Fix examples and doc-tests for dynamodb

Looks like the DynamoDB crate wasn't regenerated. I now did so.
I also enabled doc-tests and examples in Travis. (It takes an additional 1:15 to execute those tests on my notebook.)

We'd like to include this in 0.32.0, but if it increases the CI time to be at risk of running into frequent timeouts, I'm wondering whether we should consider landing the changes to the example without enabling the tests for now.
I'm re-running the Travis build, we'll need to see if it succeeds this time.

Reverted the Travis related changes.

Thanks for reverting those Travis changes. It still timed out but I'll give it another poke.
Once we get 0.32 released, let's look at https://github.com/rusoto/rusoto/issues/985 so we can bring back doctests. 👍
This PR is good to go once we get the green light from Travis. 😄

Thanks @pgerber!


Add close cross for tabs

Concerns https://github.com/zeit/hyperterm/issues/40.
This patch adds a SVG close cross for each tab.

Alters Hyperterm#closeTab() to take an argument: id (the tab index).
Adds Hyperterm#closeActiveTab() method for closing the current tab.
Adds Icon React component.

Preview

@rauchg I implemented it as an SVG sheet with symbols, which gives us flexibility of styling icons with colors and such, but still keeping the SVG code itself external. This scales really well too. Whatcha think?
<svg className='icon'>
   <use xlinkHref='assets/icons.svg#close'></use>
</svg>

☝ Could be made into a reusable component too I guess if we wanna.

That's beautifully done. Thanks for educating me @johanbrook

⚡ 👍


Light, Dark, Darker, (Darkest), Black Theme settings

Hi devs,
I like to propose a Darkest theme option under the Interface settings. This would not be a replacement of Black or Darker, just another option.
In the screenshot below, we've got the Darker theme in the LMS app:

The following screenshot, from another app, is an example of what I'd like to see when specifying a Darkest theme. It's not black, by the way, just a shade of very dark gray:

Thanks in advance,
Bill

This is a skin requuest, not app - the skin controls themes, colours, etc.
Not sure I see the use of yet another dark variant. However, you can install your own themes - see https://github.com/CDrummond/lms-material/wiki/07-Customisation
Closinf this as its not applicable to this APK.


Add OSM background style option

I'm submitting a feature request
Brief Description
Currently the basemap for the changeset visualization are only Mapbox maps. Since these maps have only a subset of OSM features visible, often I open the changeset page to view current state of the rendered map on the OSM mapnik style.
If we have an OSM layer as a basemap style option, one can analyze the changeset within osmcha
What is the motivation / use case for this feature?

Avoids having to browse to the OSM site for the latest state of the map

Other Information / context:

Demo code to add the OSM mapnik tiles to GL JS: https://www.openstreetmap.org/user/PlaneMad/diary/43008

Another suggestion: Choose the basemap based on the "best: true" option that the editor-layout-index provides for an area.
This would make checking the changeset a lot easier since this image is more likely being used for the change itself.

I added Bing imagery and I tried to add the OSM carto style, but it now requires to inform a user-agent. I didn't find a way to do it with mapbox-gl.
@tordans I like the idea of using editor-layout-index options!

I added Bing imagery and I tried to add the OSM carto style, but it now requires to inform a user-agent. I didn't find a way to do it with mapbox-gl.

@willemarcel can you use transformRequest to add a header that the OSM operations team can whitelist?
 transformRequest: (url, resourceType)=> {
    if(resourceType === 'Source' && url.startsWith('http://myHost')) {
      return {
       url: url.replace('http', 'https'),
       headers: { 'my-custom-header': true},
       credentials: 'include'  // Include cookies for cross-origin requests
     }
    }
  }


CO-1840_Menu_OrgIdentity_list_is_wrong

Apply Contain logic and filter out the in-necessary entries.

Closing this since we moved it to hotfix 3.2


Can't import Bestiary - Wererat (Hybrid Form) (from d20pfsrd.com)

Can't import d20pfsrd.com statblock:
Wererat (Hybrid Form)
CR 2
XP 600
Human natural wererat rogue 2 ( augmented humanoid)
LE Medium humanoid (human, shapechanger)
Init +3; Senses low-light vision, scent; Perception +8
DEFENSE
AC 19, touch 14, flat-footed 15 (+3 armor, +3 Dex, +1 dodge, +2 natural)
hp 20 (2d8+8)
Fort +3, Ref +6, Will +3
Defensive Abilities evasion; DR 10/silver
OFFENSE
Speed 30 ft.
Melee short sword +4 (1d6+2/19–20), bite –1 (1d4+1 plus disease and curse of lycanthropy; DC 15)
Ranged light crossbow +4 (1d8/19–20)
Special Attacks sneak attack +1d6
STATISTICS
Str 15, Dex 17, Con 16, Int 10, Wis 16, Cha 6
Base Atk +1; CMB +3; CMD 17
Feats Dodge, Weapon Finesse
Skills Acrobatics +8, Bluff +3, Climb +7, Intimidate +3, Knowledge (local) +5, Perception +8, Sense Motive +8, Stealth +8, Swim +7
Languages Common
SQ change shape (human, hybrid, and dire rat; polymorph), rogue talents (fast stealth), lycanthropic empathy (rats and dire rats), trapfinding
SPECIAL ABILITIES
More About Wererats

Can't import Hero Lab statblock:
Wererat (Lycanthrope)      CR 2
XP 600
Male human natural dire wererat rogue 2 (Pathfinder RPG Bestiary 197)
LE Medium humanoid (human, shapechanger)
Init +2; Senses low-light vision, scent; Perception +8
Defense
AC 16, touch 13, flat-footed 13 (+3 armor, +2 Dex, +1 dodge)
hp 18 (2d8+6)
Fort +2, Ref +5, Will +3
Defensive Abilities evasion
Offense
Speed 30 ft.
Melee short sword +3 (1d6+1/19-20)
Ranged light crossbow +3 (1d8/19-20)
Special Attacks curse of lycanthropy (DC 15), sneak attack +1d6
Statistics
Str 13, Dex 15, Con 14, Int 10, Wis 16, Cha 6
Base Atk +1; CMB +2; CMD 15
Feats Dodge, Weapon Finesse
Skills Acrobatics +7, Bluff +3, Climb +6, Intimidate +3, Knowledge (local) +5, Perception +8, Sense Motive +8, Stealth +7, Swim +6
Languages Common
SQ change shape (human, hybrid, and dire rat; polymorph), lycanthropic empathy (+4 with rats and dire rats), rogue talent (fast stealth), trapfinding +1
Other Gear mwk studded leather, crossbow bolts (20), light crossbow, short sword
Ecology
Environment any urban
Organization solitary, pair, pack (5–10), or guild (11–30 plus 5–12 dire rats)
Treasure npc gear (masterwork studded leather, short sword, light crossbow with 20 bolts, other treasure)
Special Abilities
Change Shape (human, hybrid, and dire rat; polymorph) (Su) Change into three different forms: base humanoid, hybrid and animal forms.
Curse of Lycanthropy (DC 15) (Su) Bitten humanoid enemy within 1 size category contracts lycanthropy (Fort neg).
Evasion (Ex) If succeed on Reflex save for half dam, take none instead.
Fast Stealth (Ex) Move at full speed while using the Stealth skill at no penalty.
Low-Light Vision See twice as far as a human in dim light, distinguishing color and detail.
Lycanthropic Empathy (rats and dire rats) +4 (Ex) Improve the attitude of your type of animal, as if using Diplomacy.
Scent (Ex) Detect opponents within 15+ ft. by sense of smell.
Sneak Attack +1d6 Attacks deal extra dam if flank foe or if foe is flat-footed.
Trapfinding +1 Gain a bonus to find or disable traps, including magical ones.


_ is not defined error when awaiting a promise in a class method call

Describe the bug
When awaiting a promise in a class method call it's generating _ = instantiatedClass.method  however its not defining _ anywhere.
If I move the promise out of the method call it works as expected.
Input code
class Example {
  doSomethingOnClass = () => {

  }
}

const doSomething = async () => {
  const ex = new Example();
  ex.doSomethingOnClass(await Promise.resolve('some string'));
}

Config
{
  "jsc": {
    "parser": {
      "syntax": "typescript",
      "tsx": true
    },
    "transform": {
      "react": {
        "runtime": "automatic"
      }
    },
    "loose": false,
    "target": "es5"
  },
  "minify": false,
  "isModule": true,
  "env": {
    "targets": ""
  }
}

Playground link
https://play.swc.rs/?version=1.2.245&code=H4sIAAAAAAAAA2WNTQrCMBBG94HcYXZNNr2A1I24VvAEQzpoID%2BSCTZFcvcmiii4%2B%2BC9x2ccMsOxoL87gqcUAHO8RE%2F5ZsP1FA4vPoHSMO0770aVovYlhYmB82%2FRVOQ1mG8A8JaoNBZo%2BZwpveuQyvh%2FqHBBm%2BGcordMYyKO7kFq4OYB59TMQfe%2BbiYHFbrAAAAA&config=H4sIAAAAAAAAAz2NQQoDMQwD%2F%2BLzXnvZP%2FQRJnWKSxIH2ykNy%2F69Thd6E5JGOuBlCfYDOqqRLmWzOX5gB5%2BdLCl3hw3cwnIddIZWbJZF66orYfKfGM25UoA4XCo6JzijXUQs3IzFKFjUJ0UfyG4QaeXGef5jtrs8RqHrawNq77V9URZYTH4BvQAvWrQAAAA%3D
Expected behavior
Code not to fail.
Actual behavior
The following error occurs Uncaught (in promise) ReferenceError: _ is not defined
Version
1.2.245
Additional context
In reality I'm calling code similar to this from react in a change handler.  I'm not sure if that has any effect on the issue.

Same issue here.
This bug happens since version 1.2.244. In 1.2.242 it works as expected.
Best regards!

Just to add if you end up wrapping it multiple times, you get many _ = x.y even when its different classes/methods

From my side, in v1.3.0 version works properly!

From my side, in v1.3.0 still works bad. It properly defines what's called _, but does not work as expected.

@carlosala  It works for me.
https://play.swc.rs/?version=1.3.0&code=H4sIAAAAAAAAA2WOSwrCMBCG94HcYXZNNrmA1I24VvAEIQ41kIdkgo2Id3fSIhaEWc33v1ywRHBsNt4DwksKgGu%2B5Ij15tN0SoeFj6CahnG%2FCgBcTpQDmpAnBv33loJPik7qNoK9lp7JgfoFrCJszBLO33aldx1iM%2F8LlJ2tr3AuOXpCU5DrH6gGYh1QLawcdPcvIzZ%2BDv0A4WlrB%2BMAAAA%3D&config=H4sIAAAAAAAAAz2NQQoDMQwD%2F%2BLzXnvZP%2FQRJnWKSxIH2ykNy%2F69Thd6E5JGOuBlCfYDOqqRLmWzOX5gB5%2BdLCl3hw3cwnIddIZWbJZF66orYfKfGM25UoA4XCo6JzijXUQs3IzFKFjUJ0UfyG4QaeXGef5jtrs8RqHrawNq77V9URZYTH4BvQAvWrQAAAA%3D

Yea the playground generates what I expect too, even with multiple wraps.    But will investigate and log as new issues when I find out more.

Yes, looks like new issues appeared.


Remove ITK migration workarounds

Removes workaround from elastix that were needed while migrating from ITK4 to ITK5.
Note that these commits only remove the elastix specific ITK migration workarounds. More work needs to be done to remove the ITK_LEGACY dependency.

The commits look fine, but I thought we were completely switching to the stl for min and max operations and the like?

