AcmeProtocolException: While parsing ARI CertID an error occurred

The generated certificate with Apache is fine.
Log info and event viewer info, see 2..2.9.txt

Lets Enycript deployed an update yesterday to no longer accept the older ARI draft 01. It sounds like win-acme needs to be updated. (Though ideally it should have dealt more gracefully with not being able to get the ARI info; a client should be able to make its own decision on whether it's close enough to renewal if it has a failure getting the data.)

Context:
https://community.letsencrypt.org/t/discontinuing-support-for-acme-clients-using-draft-ietf-acme-ari-01/215126
https://community.letsencrypt.org/t/win-acme-wacs-error-status-badrequest-beginning-2024-05-16/218570/3

Build 1683 implements ARI draft 3: https://ci.appveyor.com/project/WouterTinus/win-acme-s8t9q/builds/49838660/artifacts

yes, this version work ok for me
https://www.iztoknet.com
https://www.startup-web.net/
Iztoknet - Izdelava spletnih strani, Iztok Balažic s.p.
Cikava 34, 1290 Grosuplje, Slovenija
G: 041 713 125 <//0038641713125>
E: @.***
V V pet., 17. maj 2024 ob 22:31 je oseba Wouter Tinus <
@.***> napisala:

Build 1683 implements ARI draft 3:
https://ci.appveyor.com/project/WouterTinus/win-acme-s8t9q/builds/49838660/artifacts
—
Reply to this email directly, view it on GitHub
https://github.com/win-acme/win-acme/issues/2582#issuecomment-2118345210,
or unsubscribe
https://github.com/notifications/unsubscribe-auth/BIRYH2HBBXM3GNMOMKUJZJLZCZSKNAVCNFSM6AAAAABH34CJAGVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZDCMJYGM2DKMRRGA
.
You are receiving this because you commented.Message ID:
@.***>

All fine with build 1683.

but when i do a nev certificate i still get error
Error requesting certificate "[Manual] project.iztoknet.com"
System.Security.Cryptography.CryptographicException: Keyset does not exist
at System.Security.Cryptography.X509Certificates.StorePal.Export(X509ContentType contentType, SafePasswordHandle password)
at System.Security.Cryptography.X509Certificates.X509Certificate2Collection.Export(X509ContentType contentType)
at PKISharp.WACS.DomainObjects.CertificateInfo..ctor(X509Certificate2Collection rawCollection)
at PKISharp.WACS.DomainObjects.CertificateInfoBc.GenerateInner(Pkcs12Store store, X509KeyStorageFlags flags)
at PKISharp.WACS.DomainObjects.CertificateInfoBc..ctor(Pkcs12Store store)
at PKISharp.WACS.Services.CertificateService.CreateAlternative(Byte[] bytes, String friendlyName, AsymmetricKeyParameter pk)
at PKISharp.WACS.Services.CertificateService.DownloadCertificate(AcmeOrderDetails order, String friendlyName, AsymmetricKeyParameter pk)
at PKISharp.WACS.Services.CertificateService.RequestCertificate(ICsrPlugin csrPlugin, Order order)
at PKISharp.WACS.OrderProcessor.GetFromServer(OrderContext context)

That's a separate and unrelated issue, let's discuss it here: https://github.com/win-acme/win-acme/issues/2584

Renewal failed with version <IP_ADDRESS>1 17/05/2024
After update (v<IP_ADDRESS>0 x64) got i error and next message in system log for both versions (trimmed and pluggable). I'm using IIS 8.5 if that matters.
Error getting renewal information from server
ACMESharp.Protocol.AcmeProtocolException: While parsing ARI CertID an error occurred :: Invalid path
   at ACMESharp.Protocol.AcmeProtocolClient.SendAcmeAsync(String relativeUri, HttpMethod method, String message, HttpStatusCode[] expectedStatuses, String opName)
   at ACMESharp.Protocol.AcmeProtocolClient.SendAcmeAsync[TResponse](String uri, JsonTypeInfo`1 responseType, String message, HttpMethod method, HttpStatusCode[] expectedStatuses, String opName)
   at ACMESharp.Protocol.AcmeProtocolClient.GetRenewalInfo(Byte[] certificateId)
   at PKISharp.WACS.Clients.Acme.AcmeClientExtensions.<>c__DisplayClass1_0`1.<<Retry>b__0>d.MoveNext()
--- End of stack trace from previous location ---
   at PKISharp.WACS.Clients.Acme.AcmeClientExtensions.Backoff[T](AcmeProtocolClient client, Func`1 executor, ILogService log, Int32 attempt)
   at PKISharp.WACS.Clients.Acme.AcmeClientExtensions.Backoff[T](AcmeProtocolClient client, Func`1 executor, ILogService log, Int32 attempt)
   at PKISharp.WACS.Clients.Acme.AcmeClientExtensions.Retry[T](AcmeProtocolClient client, Func`1 executor, ILogService log, Int32 attempt)
   at PKISharp.WACS.Clients.Acme.AcmeClientExtensions.Retry[T](AcmeProtocolClient client, Func`1 executor, ILogService log, Int32 attempt)
   at PKISharp.WACS.Clients.Acme.AcmeClient.GetRenewalInfo(ICertificateInfo certificate)
   at PKISharp.WACS.OrderProcessor.PrepareOrders(List`1 orderContexts, List`1 orderInfos)

The build with the fix is 1683 and it has not been released yet. See the link in my comment above if you want to test it.

I used 1683 and got many problems:
first, I tried force renewal and got new error:
System.Security.Cryptography.CryptographicException: The system cannot find the file specified.
   at System.Security.Cryptography.X509Certificates.StorePal.FromBlobOrFile(ReadOnlySpan`1 rawData, String fileName, SafePasswordHandle password, X509KeyStorageFlags keyStorageFlags)
   at System.Security.Cryptography.X509Certificates.X509Certificate2Collection.Import(ReadOnlySpan`1 rawData, ReadOnlySpan`1 password, X509KeyStorageFlags keyStorageFlags)
   at System.Security.Cryptography.X509Certificates.X509Certificate2Collection.Import(Byte[] rawData, String password, X509KeyStorageFlags keyStorageFlags)
   at PKISharp.WACS.DomainObjects.CertificateInfoBc.GenerateInner(Pkcs12Store store, X509KeyStorageFlags flags)
   at PKISharp.WACS.DomainObjects.CertificateInfoBc..ctor(Pkcs12Store store)
   at PKISharp.WACS.Services.CertificateService.CreateAlternative(Byte[] bytes, String friendlyName, AsymmetricKeyParameter pk)
   at PKISharp.WACS.Services.CertificateService.DownloadCertificate(AcmeOrderDetails order, String friendlyName, AsymmetricKeyParameter pk)
   at PKISharp.WACS.Services.CertificateService.RequestCertificate(ICsrPlugin csrPlugin, Order order)
   at PKISharp.WACS.OrderProcessor.GetFromServer(OrderContext context)

I tried force renewal with no cache but it doesn't work: warning "Cached order available but not used with --"nocache" option."
Next, I got warning "[HTTP] Request completed with status Conflict" and "This order has already been replaced, possibly due to multiple renewals generating the same certificate. You may use the Renewal Manager to scan for duplicates."
Finally I got "[HTTP] Request completed with status TooManyRequests"
Screenshot with client messages (I erased domain names)

I'm currently working on a new version of 2.2.9 (which implements ARIv3) to fix #2584. Anyone feeling adventurous (or desperate 😄) can try build 1688 here: https://ci.appveyor.com/project/WouterTinus/win-acme-s8t9q/builds/49844762/artifacts

it works for me, i craete new and i dont get any errors

Joining the party with the issue (I presume it's the same issue).
Running win-acme for the first time on IIS.
When opening win-acme I get:
 A simple Windows ACMEv2 client (WACS)
 Software version <IP_ADDRESS>5 (release, trimmed, standalone, 64-bit)
 Connecting to https://acme-v02.api.letsencrypt.org/...
 Connection OK!
 Scheduled task looks healthy
 Please report issues at https://github.com/win-acme/win-acme

When I try to run the renewals I get:
 Plugin IIS generated source subdomain.domain.com with 1 identifiers
 Plugin Single created 1 order
 [HTTP] Request completed with status BadRequest
 Error getting renewal information from server
 Renewal [IIS] IIS-SITE, (any host) is due after 2024/7/15

This was after creating a new certificate and getting a similar error. The server is on AWS Lightsail. I've added/opened port 443 thinking it was that. It's also with Cloudflare, but with the proxy off - not sure if either of those make a difference.

I don't create new certificate and don't try it, but I was able to renew current certificate (force renewal). I don't know how it worked. All HTTP requests contained errors:
2024-05-21 08:16:38.821 +05:00 [WRN] [HTTP] Request completed with status "BadRequest"
2024-05-21 08:16:38.822 +05:00 [VRB] [HTTP] Response content: {
  "type": "urn:ietf:params:acme:error:malformed",
  "detail": "While parsing ARI CertID an error occurred :: Invalid path",
  "status": 400
}
2024-05-21 08:16:38.906 +05:00 [ERR] Error getting renewal information from server
ACMESharp.Protocol.AcmeProtocolException: While parsing ARI CertID an error occurred :: Invalid path

but creating private key, downloading and parsing completed with status "OK". I used <IP_ADDRESS>5 after problems with <IP_ADDRESS>3.

So to repeat and be 100% clear: all errors about ARI are harmless and do not affect the normal operation of the program. ARI is only used in very exceptional circumstances (e.g. a security breach at Let's Encrypt). We should have a new 2.2.9 release that fixes ARI soon once the other issue is resolved.

There is (probably?) bugfree build (1700) available now here: https://ci.appveyor.com/project/WouterTinus/win-acme-s8t9q/builds/49859984/artifacts. Barring any user reports to the contrary I'll release this as version 2.9.1 in a couple of days.

There must be something else at play for me then. The site I'm using win-acme on isn't serving on HTTPS, even with the bindings in place.

Renewals are failing on multiple servers (using v<IP_ADDRESS>0):
Information - Plugin "IIS" generated source [Site] with 1 identifiers Information - Plugin "Single" created 1 order Warning - [HTTP] Request completed with status BadRequest Error - Error getting renewal information from server Information - Renewing "[IIS] [SiteName], [Site]" Warning - Using cache. To force a new order within 1 days, run with --"nocache". Beware that you might run into rate limits. Information - Downloading certificate "[IIS] [SiteName], [Site]" Error - Error requesting certificate "[IIS] [SiteName], [Site]" Error - Renewal for "[IIS] [SiteName], [Site]" failed, will retry on next run Error - No certificate generated
Do you recommend reverting to prior version, or wait until the "new" 2.2.9 is released?

I'd recommend trying build 1701 and posting a full log if that also fails. This partial output looks suspicious (as in, might be a bug) but I can't explain what's happening without more details.

Thank you, I am confirming that with build 1701, renewals are no longer failing, and adding new certificates also worked perfectly.

