DRM on iOS does not work on 5.1.1 anymore

Bug
With "react-native-video": "5.1.0-alpha8" fairplay drm videos worked fine. When upgrading to "react-native-video": "5.1.1" we started getting the following error. Nothing else changed.
Bad response from URI https://drm-fairplay-licensing.axprod.net/AcquireLicense:
Client error: POS T https://drm-fairplay-licensing.axprod.net/AcquireLicense resulted in a 400 Invalid license request. Supported version is 1, but used version is<PHONE_NUMBER>. response

Platform
Which player are you experiencing the problem on:

iOS

Environment info
React native info output:

info Fetching system and libraries information...
System:
    OS: macOS 11.2.2
    CPU: (12) x64 Intel(R) Core(TM) i9-8950HK CPU @ 2.90GHz
    Memory: 368.69 MB / 32.00 GB
    Shell: 5.8 - /bin/zsh
  Binaries:
    Node: 15.3.0 - ~/.nvm/versions/node/v15.3.0/bin/node
    Yarn: 1.22.10 - /usr/local/bin/yarn
    npm: 7.0.14 - ~/.nvm/versions/node/v15.3.0/bin/npm
    Watchman: 4.9.0 - /usr/local/bin/watchman
  Managers:
    CocoaPods: 1.10.0 - /usr/local/bin/pod
  SDKs:
    iOS SDK:
      Platforms: iOS 14.4, DriverKit 20.2, macOS 11.1, tvOS 14.3, watchOS 7.2
    Android SDK: Not Found
  IDEs:
    Android Studio: 4.1 AI-201.87<IP_ADDRESS>42882
    Xcode: 12.4/12D4e - /usr/bin/xcodebuild
  Languages:
    Java: 10.0.2 - /usr/bin/javac
    Python: 2.7.17 - /usr/local/bin/python
  npmPackages:
    @react-native-community/cli: Not Found
    react: 16.13.1 => 16.13.1
    react-native: 0.63.4 => 0.63.4
  npmGlobalPackages:
    *react-native*: Not Found

Library version: x.x.x
Steps To Reproduce

Upgrade to 5.1.1
Start video (which fails)

Expected behaviour

Video would start playing as it did on version 5.1.0-alpha8

Reproducible sample code
Since it is a DRM content, I do not have precise urls to give, but I used props in following way. The only thing that stopped videos from playing was updating the patch version.
Props are following:
drm={{
    certificateUrl: ...,
    headers: {
        'X-AxDRM-Message': ...,
    },
    licenseServer: ...,
    type: DRMType.FAIRPLAY,
}}
source={{
    uri: ..,
    type: 'm3u8',
}}

Video sample

You can configure this getLicense for iOS function (I do not use it for android). It manually switches from the base 64 string form into a simple octet-stream that Axinom needs :)
import { Buffer } from 'buffer' // provided by react-native

....
<Video
 ...
 getLicense={
  async (
      spc: string,
      _contentId: string,
      licenseURL: string
    ) => {
      try {
        const blob = Buffer.from(spc, 'base64')
        const licenseResponse = await fetch(licenseURL, {
          method: 'POST',
          headers: {
            'Content-Type': 'application/octet-stream',
          },
          body: blob,
        })
        const licenseBlob = await licenseResponse.blob()

        // manually convert the blob into an octet-stream
        const license = await new Promise((resolve, reject) => {
          const reader = new FileReader() // use file reader to avoid external dependencies
          reader.onload = () => {
            const dataURL = reader.result
            resolve(
              // @ts-ignore
              dataURL.replace(
                'data:application/octet-stream;base64,',
                ''
              )
            )
          }
          reader.onerror = err => {
            console.error('could not turn license data into blob', err)
            reject(err)
          }
          reader.readAsDataURL(licenseBlob)
        })
        return license
      } catch (e) {
        console.error('could not get license', e)
      }
    }
 }
/>

A pr has been merge to fix the issue, is it solved ?


Scheme vs. Theme

Not sure if this has been discussed, but schemes and themes are different in Sublime Text. What is in this repo are schemes. See https://github.com/buymeasoda/soda-theme/ for a theme.
Not sure it really matters though. Awesome site, btw!

We have another confused soul over in the plugin repo: https://github.com/Colorsublime/Colorsublime-Plugin/issues/17
We should consider changing theme to scheme as this thing gets more popular.

I would say, don't change the name but extend the functionality instead.
Great plugin, would be awesome if we could change themes as well as schemes.

if we could change themes

If only. The current ST API wouldn't allow for the same kind of functionality for actual themes. Themes (in the the ST sense) are much more heavy weight, in terms of number and size of files.

Guys colorsublime it's a free project It was made for fun in a couple of weekends. We will not spend any extra time enhancing it (adding themes, filters. likes...) because it requires too many changes on the backend/frontend and logic. We will still maintain it and fix the bugs but please accept it in the way it is.


Toggle live-search-style

Hey,
I tried dynamically changing the live-search-style based on user input (toggle/radio). The select is properly manipulated (attribute changes from "contains" to "startsWith" or vice versa) but selectpicker does not change its behaviour (even after a refresh and/or render, manipulating data() and/or attr()).
Is this intended to be (im)possible?
Sorry if this has been discussed before or if there is a simple solution. I couldn't find anything about it.
$('input[name="live-search-toggle"]').change(function(){
     $('#input-filter-tags').attr('data-live-search-style', $(this).val()).selectpicker('refresh');
});

I believe there is an issue with the refresh code given the other issues mentionning it doesn't work. Can you try the latest code from dev branch? I don't recall if there are some related fixes in there or not.

I forgot to mention which version I am using: 1.12.11
Pretty old, I know. The newest version throws an error for me (something about missing functions, I tried earlier but didn't save the log).
I got it to work with this beauty of chaining:
$('#input-filter-tags').selectpicker('destroy')
                       .attr('data-live-search-style', $(this).val())
                       .data('live-search-style', $(this).val())
                       .selectpicker();

which may indicate an issue with "refresh" because that didn't work. But since I am on an old version I wouldn't read too much into my issue.
Still thanks a ton for replying quickly!


[backport] Add cupy.testing.shaped_sparse_random

Backport of #3944

[automatic post] Jenkins, test this please.

Jenkins CI test (for commit 64404fbe22b66c1ccd69d59ccea5b44d1626cb35, target branch v8) succeeded!

LGTM.


bump: project version to .net 7, isolated function

Upgraded the Azure Function runtime to v4
Upgraded to .Net 7
Is now an isolated worker
Added logging if a blockpage-response has been sent.

@microsoft-github-policy-service agree

Readme should be updated with correct runtime, namely "dotnet-isolated"


refactor(header/p2p): cleanup sync head detetion logic

Since #1682, we have kept the "synchronized head" in the Syncer because of synchronization oversight. However, the fix does not fit nicely into the model of subjective and network head and introduced more confusion and hairiness to the code.
This PR fixes the original issue and integrates the solution coherently into the code responsible for keeping and detecting the current head.
Additionally, sync_head.go is no more dependent on the adjacency of the Store and is prepared for future Store refactoring and storing of pending headers, instead of caching. Also, this PR does minor code cleanups, including comments and var name fixes.
Synced up to the tip 2 times on Arabica.

Anybody needs their syncussy cleaned?

Codecov Report

Merging #1889 (9ea7d85) into main (4746eb1) will increase coverage by 0.03%.
The diff coverage is 68.61%.

:exclamation: Current head 9ea7d85 differs from pull request most recent head e619301. Consider uploading reports for the commit e619301 to get more accurate results

@@            Coverage Diff             @@
##             main    #1889      +/-   ##
==========================================
+ Coverage   57.37%   57.41%   +0.03%
==========================================
  Files         242      244       +2
  Lines       16223    16223
==========================================
+ Hits         9308     9314       +6
+ Misses       5960     5953       -7
- Partials      955      956       +1

Impacted Files
Coverage Δ

libs/header/sync/metrics.go
4.34% <0.00%> (+4.34%)
:arrow_up:

libs/header/sync/sync.go
65.88% <57.50%> (+1.72%)
:arrow_up:

libs/header/sync/sync_head.go
59.63% <65.51%> (-2.69%)
:arrow_down:

libs/header/sync/sync_store.go
81.25% <81.25%> (ø)

libs/header/p2p/session.go
92.26% <100.00%> (ø)

libs/header/sync/ranges.go
92.47% <100.00%> (+0.16%)
:arrow_up:

libs/header/sync/sync_getter.go
100.00% <100.00%> (ø)

... and 4 files with indirect coverage changes
Help us with your feedback. Take ten seconds to tell us how you rate us. Have a feature suggestion? Share it here.


Expected behavior of min_zoom and max_zoom?

I'm a little unclear on how a case with multiple zoom levels is supposed to work.
var cover = require("tile-cover");

var geom = {
  "type": "Polygon",
  "coordinates": [
    [
      [
        -74.03549194335938,
        40.66918118282895
      ],
      [
        -74.03549194335938,
        40.84913799774759
      ],
      [
        -73.86245727539062,
        40.84913799774759
      ],
      [
        -73.86245727539062,
        40.66918118282895
      ],
      [
        -74.03549194335938,
        40.66918118282895
      ]
    ]
  ]
};

console.log(cover.tiles(geom,{min_zoom: 14, max_zoom: 14}).length); // 108 tiles
console.log(cover.tiles(geom,{min_zoom: 15, max_zoom: 15}).length); // 368 tiles
console.log(cover.tiles(geom,{min_zoom: 14, max_zoom: 15}).length); // 137 tiles??

I would expect that when min_zoom is less than max_zoom, the array I get back would be the combination of the array for each zoom level in the range.  So in the above example, I would assume that the third statement would produce 476 tiles (108 + 368).  Is that not what's supposed to happen?

When min and max are equal, the cover is simply a collection of tiles at one zoom level. Setting a lower min_zoom than max_zoom will make the algorithm merge tiles when possible, up to the min_zoom. Here is an example of this in practice:

The idea here is to deliver the absolute minimum number of indexes needed to cover an entire shape. If you are looking for multiple unmerged zoom levels that stack on top of one another, you could do something like:
cover.tiles(geom,{min_zoom: 14, max_zoom: 14}).concat(
cover.tiles(geom,{min_zoom: 15, max_zoom: 15}))

Got it, thanks for the clarification!


Enforce a default HTTP client timeout

Golang default HTTP client has no timeout, which may dead-lock any wrapper mutex when used in a complex app, in case the network goes down or Twitter APIs take too much time to respond / are down.
See: https://medium.com/@nate510/don-t-use-go-s-default-http-client-4804cb19f779
Signed-off-by: Valerian Saliou<EMAIL_ADDRESS>

Thanks for the PR! Looks like this needs a gofmt.

@mywaystar was 8ed10a1 intended to be included in the PR? 7e276df was but unsure about 8ed10a1 - just making sure.

8ed10a1 https://github.com/ChimeraCoder/anaconda/commit/8ed10a1c9deda1233e6adf96be04ba903859e136 was made recently. I’ll do a separate PR for this.
Baptiste Jamin
CEO, Crisp https://crisp.im/ - Connect your customers to your team.
On 26 Feb 2018, at 07:55, Valerian Saliou<EMAIL_ADDRESS>wrote:
@mywaystar https://github.com/mywaystar was 8ed10a1 https://github.com/ChimeraCoder/anaconda/commit/8ed10a1c9deda1233e6adf96be04ba903859e136 intended to be included in the PR? 7e276df https://github.com/ChimeraCoder/anaconda/commit/7e276dfa1dcbc3b73c0631045447716687f6c2f8 was but unsure about 8ed10a1 https://github.com/ChimeraCoder/anaconda/commit/8ed10a1c9deda1233e6adf96be04ba903859e136 - just making sure.
—
You are receiving this because you were mentioned.
Reply to this email directly, view it on GitHub https://github.com/ChimeraCoder/anaconda/pull/226#issuecomment-368407144, or mute the thread https://github.com/notifications/unsubscribe-auth/AA04wyR1MeJxoAgJ1x1z0HLHChPXHtTNks5tYlVogaJpZM4QqMa1.