@mstaring I just replaced min and max from VCL/vnl, thanks for the suggestion. I would prefer to now just merge this pull request (if it's OK). Other VCL/vnl functions (abs, cuberoot, rnd) could possibly also be replaced by std functions, if you like, but that would take more time. And it might cause regression failures. So I'd like to do so in a separate pull request.

Follow-up: https://github.com/SuperElastix/elastix/pull/168


Further "productionize" view.commonwl.org

[x] move to cloud hosting (with existing Rackspace free allotment that ci.commonwl.org is using?)
[x] monitoring: disk space, responsiveness
[ ] backups of user-submitted and generated data

@cure are we doing backups?  can this be closed?


batch 1 of transform/scalar function match

#9658

Codecov Report

Merging #9682 (3cf8975) into master (585e044) will increase coverage by 40.25%.
The diff coverage is 78.94%.

@@              Coverage Diff              @@
##             master    #9682       +/-   ##
=============================================
+ Coverage     28.11%   68.37%   +40.25%
- Complexity       53     5299     +5246
=============================================
  Files          1934     1946       +12
  Lines        103937   104292      +355
  Branches      15768    15809       +41
=============================================
+ Hits          29221    71307    +42086
+ Misses        71858    27878    -43980
- Partials       2858     5107     +2249

Flag
Coverage Δ

integration1
25.40% <78.94%> (-0.46%)
:arrow_down:

integration2
?

unittests1
67.38% <78.94%> (?)

unittests2
15.68% <0.00%> (?)

Flags with carried forward coverage won't be shown. Click here to find out more.

Impacted Files
Coverage Δ

...ot/common/function/scalar/ArithmeticFunctions.java
66.66% <ø> (+45.83%)
:arrow_up:

...ot/common/function/scalar/ComparisonFunctions.java
37.50% <ø> (-12.50%)
:arrow_down:

.../pinot/common/function/scalar/ObjectFunctions.java
60.86% <0.00%> (+60.86%)
:arrow_up:

.../pinot/common/function/scalar/StringFunctions.java
74.10% <ø> (+39.28%)
:arrow_up:

...apache/pinot/common/function/FunctionRegistry.java
87.50% <86.66%> (+0.65%)
:arrow_up:

...e/pinot/common/function/TransformFunctionType.java
100.00% <100.00%> (+0.94%)
:arrow_up:

...pinot/core/data/manager/realtime/TimerService.java
0.00% <0.00%> (-100.00%)
:arrow_down:

...t/core/plan/StreamingInstanceResponsePlanNode.java
0.00% <0.00%> (-100.00%)
:arrow_down:

...ore/operator/streaming/StreamingResponseUtils.java
0.00% <0.00%> (-100.00%)
:arrow_down:

...server/starter/helix/SegmentReloadStatusValue.java
0.00% <0.00%> (-100.00%)
:arrow_down:

... and 1400 more

:mega: We’re building smart automated test selection to slash your CI/CD build times. Learn more

This PR is intended to put the calcite function name in scalar functions we already support?


feat: ✨ Implement New Easing Curves from Animation Tokens

This ticket includes two ToDos:
The easing curves from shoelace should be replaced with the new defined animation tokens / Please keep the default duration values and names
Design should check the animations and decide if adjustments are needed

Blocked by #design https://github.com/synergy-design-system/design/issues/82

@reichst1SICKAG The design tokens are prepared and the next step would be that DEV has to implement the defined tokens to test it in "reality" and decide if adjustments are needed.


Strict typing in Doctrine\ORM, disconnect Doctrine\Common

Initial round of strict typing.

Disconnected Doctrine\Common persistence for now to allow typehinting changes and Doctrine\Persistence migration.
Typehints for classes in the root Doctrine\ORM namespace.
Conflict to prophecy versions without PHP 7.2 support (to be dropped in future).

TODO

[ ] document signature changes - @Ocramius can you please suggest some format? Maybe outside UPGRADE to keep it clean, i.e. something like UPGRADE-STRICT-API.md with diff-like list of changes.
[ ] squash?

@ostrolucky Thanks, adressed. Probably something to look into later to remove int|string union.

[ ] document signature changes - @Ocramius can you please suggest some format? Maybe outside UPGRADE to keep it clean, i.e. something like UPGRADE-STRICT-API.md with diff-like list of changes.

No idea how to make this clearer for readers. UPGRADE.md is the location read by people upgrading the lib: why would this be documented outside it?

[ ] document signature changes - @Ocramius can you please suggest some format? Maybe outside UPGRADE to keep it clean, i.e. something like UPGRADE-STRICT-API.md with diff-like list of changes.

No idea how to make this clearer for readers. UPGRADE.md is the location read by people upgrading the lib: why would this be documented outside it?

Errata: I got a better idea here.
Let's try this upgrade path:

all touched files must become either interface or final class - nothing in-between except for known edge-cases (EntityManager?)
let's list all classes where final was added
let's list all the interfaces in the diff

That's a sufficient UPGRADE.md entry.

Also: I'm working on roave/api-compare this weekend: hope that will help in automating things. This patch is a good test-bed for that library too :+1:  /cc @asgrim


Exception using Vuzzer fuzzing tcpdump

While using Vuzzer fuzzing tcpdump using the command
python runfuzzer.py -s './bin/tcpdump -r %s' \
-i './datatemp/tcpdump/' \
-w './idafiles/tcpdump.pkl' \
-n './idafiles/tcpdump.names'

I got exceptions as below:
Exception in thread Thread-1:
Traceback (most recent call last):
  File "/usr/lib/python2.7/threading.py", line 810, in __bootstrap_inner
    self.run()
  File "/usr/lib/python2.7/threading.py", line 763, in run
    self.__target(*self.__args, **self.__kwargs)
  File "runfuzzer.py", line 628, in main
    gau.prepareBBOffsets()
  File "/home/jshuang/vuzzer/gautils.py", line 523, in prepareBBOffsets
    tdata=pickle.load(tFD)
  File "/usr/lib/python2.7/pickle.py", line 1378, in load
    return Unpickler(file).load()
  File "/usr/lib/python2.7/pickle.py", line 858, in load
    dispatch[key](self)
  File "/usr/lib/python2.7/pickle.py", line 1090, in load_global
    klass = self.find_class(module, name)
  File "/usr/lib/python2.7/pickle.py", line 1124, in find_class
    __import__(module)
ImportError: No module named __builtin__

How can I fix this? I did not encouter this problem with other test programs?
the tcpdump version is 4.5.1

Duplicate of #9


Checkpointing with DeepSpeed

MVP implemented by #199 . Will need some follow ups to make this usable in practice - look out for new issues.


Update CONTRIBUTING.md

Following my own experience getting set up to do Nuxt work recently, I've updated CONTRIBUTING.md in a way would have helped me greatly.

Codecov Report

Merging #3674 into dev will not change coverage.
The diff coverage is n/a.

@@           Coverage Diff           @@
##              dev    #3674   +/-   ##
=======================================
  Coverage   98.94%   98.94%
=======================================
  Files          18       18
  Lines        1139     1139
  Branches      306      306
=======================================
  Hits         1127     1127
  Misses         12       12

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update b4ab277...96c8544. Read the comment docs.


RedisCollector: failed to connect to localhost:6379. init() got an unexpected keyword argument 'unix_socket_path'.

yum install python-redis
diamond-setup -C RedisCollector

echo -e "import redis\nprint redis.__version__" | python
2.0.0

cat /etc/diamond/collectors/RedisCollector.conf
enabled = True
ttl_multiplier = 2
path_suffix = ""
measure_collector_time = True
byte_unit = byte,
db = 0
instances = localhost:6379,
host = localhost
timeout = 10
databases = 16
port = 6379

ISSUE - [2016-02-26 09:34:05,030] [MainThread] RedisCollector: failed to connect to localhost:6379. init() got an unexpected keyword argument 'unix_socket_path'.

For the people that are finding this later on, the solution is to uninstall python-redis with yum, and then re install with pip.
$ yum remove python-redis
$ pip install redis

This repo has moved to https://github.com/python-diamond/Diamond
Please open a new ticket there if this issue is not resolved with the current code there.
Thanks!


Add isState for array function combinator

I hereby agree to the terms of the CLA available at: https://yandex.ru/legal/cla/?lang=en

Non obvious.

Test failed becase of timeout.


[incubating/elasticsearch] upgrade elasticsearch

upgrade to latest elasticsearch release

/ok-to-test

/lgtm


Support pre-releases in Python version requests - command --python <major.minor.pre-release>

Summary
This PR adds support to include Python pre-releases when requesting versions.
Check out the docs for commands that support the Python option:
--python, -p python
The Python interpreter to use for the virtual environment.

At least the following scenarios are supported:
3.13.0a1
3.13b2
3.13rc4
313rc1

Test Plan
I added a basic unit test to uv/crates/uv-python/src/discovery.rs. I could have added more, but I have not discovered any relevant places.
CI passes
Note: I was unable to execute the entire test set locally. There were at least some timeout issues (some tests took over 60 seconds).
========== output ===========
beta version
cargo run -- venv --python 3.13.0b3                                                                                ░▒▓ 94% 󰁹
    Finished `dev` profile [unoptimized + debuginfo] target(s) in 0.20s
     Running `target/debug/uv venv --python 3.13.0b3`
Using Python 3.13.0b3 interpreter at: /home/mikko/.pyenv/versions/3.13.0b3/bin/python3
Creating virtualenv at: .venv
Activate with: source .venv/bin/activate

release candidate
 cargo run -- venv --python 3.13.0rc2                                                                                ░▒▓ 94% 󰁹
    Finished `dev` profile [unoptimized + debuginfo] target(s) in 0.83s
     Running `target/debug/uv venv --python 3.13.0rc2`
Using Python 3.13.0rc2 interpreter at: /home/mikko/.pyenv/versions/3.13.0rc2/bin/python3
Creating virtualenv at: .venv
Activate with: source .venv/bin/activate

cargo run -- venv --python 313rc2                                                                                ░▒▓ 94% 󰁹
    Finished `dev` profile [unoptimized + debuginfo] target(s) in 0.31s
     Running `target/debug/uv venv --python 313rc2`
Using Python 3.13.0rc2 interpreter at: /home/mikko/.pyenv/versions/3.13.0rc2/bin/python3
Creating virtualenv at: .venv
Activate with: source .venv/bin/activate

I did a pass on this, you can see my changes in https://github.com/astral-sh/uv/pull/7335/commits/15f6ba28ecb9b25b5211eb5e228efada75429f30

I also tested this with a few uv venv invocations and it looks good!


added "Morse Code Project"

Description
Please include a summary of the change and which issue is fixed. List any dependencies that are required for this change.
Encrypt the english statements into morse code
Type of change
Please delete options that are not relevant.

[x] New feature (non-breaking change which adds functionality)

Checklist:

[x] My code follows the style guidelines(Clean Code) of this project
[x] I have performed a self-review of my own code
[x] I have commented my code, particularly in hard-to-understand areas
[x] I have created a helpful and easy to understand README.md
[x] I have made corresponding changes to the documentation
[x] My changes generate no new warnings
[x] I have added tests/screenshots(if any) that prove my fix is effective or that my feature works

#414


Use .del(key) to delete entries from privateStore

We are using set(key, null) to remove values from the orbitdb kv-store in the private store. As it turns out there is a function .del(key) which we should be using.
oed
Yo, is there a convention to remove a KV-pair from the keyvalue store?
Right now I'm doing db.set('mykey', null)

Haad (Gitter)
@oed db.del('mykey')
...which I now realize is not documented in the API docs :O

cc @christianlundkvist

PR is here: https://github.com/uport-project/3box-js/pull/33

This has been merged, so closing this issue.


