build a vault

We are going to start storing national identification numbers (https://github.com/gratipay/gratipay.com/issues/3289#issuecomment-107100341) as well as bank account numbers (#3377 downstream of #3366). We need a vault separate from our main application and database that is more highly secure. We should use the PCI DSS 3.0 standard to self-assess the security of our application (https://github.com/gratipay/inside.gratipay.com/issues/214). This ticket is about building a new vault component of our architecture.

---
Want to back this issue? **[Post a bounty on it!](https://www.bountysource.com/issues/19189281-build-a-vault?utm_campaign=plugin&utm_content=tracker%2F85909&utm_medium=issues&utm_source=github)** We accept bounties via [Bountysource](https://www.bountysource.com/?utm_campaign=plugin&utm_content=tracker%2F85909&utm_medium=issues&utm_source=github).

I think we should host directly on AWS, since they clearly offer a PCI compliant environment, whereas Heroku doesn't advertise as much.
http://aws.amazon.com/compliance/pci-dss-level-1-faqs/

I'm envisioning a very simple key/value store, an expansion of https://github.com/whit537/whit537.org/blob/5957285ff970739e701ca46f493bfdd63a98aede/vault.py to put it on the network. I suppose the thing to do would be to use HTTP so we can post into it from javascript. We don't want to transmit sensitive data through the main web app at all.

Let's do some poking around ...
https://hashicorp.com/blog/vault.html
What else?

http://tokenator.org/

https://github.com/SimplyTapp/Tokenator

Data Encryption

In addition to being able to store secrets, Vault can be used to encrypt/decrypt data that is stored elsewhere. The primary use of this is to allow applications to encrypt their data while still storing it in the primary data store.

The benefit of this is that developers do not need to worry about how to properly encrypt data. The responsibility of encryption is on Vault and the security team managing it, and developers just encrypt/decrypt data as needed.

One key feature of our requirements here is that the web app only needs to write secrets, not read them. It's the payroll process that needs to read secrets, in order to originate ACH credits. My thought is that we should use public key cryptography, with the web app holding the public key (via heroku config:set) and the payroll process having access to the private key.
Introducing a server component, whether Vault or something else (including something DIY), increases our surface area and level of complexity significantly moreso than integrating encryption-before-storage into our existing application architecture. What are the PCI implications of the latter?

Another design requirement: I want separate access groups for the main web app and the PCI vault. I want to be able to grant access to Heroku (app + db) as we've been doing, which is carefully, to be sure ... but we need to be even more careful with access to vaulted data.

Let's distinguish the three pieces of information we're intending to collect, their risk profile, and our immediate application requirements regarding each.

piece of information
risk
write
read (process, role, purpose)

bank account number (BAN)
financial theft
web
payroll, Gratipay, generation of NACHA files to submit for ACH origination

individual national identification number (NIN)
personal identity theft
web
web, team owners, filling out tax forms

business identification number (VAT/EIN)
business identity theft
web
web, supporters and team owners, generation of invoices

So the web app does need to read some secrets.

Meaning it does come under the systems we need to consider in terms of PCI compliance.

The requirement for invoices is that VAT be available to both supporters (buyers; https://github.com/gratipay/gratipay.com/issues/1199#issuecomment-24576143) and teams (sellers; https://github.com/gratipay/gratipay.com/issues/1199#issuecomment-67562705).

Hashi Vault supports dynamic secrets. Could we use that to ensure that access to Heroku doesn't entail access to our vault?

Dynamic Secrets: Vault can generate secrets on-demand for some systems, such as AWS or SQL databases. For example, when an application needs to access an S3 bucket, it asks Vault for credentials, and Vault will generate an AWS keypair with valid permissions on demand. After creating these dynamic secrets, Vault will also automatically revoke them after the lease is up.

http://vaultproject.io/intro/

Like, when the app spins up, it asks our vault for credentials to our vault?

Looks like that would take some work.

I'm going through the Vault intro.

Alright, I am introduced to Vault. It's a nice piece of software. We very well may be able to use it here.

I want to give people access to a web app (at Heroku, as it happens) that has access to Vault, without giving the people the same access to Vault as the web app has. This could be achieved with a vault secret backend that supported dynamic secrets, yes?

https://github.com/hashicorp/vault/issues/288

I've registered for an AWS account.

Can we use the browser as the go-between to avoid leaking vault access to people with Heroku access?

I don't see how to meet this requirement with Vault. :(

Or at all, really. If the web app has to be able to write, then whoever has access to the web app could potentially write out their bank account details and collect all of payroll for a week.

Okay, so let's take it that we don't have a separate access tier that is even tighter than access to our production hosting environment and database.
Then we're back up against the fact that Heroku does not promise a PCI-compliant environment to nearly the extend that Amazon does.

Gosh. Are we talking about migrating away from Heroku? :mouse:

Are your datacenters certified / PCI compliant?

All of our datacenters have been certified by national and/or international security standards.

Our NYC1 facility is SSAE16 SOC-1 Type II certified.
Our NYC2 facility is SSAE16 SOC-2 Type II certified.
Our NYC3 facility is SSAE16 SOC-2 and SOC-3 compliant.
Our AMS1 and AMS2 facilities are ISO27001:2005 and ISO9001 certified.
Our AMS3 facility is ISO9001, ISO27001, and SSAE16 Type II certified
Our SFO1 facility is SSAE16 SOC-1 Type II certified.
Our SGP1 facility is ISO27001:2005 certified.
Our LON1 facility is ISO9001:2008, ISO27001, and SSAE16 / ISAE 3402 certified.
Our FRA1 facility is ISO9001:2008, ISO27001:2005, and ISO22301:2012 certified.
https://www.digitalocean.com/help/policy/

Amazon > DO > Heroku

Okay! Reticketed as #3505. :swimmer:

Well, reopening because it still might make sense to separate out the vault from the main db.

See https://github.com/gratipay/inside.gratipay.com/issues/223 for overarching discussion about infosec risk management.

Here's the page listing Vault storage backends. Consul looks like the only real option for us. They recommend 3-5 nodes per data center, and we should have at least two data centers (availability zones [AZ] in AWS-lingo).

Could we get away with one node and an EBS block?

"AWS Tips I Wish I'd Known Before I Started"

A collection of random tips for Amazon Web Services (AWS) that I wish I'd been told a few years ago, based on what I've learned by building and deploying various applications on AWS.

How about two AZs, with one EC2 instance each, running both Vault and Consul + one EBS volume.

I'd really really like to outsource the task of private information management to trusted parties, which could be security and privacy guarantees of our clients.

@techtonik Please make a concrete suggestion for how to do that in our case.

Ok. The suggestion is that we only have to keep records like this:

twitterid - privacyservice1:id

Then we need to query the bank requisites through OAuth or give the privacyservice1 a command "do transaction with ... on behalf of our client that is recorded as privacyservice1:id on your system".
I'd really avoid storing all the private info on GP, because then it will become an easy attack vector automatically.

@techtonik What are some examples of companies we could use for privacyservice1?

@whit537 I think that lawyers should know about privacy services, so they should be aware for privacy services in banking industry as well.

@techtonik That's a cop out. Go find us some privacy services to talk to if you want us to pursue that possibility.

@whit537 we do have a lawyer that we pay, don't we?

@techtonik That's a cop out. Go find us some privacy services to talk to if you want us to pursue that possibility.

@whit537 is it possible to ask him directly first? I don't even know how these services are called in English, leave alone US specific terms.

@techtonik Can you link us to one example of such a service? Doesn't have to be in English, I just have no idea what you're talking about right now. :-(

@whit537 I don't know. Some advanced banks have services that help to preserve user privacy. They can issue anonymous or one-time debit card, for example, and may exhibit a OAuth management API that can also hide the identity. This decreases the risk that user data will be stolen and reused by malicious party. Quick search - https://www.privacyworld.com/5mastercard.html

@techtonik I'm not sure what to do with that side. In any case, we were rejected by Citizens (#3366), so we're no longer trying to build our own direct ACH integration and we don't need to store bank numbers. We're going to try Zipmark instead (#3491). Closing ... for now(?!).

Zipmark didn't work out, and it turns out we want to do strong idv for employment reasons, not just AML reasons.

Blog post on Balanced's architecture:
http://blog.balancedpayments.com/balanceds-architecture/

"best practices for storing ssn]

http://stackoverflow.com/questions/254935/storing-social-security-numbers
https://community.spiceworks.com/topic/739855-best-practices-storing-personal-data-including-ssns
http://www.sqlservercentral.com/Forums/Topic1572097-373-1.aspx
https://www.socialsecurity.gov/kc/id_practices_best.htm
http://security.stackexchange.com/questions/9403/when-storing-private-identifying-information-in-a-web-application-what-is-indu
http://discuss.fogcreek.com/joelonsoftware1/default.asp?cmd=show&ixPost=32808
https://www.ssa.gov/phila/ProtectingSSNs.htm
http://passcouncil.washington.edu/site/files/uw_ssn_best_practices.pdf
http://passcouncil.washington.edu/site/files/uw_ssn_guide.pdf
https://www.reddit.com/r/AskNetsec/comments/2pswf5/securely_storing_ssn_details/

I would look towards HIPAA de-identification guidelines on protected data from HHS.

https://www.reddit.com/r/AskNetsec/comments/2pswf5/securely_storing_ssn_details/cmzyxno
Haven't considered HIPAA before.

http://www.heinz.cmu.edu/~acquisti/ssnstudy/
On Nov 28, 2015 12:55 AM, "Chad Whitacre"<EMAIL_ADDRESS>wrote:

"best practices for storing ssn
https://www.google.com/search?q=best+practices+for+storing+ssn]

http://stackoverflow.com/questions/254935/storing-social-security-numbers
https://community.spiceworks.com/topic/739855-best-practices-storing-personal-data-including-ssns

http://www.sqlservercentral.com/Forums/Topic1572097-373-1.aspx
https://www.socialsecurity.gov/kc/id_practices_best.htm

http://security.stackexchange.com/questions/9403/when-storing-private-identifying-information-in-a-web-application-what-is-indu
http://discuss.fogcreek.com/joelonsoftware1/default.asp?cmd=show&ixPost=32808

https://www.ssa.gov/phila/ProtectingSSNs.htm

http://passcouncil.washington.edu/site/files/uw_ssn_best_practices.pdf

http://passcouncil.washington.edu/site/files/uw_ssn_guide.pdf

https://www.reddit.com/r/AskNetsec/comments/2pswf5/securely_storing_ssn_details/
—
Reply to this email directly or view it on GitHub
https://github.com/gratipay/gratipay.com/issues/3504#issuecomment-160251283
.