Can I create an event by selecting a timespan and dragging the mouse to vary the length of the event?

Hi there,
First, thanks for this amazing calendar widget. It's very useful and super easy to setup. I'm sure this is available but cannot find a way to do it:
I'd like to be able to create an event by selecting a timespan and drag the mouse to create an event of 30 or 45 min for example. How can I do that?
Thanks for your time and help.
Ted

You can create a new event with your desired timespan. eg: 10 to 10:30 AM
Then you can resize the event by dragging it. You can resize in the day view of the calendar.
Try out in the demo
For documentation you can have a look at
https://github.com/mattlewis92/angular-bootstrap-calendar#documentation

To elaborate on what @swapy said, I've put together a basic example for you: http://plnkr.co/edit/tursHHxWA8SdALaj0Bx6?p=preview

Thank you both for your answers, it helps me to get closer to the solution I want. What I want exactly is the possibility to drag and drop my mouse to create event in that way:
http://alloyui.com/examples/scheduler/real-world/
but I want to stick with your solution because more complete and way more extensible ;)
If you have something is mind, let me know, thanks again, much appreciated.

Oh right I get what you mean now, sorry but there isn't a way to do this with this calendar.

Ok, thanks I understand. If you have a recommendation on where I should start to look to tackle this task to support it, let me know. Would be nice to have it so I'm gonna try it.
Ted

It's not a particularly trivial thing to add. I would start with putting an ng-mousedown on this template so you can detect the starting time slot. Then use  ng-mousemove on the parent container to track the drag action. From that you can calculate the height of the new event by comparing the diff of the $event.clientY given by the mouse move / down directives and draw a temporary event on the screen. Then on mouseup you would need to bubble the new event up by creating a new callback that works similar to on-event-delete, on-event-edit etc. But this way you can't let the user choose the event title or the type of event etc and would still need a second bit of the UI to manually input that anyway.


Privacy and Accessibility pages are in English only

The source problem seems to be in config.toml, the URLs are not localized.
It seems also that these pages are not available in 3 languages.

All footer links have to be changed
About Thorium Reader
Terms of use
Credits
Privacy Policy
Accessibility policy
Licence
About this website
Accessibility : conforms to WCAG 2.1 AA
Licence


ci: Add GitHub Actions build-lint-test workflow

Template from metamask-module-template
This runs on Nodejs versions 12 (currently supported version) and 14.
Note that tests fail on Node.js versions >= 12. fail-fast is temporarily set to run the full matrix regardless. This is intended to assist in unbreaking it and can be removed once resolved.
This does not:

save HAR logs like the circleci job (do we want this?)
remove circleci (will add here if desired by reviewers)

It doesn't seem like the new actions you've added are getting run. I wonder if we have to enable actions on this repo in order to do this.

With regard to:

save HAR logs like the circleci job (do we want this?)
remove circleci (will add here if desired by reviewers)

I think we can safely remove these. I don't recall needing to access old logs in CircleCI, and for GitHub Actions, GitHub stores logs already.

I'll look into why these tests are failing on Node 12 shortly.


JBTM-3822 Re-license Narayana tomcat repo from LGPL to Apache-2.0

https://issues.redhat.com/browse/JBTM-3822
Remark: this is fairly urgent so we should merge this one, if it passes CI and review, and then update the three open pull requests.

Withdrawing since it was raised against the wrong upstream repo.


Websocket can't initialize with Tornado 4.5.1

Running this with nbrsessionproxy and got the following exception when trying to establish a websocket connection:
[I 2018-05-07 21:32:51.808 sen_fang handlers:136] Trying to establish websocket connection to ws://<IP_ADDRESS>:60981/p/6758/websocket/
[E 2018-05-07 21:32:51.808 sen_fang ioloop:638] Exception in callback functools.partial(<function wrap.<locals>.null_wrapper at 0x7f6d9c9598c8>, <tornado.concurrent.Future object at 0x7f6d9cc159e8>)
    Traceback (most recent call last):
      File "/opt/conda/envs/py36/lib/python3.6/site-packages/tornado/ioloop.py", line 605, in _run_callback
        ret = callback()
      File "/opt/conda/envs/py36/lib/python3.6/site-packages/tornado/stack_context.py", line 277, in null_wrapper
        return fn(*args, **kwargs)
      File "/opt/conda/envs/py36/lib/python3.6/site-packages/tornado/ioloop.py", line 626, in _discard_future_result
        future.result()
      File "/opt/conda/envs/py36/lib/python3.6/site-packages/tornado/concurrent.py", line 238, in result
        raise_exc_info(self._exc_info)
      File "<string>", line 4, in raise_exc_info
      File "/opt/conda/envs/py36/lib/python3.6/site-packages/tornado/gen.py", line 307, in wrapper
        yielded = next(result)
      File "<string>", line 6, in _wrap_awaitable
      File "/opt/conda/envs/py36/lib/python3.6/site-packages/nbserverproxy/handlers.py", line 140, in start_websocket_connection
        on_message_callback=message_cb, on_ping_callback=ping_cb)
      File "/opt/conda/envs/py36/lib/python3.6/site-packages/nbserverproxy/handlers.py", line 55, in pingable_ws_connect
        on_ping_callback=on_ping_callback)
      File "/opt/conda/envs/py36/lib/python3.6/site-packages/nbserverproxy/handlers.py", line 35, in __init__
        super().__init__(**kwargs)
      File "/opt/conda/envs/py36/lib/python3.6/site-packages/tornado/websocket.py", line 1076, in __init__
        104857600, self.tcp_client, 65536, 104857600)
      File "/opt/conda/envs/py36/lib/python3.6/site-packages/tornado/simple_httpclient.py", line 196, in __init__
        self.start_time = io_loop.time()
    AttributeError: 'NoneType' object has no attribute 'time'

It looks like because io_loop is set to None but Tornado expects to use it at here:
https://github.com/jupyterhub/nbserverproxy/commit/beefebc52fc57f55ab34d463ff21b60682537749#diff-ca755767ba44dc77b227f5de4d62ed08R34
https://github.com/tornadoweb/tornado/blob/branch4.5/tornado/websocket.py#L1082
https://github.com/tornadoweb/tornado/blob/branch4.5/tornado/simple_httpclient.py#L196

Thanks for the report.
I believe 1e0ce33 fixes this -- tested on binder. Can you confirm?

Confirmed it is fixed. Thanks for the quick turnaround!


Rule 932200 of Shell Injection is creating a false positive with JSON payload

Description
A valid event.json while running a test on dynamodb is blocked by rule 932200 of shell injection. The following keyword might be a problem: /webp,*
/webp,* is a part of the event.json that was sent and it got blocked by rule 932200. Its a valid event.json without being an attack. Inserting below the actual contents of event.json that was blocked by the rule.
{
"body": {
"name": "Sample Name"
},
"resource": "/{proxy+}",
"path": "/path/to/resource",
"httpMethod": "POST",
"isBase64Encoded": true,
"queryStringParameters": {
"foo": "bar"
},
"multiValueQueryStringParameters": {
"foo": [
"bar"
]
},
"pathParameters": {
"proxy": "/path/to/resource"
},
"stageVariables": {
"baz": "qux"
},
"headers": {
"Accept": "text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8",
"Accept-Encoding": "gzip, deflate, sdch",
"Accept-Language": "en-US,en;q=0.8",
"Cache-Control": "max-age=0",
"CloudFront-Forwarded-Proto": "https",
"CloudFront-Is-Desktop-Viewer": "true",
"CloudFront-Is-Mobile-Viewer": "false",
"CloudFront-Is-SmartTV-Viewer": "false",
"CloudFront-Is-Tablet-Viewer": "false",
"CloudFront-Viewer-Country": "US",
"Host": "1234567890.execute-api.us-east-1.amazonaws.com",
"Upgrade-Insecure-Requests": "1",
"User-Agent": "Custom User Agent String",
"Via": "1.1 08f323deadbeefa7af34d5feb414ce27.cloudfront.net (CloudFront)",
"X-Amz-Cf-Id": "cDehVQoZnx43VYQb9j2-nvCh-9z396Uhbp027Y2JvkCPNLmGJHqlaA==",
"X-Forwarded-For": "<IP_ADDRESS>, <IP_ADDRESS>",
"X-Forwarded-Port": "443",
"X-Forwarded-Proto": "https"
},
"multiValueHeaders": {
"Accept": [
"text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8"
],
"Accept-Encoding": [
"gzip, deflate, sdch"
],
"Accept-Language": [
"en-US,en;q=0.8"
],
"Cache-Control": [
"max-age=0"
],
"CloudFront-Forwarded-Proto": [
"https"
],
"CloudFront-Is-Desktop-Viewer": [
"true"
],
"CloudFront-Is-Mobile-Viewer": [
"false"
],
"CloudFront-Is-SmartTV-Viewer": [
"false"
],
"CloudFront-Is-Tablet-Viewer": [
"false"
],
"CloudFront-Viewer-Country": [
"US"
],
"Host": [
"0123456789.execute-api.us-east-1.amazonaws.com"
],
"Upgrade-Insecure-Requests": [
"1"
],
"User-Agent": [
"Custom User Agent String"
],
"Via": [
"1.1 08f323deadbeefa7af34d5feb414ce27.cloudfront.net (CloudFront)"
],
"X-Amz-Cf-Id": [
"cDehVQoZnx43VYQb9j2-nvCh-9z396Uhbp027Y2JvkCPNLmGJHqlaA=="
],
"X-Forwarded-For": [
"<IP_ADDRESS>, <IP_ADDRESS>"
],
"X-Forwarded-Port": [
"443"
],
"X-Forwarded-Proto": [
"https"
]
},
"requestContext": {
"accountId": "123456789012",
"resourceId": "123456",
"stage": "prod",
"requestId": "c6af9ac6-7b61-11e6-9a41-93e8deadbeef",
"requestTime": "09/Apr/2015:12:34:56 +0000",
"requestTimeEpoch":<PHONE_NUMBER>000,
"identity": {
"cognitoIdentityPoolId": null,
"accountId": null,
"cognitoIdentityId": null,
"caller": null,
"accessKey": null,
"sourceIp": "<IP_ADDRESS>",
"cognitoAuthenticationType": null,
"cognitoAuthenticationProvider": null,
"userArn": null,
"userAgent": "Custom User Agent String",
"user": null
},
"path": "/prod/path/to/resource",
"resourcePath": "/{proxy+}",
"httpMethod": "POST",
"apiId": "1234567890",
"protocol": "HTTP/1.1"
}
}
Audit Logs / Triggered Rule Numbers
932200
Your Environment
Tested this on AWS dynamodb on lambda function.
Confirmation
[x ] I have removed any personal data (email addresses, IP addresses,
passwords, domain names) from any logs posted.

Hi @theseion
The rule is present in RCE: Right here https://github.com/coreruleset/coreruleset/blob/v4.0/dev/rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf on line 741.
We are not using AWS WAF offering, we have a rules repository and rule 932200 is blocking the above mentioned JSON content even though its a valid Dynamodb request. I tested it on regex101 and it seems to be matching with /webp,* from the JSON content and hence blocking it.
This is the regex for rule 932200: (?:[*?\x5c'][^/\n]+/|\$[({\[#@!?*\-_$a-zA-Z0-9]|/[^/]+?[*?\x5c'])
enhancing that regex to (?:[*?\x5c'][^/\n]+/|\$[({\[#@!?*\-_$a-zA-Z0-9]|/[^/]+?[?\x5c']) seems to be solving the problem without creating false positives.

