is what you're doing.
Both ways are acceptable to represent optional dependencies in new API:
[1] (Supplier)null
[2] Optional
Of course it depends on personal preference.
Just for curiosity I'd prefer [1] over [2] :)

Retest this please


Add code coverage for flow aggregator

Add code coverage for flow aggregator binary when
running end-to-end tests on different platforms
(kind, jenkins, VMC etc.)

Codecov Report

:exclamation: No coverage uploaded for pull request base (main@f93242a). Click here to learn what that means.
The diff coverage is n/a.

@@           Coverage Diff           @@
##             main    #1898   +/-   ##
=======================================
  Coverage        ?   40.99%
=======================================
  Files           ?      116
  Lines           ?    14564
  Branches        ?        0
=======================================
  Hits            ?     5971
  Misses          ?     8088
  Partials        ?      505

Flag
Coverage Δ

unit-tests
40.99% <0.00%> (?)

Flags with carried forward coverage won't be shown. Click here to find out more.

/test-all

@weiqiangt I believe the codecov token is wrong, or something along these lines. The codecov reports are not being uploaded to the correct place. When I look at some logs for Github workflows running on the main branch, I see:
View reports at https://codecov.io/github/weiqiangt/antrea/commit/c9f526066d20de477ac2126f14090e1f4bfd8d6e

So I think we may be using a token for your personal fork and not for vmware-tanzu/antrea. I don't want to merge this PR before this is fixed, as I want to check that the coverage data for the aggregator is handled correctly.
Maybe I need to update the token myself?

I checked cov.out files in the kind e2e test artifacts and code coverage output for flow aggregator seemed to have populated there. Yes, I tried codecov UI and could not locate it. I created my PR before the main branch fix went in. Does it have to do something related to that?

I didn't hear from @weiqiangt about this, so I'll try updating the token myself to see if it resolves the issue

/test-all

@srikartati I think I have fixed the issue by changing the token
Could you rebase your PR on main?

/test-all

/test-all

/test-e2e

/test-all

/test-all

/test-all

/test-all

/test-e2e

/test-e2e

/test-e2e

/test-e2e

/test-all

/test-conformance


test: update minimal raw variables in rhel-9.5

This is a suggested workaround for https://github.com/virt-s1/rhel-edge/issues/7752

/test-rhel-9-5-minimal


Removes string-replace:static-legacy task from Gruntfile

Removes string-replace:static-legacy task. Fixes #543.
Removals

Removes Grunt string-replace:static-legacy task and references to that task.

Testing

Grunt should still work as expected. Grunt vendor will have one less task.

Review

@KimberlyMunoz
@sebworks
@jimmynotjim

:+1:


feat: add coverage report upload

Codecov Report

:exclamation: No coverage uploaded for pull request base (main@f2a2574). Click here to learn what that means.
The diff coverage is n/a.

@@           Coverage Diff           @@
##             main      #23   +/-   ##
=======================================
  Coverage        ?   32.00%
=======================================
  Files           ?        1
  Lines           ?       25
  Branches        ?        0
=======================================
  Hits            ?        8
  Misses          ?       17
  Partials        ?        0

Flag
Coverage Δ

pytest
32.00% <0.00%> (?)

Flags with carried forward coverage won't be shown. Click here to find out more.

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update f2a2574...f1ad988. Read the comment docs.


Attempt # 2 to fix #352

@jackMort @Moerliy here's another fix that fixes this bug in all invocations of the window, not just the first one, which yesterday's fix addressed.
It also renames one local variable for clarity.

The previous fix (#388) worked only for the first time the edit with instructions window was opened.
Now it works every time it's opened (at least up to however many times I tested it. Theoretically it could fail on the 10,000th time.)

Looks good to me. I have no running instance of nvim currently tho. So I haven't tested it locally.
If I get the chance to do so I will edit this comment.

Thanks so much for working on it!
The bug also seems to be present in Optimize and Summarize windows (perhaps other windows too if there are more that I'm unaware of)

@v3ceban this seems to fix those as well, if my testing is correct. Can you test it out as well?

@Aaronik indeed, this pr solves the problem in other windows/popups too. Tested on Fedora 39 (x86_64) and Android/Termux (arm).
Thanks for your contribution <3 Hope to see this merged soon!

Works on:

M1 MacOS
Fedora 39 (ARM)
Arch (ARM)
Ubuntu 18 (x86_64)
Ubuntu 23 (ARM)

@jackMort think this passes muster?

@jackMort if there's anything wrong with this, please let me know and I'll change it up :+1:


Bot gives error after running on multiple servers after some time?

