Fix incorrect manifest names due to symlinks pointing into /private not resolving correctly

URLByResolvingSymlinksInPath does weird things regarding symlinks in /private.
When a repo is in, say, /var/www/munki (which is actually /private/var/www/munki), URLByResolvingSymlinksInPath defies logic (mine at least) and strips off the /private part. This causes the path component comparison to add it a faulty private/ prefix to all manifest names. To see what I mean just create a test repo in /var/www/munki and create a manifest with the current Stable MunkiAdmin.
We can fix this in scanCurrentRepoForManifests by just running URLByResolvingSymlinksInPath on the scanned paths as well.
But for all the other functions in this PR, the file named by newURL returned from the file dialog doesn't exist yet. By design, URLByResolvingSymlinksInPath just returns the same path with /private still in it, breaking the path component comparison. In these functions we can split the directory and file name, run URLByResolvingSymlinksInPath on the directory, and then merge them back together.
Now manifest names are detected correctly when loading, creating, renaming, and duplicating.

Also, thanks for the great project! I use it all the time to manage munki for roughly 1400 Macs. It's been a life saver.
The stuff you're working on in develop looks great. Keep up the good work!

Thanks! And pull requests are most welcome! I'll look at this more thoroughly a bit later when I'm on a computer.

I merged the #69 since it was for the develop branch. I'll probably continue a bit more with this bug since a couple of more breaking issues come to my mind now that you uncovered the fragility of the way MunkiAdmin determines the manifest relative path :)
Thanks for a good PR and keep them coming if you find something else! I will be working on the develop branch now on since the manifests UI v2 is reasonably stable.

Sounds good. I honestly thought you had stopped working on MunkiAdmin until I saw the develop branch. I was pleasantly surprised. Also thought you would have had a lot more collaborators but it looks like you've written almost all the code. Great job!
I'm not really an Objective-C coder, but I will definitely try and fix any more bugs I see.
Thanks!


[Kubernetes] Fix Catalog Auth Token

Hey, I just made a Pull Request!
Fixes https://github.com/backstage/backstage/issues/23357
:heavy_check_mark: Checklist

[ ] A changeset describing the change and affected packages. (more info)
[ ] Added or updated documentation
[ ] Tests for new functionality and regression tests for bug fixes
[ ] Screenshots attached (for UI changes)
[ ] All your commits have a Signed-off-by line in the message. (more info)

@mclarke47 wanna get this in the next release today to test. Hope that's OK! Let us know if you've got any feedback!


fix missing options

Adds missing bodyTimeout, headersTimeout, and maxHeaderSize to MercuriusGatewayOptions.
Fixes https://github.com/mercurius-js/mercurius-gateway/issues/77

Can you add tests for the types? https://github.com/mercurius-js/mercurius-gateway/tree/main/test/types
We use tsd.

Can you add tests for the types? https://github.com/mercurius-js/mercurius-gateway/tree/main/test/types
We use tsd.

Yes, but won't get to it this week, might get to it next week. Thanks.


vimPlugins.vim-gnupg: init at 2021-01-03

Motivation for this change
Add https://github.com/jamessan/vim-gnupg
Things done

[x] Tested using sandboxing (nix.useSandbox on NixOS, or option sandbox in nix.conf on non-NixOS linux)
Built on platform(s)

[x] NixOS
[ ] macOS
[ ] other Linux distributions

[ ] Tested via one or more NixOS test(s) if existing and applicable for the change (look inside nixos/tests)
[ ] Tested compilation of all pkgs that depend on this change using nix-shell -p nixpkgs-review --run "nixpkgs-review wip"
[ ] Tested execution of all binary files (usually in ./result/bin/)
[ ] Determined the impact on package closure size (by running nix path-info -S before and after)
[ ] Ensured that relevant documentation is up to date
[x] Fits CONTRIBUTING.md.

This is a semi-automatic executed nixpkgs-review which does not build all packages (e.g. lumo, tensorflow or pytorch)
If you find some bugs or got suggestions for further things to search or run please reach out to SuperSandro2000 on IRC.
Result of nixpkgs-review pr 108321 run on x86_64-linux 1

2 packages built:

spacevim
vimPlugins.vim-gnupg

This is a semi-automatic executed nixpkgs-review which does not build all packages (e.g. lumo, tensorflow or pytorch)
If you find some bugs or got suggestions for further things to search or run please reach out to SuperSandro2000 on IRC.
Result of nixpkgs-review pr 108321 run on x86_64-linux 1

2 packages built:

spacevim
vimPlugins.vim-gnupg


feature: connected accounts with LDAP, OAuth, SAML

Scenarios

A locally-authenticated user browses to "Connected Accounts" tab in "Portal Settings".
There, the user may click a button to associate OAuth account (Google, Facebook, etc.) with the local user account.
A user signs in with OAuth and lands on "portal" page. There, the user has an option to create an account in local user database.

Notes
In local database, add a list of maps.

For LDAP, add realm and dn fields
For OAuth, add provider and id fields

Question with OAuth:

what is the id associated with a provider
local the user in local database. requires editing go-identity

Closed in favor of https://github.com/greenpau/caddy-security/issues/23


Bug fixes based on user feedback

Updating the configuration and doc.
Internal bug ids:
156582220, 156573266, 156572180, 156583979

Made updates.

Sorry, clicked the wrong button.

Sorry, clicked the wrong button.

No problem. I just reopened one of the pending comments.

Good point for the indentation. I have reformatted the pom.xml.

Good point for the indentation. I have reformatted the pom.xml.

Thank you. LGTM as soon as the tests pass.


No syntax highlighting in code blocks + seeing the backticks in them

Have you done all of these?

[x] I am using the latest version of the plugin.
[x] I have checked the wiki.
[x] I have checked previous issues(even closed ones).

Describe the bug
I am seeing backticks in code blocks ( inline or multiline ) when they should be hidden by the preview and there's no syntax highlighting in code blocks
Neovim version
nvim --version
# NVIM v0.10.0

Are you using a distro?
No
To Reproduce
Steps to reproduce the bug:

Install markview.nvim.
Open a markdown document.
Go to a code block ( inline or mutiline )

Configuration table
i'm using the defaults
{
  "OXY2DEV/markview.nvim",
  lazy = false,
  dependencies = { "nvim-treesitter/nvim-treesitter", "echasnovski/mini.icons" }
},

Expected behavior

in the screenshots from the README.md of this repo we can that there's syntax highlighting in the code blocks, and we can't see backticks in them:

Actual behavior
i can see backticks inside the code blocks and there's no syntax highlighting:

Additional context

Having 10 or 80 plugins loaded does not change anything. So this issue doesn't come from a conflict with another plugin.
i have the lua, html, markdown and markdown_inline treesitter parsers installed, as well as the lua_ls LSP installed.

Hiding isn't done by the plugin, it's done bytree-sitter& vim'ssyntax files`.
So, either you have some config that changes it's behavior or have some syntax files that are overwriting the default ones.

This can't be fixed by me as detecting syntax isn't really possible for the plugin.

I can see that the Tree-sitter parser isn't being loaded so try to see if there's something preventing it.

the parsers are loaded, i just forgot to enable hightlighting in the TS config:
require("nvim-treesitter.configs").setup({
  highlight = { enable = true },
})


Smart AI ?

Can you include an adjustable smart AI logic in AIMi again? For instance, if I were to give an example, for use in a game like CS2, config, etc. If you can do this, it would really be excellent.

That would be really useful, but now I'm working on improving it to make it look better, i'll keep your opinion in mind. Thank you.


update documentation #40

[x] updated docs/source/conf.py
[x] add autoapi
[x] add support for markdown tables

Signed-off-by: Dixing Xu<EMAIL_ADDRESS>

A preview is available here


Can read operations return nilable AEXMLElement?

First, very cool work. Love the simple and super-easy API. Great job!
Perhaps I've not yet appreciated the finer points of Swift, but I'm wondering if the subscript, and last functions/properties can return nilable AEXMLElement (i.e. AEXMLElement?) ?
For my use case, I don't know if a server's XML response will have certain elements. I want to access them if they are present.
Right now, it appears when I do something like this:
 let errorDetail = xmlDocument!.rootElement["errorDetail"]

...I get a dummy empty AEXMLElement, but I really just want nil in this case.
Again, thanks for the great work!

Hello, thanks for the feedback.
Subscript is intentionally made to be non-optional because of the cleaner code when using AEXML (so you don't have to type a lot of ? or ! when searching for a nested element).
Though said, I just pushed a new version where properties all and last are indeed optional from now,
and there's also a new property first which does same as the subscript, but returns optional.
So in your example you could use it like this:
if let errorDetail = xmlDocument!.root["errorDetail"].first { }
Cheers,
// T


Your comparison of lines of code is unfair

Seriously, who write this code written in your comparison page ?
Nobody would ever write this, whatever the framework.

Maybe that nuejs framework saves lines, but please provide acceptable code for a fair comparison!

You can click on the "pages" on the comparison area and they go directly to the correct code on GitHub. Seems the above snippet is from here: https://github.com/rgossiaux/svelte-headlessui/blob/v1.0.2/src/lib/utils/Render.svelte#L76
Seem the utils is referenced here on the main file: https://github.com/rgossiaux/svelte-headlessui/blob/v1.0.2/src/lib/components/listbox/Listbox.svelte#L81

I also suggest you change the title of this thread. It's not my intention to "lie" or post "frauds". I'm merely pointing out that there is an acute need for minimalism in today's frontend scene.

Ok I will change the wording, but please agree that comparing tailwindcss homepage and yours is not a fair comparison. They don't have the same features at all!
I'm merely pointing out that there is a toxic tendency to boast in today's frontend scene.
Good job for all your work on this nevertheless, it's always good to see new ideas.

I agree. I need to fix the narrative a bit. I guess the topic is more about mixing vs. separation of concerns rather than the lines of code on some places. And on places where the topic is LoC an accurate 1-on-1 comparison is needed, like Todo MVC for example.

I improved the compare area a lot, please check: https://nuejs.org/compare/component.html
The comparison is not about size anymore and the focus is on the coding style instead. FAQ on every page explains the details of each section.


CVPR | ICCV | ECCV etc. papers?

I don't know the first thing about Fairness, I found your repo, and it does help me ALOT!
But just a quick wondering, is there any related conference paper in recent year? I mean, like in famous venues like CVPR | ICCV | ECCV?

Like is there a list of publications on Fairness in big venues?
It would be great!!

Like is there a list of publications on Fairness in big venues?
It would be great!!


Update README.md with info on getting started

I thought it would be good to have a bit more detail on getting started with the project, specifically with downloading maps and running a bot.
I also fixed a couple spelling errors.

Thanks. Certainly looks cleaner now.


Documentation on environment-specific configuration could be clearer

cf #182, #185, #133, etc...

I could use documentation for setting up sync on what I understand is a pretty popular and basic rails app production configuration - nginx reverse-proxy + https, thanks.

Are you using Pusher or Faye?

Faye.

This should be closed by https://github.com/chrismccord/sync/pull/204. Note that 0.4.0 is not yet pushed to rubygems, so you'll have to install from GitHub.


Wiki or Discussion tab in repo

Hello.
I wanted to ask whether you think a Wiki or Discussions tab would make sense for this repo?
At least I don't know where the best place to ask my questions is at the moment.
The logs also mention the Discord chat, but I don't know which one?
Thx.

For now i have added discussions to this project. Where does this discord message come from? Could be a message printed by home assistant itself.


