Fix french translation

Caps for days
Change "superposition" for "overlay" (yeah it's technically a English word but everybody use it for that, even Discord French use Overlay to talk about it)
Remove useless backspace at the end of few strings
Translate missing strings
Add space before "?" and ":" (yes, we do that in French)

Hi @jltaylor-us,
I also have an other suggestion, maybe we could change to this :
"menu.edit.show-when": "Jours :",
"menu.edit.only-season": "Saisons :"

Like it's already the case for "weeks", it's shorter, and it's better i think.

I also have an other suggestion, maybe we could change to this :

Sure, whatever you think is the best in French.  I just used Google Translate to make the translation, so I'm sure it's not very good.  My French is basically limited to saying Good Morning, ordering coffee, and saying Thank You (which will get you surprisingly far in most places). 😄 Just push another commit and let me know when it's ready for me to merge and make a new release.

@jltaylor-us 👍


Handle coffee script properly

Compile coffee script files (to javascript) before handing them to vm.createScript.

Hi Iskren,
Would you mind creating a test for this? You'll need to create a couple of example coffee script files for the tests to load.
Thanks,
Nathan


Setting the text alignment to center

Hi!
I am new to building interactive CLIs, so I am not sure of if this feature falls into the API area of console crate or in a TUI library like ratatui.
I want to print a string into the terminal with center alignment, does this is supported or will supported by this crate? I am asking it because I don't want to depend on the ratatui crate just for centering a text in the terminal.
Thanks in advance!

I wanted to add alignment helpers already before, but I could not come up with a good API for it without making a whole dynamic formatter.


Auro Library incorrectly installed in devDependencies

Please verify the version of auro-form you have installed
0.0.0
Please describe the bug

Open package.json
Note that "@aurodesignsystem/auro-library": "^2.8.0", is listed inside devDependencies

Reproducing the error
None
Expected behavior
To avoid issues when installing into projects, Auro Library needs to be listed as part of dependencies.
What browsers are you seeing the problem on?
No response
Additional context
First reported in https://github.com/AlaskaAirlines/WC-Generator/issues/573
Exit criteria

Auro Library listed in dependencies
build runs correctly
tests pass

This work was already completed as part of another body of work.


Collect vulnerabilties for maven packages

There is no dedicated source of data for Maven/Java package vulnerabilities. We should ensure that we can surface that data from our other sources with proper package URLs.

The GitHub importer does import maven vulnerabilities.

The GitHub importer does import maven vulnerabilities.

Any idea how comprehensive these are compared to sources dedicated to Maven / Java?

There's 248 vulnerable maven packages available from the GitHub API.  Upon resolving the version ranges, we have about 15478 maven purls and their mappings to vulnerabilities.

Compared to that, Sonatype OSS Index seem to have 9152 pages of Maven security data, each page with 50 entries, resulting in 9152 * 50 = 457600 data sets.

@sschuberth  the OSS index seems to collect all maven irrespective of whether the package is vulnerable or not, hence the large number.  VulnerableCode atm collects only maven packages who are/were found to be vulnerable.

Eg there are 145154 CVEs published till now, which is nowhere close OSS index's 457600 maven packages.  Those are mostly package descriptions.
FYI @pombredanne  is working on a project called packagedb (soon to be public FOSS) which essentially collects all known packages from almost all  ecosystems.  packagedb + vulnerablecode 's combined dataset would be even more comprehensive then OSS Index because packagedb captures way more details.
Here's the package model being used there https://github.com/nexB/scancode.io/blob/c256b7d921ef2042f570ae9c753e428694987a9e/scanpipe/packagedb_models.py#L31

VulnerableCode atm collects only maven packages who are/were found to be vulnerable.

Which makes absolute sense 👍
But I'm still concerned that VulnerableCode might currently contain far less known Maven package vulnerabilities than there are. However, I cannot prove this with numbers. Do you know a good source that states how many known vulnerabilities there currently are in Maven packages, so we can estimate how good VulnerableCode's data currently is in this regard?

@sbs2001 @sschuberth @pombredanne: OSS index definitely has a lot more than GHSA. Take, for example, the following CVEs which don't exist in GHSA, but OSS index correctly associates with specific libraries:
CVE-2020-10687: io.undertow/undertow-core
CVE-2020-13932: org.apache.activemq/artemis-jms-client
CVE-2020-10727: org.apache.activemq/artemis-jms-client
Any idea how the associate with specific jar files is made? I can't find this under the redhat advisory for undertow and apache/activemq advisory for the others.

Thanks a lot for this information @farimani. Now indeed my key question also is: How does OSS Index manage to map these CVEs to Maven packages, as from a quick glance nothing in the CVEs looks like (complete) Maven coordinates. Generally, maybe looking at the source code of DependencyCheck or Dependency Track can give a clue.

There are three primary means of identifying software, purl, CPE, and SWID. The NVD supports CPE with the intent of also supporting SWID. Other sources support other identifiers. OSS Index is not limited to Maven, ecosystem support is quite broad. OSS Index also has vulnerabilities that are not in the NVD. It’s also not the only source to support purl. There are others, but I’m not aware of any other free sources.
There’s a ticket open which asks Sonatype to consider open sourcing the purl to CPE mapping they have. No special sauce is included with Dependency Track. It simply makes a query to OSS Index to get results.
See https://github.com/OSSIndex/vulns/issues/53

@sschuberth dependency check also uses OSS index for these cases. The CPE based lookup does not yield a match.

@farimani  I can find all the mentioned CVE's at https://access.redhat.com/hydra/rest/securitydata/cve/<cve_id> end point. Eg
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-13932  .
Activemq has advisories at https://activemq.apache.org/security-advisories.data/CVE-2020-13932-announcement.txt .
I don't think they do CPE->PURL mappings. They might be parsing and infering data from above mentioned sources with maybe some manual curation in some cases.
FYI I tried to make CPE->PURL mappings by using vulnerablecode's data,  https://github.com/sbs2001/purl2cpe

@sbs2001 thanks for the links and the purl2cpe is awesome. I'll look at it in more detail.
Regarding the CVE's and advisories, note that ActiveMQ Artemis has some 20+ jar files providing different functionalities. CVE-2020-13932/10727 specifically impact the client libraries (artemis-jms-client*.jar) and not the other ones.
There is no information in the CPEs or the advisories that points specifically to the client libraries, and so if an image contains any of the package's libraries and not the client libs, you'd have false positives. OSS index has some other info that does a more precise mapping.

There’s a lot of projects like that. Spring Framework is a really good example as there’s a lot of optional jars that can be used (Spring MVC, Spring Security, etc) where the CPE doesn’t mention them but the CVE description does. OSS Index handles this but there’s likely some ML in the background helping to associate CVEs to specific jars, then based on the jars, constructing the purl mapping. Other examples include MySQL which could refer to the server or a JDBC driver and typically there’s no indication in the CPE.

@stevespringett I doubt that there's any ML here. More likely it's because Sonatype, by the virtue of providing a great service to java developers and hosting Central, maven, etc. are in a position to have more detailed info about the vulnerability submission/fix process. I could be wrong, but one can check to see if OSS index has more detailed data for other ecosystems, for example, .NET. If so, then there's probably some cool automation going on.


[release-4.14] CNV-46439: Update axios

📝 Description
update axios
🎥 Demo

Please add a video or an image of the behavior/changes

/lgtm


Problem when setting explicit tags for some AWS resources

Hey guys, I have recently got into problem or atleast weird functioning of some resources in AWS provider, I will try to explain
What happened?
When I deploy some AWS resouces (for example: EC2 Address, EC2 Subnet, EC2 VPC), crossplane automatically adds by itself some tags, and that's a problem:
Why?

Because I deploy this resources through argoCD (I have stored the yamls in the Git, and ArgoCD is automatically syncing it and applying, but it will always result in OutOfSync mode, because the desired state will always differ from the deployed yaml (It is explained in How to reproduce below)

PS: This is not happening for other resources like EC2 NatGateway or EC2 Subnet, because on this resources crossplane is not setting another tags by itself
How can we reproduce it?
You can reproduce it pretty easily

Deploy EC2 VPC with some explicit tags set

forProvider:
 ...
 tags:
  - key: Name
    value: production-vpc

In the deployed yaml in k8s you will also see

forProvider:
 ...
 tags:
  - key: Name
    value: production-vpc
  - key: crossplane-kind
    value: production-vpc
  - key: crossplane-providerconfig
    value: default

The problem is that ArgoCD wants to have there only single tag, which is defined by me, but this never happens because crossplane will always add there the other tags...
This is the difference which ArgoCD is always reporting and trying to fix, (it is basically in infinite loop)

What environment did it happen in?
Crossplane version: 1.9.0 deployed by original Helm Chart
CloudProvider: self hosted on AWS
Kubernetes version: 1.21

we have resources with default tags
so as workaround for argo you can add these tags explicitly - does this work in your case ?

Hi, yes as workaround this works.  Probably the same issue. Might be able to fix it the same way as in #1895.
Please note that it is intentional for subnets that tags are not removed automatically.

I had a second look at this and this is actually by design. External tags are added on purpose. The best way to solve this is by adding the additional tags to your ArgoCD manifest.
We could think about removing the whole tag initialization completely since it does not provide real value and I am unsure why they were added in the first place. However, this would be a breaking change. We don't plan to do this on our own. So if someone wants to work on this feature, feel free to open a PR and assign me as a reviewer.


pytest raise on warnings

And start fixing some of the warnings

use pytests warning fixture
Port some tests to pytest style
Ignore a warning thrown with python 3.8

Have not looked at 3.9 yet

@jenshnielsen Should we try to land this before 0.26.0 release? I can take a look at the errors for python 3.9

@trevormorgan We could at least land the improvements to the tests to use the correct context managers. I think there is a test within the monitor module that needs significant work on all versions of python so it may take some time to get all warnings enabled

@trevormorgan and @astafan8 Retargeted this to just cleanup some warning handling in tests so this should be ready to land now


Missing matched index information using showMatchesPosition on string arrays

Describe the bug
It seems that there is no way of retrieving which array member matched within a string array field using showMatchesPosition as a search parameter. If a document has matched in an inner array member, only the matched range is returned without specifying which one matched.
To Reproduce
Small python script to reproduce the current behaviour:
import meilisearch

client = meilisearch.Client('http://<IP_ADDRESS>:7700', 'dev')

index = client.index('test')

documents = [
      { 'id': 1, 'titles': ['First Title', 'Second Title Second'] }
]

index.wait_for_task(index.add_documents(documents).task_uid)

print(index.search('Second', { 'showMatchesPosition': True }))

Current behaviour using "Second" as the query:
{
    "hits": [{
        "id": 1,
        "titles": ["First Title", "Second Title Second"],
        "_matchesPosition": {
            "titles": [{
                "start": 0,
                "length": 6
            },
            {
                "start": 13,
                "length": 6
            }]
        }
    }],
   "query": "Second",
   "processingTimeMs": 0,
   "limit": 20,
   "offset": 0,
   "estimatedTotalHits": 1
}

Expected behavior
Not sure what is the better solution:

Add the matched index information in the matched key

{
    "hits": [{
        "id": 1,
        "titles": ["First Title", "Second Title"],
        "_matchesPosition": {
            "titles[0]": {
                "start": 0,
                "length": 6
            }
        }
    }]
}

Add a child object containing matched indexes to the matched key

{
    "hits": [{
        "id": 1,
        "titles": ["First Title", "Second Title"],
        "_matchesPosition": {
            "titles": {
                "0": {
                    "start": 0,
                    "length": 6
                }
            }
        }
    }]
}

Add a subarray containing matches for each child

{
    "hits": [{
        "id": 1,
        "titles": ["First Title", "Second Title"],
        "_matchesPosition": {
            "titles": [
                null,
                [{
                    "start": 0,
                    "length": 6
                }]
            ]
        }
    }]
}

Other

Meilisearch version: 1.0.2

Having the same issue

Hi, it seems that the consideration has got not update since October 12 2023. Any update of that consideration or a new one would be great.