Can't start agent: Failed to connect to proxy too many colons in address

Version:
k3s version v1.0.1 (e94a3c60)
Describe the bug
k3s agent fails to start with an error in ws proxy
To Reproduce
run sudo k3s agent --server https://server:6443 --token mytoken
Expected behavior
k3s starts and joins the master node
Actual behavior
the agent fails to join the master and shows the error:
$ sudo k3s agent --server https://server:6443 --token token
INFO[2020-01-05T19:00:29.662843946Z] Starting k3s agent v1.0.1 (e94a3c60)
WARN[2020-01-05T19:00:29.664065519Z] Failed to find cpuset cgroup, you may need to add "cgroup_enable=cpuset" to your linux cmdline (/boot/cmdline.txt on a Raspberry Pi)
INFO[2020-01-05T19:00:29.664333244Z] module overlay was already loaded
WARN[2020-01-05T19:00:29.693394482Z] failed to start nf_conntrack module
WARN[2020-01-05T19:00:29.722644463Z] failed to start br_netfilter module
WARN[2020-01-05T19:00:29.723234986Z] failed to write value 1 at /proc/sys/net/ipv6/conf/all/forwarding: open /proc/sys/net/ipv6/conf/all/forwarding: no such file or directory
WARN[2020-01-05T19:00:29.723454442Z] failed to write value 1 at /proc/sys/net/bridge/bridge-nf-call-iptables: open /proc/sys/net/bridge/bridge-nf-call-iptables: no such file or directory
WARN[2020-01-05T19:00:29.723656460Z] failed to write value 1 at /proc/sys/net/bridge/bridge-nf-call-ip6tables: open /proc/sys/net/bridge/bridge-nf-call-ip6tables: no such file or directory
INFO[2020-01-05T19:00:29.725222696Z] Running load balancer <IP_ADDRESS>:37713 -> [2600:1700:65a0:b3c0::16:6443 server:6443]
INFO[2020-01-05T19:00:31.246795196Z] Logging containerd to /var/lib/rancher/k3s/agent/containerd/containerd.log
INFO[2020-01-05T19:00:31.247721523Z] Running containerd -c /var/lib/rancher/k3s/agent/etc/containerd/config.toml -a /run/k3s/containerd/containerd.sock --state /run/k3s/containerd --root /var/lib/rancher/k3s/agent/containerd
INFO[2020-01-05T19:00:31.468078384Z] Connecting to proxy                           url="wss://2600:1700:65a0:b3c0::16:6443/v1-k3s/connect"
ERRO[2020-01-05T19:00:31.468589581Z] Failed to connect to proxy                    error="dial tcp: address 2600:1700:65a0:b3c0::16:6443: too many colons in address"
ERRO[2020-01-05T19:00:31.468783996Z] Remotedialer proxy error                      error="dial tcp: address 2600:1700:65a0:b3c0::16:6443: too many colons in address"

Additional context
I am attempting to run this on a Pynq-Z1 which runs a modified version of Ubuntu bionic
$ cat /proc/cmdline
root=/dev/mmcblk0p2 rw earlyprintk rootfstype=ext4 rootwait devtmpfs.mount=1 uio_pdrv_genirq.of_id="generic-uio" clk_ignore_unused cgroup_enable=cpuset cgroup_memory=1 cgroup_enable=memory ipv6.disable=1

probably related to rancher/k3s#1191 however the workaround doesn't work for me

I managed to workaround this by telling the master to advertise it's local ipv4 address.

Closing this as Out of Date, https://github.com/k3s-io/k3s/pull/1198 fixed this issue. v1.19 is also EOL.


Workspace - Spend category names and "Uncategorized" aren't translated to Spanish

If you haven’t already, check out our contributing guidelines for onboarding and email<EMAIL_ADDRESS>to request to join our Slack channel!

Version Number: 9.0.56-3
Reproducible in staging?: Y
Reproducible in production?: Y
If this was caught on HybridApp, is this reproducible on New Expensify Standalone?: Y
Found when validation PR: https://github.com/Expensify/App/pull/50698
Email or phone of affected tester (no customers):
Logs: https://stackoverflow.com/c/expensify/questions/4856
Issue reported by: Applause-Internal team
Action Performed:
Precondition: Language is set to Spanish. Have a workspace with categories enabled and one connected to Sage Inacct.

Open the app
Log in with any account with a workspace
Navigate to Configuración - Espacios de trabajo - any workspace with categories enabled - Categorias - Configuración
Navigate to Configuración - Espacios de trabajo - any workspace connected to Sage Inacct - Categorias - Configuración

Expected Result:
Spend category names should be translated.
Actual Result:
Spend category names and "Uncategorized" aren't translated to Spanish.
Workaround:
Unknown
Platforms:

Which of our officially supported platforms is this issue occurring on?

[ ] Android: Standalone
[ ] Android: HybridApp
[ ] Android: mWeb Chrome
[x] iOS: Standalone
[x] iOS: HybridApp
[ ] iOS: mWeb Safari
[x] MacOS: Chrome / Safari
[ ] MacOS: Desktop

Screenshots/Videos
https://github.com/user-attachments/assets/2c4feefc-d4d7-43d0-8b5c-360230a0613e
https://github.com/user-attachments/assets/ed87f64f-adbd-4e97-b5f4-d49ef5f79dc8

View all open jobs on GitHub

It's not expected that these be translated. They are set by the customer.


Added configuration option to disable auditing for object associations

Subject
Pull request allows you to globally disable building a database scheme, and attempt to audit object relationships

I am targeting this branch, because it is a new feature.

Closes #601.
Changelog

### Added
- New configuration option `disable_associations` to disable association tracking.

You also need to rebase 1.x branch @shepherdmat

@VincentLanglet Sorry. I made a mess in git had to create new PR here  https://github.com/sonata-project/EntityAuditBundle/pull/622 Thank you in advance for review


[Snyk] Upgrade joda-time:joda-time from 2.10.9 to 2.10.10

Snyk has created this PR to upgrade joda-time:joda-time from 2.10.9 to 2.10.10.
:information_source: Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

The recommended version is 1 version ahead of your current version.
The recommended version was released 22 days ago, on 2021-02-05.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.
For more information:
🧐 View latest project report
🛠 Adjust upgrade PR settings
🔕 Ignore this dependency or unsubscribe from future upgrade PRs

Is on the way


[FEATURE] Holefill render

make holefill has Fill render

This will let the user know clearly where the fill is
Whether it is high or low ping, it is very practical

Trollhack rename :rofl:

Trollhack rename 🤣

😅

Hmm, you can see the HoleESP disappearing when a hole gets filled, not enough ? :(

Hmm, you can see the HoleESP disappearing when a hole gets filled, not enough ? :(
alr，although it's not obvious, I just think that the render of holefill will make the player react better, if my suggestion is not good, then I'm really sorry my bad ;-;

No it is fine, an ESP option for AutoTrap could be cool too.

Thanks i will enjoy it


Minimal proposal spec

close #8

Only having the isRevoked getter and not a way to listen for the revoke call seems like it would add a delay to when the target and handler references are dropped allowing them to be collected?

I think having Proxy.revocable() not always return {proxy, revoke} is something we can not ask for.  Though it may seem weird, I can foresee someone out there wanting to still revoke an individual proxy, while letting hundreds of others live.  Plus, it's a change in what the function actually returns from a generic dictionary to a Proxy.
So the algorithm at 1.3 step 3b has to go, and the "Else" branch at 1.4 has to be unconditionally run, I think.

The current semantics allows the engine to GC all targets & handlers of the proxy.

I think having Proxy.revocable() not always return {proxy, revoke} is something we can not ask for.

What about changing Proxy.revocable to return { proxy: T, revoke?: Function }? I prefer adding this functionality to the Proxy.revocable instead of new Proxy because it has better semantics.

Though it may seem weird, I can foresee someone out there wanting to still revoke an individual proxy, while letting hundreds of others live.

Oh... This is definitely reasonable. So the correct choice is: accept it on both Proxy.revocable and new Proxy (as 3rd argument)

The current semantics allows the engine to GC all targets & handlers of the proxy.

I think having Proxy.revocable() not always return {proxy, revoke} is something we can not ask for.

What about changing Proxy.revocable to return { proxy: T, revoke?: Function }? I prefer adding this functionality to the Proxy.revocable instead of new Proxy because it has better semantics.

This proposal is definitely aiming at Proxy.revocable, and considering new Proxy in #6.

spec updated.

I still have a concern about directly referencing AbortController as the mass-revocation signal basis.

Maybe we can follow https://github.com/tc39/proposal-cancellation/issues/31 as our foundation.

There's a conflict.  Can you please update this PR to account for that?

@ajvincent done


read_parquet_metadata - override types via dtype

*Issue #1082 *
Description of changes:
By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.

AWS CodeBuild CI Report

CodeBuild project: GitHubCodeBuild8756EF16-pDO66x4b9gEu
Commit ID: 31204ba6e38b6afcfc2f45ec9d3d38f7e0d2ca60
Result: FAILED
Build Logs (available for 30 days)

Powered by github-codebuild-logs, available on the AWS Serverless Application Repository


Migrate remaining Junit 4 test cases to Junit 5

Describe the bug
Please provide details of the problem, including the version of Spring Cloud that you
are using.
Sample
If possible, please provide a test case or sample application that reproduces
the problem. This makes it much easier for us to diagnose the problem and to verify that
we have fixed it.

Closing in favor of #2847


Lock sim gems

Optimize gems inserts JC only BoP gems when one does not have JC as a profession.
It also inserts more than 3 BoP gems if you are a JC, but they are unique (3)

The gem optimizer hadn't been touched since TBC. It's fixed now though: #632


CLOUDP-181592 Add CRUD commands for “atlas dataFederation list/create/delete/update/describe”

Proposed changes
Add CRUD commands for “atlas dataFederation list/create/delete/update/describe”

Jira ticket: CLOUDP-181592

Checklist

[ ] I have signed the MongoDB CLA
[ ] I have added tests that prove my fix is effective or that my feature works
[ ] I have added any necessary documentation in document requirements section listed in CONTRIBUTING.md (if appropriate)
[ ] I have addressed the @mongodb/docs-cloud-team comments (if appropriate)
[ ] I have updated test/README.md (if an e2e test has been added)
[ ] I have run make fmt and formatted my code

Further comments

I'm leaving the commands hidden for now I intend to make them available once project is over.

evergreen failure seems unrelated

LGTM, but please check the Evergreen tasks


Added Bubblesort in Chip-8 assembly

This code in and of itself is a runnable example, which displays an array of 12 random bytes before being sorted, and after
https://massung.github.io/CHIP-8/ tested using this emulator

I have no idea how to review this one... Maybe @Gathros ?

I'll take a look at it, but I can't promise anything.

@theinventor13 It should be quick, then. The review is just a check to make sure the code functions and follows appropriate style guidelines; however, in this case, we are probably more concerned about functionality than style.

