Issue when uploading files with spaces in filename

Ran into this while testing a Branding upload form on Staging.
If you're logged in on Staging, you can see the form here: https://forms-staging.cdssandbox.xyz/en/form-builder/edit/clfgzqv7705358bx84qjps43y
Alternatively, here's a JSON form definition you can use: https://github.com/cds-snc/platform-forms-client/pull/1755/files
If you try to upload a file with spaces (or presumably other special characters that require escaping), the following error will cause it to fail in the reliability queue: Failed to retrieve files from reliability storage because of following error: Request path contains unescaped characters..
Here is a form submission that failed:
{"formID":"clfgymbb801888bx8jgnaqqif","language":"en","responses":{"1":"CA","2":"CAFR","3":"https://canada.ca/","4":"https://canada.ca/","7":"form_attachments/2023-03-20/13830c12-bce6-4817-a576-15e68683924e/Screenshot 2023-03-20 at 11.09.23 AM.png","8":"form_attachments/2023-03-20/2ab76646-1dc4-48c5-9659-dd2096587a2a/Screenshot 2023-03-20 at 11.09.23 AM.png"},"deliveryOption":{"emailAddress":"[dave.samojlenko@cds-snc.ca](mailto:dave.samojlenko@cds-snc.ca)"}}

It is also failing with a similar error when trying to copy files from the reliability queue to the vault:
ERROR	TypeError [ERR_UNESCAPED_CHARACTERS]: Request path contains unescaped characters
2023-03-23T14:59:46.919Z	ddaa270c-075b-5a59-b8f2-7b9a6cd77275	ERROR	Error: Argh.. there's a problem here
    at /opt/nodejs/node_modules/s3FileInput/index.js:70:15
    at processTicksAndRejections (internal/process/task_queues.js:95:5)
    at async copyFilesFromReliabilityToVaultStorage (/opt/nodejs/node_modules/s3FileInput/index.js:68:24)
    at async module.exports (/opt/nodejs/node_modules/vaultProcessing/index.js:21:5)
    at async Runtime.exports.handler (/var/task/reliability.js:60:14)


No upload speed

Hi,
I'm using Speedchecker in my React Native application to show download and upload speed. Download is working perfectly, but the upload speed is always 0. What am I doing wrong? Anybody already had this issue?

It is not that I have a problem with my network, because the SpeedChecker app works like a charm.

Thanks for the help!

Hi Bart,
Could you share your code to make it work ?
I am not succeeding in getting back network data after calling the startTest function

+1
has upload speed but not continue the function


optimize: optimized the shdict node struct memory layout

which can save 8 bytes for every key-value pair on 64-bit systems, for example.
sync from: https://github.com/openresty/lua-nginx-module/commit/da08f59ae5ff0f230595322b3a8ce48bd42f1b3f
this will make travis passed.

@doujiang24 Have you/will you port this change to the meta-lua nginx module as well?

Seems like this change has already been synchronized in this module. Closing this, thanks!


Support inclusion of web applications in Studio projects

When a package is installed in dev mode, any web applications associated with it will be listed as part of the project. Handy for use in VSCode where it's otherwise a bunch of isfs-foo to get to your web application files.

I didn't want this to merge with CI failing (and haven't had time to look at it until now), so scope has crept quite a bit here...


Add a plugin for IPAddress (ipv4)

Please check if the PR fulfills these requirements

[X] Tests for the changes have been added

[X] Docs have been added / updated

[X] All CI checks are green

What kind of change does this PR introduce?

This PR introduces a new feature in the form of an IP address detector. This detector scans for public IP addresses (IPv4) and ignores certain non-public IPv4 addresses. The ignored addresses include 127.x.x.x, 10.x.x.x, 172.16-31.x.x and 192.168.x.x.

What is the current behavior?

Currently, there is no specific functionality in our system that allows for the detection of any IP addresses.

What is the new behavior (if this is a feature change)?
With this feature change, the system can now detect public IPv4 addresses. It uses a regex-based detector to identify valid public IPv4 addresses and ignore certain non-public ones.
Does this PR introduce a breaking change?

This PR does not introduce a breaking change. The new detector class IPAddressDetector is a standalone addition and does not alter or interfere with the existing code base.

Other information:
In addition to the implementation of the IP Address Detector, this PR also includes comprehensive tests to ensure the correct functionality of the detector. It tests the detector against valid public and non-public IPv4 addresses, as well as invalid IP addresses

The reference for the definition of public and non-public IPv4 addresses can be found in the following links:
IPv4 Address Space
Private Network - Wikipedia
The code documentation has been updated to reflect these changes. The new feature is expected to enhance the system's capabilities in handling IP address-related data.