Use of Kubernetes based ephemeral runners

Abstract
Currently we have single, statically configured, self hosted runner, baked by a VM in GCP. For better scalability, resiliency and security, we need to support ephemeral runners. To minimize workflow execution time and optimize costs, solution must also provide auto-scaling.
Problem Statement
GitHub documentation refers to 2 opensource projects with auto-scaling support:

actions-runner-controller/actions-runner-controller - creates self-hosted runners as containers in Kubernetes. Multiple container-as-a-service vendors supported, including GKE.
philips-labs/terraform-aws-github-runner - operates AWS deployments using Terraform. Does not work for us, as we are not using AWS.

We can also come up with home-grown solution for auto-scaling.
This proposal is to choose 1st option from the list above, as option 2 is not suitable for us, and home-grown solution will require a lot of development and collaboration efforts.
Advantages of this approach:

Containers come up quickly. Even if current size of runners pool is insufficient, Kubernetes will start new pods in seconds (as oppose to minutes when we use runners based on VMs).
We have additional overview and control via Kubernetes control plane. In case of VM's, we have to rely on GCP tooling.
Standard Kubernetes monitoring solutions (for ex. Prometehus + Grafana).  In case of VM's, we have to rely on GCP tooling.

Disadvantages/Caveats:

Possible complications with builds which invoke docker/podman. Essentially, for such builds we'll need to run docker-in-docker, i.e. connect to host node docker daemon via local socket. Depending on CRI implementation GKE is using, we may not be able to support all combinations. For example, builds using docker-compose may not be able to connect to host containerd.
Possible complications with networking - will we be able to connect to vpc-interconnect?
Pricing? Initially, GKE cluster is going to be more expensive, then a single VM. Though with amount of workflow runs increasing, container-based runs are going to be less expensive, then VM based.

Internal References

CASMINST-3308

External References

https://github.blog/changelog/2021-09-20-github-actions-ephemeral-self-hosted-runners-new-webhooks-for-auto-scaling/
https://docs.github.com/en/actions/hosting-your-own-runners/autoscaling-with-self-hosted-runners

Proposed Solution(s)

Create Kubernetes cluster in GKE
Deploy actions-runner-controller/actions-runner-controller and connect it to our GitHub org

Impact of Action/Inaction
Static self-hosted runner is going to be a bottleneck when amount of Github workflow executions arises.
Further Information

GKE Docs
GKE Pricing
GCP Compute Engine pricing

Suggested Reviewers

[ ] @nieuwsma
[ ] @rkleinman-hpe
[ ] @denniswalker
[ ] @gbaker-hpe

Comment Period
Comment period for this proposal shall close on November 10, 2021.

@nieuwsma I can confirm that docker-in-docker works, I had been using this configuration for quite a while. It has some issues with multi-tenancy (imagine containers from different tenants accessing the same instance of docker daemon on the host), but otherwise ok. Podman is supposed to eliminate exactly these types of issues with multi-tenancy.

I support this proposal.


setup Prometheus exporter for PostgreSQL server metrics from all DBs

[X] Create replication status metrics
[ ] Create sms metrics

@vsirius it would be best if we could keep metrics in yml format, and refer to them in git.


[Java] getBuffers method needs correction on clear flag usage

Describe the bug, including details regarding any error messages, version, and platform.
The getBuffers method uses a boolean flag to determine the buffer clear requirement. This field is not fully utilized in a few interfaces. This must be fixed.
Component(s)
Java

Issue resolved by pull request 43583
https://github.com/apache/arrow/pull/43583


Additional documentation on how "--queryfields" works

I'm currently doing a query which outputs:
PROJECT-1234:   Summary of 1234
PROJECT-2345:   Summary of 2345

As I'm using the output as a sort of "see what to do next" thing, it'd be excellent if I could output the date of last update (either in ISO8601, or maybe fancy "3 hours ago" format) which I assumed was doable with --queryfields=created,updated,summary but that outputs exactly the same data.
The command I'm using at the moment is (obfuscated):
jira list -q 'project = PROJECT AND status = "Pending" AND assignee in (currentUser()) AND updatedDate < startOfDay(-1) ORDER BY updatedDate ASC' -f updated,summary
Is it possible to get a little documentation on that option, or a pointer as to how I can format the output myself?

+1

Sorry for the laggy response.  The queryfields are basically just the default list of fields to fetch from jira for the search api.  To make the search api fast jira does not return most of the issue fields, so if you want special fields for displaying then you have to ask for those explicitly.  The default fields in go-jira are just the fields we use in the default templates.  So overriding queryfields will allow you to make additional fields made available to the view template.  To see the raw data that jira sends back you can use the debug template (with -t debug), which will just dump the raw JSON.
The template that is used by default for the list command is:
{{ range .issues }}{{ .key | append \":\" | printf \"%-12s\"}} {{ .fields.summary }}\n{{ end }}

This basically  loops over all issues, prints out the key with some formatting, then prints out the summary field.  If you want to also print out the updated field it would be something like:
{{ range .issues }}{{ .key | append \":\" | printf \"%-12s\"}} {{ .fields.summary }} - {{ .fields.updated}}\n{{ end }}

That will be the raw updated field (ie whatever time format jira returns), if you want it to print something like 3 hours ago you can use the age template filter like:
{{ .fields.updated | age}} ago

To use a custom template you can just write it to a file and use it directly so you can create myview.tmpl and use it with jira list -t ./myview.tmpl.  If you want your customized template to be used by default for the list view then you can just save your template as ~/.jira.d/templates/list

I think that solves my use case... Just wondered if there was an easier way of showing fields when specified, but I guess the flexibility of the template system makes more sense.
Thank you for the response!

Although it would be nice to specify the template in the command. Having to create a template file for simple patterns is annoying.
Something like:
jira list --script-template="{{ range .issues }}{{.key}}{{end}}"


dev-python/pywm: build fixes

@epsilon-0
Hi. I have a trouble
pywm depends on wlroots as subproject, but non-live version (0.3a) can't be built because wlroots can not be pulled as submodule - it's just tarball, no git submodules and stuff
I tried to pull repository using fixed tag, and it works, except the fact that it's now live ebuild and ~amd64 keyword must be removed (according to CI linter). That's also works, but newm, the only reason to build pywm, needs ~amd64 keyword (at least I understand kinda like that)
So that's a few solutions which I can see:

force 0.3a to non-live (I had tried, but this doesn't work, but it still may be possible)
don't listen GH runner and merge it with keyword
initialize submodule before configuring (but how?)
using system lib instead of submodule not an option, I guess - it'll need to downgrade lib or to bump the whole project to newest version

What can you suggest to do?

* using system lib instead of submodule not an option, I guess - it'll need to downgrade lib or to bump the whole project to newest version

This sounds like the correct way to build it, Why is this not an option?

What can you suggest to do?

This sounds like the correct way to build it, Why is this not an option?

Yes, despite the fact that it will lead to updating pywm (unsupported stale project) to support latest version of wlroots - which is long and painful way. Or I can add slots support for wlroots (in gentoo repository) - even longer and more painful
There is a lot ways to fix, and no one is easy enough
But actually you right, I'll try to fix pywm and perform this as a patch. Thanks for an advise

Apologies for not merging it sooner, had many things happening IRL


[HOPS-1215] Set storage type for Small Files stored in the database

Make sure there is no duplicate PR for this issue

Please check if the PR fulfills these requirements

[x] Tests for the changes have been added and passed (for bug fixes / features)
[x] HOPS JIRA issue has been opened for this PR
[x] All commits have been squashed down to a single commit
[x] The commit message has the following format: [HOPS-XXX] message

Post a link to the associated JIRA issue
https://hopshadoop.atlassian.net/browse/HOPS-1215?filter=-1

What kind of change does this PR introduce? (Bug fix, feature, docs update, ...)

What is the new behavior (if this is a feature change)?

Does this PR introduce a breaking change? (What changes might users need to make in their application due to this PR?)

Other information:
https://github.com/hopshadoop/hops-metadata-dal/pull/158
https://github.com/hopshadoop/hops-metadata-dal-impl-ndb/pull/199

Can one of the admins verify this patch?

tests: https://bbc1.sics.se/jenkins/job/hops-pull-manual/79/


tensorflow lite div quantized problem

System information

OS Platform and Distribution (e.g., Linux Ubuntu 16.04):macOS 10.14.4
TensorFlow installed from (source or binary):binary(pip install tensorflow==2.3.0)
TensorFlow version (or github SHA if from source):2.3.0

I want to quantify div operations, but I couldn't get a model with quant div Op.
The test code is as follows:
#############################################
import tensorflow.compat.v1 as tf
import numpy as np
tf.disable_eager_execution()
data1 = np.random.rand(3).astype(np.float32)
beginInput1 = tf.placeholder(tf.float32,shape=[3])
data2 = np.random.rand(3).astype(np.float32)
beginInput2 = tf.placeholder(tf.float32,shape=[3])
y = tf.constant([4.0, 6.0, 2.0])
result = tf.div(beginInput1,y)
result = tf.quantization.fake_quant_with_min_max_args(result, 1, 2,name="quant")
init_op = tf.initialize_all_variables()
def representative_data_gen():
yield [data1]
with tf.Session() as sess:
sess.run(init_op)
end = sess.run(result,feed_dict={beginInput1:data1,beginInput2:data2})
output_graph_def = tf.graph_util.convert_variables_to_constants(sess,
                                                                sess.graph_def,
                                                                output_node_names=["quant"])

with tf.gfile.FastGFile("../model/model.pb", mode="wb") as f:
    f.write(output_graph_def.SerializeToString())

converter = tf.lite.TFLiteConverter.from_frozen_graph("../model/model.pb",
                                                    input_arrays=["Placeholder"],
                                                    output_arrays=["quant"],
                                                    input_shapes={
                                                        "Placeholder": [3],
                                                    })

converter.inference_type = tf.lite.constants.QUANTIZED_UINT8
input_arrays = converter.get_input_arrays()
converter.quantized_input_stats = {input_arrays[0]: (0., 1.)}

print("converter begin.")
tflite_model = converter.convert()
open("../model/model.tflite", "wb").write(tflite_model)

#############################################
Failure details

You can see that tensorflow lite has supported quant div op.
https://github.com/tensorflow/tensorflow/blob/r2.3/tensorflow/lite/toco/graph_transformations/quantize.cc#L56
How to convert a model containing quant div op?