Build 1701 has just been released as version <IP_ADDRESS>.

docker image is failing to get cert
> docker image ls

REPOSITORY                              TAG       IMAGE ID       CREATED         SIZE
tailscale/tailscale                     latest    a8c3bf542685   2 weeks ago     88.1MB

docker compose log error
ts-homeassistant  | 2024/05/28 xxxxx Accept: TCP{xxxxxxxxxx > xxxxxxxxx} 52 tcp ok
ts-homeassistant  | 2024/05/28 xxxxx cert("homeassistant-xxxxxxxxxxxx"): did SetDNS
ts-homeassistant  | 2024/05/28 xxxxx cert("homeassistant-xxxxxxxxxx"): requesting cert...
ts-homeassistant  | 2024/05/28 xxxxx cert("homeassistant-xxxxxxxxxx"): got cert
ts-homeassistant  | 2024/05/28 xxxxx acme: ARI check failed: failed to fetch renewal info from ACME server: fetching renewal info: 400 urn:ietf:params:acme:error:malformed: While parsing ARI CertID an error occurred :: Invalid path; falling back to expiry-based check


popover's position is wrong.

Hi,I put a button on the TableCell.When I clip the button,the popover position always is far away from the button.Do you have something to sovle my problem?
Tips:I'm a Chinese,My English is bad

你的代码和错误的截图发出来看看

已经弄好了，必须把控件相对于屏幕的CGPoint找到，才可以正确出现在指定位置上，谢谢。


Ensures in override not proven

I have overridden TypeConverter.ConvertFrom and attempted to Ensure the return value is not null. The base TypeConverter class doesn't ensure this, so I am making the postcondition stronger in my custom implementation.
From my understanding, inheritance works like:

If a subclass overrides the behavior of a method of a base class (or implements and interface), the preconditions it specifies can only be equivalent to or weaker than the base class
If a subclass overrides the behavior of a method of a base class (or implements and interface), the postconditions it specifies can only be equivalent to or stronger than the base class.

From this description, I should be able to have a stronger postcondition in the subclass (non null return) and have it respected by the analysis tool, however in practice this isn't working.
Is my interpretation incorrect or is this a bug in the static analysis?
Sample code:
CustomTypeConverter converter = new CustomTypeConverter();
object converted = converter.ConvertFrom(null, CultureInfo.CurrentCulture, value);
Contract.Assume(converted != null, "Contracts analysis doesn't realise that the non null return was ensured, the below code gives an 'unboxing null reference' warning");
this = (CustomType)converted;

Inside the typeconverter, something like:
public override object ConvertFrom(ITypeDescriptorContext context, System.Globalization.CultureInfo culture, object value)
{
	Contract.Ensures(Contract.Result<object>() != null);
	return "example";
}

You are correct in the theory of modifying contracts. Note that just as an implementation decision, Code Contracts does not allow you to weaken preconditions, but only to strengthen postconditions.
It looks to me as if that is a bug in the static checker. However, now that Francesco is not working on the project any longer, it isn't clear if there is anyone who will be able to fix it.


protocol middleware for RFC 0510: usability problem

Middleware added in PR #2472
This middleware uses the presexch.PresentationDefinition.CreateVP(credentials, options) to create the VP in P-E format. It obtains the values for the credentials argument from a VP submitted by the user via the service.DIDCommAction.Continue() function by using the presentproof.WithPresentation() option.
What is the problem here? It requires the user to create a VP in the first place, defeating the use of the logic in presexch.PresentationDefinition.CreateVP(). The flow currently looks like this:

presentation request message received
event fired to the user
user fetches all required credentials somehow
user passes these credentials to event.Continue()
the middleware creates a VP of type PresentationSubmission.
The VP is sent without proof attached (it might have in the case of BBS+, I haven't checked)

Step 3 and 6 are the biggest problems here. How does the user figure out which credentials are required? How can the verifier verify a VP without proof (it cannot)?
Aside from adding a proof on this VP, we are missing an important cog in the machine: the presentation definitions criteria needs to be transformed into a query/process that is run against the verifiable store to fetch the required credentials. There are several ways this can be done (user is exposed to a utility function that fetches the matching credentials from the store and then passes them to event.Continue(), PresentationDefinition.CreateVP() can do it automatically given a handle on the verifiable store, etc.

Spoke with @soluchok
The problems are recognized in the following order of priority:

missing proof: this will be added once the BLS primitives are added to the KMS and Crypto interfaces
filter the credentials in the database:

requires some more thought given the latest design of the Store interface
some low hanging fruits seem to be to tag each credential by their schema and issuer

Spoke with @soluchok
The problems are recognized in the following order of priority:

missing proof: this will be added once the BLS primitives are added to the KMS and Crypto interfaces
filter the credentials in the database:

requires some more thought given the latest design of the Store interface
some low hanging fruits seem to be to tag each credential by their schema and issuer


[BUG] Access control - mistake in the docs

Describe the bug

As you can see there is a mistake in this banner because @pankod/refine-antd is displayed twice.
Link to the relevant docs page -> https://refine.dev/docs/advanced-tutorials/access-control/
Steps To Reproduce

Just go to this page https://refine.dev/docs/advanced-tutorials/access-control/ and find the banner.

Expected behavior
Mistake in the docs should be fixed.
Screenshot
No response
Desktop
No response
Mobile
No response
Additional Context
No response

Hello @Mikilll94, I don't think this is an issue.

@BatuhanW Could you read the content of this yellow? There is a clear typo.


Radar module wishlist

The radar module is an amazing addition but I would like to suggest a few changes hopefully for the better:

Once a hunt is picked up by the module, it'll never unload the arrow unless: It dies, a cutscene begins or you change maps. It would be helpful to have the arrow stop showing after a certain distance away from the hunt, maybe the same distance it takes to detect it or a fixed configurable distance or expire after a certain amount of time.

I think the option that shows you the hunt puller is swell, but it I wish it stored even if just temporarily  the name of the puller, this would mostly be useful to know if early pullers are around using player search.
To then use this information to relay the hunt to linkshells hopefully before the pull happens. This can take form of anything, an echo message, a temporary log file, a console message, just something you can check who pulled when the hunt is done.

A way to input in the name of players/mobs for the radar without having to deal with javascript (this is probably for later when the GUI comes in?), would mostly be useful for things like quickly tracking monster needed for hunt spawns (For example the kills needed for Okina), find an NPC or spook a friend.

To go off this. First point if you are gonna make the arrow disappear based on distance can we please have the option to enable that? I like it being persistent, but understand the desire for other options.

I can't imagine something like that being added and not having options to configure it. Don't worry :)

I already added the Options.DetectionRange in user/radar-example.js, the arrows will be hidden if you move out that range. However, we don't have a time-expiration mechanic now.

Maybe we can add time-expiration to the puller as well? It seems weird if there's a persistent name.

Currently, I don't have a better thought to handle custom entries,  as for the spawn mob counter, I'm thinking of new features of radar recently, maybe we can discuss them at https://github.com/quisquous/cactbot/issues/874.

I think this issue is mostly resolved.
DetectionRange I think does what you want in terms of expiration.  I don't think there needs to be time separatelly from distance.
Puller is logged in the console.  I think it's fine for it to always be there while the mob is alive?
#891 covers the config option for custom mobs.
I'm going to close this, as I think everything here has been addressed, or is duplicated in another issue.


[1.0.1] Web Interface /ui does not load

I have an issue with https://x.x.x.x/ui endpoint.
All endpoints from page https://x.x.x.x/ are working :
{
  "paths": [
    "/api",
    "/api/v1",
    "/api/v1beta3",
    "/healthz",
    "/healthz/ping",
    "/logs/",
    "/metrics",
    "/resetMetrics",
    "/swagger-ui/",
    "/swaggerapi/",
    "/ui/",
    "/version"
  ]
}

except this url : https://x.x.x.x/ui/ .
For the url https://x.x.x.x/ui/ i got asked user/password and get redirected to https://x.x.x.x/api/v1/proxy/namespaces/kube-system/services/kube-ui/#/dashboard/ but nothing usable is visible. Sometimes I start to see left panels and the logo on top left but most of the time it does not show anything.
Tried on latest Chrome and FF on MacOS.
I think the service is properly setup (some resources like html, js and css are loaded) but I cannot figure out why UI does not load properly.

I guess I got it loaded properly once :

Even after loading it one time properly it does not load anymore.
On master I did not find any clue from log files kube-apiserver.log, kube-controller-manager.log and kube-scheduler.log. (I may post the contant if required).
I'm not sure if related to https://github.com/GoogleCloudPlatform/kubernetes/issues/11684 . In my case it's start to load but not completely.
Available to help debugging the situation (angular app or making so tests to reproduce the issue).

Suspect this might be related to #11119

Definitely similar. Can be closed.

Closing in favor of #11119


[FLINK-4550] [table] Clearly define SQL operator table

Thanks for contributing to Apache Flink. Before you open your pull request, please take the following check list into consideration.
If your changes take all of the items into account, feel free to open your pull request. For more information and/or questions please refer to the How To Contribute guide.
In addition to going through the list, please provide a meaningful description of your changes.

[x] General

The pull request references the related JIRA issue ("[FLINK-XXX] Jira title text")
The pull request addresses only one issue
Each commit in the PR has a meaningful commit message (including the JIRA id)

[x] Documentation

Documentation has been added for new functionality
Old documentation affected by the pull request has been updated
JavaDoc for public methods has been added

[x] Tests & Build

Functionality added by the pull request is covered by tests
mvn clean verify has been executed successfully locally or a Travis build has passed

This PR reduces the number of SQL operators to those that are fully supported. Since the SQL validator know which functions/operations are supported, this PR should also reduce the number of exceptions in code generation etc.

+1 to merge

Thanks @fhueske. Merging...


Problem when tap a button a change state to selected

I have a UIButton with FAHeartO for state .Normal and FAHeart for state selected but when I change the state to selected at user taps the button the colors change.
If I have a normal button whit tintColor set to redColor in normal state but the selected estate shows the FAHeart in whiteColor and the background in redColor. I need the FAHeart in redColor with clearColor in the background.
Is this a bug?

I saw the same problem here: http://stackoverflow.com/questions/31052227/avoid-uibutton-inverted-colours-when-selected?s=1|4.1570

Hello, i looked at this problem and you are right - this is a global issue of UIButtons. However you can easily solve this problem -  just change button type to Custom (i.e. in Storyboard in the Attribute inspector)
and you can change color for Selected state by
buttonName.setTitleColor(UIColor.redColor(), forState: .Selected)
and you will reach a desired effect.
Let me know if it worked to you.
Have a nice day.
Patrik

Hello Patrik,
You're right, thank you!
Have a nice day you too.


Add stakeholder full and NER

🗣 Description

💭 Motivation and context
Not all stake holders require a full report, this pull request will split full and lite versions of PE_Reports.  Additionally this PR will add the process of gathering executive names as it is a time consuming task and we have the need to automate the process of adding large numbers of stakeholders.This PR closes https://github.com/cisagov/pe-reports/issues/187
✅ Pre-approval checklist

[ ] This PR has an informative and human-readable title.
[ ] Changes are limited to a single goal - eschew scope creep!
[ ] All future TODOs are captured in issues, which are referenced
in code comments.
[ ] All relevant type-of-change labels have been added.
[ ] I have read the CONTRIBUTING document.
[ ] These code changes follow cisagov code standards.
[ ] All relevant repo and/or project documentation has been updated
to reflect the changes in this PR.
[ ] Tests have been added and/or modified to cover the changes in this PR.
[ ] All new and existing tests pass.