More info on how to do that can be found here: https://github.com/algorithm-archivists/algorithm-archive/wiki/How-to-Contribute#step-33---adding-code-to-your-aaa-repo

yes it works now :+1:


Datadog APM not working with HOST_IP

Describe the bug
Following this page: https://www.getambassador.io/user-guide/tracing-tutorial-datadog/#3-configure-the-tracingservice
I deployed the exact TracingService manifest from the page but APM is not showing up in Datadog. I enabled debug logs and caught this:
[2020-04-01 20:36:21.975][176][debug][upstream] [source/common/upstream/strict_dns_cluster.cc:148] DNS refresh rate reset for ${host_ip}.default, (failure) refresh rate 5000 ms

(edit: this may be unrelated as I see it when removing TracingService as well.)
The diagnostics page shows this:

To Reproduce
Steps to reproduce the behavior:

Deploy documented Datadog APM manifests
See that APM does not show up in Datadog

Expected behavior
APM data populates in Datadog
Versions (please complete the following information):

Ambassador: 1.3.1
Kubernetes environment: EKS
Version: 1.14.9

Additional context
I have working APM with Istio Gateway and my internal services. This is just adding Ambassador as a potential replacement on the front. My services behind Ambassador are emitting trace data just fine using the HOST_IP data using this env var:
       - name: HOST_IP
          valueFrom:
            fieldRef:
              fieldPath: status.hostIP

I guess this is resolved now. I just decided to try adding the HOST_IP env var to the Ambassador deployment itself using the same snippet from above. That worked! This is completely missing in the documentation, though.
It also seemed like I had to restart the Ambassador pods to get APM data to work -- including for the trace/span info to be populated in logs. It was just giving - until then.


Add in the gpt-3.5-turbo-16k model?

Would it be possible to add in the gpt-3.5-turbo-16k model as an option to use?  This should allow for greater token length.

Will be on next release 😉

Awesome, thank you!

New release published!


prescient-filter-method reset after calling the toggling command in minibuffer

In my init file, I have
(setq-default prescient-filter-method '(literal regexp initialism fuzzy))
;; Or
(customize-set-variable 'prescient-filter-method
                          '(literal regexp initialism fuzzy))

It works fine most of the time. But sometimes I want to disable the fuzzy filter to narrow down the candidates, and I would press M-s f, and it works fine too. However, after calling M-s f, the variable prescient-filter-method gets reset to (literal regexp initialism), globally. Is this a bug? Thank you! :)

Yes, that's a bug.  I thought a destructive delq would only modify the buffer-local value of prescient-filter-method. Would you please try the change in #124 and see if that works for you?

It works! That's great! Thank you! :)


Transcript as Mongoose Schema/Entity

Feedback after Milestone 4:

Project adheres to clean architecture for the most part, although transcript should be an entity as well

Make a Transcript an Entity and update the Use Cases if necessary

Done: reviewed and merged to main by @BerkeAltiparmak and @aidanmrli . Updated testing to reflect changes.


Add mermaid.js diagram for DefaultAzureCredential

Add a mermaid.js markup file and the generated SVG file. This approach allows us to more easily regenerate the DefaultAzureCredential authentication flow diagram as needed.
Once this PR merges, I'll follow up with another PR to include the SVG in the Azure Identity README.

API change check for azure-identity
API changes are not detected in this pull request for azure-identity


Refactor for Tally Ho

Use existing framework to provide a similar solution that developers can use when integrating Tally Ho wallet

Wrong repo.... disregard lol


proposal: x/crypto/ssh: server side multi-step authentication

RFC 4252 section 5.1 defines the partial success boolean for failed authentication requests.
If set, it means the authentication method is ok but one or more steps are required to complete the authentication.
We currently support multi-step authentication on the client side but not on the server side.
Server side support is a common request, see #17889.
Several patches are already available, basically we have to return a partial success error and the method/s allowed to continue.
Additionally, according to RFC 4252 section 5:

The 'user name' and 'service name' are repeated in every new
authentication attempt, and MAY change.  The server implementation
MUST carefully check them in every message, and MUST flush any
accumulated authentication states if they change.  If it is unable to
flush an authentication state, it MUST disconnect if the 'user name'
or 'service name' changes.

I would like to discuss a few different solutions for adding this support in x/crypto/ssh.
First approach
Based on some patches discussed in #17889.
Export ErrPartialSuccess like this
// ErrPartialSuccess defines the error that authentication
// callbacks must return for multi-step authentication when a
// specific authentication step succeed
var ErrPartialSuccess = errors.New("ssh: authenticated with partial success")

Add the following to ConnMetadata interface
// PartialSuccessMethods returns the ordered list of
// authentication methods that returned ErrPartialSuccess.
// It can be used inside callbacks to find if a multi-step
// authentication is done using the correct sequence and to
// return the authentication methods that can continue
PartialSuccessMethods() []string

so we keep the ordered list of authentication methods that returned ErrPartialSuccess.
If the username changes we can reset this list or disconnet the client.
Add the following to ServerConfig struct
// NextAuthMethodsCallback, if not-nil, is called when another
// authentication callback returns ErrPartialSuccess or if, after an
// initial partial success, an authentication step fails.
// This callback must return the list of authentications methods
// that can continue.
// An empty list means no supported methods remain and so the
// multi-step authentication will fail
NextAuthMethodsCallback func(conn ConnMetadata) []string

This is the flow:

the application returns ErrPartialSuccess
the NextAuthMethodsCallback is called and the application returns the allowed authentication methods, the application can use PartialSuccessMethods to get the ordered list of authentication methods that returned ErrPartialSuccess

Limitations: we can't implement very specific use cases, such as enabling multi-step authentication for a specific public key (not sure if this is a real use case) or things like that. We just store the list of auth methods that returned ErrPartialSuccess
Second approach
Based on CL 399075 (cc @peterverraedt), export a PartialSuccess struct implementing the Error interface like this
// PartialSuccess might be returned from any of the authentication methods
// to indicate that the authentication is in progress, but more steps must be
// done. It should contain the authentication methods to offer in further
// authentication.
type PartialSuccess struct {
	// PasswordCallback, if non-nil, is called when a user
	// attempts to authenticate using a password.
	PasswordCallback func(conn ConnMetadata, password []byte) (*Permissions, error)

	// PublicKeyCallback, if non-nil, is called when a client
	// offers a public key for authentication. It must return a nil error
	// if the given public key can be used to authenticate the
	// given user. For example, see CertChecker.Authenticate. A
	// call to this function does not guarantee that the key
	// offered is in fact used to authenticate. To record any data
	// depending on the public key, store it inside a
	// Permissions.Extensions entry.
	PublicKeyCallback func(conn ConnMetadata, key PublicKey) (*Permissions, error)

	// KeyboardInteractiveCallback, if non-nil, is called when
	// keyboard-interactive authentication is selected (RFC
	// 4256). The client object's Challenge function should be
	// used to query the user. The callback may offer multiple
	// Challenge rounds. To avoid information leaks, the client
	// should be presented a challenge even if the user is
	// unknown.
	KeyboardInteractiveCallback func(conn ConnMetadata, client KeyboardInteractiveChallenge) (*Permissions, error)

	// GSSAPIWithMICConfig includes gssapi server and callback, which if both non-nil, is used
	// when gssapi-with-mic authentication is selected (RFC 4462 section 3).
	GSSAPIWithMICConfig *GSSAPIWithMICConfig
}

func (p *PartialSuccess) Error() string {
	return "ssh: partial success"
}

The application using the library can implement the multi-step logic using closures.
I have a slight preference for this solution.
cc @golang/security

Add the following to ConnMetadata interface

Adding methods to interfaces is ordinarily not a backwards compatible change, with rare exceptions where interfaces were used somewhere they shouldn't have, and there is no plausible application-side implementation. Is there precedent for extending ConnMetadata? Do applications reimplement it, for example to shim some methods?
In general, I am not a fan of state management in the first approach: if an application needs to keep any other state than "this method was attempted and succeeded" they will do it in some value or closure that we can't reach to reset if the username changes.
It's not great that PartialSuccess needs to replicate all the callbacks from ServerConfig, but it does make application behavior for second steps more explicit. If no one has a better idea, I am happy with it.

This proposal has been added to the active column of the proposals project
and will now be reviewed at the weekly proposal review meetings.
— rsc for the proposal review group

The first approach was backward incompatible, sorry for that. We can achieve the same in a different way and also without adding NextAuthMethodsCallback callback.
We can export an error struct for the partial error
// PartialSuccessError defines the error that authentication callbacks must
// return for multi-step authentication when a specific authentication step
// succeed.
type PartialSuccessError struct {
	// Method is the authentication method name, as defined in RFC 4252 that
	// completed with partial success.
	Method string
	// NextMethods defines the list of authentications methods that can
	// continue. An empty list means no supported methods remain and so the
	// multi-step authentication will fail. Method names are defined in RFC
	// 4252.
	NextMethods []string
}

and we can extend the ConnMetadata so the change is backward compatible
// PartialSuccessConnMetadata is a ConnMetadata that supports returning the list
// of authentication methods completed with partial success.
type PartialSuccessConnMetadata interface {
	ConnMetadata

	// PartialSuccessErrors returns the ordered list of the returned
	// ErrPartialSuccess. It can be used inside callbacks to find if a
	// multi-step authentication is done using the correct sequence.
	PartialSuccessErrors() []PartialSuccessError
}

The applications using the library return the authentication methods allowed to continue within the error and, in the authentication callbacks, can get the list of partial success errors to check the sequence.
However there is still minimal state handling with this approach.

Hello,
some proof of concept implementations here:
https://github.com/drakkan/crypto/tree/multi_step1
https://github.com/drakkan/crypto/tree/multi_step2
I will continue to compare the proposed alternatives in the coming days.

@hanwen, do you have any thoughts about this? Anyone else?

note to @drakkan : you put your fork of golang/crypto is under AGPLv3, and looking at the code to possibly put it into upstream go gives me the beejeebies.

note to @drakkan : you put your fork of golang/crypto under AGPLv3, and looking at the code to possibly put it into upstream go gives me the beejeebies.

This was done before I was a member of the project. I've explicitly granted a license exception for the upstream inclusion, if that's not enough I can remove the license change or limit it to code that will never be merged upstream (e.g. server-side diffie-hellman-group-exchange)

i am happy if https://github.com/tg123/sshpiper.crypto can be merged to upstream
it is private fork of ssh to support https://github.com/tg123/sshpiper to do 2fa and some other routing

Hello @tg123,
thank you for your contribution.
Can you please provide more details on what is implemented in your crypto fork related to this proposal?
This proposal is about server-side multi step authentication (e.g. public key and then password).
Multi-factor authentication, for example password and then TOTP code as per RFC 6238, can already be implemented using keyboard interactive authentication.

the private fork impl first approach by adding
CreateCtx
and
NextAuthMethodsCallback(ctx)
it allows users to create a ctx when connection starts
auth callback simply return err and put some flag into ctx
nextauth will see the flag inside it and decide what methods to return.
i believe problem can be solved by introducing createctxcallback

please be more explicit so that your proposal can be better evaluated.
In your fork I see these API changes:

a new ChallengeContext interface

type ChallengeContext interface {
	Meta() interface{}

	ChallengedUsername() string
}

you have a PiperConfig struct with methods similar to the upstream ServerConfig, do you propose to add the following to ServerConfig?