POI:

ZeroDB is an end-to-end encrypted database. Data can be stored on untrusted database servers without ever exposing the encryption key. Clients can execute remote queries against the encrypted data without downloading all of it or suffering an excessive performance hit.

https://github.com/zero-db/zerodb
(h/t)

I propose that we close this ticket. Why? Because we already have a vault. Meaning, we already have a database that contains sensitive information, which we take care to protect. Security means constant vigilance, there is no  "done" state where we'll be perfectly ready to store national identity numbers and passport scans. Running HackerOne for a while, observing the security practices of other organizations, and watching NSA predators has me feeling hesitantly confident that we're not at the back of the pack when it comes to security. I think we should go for it.
@rohitpaulk @clone1018 @aandis et. al?

We need a vault separate from our main application and database that is more highly secure. We should use the PCI DSS 3.0 standard to self-assess the security of our application (gratipay/inside.gratipay.com#214). This ticket is about building a new vault component of our architecture.

Now I'm saying that we treat our main app and database as our vault (rather than building a separate component), and we evolve towards something like DSS as we scale.

Last call for objections to closing this ticket and declaring that we already have a vault ...

We're a far cry from Uphold's definition of a vault. :-/

@mattbk at https://github.com/gratipay/inside.gratipay.com/issues/532#issuecomment-194589942:

Note to self, what gets stored in the vault?

Unclear. Either everything (our current database is our vault) or just sensitive info such as national identity info (we have a second database). Though in the first case we would still differentiate sensitive info, and store it in the current database in encrypted form. Maybe the difference is semantic. Our vault has "layers" or something.

Alright @rohitpaulk @aandis @mattbk @kaguillera: per https://github.com/gratipay/inside.gratipay.com/issues/539#issuecomment-197699555, let's start with the five of us. Would you store your name, address, and national ID number in Gratipay today? Why not? What is the minimum we need to accomplish before you're comfortable doing so?

Would you store your name, address, and national ID number in Gratipay today?

Yes, I would

Sure.

:+1:

Awesome! Me, too. :-)
I will check with @kaguillera when I see him next week ...

California Attorney General defines "reasonable security"

When businesses are breached, their liability is largely determined by if they had practiced reasonable security, so a lot of litigation regarding breaches is focused on determining that. This litigation is due to there being no definition of reasonable of security. The California Attorney General Kamala Harris, on February 16th, released California's annual breach report and within it, she defined reasonable security, stating "The 20 controls in the Center for Internet Security’s Critical Security Controls identify a minimum level of information security that all organizations that collect or maintain personal information should meet. The failure to implement all the Controls that apply to an organization’s environment constitutes a lack of reasonable security."

The breach report itself, like most breach reports, isn't that interesting. California has been collecting information about breaches since 2003, when California became the first state to require businesses to inform affected parties when those victims are residents of California. Now 46 states have similar requirements.

The definition the Attorney General used for reasonable security, the CIS Critical Security Controls (direct link to a copy), are extremely aggressive goals that few organizations outside of the Department of Defense currently implement. For example, it requires application white-listing (CSC 2.2), disabling javascript (CSC 7.3), and other controls which although valid recommendations, are difficult to implement in practice from a business perspective.

BeyondCorp: Design to Deployment: Google's BeyondCorp strategy has been heralded as the right way forward for protecting networks. The concept is to no longer have an internal corp network that employees need to hard-wire or VPN into, because that promotes a crunchy outside and soft inside network, where once an attack gets on one of your employee laptops they end up with free rein. The BeyondCorp strategy that Google announced a year ago advises that you shouldn't provide access to systems just because of what network they come in on. This new paper describes this concept in more detail.

https://summitroute.com/blog/2016/04/10/downclimb/

Alright, talking w/ @kaguillera here IRL and he is good to go here. 👍
(Though he also mentions that national ID numbers are not big in Trinidad and passport or driver's license would be more normal.)

Alright, folks! Closing this one out. We have a vault. 😳
Future work to be organized on the Security Radar.


As a bridge user, I want to use permit in order to make my interactions take a single transaction.

Problem
What problem are we solving and why does it matter, ser?
Permit helps.
Proposed Solution
Thoughts on solution design. We should do  to solve this problem.
We need to change the BridgeFacet to allow permit signatures to be passed into xcall.
Acceptance Criteria
From an end tester and/or user perspective, the below criteria must be met to consider this done:

[ ] We can call xcall with a permit signature.

@LayneHaber please provide thoughts.


API Request returns "Not Found"

Deployment Method

[ ] Installer
[ ] Docker Development
[X] Docker Production
[ ] Bare metal Development
[ ] Bare metal Production
[ ] Digital Ocean image
[ ] Other (please provide a link Steps to Reproduce

Describe the problem*
I followed all the steps to setup an Inventree Production instance and it is running perfectly.
I also created an admin account after the installation, as suggested in the documentation.
However i ran into an issue when trying to communicate with Inventree from a Laravel application running on the same device and domain.
I am trying to request an Inventree API Token from my Laravel application. The Laravel application is hosted at "http://localhost:8080". In the .env file of Inventree, i've changed the INVENTREE_SITE_URL to "http://localhost". Both applications are running fine.
From my laravel application I am trying to call this API:
$response = Http::withBasicAuth($username, $password)->get("http://localhost/api/user/token/");
I have checked multiple times that the credentials are correct and that the syntax of the API call is correct too, Ive copied it straight from the api-docs provided by Inventree.
In relevant log output, i have included the response from the API attempt.
When i attempt to call the API, i don't get any output in the inventree docker container either.  if my Laravel application is making a request to http://localhost/api/user/token/, it should be handled by Caddy and reverse proxied to the Inventree server container. But this does not seem to happen since there are no logs.
I am lost. Is there anything i've missed?
Thanks in advance!
Steps to Reproduce

https://docs.inventree.org/en/stable/start/docker_install/
Follow all the steps in the docker install guide, including creating the superuser account.
In the .env file change the  INVENTREE_SITE_URL to 'http://localhost'
Start the docker containers with 'docker compose up -d'
From a Laravel application hosted at 'http://localhost:8080' call the API via:
$response = Http::withBasicAuth($username, $password)->get("http://localhost/api/user/token/");
dd($response);
// Make sure the username and password are the correct credentials to the superuser.

Relevant log output
Illuminate\Http\Client\Response {#335 ▼ // app\Http\Controllers\LoginController.php:32
  #response: GuzzleHttp\Psr7\Response {#371 ▼
    -reasonPhrase: "Not Found"
    -statusCode: 404
    -headers: array:4 [▶]
    -headerNames: array:4 [▶]
    -protocol: "1.1"
    -stream: GuzzleHttp\Psr7\Stream {#367 ▶}
  }
  #decoded: null
  +cookies: GuzzleHttp\Cookie\CookieJar {#352 ▶}
  +transferStats: GuzzleHttp\TransferStats {#372 ▼
    -request: GuzzleHttp\Psr7\Request {#358 ▼
      -method: "GET"
      -requestTarget: null
      -uri: GuzzleHttp\Psr7\Uri {#354 ▼
        -scheme: "http"
        -userInfo: ""
        -host: "localhost"
        -port: null
        -path: "/api/user/token/"
        -query: ""
        -fragment: ""
        -composedComponents: "http://localhost/api/user/token/"
      }
      -headers: array:3 [▼
        "User-Agent" => array:1 [▶]
        "Authorization" => array:1 [▶]
        "Host" => array:1 [▶]
      ]
      -headerNames: array:3 [▶]
      -protocol: "1.1"
      -stream: GuzzleHttp\Psr7\Stream {#357 ▶}
    }
    -response: GuzzleHttp\Psr7\Response {#371 ▶}
    -transferTime: 0.00125
    -handlerStats: array:39 [▶]
    -handlerErrorData: 0
  }
}

This soudns like a question for Stackoverflow, not a deployment issue with InvenTree.

Did you confirm that you can access http://localhost/api/user/token/ via another method such as a web browser or CURL?

I got access through direct web browser url, but not via laravel Http client, altough it worked with the previous version of inventree, when the docker install was cloning github and a couple docker commands without the caddyfile. Im unsure if it has anything to do with the domains, using inventree.localhost or just localhost, i tried both, but it doesnt change anything.


'MODULE_NOT_FOUND' error when importing the package in marp

Hello, I use marp with .mjs and .yml file.
Note that using @kazumatu981/markdown-it-kroki works fine, but trying to import @kazumatu981/markdown-it-fontawesome gives the following error:
node:internal/modules/cjs/loader:1181
  const err = new Error(`Cannot find module '${request}'`);

Error: Cannot find module 'D:\slides\node_modules\markdown-it\lib\rules_block\list'
    at createEsmNotFoundErr (node:internal/modules/cjs/loader:1181:15)
    at finalizeEsmResolution (node:internal/modules/cjs/loader:1169:15)
    at resolveExports (node:internal/modules/cjs/loader:591:14)
    at Module._findPath (node:internal/modules/cjs/loader:668:31)
    at Module._resolveFilename (node:internal/modules/cjs/loader:1130:27)
    at Module._load (node:internal/modules/cjs/loader:985:27)
    at Module.require (node:internal/modules/cjs/loader:1235:19)
    at require (node:internal/modules/helpers:176:18)
    at Object.<anonymous> (D:\\slides\node_modules\@kazumatu981\markdown-it-fontawesome\dist\lib\FaTagListRuleEngine.js:7:32)
    at Module._compile (node:internal/modules/cjs/loader:1376:14) {
  code: 'MODULE_NOT_FOUND',
  path: 'D:\\slides\\node_modules\\markdown-it\\package.json'
}

.marprc.yml
allowLocalFiles: true
output: "./build"
inputDir: "./slides"
html: true
engine: "./engine.mjs"
template: bespoke

engine.mjs
import markdownItKroki from '@kazumatu981/markdown-it-kroki';
import markdownItFontawesome from '@kazumatu981/markdown-it-fontawesome';

export default ({ marp }) => {

    marp
        .use(markdownItKroki)
        .use(markdownItFontawesome);

    return marp;
}

I think this problem occurs when you use upper version of marp.
I will research more.
So please tell me the version number of marp, or please send me package.json, if you can.

Thanks l will research more detail, please just moments.

I also conducted a reproduction test here, but unfortunately, I couldn’t reproduce ERROR. Please check the attached file.
Another possible cause could be the version of Node.js, perhaps?
My Node.js version is 20.11.0 (little bit older than lts version....)
tmp.zip

I had more dependencies in my package.json and engine.mjs and apparently that has an effect for getting the error.
I have included an updated version in the attached file.
Now it should fail when you uncomment the import statement of markdown-it-fontawesome
marp.zip

Okey!!!!
I gocha!
Different your project and mine is  to use @mdit/* modules or not.
@mdit/* depends on markdown-it 14.0.0 but marp depends on 13.0.2.
So I must write this package depends on markdown-it 13 in package.json, but not to be written.
Anyway I'll upgrade as soon as possible.

I fixed problem. It was different from the method I had in mind, but I managed to avoid the problem by reviewing the library dependencies.
Please upgrade to v1.0.4.

Great, it's working now 👌
Thank you for your quick response and fix.