✅ Pre-merge checklist

[ ] Revert dependencies to default branches.
[ ] Finalize version.

✅ Post-merge checklist

[ ] Add a tag or create a release.

Coverage increased (+0.4%) to 19.345% when pulling e4b6dda29789d929d6aca3ba432086a8976bd6a5 on CD-add-stakeholder-full into 78ccbfd01e8d6b940179642842331b0f427f4ab6 on develop.


Nested tasks

Checks

[X] I have checked that this issue has not already been reported.

[X] I have confirmed this bug exists on the latest version of pixi, using pixi --version.

Reproducible example
# pixi.toml
[project]
name = "cv"
channels = ["conda-forge"]
platforms = ["win-64"]

[tasks]
build = {cmd = ["tectonic", "-X", "build"]}
b = {depends-on = ["build"]}
watch = {cmd = ["tectonic", "-X", "watch"]}
pdfcpu = {cmd = ["go", "run", "github.com/pdfcpu/pdfcpu/cmd/pdfcpu@latest"]}
appendCL = {cmd = ["pdfcpu", "merge", "build/merged.pdf", "build/cv/cv.pdf"]}

[dependencies]
tectonic = ">=0.15.0,<0.16"
go = ">=1.22.5,<1.23"

> pixi run appendCL build/akuna/akuna.pdf
Pixi task (appendCL in default): pdfcpu merge build/merged.pdf build/cv/cv.pdf build/akuna/akuna.pdf
pdfcpu: command not found

Available tasks:
        appendCL
        b
        build
        pdfcpu
        watch

Issue description
It appears that pixi tasks can't run other pixi tasks outside of depends-on (e.g. to run them with arguments), which I didn't notice in the documentation. Also, the error message is misleading, since it clearly lists the desired subtask pdfcpu in the available tasks after saying it can't be found.
So, either this is a bug in the error message, or this is an undocumented missing feature.
Expected behavior
Either pixi tasks should run other pixi tasks with supplied arguments, or the error message shouldn't state the contradiction that it can't find the task but lists it anyway.

We indeed don't parse the task itself as a pixi run command. This is where the depends-on comes in.
There is a feature request for arguments: #957
But the idea of simply allowing to run a task from a task is a good idea!

But the idea of simply allowing to run a task from a task is a good idea!

Any chance you could give some pointers on where in the codebase to look please so that I or someone else interested can figure out an implementation and make a PR?


implicit numeric widening error

I am getting "implicit numeric widening" compilation error on the following line:
assert(List(1).length == 1)

It's not a blocking issue for me, a workaround is easy. This helps even though it doesn't make much sense because on both sides of the equation are integers already:
assert(List(1).length.toInt == 1)

I am unable to reproduce this. Can you still reproduce it on the latest ScalaTest? If so, can you give more detail on how to reproduce it?

Of course my mistake, I haven't provided important info about Scala compiler options. You have to turn on warnings for numeric widening and then make warnings fatal. Here the problem is that I don't see the actual widening. Is 1 widened from byte to int or what?
import org.scalatest._

/**
 * ScalaTest 3.0.0-SNAP4 for Scala 2.11
 * Scala 2.11.6 compiler options:
 *   -Ywarn-numeric-widen
 *   -Xfatal-warnings
 */
class ImplicitNumericWideningSpec extends FlatSpec with Matchers {
  it should "not compile" in {
    assert(List(1).length == 1)
  }

  it should "compile" in {
    assert(List(1).length.toInt == 1)
  }
}

Just saw this reported in ensime-server.
I debugged, and the tree being typechecked is:
{
  val $org_scalatest_assert_macro_expr = {
    val $org_scalatest_assert_macro_left = result.completions;
    val $org_scalatest_assert_macro_right = 1;
    _root_.org.scalactic.Bool.lengthSizeMacroBool($org_scalatest_assert_macro_left, "length", $org_scalatest_assert_macro_left.length, $org_scalatest_assert_macro_right)
  };
  assertionsHelper.macroAssert($org_scalatest_assert_macro_expr, "")
}

From this point:
	  at scala.reflect.macros.contexts.Context.typecheck(Context.scala:6)
	  at scala.reflect.macros.Typers$class.typeCheck(Typers.scala:58)
	  at scala.reflect.macros.contexts.Context.typeCheck(Context.scala:6)
	  at org.scalactic.MacroOwnerRepair.repairOwners(MacroOwnerRepair.scala:34)
	  at org.scalactic.BooleanMacro.genMacro(BooleanMacro.scala:784)
	  at org.scalatest.AssertionsMacro$.assert(AssertionsMacro.scala:34)
	  at sun.reflect.GeneratedMethodAccessor1.invoke(Unknown Source:-1)
	  at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
	  at java.lang.reflect.Method.invoke(Method.java:497)
	  at scala.reflect.macros.runtime.JavaReflectionRuntimes$JavaReflectionResolvers$$anonfun$resolveJavaReflectionRuntime$2.apply(JavaReflectionRuntimes.scala:34)
	  at scala.reflect.macros.runtime.JavaReflectionRuntimes$JavaReflectionResolvers$$anonfun$resolveJavaReflectionRuntime$2.apply(JavaReflectionRuntimes.scala:22)
	  at scala.tools.nsc.typechecker.Macros$class.macroExpandWithRuntime(Macros.scala:756)
```

And the tree that incurs the warning is unpositioned, which results in the compiler emitting the warning without a file/line number.

You could change:

```
class MacroOwnerRepair {
 ...
 val typed = c.typeCheck(expr.tree).asInstanceOf[symtab.Tree]
```

To:

```
 val typed = c.typeCheck(atPos(macroApplication.pos)(expr.tree)).asInstanceOf[symtab.Tree]
```

To at least get a positioned error.

You could then either provide an `Int` overload of `lengthSizeMacroBool`, or synthesize explicit `toLong` calls rather than relying on the implicit numeric widening.

@RadoBuransky @retronym I submitted a PR here:
https://github.com/scalatest/scalatest/pull/671
Thanks @retronym for the fix!  I tested and it worked like a charm.

This was fixed 5 months ago in 3.0.x and included in all subsequent milestone releases. Closing now.


Iterant Scope uncons hangs on headOptionL

Hi there.
I'm trying to figure out if the following code sample is a bug or a protocol violation:
val iterant = Iterant[Task].fromReactivePublisher[String](pub)
val head1 = iterant.uncons.headOptionL
val m = head1.flatMap { // <-- (0)
  case Some(Some(res), rest) =>
    val h = rest.headOptionL
    h.runSyncUnsafe(5.minutes) // <-- (1)
    Task(1)
  case _ => Task(0)
}

This code will hang at (1).
The direct reason for this is that the IterantFromReactivePublisher runs it's release function with ExitCase.Complete right around the flatMap call (0). Now the question is - should it?
The runSyncUnsafe is just an example, same happens with
    val h = rest.headOptionL
    h

as h is a Task.
a similar piece of code:
val iterant = Iterant[Task].fromReactivePublisher[String](pub)
val h = iterant.headOptionL.map(_.map(t => (t, iterant.tail)))
h.flatMap { case (Some(hd), tl) =>
  // do something with hd
  tl.headOptionL.map(_.map(t => (t, tl.tail)))
  // one can imagine a def go that recurs over the above structure
}

works.
Which is fine but at the same time tail has to be computed from scratch on every step which is sub optimal.
To sum this up - if I remove the out.cancel() from the release method in Scope (which I know is a bad idea) the above code runs fine, but leaks resources.
Hope someone with better understanding of the how Scope should behave can give this a look.
Thanks!

I don't know what's causing it off the top of my head because it has been a while since I touched Iterant but I will try to fix it for 3.2.2

What's the use case for iterant.uncons.headOptionL? Would it be possible to write it in a different way, let's say:
    val m = iterant.uncons.mapEval {
      case (Some(res), rest) => rest.headOptionL
      case (None, _) => Task(None)
    }.headOptionL

(not sure what's used instead of rest.headOptionL)
I'm investigating it and I start to think that calling release after headOptionL is correct behavior.
We have:
Iterant[F, (Option[A], Iterant[F, A])]

If original Iterant is a Scope then we either leave resource safety responsibilites to the "outer" Iterant or the "inner" one.
Currently it's the "outer" and if we call headOptionL then it is consumed so finalizers are called.
It is mentioned in ScalaDoc:
    * The value returned is wrapped in Iterant to preserve resource safety,
    * and consumption of the rest must not leak outside of use.

Although it's not obvious what use refers to, I imagine it's a reference of map variations to Resource.use.
If we call finalizers when "inner" Iterant is done then I feel like it would be quite dangerous - the user could never discard the tail.
Right now I'm thinking we should leave it as is and make the behavior clearer in docs.
It might be a good idea to signal an error in IterantFromReactivePublisher if we try to consume already canceled publisher if it's not against any protocols.


Having some issues using the provider to create a service

Hello!

Vote on this issue by adding a 👍 reaction
To contribute a fix for this issue, leave a comment (and link to your pull request, if you've opened one already)

Issue details

Hello! I am trying to use a provider and pass it to a service in order for the creation of the service to use the provider details( auth and admin uri), but I am getting a "401 Invalid credentials. Token or User credentials required" error back. It might be that I am wrongly assuming how this works, but here is my code:
Steps to reproduce

Deploy this

  const provider = new kong.Provider('kong-provider', {
    kongAdminUri: "config_uri",
    kongAdminToken: "token",
  });

  const service = new kong.Service(
    'service',
    {
      connectTimeout: 1000,
      host: 'test.org',
      path: '/mypath',
      port: 443,
      protocol: 'https',
      readTimeout: 3000,
      retries: 5,
      writeTimeout: 2000,
    },
    { provider }
  );

Expected: The service would use the provider and get created successfully.
Actual: 401 Invalid credentials. Token or User credentials required

Does anyone have any ideas on this?

I'm just exploring pulumi and evaluate if kong can be part of my solution. It is mentioned that

The Kong provider must be configured with credentials to deploy and update resources in Mailgun.

This seemed confusing to me at first, but looking deeper into the documentation of Kong (which is not opensource Kuma btw) requires

kong:kongAdminToken - API key used to secure the kong admin API in the Enterprise Edition. May be set via the KONG_ADMIN_TOKEN environment variable.

Finally found out the issue was that I needed to add the kongAdminUsername as well to the Provider. I guess I was expecting the usage to be the same as calling the config API manually, there the "kong-admin-api" is enough.
Silly mistake.


[build] hide some symbols in LLVMSupport

Reintroduce some changes done in #23131 to hide some weak symbols
generated when compiling as part of libswiftDemangle.dylib, which may
introduce a performance regression.
Addresses rdar://63454568

@swift-ci please test

Can you explain why this is suddenly an issue?  These did not change their annotation across the version, so why did they suddenly become an issue?
I think that using the SWIFT_ALWAYS_INLINE SWIFT_LIBRARY_VISIBILTIY attribute might be better if you explicitly want to annotate them.  I think that the better solution is to use the correct flags.  I'll put up a different change for the flags.

@compnerd I've loosely based my change on the feedback I could skim from #31665 and #20633 (which were done before #31665) but I'm not sure if I've accounted for the Windows scenario correctly (or if I need a different change now)

I think that a different change will be better using CMake to handle the problem.  But it still doesn't explain why this wasn't an issue before.

#31953 should accomplish this in a more stable and platform agnostic manner.  Could you please help answer the question of why its needed and what performance regression you believe that this is causing?

Sorry, replied at the same time you asked your questions.
We have some internal checks that ensure we have no weak symbol exports on dylibs, since they can cause launch time regression in applications.
To the best of my understanding, before #31665  libswiftDemangle.dylib only had a symbol reference to llvm::SmallVectorBase::grow_pod, which in was annotated with __attribute__((__weak__, __visibility__("hidden"))) in #23131, and this way we passed those checks.
With the change in #31665, now the dylib both "grabs" more (weak) symbols from llvm::SmallVectorBase and they are not hidden anymore -- triggering our checks.
Thanks a lot for #31953 -- I will experiment to this change to see if that disappeared.

Oh!  Thank you, now it all makes sense.  It didn't cause a performance regression, just triggered a test case failure - one that Id argue should just be in tree.

Closing this draft PR in favor of #31953 and #31955

Build failed
Swift Test OS X Platform
Git Sha - 941fdea61b3d3568132502239950b1c8bcb67b51

Build failed
Swift Test Linux Platform
Git Sha - 941fdea61b3d3568132502239950b1c8bcb67b51


Needs better support for DateTime lists

I have a calendar file with different recurring events with exceptions.
There are 3 different EXDATEs:

No value: EXDATE;TZID=Europe/Berlin:
2 values: EXDATE;TZID=Europe/Berlin:20150514T110000,20150528T110000
2 values with comma at the end EXDATE;TZID=Europe/Berlin:20150514T130000,20150528T130000,

Expected behavior: Sabre VObject handles all three EXDATEs correctly.
Actual behavior: Sabre VObject fails to handle EXDATEs correctly. (for exact output see gist)
Broken example code: https://gist.github.com/georgehrke/c27be5982d8dd367cbdb

Sabre-Version: 3.3
PHP-Version: 5.6.7

DateTimeParser::parseDateTime() doesn't seem to expect a list of DateTimes, but rather a single DateTime.
Nevertheless Property\ICalendar\DateTime::validate hands over a list of DateTimes.
(see https://github.com/fruux/sabre-vobject/blob/3.3.5/lib/Property/ICalendar/DateTime.php#L375)

Note:
The EXDATE;TZID=Europe/Berlin:20150514T110000,20150528T110000 issue applies only to validate().
The other 2 issues also trigger failure in jsonSerialize().
https://github.com/fruux/sabre-vobject/blob/3.4/lib/Property/ICalendar/DateTime.php#L172
It tries to parse $part even if part is an empty string.
If we would add a check like this: ...
foreach($this->getParts() as $part) {
    if (trim($part) === '') {
         continue;
    }
    $dts[] = DateTimeParser::parse($part, $timeZone);
}

..., it would only solve the issue with EXDATE;TZID=Europe/Berlin:20150514T130000,20150528T130000,.
EXDATE;TZID=Europe/Berlin: would still cause issues, as $dts would be empty and some other parts like https://github.com/fruux/sabre-vobject/blob/3.4/lib/Property/ICalendar/DateTime.php#L279 expect this array to have at least one element (which is supposed to be an instance of DateTime).

Hi @georgehrke ,
I am actually not certain whether these two should be supported:

No value: EXDATE;TZID=Europe/Berlin:
2 values with comma at the end EXDATE;TZID=Europe/Berlin:20150514T130000,20150528T130000,

The specification says that EXDATE is defined as:
exdate     = "EXDATE" exdtparam ":" exdtval *("," exdtval) CRLF
exdtval    = date-time / date

This definitely leaves to room for empty values, from a specification point of view.
However, the validation issue I agree with and I will address this.

Just committed 74a6e0e, which should address your issue. Let me know if this is sufficient to close this ticket.

Just committed 74a6e0e, which should address your issue.

Thanks for fixing the validator issue. :)

Let me know if this is sufficient to close this ticket.

I can see your point that you don't want to support broken icals, but there is actually software out there generating this (actually my university's schedule tool). So I would be happy if you could add a fix. If you decide against adding a fix, I'd appreciate if sabre/dav would already throw an ParseException when reading such events.

One issue I have with making the parser more strict, is that it may start tripping over iCalendar objects that exist 'in the wild', exactly like your use-case.
That's sort of why there's a 'general parser' that's fairly loose and will parse iCalendar as long as it mostly adheres to the general structure, and a separate validator that does look at the data strictly.
I think making everything more strict during the parsing phase, and effectively call validate() and do hard failures when parsing objects will make a lot of people unhappy.
However, I am thinking of adding a 'strict mode' in sabre/dav in the next version that does automatically call validate() on every incoming object, and in the next-next version turn it that setting on by default.
So the current 'don't fail on parse' and 'error on validate' is consistent with how the rest works.
Thoughts?


build package

how we can build the package for multiple devices ?
any howto for this ?

Hi,
there could be helpful these 2 following threads regarding your topic:

https://github.com/mautilus/sdk/issues/15 Compile/Export project to each platform
https://github.com/mautilus/sdk/issues/32 General question on SDK and packaging

If something is not clear, please ask us for next details.
Regards,
Radim

but how we can use the Gruntfile.js ?
i have lanced the install.bat but it only install the nmp module .


Why the data in TDC is less than the original paper?

Describe your question.
Question 1:
For example, the Caco-2 Dataset has 1272 compounds;
But the TDC only has 906?
"After a series of pretreatments, 1272 compounds and their permeability values were finally collected as further analysis. Their SMILES structures and permeability values can be found in SI1." -------From the Paper.
Question 2:
The SMILES in TDC is not same as the original dataset.
Dataset Caco2 for example, the SMILES of compound "dexamethasone b D glucuronide" in original dataset is F[C@@]12[C@H]([C@@H]3C[C@@H](C)[C@](O)(C(=O)CO[C@H]4O[C@@H](C(O)=O)[C@H](O)[C@@H](O)[C@@H]4O)[C@]3(C[C@@H]1O)C)CCC1=CC(=O)C=C[C@@]12C
but in your dataset is : C[C@@H]1C[C@H]2[C@@H]3CCC4=CC(=O)C=C[C@]4(C)[C@@]3(F)[C@@H](O)C[C@]2(C)[C@@]1(O)C(=O)CO[C@H]1O[C@@H](C(=O)O)[C@H](O)[C@@H](O)[C@@H]1O
What's the difference? Are you sure the different SMILES in the original dataset and TDC dataset are the same mol. ?
Question 3:
How to know the baseline performance of your collected dataset?

Hi! Thanks for the great questions!
A1: please follow the data for the exact number, we have conducted additional filters since the paper.