@xiaoyaozhuzi could you try conversion with the following code?
   converter.optimizations = [tf.lite.Optimize.DEFAULT]
    converter.target_spec.supported_ops = [
        tf.lite.OpsSet.TFLITE_BUILTINS_INT8,
        tf.lite.OpsSet.SELECT_TF_OPS,
    ]

@xiaoyaozhuzi could you try conversion with the following code?
   converter.optimizations = [tf.lite.Optimize.DEFAULT]
    converter.target_spec.supported_ops = [
        tf.lite.OpsSet.TFLITE_BUILTINS_INT8
    ]

Python 3.7.3 (default, Mar 27 2019, 16:54:48)
[Clang 4.0.1 (tags/RELEASE_401/final)] on darwin
Traceback (most recent call last):
File "/Applications/PyCharm.app/Contents/helpers/pydev/pydev_run_in_console.py", line 52, in run_file
pydev_imports.execfile(file, globals, locals)  # execute the script
File "/Applications/PyCharm.app/Contents/helpers/pydev/_pydev_imps/_pydev_execfile.py", line 18, in execfile
exec(compile(contents+"\n", file, 'exec'), glob, loc)
File "/Users/zhangshuo/githouse/toco-test/tensorflow-test/div_test.py", line 51, in
tflite_model = converter.convert()
File "/anaconda2/envs/python3/lib/python3.7/site-packages/tensorflow/lite/python/lite.py", line 1970, in convert
return super(TFLiteConverter, self).convert()
File "/anaconda2/envs/python3/lib/python3.7/site-packages/tensorflow/lite/python/lite.py", line 1339, in convert
result = self._calibrate_quantize_model(result, **flags)
File "/anaconda2/envs/python3/lib/python3.7/site-packages/tensorflow/lite/python/lite.py", line 452, in _calibrate_quantize_model
inference_output_type, allow_float, activations_type)
File "/anaconda2/envs/python3/lib/python3.7/site-packages/tensorflow/lite/python/optimize/calibrator.py", line 98, in calibrate_and_quantize
np.dtype(activations_type.as_numpy_dtype()).num)
RuntimeError: Quantization not yet supported for op:
Shows that there are unsupported Quantization ops.

Could you try the original conversion code with the tf-nightly version?
I can create a model with one quantized multiply op node with the same code at the HEAD. FYI, the multiply op is used for the division calculation.

Could you try the original conversion code with the tf-nightly version?
I can create a model with one quantized multiply op node with the same code at the HEAD. FYI, the multiply op is used for the division calculation.

2.3.0 can also generate a model with only one multiplication operation, but division doesn't work.

Could you elaborate more on your expectations on the division calculation from the generated model? It looks good to me.

Could you elaborate more on your expectations on the division calculation from the generated model? It looks good to me.

https://github.com/tensorflow/tensorflow/blob/r2.3/tensorflow/lite/kernels/div.cc#L155
I want to verify the accuracy loss of quant div op, so I want to create a tflite model with only one quant div operation.

@jianlijianli Could you help create a model with single quantized div operator?

@jianlijianli Could you help create a model with single quantized div operator?

What else can I try?

@xiaoyaozhuzi
Please update, does creating single quantized div operator help.

Can anyone confirm that Quantized Div is not supported as stated by https://github.com/tensorflow/tensorflow/issues/21526?

Is there any update on this? How do I get the TFLite converter to create an int8 Div op?
Both TFLite and TFLM have code for a quantized div op, but when I use the TFLite converter using the following options:
    converter.target_spec.supported_ops = [tf.lite.OpsSet.TFLITE_BUILTINS_INT8]
    converter.inference_input_type = tf.int8  # or tf.uint8
    converter.inference_output_type = tf.int8

I get a float div op with dequantize/quantize nodes around it.

Bumping for interest--I am also unable to get TFLite to quantize a div op and am interested in doing so.


Scans should have more tracing annotations

It would be great to see more information about how fast Scan responses are processed.  Towards that end, add more annotations on the opencensus trace.

We were ok with what we had.  There isn't anything clearly actionable here.


I suffer a problem when first using of keylime with one machine.

Environment

OS / version:
Processor architecture:

[root@keylime-fedora33 ~]# uname -a
Linux keylime-fedora33 5.8.15-301.fc33.x86_64 #1 SMP Thu Oct 15 16:58:06 UTC 2020 x86_64 x86_64 x86_64 GNU/Linux

TPM Manufacturer:
I use emulator with ibmtpm1119.tar.gz and tpm2-abrmd.

Keylime version:
[root@keylime-fedora33 ~]# rpm -qa | grep keylime
keylime-6.1.0-2.fc33.noarch

Description
 I just setup keylime in one machine and want to see if it's works ok. But it always failed.

Is there  a nice version in some linux release versions? I am a rookie, and want to use it easily.
Expected behavior vs. actual behavior
Expected the keylime work good but failed
Steps to reproduce problem

setup all kind of softeares

make emulator work well.
[root@keylime-fedora33 ~]# netstat -anlp | grep 2321
tcp        0      0 <IP_ADDRESS>:2321            <IP_ADDRESS>:*               LISTEN      1024/tpm_server
tcp        0      0 <IP_ADDRESS>:2321          <IP_ADDRESS>:54590         ESTABLISHED 1024/tpm_server
tcp        0      0 <IP_ADDRESS>:54590         <IP_ADDRESS>:2321          ESTABLISHED 1029/tpm2-abrmd

run keylime_verifier; keylime_register; keylime_agent

run ” keylime_tenant -v <IP_ADDRESS> -t <IP_ADDRESS> -f /root/ima-fulesigning.pem  --uuid D432FBB3-D2F1-4A97-9EF7-75BD81C00000 --allowlist allowlist.txt  --exclude exclude.txt -c add ”
Then, it failed, with logs below.

Relevant logs
Attach any relevant log files that can help to debug your issue.
2021-12-29 10:05:30.262 - keylime.tpm - INFO - TPM2-TOOLS Version: 4.3.2
2021-12-29 10:05:30.270 - keylime.tenant - INFO - Setting up client TLS in /var/lib/keylime/cv_ca
2021-12-29 10:05:30.270 - keylime.registrar_client - WARNING - TLS is enabled.
2021-12-29 10:05:30.270 - keylime.registrar_client - INFO - Setting up client TLS...
/usr/lib/python3.9/site-packages/urllib3/connectionpool.py:997: InsecureRequestWarning: Unverified HTTPS request is being made to host '<IP_ADDRESS>'. Adding certificate verification is strongly advised. See: https://urllib3.readthedocs.io/en/latest/advanced-usage.html#ssl-warnings
warnings.warn(
2021-12-29 10:05:30.290 - keylime.tenant - INFO - TPM PCR Mask from policy is 0x408000
2021-12-29 10:05:30.291 - keylime.tenant - INFO - TPM PCR Mask from policy is 0x808000
/usr/lib/python3.9/site-packages/urllib3/connectionpool.py:997: InsecureRequestWarning: Unverified HTTPS request is being made to host '<IP_ADDRESS>'. Adding certificate verification is strongly advised. See: https://urllib3.readthedocs.io/en/latest/advanced-usage.html#ssl-warnings
warnings.warn(
/usr/lib/python3.9/site-packages/urllib3/connectionpool.py:997: InsecureRequestWarning: Unverified HTTPS request is being made to host '<IP_ADDRESS>'. Adding certificate verification is strongly advised. See: https://urllib3.readthedocs.io/en/latest/advanced-usage.html#ssl-warnings
warnings.warn(
2021-12-29 10:05:31.414 - keylime.tpm - ERROR - Error verifying quote: Command: ['tpm2_checkquote', '-u', '/tmp/tmp7epgibb7', '-m', '/tmp/tmpvh44agss', '-s', '/tmp/tmpxthvizcv', '-f', '/tmp/tmp6fikz48g', '-g', 'sha256', '-q', '3161784f6363334b6f6e697039346e4b48474a6a'] returned 1, expected 0, output [b'pcrs:\n', b'  sha256:\n', b'    0 : 0x0000000000000000000000000000000000000000000000000000000000000000\n', b'    16: 0xE7C4B87FAD3DBADD65BDA9B6BB0CB6FBC766A412047E2B11C0366B24CC4BF2FD\n', b'sig: 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\n'], stderr [b'ERROR: Error validating signed message with public key provided\n', b'ERROR: Verify signature failed!\n', b'ERROR: Unable to run tpm2_checkquote\n']
2021-12-29 10:05:31.414 - keylime.tpm - ERROR - Command: ['tpm2_checkquote', '-u', '/tmp/tmp7epgibb7', '-m', '/tmp/tmpvh44agss', '-s', '/tmp/tmpxthvizcv', '-f', '/tmp/tmp6fikz48g', '-g', 'sha256', '-q', '3161784f6363334b6f6e697039346e4b48474a6a'] returned 1, expected 0, output [b'pcrs:\n', b'  sha256:\n', b'    0 : 0x0000000000000000000000000000000000000000000000000000000000000000\n', b'    16: 0xE7C4B87FAD3DBADD65BDA9B6BB0CB6FBC766A412047E2B11C0366B24CC4BF2FD\n', b'sig: 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\n'], stderr [b'ERROR: Error validating signed message with public key provided\n', b'ERROR: Verify signature failed!\n', b'ERROR: Unable to run tpm2_checkquote\n']
Traceback (most recent call last):
File "/usr/local/lib/python3.9/site-packages/keylime/tpm/tpm_main.py", line 1052, in _tpm2_checkquote
retDict = self.__tpm2_checkquote(aikFile.name, nonce, quoteFile.name, sigFile.name, pcrFile.name, hash_alg)
File "/usr/local/lib/python3.9/site-packages/keylime/tpm/tpm_main.py", line 991, in __tpm2_checkquote
retDict = self.__run(command, lock=False)
File "/usr/local/lib/python3.9/site-packages/keylime/tpm/tpm_main.py", line 375, in __run
raise Exception("Command: %s returned %d, expected %d, output %s, stderr %s" % (cmd, code, expectedcode, retout, reterr))
Exception: Command: ['tpm2_checkquote', '-u', '/tmp/tmp7epgibb7', '-m', '/tmp/tmpvh44agss', '-s', '/tmp/tmpxthvizcv', '-f', '/tmp/tmp6fikz48g', '-g', 'sha256', '-q', '3161784f6363334b6f6e697039346e4b48474a6a'] returned 1, expected 0, output [b'pcrs:\n', b'  sha256:\n', b'    0 : 0x0000000000000000000000000000000000000000000000000000000000000000\n', b'    16: 0xE7C4B87FAD3DBADD65BDA9B6BB0CB6FBC766A412047E2B11C0366B24CC4BF2FD\n', b'sig: 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\n'], stderr [b'ERROR: Error validating signed message with public key provided\n', b'ERROR: Verify signature failed!\n', b'ERROR: Unable to run tpm2_checkquote\n']
/usr/lib/python3.9/site-packages/urllib3/connectionpool.py:997: InsecureRequestWarning: Unverified HTTPS request is being made to host '<IP_ADDRESS>'. Adding certificate verification is strongly advised. See: https://urllib3.readthedocs.io/en/latest/advanced-usage.html#ssl-warnings
warnings.warn(
2021-12-29 10:05:32.630 - keylime.tenant - INFO - Agent D432FBB3-D2F1-4A97-9EF7-75BD81C00000 stopped
Traceback (most recent call last):
File "/usr/local/bin/keylime_tenant", line 33, in
sys.exit(load_entry_point('keylime==0.0.0', 'console_scripts', 'keylime_tenant')())
File "/usr/local/lib/python3.9/site-packages/keylime/cmd/tenant.py", line 15, in main
tenant.main()
File "/usr/local/lib/python3.9/site-packages/keylime/tenant.py", line 1226, in main
mytenant.do_quote()
File "/usr/local/lib/python3.9/site-packages/keylime/tenant.py", line 927, in do_quote
raise e
File "/usr/local/lib/python3.9/site-packages/keylime/tenant.py", line 880, in do_quote
raise UserError(
keylime.tenant.UserError: TPM Quote from cloud agent is invalid for nonce: 1axOcc3Konip94nKHGJj

Are you also running the keylime_ima_emulator tool? If you are using a software TPM then the IMA part of the kernel can't use it because it starts too late. So you need to use the keylime_ima_emulator so that it takes the IMA measurements and extends them into the software TPM.