FYI @KevinHock - thoughts?

Hi @perryzjc, thank you for opening this PR. I noticed our PR checks did not run, so I'll have to figure what happened there first. Rest assured I'll get to this as soon as possible.

@perryzjc hi again 😄 could you please merge master into your branch?

@perryzjc hi again 😄 could you please merge master into your branch?

@lorenzodb1 hi again, I've merged the latest updates from the master branch into my feature branch as requested. Please let me know if there's anything else needed for this pull request. Thanks!

@perryzjc looks like there's some pre-commit checks failing, please take a look

@perryzjc looks like there's some pre-commit checks failing, please take a look

@lorenzodb1  Thanks for letting me know. I've resolved the issues and all checks are now passing in the workflow.

Hey @lorenzodb1 @jpdakran - just wanted to follow-up here. It would be great to have these plugins part of the main codebase when you get a chance! Great job @perryzjc.

Hi @riverma, I have a bit of a backlog, but I promise you I'll get to this (and other great PRs) as soon as possible.

Hi @riverma, I have a bit of a backlog, but I promise you I'll get to this (and other great PRs) as soon as possible.

Thank you @lorenzodb1 for your support!


Format of STEP 5 is confusing for persons with English as a second language

The thread that is linked to is typical of the types of conversion that volunteers endure on a DAILY basis. From my initial reading of the post, it appeared the person had good English skills, but in fact that person was below average. This lead to the conflict and acromony.
From my point of view, there appears to be no issue the the text. However, given the consistent DAILY mis-reading of the text, it appears the text is being read as two (2) steps and NOT two (2) choices. That is, people are mis-reading the text of Step 5: Going Further. It reads:

There are two choices available for building and packaging your applications:

Build and package locally using the PhoneGap CLI
Use PhoneGap Build cloud service for simplifying the build and app packaging process

Which you choose will depend on how comfortable you are working with a command line environment and more closely with the native SDK's and tools versus leaving it to a cloud service and providing the required details.

The previous text seems to be mis-reading as such:

There are two steps for building and packaging your applications:

Build and package locally using the PhoneGap CLI
Use PhoneGap Build cloud service for simplifying the _[linguistic blindspot]_ process

To the casual person, with English as a primary language, this is obviously a mis-reading.
However to the average person with English as a second language, it is a 90+% hit rate. That is to say, thay can recognize 90+% of the words, therefore deduce the intent - with their interpetation.
To be clear,

choices available for gets misread as steps.

And

build and app gets mis-read as app.

On the first, in some languages choices and steps amount to the same thing. This is one possible interpretation, and the possible reading.
On the second, there may be some confusion (in the mind of the reader), but they see Build and package and deduce that somehow the "PhoneGap Build cloud service" build and app packaging are related. That is to say, they do not read this as a equivalence, but read this as a relationship. The fact that one word is in error - draws no significance to the reader.
On the second, the fact that words in bold become a _blindspot_ is normal given the repetive nature of technical articles.
One other note, I have seen blogs that suggest that the CLI should be used to create templates (or boilerplates) for Phonegap Build. In the future, I will make note of such blogs and get them to correct, if possible or necessary.
In any case, this is the best I can make of this.
SUGGESTION: Take the 2x4 approach. Make a clear divison. Delineate there are two choices. Delineate that the two choices are separate paths and cannot be interchanged. This may require a pictorial explanation, as well. If suggestion are requested, I can write something.
NOTE: The user suggests make an alternate choice. That choice should  be to point to templates as starting points. Perhaps this could be an explanation point.

These are issues on Nitobi
MORE Confusion

AllowInlineMediaPlayback not working on iPhone
UI5 Application converted to .apk using PhoneGap Build when installed on Android shows blank screen.
App upload does not render correctly

These are issues on Stackoverflow

PhoneGap navigator.notification.alert does not work on iOS

Thanks guys for finally getting this done.


Introduced inheritance as a Relation property and handle it

removed HTML tags for empty attribute list

Codecov Report

Merging #8 (43e537b) into main (c24b5f0) will increase coverage by 0.40%.
The diff coverage is 100.00%.