Thanks for the clarification.
We are both looking at the same rule and regular expression, that's good. I still can't find any matches though: https://regex101.com/r/PcnPjh/1.
I agree that the regex matches /webp* but your JSON example does not contain that string.

Hi @theseion,
Check this screenshot.

I see. So the problematic string is a Content-Type header with an "accept all" part, embedded in a JSON payload. Unfortunately, I don't think there's anything we can do about it. Basically, you need to deactivate the rule yourself or skip it dynamically, based on some condition, see https://coreruleset.org/docs/concepts/false_positives_tuning/#tuning-away-false-positives. @theMiddleBlue do you agree with this assessment?
It might be worth considering to create a new plugin (for CRS v4) with rule exclusions for DynamoDB, depending on whether there are other rules that might be triggered (which isn't unlikely, given the JSON payloads).

Where is this Content-Type header? Can't see it in the submitted payload, nor in the screenshot.

Just the value if the header. It’s part of the JSON (see the “image/webp” string in the payload).

On Thursday, Jun 23, 2022 at 8:01 AM, Christian Folini @.*** @.***)> wrote:
Where is this Content-Type header? Can't see it in the submitted payload, nor in the screenshot.
—
Reply to this email directly, view it on GitHub (https://github.com/coreruleset/coreruleset/issues/2659#issuecomment-1163985391), or unsubscribe (https://github.com/notifications/unsubscribe-auth/AAB5GV4YHVBPTHASAINPDJDVQP4TNANCNFSM5ZPXNZ6Q).
You are receiving this because you were mentioned.Message ID: @.***>

let me see if I'm understanding it well: the payload is a JSON request body that matches /webp,* with 932200. But I can't find any /webp,* string on the @jhimansh example...
Agree with you that in this case removing the matched ARG from the rule is the only solution here!

You're right, @theMiddleBlue. The content.json that was shared by @jhimansh is not the one that was checked by regex101.
Difference:
On rege101 tested content.json contains /webp,* that is a match.
Submitted content.json that is not a match: /webp,

Hey Guys,
Might have used a different json in the main example. This is the json which is having a match for /webp,*
{
"body": {
"name": "Jules Verne"
},
"resource": "/{proxy+}",
"path": "/path/to/resource",
"httpMethod": "POST",
"isBase64Encoded": true,
"queryStringParameters": {
"foo": "bar"
},
"multiValueQueryStringParameters": {
"foo": [
"bar"
]
},
"pathParameters": {
"proxy": "/path/to/resource"
},
"stageVariables": {
"baz": "qux"
},
"headers": {
"Accept": "text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8",
"Accept-Encoding": "gzip, deflate, sdch",
"Accept-Language": "en-US,en;q=0.8",
"Cache-Control": "max-age=0",
"CloudFront-Forwarded-Proto": "https",
"CloudFront-Is-Desktop-Viewer": "true",
"CloudFront-Is-Mobile-Viewer": "false",
"CloudFront-Is-SmartTV-Viewer": "false",
"CloudFront-Is-Tablet-Viewer": "false",
"CloudFront-Viewer-Country": "US",
"Host": "1234567890.execute-api.us-east-1.amazonaws.com",
"Upgrade-Insecure-Requests": "1",
"User-Agent": "Custom User Agent String",
"Via": "1.1 08f323deadbeefa7af34d5feb414ce27.cloudfront.net (CloudFront)",
"X-Amz-Cf-Id": "cDehVQoZnx43VYQb9j2-nvCh-9z396Uhbp027Y2JvkCPNLmGJHqlaA==",
"X-Forwarded-For": "<IP_ADDRESS>, <IP_ADDRESS>",
"X-Forwarded-Port": "443",
"X-Forwarded-Proto": "https"
},
"multiValueHeaders": {
"Accept": [
"text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8"
],
"Accept-Encoding": [
"gzip, deflate, sdch"
],
"Accept-Language": [
"en-US,en;q=0.8"
],
"Cache-Control": [
"max-age=0"
],
"CloudFront-Forwarded-Proto": [
"https"
],
"CloudFront-Is-Desktop-Viewer": [
"true"
],
"CloudFront-Is-Mobile-Viewer": [
"false"
],
"CloudFront-Is-SmartTV-Viewer": [
"false"
],
"CloudFront-Is-Tablet-Viewer": [
"false"
],
"CloudFront-Viewer-Country": [
"US"
],
"Host": [
"0123456789.execute-api.us-east-1.amazonaws.com"
],
"Upgrade-Insecure-Requests": [
"1"
],
"User-Agent": [
"Custom User Agent String"
],
"Via": [
"1.1 08f323deadbeefa7af34d5feb414ce27.cloudfront.net (CloudFront)"
],
"X-Amz-Cf-Id": [
"cDehVQoZnx43VYQb9j2-nvCh-9z396Uhbp027Y2JvkCPNLmGJHqlaA=="
],
"X-Forwarded-For": [
"<IP_ADDRESS>, <IP_ADDRESS>"
],
"X-Forwarded-Port": [
"443"
],
"X-Forwarded-Proto": [
"https"
]
},
"requestContext": {
"accountId": "123456789012",
"resourceId": "123456",
"stage": "prod",
"requestId": "c6af9ac6-7b61-11e6-9a41-93e8deadbeef",
"requestTime": "09/Apr/2015:12:34:56 +0000",
"requestTimeEpoch":<PHONE_NUMBER>000,
"identity": {
"cognitoIdentityPoolId": null,
"accountId": null,
"cognitoIdentityId": null,
"caller": null,
"accessKey": null,
"sourceIp": "<IP_ADDRESS>",
"cognitoAuthenticationType": null,
"cognitoAuthenticationProvider": null,
"userArn": null,
"userAgent": "Custom User Agent String",
"user": null
},
"path": "/prod/path/to/resource",
"resourcePath": "/{proxy+}",
"httpMethod": "POST",
"apiId": "1234567890",
"protocol": "HTTP/1.1"
}
}

Hey Guys, Might have used a different json in the main example. This is the json which is having a match for /webp,*
{ "body": { "name": "Jules Verne" }, "resource": "/{proxy+}", "path": "/path/to/resource", "httpMethod": "POST", "isBase64Encoded": true, "queryStringParameters": { "foo": "bar" }, "multiValueQueryStringParameters": { "foo": [ "bar" ] }, "pathParameters": { "proxy": "/path/to/resource" }, "stageVariables": { "baz": "qux" }, "headers": { "Accept": "text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8", "Accept-Encoding": "gzip, deflate, sdch", "Accept-Language": "en-US,en;q=0.8", "Cache-Control": "max-age=0", "CloudFront-Forwarded-Proto": "https", "CloudFront-Is-Desktop-Viewer": "true", "CloudFront-Is-Mobile-Viewer": "false", "CloudFront-Is-SmartTV-Viewer": "false", "CloudFront-Is-Tablet-Viewer": "false", "CloudFront-Viewer-Country": "US", "Host": "1234567890.execute-api.us-east-1.amazonaws.com", "Upgrade-Insecure-Requests": "1", "User-Agent": "Custom User Agent String", "Via": "1.1 08f323deadbeefa7af34d5feb414ce27.cloudfront.net (CloudFront)", "X-Amz-Cf-Id": "cDehVQoZnx43VYQb9j2-nvCh-9z396Uhbp027Y2JvkCPNLmGJHqlaA==", "X-Forwarded-For": "<IP_ADDRESS>, <IP_ADDRESS>", "X-Forwarded-Port": "443", "X-Forwarded-Proto": "https" }, "multiValueHeaders": { "Accept": [ "text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8" ], "Accept-Encoding": [ "gzip, deflate, sdch" ], "Accept-Language": [ "en-US,en;q=0.8" ], "Cache-Control": [ "max-age=0" ], "CloudFront-Forwarded-Proto": [ "https" ], "CloudFront-Is-Desktop-Viewer": [ "true" ], "CloudFront-Is-Mobile-Viewer": [ "false" ], "CloudFront-Is-SmartTV-Viewer": [ "false" ], "CloudFront-Is-Tablet-Viewer": [ "false" ], "CloudFront-Viewer-Country": [ "US" ], "Host": [ "0123456789.execute-api.us-east-1.amazonaws.com" ], "Upgrade-Insecure-Requests": [ "1" ], "User-Agent": [ "Custom User Agent String" ], "Via": [ "1.1 08f323deadbeefa7af34d5feb414ce27.cloudfront.net (CloudFront)" ], "X-Amz-Cf-Id": [ "cDehVQoZnx43VYQb9j2-nvCh-9z396Uhbp027Y2JvkCPNLmGJHqlaA==" ], "X-Forwarded-For": [ "<IP_ADDRESS>, <IP_ADDRESS>" ], "X-Forwarded-Port": [ "443" ], "X-Forwarded-Proto": [ "https" ] }, "requestContext": { "accountId": "123456789012", "resourceId": "123456", "stage": "prod", "requestId": "c6af9ac6-7b61-11e6-9a41-93e8deadbeef", "requestTime": "09/Apr/2015:12:34:56 +0000", "requestTimeEpoch":<PHONE_NUMBER>000, "identity": { "cognitoIdentityPoolId": null, "accountId": null, "cognitoIdentityId": null, "caller": null, "accessKey": null, "sourceIp": "<IP_ADDRESS>", "cognitoAuthenticationType": null, "cognitoAuthenticationProvider": null, "userArn": null, "userAgent": "Custom User Agent String", "user": null }, "path": "/prod/path/to/resource", "resourcePath": "/{proxy+}", "httpMethod": "POST", "apiId": "1234567890", "protocol": "HTTP/1.1" } }

Update: The * gets removed from the json payload when I paste the payload here on github

Thanks! @dune73 I meant the Accept header, of course.

On Thursday, Jun 23, 2022 at 8:52 AM, jhimansh @.*** @.***)> wrote:
JSON.txt (https://github.com/coreruleset/coreruleset/files/8964764/JSON.txt)
Attached is the JSON payload which is a common event.json with no attack.
—
Reply to this email directly, view it on GitHub (https://github.com/coreruleset/coreruleset/issues/2659#issuecomment-1164022109), or unsubscribe (https://github.com/notifications/unsubscribe-auth/AAB5GV4VYXR2LXZDVCTDGI3VQQCSVANCNFSM5ZPXNZ6Q).
You are receiving this because you were mentioned.Message ID: @.***>

Thank you all. Just for the record, we're talking about an Accept-Header and not Content-Type. Correct?

Thank you all. Just for the record, we're talking about an Accept-Header and not Content-Type. Correct?

Correct

As @theseion and @theMiddleBlue mentioned above, I agree that tuning the rule is the best solution here:
SecRuleUpdateTargetById 932200 !ARGS:multiValueHeaders.Accept.Accept
and/or
SecRuleUpdateTargetById 932200 !ARGS:headers.Accept
depending on where the webp,* is.


no-access-missing-member does not find members in base classes

Using myMethod from the BaseComponent class in the MyComponent template will result in an error.
The method "myMethod" that you're trying to access does not exist in the class declaration.
// base.component.ts
export class BaseComponent {
  someMethod() { }
}

// my.component.ts
@Component({
  selector: 'app-my-component',
  templateUrl: './my.component.html'
})
export class MyComponent extends BaseComponent {
  constructor() {
    super();
  }
}

<!--my.component.html -->
<button (click)="myMethod()"></button>

duplicate of #361


Adding Bayesian estimator for QPE

Over the next few weeks I'll be adding some code to do Bayesian estimation for quantum phase estimation. This is part of a paper in production, along the lines of https://arxiv.org/abs/1508.00869 but with multiple qubits and experimental error.
If anyone wants to help with checking + approving code that would be much appreciated!
Cheers,
Tom.