A2: We conduct canonicalization using rdkit. These two SMILES are the same molecular structure just different SMILES strings.
A3: checkout the baseline result here: https://tdcommons.ai/benchmark/admet_group/01caco2/


Add FileIO support

This partially addresses #4. In addition to these commits and a small addition to FileIO, the GPX.jl package will need to be added to the General registry - see https://github.com/JuliaRegistries/General

Codecov Report

Merging #5 into master will decrease coverage by 0.96%.
The diff coverage is 0.00%.

@@            Coverage Diff             @@
##           master       #5      +/-   ##
==========================================
- Coverage   94.84%   93.87%   -0.97%
==========================================
  Files           1        1
  Lines          97       98       +1
==========================================
  Hits           92       92
- Misses          5        6       +1

Impacted Files
Coverage Δ

src/GPX.jl
93.87% <0.00%> (-0.97%)
:arrow_down:

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update 41eed14...380bb61. Read the comment docs.

Could you add some test to ensure FileIO integration works properly?

https://github.com/scls19fr/GPX.jl/blob/master/sample/write_gpx.jl shows how to write a GPX document.


Non-RNN layer after LSTM with variable sequence length

@soumith What's the best way to have a Linear (or some other non-RNN layer) following a LSTM layer at every timestep?
Example: I have a cudnn.LSTM layer has an output of shape 32 x 300 x 20 and I want to add a nn.Linear(20, 10) layer following that. I want that linear layer to process each of the 300 timesteps for each batch.
I tried using nn.View and nn.Reshape to change 32 x 300 x 20 to 9600 x 20 before feeding into the Linear layer, but I got errors about sequence length and contiguous tensors during backprop. Once I solved them, the network did not appear to learn during training. Is there a more simple way to do this?
In Keras, you'd use TimeDistributed
Thanks!

yea, there's a decorator similar to TimeDistributed in the rnn package https://github.com/Element-Research/rnn cc: @nicholas-leonard

@devrandom2 Yup. It is called Sequencer

Thanks for the help! I'm rebuilding an architecture using Torch because LSTMs with TensorFlow and Theano are quite slow. Especially ones with long sequence lengths. It also looks like neither of them are going to have cuDNN RNNs in the next few weeks
Would an architecture like this work?
It seems to be learning, but I want to make sure that I'm not missing anything major
 -- Model input is a 2D tensor with size (batchSize * seqLength) x inputDim
model = nn.Sequential()
model:add(nn.View(-1, seqLength, inputDim)) -- converts to 3D tensor with size batchSize x seqLength x inputDim
model:add(nn.Contiguous())
model:add(cudnn.LSTM(inputDim, 20, 1, true)) -- returns batchSize x seqLength x 20
model:add(nn.Contiguous())
model:add(nn.View(-1, 20)) -- reshapes so linear can handle it. 2D tensor with size (batchSize * seqLength) x 20
model:add(nn.Linear(20, 10))
model:add(cudnn.SoftMax())
 -- Model output is a 2D tensor with size (batchSize * seqLength) x 10

It also appears that some of these layers don't like it when I change batch sizes during training and validation. Would it just be easier to just switch to using the rnn package?
I can still use cuDNN layers with rnn, right?
Thanks again!

You should be able to use rnn and cudnn together. rnn prefers seqlen x batchsize instead of batchsize x seqlen (it is more efficient):
 -- Model input is a 2D tensor with size (batchSize * seqLength) x inputDim
input = input:view(batchsize, seqlen, inputsize):transpose(1,2)

model = nn.Sequential()
model:add(nn.Contiguous())
model:add(cudnn.LSTM(inputDim, 20, 1)) -- returns seqlen x batchsize x 20
model:add(nn.Contiguous())
model:add(nn.Sequencer(nn.Linear(20,10)))
model:add(nn.Sequencer(nn.SoftMax()))
 -- Model output is a 2D tensor with size seqlen x batchsize x 10

If you simply want a linear layer, it might be worth looking into using a nn.TemporalConvolution with unit kernel width. It seems to be slightly more memory efficient.


Fix build warnings.

@ejona86, @louiscryan, available for a quick code review of warning fixes?

@anthmgoogle, except for the removal of @Override, LGTM

Replied to open comment and added a couple of files missing from first PR: ServiceAccountJwtAccessCredentials and ServiceAccountJwtAccessCredentialsTest

@anthmgoogle LGTM

I don't remember, am I supposed to merge the PR, or will you?

Mergd. I was planning to do the merge once I had the LGTM. I think it is probably best for the submitter to do it if they have permission or explicitly request the merge from a writer so they have control over timing or ordering of their changes going in.

SGTM. That's what we do in grpc-java. The grpc repo doesn't though, since they use the merge commit itself as a "record of review" of sorts.


Add remaining doctests for high level functions

Checklist:

Does this pull request close an issue? We encourage you to open an issue first if this pull request (PR) is not a
minor change.

[ ] No

[ ] The change in this pull request is minor.

[x] Yes

Closes issue in separate repo

For the following questions, only check the boxes that are applicable.

[x] Ensure that the pull request text above the horizontal line is descriptive.

[x] Add/update relevant tests.

[x] Add/update relevant documents.

Do you have triage permission of this repository?

[ ] No

You are good.

[x] Yes

Does this pull request close an issue?

[ ] No, this pull request also acts as an issue by itself.

[ ] Assign yourself.
[ ] Label this pull request.
[ ] Put a milestone.
[ ] Put this pull request under "In Progress" or "Under Review" pipeline on ZenHub.
[ ] Put this pull request under the appropriate epic on ZenHub.
[ ] Put an estimate on ZenHub.
[ ] Add dependency relationship with other issues/pull requests on ZenHub.

[ ] Yes, this pull request addresses an issue and does not act as an issue.

[ ] Connect this pull request to the underlying issue on ZenHub.
[ ] DON'T:

DON'T assign yourself or anyone else.
DON'T label.
DON'T put a milestone.
DON'T put this pull request under any epic on ZenHub.
DON'T put an estimate on ZenHub.

[x] When the pull request is ready, request review.

I didn't include a test for init() since it doesn't return anything.

I didn't include a test for init() since it doesn't return anything.

Could you reopen this using a branch in this repo? The test isn't running

Could you reopen this using a branch in this repo? The test isn't running

Oh right I forgot

Oh right I forgot


Live-reload using Gulp

I added live-reload for development. So when you make a change on the editor your browser auto-reload the page. Check the README.md for more details.

@dorukeker Thank you for this contribution.
I would prefer to keep this template to a minimum and just use npm scripts to launch the server, browser and live-reload.
Not that I dislike gulp it's just it can be done without using another task runner.
package.json
{
  "name": "p5js-template",
  "version": "1.0.0-proto",
  "main": "sketch.js",
  "scripts": {
    "start": "lr-http-server -p 4000"
  },
  "devDependencies": {
    "lr-http-server": "0.1.1"
  }
}

extra line needed in index.html
...
<!-- live reload -->
<script src="//localhost:35729"></script>
...

The all we would have to do is run npm start


Client side prediction

Adds ability to specify client-side prediction in RenderManager config.

Continues to work with old config files, so going ahead and merging into master.  This will make it easier to combine with what will hopefully soon be a fix for transforming angular velocities.


Components Page Way Too Long

It seems like more than half of the most useful Blazor information is on this one web page. Fortunately there is an index to the page or it would be unusable, but it would still be hugely helpful to new Blazor developers to reorganize this page into smaller, more cohesive subtopics on separate pages.

Document Details
⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

ID: be4c4d0c-149c-bde1-c7fa-f082916390ca
Version Independent ID: 9d945996-ad02-bd4b-58ea-c465cc5cc74c
Content: Create and use ASP.NET Core Razor components
Content Source: aspnetcore/blazor/components.md
Product: aspnet-core
Technology: aspnetcore-blazor
GitHub Login: @guardrex
Microsoft Alias: riande

Thanks @jlinstrum ... It's under discussion with engineering. See https://github.com/aspnet/AspNetCore.Docs/issues/14353.


web-template Not Included in PyPi Release

This is related to cqparts-server issue 1.
The web-template directory doesn't seem to be included in the PyPi package, and so I get an error when trying to use cqparts-server after installing cqparts using pip. If you download the .tar.gz file directly from PyPi, you'll see it's not in there. This may be intentional, but I'm not sure how else to get the web renderer to work.

@jmwright you're absolutely right. this has been fixed in the master branch in #78
However, I forgot that this hasn't been released yet!
I'll release 0.2.1 tonight (changelog) (in about 6hrs)

Cool, thanks!

@jmwright I'm having trouble with the release.
I tested #78 before merging, but I can't get the build working and installing in a docker container.
 error: can't copy 'cqparts/display/web-template/model': doesn't exist or not a regular file

release will be delayed, I'll try to sort this out as soon as I can.

I possibly have an update for the web interface , perhaps it can wait until the deploy is stable.
@fragmuffin @jmwright should we also look at pushing cqparts display() back into CaqQuery ?

Fixed it!.. 0.2.1 is released... I'll announce in a separate "issue"
I was re-discovering ancient bugs because pip and setuptools weren't updated on my test environment (fixed in 5c5d0ab445e52932d494ee65f9616a30dedc5c43).
@zignig I'd be happy to release more often than I have been, because cqparts is still in alpha, I'm not worried about pushing releases out too quickly.
I've just fixed up my deployment environment a little, so that will make it a bit easier... also, when #79 is closed, deployment should only take me about 15min instead of a few hours.

@zignig the cqparts.display will always be there because with cqparts as a wrapper to cadquery, there will always be additional information relevant to display that cadquery shouldn't have to know about; to remain compartmentalised.
When the cadquery standalone GUI makes its debut, we'll figure out what's passed straight through to cadquery, and what needs to be send directly to the GUI as metadata.

0.2.1 is released.

Thanks @fragmuffin . I'll get it updated in the FreeCAD module too.

OK, #79 is on it's way, good job.
I would like to get the web interface bolted down (hehe) for the next release then. Use the same base for the pop up window and the cqparts-server interface.  Simple and clean, no iframes, just an html rectangle.

@jmwright hold on!, don't congratulate me too quickly (I probably shouldn't do this while I'm so tired).
I've done a terrible job with the licensing... everything still says it's a GPLv3 license.
I'm updating that now, but I know from experience that I can't "undo" the v0.2.1 release I've just done.
Which means a v0.2.2..... but that's no big deal.

@jmwright @zignig on second thought... it's silly to do a second release that's functionally identical just to fix the metadata.
v0.2.1 is apache licensed, the metadata will be fixed in the next release, which will probably be soon.


check if log show function executed

Perform verification function was actually triggered/executed
Leverage Fixture to initialize storage containers and queues
Move Cosmos initialization to separate fixture, and not use static reference to DocumentClient
Reduce setup/teardown code for storage/queue tests.
Issue describing the changes in this PR
resolves #1236
Pull request checklist

[x] My changes do not require documentation changes

[ ] Otherwise: Documentation issue linked to PR

[x] My changes should not be added to the release notes for the next release

[ ] Otherwise: I've added my notes to release_notes.md

[x] My changes do not need to be backported to a previous version

[ ] Otherwise: Backport tracked by issue/PR #issue_or_pr

[x] I have added all required tests (Unit tests, E2E tests)

Hi @fabiocav,  I have rebased this PR.
this adds a check an assertions in the test projects to validate trigger was executed.


Gravity Forms Professional: Initial Commit (Certified Connector)

  Gravity Forms Professional
The Professional/Enterprise version of the Gravity Forms connector
This connector uses a new API that has been completely re-built for Power Automate. This version focuses on increased security and bi-directional workflows for one of the world's most popular form platforms. This uses a fully separate API from the standard Gravity Forms connector and is intended for power users and enterprises.
Benefits

Direct communication to end user systems: Gravity Forms Professional connects directly to your WordPress system without ever passing form metadata or form submissions through any 3rd party servers. Your data is directly connected to Power Automate.