CreateChallengeContext func(conn ConnMetadata) (ChallengeContext, error)

NextAuthMethods func(conn ConnMetadata, challengeCtx ChallengeContext) ([]string, error)

and also change every callback to include ChallengeContext like this?
PublicKeyCallback func(conn ConnMetadata, key PublicKey, challengeCtx ChallengeContext) (*Permissions, error)

Thank you

the bottom line of my fork is to restrict all changes inside  drop-in file sshpiper.go, no original ssh code will be touched to avoid conflict.
allow sdk user to store something with connection, so things can be shared across callbacks
git diff connection.go
diff --git a/ssh/connection.go b/ssh/connection.go
index 8f345ee..0dc587a 100644
--- a/ssh/connection.go
+++ b/ssh/connection.go
@@ -41,6 +41,12 @@ type ConnMetadata interface {

        // LocalAddr returns the local address for this connection.
        LocalAddr() net.Addr
+
+       // SetContextValue put some user defined value associated with the connection.
+       SetContextValue(key, val any)
+
+       // GetContextValue get value put by SetContextValue.
+       GetContextValue(key any) any
 }

add 2 new callbacks like approach 1.
diff --git a/ssh/server.go b/ssh/server.go
index 727c71b..808106b 100644
--- a/ssh/server.go
+++ b/ssh/server.go
@@ -66,6 +66,13 @@ type ServerConfig struct {

        hostKeys []Signer

+       // NewConnectionCallback, if non-nil, is called after key exchange completed but before authentication.
+       // server could use this callback to prepare auth context.
+       NewConnectionCallback func(conn ConnMetadata) (error)
+
+       // NextAuthMethodsCallback, if non-nil, return the list of authentications methods that can continue.
+       NextAuthMethodsCallback func(conn ConnMetadata) ([]string, error)
+
        // NoClientAuth is true if clients are allowed to connect without
        // authenticating.
        // To determine NoClientAuth at runtime, set NoClientAuth to true

example code

nextauthcallback = func(connmeta) {
if connmeta.GetContextValue("password") == "done" {
return "publickey"
}

return "password"
}

passwordcallback = func(connmeta, pass) {
 if check(pass) {
   connmeta.SetContextValue("password", "done")
 }
}

publickeycallback = func(connmeta, key) {
 if check(key) && connmeta.GetContextValue("password") == "done" {
    auth succ
 }
}

Thank you @tg123, it's clear what you mean now. So we need to extend ConnMetadata and add:
      // SetContextValue put some user defined value associated with the connection.
       SetContextValue(key, val any)

       // GetContextValue get value put by SetContextValue.
       GetContextValue(key any) any

I think NewConnectionCallback func(conn ConnMetadata) (error) is not required once CL 51906 is merged, you should be able to set user defined data  in ConfigForClientCallback.
I think allowing adding user-defined data to ConnMetadata can be useful in general, but perhaps it should be discussed in a different proposal.
Your suggested approach is quite similar to what I have used in SFTPGo until now, personally I prefer the second approach now, but let see what other developers think about.
I understand that the second approach requires some code changes on your part, but other than that if it's not applicable to your use case, can you explain why? It would be useful to know before making a decision. Thank you!

my fork is to proxy ssh conn, so no change to me both 1 and 2
seems 1 is more flexible to me if user can define allowed methods via NextAuthMethodsCallback

@tg123 what you mean is the initial presentation of allowed methods to the user, based on the username sent in the first "none" authentication? I.e. user "a" and user "b" could possibly receive another list of methods.
This is at this point also not included in current proposal 1 and I'm not entirely sure that such a scenario is covered by RFC4252 as the client is free to change both the username and the method in a next authentication attempt. This seems to suggest the list of useful authentication methods returned by the server probably needs to include all methods usable by all users.
Although I agree that I had another fork at some point to do exactly that: to reveal only pubkey authentication for a set of users, and password authentication for another set. But it might be better to cover this in a different proposal.
Btw user-defined data can be kept by calling ssh.NewServerConn per connection, and adding a context in all authentication closures. And piping an ssh connection is possible without forking by starting the outbound connection just before returing authentication success and to a higher-level piping of the ssh.Requests and ssh.NewChannels.

The idea of context had me thinking of the following:
what if we extend ServerConfig to have Context flavors of the callbacks?
type ConnState struct {

}
type ServerAuthResult struct {
   Method string
   Error error
   Permissions *Permissions
}

// Return succeeded authentication methods
func (cc *ConnState) AuthResults() []ServerAuthResult

type ServerConfig struct {
    PasswordStateCallback func(state *ConnState, conn ConnMetadata, password []byte) (*Permissions, error)
}

We could document that the XxxxStateCallback override the XxxxCallback callbacks when provided.
This would let us insert a struct into the server auth process. It provides a mechanism to set state (eg. for multi-step auth) and gives us more flexibility for adding future extensions.

While I agree that we need a way to allow library users to add some contextual data. I would add them to ConnMetadata which is already available in current callbacks, for example in a backward compatible way like this
type ConnMetadataContext interface {
    ConnMetadata
    SetContextValue(key, val interface{})
    GetContextValue(key interface{}) interface{}
}

but I think this should be discussed in a different proposal.
As for multi-step authentication, I think keeping the state within the library is more complex than the proposed callback approach because the library needs to store successful authentications and reset them if the username changes, also users of the library need to compare successful authentications with the expected flow and instruct crypto/ssh to return a partial success error and the authentication methods allowed to continue.
Using the callback approach the application just return a partial success error with the new callbacks.
For example, think of a flow where password authentication is only allowed after a successful public key authentication:

Using the callback approach you can just set a PublicKey callback so password authentication is not even listed initially and therefore SFTP clients won't try it.
Using an approach where authentication callbacks are static you have to define both password and public key callbacks, check the stored side, compare it to the desired flow, and return an error if a client attempts password authentication before a successfull public key authentication.

No new comments here recently; have we converged on an API proposal?

No new comments here recently; have we converged on an API proposal?

I have expressed my opinion and preference, however I suggest waiting a little longer to get other opinions, e.g. from @FiloSottile

Here is the updated proposal after also considering #64974
// ServerAuthCallbacks defines server-side authentication callbacks.
type ServerAuthCallbacks struct {
	// PasswordCallback, if non-nil, is called when a user attempts to
	// authenticate using a password.
	PasswordCallback func(conn ConnMetadata, password []byte) (*Permissions, error)

	// PublicKeyCallback, if non-nil, is called when a client offers a public
	// key for authentication. It must return a nil error if the given public
	// key can be used to authenticate the given user. For example, see
	// CertChecker.Authenticate. A call to this function does not guarantee that
	// the key offered is in fact used to authenticate. To record any data
	// depending on the public key, store it inside a Permissions.Extensions
	// entry.
	PublicKeyCallback func(conn ConnMetadata, key PublicKey) (*Permissions, error)

	// KeyboardInteractiveCallback, if non-nil, is called when
	// keyboard-interactive authentication is selected (RFC 4256). The client
	// object's Challenge function should be used to query the user. The
	// callback may offer multiple Challenge rounds. To avoid information leaks,
	// the client should be presented a challenge even if the user is unknown.
	KeyboardInteractiveCallback func(conn ConnMetadata, client KeyboardInteractiveChallenge) (*Permissions, error)

	// GSSAPIWithMICConfig includes gssapi server and callback, which if both
	// non-nil, is used when gssapi-with-mic authentication is selected (RFC
	// 4462 section 3).
	GSSAPIWithMICConfig *GSSAPIWithMICConfig

	// NoClientAuthCallback, if non-nil, is called when a user
	// attempts to authenticate with auth method "none".
	// NoClientAuth must also be set to true for this be used, or
	// this func is unused.
	NoClientAuthCallback func(ConnMetadata) (*Permissions, error)
}

// PartialSuccessError might be returned from any of the authentication methods
// to indicate that the authentication is in progress, but more steps must be
// done. It should contain the authentication methods to offer in further
// authentications.
type PartialSuccessError struct {
	// Next defines the authentication callbacks that are allowed after a
	// partial success error.
	Next ServerAuthCallbacks
}

func (p *PartialSuccessError) Error() string {
	return "ssh: authenticated with partial success"
}

Any comments on the proposed API in https://github.com/golang/go/issues/61447#issuecomment-1883196004 ?

Replied on the CL, but I like the API :+1:
It fits the wire format and doesn't break compatibility.

Based on the discussion above, this proposal seems like a likely accept.
— rsc for the proposal review group
Proposal details in https://github.com/golang/go/issues/61447#issuecomment-1883196004

No change in consensus, so accepted. 🎉
This issue now tracks the work of implementing the proposal.
— rsc for the proposal review group
Proposal details in https://github.com/golang/go/issues/61447#issuecomment-1883196004


Way to disable error message on specific field in Yii2 ActiveForms?

Hi all... I have a requirement to disable error message on a specific field in Yii2 ActiveForms.
Can anyone help me in this matter?

Use the template option in ActiveField without {error}


Exception raised when a model is set on the table  after attaching the filter header

(Original issue 7 created by coderazzi on 2011-03-05T14:11:44+00:00)
1- Create the JTable
2- Create the TableFilterHeader and attach it to the table
3- Set a model on the table

The exception happens when setting the comparator on the underlying row sorter:

Exception in thread "main" java.lang.IndexOutOfBoundsException: column beyond
range of TableModel
	at javax.swing.DefaultRowSorter.checkColumn(DefaultRowSorter.java:1202)
	at javax.swing.DefaultRowSorter.setComparator(DefaultRowSorter.java:744)
	at net.coderazzi.filters.gui.editor.FilterEditor.initComparator(FilterEditor.java:337)
	at net.coderazzi.filters.gui.editor.FilterEditor.<init>(FilterEditor.java:137)

Original issue reported on code.google.com by coderazzi on 2011-03-05 14:11:44

(Original issue 7 last updated on 2015-04-26T00:26:12.773020+00:00)
(Issue automaticaly closed due to status in Bitbucket: resolved)


Fixing Calico installation steps in the docs

What

This update moves Calico to an operator based installer.
Removes the calico.yaml since it is not the recommended way.

Why
https://github.com/k3d-io/k3d/issues/1325
https://github.com/k3d-io/k3d/issues/1375
Implications

Love the extra ads for other guides at the end 😁
Thanks for this PR!


Enable BrowserStack on iOS

Work on this script will be continued in https://github.com/leancodepl/mobile-tools/pull/45

Fixed the script.

Rebased with master.


DetectRequest in Azure Models

Hello
In the current doc the DetectRequest for the Azure AI Anomlay detector shows import error. I guess the recent update is based on the
detect_univariate_entire_series instead and is not been updated in the documentation. Unless I am missing something please do let me know.

Document Details
⚠ Do not edit this section. It is required for learn.microsoft.com ➟ GitHub issue linking.

ID: 884b5e88-48eb-c3ad-1995-7cd87339783b
Version Independent ID: e06cfd58-46d0-200a-5967-c6a1a7276997
Content: Quickstart: Anomaly detection using the Anomaly Detector client library - Azure Cognitive Services
Content Source: articles/cognitive-services/Anomaly-Detector/quickstarts/client-libraries.md
Service: cognitive-services
Sub-service: anomaly-detector
GitHub Login: @mrbullwinkle
Microsoft Alias: mbullwin

The current version of the docs was written/tested against the previous version of the library. We'll get the docs updated to match last week's release shortly, in the meantime the engineering team samples are up-to-date already:
https://github.com/Azure/azure-sdk-for-python/tree/main/sdk/anomalydetector/azure-ai-anomalydetector/samples

@sathuaju
Thanks for your feedback! We will investigate and update as appropriate.

@mrbullwinkle
Thank you for your response.

Thank you for the quick response.

@sathuaju the doc is now updated to work with the latest Python package. Thanks again for bringing this to our attention. We'll close out this issue now.

#please-close


RemotingMiddleware drop in performance

I have recently upgraded to the latest Websharper.Owin package  (<IP_ADDRESS>-alpha) and I've noticed that my Azure web role's (running on an A0 instance) performance dropped from 5ms/call to 1.5 seconds/call.
It appears that changes made in 0378a1b have resulted in calls such as Remoting.SetContext, Remoting.Server.Create and [new] ContextBuilder(config) to be executed for every call, instead of only once at the time of middleware initialization/set-up. I think that was an unintended side-effect of switching to a class-based implementation.
PR coming shortly.