Create task for ref tests PR

Task/Issue URL: https://app.asana.com/0/488551667048375/1203766026095655/f
Description
This PR automatically create a task in Asana for the automated reference tests GHA workflow when succeeds.
Steps to test this PR
Feature 1

[ ]
[ ]

UI changes

Before
After

!(Upload before screenshot)
(Upload after screenshot)

Current dependencies on/for this PR:

develop

PR #2732   👈

This comment was auto-generated by Graphite.


issue with swc morphology

This morphology is not loadable in morphio: fail.swc.zip
with error:
MissingParentError:
test_2.swc:1770:error
Sample id: 1770 refers to non-existant parent ID: 0

while when the last line is removed from the file, it can be loaded, and result in a single axon morphology.
@lidakanari @eleftherioszisis , would you have any idea what is going on? It is a morphology for @YannRoussel

Very strange, I will look into.  I can repro with that file.

It appears sscanf from https://github.com/BlueBrain/MorphIO/blob/d4931369266bc24c5f283c7d04d779d02e3ae4a7/src/readers/morphologySWC.cpp#L32 is reading the line:
1770 2<PHONE_NUMBER>83431 -0.0017926065475997177 71.47192685817814 0.1144 1769

as (not: I'm not printing as many sigfig):
1770                   2          186.598099           -0.001793           77.000000           71.471924                   0

Very peculiar... I don't have any insights from my side. the file seems to be as expected from the file format point of view

@arnaudon / @YannRoussel can you try the wheels created by CI (in the dist.zip):
https://github.com/BlueBrain/MorphIO/actions/runs/2615023036
To see if that fixes the issue?

I'm not sure how to do that, but if it works for you, it's fine, thanks a lot!

The cell loads fine with the change @mgeplf .


有关决策树

1.10.6中有处泛化错写为泛华。
1.10.7.数学表达
图示被嵌套到py 中，无法显示。
<IP_ADDRESS>. 分类标准
有个公式是信息熵的表达式，不是交叉熵。

I'm sorry, but I cannot read Chinese, and Google translate's translation is not accurate enough for me to answer your question:

In 1.10.6, there is a generalization misunderstanding as pan-China.
1.10.7. Mathematical expression
The icon is nested inside py and cannot be displayed.
<IP_ADDRESS>. Classification criteria
One formula is an expression of information entropy, not cross entropy.

If anyone can read Chinese and translate to English, I would really appreciate it.


Dolly/Flythrough nagivation mode oddities

Shouldn't the mouse wheel in Dolly or Navigation mode affect maybe movement into our out of the screen? It doesn't do anything. In Trackball mode, it effects zoom. Also, it looks like Navigation mode effects only how mouse events are interpreted to adjust camera params. Should different modes provide different camera params?
-----------------------REDMINE MIGRATION-----------------------
This ticket was migrated from Redmine. As such, not all
information was able to be captured in the transition. Below is
a complete record of the original redmine ticket.
Ticket number: 2727
Status: Pending
Project: VisIt
Tracker: Bug
Priority: Normal
Subject: Dolly/Flythrough nagivation mode oddities
Assigned to: -
Category: -
Target version: -
Author: Mark Miller
Start: 12/08/2016
Due date:
% Done: 0%
Estimated time:
Created: 12/08/2016 01:26 pm
Updated: 12/15/2016 12:53 pm
Likelihood: 2 - Rare
Severity: 2 - Minor Irritation
Found in version: 2.12.0
Impact:
Expected Use:
OS: All
Support Group: Any
Description:
Shouldn't the mouse wheel in Dolly or Navigation mode affect maybe movement into our out of the screen? It doesn't do anything. In Trackball mode, it effects zoom. Also, it looks like Navigation mode effects only how mouse events are interpreted to adjust camera params. Should different modes provide different camera params?
Comments:

With navigation mode set to Trackball, Dolly, or Flythrough, my mouse wheel caused movement in and out. A couple of times it seemed to get stuck and stop working, but then worked again.
@markcmiller86 can you test if it works for you now? (I only tested on linux)

Ok, so am seeing a few funky behaviors on OSX with 3.2.0 (current develop branch)

My mouse wheel has no effect in Dolly or FlyThrough mode. It only has effect on zoom in Trackball mode.
Depressing shift or command-key while dragging does pan on all modes (that is expected in Trackball but I honestly don't know if in other modes)
Hit reset view 2 or 3 times while in FlyThrough mode and the object disappears entirely. Going back to Trackball and reseting view brings it back.


[BREAKING BUG] Atlantic-2 RPC url sends a 403 Forbidden after the first interaction with it

Seid version
Irrelevant
Chain ID
atlantic-2
Describe the bug
The atlantic-2 testnet RPC URL (https://rpc.atlantic-2.seinetwork.io/) sends out a 403 Forbideden response every few minutes. The RPC seems to work just fine. When interacting with it to read/write something to the blockchain (perform a query or an execute function) it executes fine, only to have a very high chance of going down for minuts at a time. Is it rate limited in any way? if yes, what is the maximum requests per minute? If it is rate limited then the response should not be 503.
To Reproduce
Steps to reproduce the behavior:

Try to use it

Also, why is there the Developers Group - people who build on Sei so hard to get into? It should be public. Are you not willing to incentivize people to build on your chain, discussing stuff while they're at it?
Expected behavior
To work continuously, without going down every once in a while for minutes at a time.

@vscorpio Yes, this RPC behind a rate limiter, we are not able to give more details about the rate limiting tule, but if you got forbidden, it's mostly likely due to rate limiting, it might also be when we do have some bad rpc instances, which should be fixed now. Do you mind trying that again and let me know if you can consistently repro it?

The issue seems to have been resolved. If still occuring, it doesn’t do so with a high enough frequency to be bothered by it.


copy all node modules to build/node_modules

Recently, aws-sdk requires another new dependency that isn't copied to build directory with previous Makefile.
It leads to deployment error in aws lambda.
So, it's better to copy all node_modules to build/node_modules
yoroshiku

Thanks, merge it


GH Actions Experiment

Core - Full Integration Build 9511 outcome was UNKNOWN using a merge of 0160d39db560f2bf8cf89a4d2d6446edbc8c40af
Summary: Canceled Build time: 00:00:43

Core - Full Integration Build 9517 outcome was UNKNOWN using a merge of 0160d39db560f2bf8cf89a4d2d6446edbc8c40af
Summary: Canceled (Exit code 143 (Step: Build & test core (Maven)) (new)) Build time: 00:00:55


Warning with nodeJS after arming all parts

Error message on console (same when disarming parts):
01-05-2022 18:27:23 info: Status panel infos arrived
(node:5455) UnhandledPromiseRejectionWarning: TypeError: Cannot read property 'parts' of null
    at RiscoPoller.riscoPoller.on (/root/risco-mqtt-bridge/app.js:58:67)
    at emitNone (events.js:106:13)
    at RiscoPoller.emit (events.js:208:7)
    at Timeout.timer.setTimeout [as _onTimeout] (/root/risco-mqtt-bridge/panelPoller.js:53:16)
    at <anonymous>
    at process._tickCallback (internal/process/next_tick.js:188:7)
(node:5455) UnhandledPromiseRejectionWarning: Unhandled promise rejection. This error originated either by throwing inside of an async function without a catch block, or by rejecting a promise which was not handled with .catch(). (rejection id: 1)
(node:5455) [DEP0018] DeprecationWarning: Unhandled promise rejections are deprecated. In the future, promise rejections that are not handled will terminate the Node.js process with a non-zero exit code.

@fab33  app missing to manage multiple partitions ... i should merge a pr asap...


feature request: possible to limit number of prerendered frames?

Hello,
I noticed that radv shows a lower input latency than proprietary drivers of both AMD and Nvidia in some games. I suspect radv limits the number of frames that are allowed to be rendered ahead, which should be a good thing as the AMD DX11/9 driver on Windows does the same (Nvidia DX11/9/OGL can be configured to do so).
Would it be possible for dxvk to limit the amount of frames rendered ahead to one to reduce input latency also with the Nvidia driver?

This is already possible with the dxgi.maxFrameLatency knob as explained on the Wiki page for the new configuration file.

Thanks for pointing me to it and sorry for the inconvenience.

Have you observed any positive changes related to this?

After trying out a value of 1 in Hitman, I don't think I noticed an effect. Feels quite laggy compared to Windows DX11 prerenderlimit 1 or DX12.

What's your GPU? I'm hearing a lot of complaints about exceptionally poor performance on Nvidia as well as Vega GPUs.

The mouse jitter issue of wine-staging is really nasty, it clearly makes things worse in Hitman over regular wine. But subjectively I'd still say that the latter doesn't feel as direct as on Windows with similar fps (I got my window compositor disabled).
Though it's very playable at least, much better choice than the OGL port.

You can build wine-staging without the server-send_hardware_message, which should solve the mouse issue.


[BUG] npm ERR! Unsupported URL Type "link:": link:/Users/vicary/Documents/Projects/vicary/multidict

When running npm install gqty I get this error:
npm ERR! code EUNSUPPORTEDPROTOCOL
npm ERR! Unsupported URL Type "link:": link:/Users/vicary/Documents/Projects/vicary/multidict

npm ERR! A complete log of this run can be found in:

It seems to be caused by the multidict dependency, which uses a link: prefix inside its package.json which is not supported anymore?
For additional information see: stackoverflow

@LasseRosenow fixed in 4.0.0-alpha-8054dbb3.0, would you please try again?
The repo is depending on a legacy pipeline which releases the alpha channel as latest, we are already working on it.


Settings sync - client side telemetry

When a setting sync failure occurs it would be great if we would validate that the failure occurred against one of the valid settings sync endpoints (insiders/stable). Along with the sync execution failure we should also emit the environment (insiders/stable) against which the failure occurred.
Edit: Also add the resource uri

@lszomoru Can you please elaborate what is required here from the client side?

Broken ConnectionRefused error into RequestTimeout, RequestCanceled and RequestFailed error codes.
Request url is passed to telemetry along with above error code

Please verify it using code review.

LGTM! Thank you!

Verified changes by looking at the telemetry.


TEIIDTOOLS-420: Provides API for logging in publishing operations

Adds REST API method to KomodoMetadataService for fetching the publishing
logs for an individual virtualization being published.

TeiidOpenShiftClient

Uses the info, error & debug functions to add logging to the main log
file and to an additional file for the virt being published. This log
can then be preserved by OS' storage.

The log file is available to be read by the REST API and returned as
content for display in the UI.

What is the reason for a fine-grained rest call and file-based management of log of deployment that is separate from other logging techniques? You could have folded the same info into existing publish status call and captured deployment log in that response and make it in single rest call from the client side. Seems like a verbose API to me.

@rareddy

What is the reason for a fine-grained rest call and file-based management of log of deployment that is separate from other logging techniques?