Increased Security: The WordPress plugin generates a secret key that is necessary to use the API. The secret key increases security by introducing a secret known only to your Power Automate connection and WordPress.
Read/Write Support: With Gravity Forms Professional, you can read/edit/delete previously submitted form entries. You can also validate and create new form entries.
Note Support: Create or fetch notes from Gravity Forms Entries.
Attachment management: Fetch Attachment content, or delete attachments after processing.
Support for GravityView: GravityView is a set of plugins that allow displaying submitted form data to site visitors. This plugin is fully supported.
Update dropdown options: You can update choices for all fields that support it using the new API.
Dynamic client side control: The connector uses dynamic schemas wherever possible, allowing the possibility for modifications on the WordPress side that extend the connector in new ways.

Comments
We are the author of the Gravity Forms by reenhanced connector currently published. This connector is a more advanced version of that connector, but we have many users of the standard connector. We can commit to supporting both connectors as they use separate APIs.

[x] I attest that the connector doesn't exist on the Power Platform today. I've verified by checking the pull requests in GitHub and by searching for the connector on the platform or in the documentation.
[x] I attest that the connector works and I verified by deploying and testing all the operations.
[x] I attest that I have added detailed descriptions for all operations and parameters in the swagger file.
[x] I attest that I have added response schemas to my actions, unless the response schema is dynamic.
[x] I validated the swagger file, apiDefinition.swagger.json, by running paconn validate command.
[x] If this is a certified connector, I confirm that apiProperties.json has a valid brand color and doesn't use an invalid brand color, #007ee5 or #ffffff.

@vmanoharas This connector is now ready for review.

Hello @nhance,
I haven't seen your registration of this connector, as per the Step 1 in this link.  If you would like to publish your connector as Certified connector could you please follow the process?
https://learn.microsoft.com/en-us/connectors/custom-connectors/certification-submission#step-1-register-your-connector

Hello @nhance,
I haven't seen your registration of this connector, as per the Step 1 in this link. If you would like to publish your connector as Certified connector could you please follow the process?

Hi @vmanoharas,
My apologies! We have submitted the form and are ready for certification. Thank you


Include pagination for latest news

...eventually

I don't love pagination. Why would we have it? What's the benefit? Silly Q I know.
Joseph McArthur
Assistant Director: Right to Research Coalition ( http://righttoresearch.org )
Director / Founder: Open Access Button ( http://openaccessbutton.org )
Twitter: @Mcarthur_Joe ( https://twitter.com/Mcarthur_Joe )
Skype: joseph_mcarthur
On Wed, Jun 17, 2020 at 5:29 PM, Sophy <<EMAIL_ADDRESS>> wrote:

...eventually
—
You are receiving this because you are subscribed to this thread.
Reply to this email directly, view it on GitHub (
https://github.com/sparcopen/infrastructure/issues/70 ) , or unsubscribe (
https://github.com/notifications/unsubscribe-auth/ABFZMZ542MAMU3TZUFWGLEDRXDVO5ANCNFSM4OAX54YA
).

Not silly, but the latest post page is already quite long and infinite scrolling is terrible for accessibility (on top of not letting people see the page footer).

got you, I had no idea about the accessibility thing. Can we make the pages big? I don't want to need to page to see all report content, for instance?
Joseph McArthur
Assistant Director: Right to Research Coalition ( http://righttoresearch.org )
Director / Founder: Open Access Button ( http://openaccessbutton.org )
Twitter: @Mcarthur_Joe ( https://twitter.com/Mcarthur_Joe )
Skype: joseph_mcarthur
On Wed, Jun 17, 2020 at 7:35 PM, Sophy <<EMAIL_ADDRESS>> wrote:

Not silly, but the latest post page is already quite long and infinite
scrolling is terrible for accessibility (on top of not letting people see
the page footer).
—
You are receiving this because you commented.
Reply to this email directly, view it on GitHub (
https://github.com/sparcopen/infrastructure/issues/70#issuecomment-645548628
) , or unsubscribe (
https://github.com/notifications/unsubscribe-auth/ABFZMZZIDIPAIYG7GK25FXTRXEEHRANCNFSM4OAX54YA
).


系統檢查本調拼音

#9

Coverage decreased (-15.7%) to 28.502% when pulling 0b8c611747720daa2e87d7d479818899f8169ede on 系統檢查本調拼音 into 5b0a69667ce80a101b9528bdf411d6d456c88e56 on master.

Coverage decreased (-15.7%) to 28.502% when pulling 0b8c611747720daa2e87d7d479818899f8169ede on 系統檢查本調拼音 into 5b0a69667ce80a101b9528bdf411d6d456c88e56 on master.

Coverage decreased (-15.7%) to 28.502% when pulling fb7f3d6ba0f56d42131a7957a782a0fa01e38bc1 on 系統檢查本調拼音 into 5b0a69667ce80a101b9528bdf411d6d456c88e56 on master.

Coverage increased (+6.4%) to 50.555% when pulling 1bfaa0f1f314b5a0b41dc1797c8dbee7560b857d on 系統檢查本調拼音 into 5b0a69667ce80a101b9528bdf411d6d456c88e56 on master.

Coverage increased (+6.4%) to 50.555% when pulling 1bfaa0f1f314b5a0b41dc1797c8dbee7560b857d on 系統檢查本調拼音 into 5b0a69667ce80a101b9528bdf411d6d456c88e56 on master.

Coverage increased (+2.7%) to 46.849% when pulling 881a737ed7229f815a2b6602c5161a2abb77ce66 on 系統檢查本調拼音 into 5b0a69667ce80a101b9528bdf411d6d456c88e56 on master.

Coverage increased (+2.4%) to 46.599% when pulling 58fadf9fa32bf9e6eabf20663a3d916af8903bc1 on 系統檢查本調拼音 into 5b0a69667ce80a101b9528bdf411d6d456c88e56 on master.

migrations了，null=True應該就會當提掉矣
語料 = models.OneToOneField(
        '語料表', default=None, null=True, related_name='對齊狀態', on_delete=models.CASCADE)

Coverage increased (+2.7%) to 46.823% when pulling 7d3bdda4a852af49f9a688234c837e49b2924b0b on 系統檢查本調拼音 into 5b0a69667ce80a101b9528bdf411d6d456c88e56 on master.

Coverage increased (+2.7%) to 46.823% when pulling d9e11c90c32c066259cd3b102805b01c712d07c0 on 系統檢查本調拼音 into 5b0a69667ce80a101b9528bdf411d6d456c88e56 on master.

Coverage increased (+2.8%) to 46.927% when pulling b175795dca18c42654725584e71401a136696cba on 系統檢查本調拼音 into 5b0a69667ce80a101b9528bdf411d6d456c88e56 on master.


Support automatic/short-lived token generation for AWS Athena

Spent some time thinking about the best way to pass short-lived AWS credentials to Cosmos -- including the aws_session_token into the profile will have limited utility for anyone using an Airflow connection, since the token will expire each hour (unless the connection is being dynamically refreshed or something, which sounds pretty unwieldy).
These are the options that I've tried/considered so far:
Option 1: Create a custom profile via the MWAA start-up script, and pass the profile name to Cosmos
e.g.
aws configure role_arn = arn:aws:iam::xxxx:role/cosmos_test --profile cosmos
aws configure credential_source = EcsContainer

The execution role is then able to assume the role, where running something like
aws sts get-caller-identity --profile cosmos

returns
{
    "UserId": "AROA2SDLV6CB4Y123456:botocore-session-12345",
    "Account": "123456",
    "Arn": "arn:aws:sts::123456:assumed-role/cosmos_test/botocore-session-12345"
}

It's then possible to pass this to Cosmos, which then passes it to dbt-athena via the aws_profile_name argument. However, I couldn't get this approach to work, since for some reason boto3 can't extract the credentials from the ECS/EC2 metadata endpoint.
{{config.py:168}} INFO - Creating temporary profiles.yml at /tmp/tmpesa3d1yx/profiles.yml with the following contents:
athena:
    outputs:
        stg:
            aws_profile_name: cosmos
            database: awsdatacatalog
            region_name: us-east-1
            s3_data_dir: ...
            s3_staging_dir: ...
            schema: ...
            type: athena
            work_group: ...
    target: stg

{{subprocess.py:73}} INFO - Running command: ['/usr/local/airflow/dbt_venv/bin/dbt', 'run', '--vars <redacted>', '--profiles-dir', '/tmp/tmpesa3d1yx', '--profile', 'athena', '--target', 'stg']
{{subprocess.py:84}} INFO - Command output:
{{subprocess.py:94}} INFO - [0m08:36:27  Running with dbt=1.6.7
{{subprocess.py:94}} INFO - [0m08:36:27  Registered adapter: athena=1.6.1
...
{{subprocess.py:94}} INFO - [0m08:36:35  Athena adapter: Got an error when attempting to open a Athena connection due to
Error when retrieving credentials from EcsContainer:  No credentials found in credential_source referenced in profile cosmos

IMO this approach isn't that good, since it involves creating a config file instead of using a role right away.
Option 2: Make a boto3 STS assume call and inject the credentials during Cosmos profile generation
This is the (slightly bootleg) approach we ended up taking, since it allows a fresh set of credentials to be generated for each run.
I think as a potential feature, it would be nice if Cosmos could take in an Airflow connection with a role_arn, and handle the generation of short term credentials under the hood (similar to the AWS Athena Operator + AWS Base Hook, where you pass in an Airflow connection with a role_arn argument)
import boto3
from airflow.utils.log.secrets_masker import mask_secret
from cosmos.profiles import BaseProfileMapping
from constants import DBT_ATHENA_ROLE_ARN

class AthenaAccessKeyProfileMapping(BaseProfileMapping):
    """
    Maps Airflow Athena connections using access key +
    secret access key authentication to dbt profiles.
    """

    airflow_connection_type: str = "aws"
    dbt_profile_type: str = "athena"

    required_fields = [
        "database",
        "schema",
        "s3_staging_dir",
        "region_name",
    ]

    airflow_param_mapping = {
        "database": "extra.database",
        "schema": "extra.schema",
        "s3_staging_dir": "extra.s3_staging_dir",
        "s3_data_dir": "extra.s3_data_dir",
        "region_name": "extra.region_name",
        "work_group": "extra.work_group",
    }

    @property
    def profile(self) -> dict[str, Any | None]:
        """
        Creates a dbt profile for Athena.

        To avoid exposing the credentials in plaintext, the secret access key
        and session token are masked using Airflow's default `sensitive_var_conn_names`
        core configuration.
        """
        credentials = self.get_temp_credentials()
        mask_secret(credentials)
        profile = {
            **self.mapped_params,
            **self.profile_args,
            "aws_access_key_id": credentials["AccessKeyId"],
            "aws_secret_access_key": credentials["SecretAccessKey"],
            "aws_session_token": credentials["SessionToken"],
        }
        return self.filter_null(profile)

    @staticmethod
    def get_temp_credentials() -> dict[str, str]:
        """Helper function to retrieve temporary short lived credentials"""
        sts_client = boto3.client("sts")
        assumed_role = sts_client.assume_role(
            RoleArn=DBT_ATHENA_ROLE_ARN, RoleSessionName="DbtAthenaRoleSession"
        )
        return assumed_role["Credentials"]

(EDIT: currently running into memory issues with this approach, so might not be feasible
My gut feeling is that the memory issues are caused by the repeated creation of the boto3 client across multiple threads, since it seems that boto3 is not very memory efficient (https://github.com/boto/boto3/issues/1670, https://github.com/boto/boto3/issues/3541). I think using the AwsBaseHook class instead of boto3 might resolve this)
Option 3: Mutate DbtLocalOperator class so that AWS credentials are generated before every run
e.g. export $(aws configure export-credentials --profile cosmos --format=env) && dbt run ...
I think this option is quite complex and doesn't gel that well with the rest of Cosmos, since it creates floating env vars that aren't being properly managed
(IIRC there's a issue/PR related to this that talks about adding custom commands to dbt run)

Sure, feel free to raise the PR and I'll take a look :)

@benjamin-awd I cant seem to Push to a branch

Looking forward to seeing your PR, @octiva !

Hey @tatiana & @benjamin-awd I cant seem to push via https or ssh... Do I need to be given some permissions?

Hey @octiva, you'll likely need to fork the repository into your personal account and push changes there. Then it's super easy to open the PR from your fork back into the main repository here!

Hey @benjamin-awd, would you mind providing me some feedback on the PR: https://github.com/astronomer/astronomer-cosmos/pull/758
Would be much appreciated!


Make spinner pretty

The current Loading... text on the website doesn't look good.
This makes it pretty, like this one, which is copied from the bottom right spinner here.

Either this or delete the Loading... text and just show a white page. That would be less jarring :)

Ha! Great. :+1:


feat: Publish images to Quay.io

Signed-off-by: Simon Behar<EMAIL_ADDRESS>Checklist:

[ ] My organization is added to USERS.md.

Do we also want to update the manifests?

Do we also want to update the manifests?

Do we also want to update the manifests?

Yes, I will do this in a follow up PR