@jarrodmcc and I have spoken with @obriente about this and we're looking forward to the PR!


Consider integrating simdjson's AVX-512 wrapper

https://github.com/simdjson/simdjson/pull/1811/files
(Limited to cascade lake but could be extended.)

We are not going to do this.


HA ping endpoint, rate limit whitelist

This is the 1st time I play with go, I wanted to add a ping route for haproxy to monitor service and allow some networks to bypass rate limits.
comments welcome

IP whitelisting can easily be done by splitting on , and checking the existence of an IP in a map

Keep in mind that running the server with both environment variables empty will disable the limiting middleware all together


Stop SparkSession In Object Metorikku

https://github.com/YotpoLtd/metorikku/blob/6c6c6e63dc17278c6637af9c144145bf3f3d8ec2/src/main/scala/com/yotpo/metorikku/Metorikku.scala#L29
Should we stop the sparksession?
when I submit the command in yarn,
spark-submit --class com.yotpo.metorikku.Metorikku --master yarn --deploy-mode client ~/metorikku/metorikku.jar -c examples/movies.yaml
metorikku app has finished the job but still wait to close the sparksession with a loop, log shows as follow,

when I stop the sparkSession, the above problem solved
session.sparkSession.stop()

@drinks5 can you try the following JAR and let me know if that works for you?
https://github.com/YotpoLtd/metorikku/releases/download/v0.0.125/yarn_metorikku_2.11.jar
or
https://github.com/YotpoLtd/metorikku/releases/download/v0.0.125/yarn_metorikku_2.12.jar

@drinks5 can you try the following JAR and let me know if that works for you?
https://github.com/YotpoLtd/metorikku/releases/download/v0.0.125/yarn_metorikku_2.11.jar
or
https://github.com/YotpoLtd/metorikku/releases/download/v0.0.125/yarn_metorikku_2.12.jar

It's works ok, thx!


[Bug]: Icon color not present for Button group widget

Is there an existing issue for this?

[X] I have searched the existing issues

Description
Icon color not present for Button group widget. Where as Menu item inside button group has icon color selection available.

Steps To Reproduce

Drag and drop Button Group Widget
Look for Icon color in button group
Look for icon color in menu items.

Public Sample App
No response
Version
Cloud

Not an issue anymore, This is rectified after theming


Fix HTTP status codes in debug mode

HTTP status code in case of error if gork is configured in debug mode was always the default 500.

Codecov Report

Merging #46 into master will not change coverage.
The diff coverage is n/a.

@@           Coverage Diff           @@
##           master      #46   +/-   ##
=======================================
  Coverage   96.41%   96.41%
=======================================
  Files          21       21
  Lines         502      502
=======================================
  Hits          484      484
  Misses         11       11
  Partials        7        7

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update 69ef0ff...bbef9f8. Read the comment docs.


Create PR with autocomplete

Hello.
I want to create a PR with autocomplete and I sent the following request:
GitPullRequest parameters = new GitPullRequest()
            {
                SourceRefName = "branchsource",
                TargetRefName = "branchtarget",
                Title = "titulo pr",
                Description = "desc pr",
                AutoCompleteSetBy = new IdentityRef
                {
                    Id = identity.Id.ToString()
                },
                CompletionOptions = new GitPullRequestCompletionOptions
                {
                    MergeCommitMessage = "Merge: desc pr",
                    DeleteSourceBranch = true,
                    MergeStrategy = GitPullRequestMergeStrategy.Squash,
                    SquashMerge = true
                }
            };
_gitClient.CreatePullRequestAsync(parameters, repo.Id).Result;
The PR was created without the autocomplete feature.
How can I fix my code?
Thank you.

I have the same problem. How to create a autocomplete PR?


Upgrade to DotNetCore 3.1

Upgrade the project to DotNetCore 3.1 (LTS version).
Remain compatible with NetFramework 4.5 through cross compilation.

Thanks!


Turn off throttle option when requesting for a availability from the parent terrain layer

The function checkLayer() in the CesiumTerrainProvider.js file is responsible for requesting a availability tile for the parent layer. However, the promise is delayed for a long time or never get resolved especially where the tile is overlapped with the child layer, which makes QuadtreePrimitive upsamples the tile from the parent tile. Turning off the throttle option in the Request object does solves the issue though. This is consistent with other requests coming from the other terrain code
This is the parent layer when all the tiles are available. Notice the three lines on the head of the two tiles at level 10

This is the missing tiles from the parent layer when delay happens. Notice there are no three lines on the head of the tiles at level 10. Keeping zooming in doesn't solve the problem

@lilleyse Can you please take a look at it? Please let me know if I need to add anything

Thanks for the pull request @baothientran!

:heavy_check_mark: Signed CLA found.
:grey_question: CHANGES.md was not updated.

If this change updates the public API in any way, please add a bullet point to CHANGES.md.

:grey_question: Unit tests were not updated.

Make sure you've updated tests to reflect your changes, added tests for any new code, and ran the code coverage tool.

Reviewers, don't forget to make sure that:

[ ] Cesium Viewer works.
[ ] Works in 2D/CV.
[ ] Works (or fails gracefully) in IE11.

@baothientran Definitely 👍 on the change. The terrain and imagery system used to throttle requests in the RequestScheduler but it clashed  with 3D Tiles' priority system so we reverted it and let terrain prioritize/throttle according to its own rules. I think this code just never got reverted.
Can you make the same change for other terrain/imagery providers? A search for throttle: true brings up a few more results. Ultimately throttle: true should be removed everywhere except in Cesium3DTile, ResourceSpec, and RequestSchedulerSpec.

@lilleyse I turned off the throttle options for all the terrain and imagery provider. Some tests are fixed along the way, but it shouldn't change the testing cases' purposes

@baothientran could you the fix to CHANGES.md?

@kring can you confirm that this is a good fix?


CI about to fail due to build-crd-testing deletion

@mattmoor pointed out that the GCP project build-crd-testing has been deleted; we have a bunch of examples which reference this project (e.g. https://github.com/tektoncd/pipeline/blob/bda40ea059cbb54a0d6c206b756d735b72df5b74/examples/v1beta1/taskruns/pull-private-image.yaml#L50) and we also use it in an end to end test (https://github.com/tektoncd/pipeline/blob/bda40ea059cbb54a0d6c206b756d735b72df5b74/test/pipelinerun_test.go#L696).
We'll need to update these examples and tests to use a project that actually exists (e.g. one of these https://github.com/tektoncd/plumbing/blob/main/docs/README.md#gcp-projects); in the meantime it might be best to disable these if they start blocking PRs.

Agreed 😅 What was the "secret sauce" doing ? I guess only used as a private image to exercise the auth ?

Yup, private image auth test

I'm gonna downgrade the priority on this one since @vdemeester has at least made it so this won't block folks

/assign

/cc @sbwsg

One of the tricky parts here is that GCR only supports ACL at the registry level, so we either need to use an existing private registry we have in a project or create a new project explicitly for testing this out.
The tekton-nightly project has existing private registries set up for eu.gcr.io, us.gcr.io and asia.gcr.io. We could use one of these? @tektoncd/core-maintainers wdyt?

I'd recommend against using tekton-nightly out of paranoia that tests might gain unintended access to other dogfooding resources.
My preference would be to use a new project and/or use Artifact Registry which has finer ACLs than GCR.

@afrittoli is working on running tests in Kind and with this it should be possible to setup a registry with credentials for testing purposes. From Pipelines WG just now this would be preferable over maintaining a piece of cloud infra specific to tests so that's the approach we intend to pursue before committing to a new GCP project, Artifact Registry or similar.

/lifecycle frozen
/assign @afrittoli


An easier way to make custom menus whiout coding

What feature do you want to get added on the base engine?
I'm making an fnf mod and one of the things I want my mod has is a custom menu, like the main menu options moved to one side or the weeks in the side and the backround in the other side, and looking a lot of tutorials in youtube, downloading a lot of things and coding a lot, I discovered that my pc can't compile psych engine, so, I ask for myself "what if the engine has a better way to make custom menús??" And here it is, making a suggestion for that, hope you read me and accept my idea
To test your sight, and reliability, please select the option of what should NOT be requested.
A good idea

I don't really think they are going to add it. + You failed the test.

Duplicate of MANY other posts, and failed the test
Massive L

Which test?

They said in the beginning that theyre not gonna add 4k support, Stage editor, and stuff like that.
You were supposed to put that in for what shouldnt be submitted.
But dont worry, I did it the first time too.

Which test?


Ts-sdk: change number to bigint or string in provider functions

Description

Function getTotalTransactionNumber of ts-sdk now returns a bigint.
Function getReferenceGasPrice of ts-sdk now returns a bigint.
gasPrice of devInspectTransaction is defined as a bigint.
getLatestCheckpointSequenceNumber returns a string
getCheckpoint takes as input a string for checkpoint sequence number.
getCheckpoints takes as input a string for cursor.
Introduce SuiCheckpointSequenceNumber type to sui-json-rpc-types that is defined as BigInt (compared to CheckpointSequenceNumber used from sui-types that was defined as a u64)
Change rust side to support the above. Changes to explorer, sui-sdk, sui-indexer and sui-rosetta that got affected by the changes.

PR #9347 was adding a lot of changes, so I am splitting it into multiple PRs so that the changes can be better reviewed and tested. A related PR: #9462
Test Plan

If your changes are not user-facing and not a breaking change, you can skip the following section. Otherwise, please indicate what changed, and then add to the Release Notes section as highlighted during the release process.
Type of Change (Check all that apply)

[ ] user-visible impact
[ ] breaking change for a client SDKs
[ ] breaking change for FNs (FN binary must upgrade)
[ ] breaking change for validators or node operators (must upgrade binaries)
[ ] breaking change for on-chain data layout
[ ] necessitate either a data wipe or data migration

Release notes

For epoch inputs such as in devInspectTransaction and getCommitteeInfo, epoch could remain a number since it may not get a value that cannot fit into a number type.
For getLatestCheckpointSequenceNumber, the value that is returned by the sui-json-rpc is CheckpointSequenceNumber and is defined in sui-types. Changing it to a BigInt so that getLatestCheckpointSequenceNumber can return a bigint may cause a lot of things to break.

Please rebase + do some final testing on explorer/wallet before merging


Test the bots locally section contains errors

In the  Test the bots locally section there are a few potential errors mainly in section 3a. Most of these are minor, one is potentially quite confusing

First the Welcome is wrong, it never tells you to update the text to "Welcome tot he EchoBot sample" so the text you see is actually "Welcome to your bot"
The second one is potentially more confusing when you first enter "Echo" the echo skill as it's coded does not start with "You said 'echo'" it won't echo until you type something else

Document Details
⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

ID: 9863a83d-f2fa-5b20-c22e-ee9cbd1d727c
Version Independent ID: 986de81e-23d5-5c22-4b9d-1967e3c338c1
Content: How to create and test a local skill -  Bot Framework Composer
Content Source: composer-docs/how-to-export-a-skill.md
Service: bot-composer
GitHub Login: @JonathanFingold
Microsoft Alias: kamrani

@gremlin529 The UI may have changed after the article was written. Investigating.

@gremlin529 I identified a few problems with my original logic and am updating the article and screenshots. I need to validate that the other two articles that logically follow this one still work as described, and then I'll publish the fix.
A couple quick notes (which are making their way into the updated articles):

The greeting is triggered by a conversationUpdate activity, which the skill bot only receives if it is started as a root bot.
I'm adding a "startSkill" event trigger to the skill, to allow for greeting behavior when it is started from another bot.
The root bot needs to set Activity processed to true and send a "startSkill" event when it connects to the skill.

