Hello, I have problem to update a deployment

I have a problem with helm deployment.
When I add a new environment variable to the deploymemt. When I do a helm update, I have this error.
Maybe it's not a bug, but I don't understand what is the problem.
Error: The order in patch list:
[
    map[name:APP_ENV value:prod]
    map[name:MAILER_URL value:...]
    map[name:APP_VERSION value:v0-0-3]
    map[name:APP_COMMIT_SHA value:...]
]
 doesn't match $setElementOrder list:
[
    map[name:APP_ENV]
    map[name:COMPOSER_HOME]
    map[name:PHP_XDEBUG_ENABLED]
    map[name:DATABASE_DRIVER]
    map[name:DATABASE_HOST]
    map[name:DATABASE_NAME]
    map[name:DATABASE_USER]
    map[name:SECRET]
    map[name:INDEX_HOSTS]
    map[name:MAILER_FROM_ADDRESS]
    map[name:MAILER_FROM_NAME]
    map[name:UPLOAD_DIR]
    map[name:ARCHIVE_DIR]
    map[name:CATALOG_STORAGE_DIR]
    map[name:ASSET_STORAGE_DIR]
    map[name:TMP_STORAGE_DIR]
    map[name:UPLOAD_TMP_DIR]
    map[name:APP_VERSION]
    map[name:APP_COMMIT_SHA]
    map[name:APP_CRON]
    map[name:DATABASE_PASSWORD]
    map[name:MAILER_URL]
]
 && The order in patch list:
[
    map[name:APP_ENV value:prod]
    map[name:MAILER_URL value:...]
    map[name:MAILER_URL value:...]
    map[value:v0-0-3 name:APP_VERSION]
    map[name:APP_COMMIT_SHA value:...]
]
 doesn't match $setElementOrder list:
[
    map[name:APP_ENV]
    map[name:COMPOSER_HOME]
    map[name:PHP_XDEBUG_ENABLED]
    map[name:DATABASE_DRIVER]
    map[name:DATABASE_HOST]
    map[name:DATABASE_NAME]
    map[name:DATABASE_USER]
    map[name:SECRET]
    map[name:INDEX_HOSTS]
    map[name:MAILER_URL]
    map[name:MAILER_FROM_ADDRESS]
    map[name:MAILER_FROM_NAME]
    map[name:UPLOAD_DIR]
    map[name:ARCHIVE_DIR]
    map[name:CATALOG_STORAGE_DIR]
    map[name:ASSET_STORAGE_DIR]
    map[name:TMP_STORAGE_DIR]
    map[name:UPLOAD_TMP_DIR]
    map[name:APP_VERSION]
    map[name:APP_COMMIT_SHA]
    map[name:NEW_RELIC_ENABLED]
    map[name:NEW_RELIC_KEY]
    map[name:NEW_RELIC_FRAMEWORK]
    map[name:NEW_RELIC_APP_NAME]
    map[name:APP_CRON]
    map[name:DATABASE_PASSWORD]
    map[name:MAILER_URL]
]

Output of helm version:
Client: &version.Version{SemVer:"v2.13.1", GitCommit:"618447cbf203d147601b4b9bd7f8c37a5d39fbb4", GitTreeState:"clean"}
Server: &version.Version{SemVer:"v2.13.1", GitCommit:"618447cbf203d147601b4b9bd7f8c37a5d39fbb4", GitTreeState:"clean"}

Output of kubectl version:
Client Version: version.Info{Major:"1", Minor:"11", GitVersion:"v1.11.9", GitCommit:"16236ce91790d4c75b79f6ce96841db1c843e7d2", GitTreeState:"clean", BuildDate:"2019-03-25T06:40:24Z", GoVersion:"go1.10.8", Compiler:"gc", Platform:"linux/amd64"}
Server Version: version.Info{Major:"1", Minor:"12+", GitVersion:"v1.12.8-gke.10", GitCommit:"f53039cc1e5295eed20969a4f10fb6ad99461e37", GitTreeState:"clean", BuildDate:"2019-06-19T20:48:40Z", GoVersion:"go1.10.8b4", Compiler:"gc", Platform:"linux/amd64"}

Cloud Provider/Platform (AKS, GKE, Minikube etc.):
GKE

@henres What error is returned by the helm update command? What output do you get from helm update --debug --dry-run?

I have no error in my dry-run

This is not an error I'm familiar with. Is this possibly an error being raised by the chart itself?

Maybe related to #3805?

Had the same problem with the following output
UPGRADE FAILED
Error: The order in patch list:
[map[name:AWS_ACCESS_KEY_ID value: valueFrom:<nil>] map[name:AWS_ACCESS_KEY_ID value:<nil> valueFrom:map[secretKeyRef:map[key:aws-key name:awscred]]] map[name:AWS_SECRET_ACCESS_KEY value: valueFrom:<nil>] map[name:AWS_SECRET_ACCESS_KEY value:<nil> valueFrom:map[secretKeyRef:map[key:aws-secret-key name:awscred]]] map[name:S3_REGION value:eu-north-1] map[name:S3_REGION value:] map[$patch:delete name:DASK_DISTRIBUTED__WORKER__MEMORY__PAUSE] map[$patch:delete name:DASK_DISTRIBUTED__WORKER__MEMORY__SPILL] map[$patch:delete name:DASK_DISTRIBUTED__WORKER__MEMORY__TARGET]]
 doesn't match $setElementOrder list:
[map[name:AWS_ACCESS_KEY_ID] map[name:AWS_SECRET_ACCESS_KEY] map[name:GOOGLE_APPLICATION_CREDENTIALS] map[name:GOOGLE_CLOUD_PROJECT] map[name:EFS_HOSTNAME] map[name:S3_BUCKET] map[name:S3_REGION] map[name:S3_MAX_CACHE_SIZE] map[name:MY_POD_NAME] map[name:MY_POD_NAMESPACE] map[name:EXTRA_PIP_PACKAGES] map[name:AWS_SECRET_ACCESS_KEY] map[name:AWS_ACCESS_KEY_ID] map[name:S3_BUCKET] map[name:S3_REGION]]

Error: UPGRADE FAILED: The order in patch list:
[map[name:AWS_ACCESS_KEY_ID value: valueFrom:<nil>] map[name:AWS_ACCESS_KEY_ID value:<nil> valueFrom:map[secretKeyRef:map[key:aws-key name:awscred]]] map[name:AWS_SECRET_ACCESS_KEY value: valueFrom:<nil>] map[name:AWS_SECRET_ACCESS_KEY value:<nil> valueFrom:map[secretKeyRef:map[key:aws-secret-key name:awscred]]] map[name:S3_REGION value:eu-north-1] map[name:S3_REGION value:] map[$patch:delete name:DASK_DISTRIBUTED__WORKER__MEMORY__PAUSE] map[$patch:delete name:DASK_DISTRIBUTED__WORKER__MEMORY__SPILL] map[$patch:delete name:DASK_DISTRIBUTED__WORKER__MEMORY__TARGET]]
 doesn't match $setElementOrder list:
[map[name:AWS_ACCESS_KEY_ID] map[name:AWS_SECRET_ACCESS_KEY] map[name:GOOGLE_APPLICATION_CREDENTIALS] map[name:GOOGLE_CLOUD_PROJECT] map[name:EFS_HOSTNAME] map[name:S3_BUCKET] map[name:S3_REGION] map[name:S3_MAX_CACHE_SIZE] map[name:MY_POD_NAME] map[name:MY_POD_NAMESPACE] map[name:EXTRA_PIP_PACKAGES] map[name:AWS_SECRET_ACCESS_KEY] map[name:AWS_ACCESS_KEY_ID] map[name:S3_BUCKET] map[name:S3_REGION]]

Some names in the $setElementOrder list were duplicated. Instead of having my elements order following the order of last apparition, reordering them to the first apparition order fixed the problem.
@henres it might work if you put your MAILER_URL element after your APP_COMMIT_SHA

I'm going to close this ticket due to inactivity, but please re-open if this still needs to be addressed. Thanks!

This issue is closed but I believe my comment might help a bit.
I would like to use multiple values.yaml to override some values based on running environment.
When I pass both values.yaml and testing-values.yaml to helm upgrade I got that error.
The default values.ymal file has many env vars and the environment-values.yaml just a small number of them with some overriding ones.
UPGRADE FAILED
Error: The order in patch list:
[map[name:SALES_BONUS_API_URL value:override-by-target-environment-files] map[name:SALES_BONUS_API_URL value:https://sales-api.dev.acme.com/v1/bonuses] map[name:SALES_EXPORTS_API_URL value:overri
de-by-target-environment-files] map[name:SALES_EXPORTS_API_URL value:https://sales-api.dev.acme.com/v1/exports] map[name:PLANNINGS_API_URL value:override-by-target-environment-files] map[name:PLANNINGS_API_URL value:https://plannings-api.dev.acme.com/api] map[name:ID_MANAGER_CLIENT_ID value:sales-legacy] map[name:ID_MANAGER_ACCESS_TOKEN_URI value:https://auth.acme.com/auth/realms/acme/protocol/openid-connect/token] map[name:ID_MANAGER_SCOPE value:openid] map[name:ID_MANAGER_GRANT_TYPE value:client_credentials]]
doesn't match $setElementOrder list:
[map[name:SALES_BONUS_API_URL] map[name:SALES_EXPORTS_API_URL] map[name:PLANNINGS_API_URL] map[name:ID_MANAGER_CLIENT_ID] map[name:ID_MANAGER_ACCESS_TOKEN_URI] map[name:ID_MANAGER_SCOPE] map[name:ID_MANAGER_GRANT_TYPE] map[name:SALES_BONUS_API_URL] map[name:SALES_EXPORTS_API_URL] map[name:PLANNINGS_API_URL] map[name:PLANNINGS_DB_URL] map[name:FLOWING_DB_URL] map[name:FLOWING_DB_USER] map[name:FLOWING_DB_PASSWORD] map[name:ID_MANAGER_CLIENT_SECRET]]

The upgrade command used was:
helm upgrade "sales" sales-0.0.2.tgz --install --namespace acme-sales --values values.yaml --values minikube-values.yaml
I am not a helm expert but I figured out I couldn't  override env vars in a way I thought could be done.

I am still having this issue and it matches exactly the description above.
helm version 3.0.1
Whenever I add a new environment variable in values.yml and run helm upgrade, the patch fails with:
Error: UPGRADE FAILED: release <release-name> failed, and has been rolled back due to atomic being set: failed to create patch: The order in patch list: [env list here] doesn't match $setElementOrder list:  [env list here]
I would expect helm to be able to add a new element to the list without complaining.
Any thoughts? This is a complete show-stopper for us, as we aren't able to add any new environment variables without helm breaking our deployment pipeline. For the last month we have been fixing this by hand by destroying the release and re-installing. Thank you :)

I've just encountered this same thing upon adding env variables via the chart's default values.yaml. The strange thing about my case is that I get the error when passing the chart's default values.yaml (since I do this before passing any other values it should essentially be a no-op), but I don't get the error when I don't pass the chart's default.
An example of the failing command: helm upgrade --install --wait my-chart ./helm/charts/my-chart --namespace my-namespace -f ./helm/charts/my-chart/values.yaml -f ./ci/dev/values.yaml --set env.SOME_VAR=example-value
An example of the succeeding command: helm upgrade --install --wait my-chart ./helm/charts/my-chart --namespace my-namespace -f ./ci/dev/values.yaml --set env.SOME_VAR=example-value
Just posting this in case it will help some other poor soul.

This seems to related when you define multiple Envs with the same name. Removing the duplicates it, fixed it for me.

This seems to related when you define multiple Envs with the same name. Removing the duplicates it, fixed it for me.