Whether I run the cmd of keylime_ima_emulator or not, the problem keep the same.
[root@keylime-fedora33 ~]# keylime_ima_emulator
Using config file /etc/keylime.conf
2022-01-05 15:46:34.600 - keylime.tpm - INFO - TPM2-TOOLS Version: 4.3.2
Client accepted
Client accepted
Monitoring /sys/kernel/security/ima/ascii_runtime_measurements
extending hash 0adefe762c149c7cec19da62f0da1297fcfbffff for boot_aggregate
extending hash 5dae5b3e06d7aca5b4eb94e08aeec759c17d9f8a for /usr/lib/systemd/system-generators/kdump-dep-generator.sh
extending hash 832df71070a8de6d3909aa48404c4ab9d83a7c2e for /usr/lib/systemd/system-generators/systemd-cryptsetup-generator
extending hash b3ae1bd3fd2d652e5b00c8dd3c3519829b29bc16 for /usr/lib/systemd/system-generators/systemd-debug-generator
extending hash 676beecf5ddfe728f78ee68c78b02c07a527c188 for /usr/lib/systemd/system-generators/systemd-bless-boot-generator
extending hash 53415ebb8016648ae23e43ef303dda685ed12979 for /usr/lib/systemd/system-generators/lvm2-activation-generator
extending hash f984e4330995c6b740ee58d59732f66efed1d08e for /usr/lib/systemd/system-generators/systemd-gpt-auto-generator
extending hash 1e774a8188d166f176dbc08d10ffa80b3311c1d3 for /usr/lib/systemd/system-generators/selinux-autorelabel-generator.sh
extending hash 351797204cea04b738f74183a33c6b2008eb50d1 for /usr/lib/systemd/system-generators/systemd-hibernate-resume-generator
extending hash bad261ca7bcd3668b1c4a83453fd70fc44bb3d9c for /usr/lib/systemd/system-generators/systemd-system-update-generator
extending hash 4ffa1c39f0cfa2365668aca6c63bceb3d016c07f for /usr/lib/systemd/system-generators/systemd-rc-local-generator
extending hash f6792ac3d5ca936408bd4cb9b3db6750002d496e for /usr/lib/systemd/system-generators/systemd-veritysetup-generator
extending hash c665bdaef831d3d93a33f714b313cb4d7e10e6a1 for /usr/lib/systemd/system-generators/systemd-run-generator
extending hash d40c1835b0d1309dc94c093d52afec8edee72c99 for /usr/lib/systemd/system-generators/systemd-sysv-generator
extending hash 4e3dd53c3150d3189465254006f5193ae4ac865d for /usr/lib64/ld-2.32.so
extending hash 6c5efa1939301ff5d53a9b5a4d801ab6c1cc274b for /usr/lib/systemd/system-generators/systemd-getty-generator
extending hash 30f121a074d13860ac71c786c1d4ac6ef987e862 for /usr/lib/system
.......

Hi @mengwangict ,
I do not have a straightforward procedure for you but maybe keylime-tests repo I am contributing to will provide you some hints.
Please take a look at https://github.com/RedHat-SP-Security/keylime-tests
Usually my procedure for the basic singlehost scenario is like this:

Execute https://github.com/RedHat-SP-Security/keylime-tests/blob/main/setup/configure_tpm_emulator/test.sh (may not be necessary if you have TPM already configured and functional)
Execute https://github.com/RedHat-SP-Security/keylime-tests/blob/main/setup/install_upstream_keylime/test.sh to download and install keylime bits
Execute test doing basic attestation on localhost - https://github.com/RedHat-SP-Security/keylime-tests/blob/main/functional/basic-attestation-on-localhost/test.sh

Also, please note that  I am using some custom bash functions, these either come from beakerlib package or from this file https://github.com/RedHat-SP-Security/keylime-tests/blob/main/Library/test-helpers/lib.sh
If nothing else it can at least give you some understanding about the order of required (setup) actions.

The problem resolved. This can be close. Thanks for  all the help

:+1: If you have any further questions either just open a new issue or join #keylime on the CNCF Slack.


Center error icon vertically in AssetLib

This centers the error icon (red dot) vertically in AssetLib.
Before this fix, it looked like this:

To reproduce this, switch to the "Templates" tab in Project Manager (or "AssetLib" in the main editor), and change the "site" dropdown to "localhost".

Thanks!


Bitmap editor

Thank you for sharing this excellent work.
I noticed there is mention of a bitmap editor which uses the following command:

I cannot find the file to accept this command. Could you help with how to generate these bitmap.c files?

FYI: I found the bitmap software documentation here.

Perhaps I assumed too much Unix knowledge when I wrote

This is documented in the man pages

If you enter
$ man bitmap

you will get docs.

Yes, but I now understand. Thank you!

I have created custom icons 20x20 with the linux bitmap software.
I save the file as icon.c,
then I update the filnames.txt.
Next I use the c_to_python_font.py to create a font.py file.

The result does not look like the icon which I created. If I remake the font.py file, the result is different, but still does not look like the icon which I created.
I am using a driver, which references this micropython-font-to-py GitHub. Any ideas why my icon result does not look like what I created?

It's hard for me to comment on display drivers which are not in the supported drivers list, not least because I don't own suitable hardware to test.
The design of the driver you are using is very different from the supported drivers. It also has its own way of supporting Python fonts unrelated to the Writer class. I can only suggest you take this up with the driver's author.

To add to this, I converted your C file to a font and displayed it on a supported display and it looked fine.


HomeKit Automation "Last person leaves"

Hello,
I am configuring my devices with Homebridge and I would like to automate that they will be disconnected when the last person leaves the house, but I do not see the option in the iOS 11 Home App, only the option "First person leaves" appears, but no "The last person leaves". Why can it happen?

Congratulations for the software.
Fernando Monllor

update to latest ios it should say last person

if on latest ios and not showing, sign out and sign in from icloud

It seems it was a translation error to Spanish because in the iOS 11.2 version they have fixed it. Thanks.


Have go-dnsmasq resolve .consul against Consul.

Resolves #31.
Signed-off-by: Matthew Valimaki<EMAIL_ADDRESS>

@matthewvalimaki, I've just updated alpine-base. Are you able to rebase this from master and work in your changes again. Sorry about that.

@smebberson done. I wonder why no conflicts for the base was shown. A side note: I would recommend we break ENV calls to separate lines like we do with RUN. That way it becomes more readable.

@matthewvalimaki I went to resolve this and realised something. Consul has been configured to use $CONSUL_DOMAIN so that you could actually change the default Consul domain from consul to something. However, the Consul domain in go-dnsmasq was hard coded to --stubzones=.consul/<IP_ADDRESS>:8600. I'm pretty sure it should be referencing $CONSUL_DOMAIN.
Also, how are you testing this is working? I'm not sure how I would test, otherwise I would have updated alpine-consul-base/root/etc/services.d/resolver/run appropriately and push it through myself. Sorry about that.

@matthewvalimaki would it make sense to remove CONSUL_DOMAIN env from alpine-base and instead put it in alpine-consul as nothing alpine-base references CONSUL_DOMAIN?
Also, should we be updating alpine-consul/root/etc/services.d/consul/run and adding alpine-consul/root/etc/services.d/resolver/run as per your edits to alpine-consul-base in this PR (rather than adding them in alpine-consul-base). That change will mean that everything that inherits from alpine-consul (which includes alpine-consul and alpine-consul-ui will inherit the $CONSUL_DOMAIN configuration (essentially the entire suite of docker-alpine Consul based images). Otherwise alpine-consul and alpine-consul-ui misses out on these improvements...

@matthewvalimaki (PS. I have a bunch more updates based alpine-base waiting in the wings ready to go). I just wanted to push this one through first so that you don't have to keep remerging this PR.

@smebberson you are correct. Stubzones should not be hard coded to .consul but to $CONSUL_DOMAIN. And yes, it would make sense to have this ENV in alpine-base as the domain would not resolve.
For alpine-consul the Consul change does not matter as it works fine without but I did not realize alpine-consul-ui was using it, so yes we should use alpine-consul instead of alpine-consul-base.
The way to test this is to change the domain for alpine-consul-nginx and then do ping against it: ping nginx.service.domain

@matthewvalimaki, thanks. I'm working on this now.


trainable parameters

How trainable parameters are calculated？1,175,302 and 978,694？

The generated tf keras Model has a summary function that prints the layers and number of parameters.


RPIP-62: Move to Final

Draft Checklist

[x] Ensure that the RPIP preamble is present and correctly formatted as per RPIP-1.

[x] Add RPIP number if not present.
[x] Check title is a few words, and not a complete sentence.
[x] Check author field matches convention.
[x] Check discussions-to field is present, and links to the Rocket Pool forum. This field should consist of a single URL.
[ ] Check status is set to 'Draft'
[x] Check that type is a valid value.

[x] If the type is 'protocol', ensure a category is present.

[x] Check that created is set to the day of the RPIP number assignment, in the YYYY-MM-DD format.

[x] Ensure that the RPIP matches the RPIP template in terms of layout.

Finalize Checklist

[x] Ensure that the finalization PR is the only open pull request modifying the RPIP in the official RPIP repository.
[x] Ensure that the RPIP Draft Checklist has been completed for this RPIP.
[x] Ensure that the RPIP preamble is present and correctly formatted for a finalized RPIP.

[x] Check status is set to 'Final'

[x] Editor Responsibilities

[x] Check that the RPIP is ready, sound and complete.
[x] Check that the ideas within the RPIP make technical sense.
[x] Check that the RPIP title accurately describes the RPIP content.
[x] Check the RPIP for language, markup, and code style.


When a watcher for a computed depending on two sources is notified, if one source updates and a watcher is added during notification to the other source, an internal error is thrown

Repro for 0.1.0: link
Source:
const WA = new Signal.subtle.Watcher(() => {
  console.log("watch WA")
  WC.watch(C)
})

const WC = new Signal.subtle.Watcher(() => {
  console.log("watch WC")
})

const A = new Signal.Computed(() => {
  console.log("get A")
  B.get()
  C.get()
  console.log("get A end")
})

const B = new Signal.State(1)
const C = new Signal.State(1)

A.get()
WA.watch(A)

B.set(2)

I suspect this Error is intentional in order to avoid any mutation of the graph (other than dirtying) during the dirtying phase. Calling .watch(signal) will potentially and add new consumer<->producer links to the graph, which might or might not trigger the Watchers notify callback again in the same dirtying phase.

C isn't dirty, only A and B are. And when pre-added, WC isn't notified, only WA.


Cross-Site Scripting (XSS) in Automation Tags

Version: Papermerge 2.0rc35
Steps to reproduce
Log into Papermerge and visit the "automates" function located at /admin/automate/add/. Insert the following payload into the "Tags" formular and confirm the new tag by inserting a single comma.
<script>alert('XSS');</script>

The JavaScript payload gets instantly executed by the browser, which leads to reflected XSS. If the automation with an XSS payload is saved, the issue will evolve to stored XSS.
If the saved automation is browsed again, e.g. via the following URL path /admin/automate/1, the stored JS payload will be executed again.

Steps to mitigate this issue
As previously, it is recommended to escape all untrusted user input before reflecting or storing the data.

@l4rm4nd, danke! As with other high priority bugs (related specifically to 2.0), I will take care of them over the weekend.

Here is the fix
just want to confirm:
@l4rm4nd,  escaping on client side (i.e. javascript part) is not necessary as long as data is stored (in database) escaped, right?