Hello @Sofiman
You indeed have a lot of feature requests to treat and implement, so we focus on the most requested ones.
This feature has not been requested by many users so far, so we spent our times on most demanded ones.
That's why having information about your usage (why you need it in your company? what do you expect from the feature?) definitely helps.
Thanks in advance for your help, I close this issue since everything is handled on the product side now 😊


Basic frequency alert issue

Trying to setup my first frequency alert, using a very basic setup that doesn't find any matches even though the event is found in Kibana. I created the alert using so-elastalert-create, in order to ensure I had the syntax correct, looking for event_id 1102 (security log cleared). After creating the alert, and then generating the event by clearing my event log and ensuring the event exists in Kibana, I run so-elastalert-test and get:
.
.
.
INFO:elastalert:Queried rule log-cleared from 2018-11-08 17:24 UTC to 2018-11-08 17:25 UTC: 0 / 0 hits
INFO:elastalert:Queried rule log-cleared from 2018-11-08 17:25 UTC to 2018-11-08 17:26 UTC: 0 / 0 hits
INFO:elastalert:Queried rule log-cleared from 2018-11-08 17:26 UTC to 2018-11-08 17:27 UTC: 0 / 0 hits
INFO:elastalert:Queried rule log-cleared from 2018-11-08 17:27 UTC to 2018-11-08 17:28 UTC: 0 / 0 hits
INFO:elastalert:Queried rule log-cleared from 2018-11-08 17:28 UTC to 2018-11-08 17:29 UTC: 0 / 0 hits
Would have written the following documents to writeback index (default is elastalert_status):
elastalert_status - {'hits': 0, 'matches': 0, '@timestamp': datetime.datetime(2018, 11, 8, 17, 29, 49, 9582, tzinfo=tzutc()), 'rule_name': 'log-cleared', 'starttime': datetime.datetime(2018, 11, 7, 17, 29, 46, 263164, tzinfo=tzutc()), 'endtime': datetime.datetime(2018, 11, 8, 17, 29, 46, 263164, tzinfo=tzutc()), 'time_taken': 2.741888999938965}
Complete!
.
.
.
Here is my yaml file:
# Elasticsearch Host
es_host: elasticsearch
es_port: 9200

# (Required)
# Rule name, must be unique
name: log-cleared

# (Required)
# Index to search, wildcard supported
index: "logstash-beats-*"

# (Required)
# Type of alert.
# the frequency rule type alerts when num_events events occur with timeframe time
type: frequency

# (Required, frequency specific)
# Alert when this many documents matching the query occur within a timeframe
num_events: 1

# (Required, frequency specific)
# num_events must occur within this amount of time to trigger an alert
timeframe:
  hours: 1

#(Required)
# A list of Elasticsearch filters used for find events
# These filters are joined with AND and nested in a filtered query
# For more info: http://www.elasticsearch.org/guide/en/elasticsearch/reference/current/query-dsl.html
filter:

- term:
    event_id: "1102"

# (Required)
# The alert is use when a match is found
alert:
- debug

And here you can see that the event in Kibana  in the last day (note I've been working on this for the last 3 days, and been generating this event over this time, so the event exists many times over this time period as well).

I'm sure it must be something simple that I am missing but....
Any help is appreciated.
Thanks
Scott

The issue here is the quotes around 1102. If you see in Kibana, there is a # symbol next to event_id, meaning it's stored as an integer. You'll need to do
- term:
    event_id: 1102

Thanks @Qmando for the tip, I made that change, but still no hits.

Your index doesn't seem to match either
logstash-beats-* vs prdsec06:logstash-beats-2018.11.08

I noticed that too, realized that I needed to adjust that to change the index to be :logstash-beats- in order to match the dropdown selection I get in Discover in Kibana:

That fixed it!  thanks for your help @Qmando . much appreciated!


Electric Cherry Consumes ammo from Gun

When reloading with electric cherry it has a chance to use the thunder/lightning strike on zombies however when this occurs it consumes a whole mag from the weapon I am using for example if I'm using an RPD it will remove 100 bullets when I spam reload it emptys my gun in seconds

Fixed in v2.2.86


Use wget instead of git to download beef

Using git --depth=1 is good to optimize the download, but it only get the latest commit so it fails when later it tries to "git checkout" to a specific commit (which isn't the latest one now)
I tested this PR :)

Nice catch, thanks!


GitHub: Add support for projects

Description

Search through My Projects

See #10586

Open/close a project (if you have the rights to do so), show details, open on Github

Screencast

Checklist

[x] I read the extension guidelines
[x] I read the documentation about publishing
[x] I ran npm run build and tested this distribution build in Raycast
[x] I checked that files in the assets folder are used by the extension itself
[x] I checked that assets used by the README are placed outside of the metadata folder

Thanks for the PR! I'll check it out this week.

Hey, I haven't had the time to review that properly this week. I'm also on vacation next week, so I'll take a look at it in two weeks. Sorry for the delay 🙂


[WIP] Rename app-config to platform-config

#Closes 243

PR Checklist
PR Structure

[ ] This PR has reasonably narrow scope (if not, break it down into smaller PRs).
[ ] This PR avoids mixing refactoring changes with feature changes (split into two PRs
otherwise).
[ ] This PR's title starts with name of package that is most changed in the PR, ex.
paymentservice.stellar, or all or doc if the changes are broad or impact many
packages.

Thoroughness

[ ] This PR adds tests for the most critical parts of the new functionality or fixes.

What

Change the value of stellar.anchor.app-config.settings to platform-config
Rename app-config to platform-config.

Why
The name app-config had been confusing and duplicated. The app-config section is to configure the platform server.
Therefore, it makes more sense to rename it to platform-config.
The Kube PR: https://github.com/stellar/kube/pull/969/files
Known limitations
N/A

Reference Server Preview is available here:https://anchor-ref-pr337.previews.kube001.services.stellar-ops.com/SEP Server Preview is available here:https://anchor-sep-pr337.previews.kube001.services.stellar-ops.com/

Reference Server Preview is available here:https://anchor-ref-pr337.previews.kube001.services.stellar-ops.com/SEP Server Preview is available here:https://anchor-sep-pr337.previews.kube001.services.stellar-ops.com/


Update web-sites-integrate-with-vnet.md

updated the doc to include the information about the environment variable WEBSITE_PRIVATE_IP

@kaushalp : Thanks for your contribution! The author(s) have been notified to review your proposed change.


Can't handle tuples(?)

Tuples don't seem to work. I've only tried to use echo() with them so far, but whenever I do I get an error like this:
'SIGSEGV: Illegal storage access. (Try to compile with -d:useSysAssert -d:useGcAssert for details.)
Error: execution of an external program failed'

Fixed with latest changes:
$ nrpl

type

Person = tuple[name: string, age: int]
var
person: Person
person = (name: "Peter", age: 30)

echo(person.name)
Peter
echo(person.age)
30


Is there any progress on BigDeedle?

I have to work with huge data (100GB to 2TB stored in HDF5-files). The data is consists of partitioned columns with a shared index. I havn't found any Deedle examples in that order of magnitude yet, besides the Deedle.BigDemo (didn't compile). Since our data does not fit into RAM my question is:
Is Deedle (already) able to handle big data?
Or more specific: Having a Frame containing the wohle data, is is possible to

Sort (External Sorting)
Filter by value/Exclude values
Save back onto disk (e.g. enumerate over a Frame containing the whole data)

The biggest overhead is reading the data from disk. So most preferably the data shouldn't be touched to often (e.g. filter values on the fly instead of doing it immediately).
Cheers
Jan Wosnitza

Finally I read the error when compiling Deedle.BigDemo m(

Unexpected exception from provided type 'FSharp.Azure.StorageTypeProvider.AzureTypeProvider,accountName="<Insert your storage connection>"+Domain+Tables' member 'GetMethods': The type provider 'ProviderImplementation.AzureTypeProvider' reported an error: Unable to connect to the remote server [C:\Users\JanWosnitza\Desktop\Deedle.BigDemo-master\src\Deedle.BigSources\Deedle.BigSources.f

I knew I havn't entered the storageConnection string, but insert random excuse.

I did a talk about BigDeedle recently at NDC Oslo which has been recorded. The source code has some additional instructions on getting the BigDeedle demo to work.
That said, BigDeedle has been designed mainly for accessing time-series data, doing some interactive exploration and then fetching a subset of the data into memory. It does not currently implement external sorting - it can sort values by a key (e.g. time in case of time series) and perform various operations restricting the range of the series. So, I'm not sure if it directly fits your needs here - an alternative is to look at MBrace, which is a more general F# big data processing library.

Ok, so I will definitely have a look at MBrace, thanks. Btw. nice Talk, as always :+1:

@tpetricek  Your link to MBrace was broken: www.mbrace.io
Thanks for the link to your talk. Has it been transcribed anywhere to save me time? I'm a much faster note taker when I have a transcript than listening to a video.

@jzabroski Alas, I think MBrace is no longer active project. The internals of BigDeedle do not depend on that, but the demo I did in the talk does. I don't think there is a transcript, sadly.
In general, I'd be happy to help anyone interested in bringing BigDeedle back to life & use it, but I don't have much availability to work on that on my own right now.


Jitter in 2D Window with KinematicBody2D

Thank you for putting this together.  It may be that I have not set up correctly as I don't see the addon doing anything.
physics set to 60 fps
Physics Jitter 0 to 0.5 --> no difference
Use VSync On --> no difference
Use VSync Composite -> huge difference for about 15 seconds then jitters, but less than without
I don't see that mesh connection like in 3D.  So I just connected the player.  Am I supposed to connect something else?
global in  --> no difference
global out  --> no difference
Did I set up something incorrectly?   I don't see any differences with the addon on or off.

Did I set up something incorrectly? I don't see any differences with the addon on or off.

To see the difference, try setting Physics Fps to a very low value such as 10 in the Project Settings. It should make the difference between having physics interpolation and not having it obvious.

Delta Smoothing was checked.  I tried enable sync as well no difference.
What is weird is there are spots on the screen that it goes smooth.  Always the same area.

If that is your node layout in your screenshot, then no it won't do anything. You need to place the visible nodes (sprites, whatever you use) as children of the Smoothing node, rather than children of the Player.
Alternatively if you are patient we should have this available in core soon in Godot 3.5 and it should be much easier to use.

Ty for the response.  Sorry for the noob questions.  If I put the player as a child of Smoothing, all the in game speeds of the player are changed (accelerated) and it becomes a huge jitter.  Is there a vid or noob instructions on how to use with 2D?
I am patient but I was wondering if this would fix the windowed jitters.