In my case it was the issue with one of the containers in deployment that was completely commented out. Once removed commented section, everything worked like a charm

This seems to related when you define multiple Envs with the same name. Removing the duplicates it, fixed it for me.

@Wouter0100 do you remember by chance if you meant that you had duplicated envs only in your custom values?
I had the "doesn't match $setElementOrder list" issue and removing envs from my custom values.yaml that had the same key and value as those in chart helped solve the issue.
This is still not a desired outcome - I would expect helm to handle this OR give a clear explanation of the problem.

Same situation as @alegmal: custom value was a dupe of the value defined in the main chart. It wasn't being overwritten as it should have because our custom value was nested at a level that the default chart wasn't expecting. So it showed up as a duplicate even though we just had one instance of the value in our code.


Don't set the required PHP version to the exact patch version

Just had an issue with Travis CI where the in Composer required PHP version (set via construct) was greater than the version on the Travis CI box. Maybe we should just pinpoint the PHP version to the minor version.

I see, perhaps construct should also support minor versions as well, so you can do something like: construct generate vendor/project --php=5.6
But if you do construct generate vendor/project --php=5.6.0 everything should work fine.


HLS.JS integration

Description
I'm working on replacing our videojs implementation with vlitejs.  It's going very well, except vlite doesn't seem to have built in hls support.  I'm working around this by detecting playable media types in the browser and working around it, but am wondering how best to integrate hls.js with vlite.  Would it be as a new Provider, akin to HTML5?  Or some other method?
Of course,  I would be happy to contribute the hls provider to the open-source project.
Let me know your thoughts and thanks for the work you've done on vlite!
Steps to reproduce
Explain in detail the exact steps necessary to reproduce the issue.
1.
2.
3.
Results
Expected
Please describe what you expected to see.
Actual
Please describe what actually happened.
Error output
If there are any errors at all, please include them here.
Additional information
Please include any additional information necessary here. Including the following:
versions
vlitejs
What version of vlitejs does this occur with?
Browsers
What browser are affected?
OS
What platforms (operating systems and devices) are affected?

Hi @bcorvino,
Thanks for the note. After some tests, the HLS.js integration works according to the basic usage on the official documentation.
I created an example with Vlite.js on JSFiddle.
If that's okay with you, I'll update the README with a new streaming section.

Thanks Yoriiis, I'll take a look!

Thanks, Yoriiis, I'll take a look!  To be honest, I'm on the fence about hls vs testing for what is playable in the browser because of the size of the hls.js library.  I've been so happy with vlite.js because of it's footprint.

Thanks @bcorvino, happy to have happy users 🎉
I agree with you, the size of the HLS.js library is huge, unlike what Vlite.js offers.
I'm not sure how streaming works, but HLS.js has the merit of being turnkey for those who really need it.

I'm thinking for me, personally, it's going to come down to content length.  For short form content (< 5 mins), I think the bandwidth savings of hls streaming vs mp4 download will be negligible (hls downloads 5 second segments as the user watches, while mp4 just eagerly tries to download the whole file).   But when you get up to about 15 minutes or so, it's likely worth it to load the 100k for hls functionality to save downloading the multiple MB of video that the user may never watch.

I added a streaming section in the README and an example in the associated directory.


outline-client dmg file needed

Is your feature request related to a problem? Please describe.
Thx for building these tools but seems like I can not download the
outline-client in China's App Store[1], Apple says it is not available in China.[2]
[1] https://itunes.apple.com/cn/app/outline-secure-internet-access/id1356178125?mt=12
Describe the solution you'd like
Maybe the main reason is China's censorship, so could you provide the client dmg file on
your website as well? Thx!

Hi @houseofcode2019, the Outline macOS client requires entitlements that can only be obtained by distributing through the Mac App Store. Please see #148 for more details and a workaround to download the app. Thanks!


fs: add NSFS_MAGIC constant

NSFS_MAGIC defines the filesystem type for namespaces in Linux

Thanks for the pull request, and welcome! The Rust team is excited to review your changes, and you should hear from @Amanieu (or someone else) soon.
Please see the contribution instructions for more information.

Thanks! @bors r+

:pushpin: Commit 30b8c52be9f7ff78eb7eec2c7fa795b8d46af98a has been approved by JohnTitor
It is now in the queue for this repository.

:hourglass: Testing commit 30b8c52be9f7ff78eb7eec2c7fa795b8d46af98a with merge 183820f6330d3d7a107632dfc87ef38212046b69...

:sunny: Test successful - checks-actions, checks-cirrus-freebsd-12, checks-cirrus-freebsd-13, checks-cirrus-freebsd-14
Approved by: JohnTitor
Pushing 183820f6330d3d7a107632dfc87ef38212046b69 to master...


[WIP] fix(probe): Avoid ebpf events out of order by adding offset to time

Fixes #2827
Needs the upstream PR to be merged then vendor that change here.
The idea is described at https://github.com/iovisor/gobpf/issues/42#issuecomment-508500065 but no response in that repo so I'm making the change in a weaveworks-controlled repo.

I've been running this branch in our staging and prod environments for 12 days now, with zero "Stopping the eBPF tracker" messages.  Complete success.


如何添加眼睛和头发等脸部细节

您好，请教一下，代码生成的人脸模型没有眼睛和头发，如何添加这些面部细节，才能使得结果跟论文中呈现的一样呢。

论文中的结果是加载到游戏逆水寒中显示的结果，需要使用内部版本的游戏客户端，抱歉我们不能向外部发布该客户端。我们正在努力推进落地，使得该功能可以面向所有玩家开放，欢迎继续关注逆水寒等网易旗下的游戏。但是，您现在可以在逆水寒或天谕手游中尝试我们另一个版本的智能捏脸功能，该功能已经上线，基于论文“Face-to-Parameter Translation for Game Character Auto-Creation. ICCV 2019”及“Fast and Robust Face-to-Parameter Translation for Game Character Auto-Creation, AAAI 2020”。
The results in the paper are loaded to the game Justice for the display, we used an internal version of the game client to do so. Sorry, we cannot release this game client. We are working hard to make this feature open to all players. Welcome to continue to pay attention to NetEase's games such as Justice. However, you can now try another version of our game character auto-creation module in the games Justice and Revelation Mobile, which is already online, based on the papers "Face-to-Parameter Translation for Game Character Auto-Creation. ICCV 2019" and "Fast and Robust Face- to-Parameter Translation for Game Character Auto-Creation, AAAI 2020".

论文中的结果是加载到游戏逆水寒中显示的结果，需要使用内部版本的游戏客户端，抱歉我们不能向外部发布该客户端。我们正在努力推进落地，使得该功能可以面向所有玩家开放，欢迎继续关注逆水寒等网易旗下的游戏。但是，您现在可以在逆水寒或天谕手游中尝试我们另一个版本的智能捏脸功能，该功能已经上线，基于论文“Face-to-Parameter Translation for Game Character Auto-Creation. ICCV 2019”及“Fast and Robust Face-to-Parameter Translation for Game Character Auto-Creation, AAAI 2020”。
The results in the paper are loaded to the game Justice for the display, we used an internal version of the game client to do so. Sorry, we cannot release this game client. We are working hard to make this feature open to all players. Welcome to continue to pay attention to NetEase's games such as Justice. However, you can now try another version of our game character auto-creation module in the games Justice and Revelation Mobile, which is already online, based on the papers "Face-to-Parameter Translation for Game Character Auto-Creation. ICCV 2019" and "Fast and Robust Face- to-Parameter Translation for Game Character Auto-Creation, AAAI 2020".

多谢解惑

您好，请教一下，代码生成的人脸模型没有眼睛和头发，如何添加这些面部细节，才能使得结果跟论文中呈现的一样呢。

Hi, you mean that you trained the network without the dataset?


Serenity feature and ideas discussion (poll)

Hi everyone,
This is an open discussion about features and commands that would be nice to have next in Serenity.
So, here are some ideas:
Storage procedures

JavaScript instead of Lua (i think this only make sense to be node.js compatible)
Lua (luajit)

Extend compatibility

MSET
MGET
SCAN
INCR/DECR (highly efficient disk-readless implementation)
Redis transaction model

Replication

master-slave compatible, support Redis Sentinel
Clusterization: work in a different way (region-based, raft, autosharding, distributed transactions and so on)

Protocols

additional memcache support

Anything Else?

Taking in account Serenity storage capabilities

Scripting support should use lua since all redis like database ledisdb, nodb support lua scripting. Then all lua scripts would be it would be portable.
I think extending other redis commands is a good idea but might not as fast as other redis commands like the zrange in ledisdb is 10 times slower than the one in redis since it has to range query rocksdb unlike redis which employs skiplists for that

Storage procedures: definitely Lua (it's easier to integrate and mainly maintain and it's compatible with the whole Redis ecosystem)
Extend compatibility: extending compatibility is always good - I'd say though, that until Redis-compatible transactions are not available, Serenity won't find a broad adoption
Replication: this is a difficult topic as the current Redis supports only sharding ("partitioning"), but without (!) any cross-shard transaction support which draws sharding basically unusable for standard persistent storage DBs.
So I can imagine partitioning in Sophia/Serenity as division of the key space among several instances of Sophia running e.g. on different physical machines in different geographical locations while supporting cross-partition transactions. Without transactions it doesn't make much sense to have explicit support for partitioning as the app using Sophia/Serenity can do this key space division quite easily itself.
Protocols: in my opinion memcache is not necessary - what would be the use case?
Anything Else?: Yes, taking in account Sophia/Serenity storage capabilities, i.e. "extensions to the Redis protocol" is definitely a good idea, but in my opinion has the lowest priority as if one wants that, than she can right from the beginning use Sophia and not Serenity.


OAuth redirect url not working

👋  I've been trying to follow the instructions but getting stuck on the final hurdle, actually signing things with cosign.
When I run COSIGN_EXPERIMENTAL=1 cosign sign -oidc-issuer "https://oauth2.feelep.xyz/auth" -fulcio-url "https://fulcio.feelep.xyz" -rekor-url "https://rekor.feelep.xyz" ghcr.io/feelepxyz/code-signer:latest it opens a url that seems to include a randomly generated port in the redirect_uri, so when I follow the URL and try signing in, Dex errors with:
Unregistered redirect_uri ("http://localhost:$PORT/auth/callback").

This seems expected as this particular host + port hasn't been configured in /etc/dex/dex-config.yaml under staticClients[0].redrirectURIs.
This is my dex config:
issuer: https://oauth2.feelep.xyz/auth

storage:
  type: sqlite3
  config:
    file: /var/dex/dex.db
web:
  http: <IP_ADDRESS>:5556
frontend:
  issuer: sigstore
  theme: light

# Configuration for telemetry
telemetry:
  http: <IP_ADDRESS>:5558

# Options for controlling the logger.
logger:
  level: "debug"
  format: "json"

# Default values shown below
oauth2:
  responseTypes: [ "code" ]
  skipApprovalScreen: false
  alwaysShowLoginScreen: true

staticClients:
  - id: sigstore
    public: true
    name: 'sigstore'
    redirectURIs:
    - 'http://localhost:5556/auth/callback'
    - 'https://oauth2.feelep.xyz/auth/callback'

connectors:
- type: google
  id: google-sigstore-test
  name: Google
  config:
    clientID: $GCLIENT_ID
    clientSecret: $GCLIENT_SECRET
    redirectURI: https://oauth2.feelep.xyz/auth/callback

If I manually change the port before visiting the page to 5556, it gets to the approval page but then fails to load http://localhost:5556/auth/callback?code=yyy&state=xx.
If I change this to https://oauth2.feelep.xyz/auth/callback?code=yyy&state=xx I get a 400 back, saying the "Requested resource does not exist".