Here is the fix
just want to confirm:
@l4rm4nd, escaping on client side (i.e. javascript part) is not necessary as long as data is stored (in database) escaped, right?

Hey @ciur,
usually it is recommended to do both, input and output sanitization.
With input validation you ensure that unknown, untrusted user data is always properly validated before it is being stored in your database or directly displayed in the web application. Then, you can basically process all database entries directly without escaping them again, since you've already ensured it is in a valid format. See OWASP
However, there might be valid points for doing an additional output validation. If an attacker e.g. gains access to the database, he would be able to alter data to contain malicious code. Since you trust all database entries... whoops, there is XSS or other vulnerabilities again. But this is an unlikely scenario, so the risk might be acceptable for not implementing it. However, output validation also makes sense, if you cannot properly validate a database insertion beforehand (e.g. when data comes from third parties that can directly access your database and store data in it). This might not be the case yet, but maybe for future versions.
So best practices are to never trust user input .. and also don't trust your own database entries.

@l4rm4nd, thank you for explanation!
Provided fix is now part of 2.0.0rc38 release

Fix successfully escapes user input after the automation is saved. This prevents stored XSS.

However, inserting a new tag like <script>alert('XSS')</script> still leads to reflected XSS, since the input is not escaped before being displayed. But the likelihood for this exploitation is low.

So you indeed have to escape on the client side too as you mentioned, since the user input is directly printed out without proper filtering. I assumed that Django forms would automatically do some escaping, my bad. Haven't checked your code in detail or tested the fix on my system, sorry!

Fixed in latest release, which is 2.0.0rc45

Seems fixed. Cannot reproduce the XSS vulnerability.


Someone please help. It wont let me install semantic UI, followed all the steps

For some reason, it lets me install gulp (I am using npm) but once i run npm install semantic-ui --save (on a windows machine), it gives me this exact error:
npm WARN deprecated<EMAIL_ADDRESS>gulp-util is deprecated - replace it, following the guidelines at https://medium.com/gulpjs/gulp-util-ca3b1f9f9ac5
npm WARN deprecated<EMAIL_ADDRESS>please upgrade to graceful-fs 4 for compatibility with current and future versions of Node.js
npm WARN deprecated<EMAIL_ADDRESS>Please update to minimatch 3.0.2 or higher to avoid a RegExp DoS issue
npm WARN deprecated<EMAIL_ADDRESS>Please update to minimatch 3.0.2 or higher to avoid a RegExp DoS issue
npm WARN deprecated<EMAIL_ADDRESS>please upgrade to graceful-fs 4 for compatibility with current and future versions of Node.js
npm WARN deprecated<EMAIL_ADDRESS>This module relies on Node.js's internals and will break at some point. Do not use it, and update to<EMAIL_ADDRESS>npm WARN enoent ENOENT: no such file or directory, open 'C:\Users\Cesar\package.json'
npm WARN<EMAIL_ADDRESS>requires a peer of better-console@* but none is installed. You must install peer dependencies yourself.
npm WARN<EMAIL_ADDRESS>requires a peer of del@* but none is installed. You must install peer dependencies yourself.
npm WARN<EMAIL_ADDRESS>requires a peer of extend@* but none is installed. You must install peer dependencies yourself.
npm WARN<EMAIL_ADDRESS>requires a peer of gulp@* but none is installed. You must install peer dependencies yourself.npm WARN<EMAIL_ADDRESS>requires a peer of gulp-autoprefixer@* but none is installed. You must install peer dependencies yourself.
npm WARN<EMAIL_ADDRESS>requires a peer of gulp-chmod@* but none is installed. You must install peer dependencies yourself.
npm WARN<EMAIL_ADDRESS>requires a peer of gulp-clean-css@* but none is installed. You must install peer dependencies yourself.
npm WARN<EMAIL_ADDRESS>requires a peer of gulp-clone@* but none is installed. You must install peer dependencies yourself.
npm WARN<EMAIL_ADDRESS>requires a peer of gulp-concat@* but none is installed. You must install peer dependencies yourself.
npm WARN<EMAIL_ADDRESS>requires a peer of gulp-concat-css@* but none is installed. You must install peer dependencies yourself.
npm WARN<EMAIL_ADDRESS>requires a peer of gulp-copy@* but none is installed. You must install peer dependencies yourself.
npm WARN<EMAIL_ADDRESS>requires a peer of gulp-dedupe@* but none is installed. You must install peer dependencies yourself.
npm WARN<EMAIL_ADDRESS>requires a peer of gulp-flatten@* but none is installed. You must install peer dependencies yourself.
npm WARN<EMAIL_ADDRESS>requires a peer of gulp-header@* but none is installed. You must install peer dependencies yourself.
npm WARN<EMAIL_ADDRESS>requires a peer of gulp-help@* but none is installed. You must install peer dependencies yourself.
npm WARN<EMAIL_ADDRESS>requires a peer of gulp-if@* but none is installed. You must install peer dependencies yourself.
npm WARN<EMAIL_ADDRESS>requires a peer of gulp-less@* but none is installed. You must install peer dependencies yourself.
npm WARN<EMAIL_ADDRESS>requires a peer of gulp-notify@* but none is installed. You must install peer dependencies yourself.
npm WARN<EMAIL_ADDRESS>requires a peer of gulp-plumber@* but none is installed. You must install peer dependencies yourself.
npm WARN<EMAIL_ADDRESS>requires a peer of gulp-print@* but none is installed. You must install peer dependencies yourself.
npm WARN<EMAIL_ADDRESS>requires a peer of gulp-rename@* but none is installed. You must install peer dependencies yourself.
npm WARN<EMAIL_ADDRESS>requires a peer of gulp-replace@* but none is installed. You must install peer dependencies yourself.
npm WARN<EMAIL_ADDRESS>requires a peer of gulp-rtlcss@* but none is installed. You must install peer dependencies yourself.
npm WARN<EMAIL_ADDRESS>requires a peer of gulp-uglify@* but none is installed. You must install peer dependencies yourself.
npm WARN<EMAIL_ADDRESS>requires a peer of gulp-watch@* but none is installed. You must install peer dependencies yourself.
npm WARN<EMAIL_ADDRESS>requires a peer of map-stream@* but none is installed. You must install peer dependencies yourself.
npm WARN<EMAIL_ADDRESS>requires a peer of replace-ext@* but none is installed. You must install peer dependencies yourself.
npm WARN<EMAIL_ADDRESS>requires a peer of require-dot-file@* but none is installed. You must install peer dependencies yourself.
npm WARN<EMAIL_ADDRESS>requires a peer of run-sequence@* but none is installed. You must install peer dependencies yourself.
npm WARN<EMAIL_ADDRESS>requires a peer of yamljs@* but none is installed. You must install peer dependencies yourself.
npm WARN Cesar No description
npm WARN Cesar No repository field.
npm WARN Cesar No README data
npm WARN Cesar No license field.
npm ERR! code EBADPLATFORM
npm ERR! notsup Unsupported platform for<EMAIL_ADDRESS>wanted {"os":"darwin","arch":"any"} (current: {"os":"win32","arch":"x64"})
npm ERR! notsup Valid OS:    darwin
npm ERR! notsup Valid Arch:  any
npm ERR! notsup Actual OS:   win32
npm ERR! notsup Actual Arch: x64

Please try to install gulp:
npm install gulp-cli -g
npm install gulp -D

Still had the same error. I already had gulp installed.
Error:
C:\Users\Cesar>npm install gulp -D
npm WARN enoent ENOENT: no such file or directory, open 'C:\Users\Cesar\package.json'
npm WARN Cesar No description
npm WARN Cesar No repository field.
npm WARN Cesar No README data
npm WARN Cesar No license field.
npm ERR! code EBADPLATFORM
npm ERR! notsup Unsupported platform for<EMAIL_ADDRESS>wanted {"os":"darwin","arch":"any"} (current: {"os":"win32","arch":"x64"})
npm ERR! notsup Valid OS:    darwin
npm ERR! notsup Valid Arch:  any
npm ERR! notsup Actual OS:   win32
npm ERR! notsup Actual Arch: x64
npm ERR!      C:\Users\Cesar\AppData\Roaming\npm-cache_logs\2019-05-16T17_11_48_531Z-debug.log

try this
npm install gulp-cli -g
npm install<EMAIL_ADDRESS>when running gulp -v in your project folder, you should get this:
CLI version: 2.2.0
Local version: 3.9.1
Then run the semantic install with npm. It was ok for me
cheers

try this
npm install gulp-cli -g
npm install<EMAIL_ADDRESS>when running gulp -v in your project folder, you should get this:
CLI version: 2.2.0
Local version: 3.9.1
Then run the semantic install with npm. It was ok for me
cheers

only thing note/add is node 10x is required, the install process is not working with node 12x

gulp 4 is not compatible with current<EMAIL_ADDRESS>So, you've to downgrade to gulp 3.x.
But the new node 12.x is not compatible with gulp 3.
So, you also have to downgrade node to 10.x or lower.


Avoid to download in the name of the file without the size is found

This pull request avoid to download the cloud file if the name of the file is found in the local directory but without the extension of the size. This use case happens when you downloaded the photo directly with photos app (export original files).
If the --size parameter is Original,  test if the NAME-original.JPG or NAME.JPG is found in the local directory, not download the file.

Great, thanks! This sounds likes a good idea to me


Uploaded images not shown when no pages have been saved yet

Describe the Bug
Bookstack does not show any uploaded pictures in the 'Image Select' popup before any page has been saved on the installation, even though the uploaded pictures appear on the filesystem. The uploaded pictures appear after saving and reopening the page.
I installed Bookstack with docker-compose and podman; with bind-mount, volumes and without any storage specified. It has always behaved the same.
When you know this behaviour it is not a big deal, mainly posting this for others who might encounter the same thing.
Steps to Reproduce

Install bookstack (with docker-compose or podman).
Create a new book.
Create a new page, do NOT save.
Upload an image; it will be saved on disk, but not shown on 'Image Selector' popup.

Expected Behaviour
Pictures are shown in image selection popup, even before saving for the first time.
Screenshots or Additional Context
before saving the first page created on the installation

after saving and reopening the page

Browser Details
No response
Exact BookStack Version
v23.01.1
PHP Version
8.2
Hosting Environment
Debian 11 VPS, docker-compose & podman

Thanks for reporting this @stfeb, Can confirm.
Now a few other recent less-clear image upload issue reports make sense :sweat_smile:
Have assigned to be addressed for next feature release.

Addressed within 08b39500b3b27181a7a1a0e4ee51dabce45673c2. Will be part of the next feature release.
Thanks again @stfeb for reporting.


GTFS Upload skips all files after zip file is edited

So I'm trying to upload the data for my local transit system and the upload fails when I import the zip file published here.  I'm of errors stating that ID's for stops and stop_times couldn't be found.  So it errors out.
So I wanted to test that the format was correct.  I unzipped the file, made a few edits, rezipped and uploaded.  No major changes, but now it skips the feed_info and every file, saying there's no tables and 0 records are uploaded.  I tried unzipping and rezipping with no changes and same thing.
I'm new to the Play framework and I'm having a hard time tracking down the GTFSFeed.java file.  I can't find it or the class anywhere.  What am I doing wrong here?

nvm, i downloaded the gtfs-lib repo and i'm looking through the code to figure out why GTFSFeed isn't reading the files in the zip.  i'm trying to find a way to debug the play framework via intellij to track down the problems.