It is not separate from 'other logging techniques' in that all log entries are sent to the main KLog vdb-builder.log file as they always have been ever since the genesis of komodo. In addition to that logging, separate files for each of the published vdbs is generated (and recreated upon each new publishing attempt) so as to make it easy to return the log rather than having to filter KLog. Originally, these entries were kept in a hashmap and only available via the REST API. However, they are lost if the pod restarts or a new pod is deployed hence the file-based approach backed by persistent storage. (I shall create a JIRA to add that persistent storage to the das template).

At some point, I forsee KLog being retrofitted to the OS logging to allow for a dashboard/telemetry of how komodo is doing. Even allow DEBUG to be turned on/off (very chatty) if something needs to be looked at more closely. However, it would appear we are not at that point yet.

You could have folded the same info into existing publish status call and captured deployment log in that response and make it in single rest call from the client side. Seems like a verbose API to me.

The virtue of a lean API lessens when the app performs poorly. By the time a published vdb is complete, the log is ~1700 characters. The publish status call is being made every 15 second. The log is only meaningful when displayed in the UI, ie. when the use opens the slide-in. Therefore, it makes no sense to keep delivering that same payload for all published vdbs that frequently. Thus, the verbose API may offend but it is more sensible to ensure the response is only received on an as-needed basis.

Thus, the verbose API may offend but it is more sensible to ensure the response is only received on >an as-needed basis.
The question is about fine-grained API, If the message size is an issue, a flag can be added to the publish call to return the log or not, depending upon the log console visibility. That will keep related concerns in a single call.

It is not separate from 'other logging techniques' in that all log entries are sent to the main KLog vdb->builder.log file as they always have been ever since the genesis of komodo.
I do not know how KLog is different from Log4J like framework, but it should be that IMO, anything more is just more management on us.

Originally, these entries were kept in a hashmap and only available via the REST API.
I am not advocating to keep the whole log in Hashmap, but if you just want to keep the ephemeral publish status in memory that may be fine, especially if you use WeakhashMap where memory can be reclaimed if needed. On flip side it will get u out of the management of files.

However, they are lost if the pod restarts or a new pod is deployed hence the file-based approach >backed by persistent storage. (I shall create a JIRA to add that persistent storage to the das template).
I do not think we need that, we are going to outsource the logging like what Steve is looking into for Open Tracing. So, individual applications should not be dealing with persistent storage, rolling the logs and updates etc. I see that is what you are saying in 2.

The question is about fine-grained API, ...

Yes, and I have answered it. Your suggestion for conflating 2 API methods and separating them with a flag is useful but can ultimately result in an API lacking in clarity. However, if you wish to pursue this avenue then by all means file a JIRA and we can look at your contribution.

I do not know how KLog is different from Log4J like framework, but it should be that IMO, anything more is just more management on us.

Once again your opinion is noted. FYI, KLog IS USING Log4J. KLog was actually ported over from Modeshape, at Randall's suggestion, as a means of maintaining a single logging API that sits on top of a number of different logging implementations (Log4J, slf4j and java.util.logging).

I am not advocating to keep the whole log in Hashmap,

Good. Neither was I.

but if you just want to keep the ephemeral publish status in memory that may be fine, especially if you use WeakhashMap where memory can be reclaimed if needed. On flip side it will get u out of the management of files.

Uh .... no. When vdb-builder has a restart I would still like to retain my publishing log, thanks, rather than have to guess when it was published and whether it went ok.

On flip side it will get u out of the management of files.

Management of files is not onerous and ensures there is a written record of why things are going on.

I do not think we need that, we are going to outsource the logging like what Steve is looking into for Open Tracing. So, individual applications should not be dealing with persistent storage, rolling the logs and updates etc. I see that is what you are saying in 2.

Really? Steve's adventures with Open Tracing have not yet born fruit have they? Now if you don't want the to retain logs (even in their current guise) in the das template then fine, I'll skip the JIRA then. Your call.

Uh .... no. When vdb-builder has a restart I would still like to retain my publishing log, thanks, rather than have to guess when it was published and whether it went ok.

Any of the state management related to publishing needs to be persistent.  If you consider the log part of that state, then yes it would be persistent as well.
An important consideration here is to look at how this was done with Syndesis.  They have a fairly complex layer over standard pod logging - https://github.com/syndesisio/syndesis/tree/master/app/server/logging/jsondb - that scrapes pod logs to add entries to their postgres db instance (with retention schedules) and fronts it with rest service to look up events by integration/pod/etc.  This expects relevant events to already be logged in a json format with particular fields set so that it can be determined what the log relates to.  This is like a highly targeted logging stack, which would still play nice with the general aggregate logging.  If at all possible we should have similar approaches if not share their code.

Really? Steve's adventures with Open Tracing have not yet born fruit have they? Now if you don't want the to retain logs (even in their current guise) in the das template then fine, I'll skip the JIRA then. Your call.

As much as possible we should stay out of the log infrastructure business.
This is a special case in that the log can be considered part of the publishing state.
OpenTracing is for tracking things from a high level perspective - so that you have a call trace graph of the operation across a distributed environment that you can look at just like you would if it were from a single system.  We could have image publishing instrumented that way, but it would mostly be of interest to us and not end users / developers.
For simple logging statements just allowing those to go to the console is sufficient.  I'm evaluating how much it helps to have them in a logstash format - but in general we want to weed out any of the custom log handling we're doing (multiple log4j appenders, separate files, etc.).

@shawkins

that scrapes pod logs to add entries to their postgres db instance

I considered this since we have a postgres db sitting around handling the komodo repository persistence. Shouldn't be too hard to construct a schema for the logs. At the time, given the infancy of this part of the functionality I felt it was overkill. In the end, simply preserving the publishing logs was the requirement, so a written file to a persistent filesystem mounted on /opt/app-root/src/logs does the job.
The current state of play (away from the publishing special case) in komodo is that KLog is the logging-king in that all errors, info, debugging are done through it. As stated, it is able to use three different logging impls depending on what it is installed with (currently Log4j which logs to the console and to the log/vdb-builder.log file) so it will be very easy to generate an impl without needing to touch most of the codebase.
If you would like to propose a JIRA with requirements / proposed implementation framework etc... then happy to look at it.

Uh .... no. When vdb-builder has a restart I would still like to retain my publishing log, thanks, rather than have to guess when it was published and whether it went ok.

Logging entries are not state. Yes, publishing status needs to be persisted or in our case, I believe most of it can be queried from cluster to establish the state. Logging entries corresponding publishing progress is up to us, whether that is critical information to keep and go through complex interactions to persist it, or you think it is a by-product and can be dispensable. The real log whether it is KLog, Postgres, Log4J, logstash will still have the all entries from before pod restart.

go through complex interactions to persist it
Honestly, the interactions were not complex. In fact, they were rather straightforward. If you would like to peruse the PR to check ...

Like I said, your opinion is noted.


Add system of checking is there any new versions

Add a module, which checks GitHub on startup and defines is there any new versions

Program gets a list of all releases on GitHub on startup. If tag_name of the first element isn't equal to currentVersion, program will show message about a new release


Adds project ARK-Builders/ARK-Navigator to the list

ℹ Repository information
We are doing Kotlin apps right now, and this one is our "flagman" app which is re-thinking of file browsers:
https://github.com/ARK-Builders/ARK-Navigator
Please add it to the list of repos looking for contributors.
The repository has:

[x] At least three issues with the good first issue label.
[x] At least 10 contributors.
[x] Detailed setup instructions for the project.
[x] CONTRIBUTING.md
[x] Actively maintained.

25 open and not-assigned-yet "good first issues" at the moment:
https://github.com/ARK-Builders/ARK-Navigator/issues?q=is%3Aopen+is%3Aissue+label%3A"good+first+issue"+no%3Aassignee
[Just FYI] We have also started to implement lib in Rust which will help us to port the app to all other platforms:
https://github.com/ARK-Builders/arklib/
(We will add the lib as well, when we'll have more contributors.)

@siddhant-deepsource I believe PR can be merged only by deepsourcelabs members.

@siddhant-deepsource could you merge please? I don't have permissions to merge

@jai-deepsource Can you please merge this PR? Thanks!

@sanket-deepsource maybe you could merge this PR?

Hey @kirillt  ! I tried to contribute to this repo as well but I haven't seen any activity in the last few months. I decided to fork it to keep it alive. Please see https://github.com/lucavallin/gfi and feel free to open a pull request there. At this time I am setting up the hosting and cleaning up the code. If you're up for it, I could use some help to convert the app from Nuxt.js & Python to Next.js & Typescript.

@lucavallin awesome idea! I'll look if our team could help with anything.
By the way, have you considered to build the project in federated way, i.e. to allow individual projects to host their own web page with good-first-issues across all of their repos and aggregate different projects under another page listing issues from all nested projects.

@kirillt Sounds great! See the discussion at https://github.com/lucavallin/gfi/discussions/1. The priority is to clean up the codebase a bit and get the website live and updated again. After that, I am open to any kind of improvements :)


chore(weave): Weaveflow

Changes for "Weaveflow" (working title), a tracking system for model applications.
Weaveflow docs and examples here: https://github.com/wandb/weaveflow

api layer

weave.WeaveList (an alias for ArrowWeaveList)
eager call API: op calls are eager by default, only when "weaveflow" is imported for now
eager query API (this is a very early version)

new public API (api.py)
object graph API

data layer

relocatable ObjectType: you can declare a weave.type(), and load instances of that type without the original type declaration in memory

includes changes for multiple object types with same name (but different fields)
changes for putting them in AWL (including same name / diff fields)

method serialization on Object (as created by decorator_type())
fixes for recursive publishing

execution layer

execute automatically publishes/logs everything

ref fixes needed for serializing calls with input/output refs
call stream & format for input refs, output refs, keys, etc.

changes to support mutations from UI (e.g. ability to create object from scratch)
weaveflow directory
bugfixes
perf

wandb_artifact_pusher check if digest exists before publishing

weave command line tool

weave ui
weave serve
weave deploy

I have read the CLA document and I hereby sign the CLA

recheck

Force merging, all checks passing except CLAAssistant. That is failing because we manually triggered github-action frontend builds in this branch, which generate bot commits that CLAAssistant doesn't like.


VirtualizedList supported?

I see no documentation about the SwipeListView library support the VirtualizedList which is kind of the same as a normal FlatList. Can someone provide information about if it's supported? I tried with using the data, getItem and getItemCount props together but i keep getting error FlatList does not support custom data formats. on the <SwipeListView component

The same error
Any idea?