After a bit more digging, I think this change in cosign is the culprit here: https://github.com/sigstore/sigstore/pull/120
My understanding is that cosign launches a temp local server bound to a random (available) port, and sets the redirect_uri to this. This change makes sense as this port might be taken on the developers machine.
Is there a way to configure dex to allow a port range? How have you made it work on public sigstore with dex?
Possibly related fix proposed in dex but looks inactive: https://github.com/dexidp/dex/pull/1783

@feelepxyz Hi! I hope you're doing well. I actually just resolved this issue for myself.
If you log into your oauth2 server, edit your /etc/dex/dex-config.yaml file and remove the following from the staticClients:
    redirectURIs:
    - 'http://localhost:5556/auth/callback'
    - 'https://oauth2.feelep.xyz/auth/callback'

Then restart dex.service and try again.
This allowed me to get prompted for my Google account and receive a successful Sigstore response.
Sigstore Auth Successful
You may now close this page.

I've run into a different issue, but at least this allowed me to move on. I'll continue looking at the error I get now. I hope this helps!

@rebelopsio 👋  thanks will give that a go when I get things set up again. I have since deleted my GCP setup as it was costing me money. I'd like to port this tutorial to azure where I have a bunch of free credits.

Sorry for radio silence, let me know if that works @feelepxyz and thanks for the support @rebelopsio

@feelepxyz Hi! I hope you're doing well. I actually just resolved this issue for myself.
If you log into your oauth2 server, edit your /etc/dex/dex-config.yaml file and remove the following from the staticClients:
    redirectURIs:
    - 'http://localhost:5556/auth/callback'
    - 'https://oauth2.feelep.xyz/auth/callback'

Then restart dex.service and try again.
This allowed me to get prompted for my Google account and receive a successful Sigstore response.
Sigstore Auth Successful
You may now close this page.

I've run into a different issue, but at least this allowed me to move on. I'll continue looking at the error I get now. I hope this helps!

when i try removing redirectURIs, i got this error
Bad Request

Unregistered redirect_uri ("http://localhost:52394/auth/callback").

i tested with this command
COSIGN_EXPERIMENTAL=1 cosign sign \
    --oidc-issuer https://<my-dex-instance>/dex \
    --rekor-url https://rekor.sigstore.dev \
    --fulcio-url https://fulcio.sigstore.dev \
    --oidc-client-id cosign \
    --verbose \
    README.md

my config
staticClients:
      - id: cosign
        secret: __CHANGE_ME__
        name: 'cosign'
        # Where the app will be running.
        # redirectURIs:
        # - 'http://localhost:56921/auth/callback'
        # - 'http://<IP_ADDRESS>:5555/callback'


IPv6 traffic in tunnel support

Implement IPv6 traffic over VPN tunnel.
Here is a WiP branch that I can't currently test myself, so no PR, however it should mostly work. Currently conflicts with branch from #63.
https://github.com/pia-foss/tunnel-apple/compare/develop...fkooman:ipv6-tun

I switched back to master, and everything works perfectly fine, IPv6 support in tunnel: https://github.com/pia-foss/tunnel-apple/compare/master...fkooman:cert


Development - Michael Tesch updates

From Michael Tesch:

Vagrant builds for CentOS  6,7 and Ubuntu 14.04
Instructions for building on VMs
Doc updates

how is this different from #14 ?  The other pull-request is much cleaner.

I missed #14 . Will merge that first into dev.


Add solc_bisect script

Love this! thanks @AntonyBlakey and @Xanewok

nit: since scripts/bin is added to $PATH, I suggest removing .sh from the file name, to be able to call solc-bisect on the command line, same as infra.

done


Resource permission management

Description
With resource based permissions for views, the authorization system within the Security Plugin will need to handle requests that provide resource type / id data against the security roles.  How these grants are written has an impact on the administrative user experience.
This issue contains an initial proposal built in a proof of concept, but is not hard requirements for the feature.
[Proposal 1] Resource Permission Grants
With requests include resource type and identifiers the security plugin will need to allow for grants to these new types.  Modify the security role to include this information under a section resource_permissions so it can be checked and then the request can be permitted.
all_access:
  reserved: true
  hidden: false
  static: true
  description: "Allow full access to all indices and all cluster APIs"
  cluster_permissions:
    - "*"
  index_permissions:
    - index_patterns:
        - "*"
      allowed_actions:
        - "*"
  tenant_permissions:
    - tenant_patterns:
        - "*"
      allowed_actions:
        - "kibana_all_write"
  resource_permissions:
    - resource_type: "view"
      resource_ids: ["songs", "albums"]

Exit Criteria

[ ] Update to the security configuration for new resource section

@peternied Does the new permission section also need allowed_actions as well? i.e. User can search on views x, y and z? How would permission to create or delete views be handled? Will it be similar to how indices work today?
Does the resource_ids section accept wildcards or are those exact matches only?

@cwperks Thanks for the questions

Does the new permission section also need allowed_actions as well?

I avoided adding allowed_actions as I had a hard time thinking of how to express these in a way that wouldn't become hard to read given either 1) a lot of different resources and 2) a lot of different actions that can be applied to those resources.  Ways that I was considering would require sorting/ordering of values so its easy to find items.  I figure a simpler approach could be expanded after time.
To your question specifically, for the permission calculation in the prototype I used is Rest/Transport action name allowed && is the resource id in the list of allowed items.  While this prevents granular this or that kinds of permissions in a single role, maybe multiple roles is the better solution than making a single role support the more complex matrix with the traditional cluster permissions.
Example roles
read_only_view:
  cluster_permissions:
    - cluster:views:list
    - cluster:views:get
    - cluster:views:search
  resource_permissions:
    - resource_type: view
      resource_ids: ["songs", "albums"]

read_write_views:
  cluster_permissions:
    - cluster:views:search
    - cluster:views:list
    - cluster:views:create
    - cluster:views:get
    - cluster:views:delete
    - cluster:views:update
  resource_permissions:
    - resource_type: view
      resource_ids: ["*"]

Note: if you can create views its strange not to have wildcard resource access

Does the resource_ids section accept wildcards or are those exact matches only?

* is special - for match all.  I do not support wildcard matches of identifiers with the prototype.  While allowing * is pretty trivial I figured I would start with a limited a vocabulary and build up with strong justifications.
My concern about wildcard matches is that it is too easy to create something and unexpected people have permissions because of a poorly constructed match string.  When the only options are specific vs everything its much easier to interpret an access control list from a glance.

[Triage] Hi @peternied, thank you for filing this issue. This is a RFC so we can mark this triaged and label as help wanted (for community input).


"_tkinter.TclError: couldn't connect to display" and MPLBACKEND="Agg" missing in re-run command

Describe the bug
I'm actually not sure if this is a ESMValCore or an ESMValTool issue: I switched to the latest version of ESMValCore and ESMValTool yesterday and since then I get a error related to the x-server, if I try to run a diagnostic in the queue on Mistral in the log file of the diagnostic:
"self.tk = _tkinter.create(screenName, baseName, className, interactive, wantobjects, useTk, sync, use)
_tkinter.TclError: couldn't connect to display "localhost:40.0""
at the same time I saw, that "MPLBACKEND="Agg"" is missing in the "re-run" command in main_log.txt
Also including:
import matplotlib
matplotlib.use('Agg')
in the diagnostic helped to run it in the queue again, but I thought this was not the way we should solve it?
I don't think it is related to the recipe/diagnostic I used, I'll try another soon. If I do the re-run including  "MPLBACKEND="Agg"" it works (possibly also without, I have to try, on mistralpp it has access to the x-server, but not in the queue).
I don't really know where to start searching for the reason of this issue?
main_log_debug.txt
Please attach

The recipe that you are trying to run, you can find a copy in the run directory in the output directory
Github refuses to upload *.yml, see:
https://github.com/ESMValGroup/ESMValTool/tree/linatcc_for_gmdpart4/esmvaltool/recipes/recipe_li17natcc.yml
The main_log_debug.txt file, this can also be found in the run directory in the output directory

Another recipe I tried:
https://github.com/ESMValGroup/ESMValTool/blob/deangelis_for_gmdpart4/esmvaltool/recipes/recipe_deangelis15nat.yml
Stops with the same error on Mistral in the queue, i.e. without available x-Server.

The same error also occurs for:
https://github.com/ESMValGroup/ESMValTool/blob/master/esmvaltool/recipes/examples/recipe_python.yml
Therefore, it seems to be a general issue at least for python diagnostics if no x-Server is available and not related to certain diagnostics.

cheers @katjaweigel looking into this right now :beer:

ok, great!


Test now fails without IO::Socket::SSL

perl6.org now forces SSL, so the test fails: https://github.com/gfldex/perl6-pod-to-bigpage/blob/master/t/P.t
perl6/doc travis failure: https://travis-ci.org/perl6/doc/builds/177156770

I see https://github.com/gfldex/perl6-pod-to-bigpage/commit/90b76ea95b30b31f349f87e2b865795005063bb2 fixes this. Closing.


feat(fsd): add layer prefix #221

Closes: #221

:tada: This PR is included in version 7.31.0 :tada:
The release is available on GitHub release
Your semantic-release bot :package::rocket:


Native Notebooks - Editor + Output font size do not match

Steps to Repro:

Open settings (UI)
Set editor font size to 8
Open notebook, run simple print statement

Actual Behavior:
Output does not honor set editor font size

Output does not honor set editor font size

Yup, that's why it's called "editor font size", which will only change font size of the text editor.

@rebornix Are there plans to add a setting for the output font size?

@rebornix Are there plans to add a setting for the output font size? Or some setting to have the editor font size match the output font size? Believe the customer expectation for something like a notebook would be that they are the same (by default at least)

We would need to explore what's the impact on the overall look of the notebook editor.

I see. I had two users bring this up this past week. The most recent one this weekend mentioned that they tried out vs code is because of support for Julia and theyre in search of a mathematica replacement. They like a package that Julia offers but the rendered output is too small. They provided the photo below and mentioned how the lines are thin and the terms can get small. They are aware of the ability to zoom in on the entire vsc screen but do not like that the entire UI also gets upscaled and crowds the screen.

The first user very specifically just wanted the size to match but did not necessarily want the default size in output that was provided.

This might be more of an output rendering request as opposed to font-size, it might be interesting to see if we could enable controls that allows users to make the output smaller/bigger and persist those.

I agree @misolori , think im tracking two different pain points here. I think the input/output general size customer expectation would be that they are same font size. For something like the math equations that is more likely rendering related.

+1 from customer

+1 from survey monkey

+1 customer feedback

Pushed changes to align the editor font size and output font size, which look pretty good

I don't think this quite addresses microsoft/vscode-jupyter#403, that was asking for a way to change the font size of specific elements rather than pointing out that there are size inconsistencies.
Is that something that is being worked on or should an issue be opened? In my case, the editor font size and output font sizes all look fine but the markdown is really small for some reason:

I've tried changing the "Markdown > Preview: Font Size" setting but it seems like that isnt being used here

@Queuecumber this issue was for: Editor + Output font size do not match, so this does not cover rendered markdown content. Please create a new issue.

@Queuecumber I have filed the second issue here: https://github.com/microsoft/vscode/issues/124872


Bug in Dutch Telebanking (easy to fix)

Codeunit 426 "Payment Tolerance Management" has Dutch localization code.
The variable CBGStatementLineApplID is of Length 20, this should be 50.
This causes runtime errors when posting a CBG Statement with a lot of lines.