The procedure in 2d is pretty much the same as in 3d:
https://www.youtube.com/watch?v=lWhHBAcH4sM
The difficult thing you have to get your head around, is that you have to physically separate the physics representation of the player (kinematic body, rigid body etc), from the VISUAL representation (sprite etc).
ONLY the visual representation should go under the smoothing node, and this will follow the target (the Player kinematic body). Understanding this does depend on understanding some fundamentals of how godot does transforms and how the scene tree works.
Whether this will fix your jitters very much depends, in 2d especially there are a lot of sources of jitter, especially with pixel snapped games (which this will not fix entirely). If you are making a 2d pixel snapped game instead I would recommend checking out this explanation:
https://github.com/lawnjelly/godot-snapping-demo

Alternatively if you are patient we should have this available in core soon in Godot 3.5 and it should be much easier to use.

Hi. I see the option for physics interpolation in the physics settings in Godot 3.5, but it doesn't affect anything. Is this only for 3D or what?

Is this only for 3D or what?

Yes, it's currently only for 3D. 2D physics interpolation is planned for Godot 3.6.


Failing test on Kube: TestEcho/NoSidecar

https://testgrid.k8s.io/istio-postsubmits#integration-k8s-tests&exclude-non-failed-tests=
https://prow.k8s.io/view/gcs/istio-prow/logs/istio-integ-k8s-tests/7708

It looks like this is after your Echo related changes has landed. Could you take a look?

@ozevren This is just the NoSidecar test that we already knew was flaking on Kube. I thought you submitted a PR to skip this test, no?

This is not on the "required" gate, so it executes. My Pr was tagging things as flake'y, but I haven't made the PR to make use of the labels yet.

This should be resolved by #14015

This is still failing in post submit.

@ozevren AFAICT the TestGrid postsubmits tab shows that the last failure was on 5/8 ... or am I missing something?

The link in this bug is probably stale. Here is the dashboard showing failures:
https://testgrid.k8s.io/istio-postsubmits-master#integration-k8s-tests&exclude-non-failed-tests=

Ah ok, so that's a different issue. The panic is identified in #14108 and was just fixed. #14084 is the root cause.  Closing this as a duplicate of #14084.


Revert "treewide: replace base64 encoded hashes"

This reverts commit 7b3a2963d1e8901df0d2b872485e14df4889c99a.

Motivation for this change
The original change breaks node2nix updates https://github.com/NixOS/nixpkgs/pull/89423#issuecomment-639159796
To properly get rid of base64 would require additional work to be done on node2nix side.
Things done

Tested to eval with Nix 2.0:

nix-shell -I nixpkgs=https://github.com/NixOS/nixpkgs/archive/48d9754d2b110ea4b5e7248b74eec52befcd136c.tar.gz -p nix --pure --run "nix-build --version && nix-build . -A lingot.src"

Effectively reverted in #89649


--ssh option on startup

Problem/Motivation

--ssh option on startup

Expected behavior

there are no option to configure startup of ssh service
tailscale up --ssh

There is no use for that... you will end up being in the add-on container; not your Home Assistant system.
../Frenck


chore(readme): Readme updates, package.json scripts adjustment for apps/storybook

Closes # INITIATE-1739
📝 Description

Updated repo to reflect turborepo changes
Updated port in apps/storybook package.json

Screenshots

this change contains no visual changes

Merge checklist

[x] Added/updated tests
[x] Added changeset

@dmorton-p44 The conventional title check that's failing is because we'll need a commitizen style feat: message or chore(readme): ports and turbo in this case

For non-feature chores, can you push an empty Changeset to satisfy that checker. Adding all these things to my notes for the next README update


doc: Break long lines

And try to prettify it a little.

I'm starting with just one so you can tell me if you like the format :)

the issue is that the macros list only displays the first line :/ But I should rewrite most of the docs, to make a markdown file describing combinators in a more readable way

Coverage remained the same at 87.824% when pulling 887ba19dc0a777aa50bd1b4a2121462c46969466 on lu-zero:master into 091129df1a90b9c4aff45e456c7b7ba10c766652 on Geal:master.

Coverage remained the same at 87.824% when pulling 887ba19dc0a777aa50bd1b4a2121462c46969466 on lu-zero:master into 091129df1a90b9c4aff45e456c7b7ba10c766652 on Geal:master.


refactor api code to improve pylint adherence

Issue #, if available:
Closes #140
Description of changes:
Refactored API code to address pylint output. Code rating from 6.3 to 9.7. Remaining items will not be addressed at this time.
Remove test download file.
By submitting this pull request, I confirm that you can use, modify, copy, and redistribute this contribution, under the terms of your choice.

Changes have been deployed and successfully tested.


Changes to include hbase jars into Oozie war and deploy to Oozie server

This is for enhancement #354 . This will help users to make Hbase related requests through Oozie.

I am going to attempt to build this on a test VM and replicate the workflow

Looks good


Wrong material-design-lite version

Hi, I tried to use your library and I saw you set version 3.0.0 in material-design-lite dependence in package.json. I made some researches and don't saw any material-design-lite package in NPM with this version.
So I made a PR with the latest version 1.3.0.
Can you confirm if is really wrong or if is another package that I can't saw?

OMG, great catch, thank you!
Merged, published (the badge might remain cached by github for a while).


Fix FAQ: Is there an equivalent to the Artemis java applet in PomBase?

Java applets aren't supported any more so we should edit this:
https://www.pombase.org/faq/there-equivalent-artemis-java-applet-pombase

We should remove this warning too:
Important: For S. pombe we recommend using Artemis Version 16, not the most recent version available from the Artemis home page. Newer versions of Artemis may be incompatible with the default Java installed on some computers, especially Macs.
Manu reports that he didn't have this problem when he installed Artemis.

It did this earlier today.  The site is now re-deployed.


[Update] Add address validation in WalletAddress and AddAdminButton components

#4575  👈
main

This stack of pull requests is managed by Graphite. Learn more about stacking.

Join @jnsdls and the rest of your teammates on  Graphite


pg_dump support

Allow pg_dump to dump content of the ag_catalog.* tables
Fix typo in the flush_label_oid_cache

Looks good to me.

@deem0n Please provide a pull request that only includes adding our ag_catalog tables as configuration tables, the saved_result_relinfo issue looks to be a separate issue, given what the next line is. We need to review that as a separate issue from the pg_dump support issue that is the primary change in this PR.

Closing this PR as the issues (typos) brought up here have been resolved in commit 0e96fbbf9d6cfb997b8d75da2c8dab1211915319


second level path routing fails

Issue Overview
second level routing (like second/home) fails with following error
http://localhost:3000/second/tmp/app/bundle.js Failed to load resource: the server responded with a status of 404 (Not Found)

Issue Description
when I add a second level routing like following
export const HomeRoutes: RouterConfig = [
  { path: '',  component: HomeComponent },
  { path: 'second',  component: HomeComponent },
  { path: 'second/home',  component: HomeComponent }
];

and open second/home then fails with following error. (first level /second is okay)
http://localhost:3000/second/tmp/app/bundle.js Failed to load resource: the server responded with a status of 404 (Not Found)

Reproducables
I think it is produced only in local development env.
checked occurring with gulp and gulp serve-build.
Information

Operating System
Windows

Node version
4.4.5

NPM Version
2.15.5

Environment
Chrome

since paths starting with / is banned,
https://github.com/angular/vladivostok/blob/master/CHANGELOG.md#breaking-changes
router get the last name from the path and find files relative to the path.
editing base tag in the index.html resolved it .
<base href="/">

BTW,
when I was googling and search for Angular2 source, I found those comments in @angular/common/src/location_strategy.js
so I added {provide: APP_BASE_HREF, useValue: '/'} in bootstrap but didn't change anything:(
/**
 * The `APP_BASE_HREF` token represents the base href to be used with the
 * {@link PathLocationStrategy}.
 *
 * If you're using {@link PathLocationStrategy}, you must provide a provider to a string
 * representing the URL prefix that should be preserved when generating and recognizing
 * URLs.
 *
 * ### Example
 *
 * ```
 * import {Component} from '@angular/core';
 * import {ROUTER_DIRECTIVES, ROUTER_PROVIDERS, RouteConfig} from '@angular/router';
 * import {APP_BASE_HREF} from '@angular/common';
 *
 * @Component({directives: [ROUTER_DIRECTIVES]})
 * @RouteConfig([
 *  {...},
 * ])
 * class AppCmp {
 *   // ...
 * }
 *
 * bootstrap(AppCmp, [
 *   ROUTER_PROVIDERS,
 *   {provide: APP_BASE_HREF, useValue: '/my/app'}
 * ]);
 * ```
 * @stable
 */

Since the base tag in the index.html needs to be customised,
and changing routing after first page loaded is not the case,
I think this is a problem.
I am closing issue but please give a thought of changing '.' into '/'.

I use '.' as a workaround for github page, you can adjust it according to your need


[rtl/otp] Some workaround for FPV security countermeasure assertions

Hi @msfschaffner,
I do not think they are necessary RTL functional changes, but related to
how formal checks these security countermeasure assertions.
What we did are:

blackbox prim_counts and prim_lfsrs
stop at the logic with sparse_fsm outputs
The side-effects of these manual injections are - at some cases,
state_q <= state_d does not work anymore.

So if the prim_counter has err_o, sometimes it only propogates to
state_d but not state_q. So it will never trigger a fsm_err_o. Please
see the waves attached.
Because of that, I think maybe this workaround would work?
If you do not want it to be in the acutal RTL code, I can also add a
ifdef FPV_SEC_CM_ON to only include these code in FPV.
Please let me know what you think.

Thanks
Cindy
Signed-off-by: Cindy Chen<EMAIL_ADDRESS>

Thanks so much Michael!


d_kankyo, d_kankyo_*: autosplit

d_kankyo
d_kankyo_rain
d_kankyo_wether
d_kankyo_rain

oops, didn't actually switch to the new d_kankyo TU

oops, didn't actually switch to the new d_kankyo TU


Installs files into the source directory

I've built it in /usr/ports/multimedia/vvdec/work and the installed files list looks like this:
/usr/ports/multimedia/vvdec/work/vvdec-df4be18/install/bin/%%CMAKE_BUILD_TYPE%%-static/vvdecapp
/usr/ports/multimedia/vvdec/work/vvdec-df4be18/install/include/vvdec/version.h
/usr/ports/multimedia/vvdec/work/vvdec-df4be18/install/include/vvdec/vvdec.h
/usr/ports/multimedia/vvdec/work/vvdec-df4be18/install/include/vvdec/vvdecDecl.h
/usr/ports/multimedia/vvdec/work/vvdec-df4be18/install/lib/cmake/VVDec/VVDecConfig.cmake
/usr/ports/multimedia/vvdec/work/vvdec-df4be18/install/lib/cmake/VVDec/VVDecConfigVersion.cmake
/usr/ports/multimedia/vvdec/work/vvdec-df4be18/install/lib/cmake/VVDec/static/VVDecTargets-%%CMAKE_BUILD_TYPE%%.cmake
/usr/ports/multimedia/vvdec/work/vvdec-df4be18/install/lib/cmake/VVDec/static/VVDecTargets.cmake
/usr/ports/multimedia/vvdec/work/vvdec-df4be18/install/lib/%%CMAKE_BUILD_TYPE%%-static/libvvdec.a

The cmake install instructions should simply have targets like "include", "lib".

it would probably help if they just use the GNUInstallDirs as well

There is no need to try to build both Debug and Release targets in cmake, cmake isn't designed this way.
The target type should be passed to cmake through its standard variable CMAKE_BUILD_TYPE, see https://cmake.org/cmake/help/v3.0/variable/CMAKE_BUILD_TYPE.html
In case you need to build for multiple target types, an external script should invoke cmake with different CMAKE_BUILD_TYPE values.