@gremlin529 I've run into technical difficulties in the publishing the skill step. Will keep you posted.

Instructions should be correct now.


GUIX Studio does not generate proper specification code when JPEG support is disabled

Describe the bug
We are unable to compile gui_specifications.c without having to modify the file after we have regenerated the file.
The issue surrounds the setting up of gx_display_driver_jpeg_draw.  We disabled JPEG support in e2 studio.  gx_display_driver_jpeg_draw is compiled out correctly in gx_display_driver_synergy_dave2d.c, however the flag is being ignored in gui_specifications.
Please also mention any information which could help others to understand
the problem you're facing:

Building for cortex_m4
Azure tx_api 6.1.10
What toolchain and environment?
- e2 Studio 2022-04 (22.4.0)
- guix studio <IP_ADDRESS>
What have you tried to diagnose or workaround this issue?
- We have developed a script to replace code (see additional context below) in the file after we have generated new output files from GUIX Studio.

To Reproduce
Steps to reproduce the behavior:

Open e2 studio configuration file.
Add GUIX stack
Add GUIX source
Disable Synergy JPEG support
Rebuild project

Expected behavior
The code should compile without warnings or errors.  We assume the pointer will be NULL.
Impact
As of today, we can get by with a script that patches the file. (or hand edit).
Logs and console output
../src/gui/gui_specifications.c: In function '_gx_synergy_display_driver_setup':
'gx_display_driver_jpeg_draw'; did you mean 'gx_display_driver_polygon_draw'?
18413 |     display -> gx_display_driver_jpeg_draw                     = _gx_synergy_jpeg_draw;
      |                ^~~~~~~~~~~~~~~~~~~~~~~~~~~

Additional context
You should add in PNG flags in case someone decides that they do not require PNG support. #define GX_SOFTWARE_DECODER_SUPPORT
The following code will fix the issue:
#if (GX_USE_SYNERGY_JPEG == 1)
    display -> gx_display_driver_jpeg_draw                     = _gx_synergy_jpeg_draw;
#endif
#if defined(GX_SOFTWARE_DECODER_SUPPORT)
    display -> gx_display_driver_png_draw                      = _gx_display_driver_565rgb_png_draw;
#endif

@int-bio can you tell me your GUIX Studio project settings as well? In the project configuration dialog, when you select Synergy as the target CPU, there is an advanced settings page that allows you to enable/disable the Dave2D accelerator as well as the hardware jpeg decoder. Let me know your project settings here as well please.

Here are the first few lines up to languages.
<guix_version>50401</guix_version>
<studio_version>5040209</studio_version>
<project_name>gui</project_name>
<source_path>.\</source_path>
<header_path>.\</header_path>
<resource_path>.\</resource_path>
<insert_headers_before>FALSE</insert_headers_before>
<target_cpu>1</target_cpu>
<target_tools>2</target_tools>
<big_endian>FALSE</big_endian>
<synergy_graph_accelerator>TRUE</synergy_graph_accelerator>
<synergy_jpeg_decoder>2</synergy_jpeg_decoder>
<synergy_png_decoder>1</synergy_png_decoder>
<grid_enabled>FALSE</grid_enabled>
<snap_enabled>FALSE</snap_enabled>
<grid_spacing>10</grid_spacing>
<snap_spacing>10</snap_spacing>
<gen_binary>FALSE</gen_binary>
<binary_file_format>1</binary_file_format>
<memory_offset>0</memory_offset>
<gen_res_header>TRUE</gen_res_header>
<custom_resource_enabled>FALSE</custom_resource_enabled>
<app_execute_xpos>0</app_execute_xpos>
<app_execute_ypos>0</app_execute_ypos>
<is_widget_position_locked>FALSE</is_widget_position_locked>
<num_displays>1</num_displays>
<max_displays>4</max_displays>```

I noticed that <synergy_jpeg_decoder>2</synergy_jpeg_decoder> is set, but there is no widget to change that.

@int-bio you need to click on the Advanced Settings button and turn off the hardware jpeg decoder:

The settings in your Eclipse/e2Studio project need to match the settings in your GUIX Studio project, and unfortunately they are not automatically synched. So if you are turning off the hardware jpeg decode ip, then you also need to turn this off in the GUIX  Studio project. Let me know if that takes care of the issue.

Not a bug, operator error.  Thank you.


Unable to run android app with custom Application

From @syncro on November 4, 2016 6:38
When I'm trying to run newly created application with changes made by the following doc:  https://docs.nativescript.org/runtimes/android/advanced-topics/extend-application-activity
It fails with the following error:
Successfully synced application org.nativescript.customapp on device emulator-5554.
11-04 13:28:02.383  2053  2474 W System.err: 	at org.chromium.base.BuildInfo.getPackageVersionCode(BuildInfo.java:74)
11-04 13:28:02.383  2053  2474 W System.err: 	at org.chromium.net.X509Util.nativeRecordCertVerifyCapabilitiesHistogram(Native Method)
11-04 13:28:02.383  2053  2474 W System.err: 	at org.chromium.net.X509Util.bns(X509Util.java:224)
11-04 13:28:02.383  2053  2474 W System.err: 	at org.chromium.net.X509Util.atX(X509Util.java:188)
11-04 13:28:02.383  2053  2474 W System.err: 	at org.chromium.net.X509Util.verifyServerCertificates(X509Util.java:453)
11-04 13:28:02.383  2053  2474 W System.err: 	at org.chromium.net.AndroidNetworkLibrary.verifyServerCertificates(AndroidNetworkLibrary.java:155)
11-04 13:28:04.647  2812  2812 W PackageManager: Unknown permission android.permission.RUN_INSTRUMENTATION in package org.chromium.webview_shell
11-04 13:28:04.926  2812  2853 W PackageManager: Unknown permission android.permission.RUN_INSTRUMENTATION in package org.chromium.webview_shell
11-04 13:28:05.629  2937  2937 V WebViewFactory: RelroFileCreator (64bit = false),  32-bit lib: /system/app/webview/webview.apk!/lib/x86/libwebviewchromium.so, 64-bit lib: /system/app/webview/webview.apk!/lib/x86_64/libwebviewchromium.so
11-04 13:28:05.666  2951  2951 V WebViewFactory: RelroFileCreator (64bit = true),  32-bit lib: /system/app/webview/webview.apk!/lib/x86/libwebviewchromium.so, 64-bit lib: /system/app/webview/webview.apk!/lib/x86_64/libwebviewchromium.so

Steps to reproduce:

create new app with tns create and add android platform
add app/application.android.js

var application = require("application");

var superProto = android.app.Application.prototype;
// the first parameter of the `extend` call defines the package and the name for the native *.JAVA file generated.
var Application = android.app.Application.extend("org.myApp.Application", {
    onCreate: function() {
        superProto.onCreate.call(this);

        // initialize the modules with the custom application object
        application.android.init(this);

        // Enter custom initialization code here
    },
    attachBaseContext: function(base) {
        superProto.attachBaseContext.call(this, base);
        // This code enables MultiDex support for the application (if needed)
        // android.support.multidex.MultiDex.install(this);
    }
});

change app/App_Resources/Android/AndroidManifest.xml to have the following line:
<application
android:name="org.myApp.Application"
run with

tns livesync android --emulator --watch
Copied from original issue: NativeScript/NativeScript#3018

Hey @syncro there is an issue with the example provided in the docs, or rather an oversight on our end, as that particular is outdated.
Calling application.android.init(this) inside onCreate of your extended app will try to initialize the nativescript modules used throughout a nativescript app, but at that point modules have already been initialized, hence the exception. Removing the following line seems to solve that problem:
 // initialize the modules with the custom application object
 application.android.init(this);

I'd also like to suggest against using livesync as means to develop and run your application if you are constantly changing implementation of extended classes, because changes to your native classes will not reflect until your javascript files have been analyzed again by running a full build again (either by running tns run android or tns build android)
Let me know if this helped you move on, or if there is something else that you need assistance with!

@syncro have you been able to solve the problem and move on?


Typo

Hopefully I'm not misunderstanding, but the instructions are for commands that should be ran on controller nodes but says worker node. Caused a bit of confusion during the tutorial.

@shabtu I think you are misunderstanding here. This step is creating the ClusterRole that grants the kubernetes API Server (running on the controllers) access to the kubelet API (running on the workers).
Probably could clarify the text like such:

In this section you will configure RBAC permissions to allow the Kubernetes API Server to access the Kubelet API that is running on each worker node. Access to the Kubelet API is required for retrieving metrics, logs, and executing commands in pods.


--get-filename returns incorrect filename if output file gets merged

[x] I've verified and I assure that I'm running youtube-dl 2016.12.15
[x] At least skimmed through README and most notably FAQ and BUGS sections
[x] Searched the bugtracker for similar issues including closed ones

What is the purpose of your issue?

[x] Bug report (encountered problems with youtube-dl)
[ ] Site support request (request for adding support for a new site)
[ ] Feature request (request for a new functionality)
[ ] Question
[ ] Other

$ youtube-dl --get-filename https://www.youtube.com/watch?v=HEv_9fQBWVY
CrossFit for Chickens-HEv_9fQBWVY.mp4
$ youtube-dl https://www.youtube.com/watch?v=HEv_9fQBWVY
[youtube] HEv_9fQBWVY: Downloading webpage
[youtube] HEv_9fQBWVY: Downloading video info webpage
[youtube] HEv_9fQBWVY: Extracting video information
[youtube] HEv_9fQBWVY: Downloading MPD manifest
WARNING: Requested formats are incompatible for merge and will be merged into mkv.
[download] Destination: CrossFit for Chickens-HEv_9fQBWVY.f136.mp4
[download] 100% of 16.32MiB in 00:00
[download] Destination: CrossFit for Chickens-HEv_9fQBWVY.f251.webm
[download] 100% of 1.36MiB in 00:00
[ffmpeg] Merging formats into "CrossFit for Chickens-HEv_9fQBWVY.mkv"
Deleting original file CrossFit for Chickens-HEv_9fQBWVY.f136.mp4 (pass -k to keep)
Deleting original file CrossFit for Chickens-HEv_9fQBWVY.f251.webm (pass -k to keep)

The --get-filename function should check if mkv merge is needed, and return a proper filename.

Duplicate of #5710.


add 'awning' and 'other' support

This is simple additional support for shutters registered in tydom as awnings.
They are the same modules, working exactly the same way, they have just been categorized differently.
For 'others' devices, this is a support for 0-100 modules (light, on/off, variation, etc.), push buttons ahead.

Hi,
Thank you for your contribution :)
LGTM 👍


Kubernetes documentation: prepare end-to-end cases for users to getting started with vineyard on Kubernetes

Describe your problem
as titled.