K, the file index was incorrect, so now i can make modifications to the zip file to test how it affects parsing.
i'm still having problems getting some of the CSV files to parse.  I tried uploading the GTFS file for Annapolis and this one works fine.  But our GTFS file has problems on the stop_id and trip_id for stops.txt, stop_times.txt and trips.txt.  I'm debugging GTFS-editor and it just reads null values for these columns.

I think it's a UTF Byte Order Mark issue.  However, I'm not sure how to the updated version of GTFS-lib into the project.


portal.azure.com.mcas.ms

According to https://github.com/AdguardTeam/AdguardFilters/issues/139625
Issue URL (Incorrect Blocking)
https://portal.azure.com.mcas.ms/resource/subscriptions/resourceGroups/Azure_AD_B2C/overview
Comment
Username: @PA1138

Whenever AdGuard is on, I can't see the resources in a resource group in Azure Cloud. This issue is recent (few months old) that I have raised with Adguard and have advised to follow these steps to report. Nothing seems to be solving this issue unless I disable Adguard.
Also, on a similar note, this happens across all browsers (Chrome, Firefox and Opera).

Screenshots

Screenshot 1

Screenshot 2

System configuration

Information
value

AdGuard product:
AdGuard for Windows v7.12+nightly+6

Browser:
Edge

AdGuard driver:
WFP

Stealth mode options:
Hide your search queries, Send Do-Not-Track header, Remove X-Client-Data header from HTTP requests, Self-destructing third-party cookies (180)

DNS filtering:
server: quic://dns.adguard-dns.comfilters: User+rules

Filters:
Ad Blocking:AdGuard BasePrivacy:AdGuard Tracking ProtectionSocial Widgets:AdGuard Social MediaAnnoyances:AdGuard AnnoyancesLanguage-specific:AdGuard Dutch

Userscripts:
https://userscripts.adtidy.org/beta/adguard-extra/1.0/adguard-extra.user.js,https://userscripts.adtidy.org/beta/popup-blocker/2.5/popupblocker.user.js,https://userscripts.adtidy.org/beta/adguard-wot/1.0/wot.user.js

Referrer:
https://portal.azure.com.mcas.ms/signin/index/?cas_app_landing_mgc=%7B%22sle%22%3Afalse%2C%22pt%22%3A1%7D

Other extensions used:
BitDefender Total Security (no VPN or other ad blockers).

@PA1138 Hello! Sorry for the late reply. Could you provide some information: Do you (or your organization) use additional security controls, because your URL contains *.mcas.ms ? If so, is it possible for you to try visit Azure Cloud without this defender? (to make sure what's the matter)

@PA1138 Hello! Sorry for the late reply. Could you provide some information: Do you (or your organization) use additional security controls, because your URL contains *.mcas.ms ? If so, is it possible for you to try visit Azure Cloud without this defender? (to make sure what's the matter)

Hi - Microsoft Cloud App Security (MCAS), now known as Microsoft Defender for Cloud Apps is enabled on my tenant, however, the issue with this is that it happens with other Azure tenants where MCAS is not in use. Also, this issue as I mentioned in the original post is that it's relatively new, only started few months ago.
As mentioned in the previous post Here that this gets "resolved" with the use of AdGuard VPN.

Hey, AdGuard was just updated to version 7.12.4170.
So, I turned off AdGuard VPN and cleared browser cache and it seems to be working now. I also tried with different browsers and incognito and no issues have been observed.
Thanks.


Remove Expired Link on Access

Since there is no background jobs scheduled to wipe out expired resources, for the time being public links are going to be removed on a "on demand" basis, meaning whenever there is an API call that access the list of shares for a given resource, we will check whether the share is expired and delete it if so.
This code will not live in the managers (drivers), since we want the behavior to be consistent across implementations.
Closes https://github.com/owncloud/ocis/issues/372

@PVince81 any update on this?

@labkode setting this one as WIP, as I hacked it around a little bit, and it's lacking some process. We moved it's priority to a future sprint and will retake it soon.

closing in favor of #1361


Try to fix docs permission errors

The job pushing documentation to gh-pages is broken right now (https://github.com/lab-cosmo/equistore/actions/runs/4341978102/jobs/7582234507), I suspect this is because of the tentative permission fix from #163. This PR tries to workaroud the issue in another way, having a separate workflow for posting the link

This seems to work: https://github.com/lab-cosmo/equistore/pull/169


FATAL ERROR: v8::ToLocalChecked Empty MaybeLocal.

Just upgraded to Node 8. When my project attempts to run
app.use(require('node-sass-middleware')({
  src: path.join(__dirname, 'public'),
  dest: path.join(__dirname, 'public'),
  indentedSyntax: true,
  sourceMap: true
}))

it craps out with:
FATAL ERROR: v8::ToLocalChecked Empty MaybeLocal.
 1: node::Abort() [/usr/local/bin/node]
 2: node::FatalException(v8::Isolate*, v8::Local<v8::Value>, v8::Local<v8::Message>) [/usr/local/bin/node]
 3: v8::V8::ToLocalEmpty() [/usr/local/bin/node]
 4: node::inspector::(anonymous namespace)::CallAndPauseOnStart(v8::FunctionCallbackInfo<v8::Value> const&) [/usr/local/bin/node]
 5: v8::internal::FunctionCallbackArguments::Call(void (*)(v8::FunctionCallbackInfo<v8::Value> const&)) [/usr/local/bin/node]
 6: v8::internal::MaybeHandle<v8::internal::Object> v8::internal::(anonymous namespace)::HandleApiCallHelper<false>(v8::internal::Isolate*, v8::internal::Handle<v8::internal::HeapObject>, v8::internal::Handle<v8::internal::HeapObject>, v8::internal::Handle<v8::internal::FunctionTemplateInfo>, v8::internal::Handle<v8::internal::Object>, v8::internal::BuiltinArguments) [/usr/local/bin/node]
 7: v8::internal::Builtin_Impl_HandleApiCall(v8::internal::BuiltinArguments, v8::internal::Isolate*) [/usr/local/bin/node]
 8: 0x1cc6388437d
 9: 0x1cc63a50969
10: 0x1cc63a4a823

Node.js 8 is supported is added to node-sass in v4.5.3. Do you have same version installed in node_modules? If not, just try running npm update to get latest node-sass.

Winner winner chicken dinner!

I got this error when using a custom node-sass importer when I was referencing a variable out of scope. https://github.com/sass/node-sass/issues/530


No schema support for args-attribute

re #15809

edit keybindings
🐛 there is no mentioning about the args property

@alexandrudima I forgot how we decided to show it or not (remember we talked about it).

@bpasero :+1: for documenting the args in the schema.

The schema inserts args as object but in fact it can be anything.


API for check license method

Implement an api for check license method. Take a file as an input, parse it to send the text as a parameter to the spdx java tool function.
To implement the api, take inspiration from here and here

I would like to work on this issue.

You are welcome to do so. Ping me if you face any problem.

yeah, sure.

Contrary to the App style, the API would probably require a text file for license. So should the API call save the file it receives?

Oh sorry. Didn't see another PR for the same. :sweat:

@yugeshk  Yes. We would like to save the file for now.


meta.nixpkgs

I think this interface is not necessary and using the equivalent upstream interfaces would imo lead to less confusion.

In a flakes world, imo, the way to determine meta.nixpkgs would be as follows: inputs.colmena.inputs.nixpkgs.follows = "";

Since eval.nix is currying the target, we don't have access to the colmena flake.
The obvious alternative is to require a contract on inputs.nixpkgs on the target flake.


Feat: Navbar dropdown animation in mobile devices

Describe the feature
I wish to add a dropdown animation when the menu bar is pressed in mobile devices
Add ScreenShots

please assign this issue to me @Suchitra-Sahoo
Record

[X] I agree to follow this project's Code of Conduct
[X] I'm a GSSOC'24 contributor
[X] I want to work on this issue

Can you explain what exactly you want to do?


synlig: broken after yosys 0.38

Synlig is currently not compaetible with newer versions of Yosys, so marking it broken to allow #297531 to proceed.
Description of changes

Things done

Built on platform(s)

[ ] x86_64-linux
[ ] aarch64-linux
[ ] x86_64-darwin
[ ] aarch64-darwin

For non-Linux: Is sandboxing enabled in nix.conf? (See Nix manual)

[ ] sandbox = relaxed
[ ] sandbox = true

[ ] Tested, as applicable:

NixOS test(s) (look inside nixos/tests)
and/or package tests
or, for functions and "core" functionality, tests in lib/tests or pkgs/test
made sure NixOS tests are linked to the relevant packages

[ ] Tested compilation of all packages that depend on this change using nix-shell -p nixpkgs-review --run "nixpkgs-review rev HEAD". Note: all changes have to be committed, also see nixpkgs-review usage
[ ] Tested basic functionality of all binary files (usually in ./result/bin/)
24.11 Release Notes (or backporting 23.11 and 24.05 Release notes)

[ ] (Package updates) Added a release notes entry if the change is major or breaking
[ ] (Module updates) Added a release notes entry if the change is significant
[ ] (Module addition) Added a release notes entry if adding a new NixOS module

[ ] Fits CONTRIBUTING.md.

Add a :+1: reaction to pull requests you find important.

I don't have permission to merge, so now we need to find a committer.

This pull request has been mentioned on NixOS Discourse. There might be relevant details there:
https://discourse.nixos.org/t/prs-already-reviewed/2617/1728


Added dependency resolution to Syntax check

This PR addresses #332.
It adds the state installed_deps to prevent molecule from repeatedly downloading dependencies when they have already been installed.
This has not been run with the unit tests. I'm currently only able to test it with the docker driver. It seemed to pass on my travis instance. But please feel free to double check this PR with a full tox suite test.

I'm in the process of testing this.  I'll update the PR with the peer review.  It's just a couple of quick fixes.


Recreate user's ACL policy on every login so that ACL updates will take effect

Resolved by https://github.com/open-horizon/vault-exchange-auth/pull/28


Error: unable to publish: unable to process packages: link ... : no such file or directory

Ran
aptly publish repo -architectures='amd64,i386' -passphrase='secret.' master_google-main master_google-main

It generates the following error:
Loading packages...
Generating metadata files and linking package files...
ERROR: unable to publish: unable to process packages: link /root/.aptly/pool/12/9a/google-chrome-stable_60.0.3112.78-1_amd64.deb /root/.aptly/public/master_google-main/pool/main/g/google-chrome-stable/google-chrome-stable_60.0.3112.78-1_amd64.deb: no such file or directory

Yes, the file google-chrome-stable_60.0.3112.78-1_amd64.deb is indeed not found.
but when I ran
>find . | grep google-chrome-stable_60.0.3112.78-1_amd64
./data/.aptly/pool/12/9a/c54d87724b58ea5cff53b05a4858_google-chrome-stable_60.0.3112.78-1_amd64.deb
./data/.aptly/pool/9a/64/c54d87724b58ea5cff53b05a4858_google-chrome-stable_60.0.3112.78-1_amd64.deb
./data/.aptly/public/master_google-main/pool/main/g/google-chrome-stable/c54d87724b58ea5cff53b05a4858_google-chrome-stable_60.0.3112.78-1_amd64.deb

Everything is handled by aptly, there is no manual intervention.
Why there is a prefix hash in front of  google-chrome-stable_60.0.3112.78-1_amd64.deb?
If I delete everything and start over, the same issue happens but might be other package from other mirror.
Context

I mirror http://dl.google.com/linux/chrome/deb/ stable main: aptly mirror ....
Copy mirror to local repository: aptly repo import -architectures=amd64,i386 -with-deps=true google-main master_google-main Name
Publish local repository: aptly publish repo -architectures='amd64,i386' -passphrase='secret.' master_google-main master_google-main

Your Environment
aptly version: 1.0.1 or nightly build has the same problem.
Debian GNU/Linux 8 (jessie): 4.9.0-0.bpo.3-amd64

@limelime this happens if you switch between nightly (future 1.1.0) and 1.0.1. Nightly stores packages in a bit different way, so 1.0.1 can't handle it. If you stick with one version and import/publish on the same version it should be fine.
Upgrade from 1.0.1 to nightly is supported and doesn't require any action, but going back is not supported.