Thanks for pointing that out. We see the problem. For now the build process was optimized for development and multi-target testing, but of course for deployment it doesn't make sense. We'll adapt it in the next update.


UPGRADE FAILED error when enabling cluster monitoring using API with other cluster updates

What kind of request is this (question/bug/enhancement/feature request):
Bug
Steps to reproduce (least amount of steps as possible):

Create a new cluster using API or UI. I used this script:

curl -v -k -u "${CATTLE_ACCESS_KEY}:${CATTLE_SECRET_KEY}" \
-X POST \
-H 'Accept: application/json' \
-H 'Content-Type: application/json' \
-d '{
  "name": "customwithapi",
  "rancherKubernetesEngineConfig": {
    "network": {
      "plugin": "canal"
    },
    "addonJobTimeout": 30,
    "kubernetesVersion": "v1.14.3-rancher1-1"
  },
  "enableNetworkPolicy": true
}' \
"https://${HOST}/v3/clusters/"

Launch 3 nodes and add them as controlplane/etcd/worker roles to cluster
Run the following API to enable cluster monitoring along with updates to SAN and local cluster auth endpoint. This will trigger deploying of cluster monitoring chart along with updating cluster. Used this script:

curl -v -k -u "${CATTLE_ACCESS_KEY}:${CATTLE_SECRET_KEY}" \
-X PUT \
-H 'Accept: application/json' \
-H 'Content-Type: application/json' \
-d '{
  "name": "customwithapi",
  "enableClusterMonitoring": true,
  "localClusterAuthEndpoint": {
      "caCerts": null,
      "enabled": true,
      "fqdn": "dnolandtest.support.rancher.space",
      "type": "/v3/schemas/localClusterAuthEndpoint"
  },
  "enableNetworkPolicy": true,
  "rancherKubernetesEngineConfig": {
      "network": {
          "plugin": "canal"
      },
      "authentication": {
          "sans": [
             "<IP_ADDRESS>.xip.io", "<IP_ADDRESS>.xip.io", "<IP_ADDRESS>.xip.io"
          ]
      }
   }
}' \
"https://${HOST}/v3/clusters/${CLUSTER_ID}"

Result:
For the monitor-operator app, seeing this error in UI: Failed to install app monitoring-operator. Error: UPGRADE FAILED: a released named monitoring-operator is in use, cannot re-use a name that is still in use.

Full rancher logs available upon request.
Other details that may be helpful:
Environment information

Rancher version (rancher/rancher/rancher/server image tag or shown bottom left in the UI):
v2.3.0

Installation option (single install/HA):
single install

Cluster information

Cluster type (Hosted/Infrastructure Provider/Custom/Imported):
Customer

Machine type (cloud/VM/metal) and specifications (CPU/memory):
aws ec2 t3a.medium

Kubernetes version (use kubectl version):

> kubectl version
Client Version: version.Info{Major:"1", Minor:"16", GitVersion:"v1.16.1", GitCommit:"d647ddbd755faf07169599a625faf302ffc34458", GitTreeState:"clean", BuildDate:"2019-10-02T17:01:15Z", GoVersion:"go1.12.10", Compiler:"gc", Platform:"linux/amd64"}
Server Version: version.Info{Major:"1", Minor:"15", GitVersion:"v1.15.5", GitCommit:"20c265fef0741dd71a66480e35bd69f18351daea", GitTreeState:"clean", BuildDate:"2019-10-15T19:07:57Z", GoVersion:"go1.12.10", Compiler:"gc", Platform:"linux/amd64"}

Docker version (use docker version):

$ docker version
Client: Docker Engine - Community
 Version:           18.09.8
 API version:       1.39
 Go version:        go1.10.8
 Git commit:        0dd43dd87f
 Built:             Wed Jul 17 17:38:58 2019
 OS/Arch:           linux/amd64
 Experimental:      false

Server: Docker Engine - Community
 Engine:
  Version:          18.09.8
  API version:      1.39 (minimum version 1.12)
  Go version:       go1.10.8
  Git commit:       0dd43dd87f
  Built:            Wed Jul 17 17:48:49 2019
  OS/Arch:          linux/amd64
  Experimental:     false

gz#7107

I am having the same issue with rancher 2.5.2


Allow custom field indexing

As a Silverstripe CMS developer, I want a simple API for specifying what fields should be exposed by each content type so that I have full control over what goes into my search index.
Acceptance Criteria

[x] Any content type can index its declared search fields
[x] Serialisation (e.g. field naming) is customisable
[ ] Data types are inferred by default, but can be overridden where applicable

Do we allow custom field names? Remember that those are exposed through frontend requests, so in some cases they might need to be shortened or sanitised. For example, MicrosoftActiveDirectoryBackendIdentifier might become backendIdentifier as a field name, because you don't want to expose the implementation detail of using active directory, or through which vendor.
It also means you can keep field names "stable" in the index when they change in DataObjects, so it decreases the coupling between the data layer (this module), and the presentation/logic layer (could be a search-ui implementation).
If you agree with the feature, feel free to create a new card if you think this is scope creep here.

Note that App Search allows you to specify results fields which might make the custom field naming overkill for security/obscurity purposes, but I think it's still a good idea to decouple them from DataObject naming.

Note that App Search allows you to specify results fields which might make the custom field naming overkill for security/obscurity purposes, but I think it's still a good idea to decouple them from DataObject naming.

Tested this works.

Data types are inferred by default

There's no casting or type detection - I've created https://github.com/silverstripe/silverstripe-search-service/issues/24 for this as a more focused story.


Change plot style

What does this PR do?
Part of https://github.com/Lightning-AI/metrics/issues/1406
As discussed with on slack it would be nice if the plot we generated look a bit nicer.
This PR add https://github.com/garrettj403/SciencePlots as a dependency that makes our plots IMO look a bit better.
For example, compare the plots under this metric
https://torchmetrics.readthedocs.io/en/latest/classification/accuracy.html#binaryaccuracy
with these two plots:

Before submitting

[ ] Was this discussed/agreed via a Github issue? (no need for typos and docs improvements)
[ ] Did you read the contributor guideline, Pull Request section?
[ ] Did you make sure to update the docs?
[ ] Did you write any new necessary tests?

PR review
Anyone in the community is free to review the PR once the tests have passed.
If we didn't discuss your PR in Github issues there's a high chance it will not be merged.

Did you have fun?
Make sure you had fun coding 🙃

@Borda can you help with latex installation for CI:
https://github.com/garrettj403/SciencePlots/wiki/FAQ#installing-latex
it should hopefully work without right now, but would nice to get it working.


Fix Regex to show errors for backticks and /

Following fixes made:

Block code blocks (fix #602)
Block words escaped using \
Fix some upcoming errors (unhandled catch errors)

I was about to merge this but @krishdevdb has raised a question in Discord about the "unverified" commit.

I was about to merge this but @krishdevdb has raised a question in Discord about the "unverified" commit.

@mikeysan That is not related to this 😓 It is solely related to gitpod nothing to do with this pr, I just gave this as a example

I thought that the code-blocks were not flagged so that we can contextually refer to things
But, I guess Eddie is fine with it so 🤷


Correct the number of times values are generated

Correct the number of times values are generated from 5 to 3.

Thanks for the correction. Will be live later today.


Disconnected neighbors in network graph

I have a fully healed network(healed yesterday) that is showing a set of devices as not connected to any neighbors, however when I view the data dump those devices(eg: Garage_Opener) have neighbors listed as appropriate.  Attached is the json dump and a screenshot.
Note: 2 devices are "dead" so those are expected to be disconnected which are Zooz_Double_Plug and BBQ_Island_Led
zwavejs2mqtt: 3.5.0
zwave-js: 7.2.4

nodes_dump.txt

It could be that there is actually no node that forwords packets that have them as neighbors, try to enable. Try to expand options and on edges select All Neighbors

This seems to have magically resolved itself after adding another node..


Fix SCSS lists

This PR fixes #28: Lists are represented incorrectly in SCSS output.
I have seen the discussion in #25 about code style and how to refactor the code before implementing this. Nevertheless, I need this feature and implemented it. This PR may serve as an intermediate bug fix until the refactor actually takes place.
This Pull Request adds simple tests for lists for every data format. Please note that I could not figure out (and did not try too hard) if and how lists work in stylus and less. I therefore adopted the "CSS style" for them.
Note: I used js beautfiy on the code to make writing in the code style easier for me. This PR therefore includes some whitespace changes. But these actually enforce consistency in the code, so they should not be "bad".

I just realised a big flaw of my approach: It cannot handle objects in arrays.
But at this point, it's totally unclear how to handle such a situation: Objects in Arrays make totally sense in YAML, JSON, SASS, etc., but have no valid representation in CSS. How should grunt-shared-config handle this?

Hi,
thank you for this contribution and first off, I actually really appreciate the correction in white space.
I'm not sure what you mean. It can't compile all the way to CSS since CSS supports no kind of variables. But like you said, YAML, JSON, JS, SASS allow nested lists, right? So that should work.

It can't compile all the way to CSS since CSS supports no kind of variables.

That's the point. What if the user still tries to export nested objects to CSS? We could:

fail
leave them out and

print a warning
stay silent about it

What if the user still tries to export nested objects to CSS?

But my point is that grunt-shared-config never transpiles to CSS, because CSS is silly and doesn't support anything useful :smile: (Sorry for the unnecessary rant)
I'm I totally misunderstanding you?

grunt-shared-config never transpiles to CSS

Ouups… true. Sorry for the confusion!
Are there maps in less and stylus? Looking it up in google didn't get me too much about that.

From my point of view, this PR is now ready to merge.
I solved nested objects like this:

SASS, SCSS, JSON, JS (all variations) get converted as expected
STYLUS, LESS

lists nested in lists get flattened
objects in lists become null

That sounds awesome. I wasn't aware if there was a nested list version in Stylus or Less. I wasn't the one implementing that even. That was thanks to PR by @ceee.

Thanks so much for supporting this project.


Docker machine port config

Hi,
I'm using your code to deploy runners with docker-machine instances.
I can't figure where is the template to create the systemd config of docker-machine. I start with certs and port 2376, and my jobs fails to run because it tries to connect to 2375. I've tried setting the DOCKER_HOST var, but I need to use HTTPS.
Can you tell me where the docker machine config is stored, or how to not use HTTPS and keep the standard 2375 port?

@adeleglise this is the default setup. Gitlab Docker-machine configuration is done via the config file. You can try the TLS options here: https://docs.gitlab.com/runner/configuration/advanced-configuration.html#the-runnersdocker-section. But I doubt I'd make any change.
I'm also not sure why your setup tries to connect to 2375

Thanks.