AL Extension Version:

Server Version:

Hi @MaartenGerritsen ! Welcome to the AL repository! :) Thank you for the reporting this issue! Unfortunately, this repository is not the best place to report issues in the application.
Please make sure that you read our FAQs https://github.com/Microsoft/AL/wiki/Frequently-Asked-Questions and the readme file in the root of the repository https://github.com/microsoft/AL .
As this repository is only for issues related to the AL compiler in latest developer preview environment for Dynamics 365 Business Central. We suggest that you open a support case or file a bug in Collaborate, to ensure that all Business Central users benefit from your catch as soon as possible.
To open a support case, you can:

Open a support request to CSS through the PartnerSource portal
Contact your Service Account Manager (SAM) in your local subsidiary to understand what is included in your contract as of support incident and PAH (Partner Advisory Hours). Your SAM might also direct you "step by step" how to open a support request or how to get credentials, if this is the first time for you or your company

If you file the bug in Collaborate, remember to include steps to reproduce the issue, and the Business Central build number and country version you're using.


flutter channel v1.12.13-hotfixes not download flutter.jar to cache/artifacts/engine/android-*

Steps to Reproduce
like https://github.com/flutter/flutter/issues/42583, and reproduce steps is:

switch to v1.12.13-hotfixes
flutter channel v1.12.13-hotfixes
delete whole cache dir
flutter doctor -v
it will download the cache. After finish download, you will found no flutter.jar in cache/artifaces/engine/android-*
switch to v1.9.1-hotfixes, delete whole cache dir, flutter doctor -v
and flutter.jar is in cache/artifaces/engine/android-*

So I think it's a problem with v1.12.13-hotfixes.
Detail

switch to v1.12.13-hotfixes, and delete cache dir , flutter doctor -v

➜  flutter channel v1.12.13-hotfixes
Switching to flutter channel 'v1.12.13-hotfixes'...
This is not an official channel. For a list of available channels, try "flutter channel".
git: Switched to branch 'v1.12.13-hotfixes'
git: Your branch is up to date with 'origin/v1.12.13-hotfixes'.
➜  flutter doctor --verbose
Downloading Dart SDK from Flutter engine 2994f7e1e682039464cb25e31a78b86a3c59b695...
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
100  200M  100  200M    0     0  8547k      0  0:00:24  0:00:24 --:--:-- 8571k
Building flutter tool...
Downloading Material fonts...                                       0.4s
Downloading Gradle Wrapper...                                       0.2s
Downloading android-arm-profile/darwin-x64 tools...                 0.7s
Downloading android-arm-release/darwin-x64 tools...                 0.5s
Downloading android-arm64-profile/darwin-x64 tools...               0.6s
Downloading android-arm64-release/darwin-x64 tools...               0.5s
Downloading android-x64-profile/darwin-x64 tools...                 0.6s
Downloading android-x64-release/darwin-x64 tools...                 0.5s
Downloading package sky_engine...                                   0.3s
Downloading common tools...                                         1.5s
Downloading common tools...                                         1.2s
Downloading darwin-x64 tools...                                     4.4s
Downloading libimobiledevice...                                     0.9s
Downloading usbmuxd...                                              0.4s
Downloading libplist...                                             0.4s
Downloading openssl...                                              0.6s
Downloading ideviceinstaller...                                     0.3s
Downloading ios-deploy...                                           0.4s
Downloading libzip...                                               0.2s
[✓] Flutter (Channel v1.12.13-hotfixes, v1.12.13+hotfix.6, on Mac OS X 10.14.5 18F132, locale en-CN)
    • Flutter version 1.12.13+hotfix.6 at /Volumes/HFS+/flutter/flutter
    • Framework revision 18cd7a3601 (4 weeks ago), 2019-12-11 06:35:39 -0800
    • Engine revision 2994f7e1e6
    • Dart version 2.7.0

[✓] Android toolchain - develop for Android devices (Android SDK version 29.0.2)
    • Android SDK at /Users/along/Library/Android/sdk
    • Android NDK location not configured (optional; useful for native profiling support)
    • Platform android-29, build-tools 29.0.2
    • ANDROID_HOME = /Users/along/Library/Android/sdk
    • Java binary at: /Applications/Android Studio.app/Contents/jre/jdk/Contents/Home/bin/java
    • Java version OpenJDK Runtime Environment (build 1.8.0_202-release-1483-b49-5587405)
    • All Android licenses accepted.

[✓] Xcode - develop for iOS and macOS (Xcode 11.3)
    • Xcode at /Applications/Xcode.app/Contents/Developer
    • Xcode 11.3, Build version 11C29
    • CocoaPods version 1.7.2

[✓] Chrome - develop for the web
    • Chrome at /Applications/Google Chrome.app/Contents/MacOS/Google Chrome

[✓] Android Studio (version 3.5)
    • Android Studio at /Applications/Android Studio.app/Contents
    • Flutter plugin version 42.1.1
    • Dart plugin version 191.8593
    • Java version OpenJDK Runtime Environment (build 1.8.0_202-release-1483-b49-5587405)

[✓] IntelliJ IDEA Ultimate Edition (version 2019.2.4)
    • IntelliJ at /Users/along/Applications/JetBrains Toolbox/IntelliJ IDEA Ultimate.app
    • Flutter plugin version 37.0.3
    • Dart plugin version 191.7830

[✓] VS Code (version 1.41.1)
    • VS Code at /Applications/Visual Studio Code.app/Contents
    • Flutter extension version 3.7.1

[✓] Connected device (4 available)
    • AOSP on msm8996 • HT69N0204474 • android-arm64  • Android 9 (API 28)
    • macOS           • macOS        • darwin-x64     • Mac OS X 10.14.5 18F132
    • Chrome          • chrome       • web-javascript • Google Chrome 79.0.3945.88
    • Web Server      • web-server   • web-javascript • Flutter Tools

• No issues found!
➜

2. switch to v1.9.1-hotfixes, and delete cache dir , flutter doctor -v
➜  flutter channel v1.9.1-hotfixes
Switching to flutter channel 'v1.9.1-hotfixes'...
This is not an official channel. For a list of available channels, try "flutter channel".
git: Switched to branch 'v1.9.1-hotfixes'
git: Your branch is up to date with 'origin/v1.9.1-hotfixes'.
➜  flutter doctor --verbose
Downloading Dart SDK from Flutter engine b863200c37df4ed378042de11c4e9ff34e4e58c9...
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
100  263M  100  263M    0     0  8714k      0  0:00:31  0:00:31 --:--:-- 9343k
Building flutter tool...
Downloading Material fonts...                                       0.7s
Downloading android-arm-profile/darwin-x64 tools...                 0.9s
Downloading android-arm-release/darwin-x64 tools...                 0.7s
Downloading android-arm64-profile/darwin-x64 tools...               1.0s
Downloading android-arm64-release/darwin-x64 tools...               1.0s
Downloading android-x86 tools...                                    5.0s
Downloading android-x64 tools...                                    4.8s
Downloading android-arm tools...                                    2.8s
Downloading android-arm-profile tools...                            1.8s
Downloading android-arm-release tools...                            1.2s
Downloading android-arm64 tools...                                  2.7s
Downloading android-arm64-profile tools...                          1.6s
Downloading android-arm64-release tools...                          1.1s
Downloading Gradle Wrapper...                                       0.2s
Downloading package sky_engine...                                   0.5s
Downloading common tools...                                         2.2s
Downloading common tools...                                         2.2s
Downloading darwin-x64 tools...                                     7.7s
Downloading libimobiledevice...                                     0.2s
Downloading usbmuxd...                                              0.1s
Downloading libplist...                                             0.1s
Downloading openssl...                                              0.4s
Downloading ideviceinstaller...                                     0.2s
Downloading ios-deploy...                                           0.2s
[✓] Flutter (Channel v1.9.1-hotfixes, v1.9.1+hotfix.6-pre.1, on Mac OS X 10.14.5 18F132, locale en-CN)
    • Flutter version 1.9.1+hotfix.6-pre.1 at /Volumes/HFS+/flutter/flutter
    • Framework revision eb6877bf92 (3 months ago), 2019-10-23 15:17:08 -0700
    • Engine revision b863200c37
    • Dart version 2.5.0

[✓] Android toolchain - develop for Android devices (Android SDK version 29.0.2)
    • Android SDK at /Users/along/Library/Android/sdk
    • Android NDK location not configured (optional; useful for native profiling support)
    • Platform android-29, build-tools 29.0.2
    • ANDROID_HOME = /Users/along/Library/Android/sdk
    • Java binary at: /Applications/Android Studio.app/Contents/jre/jdk/Contents/Home/bin/java
    • Java version OpenJDK Runtime Environment (build 1.8.0_202-release-1483-b49-5587405)
    • All Android licenses accepted.

[✓] Xcode - develop for iOS and macOS (Xcode 11.3)
    • Xcode at /Applications/Xcode.app/Contents/Developer
    • Xcode 11.3, Build version 11C29
    • CocoaPods version 1.7.2

[✓] Chrome - develop for the web
    • Chrome at /Applications/Google Chrome.app/Contents/MacOS/Google Chrome

[✓] Android Studio (version 3.5)
    • Android Studio at /Applications/Android Studio.app/Contents
    • Flutter plugin version 42.1.1
    • Dart plugin version 191.8593
    • Java version OpenJDK Runtime Environment (build 1.8.0_202-release-1483-b49-5587405)

[✓] IntelliJ IDEA Ultimate Edition (version 2019.2.4)
    • IntelliJ at /Users/along/Applications/JetBrains Toolbox/IntelliJ IDEA Ultimate.app
    • Flutter plugin version 37.0.3
    • Dart plugin version 191.7830

[✓] VS Code (version 1.41.1)
    • VS Code at /Applications/Visual Studio Code.app/Contents
    • Flutter extension version 3.7.1

[✓] Connected device (3 available)
    • AOSP on msm8996 • HT69N0204474 • android-arm64  • Android 9 (API 28)
    • macOS           • macOS        • darwin-x64     • Mac OS X 10.14.5 18F132
    • Chrome          • chrome       • web-javascript • Google Chrome 79.0.3945.88

• No issues found!
➜

Also confusing me is that :

flutter create and flutter run works great and not compile error report, the output apk is work well.
but Android Studio hint no FlutterActivity class found.

Flutter doctor by itself will not fully populate the cache, because it doesn't need these artifacts to be downloaded. The flutter.jar is now downloaded by gradle as needed, and should be pulled into a gradle cache insted.

@jonahwilliams
I grep gradle cache dir, and want to prove you the exact flutter lib file path:
origin flutter.jar contains libflutter.so and java class file, but now they are in two jar files.

The libflutter.so in jar file like ~/.gradle/caches/modules-2/files-2.1/io.flutter/arm64_v8a_profile/1.0.0-2994f7e1e682039464cb25e31a78b86a3c59b695/5424506a525eb4745fe2a7c3ec64fe82f41f8a46/arm64_v8a_profile-1.0.0-2994f7e1e682039464cb25e31a78b86a3c59b695.jar

The java class files are in jar like ~/.gradle/caches/modules-2/files-2.1/io.flutter/flutter_embedding_profile/1.0.0-2994f7e1e682039464cb25e31a78b86a3c59b695/8f68c664d095b0d4348ddba8c742c9bf25fff6d6/flutter_embedding_profile-1.0.0-2994f7e1e682039464cb25e31a78b86a3c59b695.jar

The string 2994f7e1e682039464cb25e31a78b86a3c59b695 in dir 1.0.0-2994f7e1e682039464cb25e31a78b86a3c59b695 means the Engine revision?

Is it right?

That sounds about right, fyi @blasten

My Last Problem:
Android Studio can not found the flutter lib to give autocomplete hint, how can I solve this problem?

@oncealong Do you still have this problem if you clean the project and then rebuild from Android Studio?  I'm unable to reproduce this issue using Android Studio 3.5.3. Cross-reference and autocomplete worked fine.

@blasten
I click Tools->Flutter->Open for Editing in Android Studio and open a new Android Studio window.
In the new pure Android project,  Cross-reference and autocomplete worked fine. Like this:

This is a problem with Android Studio flutter plugin?