@@             Coverage Diff              @@
##               main       #8      +/-   ##
============================================
+ Coverage     86.14%   86.55%   +0.40%
- Complexity      133      136       +3
============================================
  Files            17       17
  Lines           361      372      +11
============================================
+ Hits            311      322      +11
  Misses           50       50

Impacted Files
Coverage Δ

src/Formatter/ClassFormatter.php
100.00% <100.00%> (ø)

src/Formatter/RelationsFormatter.php
100.00% <100.00%> (ø)

src/Handler/Relation/ClassExtendsHandler.php
100.00% <100.00%> (ø)

src/Model/Relation.php
100.00% <100.00%> (ø)

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update c24b5f0...43e537b. Read the comment docs.


Add support for creating feed items

Still need to capture output and create a unit test

Coverage decreased (-0.2%) to 96.413% when pulling ca99a109a1f2e2968d304b7aacafffb15c2934b1 on cyberjacob:create-feed-items into b5c8d4f46dcb3a2f475797a8b8ef1c15f6493fb9 on pawelad:master.

First of all, sorry for replying so late. You took the time to contribute, and I didn’t take the time to reply. The library was essential not supported since ~2017. I had some free time recently though and decided to give it some love and release v1.0.0
This should be fixed now so I'm gonna go ahead and close this one.
Once again, I'm very sorry for not reviewing this earlier.


[Bugfix] [Encoder-Decoder] Bugfix for encoder specific metadata construction during decode of encoder-decoder models.

In the encoder decoder model runner when constructing the cross-attention block table and encoder-seq length metadata we assume that there is only one sequence per sequence group. However this assumption will not hold when we are using beam search. In this pr we replicate the cross-attention block table & encoder seq length  metadata once for each of the sequences within a sequence group. Prior to this we would have have a single copy of the cross-attention block table & encoder seq length  metadata  per sequence group which would lead to incorrect cross attention computation for beam search use cases. As part of the pr also extended the existing tests to unit test the case where a sequence-group can have multiple sequences.

cc @afeldman-nm


[Phase 02] Support resource functions in OpenAPI Client Generation tool

Description:
Parent issue: https://github.com/ballerina-platform/ballerina-standard-library/issues/5366
During this 2nd phase, try to improve the client resource method body with the client resource method call in below way
string response = check httpClient->/some/endpoint(payload, headers, "application/json", name = "foo", id = 123);

Current Generated code
resource isolated function get api/v2/opportunities(string? embed = ()) returns OpportunityObject|error {
        string resourcePath = string `/api/v2/opportunities`;
        map<anydata> queryParam = {"embed": embed};
        resourcePath = resourcePath + check getPathForQueryParam(queryParam);
        OpportunityObject response = check self.clientEp->get(resourcePath);
        return response;
    }

With Improvement
resource isolated function get api/v2/opportunities(string? embed = ()) returns OpportunityObject|error {
        OpportunityObject response = check self.clientEp->/api/v2/opportunities/.get(embed);
        return response;
    }

Due to above mentioned limitation, we will close this issue, once there is a way to capture those details, this will be opened


⚠ Bofrost.be has degraded performance

In 6092702, Bofrost.be (https://www.bofrost.be) experienced degraded performance:

HTTP code: 200
Response time: 1243 ms

Resolved: Bofrost.be performance has improved in d395ed9 after 304 days, 3 hours, 59 minutes.


Inference Logger

Adds inference logging as defined here.
Key parts:

Updates control plane with optional inference_logger that can be applied to any predictor, transformer or explainer.
Adds inference-logger side-car to container to asynchronously send CloudEvents for request, response or both to user configured URL
Adds samples in docs/samples/inference-logger
Vendor folder is updated with CloudEvents libraries

This change is

Excited to see this. Highly recommend we separate this into 4-5 changes of a couple hundred lines each max. Perhaps:

go types/interface
dependencies
docs
logger

@ellis-bigelow  I have added #472 and #473
When these are reviewed and merged I can add the others.

These are the remaining changes:

Reconcile
Demos

If you could review @ellis-bigelow

/lgtm
/approve
Looks like it needs a rebase

/lgtm


Using federated auth for ACS tests

Changes:
In order to move away from Secret based authentication, we want to adopt FIC.
For the same azure-sdk team has added the support and we need to use service connection for our live test pipelines to access our test resources.

API change check
API changes are not detected in this pull request.

API change check
API changes are not detected in this pull request.

API change check
API changes are not detected in this pull request.

API change check
API changes are not detected in this pull request.