Closed via https://github.com/v6d-io/v6d/pull/1130 , https://github.com/v6d-io/v6d/pull/1163


spike: feature abundance in vector tiles [MRXN23-203]

PoC for amount-per-PU in tiles
Feature relevant tickets
https://vizzuality.atlassian.net/browse/MRXN23-203

Checklist before submitting

[ ] Meaningful commits and code rebased on develop.
[ ] If this PR adds feature that should be tested for regressions when
deploying to staging/production, please add brief testing instructions
to the deploy checklist (docs/deployment-checklist.md)
[ ] Update CHANGELOG file

this was just an initial spike/PoC: final implementation was done in #1490


RBD image feature set mismatch

Hi,
Great work.
I followed your instructions (only to change names of the servers to mon-1--3 and osd-1--3).
I got the status as HEALTH_OK with three osd in and up.
When I tried to map a rbd I got this.
Do you have the same issue? Do you know how to fix it?
In the general term, how do you manage virtualbox ubuntu VM to manage drives?
vagrant@ceph-client:~$ sudo rbd create foo --size 4096 -m mon-1
vagrant@ceph-client:~$ sudo rbd map foo --pool rbd --name client.admin -m mon-1
rbd: sysfs write failed
RBD image feature set mismatch. You can disable features unsupported by the kernel with "rbd feature disable".
In some cases useful info is found in syslog - try "dmesg | tail" or so.
rbd: map failed: (6) No such device or address

need to do this
rbd create --size 4096 docker_test --image-feature layering

@gator1 thanks, it took a while to find this issue


[AMBARI-22985] Quick links should be grouped by namespace

What changes were proposed in this pull request?
Currently quick links are grouped by host. These groups in their part should be grouped by namespace (if any).
How was this patch tested?
Tested on real clusters with and without NameNode Federation.
UI unit tests:
21380 passing (23s)
48 pending

Refer to this link for build results (access rights to CI server needed):
https://builds.apache.org/job/Ambari-Github-PullRequest-Builder/586/
Test FAILed.
Test FAILured.

retest this please

Refer to this link for build results (access rights to CI server needed):
https://builds.apache.org/job/Ambari-Github-PullRequest-Builder/593/
Test FAILed.
Test FAILured.

retest this please

Refer to this link for build results (access rights to CI server needed):
https://builds.apache.org/job/Ambari-Github-PullRequest-Builder/609/
Test FAILed.
Test FAILured.

retest this please

Refer to this link for build results (access rights to CI server needed):
https://builds.apache.org/job/Ambari-Github-PullRequest-Builder/618/
Test FAILed.
Test FAILured.

CI failure not related to changes, AMBARI-22918 broke it.


Update to Openshift Pipelines 1.8

/retest

/retest

/retest

the pac cache job is maybe in a weird state ... going to re-run just in case
/retest

the weirdness had no bearing it appears
the 3 push jobs were successful and I see the new images on quay.io/redhat-appstudio


[docs]format doc style of execution_mode.md

What is the purpose of the change
Using backticks for Chinese makes the document unsightly, as you can see in https://nightlies.apache.org/flink/flink-docs-master/zh/docs/dev/datastream/execution_mode/ and I don't know if I need to create a jira issue to associate this pr, cause I think this is a very trivial fix.
Does this pull request potentially affect one of the following parts:

Dependencies (does it add or upgrade a dependency):  no
The public API, i.e., is any changed class annotated with @Public(Evolving): no
The serializers: no
The runtime per-record code paths (performance sensitive): no
Anything that affects deployment or recovery: no
The S3 file system connector: no

Documentation

Does this pull request introduce a new feature?  no

LGTM


feat(bld): add languageCode option for Windows

Set Windows properties correctly (previously version property was used to incorrectly set ProductVersion)
Set productVersionMS and productVersionLS correctly

about productVersion, set it correctly by vi.setProductVersion(app.productVersion, app.languageCode).
test options:
nwbuild({
    mode: "build",
    version: "0.50.3",
    ....,
    app: {
        productVersion: "<IP_ADDRESS>",
    },
})

before:
you can see it, the product version string was set correctly, but the product version code was not.

after:

Great, thanks! I actually wanted to know the difference between ProductVersionLS and ProductVersionLS which you mentioned in the PR description. Here is what I found out about the two:太好了，谢谢！我实际上想知道您在 PR 描述中提到的 ProductVersionLS 和 ProductVersionLS 之间的区别。以下是我发现的关于这两者的信息： https://learn.microsoft.com/en-us/dotnet/api/microsoft.visualstudio.debugger.dkmmoduleversion.productversionls?view=visualstudiosdk-2022 https://learn.microsoft.com/en-us/dotnet/api/microsoft.visualstudio.debugger.dkmmoduleversion.productversionms?view=visualstudiosdk-2022

I don't know the difference between them either. I just see it at:
https://github.com/jet2jet/resedit-js/blob/2b80e09ff34bbbc91b28a3acddc294f2960b85a0/src/main/resource/VersionInfo.ts#L1021

I add back the version property. In addition, I also .make docs and code logic consistent.


About time to write auto-fix mechanism (commandline option '--fix')

Step 1: https://github.com/duaraghav8/Solium/commit/37fb04b03e4266cbe2d52887377b265af98d7c42

Auto-fix ApI for rule dens & --fix option in cli are now ready 💃


Update OS X binary to fix elm-package issue

There was a bug with the OS X Installer that led to an elm-package binary which tried to use a specific IP for http://package.elm-lang.org - an IP that is now stale, since that server has moved. See https://groups.google.com/d/msg/elm-dev/zcba_EPBYec/bEYmj4z2Nm8J for more info.
This repo should presumably update to use the fixed OS X binary!

I wouldn't worry about it too much with 0.15.1 coming out.

Obviated by https://github.com/kevva/elm-bin/issues/23


Add more instructions to README

This pull request adds instructions to resubmit an upload for retesting, and for creating the vmchecker instance for a new school year.

Can this be re-merged or do I have to open a new pull request?


running 'make all'  on CentOS  fails to compile

I checked out the repository, then after running
make all  I get the following errors
:
g++ -fPIC -D_GLIBCXX_USE_CXX11_ABI=1  g++: fatal error: no input files compilation terminated. make: *** [../../sonLib/lib/sonLib.a] Error 1
it seems like some sort of issue with the make files
I am having to make from source because I do not have root access on the server and a compilation is needed for 'hal'

this looks like you do not have sonLib pre-compiled in the required adjacent
directory, so some rule in hal is trying to build it.
HAL is also available pre-compiled in the binary cactus distribution
Nheyer<EMAIL_ADDRESS>writes:

I checked out the repository, then after running
make all  I get the following errors
:
g++ -fPIC -D_GLIBCXX_USE_CXX11_ABI=1  g++: fatal error: no input files compilation terminated. make: *** [../../sonLib/lib/sonLib.a] Error 1
it seems like some sort of issue with the make files
I am having to make from source because I do not have root access on the server and a compilation is needed for 'hal'

I am trying to compile sonLib directly as per the instructions in the HAL and directly invoking make to create the above mentioned sonLib binaries when I am getting this error. I am attempting to convert a hal file into vg format for viewing, but cactus dosn't include  hal2paf or seqwish ( why I am installing HAL )

the master branch compiles find for me on centos 7.0
try just removing it an checking it out again.
if that does not fix it, please attach the output of
make -d

I just (re)tried that and no success here is both the standard error output and standard output
LOG_STDOUT.txt
LOG_STDERR.txt

this is very weird
This implies that in
sonLib/C/Makefile
this isn't set:
cppSources = impl/*.cpp
would you run it again, with -p instead of -d?

here you go, I am running this on UCSC's courtyard server by the way
LOG_STDERR-ran_with_p.txt
LOG_STDOUT-ran_with_p.txt

here you go, I am running this on UCSC's courtyard server by the way

Ah!  well, I was about to say, I can't debug this remotely, can't you
talk to a local make expert.
well, I guess that is me!!
mail me at<EMAIL_ADDRESS>and we will figure out how to connect
by slack or something

For anyone getting the same issue down the line this ended up being caused by a  "\n" in the environment variable CXX_ABI_DEF ,  make sure this is not the case


Possible New Term: Mallory Body

I've come across Mallory body several times (and found five annotations with Mallory) and am wondering if it should be a new term. Based on the wiki definition:
Mallory body: damaged intermediate filaments within the hepatocytes. They are inclusions in the cytoplasm of liver cells.
synonym: Mallory-Denk body, Mallory's hyaline
child under maybe abnormal hepatocyte morphology? or under abnormal liver morphology? I'm not sure if they are limited to only the hepatocytes.
Reference: J:90905
Thanks,
Monika

New term added:
Mallory bodies MP:0014045


6.8.11 Release

This PR prepare 6.8 branch for 6.8.11 release:

bump chart and Docker images version from 6.8.11-SNAPSHOT to 6.8.11
remove notices on README that this is a development branch and development branch specific install instructions

Note

remove notices on README that this is a development branch and development branch specific install instructions

This is required because released Helm charts will be packaged from this PR commit including the README files that will be available inside the chart packages and in Helm Hub pages (example: Elasticsearch chart page).
This change will be reverted in the next PR after release when we will bump 6.8 branch to 6.8.12-SNAPSHOT version.

6.8.11 as the default stack version
Some documentation fixes and improvements in #690 (@fatmcgav)
Some improvements in CI tests jobs in #687 (@jmlrt) , #715 and #708 (@fatmcgav)

APM Server

PR
Author
Title

#686
@jim-barber-he
Add ServiceAccount annotations

Elasticsearch

PR
Author
Title

#655
@mephinet
podSecurityContext.runAsUser needs to be nulled as well for Openshift

#686
@jim-barber-he
Add ServiceAccount annotations

#665
@desaintmartin
Set PVC labels through setting all StatefulSet labels to its volumeClaimTemplate

#727
@fhaase2
Update test image pull policy

Filebeat

PR
Author
Title

#686
@jim-barber-he
Add ServiceAccount annotations

#704
@bmilescu
Add permission to list nodes

#699
@jmlrt
Document probe workaround for Kafka output

Kibana

PR
Author
Title

#726
@debojitkakoti
Add loadbalancerIP to Service spec

Logstash

PR
Author
Title

#686
@jim-barber-he
Add ServiceAccount annotations

#695
@jmlrt
Add headless service for StatefulSet

#712
@kksudo
Support creating secrets

#723
@kksudo
Restart pod when the secrets have changed

Metricbeat

PR
Author
Title

#686
@jim-barber-he
Add ServiceAccount annotations support

#713
@kernkonzentrat
Add DaemonSet and Deployment annotation support

#716
@erihanse
Make DaemonSet and Deployment optional

#387
@SergK
Make kube-state-metrics optional

Thank you for submitting an entry to our competition. Your entry has been safely received and we will be in touch in due course if you are selected.
Best regards,
The Nature Communications Editorial Team


dev: refactor test contracts deployment

When we deploy any kind of account, we need deploy a native_token and the kakarot_core contract because the generic Account's initialize function reads from KakarotCore storage to approve spending of the native token.
When we interact in any way with the Kakarot State, we need to set_contract_address the test runner to the kakarot contract.

This pattern is often used when testing some features that require access to the Starknet state:
    let native_token = deploy_native_token();
    let kakarot_core = deploy_kakarot_core(native_token.contract_address);
    testing::set_contract_address(kakarot_core.contract_address);

You will implement a test utils that performs these 3 operations in a single function. This util will then be called as
let (native_token, kakarot_core) = setup_contracts_for_testing()

Hey, happy to do this one!


Update Riot comparison

Animation - this is no longer true, they have https://github.com/riot/animore
Routing - the router API has been extended to allow for subroutes and parameters just like Vue does.

I'm not sure if one can see the more loosely defined expressions in Riot as an advantage or disadvantage.
I however, found that it is a lot simpler to do bindings in riot. <todo-list text={text}> vs <todo-list :text="text">.
Riot is generally more flexible and requires less syntax to learn. Same for event handlers:

 vs

However. One advantage to note, would be, that the event handling in Vue has more benefits (e.g. @keyup.enter or @click.prevent,  and even @click="doSomething()" etc) which is not possible in riot.

Thanks! I removed the last advantage added for Vue, simply because there are many, many ways that Vue's API offers more convenience and I worry it can sound like nit-picking when we don't highlight small little features of Riot that may offer an advantage over Vue.