@blasten
I click Tools->Flutter->Open for Editing in Android Studio and open a new Android Studio window.
In the new pure Android project, Cross-reference and autocomplete worked fine. Like this:

This is a problem with Android Studio flutter plugin?

hey man，there is already a solution to this problem in the wiki laster month，https://github.com/flutter/flutter/wiki/Upgrading-pre-1.12-Android-projects


Select camera to scan

I have a website where I scan QR CODES using instascan.
I access to the website using my mobiIe phone thas has 4 back cameras (HUAWEI P30 PRO).
I have implmented a for each that selects the first 'back' camera:
if (cameras.length > 0) {
var selectedCam = cameras[0];
$.each(cameras, (i, c) => {
if (c.name.indexOf('back') != -1) {
selectedCam = c;
return false;
}
});
scanner.start(selectedCam);
}
But with that selectedCamera the vision is so fuzzy and I can't scan the QR. If I select by default the 2nd camera of the array by doing scanner.start(cameras[2]);   the vision is perfect and I can scan all the QR.
Anyone knows a generic way to pick the correct back camera? I mean my webapp is going to be used by so many users that will have differents mobile phones so different numbers of cameras.

@schmich


Multi-line emoji crashes program

Environment
Windows build number: 10.0.18362 Build 18362
Windows Terminal version (if applicable):  0.7.3291.0

Any other software?

Steps to reproduce
Open a new WSL terminal and fill a commandline with emojis (i.e. copy-paste from https://getemoji.com/ ). Resize the terminal window (width) so emojis would need to change line, i.e. the newline character would move location.
Expected behavior
Program would not crash
Actual behavior
Program crashes. "WindowsTerminal.exe is not responding, would you like to close the program".
NOTE: It does not appear with all emojis, but the string " 🤯 😬 😰 😱 🥵 🥶 😳 🤯 😬 😰 😱 🥵 🥶 😳 🤯 😬 😰 😱 🥵 🥶 😳 🤯 😬 😰 😱 🥵 🥶 😳 🤯 😬 😰 😱 🥵 🥶 😳 🤯 😬 😰 😱 🥵 🥶 😳 🤯 😬 😰 😱 🥵 🥶 😳 🤯 😬 😰 😱 🥵 🥶 😳 🤯 😬 😰 😱 🥵 🥶 😳 🤯 😬 😰 😱 🥵 🥶 😳 🤯 😬 😰 😱 🥵 🥶 😳 🤯 😬 😰 😱 🥵 🥶 😳 🤯 😬 😰 😱 🥵 🥶 😳" does cause a crash

Smaller repro, open WSL in WT, paste one of these strings including the double quotes

"🥶🥶🥶🥶🥶🥶🥶🥶🥶🥶🥶🥶🥶🥶🥶🥶🥶🥶🥶🥶🥶🥶🥶🥶🥶🥶🥶🥶🥶🥶🥶🥶🥶🥶🥶🥶🥶🥶🥶🥶🥶🥶🥶🥶🥶🥶🥶🥶🥶🥶🥶"
"🥵🥵🥵🥵🥵🥵🥵🥵🥵🥵🥵🥵🥵🥵🥵🥵🥵🥵🥵🥵🥵🥵🥵🥵🥵🥵🥵🥵🥵🥵🥵🥵🥵🥵🥵🥵🥵🥵🥵🥵🥵🥵🥵🥵🥵🥵🥵🥵🥵🥵🥵"

    "initialCols": 120,
    "initialRows": 30,

I have a feeling that this is #1360, which will be solved by #780, but just to make sure it is in fact the same thing, could you file a crash report?
/feedback

I am unsure on where to find the Feedback Hub and thought #3739 was the crash report. If I press the "Feedback" button inside Windows Terminal, then I get sent directly to the github issue page.
I do not build from source, so I don't know where any debug information gets logged/printed.

You need to use the "feedback hub" application:

If you file a problem using the Feedback hub, and tag it as Apps > Windows Terminal, then hit the "share my feedback" button, you'll get an aka.ms link that we can use to look up the stack trace of the crash on our end.

This app is blocked by company policy on my computer. I could see if I could try and recreate the entire setup on a different personal computer, but at this point I think it is easier if others try to recreate the bug as I don't think it should be too hard to reproduce.

Having had similar problems and found my way here, I've reported this via the feedback hub. I don't know how to get an aka.ms link from it but I referenced this github issue in my feedback.
For me it's an "unresponsive" not a crash per se. The tab you paste into freezes immediately, but other tabs are fine until you re-select the frozen one.

Got this under a debugger -- looks the same as /dup #1360


Allow specifying an appIdSuffix to run-android

Motivation
Currently react-native run-android instals and starts your app, but if you have more than one variant, it doesn't know which one to start.  This allows developers to pass in the suffix specified in build.gradle, so that the correct app is started.
Test Plan
verify that react-native run-android runs properly
verify that react-native run-android --appIdSuffix validSuffix runs properly

This is pretty well-documented and the test plan seems reasonable. Thanks for the contribution, I'll land it now!

@Phredward I think you would find this implementation more useful since it cuts down on adding a new option: https://github.com/facebook/react-native/pull/12820 It uses the package name defined in the generated manifest file instead of manually specifying the buildType, flavor, etc.

@Phredward LGTM 👍 Thanks for this!


Compile errors when building to WASM target

I'm not sure how this is happening or how this is reproducible, but I have the following in my Cargo.toml:
[features]
default = []
debug = ["dep:bevy-inspector-egui", "bevy_rapier3d/debug-render"]
editor = ["dep:bevy_editor_pls"]

[profile.dev]
opt-level = 1

[profile.dev.package."*"]
opt-level = 3

[dependencies]
bevy = "0.13.0"
bevy-inspector-egui = { version = "0.23.3", optional = true }
bevy_editor_pls = { version = "0.8.1", optional = true }
bevy_egui = "0.26.0"
bevy_fps_controller = "0.2.5"
bevy_hanabi = "0.10.0"
bevy_rapier3d = "0.25.0"

[[bin]]
name = "editor"
required-features = ["editor"]

Compiling with cargo build --target wasm32-unknown-unknown produces the following errors:
error[E0412]: cannot find type `ClipboardEvent` in crate `web_sys`
   --> /home/codespace/.cargo/registry/src/index.crates.io-6f17d22bba15001f/bevy_egui-0.26.0/src/web_clipboard.rs:105:41
    |
105 |     closure: Closure<dyn FnMut(web_sys::ClipboardEvent)>,
    |                                         ^^^^^^^^^^^^^^ help: a struct with a similar name exists: `KeyboardEvent`
    |
   ::: /home/codespace/.cargo/registry/src/index.crates.io-6f17d22bba15001f/web-sys-0.3.67/src/features/gen_KeyboardEvent.rs:5:1
    |
5   | #[wasm_bindgen]
    | --------------- similarly named struct `KeyboardEvent` defined here

error[E0412]: cannot find type `ClipboardEvent` in crate `web_sys`
   --> /home/codespace/.cargo/registry/src/index.crates.io-6f17d22bba15001f/bevy_egui-0.26.0/src/web_clipboard.rs:118:71
    |
118 |     let closure = Closure::<dyn FnMut(_)>::new(move |_event: web_sys::ClipboardEvent| {
    |                                                                       ^^^^^^^^^^^^^^ help: a struct with a similar name exists: `KeyboardEvent`
    |
   ::: /home/codespace/.cargo/registry/src/index.crates.io-6f17d22bba15001f/web-sys-0.3.67/src/features/gen_KeyboardEvent.rs:5:1
    |
5   | #[wasm_bindgen]
    | --------------- similarly named struct `KeyboardEvent` defined here

error[E0412]: cannot find type `ClipboardEvent` in crate `web_sys`
   --> /home/codespace/.cargo/registry/src/index.crates.io-6f17d22bba15001f/bevy_egui-0.26.0/src/web_clipboard.rs:152:71
    |
152 |     let closure = Closure::<dyn FnMut(_)>::new(move |_event: web_sys::ClipboardEvent| {
    |                                                                       ^^^^^^^^^^^^^^ help: a struct with a similar name exists: `KeyboardEvent`
    |
   ::: /home/codespace/.cargo/registry/src/index.crates.io-6f17d22bba15001f/web-sys-0.3.67/src/features/gen_KeyboardEvent.rs:5:1
    |
5   | #[wasm_bindgen]
    | --------------- similarly named struct `KeyboardEvent` defined here

error[E0412]: cannot find type `ClipboardEvent` in crate `web_sys`
   --> /home/codespace/.cargo/registry/src/index.crates.io-6f17d22bba15001f/bevy_egui-0.26.0/src/web_clipboard.rs:186:70
    |
186 |     let closure = Closure::<dyn FnMut(_)>::new(move |event: web_sys::ClipboardEvent| {
    |                                                                      ^^^^^^^^^^^^^^ help: a struct with a similar name exists: `KeyboardEvent`
    |
   ::: /home/codespace/.cargo/registry/src/index.crates.io-6f17d22bba15001f/web-sys-0.3.67/src/features/gen_KeyboardEvent.rs:5:1
    |
5   | #[wasm_bindgen]
    | --------------- similarly named struct `KeyboardEvent` defined here

error[E0599]: no method named `clipboard` found for struct `Navigator` in the current scope
   --> /home/codespace/.cargo/registry/src/index.crates.io-6f17d22bba15001f/bevy_egui-0.26.0/src/web_clipboard.rs:233:35
    |
233 |         let Some(clipboard) = nav.clipboard() else {
    |                                   ^^^^^^^^^ method not found in `Navigator`

Some errors have detailed explanations: E0412, E0599.
For more information about an error, try `rustc --explain E0412`.
error: could not compile `bevy_egui` (lib) due to 5 previous errors
warning: build failed, waiting for other jobs to finish...

This is happening in a GitHub Codespace on Rust 1.76.0

Are you patching some dependency ? Are you sure your cargo cache is unmodified ?
This error you're showing looks like web-sys is missing a feature, I can "reproduce" the same error message by commenting out the ClipboardEvent feature from web-sys in bevy_egui.

maybe a cargo tree -i web-sys could help figuring thing out 🤔

Are you patching some dependency ? Are you sure your cargo cache is unmodified ?
This error you're showing looks like web-sys is missing a feature, I can "reproduce" the same error message by commenting out the ClipboardEvent feature from web-sys in bevy_egui.

maybe a cargo tree -i web-sys could help figuring thing out 🤔

I do not have any patches, what I provided is the entire Cargo.toml (excluding the top part with package name, author, etc). I ran after a cargo clean and it continues to have the same error. I'll try the tree command whenever I'm able to get back.