Got an error after the bot's been on two servers for some time.
It seemed to play fine on the first server. But when i joined the 2nd it rebooted it seems.
Here's my log.
I've also converted most of the songs to mp3s.
The bot, and dependencies should be up to date.

If this is still an issue in the latest version, please open a new issue.


If you specify TransformOptions in the getPublicUrl method and retrieve the URL, an error will occur when retrieving it.

Hello, thanks for this useful software !
I have one question regarding "Supabase Storage".
Describe the bug
If you specify TransformOptions when using the getPublicUrl method to retrieve images stored in the public bucket, the issued URL will be different and a retrieval error will occur.
If the usage is different, it would be helpful if you could tell me the correct way to use it.
Below is a sample of the URL that will be issued.

URL when TransformOptions is specified

https://msluaclncpyqmjcvgssh.supabase.co/storage/v1/render/image/public/artworks/17/CAP_384866B9-5121-48AB-87C8-74EEEF3A72ED.jpg?width=480&height=560&resize=contain

URL when TransformOptions is not specified

https://msluaclncpyqmjcvgssh.supabase.co/storage/v1/object/public/artworks/15/CAP_EDD85C63-8C1E-42DF-A8BD-3AF404FF913A.jpg?resize=contain
To Reproduce
Steps to reproduce the behavior:

Create a Supabase bucket. A bucket called ('artworks' in the example) is created.
Upload the image to bucket.

At this time, FileOptions is not specified

Generate a public URL using the getPublicUrl() method of the supabase-flutter plugin.

         final uploadPath = '$artworkImageId/$filePath';
         debugPrint('uploadPath: $uploadPath for sample');
         final response =
             await _client.storage.from('artworks').upload(uploadPath, file);

         final imageUrl = _client.storage.from('artworks').getPublicUrl(
               uploadPath,
               transform: TransformOptions(
                 resize: ResizeMode.contain,
                 width: width ?? 480,
                 height: height ?? 560,
               ),
             );

We have confirmed that it can be obtained if TransformOptions is not specified.
Expected behavior
If you find that it is being used in an unintended manner, we would appreciate it if you could point it out to us.
Screenshots

Attached is a screenshot of artwork storage settings.

Version (please complete the following information):

supabase-flutter: 2.1.0

├── supabase_flutter 2.1.0
│   ├── supabase 2.0.3
│   │   ├── functions_client 2.0.0
│   │   ├── gotrue 2.2.0
│   │   ├── postgrest 2.1.0
│   │   ├── realtime_client 2.0.0
│   │   ├── storage_client 2.0.0

Flutter version: 3.16.4

[✓] Flutter (Channel stable, 3.16.4, on macOS 14.1.1 23B81 darwin-arm64, locale ja-JP)
    • Flutter version 3.16.4 on channel stable at /Users/pregum/fvm/versions/3.16.4
    • Upstream repository https://github.com/flutter/flutter.git
    • Framework revision 2e9cb0aa71 (5 weeks ago), 2023-12-11 14:35:13 -0700
    • Engine revision 54a7145303
    • Dart version 3.2.3
    • DevTools version 2.28.4

Additional context
The reason I want to use TransformOptions is because I want to get the thumbnail image from the original.

Hi @Pregum,
Currently image transformations feature is available on Supabase pro plan and above, but is your Supabase instance a pro instance? If so, you can reach out to supabase.help about the image transformation not working properly.

Hi @dshukertjr,
thank you for your reply!

The image conversion feature is currently available on Supabase Pro plans and above, but is my Supabase instance a Pro instance?

I should have looked for the documentation.
Thank you for the information.
No, I'm currently using the free plan.
Since the app is not large enough to require the Pro plan yet, we would like to focus on implementing other features first.
My question is solved!
Thank you for your quick reply.


fix: Update required version for aws provider

fix: Update required version for aws provisioner to support account_d parameter on cloudwatch alarms
Description
Fixes the missing provider updated introduced by the feature of PR https://github.com/terraform-aws-modules/terraform-aws-cloudwatch/pull/33
Motivation and Context
Was simply overlooked during development and initial review but should be fixed.
Breaking Changes
I have not been using the 2.x version of the aws provider for some time. I have not seen anything breaking in the CHANGELOG regarding cloudwatch.
How Has This Been Tested?