SPIKE - Investigate options for AzureAD with AWS API Gateway ( WIP)

User Story
As a data producer / controller I want to securely register  data product and upload data
Value / Purpose
The existing authentication functionality relies on a single token verification within the Lambda authorizer. This setup lacks robust security since it doesn't allow us to track the user who uploaded data using a presigned URL.
To address this, we are initiating a spike to explore the integration of Azure AD with the API Gateway for the purpose of forwarding JWT tokens.
Hypothesis
We plan to implement user authentication by utilizing Azure AD in conjunction with the API Gateway.
Checklist

[ ]  Please follow the guidelines outlined in the article at https://awskarthik82.medium.com/how-to integrate-azuread-b2c-with-aws-api-gateway-jwt-authorizer-26d7534399a.

[ ]  Utilise the RestAPI and create a custom authorizer since a JWT authorizer is not an option for REST API.

[ ]  The focus of this ticket is solely on authenticating users. The permission model is outside the scope of this task.

[ ] Build temporary localhost client page for App reg

[ ] If you don't have permission to reg apps in Azure Ad, please get help  ( @jemnery )

Definition of Done

[ ] Complete POC
[ ] Get it Reviewed with TA ( @jemnery )

make sure to check in with appsandtools

Spoke to Julia and this is the agreed plan


Implement TypeORM stores

Description
Use TypeORM to implement a unified infrastructure.
Motivation

Allows contributors a much easier approach to implementing integration with data sources supported by TypeORM. As it stands, TypeORM supports about 20 different stores.
Will allow users to read and write configurations from a variety of different stores supported by TypeORM. Some of these are highly popular such as Postgres, MySQL, and more.

Additional context

[x] Implement a base interface that enables I/O capabilities against stores supported by TypeORM.
[x] Implement support for stores that support upserts inherently. According to the TypeORM docs, these include stores that use the AuroraDataApi, Cockroach, Mysql, Postgres, and Sqlite database drivers.
[ ] Implement support for MySQL, CockroachDB, Postgres, MariaDB, SQLite, oracle, and MSSQL.

The following issue was encountered while attempting to implement oracledb:

I decided to sideline the implementation and leave it as a future issue


Merge master into 2.0 dev

@samtstern Any chance you can merge master into dev so we can take advantage of the new gradle wrapper and prettier starter activity? I know you prefer to do this from the CLI, but I wasn't sure where to put this request so I created a PR for it anyway. Thanks!

Will do it from the CLI

Awesome, thanks!

Done!  Github even knew what I was up to and marked this as merged.

Ooooh, fancy!


bug: group invite only appear for a split second, then disappear in UI

this is not reproducible on dev and prod anymore
in this commit i did some optimization of fetching user metadata. I suspect the issue was caused by a race condition in fetching users meta, let's see if this fixes it.


Sound Classifier Data Augmentation

The sound classifier should do data augmentation by default and give the users control over how it is done.
Adding pink noise and reverb are probably the two most important augmentation methods. Adjusting the volume levels would also be useful.
If we are doing data augmentation, we probably should not be doing channel averaging at training. Instead we should treat each channel as a separate example.

@ylow also had the idea of using randomly placed windows.


Update workflow: Updating via URL or git branch/tag

Expected behavior
I'd like to only use a specific git release branch/tag (or URL) and later manually update.
Actual behavior
Currently, I do not see an option to either:

set the URL to another one: E.g. updating from istio 1.1.0 to 1.2.0 by changing the URL from https://github.com/istio/istio/tree/1.1.0/install/kubernetes/helm/istio-init to https://github.com/istio/istio/tree/1.2.0/install/kubernetes/helm/istio-init
specifying git branch/tag

One could ship init again, however base directory has to be deleted or --rm-asset-dest be used. Further, the helm namespace is not stored. I'm uncertain if values are persisted when using this "update" mechanism.
Information

Ship version: 0.44.0
Docker version: n/a
Command line run: n/a

Steps to reproduce the behavior
n/a

I just noticed that when using ship update it automatically fetches a new release. How does it determine the new version? By checking out the latest SemVer Tag?
It would be great if it were possible to manually set which version (tag/branch) it uses and also to change the URL as well.
A ship status command perhaps could help to identify the URL and currently loaded version to make this information easily accessible to the user.

@Timoses Ship uses the v1.upstream field in .ship/state.json. For semver-tagged charts like Istio, it will in general fetch the latest when running ship update or ship update --headed. There is also a ship edit command that can be used to modify your config without fetching a new version of the upstream.

Thanks for explanation @dexhorthy .
So it is actually not possible to track a specific branch or tag. Well, initially when using ship init URL it will use the tree/commit/... specified in the URL. But since the URL is stored in the state as __latest__ a ship update will simply jump to the latest commit on a ship update.
I found this issue: https://github.com/replicatedhq/ship/issues/784
I believe that already resolves around the same issue. So feel free to close this issue.

Aye, you've got it I think. One small correction that is unfortunately not documented anywhere is that __latest__ means "fetch the latest tagged semver release", not necessarily the latest commit. Anyhow, I think you're on to something in #784 , so we can continue over there.


Improve UI/UX of Login Page

Tasks for Enhancing the Fit-Track Login Page

[x] Visual Design:

[x] Update the visual design of the login page to make it more modern and attractive.
[ ] Improve layout, typography, color schemes, and form elements to create a visually appealing interface.

[ ] User Experience:

[ ] Enhance the usability of the login page by making the form more intuitive.
[ ] Add features such as error messages, loading indicators, and form validation to improve user interaction.

[ ] Accessibility:

[ ] Ensure the login page is accessible to all users, including those with disabilities.
[ ] Add appropriate ARIA roles, ensure sufficient contrast, and make the form keyboard navigable to meet accessibility standards.

Feel free to reach out with questions or for more details. We look forward to your contributions to improve the Fit-Track login page!

Hi!
I can fix this. Please assign it to me.

Hey! assigned the issue

hello, is this issue still open? can i work on this?

hello, is this issue still open? can i work on this?

Hi, this issue is still open. Please enhance the interactivity of the Login and SignUp pages for Fit-Track users. Could you make sure that the pages are fully responsive before pushing the updates?

alright. what exactly is the color scheme for Fit-Track?

alright. what exactly is the color scheme for Fit-Track?

Use 60-30-10 rule if possible. As of now it is entirely in bootstrap UI.
Grey - 60
Red - 30
Blue - 10

hello! does this look okay or do you prefer the darker ui ?

here's the form with a bit of updates - when you click on the emoji, it changes to some fitness related emoji. this interactive element is to keep  the user engaged while they login. choose between 1 and 2
1

or 2

here's the form with a bit of updates - when you click on the emoji, it changes to some fitness related emoji. this interactive element is to keep  the user engaged while they login. choose between 1 and 2
1

or 2

Image 1 looks good. In future, I'll be implementing dark mode so for now keep it light theme. The design is fine. Once after checking the login works fine give me a PR. If possible change the signup component too the same.

Great! I'll work on it!

revamped the sign-up page. added a progress bar with some fitness related messages.
pages are responsive
database connection im havent looked into
colors i hope are according to your theme, i can make changes if you like

Hi @redfyel,
Thanks a lot for the UI redesign of Fit-Track . It looks great and works really well. I appreciate your efforts! Happy Contributing 🌟❤

Hi Narain,
I hope you’re doing well. I see that the issue on enhancing the Fit-Track login page is still open, and I’d like to express my interest in working on it.
Specifically, I would like to focus on:
Improving Layout, Typography, Color Schemes, and Form Elements

Hi @m7md-Y-3mra,
We've recently improved the login design, but if you have any ideas for a more engaging version, feel free to give it a try. Also, if you could work on the UI/UX of the inner components, that would be great. Since I'm currently migrating from Bootstrap to MUI, it would be helpful if you used MUI for the CSS framework.
Feel free to reach me, if you find any bugs or enhancements you'd like to work on. 🌟🤝

Hi @redfyel,
Thanks a lot for the UI redesign of Fit-Track . It looks great and works really well. I appreciate your efforts! Happy Contributing 🌟❤

appreciate it!

If you'd like assistance with redesigning the entire website and working on the inner components using MUI, I’d be happy to help with that as well.

If you'd like assistance with redesigning the entire website and working on the inner components using MUI, I’d be happy to help with that as well.

Sure, If possible come up with a mockup design first before working on the code. Then we can start to develop the code. Feel free to reach me out .🤝

I came across a great design for a sports website with some inspiring colors and fonts that I think would work well for this project.
I prefer to use Tailwind CSS for styling, as it offers flexibility and speeds up the development process. I’ll upload the image I found so you can have a look at the design direction I’m aiming for.
Let me know if this works for you!

I came across a great design for a sports website with some inspiring colors and fonts that I think would work well for this project.
I prefer to use Tailwind CSS for styling, as it offers flexibility and speeds up the development process. I’ll upload the image I found so you can have a look at the design direction I’m aiming for.
Let me know if this works for you!

Sounds good! Tailwind CSS is also a great option for the CSS framework. Once you share the design, we can review it and decide on the next steps for development. I’ll need to assign it as a task in the project afterward.

If you still can’t see the image, you can also check it out directly from this link:
Sport Landing Page Design

If you still can’t see the image, you can also check it out directly from this link: Sport Landing Page Design

Exactly! How you're trying to incorporate this design in Fit-Track? This design as Landing Page and route to application after certain button?


SA1000 conflicts with IDE0055 for simplified constructor calls

VS2019 suggests that
private readonly Type _typeInstance = new ();
is incorrect and should be
private readonly Type _typeInstance = new();
StyleCop suggests that
private readonly Type _typeInstance = new();
is incorrect and should be
private readonly Type _typeInstance = new ();
When it comes to simplified constructors, I think VS is correct.
Is there a way to configure StyleCop Analysers to unify the suggested outcome?

IMHO, the new keyword should have a rule that says that it needs to be followed by a space (classic new syntax), unless what is following is an open parenthesis (method call syntax).

FWIW the StyleCopAnalyzers people opted to fix this on their end (but the fix is still only available in a beta version of their nuget package).
https://github.com/DotNetAnalyzers/StyleCopAnalyzers/pull/3187


feat(decompress): adding functions to decompress stach results

 Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.You have signed the CLA already but the status is still pending? Let us recheck it.


get away from using global vars

Removing it as it is not a focus right now (want to reach feature parity first)


Add context argument to webhooks process function for Cloudflare workers

WHY are these changes introduced?
Implements: #877
WHAT is this pull request doing?
Implements a context argument to webhooks process function to support cloudworker contexts and env variables.
Type of change

[ ] Patch: Bug (non-breaking change which fixes an issue)
[x] Minor: New feature (non-breaking change which adds functionality)
[ ] Major: Breaking change (fix or feature that would cause existing functionality to not work as expected)

Checklist

[x] I have used yarn changeset to create a draft changelog entry (do NOT update the CHANGELOG.md file manually)
[x] I have added/updated tests for this change
[x] I have documented new APIs/updated the documentation for modified APIs (for public APIs)

Seems like we're missing passing the context in the internal call to call the handlers. I think we can approve / merge once that's fixed!

@paulomarg fixed, good catch.

@paulomarg pushed to an internal fork instead of the public one, all changes on main have been pull in as well.


Feature: Transactions browser

Fixes #135 - This PR introduces the browsing feature for transactions of blocks and addresses by separating the transaction query logic.

@rhyslbw the issue you mentioned is fixed and i completely refactored and simplified all browsing code + wrote specs for it 👍

@DominikGuzei
Landing on the last page makes the navigation disappear, replaced with 'No Transactions`


FR: Reload Custom Dictionary automatically

Hope I am creating not too many issues? It's only that I really love the usefulness of this plugin 🙂
So an idea I had was to automatically reload the custom dictionaries, since it's a bit annoying to always refresh it manually. Maybe simply reload it when one of the files marked as dictionary has been modified, if it is possible to define such a trigger?