The crate now requires RUSTFLAGS=--cfg=web_sys_unstable_apis when compiling for WASM with clipboard support. I'll add this to the readme

The crate now requires RUSTFLAGS=--cfg=web_sys_unstable_apis when compiling for WASM with clipboard support. I'll add this to the readme.
Alternatively, you can also add these two lines to your project's .cargo/config.toml:
https://github.com/mvlabat/bevy_egui/blob/18a53882945fa87263566a570da2468314c45ccc/.cargo/config.toml#L5-L6

This compiles, but now I get a bunch of improperly formatted WASM binary that errors when I try to bindgen:
target/wasm32-unknown-unknown/debug/creatept.wasm: 1: }}: not found
target/wasm32-unknown-unknown/debug/creatept.wasm: 1: : not found
target/wasm32-unknown-unknown/debug/creatept.wasm: 1: ~: not found
target/wasm32-unknown-unknown/debug/creatept.wasm: 1: target/wasm32-unknown-unknown/debug/creatept.wasm: 1: : not found
}}}}}}: not found
target/wasm32-unknown-unknown/debug/creatept.wasm: 1: : not found
target/wasm32-unknown-unknown/debug/creatept.wasm: 1: ~~: not found
target/wasm32-unknown-unknown/debug/creatept.wasm: 2: }: not found
target/wasm32-unknown-unknown/debug/creatept.wasm: 1: : not found
target/wasm32-unknown-unknown/debug/creatept.wasm: 1: ~: not found
target/wasm32-unknown-unknown/debug/creatept.wasm: 1: }}: not found
target/wasm32-unknown-unknown/debug/creatept.wasm: 1: : not found
target/wasm32-unknown-unknown/debug/creatept.wasm: 1: : not found
target/wasm32-unknown-unknown/debug/creatept.wasm: 1: }: not found
target/wasm32-unknown-unknown/debug/creatept.wasm: 2:}}
                                                       }}: not found
~~~: not foundunknown-unknown/debug/creatept.wasm: 1:
target/wasm32-unknown-unknown/debug/creatept.wasm: 2: }}}}: not found
target/wasm32-unknown-unknown/debug/creatept.wasm: 1: }: not found
target/wasm32-unknown-unknown/debug/creatept.wasm: 1:: not found
target/wasm32-unknown-unknown/debug/creatept.wasm: 1: }: not found
target/wasm32-unknown-unknown/debug/creatept.wasm: 1: asm��~}}: not found
target/wasm32-unknown-unknown/debug/creatept.wasm: 2: ~~: not found
target/wasm32-unknown-unknown/debug/creatept.wasm: 4: : not found
target/wasm32-unknown-unknown/debug/creatept.wasm: 1:~: not found
target/wasm32-unknown-unknown/debug/creatept.wasm: 5: }}}}}}: not found
target/wasm32-unknown-unknown/debug/creatept.wasm: 1: Syntax error: end of file unexpected

I am unsure whether this is an issue with egui or just some weird bug with the compiler.

Could you try compiling bevy_egui without the unstable apis flag and with the following set of features? This will probably help to isolate whether it's a clipboard-related issue.
bevy_egui = { version = "0.26", default-features = false, features = ["open_url", "default_fonts", "render"] }

Which one of the suggested commands have you run? I'd expect this to be fixed if you run either of those (but not both). If it doesn't help, maybe check that you don't have multiple versions of wasm-bindgen in your tree.

Which one of the suggested commands have you run? I'd expect this to be fixed if you run either of those (but not both). If it doesn't help, maybe check that you don't have multiple versions of wasm-bindgen in your tree.

I updated the version in Cargo.lock for wasm-bindgen, now it starts to load and then panics on some random wgpu pipeline in hanabi

Opened https://github.com/mvlabat/bevy_egui/pull/270 to help users learn and fix it :)

The compilation errors are more user friendly now. Thanks everyone


Sidebar view doesn't show subdiretory of a exluded dir in files.exclude

Issue Type: Bug
hi,
no matter what combination i try, i can't show a a specific subdiretory of a excluded dir.
I mean, it can show, but its either all subdirs, or none.
Example:
The excluded dirs are set in user settings:
    "files.exclude": {
        "**/.DS_Store": true,
        "**/.git": true,
        "**/.svn": true,
        "**/node_modules": true
    },

then, on this particular workspace:
	"files.exclude": {
		"**/node_modules": false,
		"**/node_modules/*": true,
		"**/node_modules/moduleA": false
	},

In this combination, the dir node_modules shows up, but is empty ( as in the attached screenshot ).

Same for swapping the subdirs:
		"**/node_modules/moduleA": false,
		"**/node_modules/*": true

If i remove "**/node_modules/*": true, the full list of modules are shown.
Tried using "**/node_modules/**": true, "**/node_modules": true, "**/node_modules/.*": true,with and without the prefix "**/" ...
Any suggestions on how to get around this?
VS Code version: Code - OSS 1.30.1 (dea8705087adb1b5e5ae1d9123278e178656186a, 2018-12-18T22:23:23.072Z)
OS version: Linux x64 4.19.4-arch1-1-ARCH

System Info

Item
Value

CPUs
Intel(R) Core(TM) i7-6700K CPU @ 4.00GHz (8 x 1340)

GPU Status
2d_canvas: unavailable_softwarechecker_imaging: disabled_offflash_3d: unavailable_softwareflash_stage3d: unavailable_softwareflash_stage3d_baseline: unavailable_softwaregpu_compositing: unavailable_softwaremultiple_raster_threads: enabled_onnative_gpu_memory_buffers: disabled_softwarerasterization: unavailable_softwarevideo_decode: unavailable_softwarevideo_encode: unavailable_softwarewebgl: enabled_readbackwebgl2: unavailable_off

Load (avg)
0, 0, 0

Memory (System)
31.34GB (4.37GB free)

Process Argv
--unity-launch

Screen Reader
no

VM
0%

Extensions (19)

Extension
Author (truncated)
Version

rainbow-brackets
2gu
0.0.6

Bookmarks
ale
10.2.2

project-manager
ale
10.3.2

Handlebars
and
0.4.1

path-intellisense
chr
1.4.2

gitlens
eam
9.4.1

php-debug
fel
1.12.6

php-intellisense
fel
2.3.10

auto-close-tag
for
0.5.6

auto-rename-tag
for
0.0.15

phpcs
ika
1.0.5

vscode-scss
mrm
0.6.2

php-docblocker
nei
1.7.0

code-settings-sync
Sha
3.2.4

guides
spy
0.9.3

php-phan
Tys
0.8.3

gitblame
wad
2.6.3

wordpress-toolbox
wor
1.3.0

markdown-all-in-one
yzh
2.0.1

(1 theme extensions excluded)

It is currently not possible to override the exclude of a specific folder, we simply do not merge these patterns.

ok, thanks @bpasero, looking forward to see this happening :)
just a note: it is possible to override the exclude a specific directory :
on the main config has "**/node_modules": true, and the workspace config "**/node_modules": false.
What's missing is being able to include a specific subdirectory from a excluded directory. sorry if i misunderstood your comment.


Remove govuk-focusable, govuk-focusable-fill mixins, introduce govuk-focus-text mixin.

This implements option 2 from the mixins proposal: https://gist.github.com/nickcolley/791d084ff263786acb433ed0bd13c381

Renames focusable file to focused
Removes govuk-focusable and govuk-focusable-fill
Adds govuk-focused-text

Since the new focus styles are harder to abstract we're removing the mixins apart from the focus that is applied to text, for example links.
Closes https://github.com/alphagov/govuk-frontend/issues/1344 (see for more details)

@aliuk2012 updated based on your feedback thank you :)


Issue with Slot

When using default "something copyable" code here (only the Sapper import line removed), seeing this error:
ValidationError: $$slots is an illegal variable name
node_modules/svelte-lightbox/src/Lightbox.svelte
93:       {:else if gallery}
94:         <InternalGallery {imagePreset}>
95:           {#if $$slots.thumbnail}
                   ^
96:             <div>
97:               <slot name="thumbnail"/>
ValidationError: $$slots is an illegal variable name

Svelte version 3, svelte-lightbox version 0.6.1

Hello,
thanks for your report. It looks like you are using version of Svelte that doesn't support $$slots. $$slots were added in svelte 3.25.0, please make sure you are using version of Svelte that supports $$slots.
I also tried to reproduce your issue, but it seems everything runs fine with latest Svelte.
Best regards,
Filip.

I set peer dependency svelte to version 3.25.0 to prevent this kind of errors. Try upgrading svelte-lightbox to 0.6.2.

Hi @krab7191, could you please give me feedback on bug-fix I released in version 0.6.2, so I can close this issue?

No response, closing.


Update package.json with concurrency set to 1

Explain the feature/fix

Reducing the concurrency to 1

Does this PR introduce a breaking change
No

For a context: May be github actions is failing due to collision caused by the concurrency. Just a hunch.

@akhilmhdh if this works it would be a good find. We'll just have to deal with the slowness or maybe try something where it looks for the number of available cpus


How to train from scratch?

Hi, thanks a lot for the code!
As mentioned in the paper, the training procedure includes 3 steps: "First, we pre-train the AE and IGAE independently for 30 iterations by minimizing the reconstruction loss functions. Then, both subnetworks are integrated into a united framework for another 100 iterations. Finally, with the learned centers of different clusters and under the guidance of the triplet self-supervised strategy, we train the whole network for at least 200 itera- tions until convergence."
I have trained AE and IGAE independently, but how to integrate them into a united framework for training without using the triplet strategy, i.e. the second step ?
Thanks for your advice in advance!

Thank you for your attention! We have uploaded the model pre-training demo. Kindly take a moment to review it.


Controller should set status on managed objects

The controller does not currently set status when managing objects.
This depends on #127.

Closed by #341


AMBARI-23372. Hosts not populated in Assign Master Page in Move Maste…

…r Wizard
What changes were proposed in this pull request?
Hosts not populated in Assign Master Page in Move Master Wizard
How was this patch tested?
manually, unit
21515 passing (31s)
48 pending
Please review Ambari Contributing Guide before opening a pull request.

Refer to this link for build results (access rights to CI server needed):
https://builds.apache.org/job/Ambari-Github-PullRequest-Builder/1418/
Test FAILed.
Test FAILured.

retest this please

Refer to this link for build results (access rights to CI server needed):
https://builds.apache.org/job/Ambari-Github-PullRequest-Builder/1452/
Test PASSed.


Updating subscribed topic in the README

@ahmedius2 We now require all commits to be signed with a Developer Certificate of Origin (DCO). Please see https://github.com/Autoware-AI/core_perception/pull/5/checks?check_run_id=852444711 for info on how to add this information to your commits.

Closes #4


NT AUTHORITY\SYSTEM Permissions and Permissioning Services

I'm looking to contribute some information about how to permission NT AUTHORITY\SYSTEM and other services in SQL Server. I adapted a blog article I've written to Markdown in this PR. Please reach out to me internally if you have any questions.

Moving changes to private repository for review. https://github.com/MicrosoftDocs/sql-docs-pr/pull/7710


chore: automate release and deploy process

Pull Request Test Coverage Report for Build 598

0 of 0   changed or added relevant lines in 0 files are covered.
No unchanged relevant lines lost coverage.
Overall coverage remained the same at 100.0%

Totals

Change from base Build 482:
0.0%

Covered Lines:
693

Relevant Lines:
693

💛  - Coveralls


Ensure arcstr::literal! can be used without first importing arcstr::ArcStr

Whoops :/

Codecov Report

Merging #11 into main will increase coverage by 0.03%.
The diff coverage is 100.00%.

@@            Coverage Diff             @@
##             main      #11      +/-   ##
==========================================
+ Coverage   95.50%   95.53%   +0.03%
==========================================
  Files           3        4       +1
  Lines         400      403       +3
==========================================
+ Hits          382      385       +3
  Misses         18       18

Impacted Files
Coverage Δ

src/mac.rs
100.00% <100.00%> (ø)

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update 1bfd5b4...65d685a. Read the comment docs.


WIP -- Debugging OSX pipeline [do not merge]

/azp run

Whatever this was doing seems irrelevant now...

I think it was related to #21905 item 2.


7881 explicit persist side effects layer+widgets save

Milestone for #8042
Added user-actions to save layer and widget (and differentiate it from saving widget-option.
Also search-and-replace’d some methods that had a bit unorthodox names.
@alonsogarciapablo review, please :bow:

Looks good to me! 👍


Linux #2

I've taken https://github.com/mastahyeti/certstore/pull/11 and (hopefully) addressed all of the comments there.
Please bear in mind my go experience is minimal, so review ruthlessly.

Also, the travis config for Linux isn't quite right

I had a go at redoing the building of the certificate chain but my lack of NSS knowledge is failing me. It's certainly not passing tests...
diff --git a/certstore_linux.go b/certstore_linux.go
index 0bf1d1d..d5bfa83 100644
--- a/certstore_linux.go
+++ b/certstore_linux.go
@@ -110,44 +110,23 @@ func (i *nssIdentity) Certificate() (*x509.Certificate, error) {
 }

 func (i *nssIdentity) CertificateChain() ([]*x509.Certificate, error) {
-	var der = i.node.cert.derCert