I'm seeing this error from a fresh nightly build where I erased the repo and rebuilt it.
I'm not all that familiar with the source, but I'm wondering if
https://github.com/smira/aptly/blob/master/deb/publish.go#L591
isn't using the new filename format (with the checksum)

@colincoghill what do you mean by erased the repo? I would like to see if you're hitting any bug vs. known issue that going backwards is not supported.

I'm not all that familiar with the source, but I'm wondering if
https://github.com/smira/aptly/blob/master/deb/publish.go#L591
isn't using the new filename format (with the checksum)

It does use new format, as now package files track their location. And nightly should never have paths which look like pool/12/9a/google-chrome-stable_60.0.3112.78-1_amd64.deb unless it was upgraded from <= 1.0.x

I've now created a clean new Ubuntu Trusty VM, without aptly installed. I've downloaded and built nightly
(as at 4cca7272cecb16106164d714a29ee7c73b43b5a9)
Creating and publishing a few small mirrors seems to work, but when I try to use the full mirror set I need in production, which includes ubuntu-trusty (amd64), I get:

Generating metadata files and linking package files...
ERROR: unable to publish: unable to process packages: link /root/.aptly/pool/31/2b/0ad_0.0.15+dfsg-3_amd64.deb /root/.aptly/public/incoming/trusty/pool/main/0/0ad/0ad_0.0.15+dfsg-3_amd64.deb: no such file or directory

I can't think of anything I've done which might be wrong. I've attached the full script I use which causes this error (although it mirrors 80G of stuff so probably don't run it directly )
initial_setup.txt

Got a much better test case, for me, this dies with:
ERROR: unable to publish: unable to process packages: stat /root/.aptly/pool/ed/18/libestr0_0.1.10-0adiscon1trusty1_amd64.deb: no such file or directory root@aptly:~/aptly# cat broken.sh
It dies the same way against many repos, I don't think it's anything to do with upstream.

# Create a blank Ubuntu Trusty VM
# install aptly nightly from github.

# Start with no aptly repo/db
# rm -rf /root/.aptly

# initial setup
gpg --no-default-keyring \
    --keyring trustedkeys.gpg \
    --keyserver keys.gnupg.net \
    --recv-keys 0F6DD8135234BF2B

aptly mirror create \
    -architectures=amd64 \
    -filter="rsyslog" \
    -filter-with-deps \
    rsyslog-incoming \
    http://ppa.launchpad.net/adiscon/v8-stable/ubuntu trusty main

aptly mirror update rsyslog-incoming
aptly snapshot create initial-rsyslog from mirror rsyslog-incoming
aptly publish snapshot -architectures=amd64 -distribution="trusty" initial-rsyslog proposed

# refresh
aptly mirror update rsyslog-incoming
aptly snapshot create updated-rsyslog from mirror rsyslog-incoming
aptly publish switch trusty proposed updated-rsyslog

@colincoghill error from above looks like you switched from nightly back to 1.0.1 version (guessing here, but most likely). Going back (nightly to pre-1.1.0) is not supported, while going forward is fine. You need to go back to nightly build (or 1.1.0 when it gets released)

I was careful to create a fresh VM that had never had an older version of aptly and only used the nightly build.
I've just repeated the process, but on MacOSX, on a machine that has never had aptly installed before.
Colins-MacBook-Pro:aptly colin$ aptly publish switch trusty proposed updated-rsyslog Loading packages... Generating metadata files and linking package files... ERROR: unable to publish: unable to process packages: stat /Users/colin/.aptly/pool/ed/18/libestr0_0.1.10-0adiscon1trusty1_amd64.deb: no such file or directory Colins-MacBook-Pro:aptly colin$ aptly version aptly version: 1.1.0
I'm absolutely certain this is not a case of mixing aptly versions.

@colincoghill thanks, I can reproduce that... I'll take a look to see what's up there

@colincoghill thanks for reporting it! 1.1.1 (just released) and latest nightly contain the fix for this problem


In-place widget doesn't support page-bottom javascript loading

The in-place widget template assumes jQuery is loaded at the top of the page - at least from what I can tell. For page load timing/speed reasons, I like to load all javascript at the bottom of the page, but this results in javascript errors with summernote.
I've hacked a few javascript changes to get around this - here's a git diff of the changes I've done to widget_inplace.html (note the + and - lines):

{{ value|safe }}


iOS example crashes in 0.15-rc.3 and in main

Bevy version
I attempted to run the iOS example using 0.15-rc.3 and from the latest commit in main (4225848b0aa08519e2715070b9e617813e3ac6ad)
Relevant system information
I'm using Rust v1.82.0 on MacOS Sonoma
What you did
Attempting to run the iOS example crashes with:
fatal runtime error: Rust cannot catch foreign exceptions
Can't show file for stack frame : <DBGLLDBStackFrame: 0x3396a8160> - stackNumber:3 - name:std::sys::pal::unix::abort_internal::hffa17df7d2f273a1. The file path does not exist on the file system: /rustc/f6e511eec7342f59a25f7c0534f1dbea00d01b14/library/std/src/sys/pal/unix/mod.rs

It works in bevy 0.14.2
I also attemped to reduce the example removing almost everything.
This one crashes too:
//! A 3d Scene with a button and playing sound.

use bevy::prelude::*;

// the `bevy_main` proc_macro generates the required boilerplate for iOS and Android
#[bevy_main]
fn main() {
    let mut app = App::new();
    app.add_plugins(DefaultPlugins).run();
}

Can you please check 0.15.rc-2? There's a wgpu upgrade between them that is a very plausible candidate.

Confirming that reverting the wgpu upgrade commit (4b05d2f4d8a627b9cc74ac77954e3e4cc9e672ed) makes the iOS example run again

Thanks a ton for checking that. I've brought it to the awareness of the relevant experts.

There's not a whole lot of changes in that wgpu version on Metal/Mac/Apple specific things. But the linked upgrade commit also does changes to xcode projects, could those be relevant? https://github.com/bevyengine/bevy/commit/4b05d2f4d8a627b9cc74ac77954e3e4cc9e672ed#diff-10e1daed39805d49f29b77cec041a235e4c8a8795169b84bdb28df24af5d6c0c
Otherwise I'd suspect it's third party crate updates that may have caused this.

But the linked upgrade commit also does changes to xcode projects, could those be relevant? 4b05d2f#diff-10e1daed39805d49f29b77cec041a235e4c8a8795169b84bdb28df24af5d6c0c

That was due to changes in https://github.com/gfx-rs/wgpu/pull/6107.

fixed by https://github.com/gfx-rs/wgpu/pull/6535 on wgpu side

wgpu 23.0.1 was just released, @ferama would you be able to test this again and confirm that the issue is no longer there? Thanks!

Cloning...
git clone git@github.com:bevyengine/bevy.git
git checkout release-0.15.0

Patching wgpu version...
diff --git a/crates/bevy_image/Cargo.toml b/crates/bevy_image/Cargo.toml
index 7b317a521..4346ee0d8 100644
--- a/crates/bevy_image/Cargo.toml
+++ b/crates/bevy_image/Cargo.toml
@@ -49,7 +49,7 @@ image = { version = "0.25.2", default-features = false }
 # misc
 bitflags = { version = "2.3", features = ["serde"] }
 bytemuck = { version = "1.5" }
-wgpu = { version = "23", default-features = false }
+wgpu = { version = "23.0.1", default-features = false }
 serde = { version = "1", features = ["derive"] }
 derive_more = { version = "1", default-features = false, features = [
   "error",
diff --git a/crates/bevy_mesh/Cargo.toml b/crates/bevy_mesh/Cargo.toml
index 85e7c1503..8a2fda119 100644
--- a/crates/bevy_mesh/Cargo.toml
+++ b/crates/bevy_mesh/Cargo.toml
@@ -24,7 +24,7 @@ bevy_utils = { path = "../bevy_utils", version = "0.15.0-rc.3" }
 # misc
 bitflags = { version = "2.3", features = ["serde"] }
 bytemuck = { version = "1.5" }
-wgpu = { version = "23", default-features = false }
+wgpu = { version = "23.0.1", default-features = false }
 serde = { version = "1", features = ["derive"] }
 hexasphere = "15.0"
 derive_more = { version = "1", default-features = false, features = [
diff --git a/crates/bevy_render/Cargo.toml b/crates/bevy_render/Cargo.toml
index 9535fb61e..559a56946 100644
--- a/crates/bevy_render/Cargo.toml
+++ b/crates/bevy_render/Cargo.toml
@@ -68,7 +68,7 @@ codespan-reporting = "0.11.0"
 # It is enabled for now to avoid having to do a significant overhaul of the renderer just for wasm.
 # When the 'atomics' feature is enabled `fragile-send-sync-non-atomic` does nothing
 # and Bevy instead wraps `wgpu` types to verify they are not used off their origin thread.
-wgpu = { version = "23", default-features = false, features = [
+wgpu = { version = "23.0.1", default-features = false, features = [
   "wgsl",
   "dx12",
   "metal",

Launching...
cd examples/mobile && make run

It works now :) Thanks guys

Mmm why the issue is closed? There is not any commit with the new version of wgpu on bevy repo, I only applied the patch manually and tested it locally. Do I misunderstood something?

The versions specified in Cargo.toml match any SemVer compatible updates, so there is no need to update them. Running cargo update is enough.
See Cargo's docs for more info

I still think we should correctly specify the patch to not allow an invalid combination

Guys unfortunately it seems there is another issue. The app launches and run with wgpu 23.0.1 but the interaction with the button doesn’t work.
I noticed that the same happens if I run a wasm build .
To be more specific running the wasm build, ui button interactions works until you open the browser developer console and enable phone screen simulator (tested with chrome) You can test it using the button example from bevy example ui folder
It works in 0.14.2, maybe I should test with 0.15rc2 this too but it seems more ui related.

@ferama touch interaction should now work on iOS if you try the release-0.15.0 branch.
I couldn't reproduce in wasm. my fix was about touch, maybe this "phone screen emulator" replaces click by touches input. Could you also try?