Oops! Thanks for fixing that, @Tarmil.


ananism, dropworm

This pull request was generated by the 'mq' tool
[test]
flake rate: 0.4
logical conflict every: 100
sleep for: 300s
[pullrequest]
requests per hour: 30
deps=[a,d]

/trunk merge


Added the modified login & signup page under the profile icon

Pull Request Checklist

[X ] I have added screenshots and videos to show before and after the working of my code.
[X ] I have ensured that the screen size is set to 100% while making the video.
[X ] I have synced the latest fork with my local repository and resolved any conflicts.
[ X] I have mentioned the issue number which I created before making this PR .(format to mention issue number is : fixes #(issue number) )
[X ] I understand that if any the above conditions are not met , my PR will not be MERGED .

#442
Added the modified login & signup page under the profile icon .also  modified the navbar of every page.
https://github.com/user-attachments/assets/ba9b3bc2-bb21-4ba7-832b-47bdb15f6b88
Please merge it

fizes #442

sync fork

Issue in Navbar !!
When i am creating new issue bot is saying similar issue already exist .
So I am raising it here .
Pls assign this to me !

i think someone uncommented old navbar code
let me handle this

@ANSHIKA-26 donee


TypeError: 'bool' object is not callable

any help?

@0sir1ss

Why closed it??? @0sir1ss

Fixed

Now new error

Try obfuscating without junk code or anti debugger and see what line the error is on

Try obfuscating without junk code or anti debugger and see what line the error is on

Tried with all off but still...

Yes, the error is in the code your obfuscating. Check the line number and check the indentation. Make sure your code is compatible with python 3.3-3.7

Updated the obfuscator, code should now be compatible regardless of python 3.x.x version


IBM HYPERLEDGER FABRIC LICENSING COST

Please include in your bug report:

[ ] burrow version (docker image tag or branch if built from source)
[ ] monax version (if applicable)
[ ] go version (if applicable)
[ ] docker version (if applicable)
[ ] operating system details (osx/windows/linux)
[ ] what you expected to happen
[ ] what actually happened
[ ] steps to reproduction

If issue is a feature request, tell us why this feature is useful.

Hi Everyone,
I am working on a proposal where i need to propose to my clients to build an de centralized app for their business support using Hyperledger fabric. Request if someone can help in understanding what will be the costing for procuring its license from IBM. Will they charge us on per  node wise ? How do we estimate how many nodes will be there at proposal stage??
Any suggestions/ recommendations would be helpful
Regards

Please forward your question to the Hyperledger fabric team here.


Shorten long URLs

Safari shortens ridiculously long URLs that don’t fit the window from the centre with an ellipsis e.g. example.com/abcd...wxyz.

It would be pretty easy to truncate with ellipsis (…) with CSS. there's a proposal to allow specifying otherwise, but I don't think it's anywhere near implemented. could start with ellipsis at the end for now?

Yes, that would do fine for now.


Provide 'MustSatisfyAnyOf' constructor for TxContraints.

It is actually useful in some cases to be able to perform a disjunction of constraints, and while it is possible to resort to 'Bool' in some cases, when using internal libraries like e.g. the state-machine, we are stuck with the TxConstraints API and therefore, unable to express some useful conditions.

Pre-submit checklist:

Branch

[x] Commit sequence broadly makes sense
[x] Key commits have useful messages
[ ] Relevant tickets are mentioned in commit messages
[x] Formatting, materialized Nix files, PNG optimization, etc. are updated

PR

[x] Self-reviewed the diff
[x] Useful pull request description
[x] Reviewer requested

Hydra is failing building marlowe-playground-server but the error seems quite unrelated to this PR :thinking:
(https://hydra.iohk.io/build/7200402/nixlog/1)
Building library for marlowe-playground-server-<IP_ADDRESS>..
[ 1 of 13] Compiling API              ( src/API.hs, dist/build/API.o, dist/build/API.dyn_o )
[ 2 of 13] Compiling ContractForDifferences ( contracts/ContractForDifferences.hs, dist/build/ContractForDifferences.o, dist/build/ContractForDifferences.dyn_o )
[ 3 of 13] Compiling ContractForDifferencesWithOracle ( contracts/ContractForDifferencesWithOracle.hs, dist/build/ContractForDifferencesWithOracle.o, dist/build/ContractForDifferencesWithOracle.dyn_o )
[ 4 of 13] Compiling CouponBondGuaranteed ( contracts/CouponBondGuaranteed.hs, dist/build/CouponBondGuaranteed.o, dist/build/CouponBondGuaranteed.dyn_o )
[ 5 of 13] Compiling Escrow           ( contracts/Escrow.hs, dist/build/Escrow.o, dist/build/Escrow.dyn_o )
[ 6 of 13] Compiling EscrowWithCollateral ( contracts/EscrowWithCollateral.hs, dist/build/EscrowWithCollateral.o, dist/build/EscrowWithCollateral.dyn_o )
[ 7 of 13] Compiling Example          ( contracts/Example.hs, dist/build/Example.o, dist/build/Example.dyn_o )
[ 8 of 13] Compiling Marlowe.Config   ( src/Marlowe/Config.hs, dist/build/Marlowe/Config.o, dist/build/Marlowe/Config.dyn_o )
[ 9 of 13] Compiling Marlowe.Contracts ( src/Marlowe/Contracts.hs, dist/build/Marlowe/Contracts.o, dist/build/Marlowe/Contracts.dyn_o )

<no location info>: error:
    <command line>: /nix/store/vm63fyjsjbqcmnw6kylrcz9ifp76xfbi-marlowe-lib-marlowe-<IP_ADDRESS>/lib/x86_64-linux-ghc-<IP_ADDRESS>10212/libHSmarlowe-<IP_ADDRESS>-1dEDJa0k8A4LsE0dVCOz0K-ghc<IP_ADDRESS>10212.so: undefined symbol: plutuszmtxzm0zi1zi0zi0zmDgtIhvifsQfC89lk90LbQY_PlutusTxziRatio_zdfFromJSONRatio1_closure
[10 of 13] Compiling Marlowe.Mermaid  ( src/Marlowe/Mermaid.hs, dist/build/Marlowe/Mermaid.o, dist/build/Marlowe/Mermaid.dyn_o )
[11 of 13] Compiling Server           ( src/Server.hs, dist/build/Server.o, dist/build/Server.dyn_o )
[12 of 13] Compiling Swap             ( contracts/Swap.hs, dist/build/Swap.o, dist/build/Swap.dyn_o )
[13 of 13] Compiling ZeroCouponBond   ( contracts/ZeroCouponBond.hs, dist/build/ZeroCouponBond.o, dist/build/ZeroCouponBond.dyn_o )
builder for '/nix/store/l03m2hdb1fr70jq5ji4yw5ilcpm154cw-marlowe-playground-server-lib-marlowe-playground-server-<IP_ADDRESS>.drv' failed with exit code 1

Hydra has been doing that randomly :thinking:

You also need to update the plutus-use-cases test, since this changes the generated PIR.
cabal test plutus-use-cases-test --test-options=--accept

It'll take a while.

cabal test plutus-use-cases-test --test-options=--accept

Not exactly sure why now, but the linker fails for me on the plutus-playground-common...
>>> nix-shell
[nix-shell] $ cabal test plutus-use-cases-test --test-options=--accept
Resolving dependencies...
[...]
Configuring library for playground-common-<IP_ADDRESS>..
Preprocessing library for playground-common-<IP_ADDRESS>..
Building library for playground-common-<IP_ADDRESS>..
gcc: error: .../plutus/dist-newstyle/build/x86_64-linux/ghc-<IP_ADDRESS>10212/playground-common-<IP_ADDRESS>/build/Auth.dyn_o: No such file or directory
gcc: error: .../plutus/dist-newstyle/build/x86_64-linux/ghc-<IP_ADDRESS>10212/playground-common-<IP_ADDRESS>/build/Gist.dyn_o: No such file or directory
gcc: error: .../plutus/dist-newstyle/build/x86_64-linux/ghc-<IP_ADDRESS>10212/playground-common-<IP_ADDRESS>/build/PSGenerator/Common.dyn_o: No such file or directory
gcc: error: .../plutus/dist-newstyle/build/x86_64-linux/ghc-<IP_ADDRESS>10212/playground-common-<IP_ADDRESS>/build/Playground/API.dyn_o: No such file or directory
gcc: error: .../plutus/dist-newstyle/build/x86_64-linux/ghc-<IP_ADDRESS>10212/playground-common-<IP_ADDRESS>/build/Playground/Contract.dyn_o: No such file or directory
gcc: error: .../plutus/dist-newstyle/build/x86_64-linux/ghc-<IP_ADDRESS>10212/playground-common-<IP_ADDRESS>/build/Playground/Interpreter/Util.dyn_o: No such file or directory
gcc: error: .../plutus/dist-newstyle/build/x86_64-linux/ghc-<IP_ADDRESS>10212/playground-common-<IP_ADDRESS>/build/Playground/Schema.dyn_o: No such file or directory
gcc: error: .../plutus/dist-newstyle/build/x86_64-linux/ghc-<IP_ADDRESS>10212/playground-common-<IP_ADDRESS>/build/Playground/Types.dyn_o: No such file or directory
`cc' failed in phase `Linker'. (Exit code: 1)
cabal: Failed to build playground-common-<IP_ADDRESS> (which is required by
test:plutus-use-cases-test from plutus-use-cases-<IP_ADDRESS>).

I am using the nix-shell but maybe I shouldn't?

Seems like a cabal issue, running the tests in nix-shell as you described normally works for me. Maybe run cabal clean and try again.

Okay, should be fine now. cabal clean helped :shrug:


[OmniConfig] Format config options nicely for displaying in README

We're automatically injecting available config values into the README, but the output isn't very readable. We should probably format it like the original list of available configs:

serde.use-decimals (bool)

Default: True
Optional: False
Description: BLAH

Fixed in https://github.com/grahamtt/prosper-shared/commit/a6d84647913ac22accf4152e2de4bb77bafd71d9. An arguably better fix would be to produce Markdown, but the config values are much easier to read now.


These options may not be necessary if you ran "react-native link" -- not helpful

This not a technical issue but merely a suggestion on the wording. The first quote under the iOS Installation section says:

These options may not be necessary if you ran "react-native link"

Under what scenarios would the steps be necessary, and not necessary? The "may not be" phrase is irritating because to me it implies there is no certainty and that the answer depends on other factors as well (maybe operating system, react-native version, npm version, etc.).
Can it be changed to:

These options are not necessary if you ran "react-native link"

If you don't want to use GoogleMaps on iOS then
npm i -S react-native-maps
react-native link

Are enough to work.


Add content menu to CONTRIBUTING

Add content menu to CONTRIBUTING. It should be added before "Installation"

Hello, may I work on this?

Pls assign this to me.

Assigning @chriswmercer for commenting first

Thank you

PR on its way :)


[Event Request] Codeunit 6620 "Copy Document Mgt." - var property

Please add var property for ToSalesHeader in Codeunit 6620 "Copy Document Mgt."
    [IntegrationEvent(false, false)]
    //>><< Add var for ToSalesHeader
    local procedure OnCopySalesShptLinesToDocOnBeforeCopySalesLine(var ToSalesHeader: Record "Sales Header"; var FromSalesLine: Record "Sales Line"; FromSalesShptLine: record "Sales Shipment Line"; var CopyItemTrkg: Boolean)
    begin
    end;

    [IntegrationEvent(false, false)]
    //>><< Add var for ToSalesHeader
    local procedure OnCopySalesInvLinesToDocOnBeforeCopySalesLine(var ToSalesHeader: Record "Sales Header"; var FromSalesLine: Record "Sales Line"; var TempSalesLineBuf: Record "Sales Line" temporary; var ToSalesLine: Record "Sales Line"; FromSalesInvLine: Record "Sales Invoice Line"; IncludeHeader: Boolean; RecalculateLines: Boolean; var TempDocSalesLine: Record "Sales Line" temporary; var FromSalesLine1: Record "Sales Line"; ExactCostRevMandatory: Boolean)
    begin
    end;

Thanks for reporting this. We agree, and we’ll publish a fix asap, either in an update for the current version or in the next major release. Please do not reply to this, as we do not monitor closed issues. If you have follow-up questions or requests, please create a new issue where you reference this one.
Build ID: 12349.