-	var bytes = C.GoBytes(unsafe.Pointer(der.data), C.int(der.len))
-	cert, err := x509.ParseCertificate(bytes)
-	if err != nil {
-		return nil, err
-	}
-	var certs = C.PK11_ListCerts(C.PK11CertListAll, nil)
-	if certs == nil {
-		return nil, fmt.Errorf("Error %d, cannot list certificates...\n", int(C.PR_GetError()))
+	var certs = C.CERT_GetCertChainFromCert(i.node.cert, C.PR_Now(), C.certUsageAnyCA)
+
+	var errno = int(C.PR_GetError())
+	if (errno != 0) {
+		return nil, fmt.Errorf("Error %d building certificate chain", errno)
 	}
-	var list *C.CERTCertList
-	var node *C.CERTCertListNode
-	list = certs
-	var identities = make([]Identity, 0)
+
 	var certificates = make([]*x509.Certificate, 0)
-	for node = C.CertListHead(list); C.CertListEnd(node, list) != 0; node = C.CertListNext(node) {
-		identities = append(identities, newNssIdentity(node))
-	}
-	certificates = append(certificates, cert)
-	found := true
-	for found != false {
-		found = false
-		cert = certificates[len(certificates)-1]
-		issuer := cert.Issuer.String()
-		for i := 0; i < len(identities); i++ {
-			cert, err = identities[i].Certificate()
-			if cert == nil {
-				return nil, fmt.Errorf("Error %d, cannot fetch certificate...\n", int(C.PR_GetError()))
-			}
-			subject := cert.Subject.String()
-			root := certificates[len(certificates)-1].Subject.String()
-			if subject == issuer && subject != root {
-				certificates = append(certificates, cert)
-				found = true
-				break
-			}
+	var node *C.CERTCertListNode
+	for node = C.CertListHead(certs); C.CertListEnd(node, certs) != 0; node = C.CertListNext(node) {
+		var cert, err = newNssIdentity(node).Certificate()
+		if err != nil {
+			return nil, errors.New("Unable to parse certificate when building chain")
 		}
+		certificates = append(certificates, cert)
 	}
+
 	return certificates, nil
 }

Thanks for picking this up, by the way :smile:

I added support for specifying KeyUsage with fakeca in https://github.com/mastahyeti/fakeca/pull/1 and pulled it into this repo in https://github.com/mastahyeti/certstore/pull/14. If you rebase onto master you should be able to test the chain building with KeyUsage set.

Thanks for picking this up, by the way smile

No problem - thanks for all the comments. I'll get to them when I can :)

I added support for specifying KeyUsage with fakeca in mastahyeti/fakeca#1 and pulled it into this repo in #14. If you rebase onto master you should be able to test the chain building with KeyUsage set.

hmm, looks like it isn't enough :(
I'll take a closer look at what the NSS code's actually doing

I'm learning about NSS as I review, so I apologize for any misinformed comments/questions.

You and me both

I'm wondering if we should make NSS an option on all platforms, since it's cross platform already. Maybe we could define an NSSOpen() method on all platforms and then have openStore() call NSSOpen() on Linux (make NSS the default on Linux).

How about we get it working on one platform first? :joy:
I'm less annoyed about my inability to get NSS to do what I want than I am about failing to get the travis build to install libnss-dev on linux prior to building.

I'm less annoyed about my inability to get NSS to do what I want than I am about failing to get the travis build to install libnss-dev on linux prior to building.

Alright, Travis builds are working, but they do rely on an NSS database having been precreated in ~/.pki/nssdb

I'm wondering if we should make NSS an option on all platforms, since it's cross platform already. Maybe we could define an NSSOpen() method on all platforms and then have openStore() call NSSOpen() on Linux (make NSS the default on Linux).

I'm starting to wonder if we should use libressl or opensc directly instead on linux :joy:

I was playing with this branch locally and got it to find the certificates on my Yubikey.
First, I had to tell NSS about the Yubico PKCS#11 library:
modutil -dbdir ~/.pki/nssdb -add ykcs11 -libfile /usr/local/Cellar/yubico-piv-tool/1.6.2/lib/libykcs11.dylib -force
And then I had to manually add the certificate to the database:
certutil -A -i ~/Desktop/a.crt -d sql:~/.pki/nssdb -n "YubikeyAuthentication" -tu
Certstore is now including the certificate in the returned identities, but I'm still getting an error trying to sign with it.

Also, this works on macOS. Here's the change I made to add a cross platform OpenNSS function. Test pass locally on macOS, but obviously not in CI, since NSS isn't installed there. Once this PR merges I can circle back to get that part working.

Also, this works on macOS. Here's the change I made to add a cross platform OpenNSS function. Test pass locally on macOS, but obviously not in CI, since NSS isn't installed there. Once this PR merges I can circle back to get that part working.

I can see you're having fun :)
I'm about 5 beers deep this evening so I'll take a look another day!

I'm about 5 beers deep this evening so I'll take a look another day!

Totally. Let's ship this for Linux before putting effort into NSS for other platforms.

OK, well we have a green travis build now, so that's a start. Once we get to merging this, I think I want to squash all the commits down to one with credit to the original author in the commit message - what do you think?

Once we get to merging this, I think I want to squash all the commits down to one with credit to the original author in the commit message - what do you think?

Yes! I'll defer to your judgement on how to rebase/squash things, but I agree that fewer commits would be good. Also creditting the original author would be ideal. If you want to squash it down to a single commit, you could list yourself as a co-author (Co-Authored-By docs).

I've built smimesign locally with this branch of certstore and I can't get it to actually sign.
I've added the OpenSC module to my NSS database, and my yubikey PIV cert appears when I run smimesign --list-keys, but if I try to do smimesign -s then the call to C.PK11_FindKeyByAnyCert(&cert, nil) returns nil for some reason.
I'm still trying to understand why but I wanted to ask: have either of you managed to get this working with smimesign?

ah I'm wondering if I'm hitting the problem mentioned above

Signing with the 9e slot works! This is the only slot that doesn't require a pin. The slots that do require a pin still don't work for signing.

You might find you can log in to the card with something like pkcs11-tool from opensc and get a PIN entered before then using another slot..

Either that or pass a password function callback to PK11_FindKeyByAnyCert?

But in any case that can surely wait for a further PR?

Either that or pass a password function callback to PK11_FindKeyByAnyCert?

That was the kind of appropriate thing I was thinking of, yes.. something that ultimately runs a pinentry program or similar I guess, and yes IMO that can be a later addition - I still haven't actually done as much as you have, building smimesign against this branch and testing it on real hardware.

If you already have certstore checked out, you can use a go.mod replace directive in smimesign to use your local certstore checkout:
https://github.com/philandstuff/smimesign/commit/3a66dc52cf0c6c0cda8337eece4dc51e3f0cb2e6#diff-37aff102a57d3d7b797f152915a6dc16R17
Then building smimesign with the local certstore is just go build - couldn't be easier!

Either that or pass a password function callback to PK11_FindKeyByAnyCert?

Actually, reading the docs more closely that's not what that argument is for.
My understanding is that you call PK11_SetPasswordFunc to register a callback function for collecting the PIN needed to unlock the card. This function returns the PIN as a string, but its arguments are a pointer to a slot structure referencing the card, a boolean indicating whether this is a first attempt at a login or not and a pointer to some data which means something to your function.
The pointer passed to PK11_FindKeyByAnyCert is this latter entity - it's up to your password function to know what to do with it - maybe for a GUI app it could hold a reference to the active window so that any dialog boxes are properly parented, maybe it's a location of a socket to make a request to etc.

Hello!
There are a couple issues identified with this branch, one fixed would it be ready for merge?

Hi,
I'm the autor of #11 - sorry was out of the gird for a while... what's the status of this PR?

Hi,
I'm the autor of #11 - sorry was out of the gird for a while... what's the status of this PR?

It's kinda stagnated, as you can see. If I remember rightly, one of the main remaining questions is how to manage and initialise the NSS db, otherwise I think the code is mostly working. I tried to preserve your initial MR and then add isolated cleanup commits on top.
If you know NSS well, that would be great input to have - I make no pretence of being a go or an nss expert.
I haven't actually used this to successfully sign a git commit though, so there may still be work to do.
Maybe take a look at the commits we've piled on top of your initial work and see if they look reasonable? I'm happy to spend some time revisiting this - I'll try and rebase against main soon.

Hi,
I'm the autor of #11 - sorry was out of the gird for a while... what's the status of this PR?

It's kinda stagnated, as you can see. If I remember rightly, one of the main remaining questions is how to manage and initialise the NSS db, otherwise I think the code is mostly working. I tried to preserve your initial MR and then add isolated cleanup commits on top.
If you know NSS well, that would be great input to have - I make no pretence of being a go or an nss expert.
I haven't actually used this to successfully sign a git commit though, so there may still be work to do.
Maybe take a look at the commits we've piled on top of your initial work and see if they look reasonable? I'm happy to spend some time revisiting this - I'll try and rebase against main soon.

Hi,
Actually I was able to sign commits with embedded git extensions - so it’s more multi platform approach - however not as easy as smimesign - still prefer certs over gpg as it is more corporate friendly way of commits verification - at this stage I’m not going to engage into open source projects for a while, but as soon as I will be able I’m happy to look into it again.
Kind Regards,
Mateusz Klatt

Wiadomość napisana przez Russell Howe<EMAIL_ADDRESS>w dniu 12.01.2021, o godz. 11:32:

Hi,
I'm the autor of #11 - sorry was out of the gird for a while... what's the status of this PR?
It's kinda stagnated, as you can see. If I remember rightly, one of the main remaining questions is how to manage and initialise the NSS db, otherwise I think the code is mostly working. I tried to preserve your initial MR and then add isolated cleanup commits on top.
If you know NSS well, that would be great input to have - I make no pretence of being a go or an nss expert.
I haven't actually used this to successfully sign a git commit though, so there may still be work to do.
Maybe take a look at the commits we've piled on top of your initial work and see if they look reasonable? I'm happy to spend some time revisiting this - I'll try and rebase against main soon.
—
You are receiving this because you commented.
Reply to this email directly, view it on GitHub, or unsubscribe.

Hi,
Actually I was able to sign commits with embedded git extensions - so it’s more multi platform approach - however not as easy as smimesign - still prefer certs over gpg as it is more corporate friendly way of commits verification - at this stage I’m not going to engage into open source projects for a while, but as soon as I will be able I’m happy to look into it again.
Kind Regards,
Mateusz Klatt

Wiadomość napisana przez Russell Howe<EMAIL_ADDRESS>w dniu 12.01.2021, o godz. 11:32:

Hi,
I'm the autor of #11 - sorry was out of the gird for a while... what's the status of this PR?
It's kinda stagnated, as you can see. If I remember rightly, one of the main remaining questions is how to manage and initialise the NSS db, otherwise I think the code is mostly working. I tried to preserve your initial MR and then add isolated cleanup commits on top.
If you know NSS well, that would be great input to have - I make no pretence of being a go or an nss expert.
I haven't actually used this to successfully sign a git commit though, so there may still be work to do.
Maybe take a look at the commits we've piled on top of your initial work and see if they look reasonable? I'm happy to spend some time revisiting this - I'll try and rebase against main soon.
—
You are receiving this because you commented.
Reply to this email directly, view it on GitHub, or unsubscribe.

This project is now part of smimesign.
Please send this PR to https://github.com/github/smimesign if it's still relevant!


Submit signoffs as a class

Adds the ability to batch update tool signoffs based on the class taken. the class->signoff mapping is stored in app/assets/data/classes.json. app/controllers/batch_update_tool_controller.rb handles parsing the submission to determine if it's a class or single tool signoff, translates a class to a list of signoffs if necessary, and then adds the full list of signoffs to grant to the submission to WA