Now works properly on mobile, thanks again for the effort.
Still there is a regression on wasm build (works on 0.14.2, do not with release-0.15.0 branch)
Maybe this should become a separate issue.
How I tested:
$ cargo build --target wasm32-unknown-unknown --example button
$ wasm-server-runner target/wasm32-unknown-unknown/debug/examples/button.wasm

Point the chrome browser at http://<IP_ADDRESS>:1334. Interactions with the button works properly.
Now from chrome enable developer tools, click on the button to Toggle the device toolbar. Now the button doesn't work anymore
Another proof that in 0.14.2 works is that if you point your phone mobile browser at https://bevyengine.org/examples/ui-user-interface/button/ it works as expected.

works for me on chromium. there's no hover but I guess that's normal as there isn't a touch equivalent, but press/release works correctly
https://github.com/user-attachments/assets/0df6d1ce-f484-4ec5-9c38-74e330ab3140

I agree with you about the hover event.
Anyway I have more details: If I choose iPhone SE or iPhone XR from the list it works.
iPhone 12 pro, iPhone 14 pro max and so on it doesn't.
iPad mini it starts to work again. Maybe it is resolution related?
Repeating the steps above on 0.14.2, it always works


Dev login hellojs oauthproxy

New authentication method.
Read more about the approach here: https://github.com/loklak/loklak_webclient/issues/157
Live demo of this branch: http://gofullstack.me:3001/
Conflicts are already resolved before merge.
gulp dev´`` modified with the new approach, servertask is replaced with original express server,oauth``` is create based on this model: https://github.com/MrSwitch/node-oauth-shim
gulp live is basically gulp prod with a server task for those whose server doesn't have a serving static server
gulp prod stays the same.
Docs are coming as merging. #163

Looking at the files, it seems good! Will test and merge.

:+1: go ahead! good work!

Looks good, just reviewed :+1:

:shipit:


[PE-D][Tester F] Can add weird years for attendance

Can consider parsing the attendance datetimes in case of typos

Labels: severity.VeryLow type.FeatureFlaw
original: testing1234567891011121314/ped#11

Hi, thanks for the bug report. However, we do not consider this a bug. The year 28/02/1202 is a valid date. Restricting dates to a valid set of years would not fix the issue of typos as well since a TA can accidentally put 2025 or 2023 as a typo.


Differences in excluded fields in objects of a collection cause state of collection diff to be changed

Hi Daniel,
First of all, thanks a lot for the awesome library! We've been using it in open-source Spinnaker for over a year now with great results.
I think I may have run into a corner case. We are configuring a differ in Kotlin like so:
    val differ: ObjectDiffer = ObjectDifferBuilder
      .startBuilding()
      .apply {
        comparison().ofType(Instant::class.java).toUseEqualsMethod()
        inclusion().resolveUsing(object : InclusionResolver {
          override fun getInclusion(node: DiffNode): Inclusion =
            if (node.getPropertyAnnotation<ExcludedFromDiff>() != null) EXCLUDED else INCLUDED

          override fun enablesStrictIncludeMode() = false
        })
      }
      .build()

This allows us to use a @ExcludedFromDiff annotation to exclude unwanted properties from the diff. This normally works just fine, but I came across a case where, if the objects with excluded fields are part of a collection, and I compare the collection itself, the differ reports a state of CHANGED instead of the expected UNTOUCHED.
For example, this comparison reports UNTOUCHED:
data class MyObject(
  @get:ExcludedFromDiff
  val prop: String
)

val base = MyObject("test")
differ.compare(base, base.copy(prop = "whatever"))

But this comparison reports CHANGED:
differ.compare(setOf(base), setOf(base.copy(prop = "whatever")))

I've tried my best to debug the issue, but failed. If you have any insights and could at least confirm whether you think this might be a bug and whether there's any workaround in version 0.95, that would be greatly appreciated!

Cc: @robfletcher

Cc: @robfletcher

@lorin just pointed out that this may be a duplicate of https://github.com/SQiShER/java-object-diff/issues/96

@lorin just pointed out that this may be a duplicate of https://github.com/SQiShER/java-object-diff/issues/96

比较两个集合对象, 会执行de.danielbechler.diff.differ.CollectionDiffer比较器逻辑:

遍历working集合中的每个元素, 如果不存在于base集合中, 则认为working集合新增了元素
遍历base集合中的每个元素, 如果不存在于working集合中, 则认为working集合删除了元素
元素同时存在于两个集合中, 才会继续比较每个属性的值, 这种情况你的配置才会生效

关键代码:

de.danielbechler.diff.differ.CollectionDiffer#compareInternally
de.danielbechler.diff.access.CollectionItemAccessor#get
de.danielbechler.diff.identity.EqualsIdentityStrategy#equals

判断集合中元素是否相同, 默认调用对象的equals方法, 基于此, 提供两种解决办法:

可以重写数据类的equals和hashCode方法, 忽略添加ExcludedFromDiff注解的字段
自定义并配置IdentityStrategy


[request] browse mode - directory + bugs

Hi,
I have been using your software, and I love the design and the flow in it. I have some request to improve it further :

in Browse - directory (shortcut d), we cannot M+ENTER to enter the context menu from the left column.
This mode is not part of the browse tab, so when we are in Browse - directory and if I press b, it goes back to browse mode with artist/album/genres... view. I am not sure if this is intended or not.
When in Browse, it cannot display the Directory tab by pressing 6 to select the categories.

in KDE, (KDE Neon), the info display from the taskbar does not work properly.

in tmux + Konsole (ncurses 6.1), if I go to key bindings tab (?) from the play queue tab (n) and go back to library view (a) (so I go back to the play queue tab), there is some glitch in the display.

Keep up the good work ! Thanks again

Sorry, finally getting around to triaging this -- there's a bunch to unpack here. :)

I've pushed fix for the two directory browse issues you mentioned.
I'll see if I can get a VM up and running with KDE to see if I can figure out how to fix this issue -- I'm not sure where KDE is sourcing this information.
This is strange, do all instances of the transport at the bottom seem to work properly? I'm trying to figure out if it's a redraw bug or the controls are actually getting created multiple times.

I actually may have an idea about the media player issue -- can you tell me which distribution you're using and how you installed musikcube? (i.e. was it install from a package or built from source?).

Hi,
3. Only the bottom one is working, this is only a display matter. It seems that the play queue window height is changing when going back and forth from the shortcuts to the play queue. it is doing max 4 times, each iteration producing an additional bottom bar on top of the previous one.
I am using KDE neon (Ubuntu 18.04, KDE plasma 5.18.3). I have installed the software from the deb package.
I have tried to compile it from source, I had a problem at the cmake init with the mpris plugin not being loaded.

Few more ideas I had :

In the context menu, it could be nice to have a "hot swap" selection like when hitting M-a. The hot swap does not work from the left column (whatever the category). It does not work as well in the right column when we select the folder name (album name)

minor thing, when we do from Directory > Play Queue window > Directory, the selection is reset (goes back to the first directory at the top of the list) while in Browse Window (Artists, Albums, Genres...) it does stay on the previous selection.

From the last git version :

Not sure if you have finalized the integration of the Directory mode in the Browse Window but when selecting Directory mode via 6, doing something else (going to Play Queue, filter, tracks...) and going back to the Browse Window reset the view to the first selection (Artists). It does not stay on Directory mode but goes back to the previous panel.

If you need more info, please let me know !
Again, love your work !

OK so:

I have a feeling your KDE tray icon issues are due to the MPRIS plugin not getting loaded. Do you know if it's working on your installation? If you go to settings > configure plugins in the app and you don't see MPRIS interface it's not working.
As you've probably noticed by now, browsing by directory is sort of a special snowflake in that it it's a weird pseudo-category that doesn't behave like the rest. I also don't use it much personally so there are bugs. I just fixed the one where it gets reset when swapping between other views, like the play queue. :)
Let me think a bit about the hotswap from the category/directory context menu and get back to you.

Thanks for the feedback and bug reports, they are very helpful!

Alright, pushed a change that adds hotswap from category/directory list context menu.

Alright, pushed a change that adds hotswap from category/directory list context menu.

Thanks a lot !

I have a feeling your KDE tray icon issues are due to the MPRIS plugin not getting loaded. Do you know if it's working on your installation? If you go to settings > configure plugins in the app and you don't see MPRIS interface it's not working.

Indeed, I don't have MPRIS in the plugin list.

As you've probably noticed by now, browsing by directory is sort of a special snowflake in that it it's a weird pseudo-category that doesn't behave like the rest. I also don't use it much personally so there are bugs. I just fixed the one where it gets reset when swapping between other views, like the play queue. :)

I am, on the contrary, using a lot the directory mode ! The last changes you made are perfect.
If I am thinking of something else, I will let you know. Thanks a lot for listening to my requests ! :+1:

Awesome, sounds like we're getting close to resolving all of your issues. Sounds like you're building from source now -- if you install libsystemd-dev and rebuild like this:

cd ~/src/musikcube or whatever...
./clean-nix.sh
cmake .
make -j4

It should now enable the MPRIS plugin and the KDE sys tray applet thing should hopefully work properly. If you get around to doing this, let me know if it solves your issue.
As for the tmux problem: I'll try to find some time to reproduce the issue this weekend or shortly after -- it'd be nice to fix that as well.

Awesome, sounds like we're getting close to resolving all of your issues. Sounds like you're building from source now -- if you install libsystemd-dev and rebuild like this:

Indeed, it could find MPRIS and I can modify and play/pause from the task bar. Though it do not detect the song's name and artist and do not display the cover (I suspect KDE to malfunction in this case because I had the same issue with cmus and cmusd).
I have a question, maybe I missed it, is there any way to start globally the playback with a shortcut ? I know it is possible to pause/resume.

As for the tmux problem: I'll try to find some time to reproduce the issue this weekend or shortly after -- it'd be nice to fix that as well.

I tested with a different terminal than Konsole (kitty), the behaviour is the same in tmux.

Alright, I think I got to the bottom of the MPRIS issue.

Pushed the relevant changes back to master.
I tried briefly to repro the tmux issue but haven't been able to so far. I'm going to give it another go tonight if I can find a bit more time.

Alright, regarding the tmux issue: I tried again on a Ubuntu 18.04 VM with the KDE DE using Konsole and tmux. I did the following:

Built musikcube from source.
Started a new tmux session, started musikcube, then added some music.
Started playback, switched to the play queue
Pressed ? to enter the key bindings screen
Pressed a to switch back to library > play queue
Pressed ? then a a few more times. Didn't see the playback controls stack up like your screenshot.

Am I missing a step somewhere? :)

Alright, regarding the tmux issue: I tried again on a Ubuntu 18.04 VM with the KDE DE using Konsole and tmux. I did the following:

Built musikcube from source.
Started a new tmux session, started musikcube, then added some music.
Started playback, switched to the play queue
Pressed ? to enter the key bindings screen
Pressed a to switch back to library > play queue
Pressed ? then a a few more times. Didn't see the playback controls stack up like your screenshot.

Am I missing a step somewhere? :)

It is the good sequence. Here it is glitching. This is interesting... My tmux config is based on this one : https://github.com/gpakosz/.tmux
Maybe is it the status line with powerline symbols ?
For the MPRIS, everything is working fine now, thanks ! I don't see the cover though (it was doing the same with cmus...). It is not really important to me but I wanted to point it out.

Yeah, in this case album art will only show up in the little player widget if it's already embedded in the audio file itself as metadata.
I tried that tmux config and enabled the powerline characters, but still wasn't able to repro. :(

Fixed as part of 0.90.0


Import command is failing due to lower case 'r' in redis.

File: themes/default/content/registry/packages/azure/api-docs/redis/cache/_index.md
When using the import command I'm receiving an error stating that "Error parsing Resource ID pulumi import azure:redis/cache:Cache cache1 /subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/group1/providers/Microsoft.Cache/redis/cache1: ID was missing the Redis element"
this seems to be resolved when I change the /redis/ to /Redis/.  Please update the page to reflect the upper case.

thx for the report @kwrightepc! we will take a look as soon as we can.

Going to close this for now if no additional comments/ issues.