Hi @TommySorensen this lib currently does not support use of VirtualizedList out of the box. Your best bet would probably be to render a VirtualizedList and just use the SwipeRow for your individual list items. You'd lose some of the functionality of SwipeListView but that's the best I can offer at this time, sorry


Section 5.1.7 - use of p(D|m)

Ver: Draft of “Probabilistic Machine Learning: An Introduction”. May 6, 2021
Section 5.1.7 uses expression "log p(D|m)" which is not defined earlier. In fact conditioning on "m" in other expressions are not very clear till you read section 5.2.2. Would help if "p(D|m)" is explained in section 5.1.7 or a cross ref is made to 5.2.2

Yes, sec 5.1.7  is actually in the wrong place, and will be moved to later, so this notation will be clearer.
(This was a latex accident)


Component Shadowing gives WebPack error

In the theming section, I added a theme.js file to /src/@reflexjs/gatsby-theme-core and appended the code that was given in the tutorial section 4 "Theming":
export default {
  colors: {
    text: "#000",
    background: "#fff",
    primary: "#07c",
  },
  fonts: {
    body: '"Segoe UI", Roboto, "Helvetica Neue", sans-serif',
    heading: "Georgia, serif",
    monospace: "Menlo, monospace",
  },
}

But, I'm somehow getting this error:

info Deleting .cache, public
info Successfully deleted directories
success open and validate gatsby-configs - 0.088s
success load plugins - 1.766s
success onPreInit - 0.022s
success initialize cache - 0.013s
success copy gatsby files - 0.088s
info content/pages directory validated.
info content/images directory validated.
info content/blocks directory validated.
info content/navs directory validated.
success onPreBootstrap - 0.054s
success createSchemaCustomization - 0.048s
success source and transform nodes - 0.668s
success building schema - 0.378s
success createPages - 0.029s
success createPagesStatefully - 0.063s
success updating schema - 0.031s
success onPreExtractQueries - 0.002s
success extract queries from components - 0.491s
success write out requires - 0.061s
success write out redirect data - 0.003s
success onPostBootstrap - 0.004s
info bootstrap finished - 8.507s
success run static queries - 0.037s - 4/4 108.29/s
success run page queries - 0.079s - 2/2 25.35/s

 ERROR

There was an error compiling the html.js component for the development server.

See our docs page on debugging HTML builds for help https://gatsby.dev/debug-html TypeError: Cannot read property 'preset' of undefined

  WebpackError: TypeError: Cannot read property 'preset' of undefined

  - build-html.js:107 doBuildPages
    [portfolio]/[gatsby]/dist/commands/build-html.js:107:24

  - build-html.js:121 async buildHTML
    [portfolio]/[gatsby]/dist/commands/build-html.js:121:3

  - develop-process.js:152 async createIndexHtml
    [portfolio]/[gatsby]/dist/commands/develop-process.js:152:7

  - develop-process.js:174 async startServer
    [portfolio]/[gatsby]/dist/commands/develop-process.js:174:3

  - develop-process.js:482 async module.exports
    [portfolio]/[gatsby]/dist/commands/develop-process.js:482:7

npm ERR! code ELIFECYCLE
npm ERR! errno 1
npm ERR<EMAIL_ADDRESS>dev: `gatsby clean && gatsby develop`
npm ERR! Exit status 1
npm ERR!
npm ERR! Failed at the<EMAIL_ADDRESS>dev script.
npm ERR! This is probably not a problem with npm. There is likely additional logging output above.

npm ERR!      /Users/atharvakulkarni/.npm/_logs/2020-06-21T07_42_45_504Z-debug.log

What am I doing wrong here?

Found a solution, I think, there was a preset variable that was missing, now my theme.js file looks like this

export default {
  preset: {},
  colors: {
    text: "#000",
    background: "#ff0000",
    primary: "#07c",
  },
  fonts: {
    body: 'Roboto, "Helvetica Neue", sans-serif',
    heading: "Georgia, serif",
    monospace: "Menlo, monospace",
  },
};

This is still now working, its not giving me any error, but somehow now the entire theme is breaking.

The default styles depend on the base preset. You can add it as follows:
import base from "@reflexjs/preset-base"

export default {
  preset: base,
  colors: {
    text: "#000",
    background: "#ff0000",
    primary: "#07c",
  },
  fonts: {
    body: 'Roboto, "Helvetica Neue", sans-serif',
    heading: "Georgia, serif",
    monospace: "Menlo, monospace",
  },
};

More in the docs: https://reflexjs.org/docs/presets#base
Let me know if this works.

Yes, It's working now! Thanks for the fast reply! Subbed on Twitter!:)

Thanks. You're probably among the first ones building with Reflex. So all feedback welcome. Feel free to reach out.


this.split is not a function

Hello, first of all great module!
I try to get the club feature SplitText working, but it's not

i added a .npmrc within the root of my nuxt project
i added npm:@gsap/shockingly to my package.json
i added:

gsap: {
 clubPlugins: {
      splitText: true,
    }
}

to my nuxt.config.json and nuxt-gsap-module to my buildModules
When i use
 console.log(this.$SplitText);

i see

but when i try to use it like:
const line = this.$SplitText(this.$refs.typewriter, {
      type: "lines,words,chars",
      linesClass: "split-line",
    });

i've got
TypeError: this.split is not a function
    SplitText SplitText.js:537
    created Faq.vue:40

Any help appreciated

Hi, thanks for your interest in this module.
Hmm, it's hard to say where the problem is without live repo, but at first I suggest you try this:
// add 'new' before 'this.$SplitText'
const line = new this.$SplitText( // ... )

More info

Hi,
results into
this.$SplitText is not constructor

Maybe you could have a look
https://github.com/merijnponzo/splittextbug
(you can add your token in .npmrc)

Try moving your code logic to the mounted() hook because all extra and club plugins are called only on the client side. If that doesnt work, then i believe there is some issue with the installation process (club plugins).

Closing this because of inactivity.
Another suggestion, try manually importing gsap and club plugins via nuxt plugin system. If it works that way, reopen the issue here.
Also, gsap has some issues with importing club plugins using yarn according to multiple user repors on the official forum.
Please note that this module was developed in accordance with the official guides and documents for importing the gsap core and all extra and club plugins from the public repo.

Hello,
it's mounted() indeed! thanks

Hi, I will use the splittext module but I am getting an error. Can you help me?
My Code
const { $gsap } = useNuxtApp();
onMounted(() => {
var childSplit = new this.SplitText(".text-animation", {type: "lines"});
console.log(childSplit);
});
My Error :
index.vue:144 Uncaught (in promise) TypeError: Cannot read properties of undefined (reading 'SplitText')


update gbcc

gbcc-universal-debug.apk
App not installed as package conflicts wit sn existing package

Yep, this is a feature of Android. If you're changing between the release / debug versions of GBCC, you have to uninstall it first due to app signing differences. It might be possible to make it so that you can have both installed simultaneously though, which I would find useful as well - I'll look into it.

I've fixed this in e818bc1de96742bc530a7662431d2a0b23355343, you can now have the debug and release versions installed simultaneously.


Upgrade Required

When I go to the websocket I have setup I get "Upgrade Required". I did npm update and still the same.

Same

@CakeNetwork, check here: https://github.com/vegeta897/d-zone/wiki/Beginner's-Setup-Guide#uploading


State.log doesn't properly honor logLevel

I was working on fixing #3869 and found that state.log doesn't work correctly.
steps
This minimal build.sbt illustrates the issue
lazy val testLog = taskKey[Unit]("Log")
testLog := {
  state.value.log.debug("foo")
  state.value.log.info("info")
}

problem
If I run debug, warn, error, etc. in the console, "info" is always printed no matter what. The "foo" debug line is never printed.
expectation
That "foo" is logged after debug and that neither is logged for levels above info
notes
I get the expected behavior with sbt 0.13.17. I suspect the issue is related to one of the TODOs in
https://github.com/sbt/sbt/pull/2907/files
@eed3si9n
sbt version: 1.1.x

It's a shame this regression from sbt 0.13 is still present.
Here's my workaround:
final class PoorManDebugLogger(log: Logger) extends Logger {
  val isDebugEnabled = log match {
    case x: AbstractLogger => x.atLevel(Level.Debug)
    case x: sbt.internal.util.ManagedLogger => {
      val field = classOf[sbt.internal.util.ManagedLogger].getDeclaredField("xlogger")
      field.setAccessible(true)
      val logger = field.get(x).asInstanceOf[org.apache.logging.log4j.Logger]
      logger.isDebugEnabled
    }
  }

  def trace(t: => Throwable): Unit = log.trace(t)
  def success(message: =>String): Unit = log.success(message)

  def log(level: Level.Value, message: =>String): Unit = {
    if (level == Level.Debug && isDebugEnabled)
      println(s"[debug] $message")
    else
      log.log(level, message)
  }
}


Why duplicate routes are not allowed?

I was implementing hyper-express in nestjs and got stuck in an issue where if I was importing pino-logger, I'm getting Error: HyperExpress: Failed to create route as duplicate routes are not allowed. Ensure that you do not have any routers or routes that try to handle requests with the same pattern.
After digging further got to know that pino might be internally doing something which is causing all routes to get registered twice, so wanted to know why this restriction is added and how to resolve it?

Duplicate routes are usually a sign of incorrect or buggy behavior as the user is free to route the request to any upstream functions or logic from the sole route handler.
If you would like to disable this behavior, you can fork and remove the following snippet: https://github.com/kartikk221/hyper-express/blob/master/src/components/Server.js#L370-L375

@kartikk221 If while creating server we could pass an option to allow duplicate routes?


[WIP] Incident Templates

This is a work in progress.

Thanks @willdurand I've pushed the French translations :)


Ability to return more orders of a given order book

Right now it only returns 10 orders on each side. I think it should be configurable by the horizon operator or maybe make it where you can page through the orders on each side.

Quick fix here is to just make the limit configurable until we can design a more robust solution with paging.

https://github.com/stellar/horizon/blob/master/src/github.com/stellar/horizon/db2/core/order_book_summary.go#L68


Accounting information

User story

Story
As a node-operator, I want to easily see how much money SWAP made for me, such that I can estimate the profitability of my node

Acceptance criteria

Some way to (relatively easily) view:

Accounting balances with peers
Cheque balances with peers

Background

This feature is very important to demonstrate the work, done for the bandwidth incentives. It could easily include many more features, but as a start this would be good. Perhaps this can already be done with our metrics (in which case we perhaps need to provide Grafana dashboards + instructions on how to set it up). @vojtechsimetka previously made a React application that would do this.
Tasks

Task
Assignee
Done (1), or 0

Related to #531, but this one is more user-faced, whereas #531 is internal useage.


pull request for e2e test at 01/28/2017 01:56:17

:white_check_mark: Validation status: passed
For more details, please refer to the build report.
Note: If you changed an existing file name or deleted a file, broken links in other files to the deleted or renamed file are listed only in the full build report.


Release 0.6

What this PR does / why we need it:
Cherry picking commits to release new version of authenticator on the release-0.6 branch.
Which issue(s) this PR fixes (optional, in fixes #<issue number>(, fixes #<issue_number>, ...) format, will close the issue(s) when PR gets merged):
Fixes #

/ok-to-test

/ok-to-test

I think there are more commits required - #687 has a diff of  +767/−1,466 alone


List wishlists

As a Customer
I need to see all my wishlists
So that I decide which of them need to be changed
Details and Assumptions
There exists a model for wishlists
There exists a database to request wishlist information
Acceptance Criteria
Given I am a customer
When I send a list request for my wishlists
Then I receive a list of all my wishlists

Duplicate of #7


[c++/ci] Build and upload libtiledbsoma library artifacts

Mirrors sc-29249.