A security vulnerability may cause whole cluster been hijacked

Hi community! I found a vulnerability in longhorn and reported it privately with respect to the security policy one week ago. I tried to send email to the security mailing list and some of the maintainers, but I didn't receive any response currently. This is not urging, I just wanted to ask if I haven't been successful in getting in touch with the maintainer (e.g. maybe the email is recognized as spam). I apologize if this issue has caused any trouble.

Do you mean the mail with the title 2 High vulnerabilities in latest scan of longhorn?
If yes, no worries, we have a ticket in our internal repo for addressing the issue.
Many thanks.

@derekbit Thank you for reply!

Do you mean the mail with the title 2 High vulnerabilities in latest scan of longhorn?

Sadly no. My email is titled with [longhorn] A security vulnerability in longhorn may cause whole cluster been hijacked, and attached with a zip of proof-of-concept code.

If no, can you send it to<EMAIL_ADDRESS>Thank you.

I just sent to this address. : )

@kaaass
Received. We will investigate and address the issue. Thank you.

Sorry for the rushing, may I ask is there any update on this issue?

@derekbit Thanks for the reply! Sorry for rushing during this busy time. I could provide more details to help with the investigation. Please let me know if needed. : )


Add support for gpt-4o-mini and o1-mini

In this update, I added the models gpt-4o-mini and o1-mini to the list of already supported models.
I find it interesting to have models like gpt-4o-mini for quick POCs with a reasonable cost :)

Cheers! Could you update the README to include these models, and also use existing function params for temperature, etc.

OK it turns out our code already supported mini. Could you just make this change to support o1-prev and o1-mini? Please use the versioned model names! Tysm :)

We have drastically cleaned up this code - it should now be trivial to add models through: ai_scientist/llm.py
Would you be happy to add both o1 models here? Please use the named versions!

Thank you so much for your contribution!


Account Collection

Create account schema + model
Modify mockData object to include account

Closes #4

🚢 🇮🇹

🚢 🇮🇹


Started Cleaning Up RuboCop Errors

I worked through the rubocop todo file this afternoon and cleaned up all the errors I felt comfortable fixing.

Corrected all reporting cops.

Before this is merged, I have found an error that I am researching:
Traceback (most recent call last):
4: from toolkit.rb:48:in <main>'         3: from /opt/app/toolkit/tasks/csv2kdi/csv2kdi.rb:76:in run'
2: from /opt/app/toolkit/tasks/base.rb:94:in run'         1: from /opt/app/toolkit/tasks/base.rb:94:in each'
/opt/app/toolkit/tasks/base.rb:95:in block in run': undefined method includes' for :task:Symbol (NoMethodError)

The .include is not a method for a symbol class.  The previous approach to doing an include is the only way I believe would work for the exact purpose (match? looks for whole phrase to match the whole symbol value).  See the previous approach for line 95:
if k =~ /key/ ||  k =~ /token/ || k =~ /secret/

Going to rework this PR with better documentation.


Scene size limit

Dear author：
I noticed that when the size of the ply file exceeds 2gb, the assets will not load. How should I modify this limit

There's no easy way around that. One part is that Unity native byte arrays are limited to 2GB (that one is not very hard to work around, by using arrays of larger type than byte), but another issue is that most GPUs have a limit of 2GB for a GPU buffer.
All in all, right now the limit of a single splat is about 2GB or like 8 million splats. I don't plan on doing any sort of "clever things" to try to improve the situation.


Fix error when creating roles on AWS RDS

More details: https://tickets.puppetlabs.com/browse/MODULES-5068

Removing needs attention label, apologies we haven't got around to triaging and reviewing this PR.

Would you mind rebasing @smortex, im going to add it to a priority list to get picked up on our next community day.

No worries. Looking forward to getting this 5 year old issue finally addressed.

Would you mind rebasing @smortex, im going to add it to a priority list to get picked up on our next community day.

Poke @hackdna as they own the PR.

hey @hackdna, we're looking into this. Could you rebase and resolve any conflicts? Thanks!

Great, thanks for looking into this. I think I've resolved the merge conflict.

Hey @hackdna . pg_roles is also a deprecated view, so replacing instances of one deprecated view with another is not a satisfactory fix unfortunately. I advise you research other potential fixes and create another PR when you've found something and we'll happily take a look.
Thank you for your contributions!

Hey @GSPatton, I've used pg_roles because it's already used extensively in role.pp. Also, another "legacy" view pg_shadow was used in a recently merged PR: https://github.com/puppetlabs/puppetlabs-postgresql/pull/1347/files. How is this case different?


Can we do hyperparameter optimization while doing NAS?

Short summary about the issue/question:
The built in one shot  NAS tuners are good for finding the best architecture, however the hyperparameters (#layers, #epochs or LR) are manually assigned. Is it possible to do NAS and hyperparameter optimization at the same time?
nni Environment:
nni version: 1.6
nni mode(local|pai|remote): local
OS: Linux
python version: 3.6.10
is conda or virtualenv used?: Conda
is running in docker?: Yes

need to update document(yes/no): no
Anything else we need to know: no

@curiousjit this is a good feature request. We are working on this. One workaround for now is combining one-shot NAS with hyper-parameter tuning. You can start an NNI experiment, each trial is a one-shot NAS. In the search space of the experiment, you can configure the hyper-parameters that you want to try.

I am not sure how will that work @QuanluZhang . So if I want to do for DARTS, in config.yml:
experimentName: nas_hpo_darts  ... tuner: ... trial:     command: python3 search.py
where search.py is from DARTS example.
And in search space file I can define the hyperparameters:
"lr":{"_type":"choice", "_value":[0.1, 0.01, 0.001, 0.0001]},"layers":{"_type":"choice", "_value":[2,4,6]}
If I start this NNI experiment, I am not sure how each trial can set the hyperparameter values in my one shot NAS (DARTS) code since they are already initialized in search.py.. I will really appreciate your time if you can help me with this.

@curiousjit you can see DARTS's doc here, the trainer exposes some input arguments, for example arc_learning_rate. Then in each trial you give it a different value, this is like hyper-parameter tuning. In search space file, you give arc_learning_rate a range.
if the hyper-parameter that you want to tune is not exposed by the trainer, you can customize your DARTS trainer and expose the hyper-parameters through input argument. Then use NNI hyper-parameter tuning to tune one-shot NAS.

Thank you @QuanluZhang for your detailed reply. I can understand what you are trying to say but I think I have to do some changes. For example after looking at this cifar10_pytorch hyper-parameter tuning example, I think I have to use nni.get_next_parameter in DARTS example code search.py to input a parameter (arc_learning_rate) from my search space file to DARTS trainer.
Currently I have attached my search_space.json and config.yml and if you think the above idea is correct, kindly let me know and I will work on it. Thank you again for your time.
attachments.zip

@curiousjit  yes, your solution is correct. feel free to feedback if you have further problems.

Thank you @QuanluZhang for your response. I will keep this issue open just in case if I have any additional questions while implementing it. As soon as I do it, I will close the issue too.

@curiousjit great. welcome to share your experience and feedbacks with us.

Is this a thing that is viable? From my understanding as we change the structure of a model we also change slightly the impact on some parameters. Once we are closer to an optimal model it may be more viable to search for optimal parameters for a given model and other similar structures. And won't tuning some parameter also bias the search to find a 'local optimum', IE an effficient small model rather than an overall better model in the long term?
I have not done such trials but I think it might be something to try. Let me know if I'm wrong in this case. Thanks!

@roya0045 , I agree with your statement "we change the structure of a model we also change slightly the impact on some parameters". Both architecture and hyper-parameters have impact on final accuracy. Sometimes architecture has more impact while sometimes hyper-parameters have more impact. Different architectures may need different hyper-parameters to achieve their highest accuracy, thus, it is reasonable to jointly optimize architecture and hyperparameter. It is now a hot research topic.

@QuanluZhang - with the release of Retiarii, I suppose this ability is enabled. may we close this issue?

@QuanluZhang - with the release of Retiarii, I suppose this ability is enabled. may we close this issue?

yes, this ability will be supported in v2.3

@curiousjit , co-optimizing hyper-parameter and neural architecture is achieved by nn.LayerChoice and nn.ValueChoice. Jointly optimizing hyper-parameters in training logic will be supported in v2.4

@curiousjit , co-optimizing hyper-parameter and neural architecture is achieved by nn.LayerChoice and nn.ValueChoice. Jointly optimizing hyper-parameters in training logic will be supported in v2.4

I see. Thank you for the info! Looking forward to it.


feat: add release-it in workflow

this pr adds release-it for auto releasing the package to github and npm.
things you need to do to make it work @nexxeln

generate a github access token with repo scope.
create a env file and follow the content of .env.example file i have added in the commit https://github.com/asheeeshh/create-t3-app/blob/dev/.env.example.
whenever you want to release a new version, run pnpm run release on terminal and proceed with yes for each prompt. It will automatically release the version on github and npm for you.

ps: it auto increments the version in pkg json so make sure you don't increment it yourself.
moreover, i don't think its interfering with the change set we are maintaining, i would still like to have @MWhite-22 's thoughts on this before you merge the pr.

So I think, rather than adding in a package to do this, a GitHub action (as implemented in #66) is the more imperative way of releasing updates.
Ultimately the decision lies with @nexxeln though.


Added Spongebob image randomizer

Still needs a bot trigger.

Will look at this when i have some spare time.


Merging PDFs using --pages removes checkbox/radio fillable field functionality

When combining separate PDFs, the resulting PDF does not maintain some checkboxes and radio buttons. When inspecting the combined pdf in Adobe Pro DC, I noticed that the fields are still there, but they are no longer defined as radio/checkbox fields.
The interesting thing is that it doesn't do this for all checkbox/radio fields. However, I haven't been able to pin point what the difference is between the checkbox/radio fields that work and the ones that don't. 🤔
PDF field before combining:

PDF field after combining:

Here is the command I'm using with v8.4.0:
qpdf --empty --pages 1.pdf 1-z 2.pdf -- combined.pdf
I've attempted to use the following flags in various combinations with no success:

--preserve-unreferenced-resources
--decode-level=none
--normalize-content=n
--preserve-unreferenced

Here is combined PDF that has working and non-working checkboxes. Look at the 3rd page under the occupation section.

https://cdn.ixn.tech/forms/d398c605-d07e-4d63-ada6-25dec7e21b6b.pdf

Here are the original PDFs that were used to create the above combined PDF:

https://ixn-data.s3-us-west-2.amazonaws.com/forms/49/3d1c5830-3114-4d55-875f-3e64f0ce1992.pdf
https://ixn-data.s3-us-west-2.amazonaws.com/forms/49/81009f23-780d-43f4-9c83-3903b7f1730b.pdf

Been doing more digging and it appears as though it might be related to how the fillable fields are named. In the example files above, the fields that don't transfer over properly, all have the same name...and because of this it appears that somewhere down the line their names were appended with numbers to differentiate them. For example, there are 5 fields that appear to have been named "Life1_occupation_status". Their actual names are "Life1_occupation_status#0", "Life1_occupation_status#1", and so on. If I edit those field names and replace the "#" with "_", then they are transferred over properly when I merge the pdfs.
There are some others cases where the field name does not include a "#", and they are still not transferring over. So far, it appears that in those cases they are radio buttons that are "grouped", and therefore their names are the same. If I remove the fields from their group, then they transfer over properly.
So, to summarize it appears that:

Fields whose names include a "#" are not transferred over properly when merging.
Fields that are part of a group are not transferred over properly when merging.