Do we also want to update the manifests?

Yes, I will do this in a follow up PR


merge package from arlac77/npm-package-template

.travis.yml

chore(travis): merge from template .travis.yml

Codecov Report

Merging #572 into master will not change coverage.
The diff coverage is n/a.

@@          Coverage Diff           @@
##           master    #572   +/-   ##
======================================
  Coverage    94.4%   94.4%
======================================
  Files           7       7
  Lines        1073    1073
======================================
  Hits         1013    1013
  Misses         60      60

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update a2ce453...678f890. Read the comment docs.

Coverage remained the same at 93.103% when pulling 678f8906e87143e832532f8f4daee91fa4f5006f on template-sync-1 into a2ce453ed994d34048d2a4a1c529ef26948fa987 on master.


Create an API key with the action documents.*

Describe the bug
I would like to create a new API key with restricted permissions on a given index. The API returns an error when I specify the action documents.*. According to the documentation of v0.25,

The * character can also be used as a wildcard to get all permissions for a route, e.g. documents.* to authorize access to all document-related endpoints.

Is it a bug? Is the documentation not up to date?
a simple workaround is to list all actions: ["documents.add", "documents.get", "documents.delete"]
To Reproduce
1.Boot a meilisearch instance
./meilisearch --master-key key

Create a new API key

curl \
  -X POST 'http://localhost:7700/keys' \
  -H 'Authorization: Bearer key' \
  -H 'Content-Type: application/json' \
  --data-binary '{
    "description": "Add documents: Products API key",
    "actions": [
      "documents.*"
    ],
    "indexes": [
    "products"
    ],
    "expiresAt": null
  }'

I got the following error:
{
  "message":"actions field value `[\"documents.*\"]` is invalid. It should be an array of string representing action names.",
  "code":"invalid_api_key_actions",
  "type":"invalid_request",
  "link":"https://docs.meilisearch.com/errors#invalid_api_key_actions"
}

Hi @Mcdostone 👋
Thanks for this issue, this is a helper we decided to add in a next iteration and I forgot to remove it from the specification file used by the documentation team. So this is entirely my fault. Apologize to everyone on that.
@meilisearch/docs-team I've prepared a pull request to remove that specific lines from the documentation until we add it.
@ManyTheFish Is it something we can add for v0.26.0?

Hello @Mcdostone
Thanks for this report, this is indeed an issue on the docs side currently, this should be fixed with the @gmourier's PR.
I've discussed with @gmourier, this is an issue for the community as "good first issue".
The user expectations are described in this spec.

Hello!
For the one who would like to implement this feature, all the changes to make should be in the meilisearch-auth module. I can give more explanation about how to implement it if someone open a PR.

@ManyTheFish , If this issue is still open, I can take a look. There are no Pull request for this. Please find the below modifications and let me know if some of these makes sense. I am new to RUST.
Can you please confirm at least some of this modifications are right?
https://github.com/meilisearch/MeiliSearch/blob/main/meilisearch-auth/src/action.rs
pub enum Action {
#[serde(rename = "documents.*")]
DocumentsAdd = actions::DOCUMENTS_ADD,
DocumentsGet = actions::DOCUMENTS_GET,
DocumentsDelete = actions::DOCUMENTS_DELETE,
}
impl Action {
RESTRICTED_ACCESS => Some(Self::DocumentsAdd),Some(Self::DocumentsGet),Some(Self::DocumentsDelete)
}
pub fn repr(&self) -> u8 { not able to sort this out}
pub mod actions {
pub const RESTRICTED_ACCESS: u8 = 16;
}

Hello @karachikorai, welcome!
Testing
First of all, you should modify the tests, below an hashmap that contains meilisearch routes and the corresponding action to have access to them:
https://github.com/meilisearch/meilisearch/blob/main/meilisearch-http/tests/auth/authorization.rs#L10-L49
This hashmap is used in our test to make sure that implemented actions work and and don't give access to routes that shouldn't be accessed.
Let's modify theses lines (L13-L16) into:
-            ("POST",    "/indexes/products/documents") =>                      hashset!{"documents.add", "*"},
-            ("GET",     "/indexes/products/documents") =>                      hashset!{"documents.get", "*"},
-            ("GET",     "/indexes/products/documents/0") =>                    hashset!{"documents.get", "*"},
-            ("DELETE",  "/indexes/products/documents/0") =>                    hashset!{"documents.delete", "*"},
+            ("POST",    "/indexes/products/documents") =>                      hashset!{"documents.add", "documents.*", "*"},
+            ("GET",     "/indexes/products/documents") =>                      hashset!{"documents.get", "documents.*", "*"},
+            ("GET",     "/indexes/products/documents/0") =>                    hashset!{"documents.get", "documents.*", "*"},
+            ("DELETE",  "/indexes/products/documents/0") =>                    hashset!{"documents.delete", "documents.*", "*"},

And make sure that some of the tests (cargo test auth) are now failing.

Thanks @ManyTheFish

Hi all, I'm somewhat familiar with programming and I am interested in helping. This would be my first time ever doing so.
I am however a little afraid because I am not exactly sure how to tackle the issue. If anyone can provide hints or anything that'd be really nice. If the issue is fixed I'd like to learn more about how the issue was resolved and how it was gone about. Thank you!

Hello @3man75
The expected implementation and the expected tests are described by Many in this comment above. Is it enough for you? If not, where do you need deeper explanations? 😊
The expected result in terms of user-experience is described in this specification part

Hi!
I have made an attempt at this in #2525.
I am super new to Rust; any thoughts / comments regarding this would be welcome! It seems that the PR is failing a Rust formatting check; would you be able to point me to where the issue is?
Thanks!

Hello @janithpet
Thanks a lot for contributing!!! 😄
Regarding your formatting issue, the CI failed because the following command is failing (cf line in the CI manifest)
cargo fmt --all -- --check

If I'm correct, if you want to make cargo fmt fix the issue, you just have to remove the --check option, run the command and commit the changes:
cargo fmt --all

Someone in the core team will review your PR as soon as possible!
For any other questions, feel free to ask directly on the PR
Thanks again for the time you spent on it! ❤

Thanks @curquiza!
The tip about cargo fmt fixed the issue! The tests now run fine :)

@meilisearch/docs-team

Hello everyone watching this issue!
We have just released v0.29.0rc1, which is a release candidate of v0.29.0 🔥
It means you can test the just-introduced * helper when using the actions of tenant tokens! Binaries are attached to the release, or you can you the docker image:
docker run -it --rm \
    -p 7700:7700 \
    getmeili/meilisearch:v0.29.0rc1

Let us know about any bugs or feedback! 😄 It would be really helpful.
FYI, the official v0.29.0 release will be available on 3rd October.


feat: added lazy service function, docs and tests

closes #44

I think you should be using nx g local-plugin:entry-point --skipModule to generate the library entry point ;)
Good function btw!

Putting this here for more context: https://twitter.com/Jean__Meche/status/1708199444636688422
Maybe we merge the impl or go with Mathieu's one ☝


Is auth working as expected (hooks.server.ts)?

Hey,
first of all, awesome project and a good starting point for any new sveltekit developer!
Right now I'm trying to wrap my head around auth in sveltekit so this repo is a great help for me. While trying to understand your code I came across the hooks.server.ts file, where you check if the called url starts with "/auth".
if (event.request.url.startsWith('/auth')) {
    return resolve(event);
}

The problem is, that event.request.url returns - at least on localhost - the complete url (e.g. 'http://localhost:5173/auth/sign-in'). I think its clear that this condition will never be true, so the auth check will always run. I guess what you want is to use event.url.pathname which return only the path (e.g. '/auth/sign-in'). In this case, the condition is true when a /auth route is called.
But inside of sign-in/+page.server.ts the load function actually tries to access event.locals.auth which is not set if the condition in hooks.server.ts works as I think expected. So we get a internal server error.
So my question is, is this a bug? Or what is the idea behind the if block inside hooks.server.ts?

You are right.  It isn't really needed and causes a bug in that page.  Thanks for pointing this out.  This is some leftover code I forgot to remove when I was going to handle the hook in a different way.  I just updated the code.  Anyway thanks so much for pointing this out!


Issue #78 Fixed thread safety for multiproject builds with --parallel

Make use of the double-check pattern to initialize the recommendation HashMap.

Coverage increased (+0.2%) to 87.657% when pulling 76f532416829027a14561018fcc774acf0fb5dda on cbue:master into 708b464d6a0755be667508f843aeebaecf78b5e6 on nebula-plugins:master.

Coverage increased (+0.5%) to 88.032% when pulling 2ef2639f7833c8a8efeed276a00e52493e7ac40a on cbue:master into 708b464d6a0755be667508f843aeebaecf78b5e6 on nebula-plugins:master.


Integrate MistralAI Library

Description
This pull request introduces the first function integration with the Mistral AI library, specifically focusing on the MistralAiChatModel and MistralAiAssistant.
Purpose
The primary goal of this integration is to lay the foundational infrastructure for utilizing Mistral AI's services.

I use the code in the PR to integrate the feature. Thanks !


Changes as per interface dir structure

Add a new directory core, to keep the core logics of the appassistant.bible/app/core
├── __ init __.py
├── auth
│   └── __ init __.py
├── embedding
│   ├── __ init __.py # contains interface definitions
│   └── openai.py
├── llm_framework
│   ├── __ init __.py # contains interface definitions
│   ├── langchain.py
│   └── vanilla.py
├── pipeline
│   ├── __ init __.py # contains interface definitions
│   ├── langchain_stack.py
│   └── vanilla_stack.py
└── vectordb
    ├── __ init __.py # contains interface definitions
    └── chroma.py

Move all endpoint definitions out of main.py. Keep them in assistant.bible/app/routers.py

@kavitharaju, thanks for putting this together. I think it makes sense. I might only change the llm_framework/langchain.py to something like llm_framework/openai_langchain.py and the other one to llm_framework/openai_vanilla.py.

change the llm_framework/langchain.py to something like llm_framework/openai_langchain.py and the other one to llm_framework/openai_vanilla.py.

This change made in #9

@joelthe1 @kavitharaju I think we can go ahead and merge this. I don't see the merge button, so I guess I don't have permission to do it...

@woodwardmw This PR is already merged. The new one is here #9


code release

Thank you very much for your extraordinary work. Is there a release date for the code?

Thank you for your attention. We are organizing and clearing our code. We expect to release the entire system framework by early July at the latest. We have currently made some core components in CG-SLAM available (https://github.com/hjr37/diff-gaussian-rasterization), hoping they will be helpful to you.

thank you very much！


Country Bouvet Island is not a valid ISO Country

Bouvet Island does not exist and have no ISO specification?
Its not part of the Symfony:Intl country list.

Related to https://github.com/sulu-io/sulu/issues/758


Run the import_procedure.sql when the Oracle connector starts up

So that the strored procedure is created if non-existent, or refreshed (if we made some modification in its code)

Pull request: https://github.com/djavorszky/ddn/pull/167

Still, if we modify something in any sql script file from under sql/oracle, we need to copy it manually. I was thinking that perhaps we could automate that as well. E.g. the connector, when it starts, checks its local sql scripts and the one in the remote github repo (branch master, I guess), and compares them. If it sees that some of them are newer in the repo, it informs the user and prompts him if he wants the version from the github to be copied over and override the current script(s). But that should be the subject of a different ticket.

I am closing this, As it was implemented and modified after review. The pull problem with the con.conf file, I guess can be handled on your side by adding to it that comment:
For Oracle, it is recommended that the db-username is the system user
Also, the below grants are needed from SYS in order for the Oracle
import stored procedure to compile successfully:

Thanks Sorin! Added the comments to the con.conf: c3118e67e5ed6d61bee29431fb808c6e1f34fcfa