[ci] Implement release workflow

Please follow the guide below

You will be asked some questions, please read them carefully and answer honestly
Put an x into all the boxes [ ] relevant to your pull request (like that [x])
Use Preview tab to see how your pull request will actually look like

Before submitting a pull request make sure you have:

[x] Searched the bugtracker for similar pull requests
[x] Read adding new extractor tutorial
[x] Read youtube-dl coding conventions and adjusted the code to meet them
[ ] Covered the code with tests (note that PRs without tests will be REJECTED)

See Grub4K/youtube-dl@master for successful application of this PR, and the 2024.07.23 and 2<IP_ADDRESS> for example releases, including changelog. Writing tests for CI results is hard

[x] Checked the code with flake8

In order to be accepted and merged into youtube-dl each piece of code must be in public domain or released under Unlicense. Check one of the following options:

[x] I am the original author of this code and I am willing to release it under Unlicense

What is the purpose of your pull request?

[x] New feature

Description of your pull request and other information
Implements an automated release workflow, similar to yt-dlp's (Rewrite of the nightly workflow as an automated workflow_dispatch action). Also removes the old, obsolete build scripts in favor of using the current workflow.
It supports:

Arbitrary version tags
Prereleases
Automated changelog generation

This is more hacked than correct since the commit format is non normative.
make_changelog.py can be backported if the yt-dlp commit format will be adapted

Separate build workflow

Each step is separated so adding more targets is trivial

After this is merged, the only barrier to publishing a new release will be running the "Release" workflow.
Closes #31585

I could not test the devscripts under 2.6, but also thats not required as far as the build process goes, so...

Exactly. Anyone who wants to run the scripts with 2.6 should be able to fix any problems.

Additional targets can be added later to the build.yml if desired

Sure. But this is making the same ones as the nightly, isn't it, and that's all we need for now, except that maybe there should be two versions of the youtube-dl bundled POSIX builds, adding one with #!/usr/bin/env python3.

I think adding another target for this might not make sense. Many modern os have already switched to python pointing to python 3. Additionally, there is python-is-python3 if need be.
If you disagree ill add the target though. Just let me know what to call it

I think adding another target for this might not make sense. Many modern os have already switched to python pointing to python 3. Additionally, there is python-is-python3 if need be.
If you disagree ill add the target though. Just let me know what to call it

It seems that macOS typically installs a python3 only, with no option of a python-is-python3: those users are probably less likely to understand, or be amenable to, creating a symlink. And who knows what "security" feature Apple may introduce to confound this.
If only there were some way to formulate a #! command that would find both python and python3 in some order. I haven't been able to find one that doesn't involve shipping and installing a further script, like this python_any:
#!/bin/sh
exec python3 "$@" || exec python "$@"

In all the systems where I've tried it, a sed command works (preserving the executable permission if it was set):
sed -i -e '1 s/python$/python3/' youtube-dl

As POSIX-y systems are meant to hide any platform differences between "text" and "binary" files, maybe this is good enough, once the shipped default has been decided.
Otherwise, a separate target, say youtube-dl-py3, seems to be the path of least resistance.

Done. See 2024.07.25 release for results

Side note, @dirkf, do you have access to the PyPI package?

What is the holdup on this? Anything that can be done to get this merged?

@dirkf is this PR being considered?

Definitely, but #32905 needs to be sorted before I can get back to it.


Ribbon properties not getting picked up with load balanced rest template and spring cloud

I'm using ribbon in my project with spring cloud config for configurations and consul for service discovery. Have decorated my rest template with @LoadBalanced (spring cloud) annotation and using OkHttpClientRequestFactory as default request factory for the rest template with an ok http client.
I'm passing following ribbon properties
service-1.ribbon.MaxAutoRetries=2
service-1.ribbon.MaxAutoRetriesNextServer=2
and few more like readTimeOut,connectTimeOut etc. via Archiaus but it seems these properties are not getting picked up as no request is getting retried after failure though request is going through RibbonLoadBalancerClient execute method.
Setup:-
I have two instances of service-1 running on my local and I'm accessing them via service-2. I would like if one of the instance of service-1 goes down and service-2 still makes a request to service-1 and if the call fails due to a connect refused exception ribbon should retry to the next server but currently that's not happening.
Please let me know I'm missing something or if you need any further information here.

@spencergibb any ideas here?

@get2parag only the ribbon HTTP client supports those values and it is not used in RestTemplate by default. You can use spring-retry to replace this while we work on #1295.


Root flag is now optional

Changes proposed in this pull request:

Root flag in the CLI is now optional, sysl can find the project root itself if root flag is not defined. ChrootFs will be rooted to this root.
Root can be defined either by adding the path --root in the CLI or using a root marker which marks the location of the project root (currently it is a directory called .sysl). Root marker have to be either in the same directory or any parent directory of the module argument in the command. Root flag takes priority and will be used if it is defined.
If root is not found, the directory of the module argument is set as the root.

@anz-bank/sysl-developers

Another feature will be added which restricts importing from the root if root is not defined will be added as another PR to keep this PR small. @anzdaddy


can we avoid exporting LD_PRELOAD in set_env_vars.sh?

Category
DRT infrastructure
Describe the feature you'd like to request
Currently, set_env_vars.sh sets (exports) a number of environment variables, like LD_LIBRARY_PATH, JAVA_HOME, CLASSPATH.  Most of these are sensible.  However, it also sets (exports) LD_PRELOAD.  This is less reasonable in my opinion, because it will cause that preload (Lean's libm) to be loaded for every future command in that shell, not just Lean-related ones.  (Even worse, at the time of this writing, if you source set_env_vars.sh while not having lean on your PATH, the script will set LD_PRELOAD to a bogus path, which prints an error message every time you do anything subsequently in that shell.  I'll have a PR shortly for the narrow issue of what happens when lean is not on your PATH.)
In my opinion it would be better if we could somehow set LD_PRELOAD only for the commands it is necessary, not globally in the shell.
Describe alternatives you've considered
Instead of a set_env_vars.sh meant for interactive use, we could have a runner script that sets all of these variables just locally (no export), and is responsible for calling cargo fuzz.
Additional context
No response
Is this something that you'd be interested in working on?

[ ] 👋 I may be able to implement this feature request
[ ] ⚠ This feature might incur a breaking change

PR for the lean-not-on-PATH issue is #195.  But the main issue discussed here remains.

If there's nothing too expensive in setting the env vars, maybe something like
#!/bin/bash
cargo() (
  export LD_PRELOAD="..."
  command cargo "$@"
)


feat: Fixed form Handling of products

Description
Before submitting the post request to add product to cart, first varifying that shoesize is selected.
Changes
Shoe size selected or not is checked before submitting the form
Added styles to selected button
Navigated to signup page if user is not logged in
How to test
Try to add a product in cart without selecting the shoe size
fixes #84

Please give  the labels @dvjsharma


hujson: add Decoder.DisallowDuplicateFields

Updates tailscale/tailscale#2807

I'd like to do this enforcement using the newer AST logic I added. I have open PR that switches control over to use it with a subsequent PR that actually does the equivalent enforcement.


Splat meshes dont occlude other objects in same scene as DropInViewer

Is there a way to have splats render in front of other objects in the same scene as DropInViewer. I've attempted to change renderOrder to 0 and this doesn't seem to help. Any guidance would be appreciated, thanks.

Sorry for the late response, are the objects you want to occlude transparent? If so, then setting their renderOrder properties to something less than the instance of DropInViewer should work. When you say you set the renderOrder to 0, did you mean for the DropInViewer or for the objects you're trying to occlude? Objects with a higher render order get rendered after objects with a lower render order.

Closing this for now, let me know if you need further assistance with this issue.


Update licensing-powershell-graph-examples.md

Added the license skuPartNumber in the 'Check if the license is assigned directly or group' script.
Fixed the Remove licenses assigned by group script.

@microsoft-github-policy-service agree company="Microsoft"

@barclayn
Can you review the proposed changes?
IMPORTANT: When the changes are ready for publication, adding a #sign-off comment is the best way to signal that the PR is ready for the review team to merge.
#label:"aq-pr-triaged"
@MicrosoftDocs/public-repo-pr-review-team


Correct a test that fails sporadically

this is really just replacing str with bytes.
the body is initialized outside the test to make it easy to tell what actually failed

While we're fixing tests, do you want to fixup the other failing test? test_receiving_trailers and test_receiving_trailers_before_reading both use a custom pseudo-header field, which RFC 7540 forbids. Mind changing it to something else?

ok  - will do shortly.

Done

Fab, thanks @tbetbetbe! :sparkles: :cake: :sparkles:


ActionSheet usage on iPad causes crash

I'm sure you know this already
i.e adding to Wishlist while using an iPad will terminate the application

Attempted to read an unowned reference but object 0x7fe9ab3a4c10 was already


Ignore internal catalogs for altas values that don't contain the default catalog

Temporary fix until #1562 is implemented.


Indentation not respected when executing various refactorings (TypeScript/JavaScript)

Does this issue occur when all extensions are disabled?: Yes

VS Code Version: 1.65.2
OS Version: Windows 10

When I execute a code action that requires vscode to format part of the document, it always messes up the indentation of the code. I have experienced this repeatedly with both JavaScript and TypeScript, in a variety of different scenarios.
Before reporting this issue, I have tested with all extensions disabled and all settings reset to factory default.
See the following:

Please share a minimal code snippet (as text) that demonstrates the problem

interface Test {
  foo: string;
  bar(a: string): void;
}

function f (spec: any) {}
function g (spec: Test) {}
f(() => {
  g({/* perform code action "Add missing properties" here */});
});

@mjbvz Sorry not sure if I needed to @ your username to make sure you were notified about my reply...


The link in the github description at the top of the repo page is broken

This link in your description no longer works:
http://www.oriontransfer.co.nz/gems/fingerprint

Ah yes that is a very old link. Thanks for pointing that out. I'll fix now :)


semi: never not working with do expressions

Hi! I have options such as:
"semi": ["error", "never", {
  "beforeStatementContinuationChars": "always"
}],

and code such as
const View = (props) => do {
  const {className} = props;

Home

}

Despite being semantically correct (omitting the semicolon does not compile), I get a linting error for the extra semicolon.
I am using

<EMAIL_ADDRESS><EMAIL_ADDRESS><EMAIL_ADDRESS>

Thanks for reporting this! We're in the process of migrating this project to the main babel/babel repository, and I have added this issue to the the list of things I need to ensure are working.

Thank you for the PR. Now that @babel/eslint-parser has been released, we are making this repository read-only. If this is a change you would still like to advocate for, please reopen this in the babel/babel monorepo.


boolean logic at rke2_common/main.yml ln 62 doesn't work on all combinations of ansible/python

update boolean logic here, https://github.com/rancherfederal/rke2-ansible/blob/main/roles/rke2_common/tasks/main.yml#L62, to make logic more flexible
- add_iptables_rules | bool

resolved via  #212


perf: speed up minkowskiBound_lt_boundOfDiscBdd

This saves several seconds on my machine, going from ~50k to ~27k heartbeats.

maintainer merge

bors merge


Does this work with twilio?