/azp run python - azure-communication-identity azure-communication-chat - tests

/azp run python - azure-communication-chat- tests

/azp run python - azure-communication-identity - tests

/azp run python - azure-communication-chat - tests
/azp run python - azure-communication-rooms - tests

/azp run python - azure-communication-rooms - tests

/azp run python - azure-communication-chat- tests

/azp run python - azure-communication-rooms - tests


Update container Mounted() and Mountpoint() functions

Addresses a regression in podman mount due to our mount changes to allow concurrency by letting c/storage handle mounting and unmounting.
Combine Mounted() and Mountpoint() into one function and query c/storage directly to ensure we get accurate information.
Fixes: #1143

LFTM

bot, retest this please

@baude I think we excluded that file when we first split out of CRI-O because nothing in it was commented... Oops?


Users API

Administrative Info
Make sure your branch name conforms to: <feature/staging/hotfix/...>/[username]/[Github Issue]-[3-4 word description separated by dashes].
What issue(s) does this branch close?
Closes #1
Changes
What changes did you make?

Created routes to

Create user in database
Get user by id
Get all staff

Testing
How did you confirm your changes worked?

Tested with tests written via npm run test

TODO

Confirmation of Change
Upload a screenshot, if possible. Otherwise, please provide instructions on how to see the change.
Changes are found in pages/api, lib/database/users.ts, models/users.ts

LGTM! Nice job.


If the list is already scrolled, SizeFadeTransition animation over shoots

I tried everything but in a horizontal list, if the list is already scrolled a little amount, the animation overshoots from the left edge of the screen.
Do you have any idea @wwwdata ?
I think the scroll position should be limited to the first remaining item after the update.
https://github.com/wwwdata/implicitly_animated_reorderable_list/assets/6442915/9ee22772-0659-4c4d-a5e2-5bb7a1cc2fa6

Without a code example. No. Most likely you have an error in your animation where it abruptly shrinks/grows at the end.


Update TaskContract.sol

Bound Check for array input.
In the getMyTasks function, there is no bounds checking when copying tasks into the temporary array. If the counter exceeds the temporary array's length, it could lead to an exception. We can add a check to ensure counter doesn't exceed temporary's length.
file path : Level1/Check-it/backend/contracts/TaskContract.sol
Domain of Docs

[] Readme
[x] Solidity , Html, Css , JavaScript , Web3.js / Ether.js
[] Solidity , ReactJs /NextJs , Web3.js /Ether.js
[] Solidity , Python3 , Web3.py
[] Other , feel free to mention below

Are you contributing under any open-source program ?
No , but i would love to join one.

Hey sorry but we are not accepting the new issue now. Hope to see the contribution after the programme as well. Thanks!
Feel free to open this.

@i already did the required changes and created a pull request ,please merge it


Dropdown-example

I've been working on a dropdown example, and I made it. I hope you like it and accept it. I'll be so happy with your opinions. codesandbox

And if it's good enough to be in the README, let me know, because I wanted to edit the README by myself, because I think it's a good haktoberfest thing.

This is great! There are some issues around keyhandling still influencing the outer editor, but I'd love to add this to the readme :+1: I think it's also missing the actual selection of the suggestion which could just be done using the returned useEditable function I think.


Help command.

List all groups and commands, description, args, etc.
By default just the name of the command and maybe args or description (trimmed),
and details command to view help for command.
Probably requires the six for loop system

No clue how to do it...
help is in commands.secondary, need commands.main and commands.secondary .length() from within. 'this' just accesses {"name":"help",...}


Artifacts uploaded are not removed on server causing storage limit.

I used the action to upload my website docs on github-pages. However, each deployment created an artifact of 2GB causing my storage on github to reach its max capacity.
Should there be a way to delete the artifacts in the action after it deploys to pages ?
Maybe if its possible to on post actions of upload-pages-artifact

Hello!
We actually do remove artifacts from the backend side for you. I believe we only keep the last few ones (between 1 and 3). We also set the retention on the artifact to the minimum we can which is a day. The billing meters around artifacts storage are also not real time so unless you build many times in a single day, you should only see a temporary impact on your storage (for private repositories).

@yoannchaudet hey I did tried using .. and checked the default retention is 1 day... However the size of our build is big so we wanted to delete the artifact immediately.
Which I did not found


hastebin.com can be accessed on plain HTTP

Hello,
I don't know if this is the proper place to share this, but here you go.
You can use http://hastebin.com, which will eavesdropping on the submission.
I think that hastebin.com should be HTTPS only.
Thanks.