#1397 addresses this, but would benefit some discussion about how/where we set library versions for C++/Python/R consistently.


Error on importing or creating account

E/flutter (31545): [ERROR:flutter/lib/ui/ui_dart_state.cc(186)] Unhandled Exception: Unhandled error type 'Null' is not a subtype of type 'int' in type cast occurred in Instance of 'WalletBloc'.
E/flutter (31545): #0      List.length= (dart:core-patch/growable_array.dart:222:12)
E/flutter (31545): #1      _IntListMixin.+ (dart:typed_data-patch/typed_data_patch.dart:156:9)
E/flutter (31545): #2      Address.encodeAddress
package:algorand_dart/…/addresses/address_model.dart:53
E/flutter (31545): #3      new Address
package:algorand_dart/…/addresses/address_model.dart:24
E/flutter (31545): #4      new Account._create
package:algorand_dart/…/accounts/account_model.dart:17
E/flutter (31545): #5      Account.fromSeed
package:algorand_dart/…/accounts/account_model.dart:48
E/flutter (31545): <asynchronous suspension>
E/flutter (31545): #6      Algorand.restoreAccount
package:algorand_dart/src/algorand.dart:106
E/flutter (31545): <asynchronous suspension>
E/flutter (31545): #7      AccountRepository.importAccount
package:flutter_algorand_wallet/repositories/account_repository.dart:54
E/flutter (31545): <asynchronous suspension>
E/flutter (31545): #8      WalletBloc.mapEventToState
package:flutter_algorand_wallet/…/bloc/wallet_bloc.dart:33
E/flutter (31545): <asynchronous suspension>

What version of dart are you using @dariocast ?
Can you update your dart & flutter SDK to the latest version and try again?
There used to be a bug in the +-operator in null-safety: https://github.com/dart-lang/sdk/issues/45140

What version of dart are you using @dariocast ?
Can you update your dart & flutter SDK to the latest version and try again?
There used to be a bug in the +-operator in null-safety: dart-lang/sdk#45140

Thanks, updating flutter and dart worked!


as_global does not work with complex types

Summary
as_global does not work with List[str]
Logs and external information
No response
Reproduction script
aaa = AAA(
    parcel_name="test",
    parcel_description="test2",
    server_auth_order=as_global(["local"]),
)

Workaround:
aaa = AAA(
    parcel_name="test",
    parcel_description="test2",
    server_auth_order=Global[List[str]](value=['local']),
)

On what platform(s) does it occur?
Not Applicable
Issue Severity
Medium: There is a workaround

This issue was migrated from an old repository: https://github.com/CiscoDevNet/catalystwan/issues/477

Fixed in https://github.com/cisco-open/cisco-catalyst-wan-sdk/pull/625


Add per-app settings for adblocking / https filtering

New callback with ConnectionInfo returning one of four states:
DEFAULT, // Filter connection with global settings
NO_HTTPS, // Filter connection without HTTPS
BYPASS, // Bypass connection
REJECT // Drop connection

Merged


LightBox: allow plain DOM srcSet string

Description of changes:
Allow using the normal srcSet pre-joined string instead of an array of strings
Checks:

[ ] Please confirm npm run lint ran successfully
[ ] Please confirm that only /src and /examples/src are committed
[ ] [if new feature] Please confirm that documentation was added to the README.md

None of the above, untested and refining a previously undocumented feature 😁

Thanks for this @wmertens, I had a look at #204 also and it needed a bit more love --> a99a878b38623e7e71325e3f07f2425dc46bb85a


Add JSON generation

Add JSON generation to simplify the steps for processing with pypam.
Reference repo: https://github.com/mbari-org/soundscape-wavdata
### Tasks
- [x] Create branch for this work (jsongen)
- [ ] Copy modules from soundscape-wavdata into appropriate modules
- [ ] Add pytest
- [ ] Add simple notebook to demonstrate local JSON generation

@ryjombari, just FYI, in case you want to follow along.

@carueda - where would you like me to put the modules? It should be different than the .nc metadata in metadata to avoid confusion.

Thanks for the jumpstart @danellecline!

Relaying a thought from communications with Samara @ NOAA: Tooling this demonstration to gather metadata and read data directly from the Google Cloud Platform would pave the way for PBP to be the engine for a lot of NOAA passive acoustic data.  If I understand, MinIO can be used to move data from GCP to the processing instance, and PBP can move to using MinIO?  How about the gathering of file metadata?

Thanks @ryjombari. @carueda I'm' wondering if 1) does Minio replace boto3, or do they stand side-by-side, and 2) does boto3 support GCP.  I know that minio is S3 compliant and can be used for both local and cloud storage operations - I am using it now for video processing pipelines successfully.

I haven't looked into minio with enough detail to tell for sure, but I think it supports AWS, GCP, and probably others. If so, we could replace the boto3 dependency with minio and adjust the appropriate places dealing with file downloads/uploads (s3 and gs URIs)

As part of #6, I note that Minio seems to only be for s3 compliant endpoints, and I started using the google-cloud-storage package for handling gs://.


"example of using react-highcharts/highstock" returns 404 Not Found

The readme has a link for "example of using react-highcharts/highstock" to http://kirjs.github.io/react-highcharts/highstock.html but it returns 404 Not Found

Thanks for letting me know, should be good now!


Stuck at the top of the YT page on Firefox

When using this on Firefox to prevent YT from blocking Adblockers, I am unable to scroll up or down, presumably because the popup about blocking Adblockers is technically still there.

Be sure you have any actual adblocker extensions disabled on youtube if you're using this script.


feature request: allow to keep markdown/mdbook directory tree structure for URLs in summary.md

Situation

currently, when using hero mdbook to build an mdbook, the URL in summary.md are modified:

in books/SUMMARY.md

in hero/var/mdbuild/info_grid/src/SUMMARY.md

Request

can we add a parameter that allows the user to keep the same directory tree as with mdbook?

this would make all the hero mdbook books compatible with markdown files, mdbooks and github, to name a few.

otherwise links from actual mdbooks won't be compatible when built with hero mdbook (e.g. documentation/dashboard/deploy.md becomes documentation/deploy.md)

its the full point of the tool, the exported structure is compatible because it all puts it in 1 dir without subdirs,
the links are reformatted by the tool, no need for you to do it
its always collection/.../name.md ... can be anything
its true that browsing on github is something we might loose, but we win a lot too

link fixing
reuse between collections
macro support
includes between collections
links with nothing more than mentioning the collection name
independent git management for collections

....
we need to enable automatic building thats for sure
the exported format is compatible with any further tool

I understand the motive. But what about having the option to keep the URL path?
Since, as it is now, I do think this limits the versatility of hero by "losing" this faculty of mdbook. Ideally, IMO, hero would add features to mdbook while being able to support existing mdbook features.
I would think it would be possible for hero to support those 2 modes. In short, practically this could amount to adding a parameter (say boolean true/false named set_collection_path = true) that would set the URL with collection/file_name (when false) and collection/path/to/file_name (when true).
In this case when the parameter would be set to true, hero could be able to differentiate files with their file path, e.g.:

collection1/folder1/file_name.md
collection1/folder2/file_name.md

And not only this, but then this means that the URLs/hyperlinks of any conventional mdbook would fit with hero mdbook. That might help the adoption of hero mdbook by people using standard mdbook!
In brief, one big advantage of having this possibility (parameter set_collection_path) is that any mdbook would then be able to be converted into a hero mdbook without any change in the whole SUMMARY.md as well as URLs, without any worries if different files have the same name.
Just some suggestions. I understand if we don't want to go this route with hero. I simply wanted to provide some ideas to improve the versatility of hero from my perspective.

@despiegk
Also, I can create another issue but there is also this issue:

files from collection documentation are all changed to the collection intro
e.g. documentation/.../dashboard.md becomes intro/dashboard.md


[MS4] Shirley's Tasks

Fixes

[ ] Update the gif to be a bit slower

Improvements

[x] Improve the header (title, about section, etc.)
[x] Improve filter select header

Continuous Integration and Deployment

[ ] Add github action workflows for the automatic deployment and testing of the app

Reflection

[ ] Document what you have implemented in your dashboard so far and explain what is not yet implemented (in docs/reflection-milestone4.md)

Overview

[ ] Go through entire milestone 4 and make sure everything is done

Modification: Add an "About" page (tabPanel) using a navbarPage which contains information for the user about our dashboard.
Source: ___
Team member: Shirley
Commit: https://github.com/UBC-MDS/VanArt/pull/50/commits/20c4bf8b3b6a84a971d41f9a352ac94caaefc0dc

CICD:
$ R


nixpkgs expression broken by python package uncompyle6

Issue description
#19158 includes a reference to spark_parser that doesn't exist.
Steps to reproduce
Try to evaluate the nixpkgs expression and get:
error: undefined variable ‘spark_parser’ at /home/mdorman/src/nixpkgs/pkgs/top-level/python-packages.nix:12029:42

Without wishing to seem unkind, I have to wonder if these changes were tested at all before being submitted?
@7c6f434c @groxxda
Technical details

System: (NixOS: nixos-version, Ubuntu/Fedora: lsb_release -a, ...)
Nix version: (run nix-env --version)
Nixpkgs version: (run nix-instantiate --eval '<nixpkgs>' -A lib.nixpkgsVersion)

Hm, this actually breaks pythonPackages.hypothesis. Looks like the first part of the update (mccabe) was tested fine, and the hypothesis update was committed wrong with wrong git add -i — probably the mistake was made after testing…

uncompyle6 builds OK now

test-eval-release.sh passes now…

pythonPackages.hypothesis builds fine, too. Is there anything else to check @mdorman ? Thanks for catching this.

I'm really sorry for the trouble. Of course the changes were tested (they cause a huge rebuild including 3x webkitgtk24x) yesterday. In the mean time there were overlapping changes (see pr for details) that I fixed and tested again. Then cherry-picked the hypothesis update range but forgot the first commit is not included. Will try to be more careful in the future..

@groxxda it's hardly the end of the world; ultimately I suspect it's just a reminder to all of us that git's flexibility and power in being able to reorder and cherry-pick stuff around sometimes puts us in a great position to shoot ourselves in the foot.  Thanks for getting things back in order.


Assign unique storage names to pallets.

This is a PR to ensure that pallets included with Substrate 2.0 each have their own unique storage name so they are placed in separate prefix tries.
If two pallets do not have different storage prefixes, it may have unintended consequences for the end users. I worry if we do not address this before 2.0 release, we may cause trouble to a lot of people in the future who use our pallets.
Some of these changes will require a storage migration, which I will follow up with.
I can also try to improve the construct_runtime! macro to do this magic for us... may need some help here.