No. Twilio began restricting caller ID to only numbers you own or have verified. Any U.S. based VOIP or trunking service will have these restrictions, with many only allowing outgoing caller ID matching any number hosted on the service.
Based on the knowledge that you just created your account to post this issue with a random username, my guess is you are wanting to do something illegal with this, which is why I will not be recommending any companies that allow custom outgoing caller ID.
With the recent spike in swatting, I will not be disclosing any accumulated knowledge on the subject.
Please close this ticket.

@maietta I am researching this topic recently, I am wondering why not we host our own sip server for sip trunking, but instead we have to choose sip provider? would you like to explain to me? Thanks in advance!


[MVP] Dashboard Apps JupyterHub Extension

Value and/or benefit
The CDSDashboards extension is not compatible with current versions of JupyterHub (it requires JupyterHub < 2.0). People using Nebari won't be able to use CDS Dashboard in the future release, hence there is an urgent need to create a solution for the same. The goal here is to create a replacement for CDS Dashboard. This is a relatively larger project and here we'll define the scope for the MVP (4-6 week half-time):
A JupyterHub Extension to create and share dashboards that supports the following:

Works with single server JupyterHub
Supports the following dashboard frameworks (ability to create dashboards):

Plotly
Streamlit
Panel
Bokeh

Lists available dashboards
Shareable: Dashboard running as the user who shared (No Auth)

Long term goals/questions

Dashboard - Plotly, streamlit, Panel, Bokeh
Share to group/access management - not as important
Dashboard running as user who shared
Long running dashboards / dashboard restart is important
Environments management, done manually.
Adding logs & error messages
Add debug modes for things like plotly
Launch modes & bringing down costs.
idle -culler + restart when accessed
Avoid 1-1 correspondence between pods and dashboards. Shared/oversubscribed pods.
Can we launch multiple dashboards on the same pod.
Log max cpu & max memory used by a dashboard so you can decide how to right size the pod.
Decide where to store state, how will restarts happen, can we upgrade jhub without losing dashboards. Which dashboards are available, which are running etc.
Listing of Available Dashboards
Dashboards accessible to the public without authentication

Anything else?
No response

Some wireframes:

Add Edit Dashboard
Conda Environment in Create Dashboard

@aktech This all looks great! Thanks for writing it up.

This is done now.


x/pkgsite: markdown parsing of code inside a link

What did you do?
Currently, on say github I can wrap a link inside a code block like so. I did this on github.com/xplorfin/netutils.
What did you expect to see?
This to render correctly on pkg.go.dev like above.
What did you see instead?
See here for original link

Would you mind clarifying where the issue is? Here's what I see on:
https://github.com/xplorfin/netutils:

and https://pkg.go.dev/github.com/xplorfin/netutils:

Yep! I'm on mobile right now so I just circled it in your screenshot:


No new registration possible at www.daswetter.com

Looks like that at least currently NO REGISTRATION for new users is possible.
The (deep) Link mentioned at README.md still exists but does no longer seem to work. The rgistration link at the official start page is no longer present,
See: https://forum.iobroker.net/topic/59111/problem-anmeldung-registrierung-bei-daswetter-com/62
I would suggest to add a remark at README:md until the situation is fixed (or the adapter must be deprectated due to deprecation of official api).

hint added with 3.2.2


[Bug] [web] Task sorting buttons not working

Search before asking

[X] I had searched in the issues and found no similar issues.

What happened
When I click the task sorting button, the tasks are not sorted.
I looked at the request parameters and found that the request body format was incorrect. From the code git commit history, I saw that the request body format was modified when solving the NPE problem. I want to know in what scenario this NPE exception occurred.
I want to fix the NPE exception without affecting the request body format.
Correct request body:

Wrong request body:

Git commit history:

What you expected to happen
Tasks can be sorted normally.
How to reproduce
Click the task sorting button.
Anything else
No response
Version
dev
Are you willing to submit PR?

[X] Yes I am willing to submit a PR!

Code of Conduct

[X] I agree to follow this project's Code of Conduct

Could you help me look into this issue? @gaoyan1998

Could you help me look into this issue? @gaoyan1998

this is a bug, i will be fix it


LibWeb: Defined all the keycodes

I did this to respond to the issue #974.
I changed the other keys to not have problems with two keys having the same keycode.

Awesome, I can confirm it does successfully fix #974 :tada:

Is the determine_key_code function sitll needed after this change?

Yes because for example if lowercase 'a' is inputed, it will return the ascii code for uppercase 'A' because that's the documentation

Ah

Looks reasonable, but I'll re-run CI as some of it had expired.

This doesn't compile at the moment, please update it to fix that.

I checked the logs and something is weird, the compiler complains about
165 | #define __ENUMERATE_KEY_CODE(name, ui_name) \
It is saying that the macro has two arguments while is use three.
The problem is that this is the old version of the line because I modified it in the commit (you can check):
#define __ENUMERATE_KEY_CODE(name, ui_name, code) Key_##name = code,
Maybe I did something wrong while committing my code, I hope you can help (this is my first time contributing to open source sorry)

As I said on Discord, there's another user of ENUMERATE_KEY_CODES that got added after you made your changes:
https://github.com/LadybirdBrowser/ladybird/blob/3d63549edeb161e16087db02b1b2e46231c03a37/Userland/Libraries/LibWeb/UIEvents/KeyCode.h#L163-L172
That's what the error complains about (which is why it says line 165 which doesn't make sense otherwise.)


Fix bug activator function object missing properties (fs.realpath.native is undefined)

Hey,
This pr is aiming to solve this issue: #143
This sandbox replicate the issue: sandbox
Initially I was getting fs.realpath.native as undefined  when using continuation-local-storage which is using async-listener as dependency. And continuation-local-storage in conjunction with fs-extra v10 are throwing this error.
So in this particular case, I traced the issue to here.  What's happening is that we are returning the wrapper without the original function object properties.
This shallow copy should be solve the problem by attaching the original function object properties to the wrapper function.

Why are you still using this? Node.js core has had AsyncLocalStorage for awhile now. If that's not an option, you could at least use cls-hooked which is at least a whole lot more up-to-date than this module which hasn't been maintained for years. 😅

Why are you still using this? Node.js core has had AsyncLocalStorage for awhile now. If that's not an option, you could at least use cls-hooked which is at least a whole lot more up-to-date than this module which hasn't been maintained for years. 😅

Oh Yeah, thanks the for the suggestion but cls is not really the problem. I just mentioned it to better illustrate the problem.


Paths with trailing whitespace get mangled by the browser

 is treated by the browser identically to , and these are equivalent:
history.pushState({}, "", "/test")  // leads to "/test"
history.pushState({}, "", "/test ")  // also leads to "/test"

So in Router.transitionTo, calling location.push(<something with a trailing space>) actually ends up pushing a different path to the one that Router.makePath returns.
This causes issues when there's a dynamic path component at the end of a route, and it gets set to something with a space at the end: <Link to="foo" params={name: "bar "}> ends up with {name: "bar"} in the params.
Proposed fix: call encodeURIComponent on every dynamic path component in makePath.

I have the same issue, not with spaces but with other characters that need to be encoded, like /, %, &. Agree that the solution is calling encodeURIComponent on injectParams, for all params except splat, for which encodeURI should be called instead since it might actually be a path.
Any reason it's already not doing so? Does it sound ok? I'll submit a PR if so.

This was fixed in #1265.
@santiagoaguiar I've got a fix on the way for splat which uses encodeURI instead of encodeURIComponent, as you suggested. Thank you.


Broken "Edit page" link when multiple languages are supported

Preliminary Checks

[X] This issue is not a duplicate. Before opening a new issue, please search existing issues: https://github.com/HugoBlox/hugo-blox-builder/issues?q=is%3Aissue
[X] This issue is not a question, feature request, or anything other than a bug report directly related to Hugo Blox Builder. Please post those things on Discord: https://discord.gg/z8wNYzb

Description
The website I am working on features multiple languages: the content/ folder has two subfolders: en/ and it/. When I click on the edit page link of any of my pages, though, the generated link does not take this into account: https://csunibo.students.cs.unibo.it/wiki/csunibo.github.io/
So 404 by GitHub is rightfully returned.
Reproduction Link
https://github.com/csunibo/csunibo.github.io
Steps to Reproduce

open a wiki page in the website
click on the pencil icon
observe a 404 by GitHub
...

Expected Result
The source code on GitHub is shown to the user.
Actual Result
The link is incorrect (it/ is missing), so 404 from GitHub is return instead.
What Hugo Module versions does your site use?
module github.com/csunibo/csunibo.github.io

go 1.15

require (
	github.com/wowchemy/wowchemy-hugo-themes/modules/wowchemy-plugin-netlify v1.0.0 // indirect
	github.com/wowchemy/wowchemy-hugo-themes/modules/wowchemy-plugin-netlify-cms v1.0.0 // indirect
	github.com/wowchemy/wowchemy-hugo-themes/modules/wowchemy/v5 v5.8.1 // indirect
)

What operating system(s) are you seeing the problem on?
Linux
What browser(s) are you seeing the problem on?
Other
Which Wowchemy template are you using?
wiki
What version of Hugo are you using?
hugo v0.120.4+extended linux/amd64 BuildDate=unknown

Have you seen the documentation? https://docs.hugoblox.com/getting-started/customize/#link-to-edit-page
The name of the content folder for each language need to be added to the params of the languages.yaml file.

Thanks for your reply! The name of the content folder is already in languages.yml (contentDir field).
I'd say the problem is that the features/repository/content_dir field in params.yml is being used instead.

Hugo's contentDir was not the variable I referred to.
For it to work, the theme needs to know the path of your content folder by following the steps I linked to in the Hugo Blox docs - copy and paste that exact YAML into the params of each language of your languages file (not params.yaml file) and then update the values for your site.

Sorry for the initial misunderstanding! Yes, that solved it.


it is not writing more than 136 lines

import * as XLSX from 'xlsx';

export type Sheets = {
  ws: XLSX.WorkSheet;
  name: string;
};
const buildXlsxFile = async (sheets: Sheets[]) => {
  const wb = XLSX.utils.book_new();

  for (const sheet of sheets) {
    XLSX.utils.book_append_sheet(wb, sheet.ws, sheet.name);
  }

  return await XLSX.write(wb, { type: 'buffer', bookType: 'xlsx' });
};

I can see A155 on XLSX.WorkSheet, but it only goes to 136 lines in the sheet
is there a better way to generate a XLSX to upload to s3?

it looks like this is a bug on mac Numbers, it works well on Google Drive

Can you share the original file?  Likely the sheet is reporting a range of something like A1:B136

I'm gonna share this, as I don't think as it works on excel and google sheets
maybe a Numbers problem
I can share later on, if this happens again
tks for this package

I'd definitely like to take a closer look (it might be indicative of another issue).  If you do feel like sharing but don't want to do it publicly, feel free to email us at<EMAIL_ADDRESS>


Utils change

If I understand you have removed the reading of the apifilter.json file and the generation of the apiDisableMap.  Please explain how different deployments will now dynamically disable implemented api requests without recompiling.

@KennethNagin why did you close this PR ?   You probably just wanted to comment, right ?

@doronp Let me clarify @KennethNagin comment,  The idea was to be able to easily disable functions that are implemented (obviously not implemented functions are not supported) , in such a away that we could have different functions disabled on different deployments.
Two options I see

Have an external user readable file that can be edited and is loaded by the manager
Build a different image for each deployment
If any f you see different approach please share....