Hello @brunosaboia! Thank you for the proposal.
I think this is no longer relevant as hastebin has been moved to https://www.toptal.com/developers/hastebin/ which no longer accepts non-secure http requests.


repl /vars command to output type

Currently the REPL /vars command will output a list of explicit and implicit declared variables without type information. It would be beneficial to add type information to this output.
e.g.
conc> a=10
a ==> 10

conc> 100
$0 ==> 100

conc> myString = a["hi"]
myString ==> hi

conc> /vars
$0
a
myString

Vars could output:
conc> /vars
$0        int
a         int
myString  java.lang.String[]

etc

Hey @jasontatton I would like to work on this.

@vaidyamilind Sure, that would be awesome! Please give me a shout if you need any help


[Bug]: Panic occured at runtime.

System Info
System:
OS: macOS 14.5
CPU: (8) arm64 Apple M1 Pro
Memory: 152.00 MB / 16.00 GB
Shell: 5.9 - /bin/zsh
Binaries:
Node: 20.15.1 - ~/.nvm/versions/node/v20.15.1/bin/node
Yarn: 4.3.1 - ~/.nvm/versions/node/v20.15.1/bin/yarn
npm: 10.7.0 - ~/.nvm/versions/node/v20.15.1/bin/npm
Browsers:
Chrome: 126.0.6478.183
Safari: 17.5
npmPackages:
@rspack/cli: ^1.0.0-alpha.5 => 1.0.0-alpha.5
@rspack/core: ^1.0.0-alpha.5 => 1.0.0-alpha.5
Details
I don't know why without any changes I suddenly get this error, some hours ago it was working and also the last days:
Panic occurred at runtime. Please file an issue on GitHub with the backtrace below: https://github.com/web-infra-dev/rspack/issues
Message:  failed to invoke plugin: failed to invoke plugin on 'Some("src/components/PolicySelect/index.jsx")'

Caused by:
    0: failed to invoke `@swc/plugin-emotion` as js transform plugin at @swc/plugin-emotion
    1: Error while importing "env"."__merge_spans_proxy": incompatible import type. Expected Function(FunctionType { params: [I32, I32, I32, I32, I32], results: [I32] }) but received Function(FunctionType { params: [I32, I32, I32, I32, I32, I32, I32], results: [I32] })
Location: /Users/runner/.cargo/registry/src/index.crates.io-6f17d22bba15001f/swc-0.279.1/src/plugin.rs:169

Run with COLORBT_SHOW_HIDDEN=1 environment variable to disable frame filtering.
Run with RUST_BACKTRACE=full to include source snippets.
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ BACKTRACE ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
 1: _napi_register_module_v1
    at <unknown source file>
 2: _napi_register_module_v1
    at <unknown source file>
 3: _napi_register_module_v1
    at <unknown source file>
 4: _napi_register_module_v1
    at <unknown source file>
 5: _wasmer_vm_f64_nearest
    at <unknown source file>
 6: _wasmer_vm_f64_nearest
    at <unknown source file>
 7: _napi_register_module_v1
    at <unknown source file>
 8: _napi_register_module_v1
    at <unknown source file>
 9: _napi_register_module_v1
    at <unknown source file>
10: _napi_register_module_v1
    at <unknown source file>
11: _napi_register_module_v1
    at <unknown source file>
12: _napi_register_module_v1
    at <unknown source file>
13: _napi_register_module_v1
    at <unknown source file>
14: _napi_register_module_v1
    at <unknown source file>
15: _napi_register_module_v1
●  ━━━━━━━━━━━━━━━━━━━━━━━━━ (59%) building builtin:swc-loader??ruleSet[1].rules[5].use[0]!/src/monitoring/constants.js                                                                                at <unknown source file>
16: _napi_register_module_v1
    at <unknown source file>
17: _napi_register_module_v1
    at <unknown source file>
18: _napi_register_module_v1
    at <unknown source file>
19: _napi_register_module_v1
    at <unknown source file>
20: _napi_register_module_v1
    at <unknown source file>
21: __pthread_joiner_wake
    at <unknown source file>

I don't if can helps but I have this rules:
{
        test: /\.(j|t)s$/,
        exclude: [/[\\/]node_modules[\\/]/],
        loader: 'builtin:swc-loader',
        options: {
          jsc: {
            parser: {
              syntax: 'typescript',
            },
            externalHelpers: true,
            transform: {
              react: {
                runtime: 'automatic',
              },
            },
          },
          env: {
            targets: 'Chrome >= 48',
          },
        },
      },
      {
        test: /\.(j|t)sx$/,
        loader: 'builtin:swc-loader',
        exclude: [/[\\/]node_modules[\\/]/],
        options: {
          jsc: {
            parser: {
              syntax: 'typescript',
              tsx: true,
            },
            transform: {
              react: {
                importSource: '@emotion/react',
                runtime: 'automatic',
              },
            },
            experimental: {
              plugins: [['@swc/plugin-emotion', {}]],
            },
            externalHelpers: true,
          },
          env: {
            targets: 'Chrome >= 48', // browser compatibility
          },
        },
      },