Still having this issue even after updating to 10.1.0. Unfortunately going to have to move to pdftk, as combining pdfs using that library doesn't result in a loss of fillable functionality.

@bsbeeks Sorry, it seems I overlooked this issue and never responded to it. This is a known issue and the most frequent feature request I get, and it is definitely on my roadmap to fix, but it is complicated. The work I'm doing now for 10.2 takes me a long way toward implementing it. It won't be in 10.2, but I'm hoping to get to it soonish, with the caveat that I get a surge of time to work on qpdf only periodically. I don't have a timeline. I will comment on this issue when I get to that functionality and/or tag you on which ever of the other issues ends up being the one to track that feature request. When I'm ready to look at this in depth, I will decide which issue to track it on. This is a good one because of the examples and the details. Stay tuned for more information.
I apologize for overlooking it. If you report an issue in the future and I don't respond within a week or so, feel free to nudge. I usually try to respond promptly to issues but sometimes life happens and I overlook things.

FYI I assign the pages label to all issues that are related to the fact that qpdf doesn't yet manage document-level metadata (other than page labels) when splittng and merging files. 10.2 will have support for handling file attachments via a --copy-attachments-from parameter, and the infrastructure to support that has heavy overlap with form fields. For fields will probably be next up, though I may do tags first if they turn out to be significantly easier.

This will be fixed for 10.2


tests: Add full repro for issue 11793

LGTM, this is exactly the configuration we've seen that causes the issue to manifest. Thank you!
NOTE: needs both Ordering and ExactlyOnce.


Mini dashboard does not work on meilisearch running on sub routes

Description
see issue
The mini dashboard only works when MeiliSearch is running at the root of it's domain.
For example if the instance is hosted here http://mymeili.com then the dashboard will show correctly
If for example the dashboard is in a sub route like http://myapp.com/api then the mini dashboard does not show up.
For example http://<IP_ADDRESS>/api/. It is a white page.
But if you curl on the same URL
➜  ~ curl http://<IP_ADDRESS>/api/health
{"status":"available"}%

Meaning that while the mini dashboard does not show up, meilisearch is still running correctly.
The problematic line is this one in src/App.js:
export const baseUrl =
  process.env.REACT_APP_MEILI_SERVER_ADDRESS ||
  (process.env.NODE_ENV === 'development'
    ? 'http://<IP_ADDRESS>:7700'
    : window.location.origin)

window.location.origin takes the root of the domain whereas href takes the current position:
On this page for example

The problem with changing to href is that now the mini dashboard is accessible on every sub-route on not only the root of the meilisearch instance.
example nginx config to reproduce:
server {
    listen 80 default_server;
    listen [::]:80 default_server;

    server_name _;

    location /api/ {
        proxy_pass http://<IP_ADDRESS>:7700/;
    }
}

Expected behavior
The mini dashboard should show up at the root of where meilisearch is running
Current behavior
It only works when meilisearch is at the root
Environment (please complete the following information):

Meilisearch version: v0.25.2

Related https://github.com/meilisearch/product/discussions/295

Do we have any news on this? It looks like a bug fix more than a new feature to me. If it's tested and it works, it would be nice to add it if it requires such a small change. 😊

I'm not sure this is something we want as a curl on /search I think would return the HTML page. Though I'm sure there is a solution I don't have the required knowledge to play with path and redirections.

Not sure yet what the nginx equivalent is, but I managed to solve the problem with Caddy by matching the Referer header.
If the request's Referer header contains /search/, it will strip /search from the path and effectively serve css js etc. from root.
route {
  ##### Ensure trailing slash
  redir /search /search/

  ##### Serve Meilisearch from a subfolder, by matching the path
  @meilisearch path /search/*
  ##### Serve assets from the subfolder, by matching the HTTP Referer header
  @meilisearch_assets header Referer */search/*

  handle @meilisearch {
    uri strip_prefix /search
    header X-Forwarded-Proto {scheme}
    header X-Forwarded-Host {host}
    reverse_proxy meilisearch:7700
  }

  handle @meilisearch_assets {
    uri strip_prefix /search
    header X-Forwarded-Proto {scheme}
    header X-Forwarded-Host {host}
    reverse_proxy meilisearch:7700
  }
}

I have adopted @firstred’s answer for nginx:
location /search {
  rewrite /search/(.*) /$1 break;
  proxy_pass http://<IP_ADDRESS>:7700;
}

location / {
  if ($http_referer ~* ^.*/search/.*$ ) {
    proxy_pass  http://<IP_ADDRESS>:7700;
  }
}

Thanks a lot for your answers and suggestions 🙏
I'll now close this issue as this can be fixed with the nginx configuration.
Have a nice day ☀

Great! @urbantrout thanks a lot for sharing the nginx version!


test-ci [do not merge]

Ⅰ. Describe what this PR does
only for test ci
II. Does this pull request fix one issue?

III. Special notes for reviewers if any.

Codecov Report

Merging #154 (36e123b) into master (b33f32d) will decrease coverage by 0.01%.
The diff coverage is n/a.

@@            Coverage Diff             @@
##           master     #154      +/-   ##
==========================================
- Coverage   21.78%   21.76%   -0.02%
==========================================
  Files          73       73
  Lines        4369     4373       +4
==========================================
  Hits          952      952
- Misses       3287     3291       +4
  Partials      130      130

Flag
Coverage Δ

unittests
21.76% <ø> (-0.02%)
:arrow_down:

Flags with carried forward coverage won't be shown. Click here to find out more.

Impacted Files
Coverage Δ

controllers/model/modelversion_controller.go
73.46% <0.00%> (-1.02%)
:arrow_down:

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update b33f32d...36e123b. Read the comment docs.


mautrix-whatsapp: 0.10.4 -> 0.10.5

Description of changes
https://github.com/mautrix/whatsapp/releases/tag/v0.10.5
I think this should be backported because of "Fixed voting in polls (seems to have broken due to a server-side change)" in the release notes.
Things done

Built on platform(s)

[x] x86_64-linux
[x] aarch64-linux
[x] x86_64-darwin
[ ] aarch64-darwin

For non-Linux: Is sandboxing enabled in nix.conf? (See Nix manual)

[ ] sandbox = relaxed
[ ] sandbox = true

[ ] Tested, as applicable:

NixOS test(s) (look inside nixos/tests)
and/or package tests
or, for functions and "core" functionality, tests in lib/tests or pkgs/test
made sure NixOS tests are linked to the relevant packages

[x] Tested compilation of all packages that depend on this change using nix-shell -p nixpkgs-review --run "nixpkgs-review rev HEAD". Note: all changes have to be committed, also see nixpkgs-review usage
[x] Tested basic functionality of all binary files (usually in ./result/bin/)
24.05 Release Notes (or backporting 23.05 and 23.11 Release notes)

[ ] (Package updates) Added a release notes entry if the change is major or breaking
[ ] (Module updates) Added a release notes entry if the change is significant
[ ] (Module addition) Added a release notes entry if adding a new NixOS module

[x] Fits CONTRIBUTING.md.

Add a :+1: reaction to pull requests you find important.

Oops, duplicate of #274933.


https test's dont honor Status+Header if expected as "ok" if failed

Describe the bug
the http request test does not honor the status code 403 in conjunction with a proxy, who denies the request, but its ok either.
in addition to this, headers returned from the proxy, who might be "ok", aren't honored.
How To Reproduce
setup a proxy to allow only certain domains via CONNECT or destination ips.
define different goss test's to use this proxy and test for these url's, who are not allowed in the proxy and goss is configured to accept a 403 or an expected header.
a squid.conf for squid 3.5.20 might look like ..
acl localnet src <IP_ADDRESS>/8
acl SSL_ports port 443
acl Safe_ports port 443
acl CONNECT method CONNECT
acl allowed_sites dstdomain www.google.com
acl allowed_sites dstdomain www.github.com
acl allowed_sites dstdomain github.com
acl allowed_dst dst <IP_ADDRESS>
http_access deny !Safe_ports
http_access deny CONNECT !allowed_sites !allowed_dst
http_access deny CONNECT !SSL_ports
http_access allow localhost manager
http_access deny manager
http_access allow localnet
http_access allow localhost
http_access deny all
http_port 3128

using podman you can setup a squid with centos7 using podman with mounting the local dir containing the squid.conf from above ..
podman pull registry.centos.org/centos:7
podman run -dt \
  --publish 3128:3128 \
  --mount type=bind,source=.,destination=/tmp/local \
  --name squid \
  registry.centos.org/centos:7
podman exec squid yum install squid -y

squid can then be fired up in the foreground no-deamon setting with this line, can be break with ctrl+c
podman exec -ti squid squid -N -d debug -f /tmp/local/squid.conf

start another session for controlling what squid is serving ..
podman exec -ti squid tail -f /var/log/squid/access.log

use this goss.yaml for testing ..
port:
  tcp:3128:
    listening: true

http:
  https://www.amazon.com:
    headers: ["X-Squid-Error: ERR_ACCESS_DENIED 0"]
    proxy: http://<IP_ADDRESS>:3128

  https://www.amazon.com:
    status: 403
    headers: ["X-Squid-Error: ERR_ACCESS_DENIED 0"]
    proxy: http://<IP_ADDRESS>:3128

  https://www.bing.com:
    status: 403
    proxy: http://<IP_ADDRESS>:3128

  https://www.google.com:
    status: 200
    proxy: http://<IP_ADDRESS>:3128

  https://www.github.com:
    status: 301
    no-follow-redirects: true
    proxy: http://<IP_ADDRESS>:3128

  https://github.com:
    status: 200
    proxy: http://<IP_ADDRESS>:3128

current output looks like this ..
1..7
not ok 1 - https://www.amazon.com: status: Error: Get "https://www.amazon.com": Forbidden
ok 2 - # SKIP HTTP: https://www.amazon.com: Headers: skipped
not ok 3 - https://www.bing.com: status: Error: Get "https://www.bing.com": Forbidden
ok 4 - Port: tcp:3128: listening: matches expectation: [true]
ok 5 - HTTP: https://www.github.com: status: matches expectation: [301]
ok 6 - HTTP: https://github.com: status: matches expectation: [200]
ok 7 - HTTP: https://www.google.com: status: matches expectation: [200]

Expected Behavior
goss should honor status 403 as "ok" if a proxy responds with 403 and not with "not ok" "Forbidden".
goss should honor response headers if a proxy is used, beside some "error's" during using the proxy and not "SKIP".
Actual Behavior
goss says "not ok" to requests using a proxy, where the proxy returns a 403, but the test condition ist "status: 403" or the headers from the error response of the proxy are set to "ok", either if it is a X-Squid-Error ..
Environment:

goss v0.3.18
linux something

linux something

😂
Agreed, this looks like a bug to me. Thanks for the extremely clear bug report.

Looked into this, it's a bit more challenging than I expected.
Essentially the net/http client in golang doesn't really expose this:

https://github.com/golang/go/issues/38143
https://github.com/golang/go/pull/44123

This was in my notes from a few months back. I'll give a second look through to try and see if there's a solution that doesn't require forking the go stdlib code or if anything changed in the code with the new versions of golang.


Inconvenience: Titling endings

munch'n (munching) would be titled: Munch'N. Should be Munch'n.

fixed in v0.9.2 by using golang.org/x/text/cases


fix: All .NET functions are async now; and need to be awaited.

Also reformat according to .NET standards.

Rider