Nice feature requests are always welcome! (but I can't promise to implement them all. 😅 )

it's a bit annoying to always refresh it manually

Agree perfectly. So I will attempt to solve the problem by reloading (only a added word) after adding a word to the custom dictionary by #67.


Bug with media range requests: content-length is returning negative values

This bug is affecting production systems.
Visible effects include the audio on the listen page not loading properly. The error seems to happen the first time the audio is loaded and loads fine after a page request. I have worked out Chrome sends different range request headers don't know why our request range code is different in the two different scenarios:

Action
Range request header
Content-Length
Content-Range
Response

Next button click
Range:bytes=0-
Content-Length:512001
Content-Range:bytes 0-512000/591513
206 Partial Content

Range:bytes=512001-
Content-Length:20
(empty)
502 Bad Gateway

Same page refresh
Range:bytes=0-
Content-Length:591513
Content-Range:bytes 0-591512/591513
206 Partial Content

I can't determine why the range-request behaviour is different for the different requests.
The response from the server is a 502 Bad Gateway response. After intense debugging, it seems some part of the ruby codebase is returning a negative content-length for the second response:
Content-Range: bytes<PHONE_NUMBER>1/591513
Content-Length: -432489

Importantly: The rails application sends these response headers back without throwing an exception. Passenger freaks out and this case responds with a generic bad gateway response that masks the error. The only way I found to get the above header information was to change passenger_log_level to level 7 (that level may not be required, but it needs to be greater than 3).
Tasks

Isolate a test case against our range request code
Patch the bug
Investigate throwing exceptions in our code so these sorts of header based errors generate email notifications in the future

Update: I've worked out why the page refresh works.
On page refresh, the browser cache kicks in. The first partial content response counts as a success and must be cached successfully, even though the second part of the partial content response fails. The cached response only contains a partial amount of the correct data - the missing data from the second response is not included!
When the cache is not involved, the data is being read by the media element... the first request succeeds, while the media is playing, the second partial content request fires, and an error occurs, and the media element stops playing immediately (after about two seconds) even though most of the audio response is available.
Sudden 💡 idea 💡: this may be related to https://github.com/QutBioacoustics/baw-client/issues/281
The same behaviour is demonstrated in the chrome auto generated page for a media download link from the listen page:

with cache: the audio plays successfully the second time around
without cache:

the audio never gets past a few seconds of playback
the last segment of the audio never downloads (see https://gyazo.com/7ab7f4aab5d777c1a017af36dc45fffe) which perfectly explains  https://github.com/QutBioacoustics/baw-client/issues/281

This doesn't completely explain the problem. I suspect this bug is only happening when the requested media is of high enough quality to trigger partial byte range requests.

Bug patched in 02a215820734de7c012b966f2a0d1598d97dbd84 - waiting for review.


checker(dm): Replace URL in error

What problem does this PR solve?

Issue Number: close #10210
What is changed and how it works?
The other options would be to:

Check the LC_ALL environment variable and based on that use a localized URL.
Use a GNU Gettext like system for localization

Not addressed in this PR, But it might be good to do the following when using MySQL:

For MySQL 8.0 and newer SET PERSIST binlog_format=MIXED might be good to persist the setting.
For old MySQL versions one needs to add this to the my.cnf to make this persistent.

Check List
Tests

No code

Questions
Will it cause performance regression or break compatibility?
Do you need to update user documentation, design documentation or monitoring documentation?
Release note
None

/cc @lance6716 @mjonss

/cc @GMHDBJD

/check-issue-triage-complete

/cc @okJiang @lichunzhu

/retest


Support for AuthEvent in OAuth2 Flow

Hi there -- first off, thank you so much for building this library! Our team loves working with it. :-D
We're running into an issue where our application cannot tell which organization a user authenticates in the OAuth2 flow. This occurs when a user has multiple connections to our application. We're missing a way to examine the JWT for an AuthEventID. We can use that ID to determine which organization a user authorized in that handshake. However, I don't see a way to examine this event in your library. Here's the response I received from Xero support for context:

So after the user performed an authentication, your app will receive an access token (JWT) which you'll need to decode to get some info.
There is one more value that you'll need to decode, authentication_event_id, which can be used to find out which tenant the user connected.
You can then use it with the GET Connections to grab the tenantId of the organisation.
Example: GET https://api.xero.com/connections?authEventId=d0ddcf81-f942-4f4d-b3c7-f98045204db4

Do you have plans to include a method for this on your Calcinai\OAuth2\Client\Provider\Xero class?
Thanks so much in advance!

Hi @rjhankison
I had been trying to understand what needs to be done to effect a solution for your question as I too had an issue with this. Today I solved that problem.
$token = $provider->getAccessToken('authorization_code', [
	'code' => $_GET['code']
]);

// Get the JWT version of the Access Token (I am calling this the raw access token)
$raw_token_string = $token->getToken();

// Decode the JWT as an array
$token_data = json_decode(base64_decode(str_replace('_', '/', str_replace('-','+',explode('.', $raw_token_string)[1]))), true);

// Retrieve the 'authentication_event_id' this can then be passed to $provider->getTenant()
var_dump($token_data['authentication_event_id']);

This will get you what you want. It is only useful when the first Access Token is retrieved as the 'authentication_event_id' changes with each refresh so you must store the Tenant ID somewhere as you would the Access Token.
As for as how this should be implemented I would assume it would make sense to implement a solution to this upstream in the league/oauth2-client repository as I believe this would be applicable for all OAuth2 integrations. If someone can correct me if I am wrong.
Thanks
Gary

Thanks Gary! Yes, we found a similar solution:
`    public static function jwtParsePayload(string $token)
{
$tokenParts = explode(".", $token);
$tokenPayload = base64_decode($tokenParts[1]);
return json_decode($tokenPayload);
//        $tokenHeader = base64_decode($tokenParts[0]);
//        $jwtHeader = json_decode($tokenHeader);
}We also noticed the same constraint around a theauth_event. We've actually just built out a UI to handle when there are multiple tenants authorized, and none are specified in the auth_event`.
Anyway, it makes me feel better knowing that you've come to the same conclusion. :)
Thanks again!

Hi all, sorry I completely missed this thread! Would you like a method like that added to the library? I'm happy to take a PR if you've done something to resolve it locally.


Fix event listener

Fix the event listener on unclickable to be a more modern javascript style.

I'm a simple man, I see javascript I thumb-down.

Think of the poor IE users!

@reddraggone9 I'd hope that the crossover between those who use IE and this website is hopefully 0.


Merge controllers

Hi Jia yi,there is a conflict needs to be resolved, please try to pull from main branch first,then merge main branch into your branch and push to your branch again


[20.03] tor-browser: disable hardening by default (#93154)

Motivation for this change
tor-browser crash with certain website (like http://planet.blogsport.de/) in 20.03
original pull request: https://github.com/NixOS/nixpkgs/pull/93154
Things done
bissected the change and backported the change that fixed this

[x] Tested using sandboxing (nix.useSandbox on NixOS, or option sandbox in nix.conf on non-NixOS linux)
Built on platform(s)

[x] NixOS
[ ] macOS
[ ] other Linux distributions

[ ] Tested via one or more NixOS test(s) if existing and applicable for the change (look inside nixos/tests)
[ ] Tested compilation of all pkgs that depend on this change using nix-shell -p nixpkgs-review --run "nixpkgs-review wip"
[x] Tested execution of all binary files (usually in ./result/bin/)
[ ] Determined the impact on package closure size (by running nix path-info -S before and after)
[ ] Ensured that relevant documentation is up to date
[x] Fits CONTRIBUTING.md.

@GrahamcOfBorg build tor-browser-bundle-bin

LGTM
just built and run this with nixpkgs review. It successfully fixes #95665 and continues to work fine for all other tested sites as well.
(sorry again for taking so long, I didn't notice this wasn't merged right away)


Replace user by<EMAIL_ADDRESS>in Ghost

Ghost is using the email instead of the user, in these cases, we should change the value of the current variable user to the email<EMAIL_ADDRESS>@prydonius @sameersbn

/assign
/ok-to-test

/lgtm


Video frames loading slowly

I noticed the frames are loaded quite slowly, therefore using the slider is not smooth at all and it can make the annotation quite difficult, even more on videos with high fps.
I saw that you use cv2.VideoCapture to load the frames from the video. It would be a great addition to use a more efficient video loading library, such as decord or PyAV.
Those two are actually python bindings for the famous FFmpeg and they are used a lot to speed up the trainings of video classification networks.

Thanks for the comment and efficient Python video libraries. We use OpenCV in the demo code for processing annotations on the backend, but the annotation tool is written in javascript and runs completely within the browser. We'll investigate options for speeding up the slider, and user experience on large and high framerate videos.

We'll investigate options for speeding up the slider, and user experience on large and high framerate videos.

The main reasons are:

The code in src/js/components/videoLoader.js shows how we cache the frames. Fundamentally, we use seeked event to load the frame via canvas and then save it to memory. This is the best/common practice but slow. The raw speed can be validated via the first demo without Vue.js.
As we introduce Vue.js, we need to make the cached frames to be responsive variables(add getters and setters) and share with all components via Vuex, which further slows the whole program.

Some solution to be explored:

It seems that a new tech called WebAssembly can be used to improve the performance of frames caching. It can run more native languages like c/cpp to speed up. Something like ffmpeg.wasm.
Applying Vue.js and Vuex making developing faster, but also leads to performance flaws. Some best practices of Vuex are not followed due to the IDE cannot detect Vue.js from raw js files, we might need to focus on that first. But the improvement cannot be guaranteed.
Maybe initially, instead of having all frames cached, we can just put a video element beneath the canvas. It uses the raw functionality of browser to load, cache, and play video. But the drawbacks are, like common video sites, the slider will be laggy, especially moving backwards.

Oh ok, the backend in python is not used in the annotation tool. Everything is done in js in the browser.
But I think it would be worth thinking of a way to give a smoother experience. Today when I load a 10 seconds video in let's say 720p 3O fps and press play, the video stutters and the shown fps is inconsistent and close to 3 or 4 fps.
From what I understand you already used a clever way using different queues to prioritize the frame caching. I wouldn't know how to improve this, but maybe the somewhat bad performances are inherent to showing the video by displaying each frames.
Maybe we could think of a way where when you move the sliders it shows underneath (as on youtube's progress bar)  thumbnails that were loaded and put in cache when you open the video.
Another idea would be to keep the video in video format, and when you move the glider we can see the video in a corner of the screen, and only when you stop moving, the frames are requested, cached and displayed.
Those are ideas that would help to search for behaviors in a video before annotating them. In my case I have maybe 100 hours of video, that I sliced in 5 min segments, but it is still hard to see quickly if there are interesting behaviors in a video as it stutters and you might miss some.
Oh and one last question, today what is the loading spinner in the top right meaning ? Should it stop spinning after a while when all the frames are cached ?
Thanks a lot for this tool, I would be happy to discuss it more if needed

Oh I didn't see your answer David. Thank you for the technical clarification, I see you already have thoughts and ideas on how to improve that.

Oh and one last question, today what is the loading spinner in the top right meaning ? Should it stop spinning after a while when all the frames are cached ?

Thanks for your comment:smile:, and yes, it is the caching indicator which will disappear when all frames are cached.

@antbertrand https://github.com/anucvml/vidat/commit/1fab7ace29690b78b7904960aa88d73e9eeb517b should improve the play performance. Take a try and looking forward to your reply.

A possible solution for slow scrubbing through the video:
When caching, wrap around from the current frame which should be faster if the codec is seeking from the current position.