[x] Correct Storage Names
[x] Write Migration Code
[ ] Test Migration Code
[ ] Update macros to prevent this in the future

Pallets in Kusama, need to create migration:

[x] Identity
[x] Finality Tracker
[x] Transaction Payment

Pallets not in Kusama, no migration code written:

Nicks
EVM
Example Offchain Worker
Elections

Pallets that should probably be updated, but may affect other networks (like edgeware):

[x] Contracts (Contract -> Contracts)

Closes https://github.com/paritytech/substrate/issues/4591

FYI a subset of these changes which would not affect Kusama could probably be merged separately if there is any contention about renaming storage prefixes for modules which are being used.

Nicks
EVM
Example Offchain Worker

@gnunicorn I think this one needs to be in the 2.0 release

I can also try to improve the construct_runtime! macro to do this magic for us... may need some help here.

maybe we can do something similar to ModuleToIndex trait in frame-system::Trait.
But that means that every storage is generic over T: Trait
also we could at least provide a test in construct_runtime that ensures that every module has a different Prefix.

@shawntabrizi, just follow the process to get PRs merged for the freeze.

runtime version needs bumping.

@gavofyork et al.
I have removed the IsUpgraded and omitted the StorageVersion storage item for these migrations because they will either do something, or do nothing.
There seems to be no need to introduce a storage version for these specific name changing upgrades.
Let me know if this is ill advised.

We will wait until the next runtime upgrade to include this one

what's the status here? There are open checkboxes in the description, but it seems to come to a close. Can we merge master, resolve the conflicts and get this ready to be merged? Or is there is still something pending, @shawntabrizi ?

We need someone to test the migration. I can try to get to it today, but if we have any volunteers, that would be helpful for me.

@shawntabrizi i can have a go.

There is a LOT of space indentation in this PR. Please root it out and eliminate it before my eyes burn.

One systemic error here: any top-level Option<> in the type should be dropped when migrating with the migration tooling.

Ok - I've tested that as much as is possible, and it looks good. The test I cannot easily do is for migration of FinalityTracker, which I can't easily port across to a new genesis chain and expect to work.

Ok - I managed to test Finality Tracker also. All good.


add manifest v8 compatibility

Closes #24

Should i generate artifacts for jaffleshop? Wasn't sure how those were being created

@dlawin Thank you for the contribution. I would like to add some unit tests, no matter how simple is. The jaffle_shop project would be good for unit tests at the modment.

@dlawin Thank you for the contribution. I would like to add some unit tests, no matter how simple is. The jaffle_shop project would be good for unit tests at the modment.

added

@dlawin Thank you for updating the parser together. I have merged it into the default branch.

We have published v0.2.4. Can you give it a try on your use case?
https://github.com/yu-iskw/dbt-artifacts-parser/releases/tag/v0.2.4

We have published v0.2.4. Can you give it a try on your use case? https://github.com/yu-iskw/dbt-artifacts-parser/releases/tag/v0.2.4

Yes I can test in the next day or two!

We have published v0.2.4. Can you give it a try on your use case? https://github.com/yu-iskw/dbt-artifacts-parser/releases/tag/v0.2.4

works great


[vcpkg docs] consistency-ify docs/regenerate on non-windows

On non-windows, Set-Content adds an LF to the end of files; on Windows, it adds a CRLF. This means that someone cannot regenerate the docs files on non-Windows and get a correct result, since we check against the result on Windows.
This change makes all platforms add an LF to the end of files, without a CR.
Additionally, this puts internal functions into docs/maintainers/internal, as a drive-by, in preparation for marking quite a few of these functions internal.

/azp run


chore(deps): upgrade dev dependencies

Upgrades project dependencies. See details in workflow run.

Automatically created by projen via the "upgrade-dev-dependencies-k8s-30-main" workflow

⚪ Backport skipped
The pull request was not backported as there were no branches to backport to. If this is a mistake, please apply the desired version labels or run the backport tool manually.
Manual backport
To create the backport manually run:
backport --pr 4721

Questions ?
Please refer to the Backport tool documentation


Updating password in PasswordAlias object

Hi Team
Could you please let me know if we can update password in existing PasswordAlias object using dcm ?
Thanks
Sekhar Dutta

Hi,
You can modify and delete host aliases through host-alias-remove and host-alias-set, but not password alias.
However, this issues appears to be a duplicate of #73. All discussion should occur there.


How can I verify user input?

Hello! I'm quite new to this pgp stuff and I want to verify a user's public key.
For example he could enter:
-----BEGIN PGP PUBLIC KEY BLOCK-----
Version: BCPG C# v<IP_ADDRESS>
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=751J
-----END PGP PUBLIC KEY BLOCK-----

Or: jaskdhasjdhasdas
Of course the second input wouldn't be a valid public key.
How can I verify this?
Thanks in advance!

You could feed it into OpenPGP_Message::parse and see if the resulting packet stream contains a key or not (or if it's totally empty, that would mean no valid input).

I tried to do as suggested with this key:
-----BEGIN PGP PUBLIC KEY BLOCK-----

-----END PGP PUBLIC KEY BLOCK-----

And the result comes back as:
OpenPGP_Message Object
(
    [uri] =>
    [packets] => Array
        (
            [0] => OpenPGP_LiteralDataPacket Object
                (
                    [format] => -
                    [filename] => BEGIN PGP PUBLIC KEY BLOCK-----

-----END P
                    [timestamp] =><PHONE_NUMBER>
                    [tag] => 11
                    [size] => 21
                    [data] => UBLIC KEY BLOCK-----
                )
        )
)

Is there a better way to validate the input?

Answered my own question by using:
$wkey = OpenPGP_Message::parse(OpenPGP::unarmor($pgpkey, 'PGP PUBLIC KEY BLOCK'));
The I have to check if the packets OpenPGP_UserIDPacket and OpenPGP_PublicKeyPacket are present - if not then the key is invalid.
I hope this is the way to do it

Depending on your use case you likely also want to check the self-signature on the userid

I just need to check the PGP Key entered by the user is valid - no need to do further checks other than validating it's a proper key.
Thanks for getting back to me


Add support for Github secrets

Hey @chishaku,
I have added GitHub supported in the PR: #69.
Note that GitHub allows only to write secrets and read secretes is not supported.


Build failure: julia.withPackages ["DFTK"]

Steps To Reproduce
Steps to reproduce the behavior:

Build julia.withPackages ["DFTK"] to create a Julia environment with DFTK

Build log
>   File "/nix/store/5sscfa2xlzckf92rnsbkfpd935gx3a6h-python/sources_nix.py", line 57, in <module>
>     sha256 = "{version_to_use["nix-sha256"]}";
>                ~~~~~~~~~~~~~~^^^^^^^^^^^^^^
> KeyError: 'nix-sha256'

Additional context
The issue appears to originate from a missing hash within a dependency. However, the root cause of this problem remains uncertain to me. Building a Julia environment with other packages like JSON3 and Plots does work flawlessly.
Notify maintainers
@thomasjm
Metadata
Please run nix-shell -p nix-info --run "nix-info -m" and paste the result.
[user@system:~]$ nix-shell -p nix-info --run "nix-info -m"
 - system: `"x86_64-linux"`
 - host os: `Linux 6.6.4, NixOS, 24.05 (Uakari), 24.05.20231219.54aac08`
 - multi-user?: `no`
 - sandbox: `yes`
 - version: `nix-env (Nix) 2.18.1`
 - nixpkgs: `not found`

Add a :+1: reaction to issues you find important.

Thanks for the report! I'll take a look.


Batching Along New Dimensions throws RuntimeError

🐛 Bug
Batching along new dimensions, as explained here, throws the following RuntimeError:

RuntimeError: Please look up dimensions by name, got: name = None.

To Reproduce
Steps to reproduce the behavior:
from torch_geometric.data import Data, DataLoader
import torch

class MyData(Data):
   def __cat_dim__(self, key, item):
       if key == 'foo':
           return None
       else:
           return super().__cat_dim__(key, item)

edge_index = torch.tensor([
   [0, 1, 1, 2],
   [1, 0, 2, 1],
])
foo = torch.randn(16)

data = MyData(edge_index=edge_index, foo=foo)
data_list = [data, data]
loader = DataLoader(data_list, batch_size=2)
batch = next(iter(loader))

Expected behavior
A list of attributes of shape [num_features] should be returned as [num_examples, num_features]
print(batch)
>>> Batch(edge_index=[2, 8], foo=[2, 16])

Environment

OS: macOS
Python version: 3.8.5
PyTorch version: 1.7.1
PyTorch Geometric version: 1.6.3

This feature is not available in 1.6.3. It was integrated in one of the last commits.

Thanks a lot for that rapid response, Matthias!
Will install from the source and check again.


http2.HttpConversionUtil :authority conversion error

Motiviation:
The http2 spec https://tools.ietf.org/html/rfc7540#section-<IP_ADDRESS> states that the :authority header should be copied into the HOST header when converting from HTTP/2 to HTTP/1.x. We currently have an extension header to preserve the authority.
Modifications:

Remove AUTHORITY extension header
HTTP/2 :authority should map to HOST header when converting to HTTP/1.x.

Result:
More spec compliant.

@nmittler - FYI

LGTM

@Scottmitch ship it

Cherry-picked 4.1 (c372f69) master (32b4bef)


Styling the component teaser

This PR provide the following implementation:

Simulate body related style on example.css
Styling the teaser (Pls note that in index.css there are some temporary rules of font-family that are necessary to the missing font-face and will be removed when the font will available)
Update the package.json to solve dependecies conflict related to "react-simpletabs"

Great! Thanks, umberto!


Modernization & Hygiene Updates

Updated NuGet packages.
Ran CodeMaid.
Appeased compiler.

Great work @ronhowe thank you. I will add you in the contributor.

@all-contributors add @ronhowe for doc,


Area2D doesn't detect bodies when "Monitorable" property is set to false

Tested versions
Release 4.2.1
System information
Godot v4.2.1.stable - Windows 10.0.22621 - Vulkan (Forward+) - integrated AMD Radeon (TM) Graphics (Advanced Micro Devices, Inc.; 31.0.12034.4) - AMD Ryzen 5 5625U with Radeon Graphics (12 Threads)
Issue description
When Area2D has the property "Monitorable" set to false, it stops detecting PhysicsBody2D objects, even though this property should only make the area invisible to other areas, at least according to documentation.
Steps to reproduce
In the attached project, hold the "right" key to move Area2D object until it collides with StaticBody2D object (make sure collision shapes are visible). In the output window there should be a log entry "Overlapping: true".
Set "Monitorable" property on the Area2D object to "false" and do the same. Body entered signal no longer triggers.
Minimal reproduction project (MRP)
Area_Monitorable_Bug.zip

Duplicate of https://github.com/godotengine/godot/issues/17238


[keymgr] make counter errors unconditional

merge count errors into fsm errors since an invalid count
would also incorrectly re-direct the fsm.

fixes #8464

Signed-off-by: Timothy Chen<EMAIL_ADDRESS>

this fix is..kind of hoaky. But at least it doesn't add registers and doesn't change any interfaces.