See feature request related to PR https://github.com/terraform-aws-modules/terraform-aws-cloudwatch/pull/33 . During the execution a newer version of the provider was already in use (3.64.0)

This PR is included in version 2.4.1 :tada:


apps-manager-js errors preventing Spring Boot actuator integration from working?

cf dev version
PCF Dev version 0.28.0 (CLI: 5cda315, OVA: 0.547.0)

Hi there,
I'm having some troubles getting the Spring Boot actuator integration working with apps-manager-js on my pcfdev instance. I'm using the sample spring-music app, and I've verified that the integration works on PWS.
Things I've done:

Made sure the user I'm accessing the web interface has SpaceDeveloper role on the space in which the app is deployed
Accessed the app directly and added the security exception for the self-signed cert (from #205)

In Chrome, I checked the console and noticed a few errors (see below).  This then fails the check in getClaims, which tries to call Singular.decodeJwt("null") which subsequently fails.
So then I edited the check in getClaims to do if (!jwt || jwt === 'null') just to see what happened, and I saw the following error in the Spring application: .s.b.a.c.CloudFoundrySecurityInterceptor : org.springframework.boot.actuate.cloudfoundry.CloudFoundryAuthorizationException: Token does not have audience actuator
Unfortunately, I'm just about at the limit of my current knowledge here so I'm not sure what other debug info to give you. Happy to provide if asked however. I've got the source of apps-manager-js inside pcfdev, so would be happy to hack at it to test possible fixes.

Hi @jlsalmon,
Unfortunately, we won't be able to prioritize this issue until after the next release. We're in the process of re-writing PCF Dev to use real BOSH + native hypervisors.

Please re-open if you're still finding this is an issue in the latest iteration of CF Dev.


Is it possible to load CKEDITOR when I focus on textarea?

I work on a project with symfony2 framework et I must use CKEditor to fill textareas. The problem is : I have 15 textareas in one form, and I think it'll be a pain if i use 5 views for the form's sections.
So, can I load CKEditor when I focus or click on textarea ?
I also trid to  do this in jquery:
$(document).on('click', $('textarea'), function (e){
        e.preventDefault();
        var $nom =$(this).attr('name');
        CKEDITOR.editor.replace($nom);
    })

But firebug keept saying "CKEditor is undifined"
What sould I do ?

If I understand correctly, you want to load the CKEditor manually which is the opposite of the main purpose of this bundle. If you want to load CKEditor manually, you should probably do it fully manually without any third bundle.
If you still want to use the bundle, I would rely on the twig function shipped with the bundle and the Symfony2 form theming.

Thanks for the answer,
Actually I had many issues when i tried to run run CKEditor without your bundle, and I learnt that load 15 ckeditor at the same time is not a good idea.
But now, I tried to use an other version of ckeditor and firebug displays : c[a] is undifined.
Why ?
For the posibility of running nanually CKeditor : How can I do that, knowing i use Jquery ?

Can you copy/paste the full code (loading of the CKEditor + jquery code)?

Actually, I don't use any custom Jquery to load the CKEditors. What can I show you ?

How and where do you load the CKEditor library (the <script> tag? And what is the code you use to load CKEditor in you jQuery event.

I only use 'ckeditor' in the form type
->add('pres_gen', 'ckeditor', array(
                'label' => 'Résumé de la formation',
                'required' => false,
                'autoload' => true,
                'auto_initialize' =>true

and
 ivory_ck_editor:
  base_path: "ckeditor"
  js_path:   "ckeditor/ckeditor.js"

For the moment no jquery event. It's really when ckeditor wants to load.

IMO, you should update the form theming. Create a twig template referenced as form resource in the framework bundle and put the following in it:
{% block ckeditor_widget %}
    <textarea {{ block('widget_attributes') }}>{{ value }}</textarea>

    {% if enable %}
        {% if autoload %}
            <script type="text/javascript">
                var CKEDITOR_BASEPATH = "{{ ckeditor_base_path(base_path) }}";
            </script>
            <script type="text/javascript" src="{{ ckeditor_js_path(js_path) }}"></script>
            {% if jquery %}
                <script type="text/javascript" src="{{ ckeditor_js_path(jquery_path) }}"></script>
            {% endif %}
        {% endif %}
        <script type="text/javascript">
            $(function () {
                {{ ckeditor_destroy(id) }}

                {% for plugin_name, plugin in plugins %}
                    {{ ckeditor_plugin(plugin_name, plugin) }}
                {% endfor %}

                {% for style_name, style in styles %}
                    {{ ckeditor_styles_set(style_name, style) }}
                {% endfor %}

                {% for template_name, template in templates %}
                    {{ ckeditor_template(template_name, template) }}
                {% endfor %}

                $('#{{ id }}').on('click', function (event) {
                    event.preventDefault();
                    {{ ckeditor_widget(id, config, inline, input_sync) }}
                });
            });
        </script>
    {% endif %}
{% endblock %}

Additionally, if you only want to load the CKEditor libery one time by page, remove the autoload section and move it in the HEAD of the page.

ping @qvandekadsye

Closing as there is no activity from the reporter