@doronp you should rebase your code to multiTennat and push into this branch to update the PR , we can't merge it ...

The updates related to the command name made in apifilter does not seem to be consistent with the command enumerations, e.g.  listNetwork is use and it should be networkList.


Fixed finch compose command syntax

What problem does it solve?
Fixed incorrect syntax for finch compose by removing the --platform, which is not valid for finch compose sub command options.
Summarize the changes and the motivation behind your changes.
removed  --platform option
Type of change

[ X] Bug fix or improvement (non-breaking change which fixes an issue)
[ ] New lab exercise (non-breaking change which adds functionality)
[ ] Breaking change (fix or feature that would cause existing workshop materials to not work as expected)

How Can Other Contributors Test Your Changes?
clone the python-fastapi-demo-docker repository
cd python-fastapi-demo-docker
finch compose up
open browser and verify website
Describe the tests that you ran to verify your changes so that other contributors can reproduce your steps.

[ ] N/A
[ X] Describe below:

Ran compose up and verified the build and website was working as expected locally.
Checklist:

[ ] My contributions follow the style guidelines of this project
[X ] I have performed a self-review of my changes
[ ] I have added tests that prove my changes are effective

Thanks for the contribution James. I'll be reviewing by EOD.

Thanks @JoeNorth let me know


pelias-pip remains in CrashLoopBackOff

I am trying to get pelias running on kubernetes. As I'm not allowed to run helm install,
I installed pelias manually (using kubectl apply with the files that helm template would generate).
pelias-pip is often in CrashLoopBackOff status.
$ kubectl-1.8.15 -n geocoding-staging describe pod pelias-pip-3387644077-8bj7n
[...]
  Normal   Created     25m                 kubelet, dep-kprodv2-100  Created container with id 759fcad828774a090ad9fd6867d89f7da67e0e731705420fc3fa5cdeeb380931
  Normal   Started     25m                 kubelet, dep-kprodv2-100  Started container with id 759fcad828774a090ad9fd6867d89f7da67e0e731705420fc3fa5cdeeb380931
  Warning  BackOff     24m (x14 over 27m)  kubelet, dep-kprodv2-100  Back-off restarting failed container
  Warning  FailedSync  24m (x7 over 25m)   kubelet, dep-kprodv2-100  Error syncing pod, skipping: failed to "StartContainer" for "pelias-pip" with CrashLoopBackOff: "Back-off 1m20s restarting failed container=pelias-pip pod=pelias-pip-33
87644077-8bj7n_geocoding-staging(efb45eba-7655-11e9-b0f2-901b0efcedbb)"

The logs of the initContainer showed that the dowload was successful:
$ kubectl-1.8.15 -n geocoding-staging logs -f pelias-pip-3387644077-8bj7n -c download
[...]
Downloading whosonfirst-data-admin-zw-latest.db.bz2
done downloading whosonfirst-data-admin-zw-latest.db.bz2
done downloading whosonfirst-data-admin-zm-latest.db.bz2
done downloading whosonfirst-data-admin-us-latest.db.bz2
done downloading whosonfirst-data-latest.db.bz2
All done!

but the pelias-pip logs show a SqliteError: disk I/O error. I'm using emptyDir for the data volume,
so I don't know how this could happen. Any ideas?
$ kubectl-1.8.15 -n geocoding-staging logs pelias-pip-3146733653-rr5ds
{"level":"info","message":"starting with layers neighbourhood,borough,locality,localadmin,county,macrocounty,macroregion,region,dependency,country,empire,continent,marinearea,ocean","label":"wof-pip-service:master","timestamp":"2019-05-14T10:01:52.033Z"}
pip-service is now running on port 3102
{"level":"info","message":"marinearea worker loaded 305 features in 87.217 seconds","label":"wof-pip-service:master","timestamp":"2019-05-14T10:03:21.489Z"}
{"level":"info","message":"borough worker loaded 273 features in 87.512 seconds","label":"wof-pip-service:master","timestamp":"2019-05-14T10:03:21.580Z"}
{"level":"info","message":"ocean worker loaded 7 features in 87.427 seconds","label":"wof-pip-service:master","timestamp":"2019-05-14T10:03:21.705Z"}
{"level":"info","message":"dependency worker loaded 40 features in 88.31 seconds","label":"wof-pip-service:master","timestamp":"2019-05-14T10:03:22.506Z"}
{"level":"info","message":"empire worker loaded 11 features in 89.299 seconds","label":"wof-pip-service:master","timestamp":"2019-05-14T10:03:23.491Z"}
{"level":"info","message":"macroregion worker loaded 94 features in 90.313 seconds","label":"wof-pip-service:master","timestamp":"2019-05-14T10:03:24.595Z"}
{"level":"info","message":"continent worker loaded 8 features in 90.979 seconds","label":"wof-pip-service:master","timestamp":"2019-05-14T10:03:25.283Z"}
{"level":"info","message":"macrocounty worker loaded 477 features in 92.131 seconds","label":"wof-pip-service:master","timestamp":"2019-05-14T10:03:26.398Z"}
{"level":"info","message":"country worker loaded 210 features in 93.094 seconds","label":"wof-pip-service:master","timestamp":"2019-05-14T10:03:27.108Z"}
{"level":"info","message":"region worker loaded 4175 features in 97.457 seconds","label":"wof-pip-service:master","timestamp":"2019-05-14T10:03:31.625Z"}
{"level":"info","message":"neighbourhood worker loaded 29316 features in 107.278 seconds","label":"wof-pip-service:master","timestamp":"2019-05-14T10:03:41.731Z"}
{"level":"info","message":"<IP_ADDRESS> - - [14/May/2019:10:03:59 +0000] \"GET /12/12 HTTP/1.1\" - - \"-\" \"Go-http-client/1.1\"","label":"pip","timestamp":"2019-05-14T10:03:59.062Z"}
{"level":"info","message":"county worker loaded 40797 features in 128.074 seconds","label":"wof-pip-service:master","timestamp":"2019-05-14T10:04:02.458Z"}
{"level":"info","message":"<IP_ADDRESS> - - [14/May/2019:10:04:09 +0000] \"GET /12/12 HTTP/1.1\" - - \"-\" \"Go-http-client/1.1\"","label":"pip","timestamp":"2019-05-14T10:04:09.056Z"}

/code/pelias/pip-service/node_modules/pelias-whosonfirst/src/components/sqliteStream.js:25
      const elt = this._iterator.next();
                                 ^
SqliteError: disk I/O error
    at SQLiteStream._read (/code/pelias/pip-service/node_modules/pelias-whosonfirst/src/components/sqliteStream.js:25:34)
    at SQLiteStream.Readable.read (_stream_readable.js:452:10)
    at flow (_stream_readable.js:922:34)
    at resume_ (_stream_readable.js:904:3)
    at process._tickCallback (internal/process/next_tick.js:63:19)
    at Function.Module.runMain (internal/modules/cjs/loader.js:745:11)
    at startup (internal/bootstrap/node.js:283:19)
    at bootstrapNodeJSCore (internal/bootstrap/node.js:743:3)
{"level":"error","message":"locality worker exited unexpectedly with code 1, signal null","label":"wof-pip-service:master","timestamp":"2019-05-14T10:04:10.968Z"}
{"level":"info","message":"neighbourhood worker process exiting, stats: {\"calls\":0,\"hits\":0,\"misses\":0}","label":"admin-lookup:worker","timestamp":"2019-05-14T10:04:10.970Z"}
{"level":"info","message":"continent worker process exiting, stats: {\"calls\":0,\"hits\":0,\"misses\":0}","label":"admin-lookup:worker","timestamp":"2019-05-14T10:04:10.970Z"}
{"level":"info","message":"dependency worker process exiting, stats: {\"calls\":0,\"hits\":0,\"misses\":0}","label":"admin-lookup:worker","timestamp":"2019-05-14T10:04:10.970Z"}
{"level":"info","message":"macrocounty worker process exiting, stats: {\"calls\":0,\"hits\":0,\"misses\":0}","label":"admin-lookup:worker","timestamp":"2019-05-14T10:04:10.971Z"}
{"level":"info","message":"county worker process exiting, stats: {\"calls\":0,\"hits\":0,\"misses\":0}","label":"admin-lookup:worker","timestamp":"2019-05-14T10:04:10.971Z"}
{"level":"info","message":"region worker process exiting, stats: {\"calls\":0,\"hits\":0,\"misses\":0}","label":"admin-lookup:worker","timestamp":"2019-05-14T10:04:10.971Z"}
{"level":"info","message":"country worker process exiting, stats: {\"calls\":0,\"hits\":0,\"misses\":0}","label":"admin-lookup:worker","timestamp":"2019-05-14T10:04:10.971Z"}
{"level":"info","message":"borough worker process exiting, stats: {\"calls\":0,\"hits\":0,\"misses\":0}","label":"admin-lookup:worker","timestamp":"2019-05-14T10:04:10.972Z"}
{"level":"info","message":"macroregion worker process exiting, stats: {\"calls\":0,\"hits\":0,\"misses\":0}","label":"admin-lookup:worker","timestamp":"2019-05-14T10:04:10.972Z"}
{"level":"info","message":"empire worker process exiting, stats: {\"calls\":0,\"hits\":0,\"misses\":0}","label":"admin-lookup:worker","timestamp":"2019-05-14T10:04:10.972Z"}
{"level":"info","message":"ocean worker process exiting, stats: {\"calls\":0,\"hits\":0,\"misses\":0}","label":"admin-lookup:worker","timestamp":"2019-05-14T10:04:10.976Z"}
{"level":"info","message":"marinearea worker process exiting, stats: {\"calls\":0,\"hits\":0,\"misses\":0}","label":"admin-lookup:worker","timestamp":"2019-05-14T10:04:10.977Z"}

/code/pelias/pip-service/node_modules/pelias-wof-admin-lookup/src/pip/index.js:166
        throw `${layer} worker shutdown unexpectedly`;
        ^
locality worker shutdown unexpectedly

Out of curiosity, I tried to install pelias-pip again (after making sure the deployment/service/pod was deleted), this time with its own PVC instead of an emptyDir volume.
Now, the pod gets into a crash loop earlier when attempting to create /data/whosonfirst:
$ kubectl-1.8.15 -n geocoding-staging logs pelias-pip-1688495683-5cw0v -c download
/code/pelias/pip-service/node_modules/fs-extra/lib/mkdirs/mkdirs-sync.js:45
        throw err0
        ^

Error: EACCES: permission denied, mkdir '/data/whosonfirst'
    at Object.mkdirSync (fs.js:753:3)
    at mkdirsSync (/code/pelias/pip-service/node_modules/fs-extra/lib/mkdirs/mkdirs-sync.js:31:9)
    at Object.mkdirsSync (/code/pelias/pip-service/node_modules/fs-extra/lib/mkdirs/mkdirs-sync.js:36:14)
    at download (/code/pelias/pip-service/node_modules/pelias-whosonfirst/utils/sqlite_download.js:15:6)
    at Object.<anonymous> (/code/pelias/pip-service/node_modules/pelias-whosonfirst/utils/download_data.js:15:3)
    at Module._compile (internal/modules/cjs/loader.js:689:30)
    at Object.Module._extensions..js (internal/modules/cjs/loader.js:700:10)
    at Module.load (internal/modules/cjs/loader.js:599:32)
    at tryModuleLoad (internal/modules/cjs/loader.js:538:12)
    at Function.Module._load (internal/modules/cjs/loader.js:530:3)