Execute accesses to IOVA translated through MSI page tables

Issue #192 requested a feature to support MSI conversion even if second stage is Bare. The PR #193 introduced the new feature.
However PR #193 missed the fact that unlike a truly Bare second stage that would provide a SPA=GPA translation with all permissions granted, the MSI page tables do not grant execute permission.
Before PR #193 transaction that invoked the process to translate address of MSIs causes an "Instruction guest page fault" (cause = 20) for transaction types Untranslated read-for-execute or Translated read-for-execute. However if the second stage is Bare then reporting a guest page fault would not be correct.
One option would be for the fault reported to be conditional based on the second stage being Bare i.e. if the second stage is Bare then the fault could be an "Instruction page fault" (cause = 12) and if second stage is not Bare then the fault could be "Instruction guest page fault" (cause = 20). However this would not be correct in case where first stage itself is Bare.
Proposed fix is to treat interrupt files as being located in a PMA that do not allow instruction execution. This will lead to this condition being treated an access fault and be reported as "Instruction access fault" (cause=1).

@jhauser-us - please see if the proposed fix is acceptable for AIA.

PR #207 to address the issue.

Looks to me like a good resolution.

The supposition and fix looks fine. Wonder if it could be moved to an earlier position in the translation process.
Small typo in the line before the fix, "a" to "an": "If the transaction is a Untranslated or Translated read-for-execute..." => "If the transaction is an Untranslated or Translated read-for-execute.." or change the order to "Translated or Untranslated"

Wonder if it could be moved to an earlier position in the translation process.
Moving to an earlier position may not be desired as this fault wants to be lower priority than any faults caused by an invalid or mis-configured MSI PTE. The process for the two forms of MSI PTEs - basic translate and MRIF mode - converges at this line.

Small typo in the line before the fix, "a" to "an"
Thanks! The PR is updated to fix it.


Objective 3: Inspire and Excite EVM Devs To Supercharge Their EVM Apps Using Cadence Only Features

Objective 3: Inspire and Excite EVM Devs To Supercharge Their EVM Apps Using Cadence Only Features
Key Result 3.1: Publish a tweet with a "Did you know...?" hook about the benefits of using Cadence, targeting at least 10,000 impressions.
Key Result 3.2: Create a deep dive blog post showcasing how Cadence can enhance EVM apps, achieving at least 500 reads.
Key Result 3.3: Add a detailed recipe with steps and code snippets to the developer docs, aimed at guiding EVM developers through integrating Cadence features.
Key Result 3.4: Release Powerful, Extendible Code Example repository for above.
Key Result 3.5: Each member of 4D Team to release deploy one contract of their design to mainnet. (Stretch: Share content describing the design and use-case)
DACI

Role
Assigned

Driver
@sisyphusSmiling

Approver
@Kay-Zee

Consulted
@dete, @SeanRobb

Informed
@SeanRobb

### Tasks
- [x] Work with stakeholders to choose best 1st example (shortlist includes: Scripted transaction Example enabling for apps to allow users to pay for gas in a different token than FLOW, conditional batch transactions, and vault functionality extension using attachments.
- [ ] Work with marketing team to craft hook tweet, blog post
- [x] Create and test example code
- [ ] Create detailed Step by Step guide for developers.flow.com
- [ ] Stretch: Create Additional Practical and Extendable Examples

Example Ideas Shortlist
Should be High ROI - Obviously valuable and easy to implement
Should be Remixable and Extendable

Choose Lighthouse Example

Conditional Batch
COA Attachment (Dex inside an account, Min/Max Spend)
Better Multisig3

Ref

Part 2: Supercharging EVM apps on Flow

The example moving forward will be a relatively simple one, focussing on showcasing something that's both useful simple enough to get the potential across without diving too far into the Cadence deep end.
We'll showcase a transaction that wraps FLOW as WFLOW and mints an NFT, paying with WFLOW. The signer will be a Flow account and a COA will be configured in the same transaction if need be. In order to demonstrate conditional execution, the ERC721 will be written to fail randomly 50% of the time so the Cadence transaction can condition on a successful minting of the NFT.
This setup allows us to demonstrate:

Configuring & funding a COA in a Flow account
Batched EVM calls in a single Cadence transaction

WFLOW.deposit
WFLOW.approve
ERC721.mint

Randomness in the context of an EVM contract
Conditional execution

EPIC (WIP)

Update: The example is code complete and work has started on the walkthrough documentation. Given Jeremy is no longer with the Foundation, I'll take up writing the accompanying blog post covering with aim to have the walkthrough & blog post ready to publish by 11/22. I'll sync with marketing on getting a tweet thread prepped in time for publishing.

Update: Docs implementation-level walkthrough is in PR - https://github.com/onflow/docs/pull/983
Blog post is in draft and collecting feedback in this notion doc
Next steps include working on diagrams and visuals for the blog post, finalizing the post, and drafting a tweet thread to announce the publishing of both the doc and post.

Update: Blog post now has a tracker in the marketing repo and will be slotted into the content calendar for a time that makes the most sense

Update: Blog published here with announcement post from Flow and personal X accounts.


Add --skip-model-availability-check option

Adding a --skip-model-availability-check flag to skip model availability check.
This is needed to make Aider work with our internal Azure OpenAI proxy which does not fully support model check calls.

Thanks for putting this together. If you can resolve the conflicts, I can merge this.

Thanks for putting this together. If you can resolve the conflicts, I can merge this.

Re-based off latest main and tested locally. I've also changed the flag to be --skip-model-availability-check to be more explicit.


Feature/facebook messenger friends

lists facebook usernames of Messenger contacts that are also iOS contacts

Solves https://github.com/timotoots/iphonebackuptools/issues/5


Add GCP resource detector

This implements resource detection for GCE, GKE, Cloud Run, Cloud Functions, and App Engine.  It doesn't split out logic into a non-otel package, which can be done as a follow-up.
Breaking changes from the opentelemetry-go-contrib gcp detector:

Detectors for each platform are combined into a single detector
No longer supports detecting k8s.pod.name, container.name, k8s.namespace.name.  These are expected to be set outside of this resource detector.
No longer sets service.namespace to "cloud-run-managed"
Sets faas.name instead of service.name in cloud run
Sets faas.id instead of service.instance.id in cloud run

Additions:

Adds detector for Google App Engine
Now correctly sets cloud.platform on GKE and Cloud Run
Now detects cloud.availability_zone/region when running on GKE with workload identity enabled (the GCE metadata server is not accessible in that scenario)
Now detects faas.version on cloud run and cloud functions.

I raised this at the Go sig.  I'll plan to split this between our repo, and upstream.  This repo should not depend on semconv.

Closing in favor of https://github.com/GoogleCloudPlatform/opentelemetry-operations-go/pull/394


Update miniz library

This is to trigger internal verification discussed here: https://github.com/GPUOpen-LibrariesAndSDKs/Anvil/pull/17#issuecomment-289681296

I've passed this change over for further analysis.

@janisozaur : I know it's been a lot of time but when you get a free second, can you please resolve the conflicts? Thanks

Sure, I'll take care of that in the next few days.

Not much traffic here, closing. Please feel free to reopen the PR if you feel this change is still relevant.


🔀 :: (#156) 모집의뢰서 상세보기 API

close #156

Codecov Report

Merging #177 (bc0b270) into main (e5e4d01) will decrease coverage by 3.17%.
The diff coverage is 0.62%.

@@             Coverage Diff              @@
##               main     #177      +/-   ##
============================================
- Coverage     32.24%   29.06%   -3.18%
  Complexity      205      205
============================================
  Files           125      127       +2
  Lines          1433     1593     +160
  Branches         10       10
============================================
+ Hits            462      463       +1
- Misses          970     1129     +159
  Partials          1        1

Impacted Files
Coverage Δ

...itment/domain/RecruitmentRepositoryCustomImpl.java
1.63% <0.00%> (-0.41%)
:arrow_down:

...ain/recruitment/domain/vo/RecruitmentDetailVO.java
0.00% <0.00%> (ø)

...ecruitment/presentation/RecruitmentController.java
16.66% <0.00%> (-3.34%)
:arrow_down:

...on/payload/response/RecruitmentDetailResponse.java
0.00% <0.00%> (ø)

...domain/recruitment/service/RecruitmentService.java
0.81% <0.00%> (-0.61%)
:arrow_down:

...ts/dsm/benecia/global/security/SecurityConfig.java
100.00% <100.00%> (ø)

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update e5e4d01...bc0b270. Read the comment docs.

머지해도 되나용


Can events be bound to a different element?

Ie. Render in a child canvas but bind events to parent div.
This would allow for easily overlaying the canvas with interactive dom elements.

Note I've also tried passing the parent element to quickStart which means Pts creates and manages the canvas element for me. However it seems that the event bindings are still made on the canvas rather than the parent element (a div in this case).

See http://chrispearce.co/ for my example of the issue :) And code here: https://github.com/chrisui/chrispearce.co/blob/master/src/index.html#L214

Hi Chris, sorry I don't think I understand fully. What are the events you want to pass to other elements?
Do you mean using a custom event?
For example: https://developer.mozilla.org/en-US/docs/Web/Guide/Events/Creating_and_triggering_events
Or do you mean that the overlay elements are blocking the events that should pass through to canvas underneath?
In these cases, if the overlay is non-interactive, you can fix it by css pointer-events: none on the overlay.

Agreed. Will think about how to support this in the API.


Bluescreen when booting to windows!

When I boot using OpenCore to windows 10 I got bluescreen with stopcode ACPI_BIOS_ERROR.
Mac osx Catalina works perfect, I think its DSDT problem and windows doesn't like the DSDT patch! any help to fix booting to windows using OpenCore 0.5.9?

Can I ask you which version of Windows 10 you have? Maybe 2004?
However I come back home tonight... A possible fix is to use refind as bootloader... I think it’s quite simple... I’ll submit a fix for tomorrow (other users and myself don’t have issues) so that we could have a “nice” GUI 😁

I have 1909
I will press F12 at boot for now than setting up refind bcoz i really like OpenCore.
I hope there is a solution that I can use OpenCore for both mac and win, I need “nice” GUI too :'(
Waiting for your fix 💯

Got the same issue. Did some research and added the path to bootmgfw.efi to blessoverride in config.plist and still no luck 🙁

We hope that profzei can find a fix for that soon, 🙏

@auschanh @barbarou It should be fixed using rEFInd as boot loader: see my guide

@auschanh @barbarou It should be fixed using rEFInd as boot loader: see my guide

Ok, I'll check now, thank you so much for your hard work 🤟