Geoff_and_jeffrey/ad_hoc/set_up_for_public_release

What does this do on a high level?
Updates readme and removes private organization.
How was this change made?
With a keyboard.
Why is this change necessary?
Because we want to share the love.
How will this be verified?

[ ] The PR includes new tests
[X] Current test suite covers functionality
[ ] This has been tested locally
[ ] This has been tested in dev

Any additional information or special handling required on this PR?
Yay!
motivational imagery

Pull Request Test Coverage Report for Build eb8b06ef21321f389589c6147d5ca6073c3fa1a9-PR-19

0 of 0   changed or added relevant lines in 0 files are covered.
No unchanged relevant lines lost coverage.
Overall coverage remained the same at 100.0%

Totals

Change from base Build abb0f78ea8b28b2e6bbb7912d7d5e618739f4eb9:
0.0%

Covered Lines:
27

Relevant Lines:
27

💛  - Coveralls


Newest drop: 1 hour earlier?

For some reason the newest drop is showing to start in 10 mins:
Its supposed to start in 1 hour and 10 mins
https://kodadot.xyz/ahp/drops/hdd

solved itself


Will Netty 5.0 be released?

Hello,
Will Netty 5.0 be released? If yes, what time is it expected to release? Or will it be developed later?
Thank you very much!

5.0 as it existed a few years ago has been abandoned #4466.

Just use 4.1.x for now


"Shutting the door" to root and subsequent playbook runs

In a new Digital Ocean instance, root access with a public key is set up.
So, my playbook has:
remote_user: root

However, with ansible-user, I set up an 'app' user, then ansible-sshd here closes the door to root access.
That means subsequent runs of my playbook can't get in unless I edit the playbook to:
remote_user: app
become: true

That's not ideal.  Essentially, the remote system has a state that fact-gathering can't really test or do anything about.
My options:

Two playbooks.  One sets up the new user 'app' (as root), then shuts the door on root.  The other playbook uses the new user and 'becomes'.  Person needs to know to run first playbook once only.  Human-based state knowledge = boo hiss

Manually creating user 'app' and always using 'app' as the remote_user.  Manual = boo hiss

Something better??

Thanks for the report.
I think option 1 is out of the question because like you said, having to run 2 playbooks will induce snake noises.
In my playbooks I typically run my user role before ssh, this way that user ends up being configured to connect via SSH before the lockout happens. Then at the playbook level I set become: True and things work.
I'm going to leave this open because I've encountered lock outs before but it's something I was never able to reproduce 100% of the time.

I had a third icky idea - each IP is part of two host groups.  Maybe "brand_new_droplets" and "droplets".    Then I'm either running a playbook against an inventory of brand new machines, or repeatedly against some that have already had their initial setup done.
Then I'm using host_vars or something to set the remote_user.

In my playbooks I typically run my user role before ssh, this way that user ends up being configured to
connect via SSH before the lockout happens. Then at the playbook level I set become: True

I don't see how that works... with become: True and no remote_user ansible tries to ssh without a<EMAIL_ADDRESS>And with that little experiment, I just proved fail2ban is doing its job!

I've tried a few more things (two plays in the playbook) and nothing works right - no matter what, the play that relies on being able to get in as 'root' won't work once the door is shut.
One of ansible's cool features is its "idempotency", but with this I have to edit the playbook depending on whether or not its been run before.
It's almost like the fact gathering needs to check if the root user is allowed, and if not, set user/become options appropriately.  I mean, it is state, after all, that's changed on the machine.

After thinking about this for a while and consulting with Ansible master @drybjed I don't think there's a reasonable way around it without introducing dynamic inventories.
I think you're stuck setting ssh_user in your inventory file after the first run.

Thanks for thinking about it some more and for the new ideas.  It's got to be a common problem, right?
The only other way I've thought of is moving hosts from a group called "Brand new" to whatever they were going to be called from the first run onwards.

Yeah it's definitely common. Your idea would work too. Sounds like you should test both solutions and see which one works out best out in the wild.

Here's what I settled on, though I'm suspecting the 'right way is adding some sort of complicated custom fact that discovers if root has been disabled.
So I have a first_time.yml playbook and a app_server.yml playbook.  It's up to me to remember run the first_time once.
Done.
Seems non-ideal, and a common problem, but at some point its time to the reign in the OCD yak shaving and just get on with it :)
Thanks for the dialog.

One more thing.  You didn't answer how this could work on subsequent runs:

In my playbooks I typically run my user role before ssh, this way that user ends up being configured to
connect via SSH before the lockout happens. Then at the playbook level I set become: True and things
work. No need to set remote_user.

For the user role to run the first time, it would need ssh_user = root, but next time, ssh_user = user.
With no remote_user set, ansible tries to ssh as root by default.

Right, before the second run you would need to edit your inventory. Something like:
[foo]
<IP_ADDRESS> ssh_user="deploy"

Without the ssh_user, like you said it would use "root", but onwards from here it would use "deploy".

Hi Nick,
Here's the best I came up with... for future Googlers, and for me when I forget I even asked this in 6 months and come across my own thread here with a Google search.

Set a new variable 'initial_user' in group_vars, on a per-group (per-provider) basis, eg.

[aws]
initial_user: ubuntu

[digital-ocean]
initial_user: root

Set become: true and become_user: root in all plays in all playbooks.  This is the cool thing - if the ansible_ssh_user is root, this has no effect.  That greatly simplifies things.

Use ansible-sshd as per normal.

A play that sets up a standard non-root user looks like this:
- hosts: all

  remote_user: '{{ initial_user }}'
  become: true
  become_user: root

  roles:
    - ansible-user
    - ansible-sshd

Other plays then do:
- hosts: all

  remote_user: my_standard_username
  become: true
  become_user: root

So now no editing of inventory files, group_vars, or playbooks is req'd after the first run.


improved '__ of a number' block in operators

Fix #38

Thanks for the PR. I have some questions, though:

Is the display of the floats (fixed 2 decimals for floats and no decimals if the value is .0) in line with what Scratch does?
Is the display of Infinity and -Infinity in line with what Scratch does?
text = str(round(text, 2) if text % 1 else int(text)) -> This is not intuitive as it relies on the truthiness of numbers other than 0. Just add text % 1 > 0 for clarity.

Thanks for the PR. I have some questions, though:

Is the display of the floats (fixed 2 decimals for floats and no decimals if the value is .0) in line with what Scratch does?
Is the display of Infinity and -Infinity in line with what Scratch does?
text = str(round(text, 2) if text % 1 else int(text)) -> This is not intuitive as it relies on the truthiness of numbers other than 0. Just add text % 1 > 0 for clarity.

Yes, I tried to make all outputs are consistent Scratch.

This is not intuitive as it relies on the truthiness of numbers other than 0. Just add text % 1 > 0 for clarity.

Still don't understand what does this mean, but I already changed it.


getTextComparison example doesn't actually do anything

Copy and pasted the code directly into a new Excel sheet, saved and ran script. Did nothing to the sheet, including the cells with text in Column A starting with "Excel". Epic fail.

Document Details
⚠ Do not edit this section. It is required for learn.microsoft.com ➟ GitHub issue linking.

ID: 022a5f24-44c2-2bb5-ed60-9afd2eb0a3ff
Version Independent ID: d893a6e7-33a8-c703-bd9d-ea539699fa15
Content: ExcelScript.ConditionalFormat interface - Office Scripts
Content Source: docs/docs-ref-autogen/excel/excelscript/excelscript.conditionalformat.yml
Service: excel
Sub-service: scripts
GitHub Login: @o365devx
Microsoft Alias: o365devx

Apologies. Had the "function main(workbook: ExcelScript.Workbook)" section of the code inserted twice. Once from the copy and paste, and secondly because it was already there when clicking "New Script".


Improve speed by default buffer size + added parameter for buffer size.

This time without stack overflow.
(I'm wondering why compiler didn't warn about that.)

Thanks for interesting. I don't create buffer because I think that it's easier to someone to pre process samples by adding some own code. But now I think it was a bad idea because it works too slowly.

You are right about using malloc, I changed the code to use malloc instead.


Create multi-model solute transport example

Goal of this example is:

Test for ourselves if multi-model transport models work
Showing to our users how to do this

Easiest probably is:

Convert this model to iMOD Python https://modflow6-examples.readthedocs.io/en/latest/_notebooks/ex-gwt-mt3dms-p03.html
Partition it to 4 partitions
Compute

Things to add to example:

Explanation why separate GWTGWT files for each model, despite same cells connected: settings can be different for each species. For example, advection schemes.

it was merged to the feature branch.


Sugar: support percentages

Support using a % sign next to numbers such as 6% or 1.5% which would simply interpret the number a number[n+2]. From a parsing standpoint, we need to require the % to be right next to the number to avoid confusion with 6 % 4 for instance.

We should also consider having a percentage type
type percentage[n] number[n] constrained_by {
  return 0 <= percentage && percentage <= 1
}

Implemented in #75!


move macOS image to 8.3

A new inspection was created.

The inspection completed: No new issues

A new inspection was created.

The inspection completed: No new issues

Codecov Report

Merging #262 into develop will not change coverage.
The diff coverage is n/a.

@@           Coverage Diff            @@
##           develop     #262   +/-   ##
========================================
  Coverage    88.41%   88.41%
========================================
  Files           27       27
  Lines         1139     1139
========================================
  Hits          1007     1007
  Misses         132      132

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update 459d34c...7acf5f1. Read the comment docs.

看起来 XCode 8.3 的 CI 机器数量比 8.2 少很多？

不是吧，8.2 看文档来说是直接当成 8.3 的


Runtime error with latest version

I've tried deploying the latest version to an existing Keycloak 4.8.3.final installation, as well as running the docker command docker run -p 8080:8080 -e KEYCLOAK_USER=admin -e KEYCLOAK_PASSWORD=admin johnjcool/keycloak-cas. In both cases, a notfound error is thrown upon trying to add a new CAS IDP in the Identity Providers page.
I know that prior to September, the repo was working in the above scenarios. I am in the process of identifying a possible bad commit among the recent changes.

User error--in the case of docker, I missed the logout step after setting the admin keycloak-extended theme. This original issue is evidently isolated to my environment.


Fixing doc to remove github app requirement

Proposed changes

Unreleased product version (optional)

Related issues (optional)

Awesome, thanks @interurban


[FEATURE]: Trash / Blocklist of JWT

Contact Details
No response
Describe the feature
set jwt which are expired on a block / trash list
Code of Conduct

[X] I agree to follow this project's Code of Conduct

Adding a "exp" claim data and validate it when checking the auth


items filtering as xpincomplete when they are not  (Likely a bungie API bug)

I have a couple items that still show in when the xpincomplete filter is set even though they are max xp. I am guessing this is a bungie bug because other sites that use the api report the xp incorrectly as well. Just wanted to make sure.

Thanks. We will wait until HoW drops to see how it acts.
On Sat, May 16, 2015 at 3:40 PM maurilax<EMAIL_ADDRESS>wrote:

I have a couple items that still show in when the xpincomplete filter is
set even though they are max xp. I am guessing this is a bungie bug because
other sites that use the api report the xp incorrectly as well. Just wanted
to make sure.
[image: destiny_20150516162150]
https://cloud.githubusercontent.com/assets/2760180/7667866/ed110f26-fbe9-11e4-9687-38b96480a9ef.jpg
[image: 2015-05-16_16-38-30]
https://cloud.githubusercontent.com/assets/2760180/7667868/004a7384-fbea-11e4-9602-58c7e6a6db18.png
[image: 2015-05-16_16-40-22]
https://cloud.githubusercontent.com/assets/2760180/7667873/4b278cb6-fbea-11e4-87c7-9239dcba28a2.png
—
Reply to this email directly or view it on GitHub
https://github.com/kyleshay/DIM/issues/128.

Related to #125