This happens, although the pod has its own PVC.
$ kubectl-1.8.15 -n geocoding-staging get deployments,pods,pvc | ag "NAME|pip"
NAME                             DESIRED   CURRENT   UP-TO-DATE   AVAILABLE   AGE
deploy/pelias-pip                1         1         1            0           15m

NAME                                         READY     STATUS                  RESTARTS   AGE
po/pelias-pip-1688495683-5cw0v               0/1       Init:CrashLoopBackOff   7          15m

NAME                                   STATUS    VOLUME                                     CAPACITY   ACCESS MODES   STORAGECLASS                          AGE
pvc/pelias-pip-staging-pvc             Bound     pvc-736d59cf-7ae0-11e9-b050-901b0e8d9c59   10Gi       RWO            storageclass-generic-ceph-pv-prodv2   15m

Here's the complete Kubernetes config file pelias-pip.yaml:
---
# Source: pelias/templates/pip-pvc.yaml

kind: PersistentVolumeClaim
apiVersion: v1
metadata:
  name: pelias-pip-staging-pvc
  annotations:
spec:
  storageClassName: storageclass-generic-ceph-pv-prodv2
  accessModes:
    - ReadWriteOnce
  resources:
    requests:
      storage: 10Gi

---
# Source: pelias/templates/pip-deployment.tpl

apiVersion: extensions/v1beta1
kind: Deployment
metadata:
  name: pelias-pip
spec:
  replicas: 1
  minReadySeconds: 60
  strategy:
    rollingUpdate:
      maxSurge: 1
      maxUnavailable: 0
  template:
    metadata:
      labels:
        app: pelias-pip
      annotations:
    spec:
      initContainers:
        - name: download
          image: pelias/pip-service:latest
          command: ["./bin/download", "--admin-only"]
          volumeMounts:
            - name: config-volume
              mountPath: /etc/config
            - name: data-volume
              mountPath: /data
          env:
            - name: PELIAS_CONFIG
              value: "/etc/config/pelias.json"
          resources:
            limits:
              memory: 3Gi
              cpu: 3 # template used 4 CPUs, but in our cluster: initContainer resources <= container resources
            requests:
              memory: 1Gi
              cpu: 0.1
      containers:
        - name: pelias-pip
          image: pelias/pip-service:latest
          volumeMounts:
            - name: config-volume
              mountPath: /etc/config
            - name: data-volume
              mountPath: /data
          env:
            - name: PELIAS_CONFIG
              value: "/etc/config/pelias.json"
          resources:
            limits:
              memory: 15Gi
              cpu: 3
            requests:
              memory: 10Gi
              cpu: 0.1
          readinessProbe:
            httpGet:
              path: /12/12
              port: 3102
            initialDelaySeconds: 120 #PIP service takes a long time to start up
      volumes:
        - name: config-volume
          configMap:
            name: pelias-json-configmap
            items:
              - key: pelias.json
                path: pelias.json
        - name: data-volume
          persistentVolumeClaim:
            claimName: pelias-pip-staging-pvc

Hm, I have never used a PVC with the PIP service so unfortunately can't comment on whether or not that works. My hope/understanding was that there wouldn't be a detectable difference inside the container. It looks like that might not be true.
As for the error you saw with the emptyDir, (SqliteError: disk I/O error), my understanding is that error is fairly generic. The WOF data is pretty big, is it possible there wasn't enough disk space on the machine? I think 20-30GB is a good minimum.

Dear Julian,
I managed to get it working with a 50GB PVC and this workaround:
[...]
    spec:
      securityContext:
        fsGroup: 1000 # workaround to enable user 'pelias' to create /data/whosonfirst
      initContainers:
        - name: download
          image: pelias/pip-service:latest
          [...]

If I understand it correctly, fsGroup: 1000 means that the user "creating" any of the volumeMounts automatically belongs to the group with the GID 1000 (here: pelias). I will let you know once I find a proper solution.
As for the emptyDir case, I can no longer reproduce the issue.

I think that's a totally legitimate solution. Many Docker containers do have processes that run as root, which is unfortunate. It makes sense that Kubernetes would need to know what permissions to use for the PVC, although you would think it would then also need to know for an emptyDir.


[WIP] Icon font update

This pull request updates FontAwesome icons from version 4.7.0 to 6.0.0
Icons
Original:
.fa-snowflake::before {content:"\f2dc"}

For Winter CMS:
.wn-icon-snowflake::before,
.oc-icon-snowflake::before,
.icon-snowflake::before {content:"\f2dc"}

Brands icons:
Original:
.fa-github:before {content:"\f09b"}

For Winter CMS:
.wn-icon-github:before,
.oc-icon-github:before,
.icon-github:before {content:"\f09b";font-family:'FontAwesome Brands'}

Compatibility
There is no full support for old icons. Many old icons are supported, but some are not.
Example FA-4.7.0 fa-snowflake-o => FA-6.x fa-snowflake

Hmm, this seems like it could be a breaking change. Are you able to list out all of the breaking changes and any ideas for smoothing over them?

Also what's the main benefit to the project of performing this upgrade in the first place?

@WebVPF storm.less is not deprecated, you compile it by running winter:util compile less. We have to keep those files around (since people may have been including them directly in their own less stacks), so is it possible to replicate them targeting v6 so we don't have any issues with that?
The icon-lg change is fine, we can always revert that if someone complains.
What's the file size difference between the old icon library and the new one? That's going to have an impact on everyone so it's important we look at that too.

@WebVPF I'm not opposed to merging this in, are you no longer interested in finishing it?


transform does not run after previous refine returned false

Hello,
Given this minimal example:
const nameToGreeting = z
  .string()
  .transform(val => val.toUpperCase())
  .refine(val => val.length > 15, 'must be longer than 15')
  .transform(val => `Hello ${val}`)
  .refine(val => {
    console.log(val); // val is 'JOHN DOE' here
    return val.indexOf('!') === -1;
  });

console.log(nameToGreeting.safeParse('John Doe'));

The second transform is skipped. The refine that follows it receives the once-transformed uppercase string, without the added "Hello ".
I did not find any explanation of this in the docs. The only issue that is related to this is https://github.com/colinhacks/zod/issues/506.
I believe this is a bug. If this behavior is intended, I believe it should be explained in the docs.
The expected behavior would be to

run the transform regardless of whether the previous refine failed or not

OR

after returning false in a refine, not run any following refines

https://github.com/colinhacks/zod/issues/2192
https://github.com/colinhacks/zod/issues/2113

In the linked issues there is a workaround described by using transforms to validate, instead of refines, with the Validating during transform method.
Here is another workaround which wraps the refines in pipe. IMO this is more readable and concise.
import { z } from "zod";

const nameToGreeting = z
  .string()
  .transform((val) => val.toUpperCase())
  .pipe(z.string().refine((val) => val.length > 15, "must be longer than 15"))
  .transform((val) => `Hello ${val}`) // this does not run
  .pipe(z.string().refine((val) => val.indexOf("!") === -1));

console.log(nameToGreeting.safeParse("John Doe"));

open


Add comments in registration/views.py to make more developer friendly

Is your feature request related to a problem? Please describe.
I would like to propose to add appropriate comments for block of code, for developers to understand and review.
Describe the solution you'd like
Add single line comments in each functions and multiline comments in starting of each function. That will help understanding the purpose of the function.

Would like to work on it

Okay, go on.


Add support for DUO Security

Recently I have been wanting to add 2FA to my OpenVPN. I used this script to install it and since I use DUO Security for RDP 2FA protection on my windows systems I thought I would add it to OpenVPN since there is an option. I went through all the steps and it keeps failing to auth correctly since it pulls the username from the common name of the certificate. Is there anyway that maybe we could fix this so that it works? I am sorry if this is not the correct place to post this but since I use this script I though it might be the first place to start.

I used this script to install it

Their guide at https://duo.com/docs/openvpn says to install their customized OpenVPN package.

Their guide at https://duo.com/docs/openvpn says to install their customized OpenVPN package.

I installed it but the problem I have is that it pulls the username from the common name of the certificate. Basically what ever I put for the username is ignored. Since the script is creating the certificates I don't have the ability to specify a username.

Since the script is creating the certificates I don't have the ability to specify a username.

I went through all the steps and it keeps failing to auth correctly since it pulls the username from the common name of the certificate

The Common Name of the client is the same as the client name you write when you add a new user. Is this of any help? I didn't set up my OpenVPN with 2FA so I wouldn't know the details.

The Common Name of the client is the same as the client name you write when you add a new user

I figured this was the case. Now one question i have is how would this play if i wanted to say connect my iphone and my ipad or laptop at once? since one profile and only be used on one device at a time this could be a problem.

since one profile and only be used on one device at a time this could be a problem.

I thought that would be the case... If you don't have too many devices, you could enroll new users from DUO's panel. For the email use yours but write dots in it to make it appear like a new one https://support.google.com/mail/answer/7436150?hl=en.

If you don't have too many devices, you could enroll new users from DUO's panel

That would require multiple email addresses. I think DUO allows setting alias's so I might try that and hope that it works.

If you don't have too many devices, you could enroll new users from DUO's panel

That would require multiple email addresses. I think DUO allows setting alias's so I might try that and hope that it works.
EDIT: Setting up alias's worked and after creating specific names things are working fine.

can you help me setting this up?


Offlinetools + JMX

Please don't merge yet.
TODO

add tests for sstableverify
clean up doxygen stuff

Note: There are accompanying ccm changes

Finished initial review. This is also currently unmergeable, which needs solved. Either rebase your commits onto master, or merge master into your branch and resolve the conflicts.

+1 on all the test logic. Still needs a little cleanup, and the rebase.


Chore/refactor in order to make clearer more maintanable code

:warning: Please install the  to ensure uploads and comments are reliably processed by Codecov.
Codecov Report
Attention: Patch coverage is 88.00000% with 12 lines in your changes missing coverage. Please review.

Files with missing lines
Patch %
Lines

envcloak/handlers.py
85.29%
5 Missing :warning:

envcloak/commands/decrypt.py
85.00%
3 Missing :warning:

envcloak/utils.py
89.47%
2 Missing :warning:

envcloak/commands/encrypt.py
94.44%
1 Missing :warning:

envcloak/encryptor.py
80.00%
1 Missing :warning:

:exclamation: Your organization needs to install the Codecov GitHub app to enable full functionality.

Files with missing lines
Coverage Δ

envcloak/cli.py
95.23% <ø> (ø)

envcloak/commands/compare.py
85.18% <ø> (ø)

envcloak/commands/generate_key.py
100.00% <ø> (ø)

envcloak/commands/generate_key_from_password.py
100.00% <ø> (ø)

envcloak/commands/rotate_keys.py
91.66% <100.00%> (ø)

envcloak/comparator.py
85.57% <ø> (ø)

envcloak/constants.py
100.00% <ø> (ø)

envcloak/decorators/common_decorators.py
100.00% <100.00%> (ø)

envcloak/exceptions.py
87.71% <ø> (ø)

envcloak/generator.py
95.00% <ø> (ø)

... and 8 more