I think it's ready to go

Thanks for the lil fix-up commits 😍


Improvements to CTest support

Hi,
I'm using catch2 for my unit test, and I have a better experience using the catch2 test explorer than ctest. That's why I request an option to disable ctest integration.
Thanks.
Alex

What exactly would you like to disable?  You can hide the icon in the status bar by using:
  "cmake.statusbar.advanced": {
    "ctest": {
      "visibility": "hidden"
    }
  }

Be able to hide it is nice, but I want to disable its integration, for example I believe that it did run tests without my consent that's why I could see 3 tests passed over 4 without having ran them myself.

And in my case I have catch2 unit test integration which works better for me.

The extension automatically parses the log file if you have run them in the past. We only run the tests if you invoke the corresponding VS Code command (or click the CTest button).

Oh OK.
Anyway I think that if ctest has to be supported then it would be nicer to have a proper test list like for catch2 and be able to run/debug a single test.

Have you seen this extension? https://marketplace.visualstudio.com/items?itemName=matepek.vscode-catch2-test-adapter
It might be a suitable solution for you until we are able to invest more in CTest.

Thank you I use this extension already.

You might want to update the title of this issue to be more specific.

Updated title. Let me know if I missed anything in the discussion that should be captured in the title.

This is in a very annoying state. Currently the Testing tab always shows the Hidden profiles when tests fail, so in my case using "TestMate C++" (which provides a better experience) ends up not being shown in the Test Results tab and it's the second on the navigation bar.

This is in a very annoying state. Currently the Testing tab always shows the Hidden profiles when tests fail, so in my case using "TestMate C++" (which provides a better experience) ends up not being shown in the Test Results tab and it's the second on the navigation bar. Is there anything that can be done to fix this in the meanwhile?

I may have found a solution. But this requires writing the configuration into the user's personal configuration; settings in the workspace or .vscode will not take effect.
Set cmake.ctest.testExplorerIntegrationEnabled to false can disabled CTest in the vscode's testing panel.
If TestMate isn't automatically indexing tests, you can set testMate.cpp.discovery.loadOnStartup to true.
These configurations are effective for me at least, hopefully they can help you or others. 😀


Added NICEHASH.svg

Added the NICEHASH icon

did they issue a coin?

no they didn't. nevertheless they provide a price per algorithm. so e.g. "NICEHASH-X11" shows the combined fluctuation of all X11 algos to be mined. so nicehash is a good indicator showing the general trend of the currencies. see https://whattomine.com/. an icon would be very helpfull.

That's all really nice, but this icon pack is purely about coins, not services or others.
Sorry, but I'll have to decline.


Upgrading from 6.4 to 7.x? No errors ever reported

Trying to update from 6.4 to 7.x, and after an hour of trying to replicate the "right" settings to match what I had, I've had no luck getting any ESLint errors to show up, and more than half the time don't even see any indication of any output from the plugin.
Reverting back down to 6.5 and my old configuration settings work fine.
An example code change to "test" if this is working is to change a === to a ==. 6.4 and 6.5 with my existing configuration reports that in build or watch, using 7.1 or 7.2 never shows any errors.
Perhaps I'm missing something obvious, but I can't get there from just reading the current documentation.
    new ForkTsCheckerWebpackPlugin({
      eslint: {
        files: [
          'app/**/*.{ts,tsx}',
          'shared/**/*.{ts,tsx}',
        ],
        options: {
          cache: true,
          cacheLocation: path.resolve(__dirname, buildCache, '.eslintcache'),
        },
      },
      formatter: 'basic',
    }),

According to the docs, the ESLint feature is not supported on 7.x.x
https://github.com/TypeStrong/fork-ts-checker-webpack-plugin under Installation

Wow, it was obvious.
Also, tragic.

Yep :)


Create LICENSE

Modifications to MIT license

I haven't looked at this code in months and quite honestly this was as good as I could do at the time, lots and lots of refactoring and beatification to do. Feel free to build upon this repo.

No problem. Thanks for sharing your code!
On Fri, Feb 10, 2017 at 11:11 PM, Ameer Brown<EMAIL_ADDRESS>wrote:

I haven't looked at this code in months and quite honestly this was as
good as I could do at the time, lots and lots of refactoring and
beatification to do. Feel free to build upon this repo.
—
You are receiving this because you authored the thread.
Reply to this email directly, view it on GitHub
https://github.com/Ameer-Brown/MathDash/pull/2#issuecomment-279126926,
or mute the thread
https://github.com/notifications/unsubscribe-auth/AAGrFL2Y4Ec3oE9jNqOlppOVDCVZ_heIks5rbV8-gaJpZM4L-GnX
.


BitCoin Nashville 2024

Hi
I'm developing open source software for bit coin pay server for our project the Constitution Arts Society, CA-socieity.org.
https://btcpaymain.tidalforce.org/login?ReturnUrl=%2F
Looking forward to seeing you in Nashville


add action buttons to each NB peripheral box in the edge control page, according to the available actions


Consider adding a license file

While Cargo.toml specifies that codesnake is MIT-licensed, it would be nice to also have a LICENSE file.

This is now done. Thanks for pointing this out!


Don't need config for keyAuthorization

Also, rename keyAuthorization to keyAuth.
R: @sgomes, @surma

LGTM.


Separation of CSS styles

App.css file was copied from the old project, styles should be separated into different files to separate logic for each page/component for better readability and debugging.

Would like to help with this one

@jenster5 Sure go ahead.


Add tier 1 support for arm64

It's tier 2 support but arm64 devices have huge numbers today.

Target
Compiler
Std
Description

aarch64-linux-gnu
✓
✓
ARM 64-bit Linux (GNU, hardfloat)

aarch64-linux-musl
✓
✓
ARM 64-bit Linux (MUSL, hardfloat)

I have becoming more and more interested in arm64 support.  Would this cover the new a1 instances from AWS? It seems like it would.
https://aws.amazon.com/ec2/instance-types/a1/

I'm not sure we need a such general issue for this. Let's be honest, all this does is expressing a wish.
The support tiers, as far as I understood them, don't describe intended effort by any party but rather status quo of the implementation. If you want to push this forward, look for things that are missing to get them to full support. Bugs only happening there, missing features. Then open issues for those that don't have issues yet, provide fixes for them if you're able to and help with testing if you have access to the hardware :)

Closing. Nothing actionable here. We don't build or distribute an AArch64 release of Crystal, that would be used by a CI to at least run std specs. Those would be the bare minimum before even thinking to move to tier 1 support.


Added new events and observations to remote_desktop_logon

Added some new events and observations to remote_desktop_logon :

Logon type 12 (RemoteInteractive Logon Using Cached Credentials): If a domain controller is unavailable and the domain user account’s credentials cannot be validated, RemoteInteractive logon will attempt to authenticate the user using cached credentials on the destination host.
Logon type 7 (RemoteInteractive Logon : Workstation was Unlocked): To delineate this from non-RDP Type 7 logons in which a person was sitting at the machine and just unlocked the machine, you can look for remote non-local IP’s in the IpAddress field.
EID 21 and 22 provided by Microsoft-Windows-TerminalServices-LocalSessionManager/Operational give more information about the User, the Session ID and the Source Network Address.

And some observation :
| WinEvent | 4624 | LogonType | 12 | hilo21 |
| WinEvent | 4624 | LogonType | 7 | hilo21 |
| WinEvent | 21, 22 | Source Network Address | is NOT 'LOCAL' | hilo21 |
| WinEvent | 4656 | Object Name | C:\Windows\Prefetch\RDPCLIP.EXE-[RANDOM].pf | hilo21 |

Hello @H1L021 ! It has been a while, but better late than never ;) . I will create an issue to create a similar analytic but in the current format of the project. I appreciate your hard work and contribution 🙏🏾


SAK-40670 - Calendar doesn't check daylight saving time on subscribing events

Calendar doesn't check if timezone has summer or winter time on external subscribing events

@ern I think your solution maybe would be over engineered.
ZonedDateTime hasn't support for checking DST dates (in this case they are imported for external servers), ,only Timezone cans, and Sakai's GenericCalendarImporter expects the event to be on milliseconds so it would be necessary to modify that GenericCalendarImporter and calendar tool rely on that for import for another site too.
Also, every DST in the world has been for 102 years 1 hour on summer [1]. It's quite unlikely that now a country decides to change that. Japan and EU are quitting for DST but that's different. It would be as improbable as an hour would become 25 hours.
1 - https://en.wikipedia.org/wiki/Daylight_saving_time

@ern I've updated a little the PR, now magic it's done by TimeZone as long as ZonedDateTime hasn't support for daylight savings.
getDSTSavings() returns same amount that my constant did.


Add minimal mypy type checking

This is passing now (except for a spurious code coverage failure). Ideally we would run mypy with --strict, but this is a good start.

Merged in #50.
For now I'd prefer to not run mypy in pre-commit. I haven't had good experience with mypy running in diff mode (lots of incorrect typing errors).
cc @shoyer if you have any thoughts on adding mypy to a project.

Thanks!


Add query-signature argument, add ethereum-input-decoder to requirements

This PR adds the ethereum-input-decoder python module to the requirements installed with pip and adds an argument -q/--query-signature to enable function signature lookups through www.4byte.directory.
"Fixes" https://github.com/ConsenSys/mythril/issues/590.

We didn't want to increase extra dependencies so can you remove it from requirements and add a warning saying install ethereum_input_decoder if it doesn't exist when flag is turned on?

We didn't want to increase extra dependencies so can you remove it from requirements and add a warning saying install ethereum_input_decoder if it doesn't exist when flag is turned on?

If the flag is turned on and the ethereum-input-decoder module could not be loaded, there will be an error message already saying "The --query-signature function requires the python package ethereum-input-decoder" and program termination.
Regarding the extra dependency on ethereum-input-decoder: I think the online lookup is a very useful feature for the user, so I wonder if the additional dependency is that bad. It's a really simple module with no further new dependencies.
Not having it in the requirements file will make the feature practically unusable for all users of the docker image.

I think the dependency should also be added in setup.py

I think the dependency should also be added in setup.py

Right! Added and changed the strict version requirement ==0.2.2 to >=0.2.2 to be in line with the overall requirements setup.

Add  'enable_online_lookup=False'  for ETHContract class in report_test.py.That might fix it.

Did that and now it passed for session/env Python 3.5, but fails for 3.6.
Not sure how this CI system works... Is it possible that the function name was saved to ~/mythril/signatures.json in a previous run and is now picked up from there on subsequent runs?

I am not sure as these are run on bytecode files right?, can remove the ETHContract's default of enable_online_lookup to False and then rerun it?

I assume this was due to self.sigs = signatures.SignatureDb() in __init__ of class Mythril(object).
Not sure where to go from here. Disassembly, ETHContract and SignatureDb all have a enable_online_lookup parameter with a default value, which is never overwritten in constructor calls.
Should we add an enable_online_lookup parameter to the "top" Mythril class and make sure that all constructors for Disassembly, ETHContract and SignatureDb are called with the value passed into the Mythril constructor?

Yeah thats better.

Default is now off (no online lookups) no matter how it/what is used (class Disassembly, ETHContract, SignatureDb or Mythril or through the cli interface)
Specifying --query-signature as a parameter for the cli interface without module ethereum-input-decoder installed, results in an error message
Setting enable_online_lookup to True in the constructor of on the four classes without module ethereum-input-decoder installed will simply result in no lookups.