Reproduce link
No response
Reproduce Steps
rspack build --config rspack.config.js

Please downgrade @swc/plugin-emotion to 3.0.9.
3.0.10 is breaking with old swc.

@xc2 I have tried today with beta version of rspack and @swc/plugin-emotion 3.0.10 and it seems to work, can you confirm?

@Piero87 It should work. Thank you for your feedback.
rspack v1.0.0-beta.0 includes an update to swc in order to be compatible with the latest versions of swc plugins, which require a newer swc version.
https://github.com/web-infra-dev/rspack/pull/7292


[Snyk] Security upgrade sqlparse from 0.4.1 to 0.5.0

This PR was automatically created by Snyk using the credentials of a real user.Snyk has created this PR to fix one or more vulnerable packages in the `pip` dependencies of this project.
Changes included in this PR

Changes to the following files to upgrade the vulnerable dependencies to a fixed version:

backend/kesaseteli/requirements.txt

⚠ Warning
Django 3.2.23 requires sqlparse, which is not installed.

Vulnerabilities that will be fixed
By pinning:

Severity
Priority Score (*)
Issue
Upgrade
Breaking Change
Exploit Maturity

768/1000  Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 7.5
Uncontrolled Recursion SNYK-PYTHON-SQLPARSE-6615674
sqlparse:  0.4.1 -> 0.5.0
No
Proof of Concept

(*) Note that the real score may have changed since the PR was raised.
Some vulnerabilities couldn't be fully fixed and so Snyk will still find them when the project is tested again. This may be because the vulnerability existed within more than one direct dependency, but not all of the affected dependencies could be upgraded.
Check the changes in this PR to ensure they won't cause issues with your project.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.
For more information:
🧐 View latest project report
🛠 Adjust project settings
📚 Read more about Snyk's upgrade and patch logic

Learn how to fix vulnerabilities with free interactive lessons:
🦉 Learn about vulnerability in an interactive lesson of Snyk Learn.

EMPLOYER branch is deployed to platta: https://kesaseteli-employer-pr2936.dev.hel.ninja :rocket::rocket::rocket:

TestCafe result is success for https://kesaseteli-employer-pr2936.dev.hel.ninja :laughing::tada::tada::tada:

HANDLER branch is deployed to platta: https://kesaseteli-handler-pr2936.dev.hel.ninja :rocket::rocket::rocket:

TestCafe result is success for https://kesaseteli-handler-pr2936.dev.hel.ninja :laughing::tada::tada::tada:

YOUTH branch is deployed to platta: https://kesaseteli-youth-pr2936.dev.hel.ninja :rocket::rocket::rocket:

TestCafe result is success for https://kesaseteli-youth-pr2936.dev.hel.ninja :laughing::tada::tada::tada:


Is this a community that discriminates against LGBT? Probably yes

Still no response to my request, in the meantime I wrote a Tweet

there is already an open issue on this topic #231

Clearly your motivation to close this is that you feel disgust towards LGBT people

please use the main issue #231

Despite the OP's unfriendly ways, his request was approved and implemented as #234 #237.


Task :app:mergeDebugResources FAILED

Describe the bug
Build getting failed with Task :app:mergeDebugResources FAILED error
To Reproduce
Steps to reproduce the behavior:

follow the startup guide
Add dependency
Build project
See build error

Screenshots
https://imgur.com/a/iMkysPE
Full error logs
`> Task :app:mergeDebugResources
/home/dalakoti07/.gradle/caches/transforms-3/ac13ed731ff91608bb885e6070e58d98/transformed/preference-1.1.1/res/values/values.xml:424:4: Duplicate value for resource 'attr/min' with config 'DEFAULT' and product ''. Resource was previously defined here: /home/dalakoti07/AndroidStudioProjects/consumer/commons/ui/build/intermediates/packaged_res/debug/values/values.xml:1749:4: .

Task :app:mergeDebugResources FAILED
Execution failed for task ':app:mergeDebugResources'.
A failure occurred while executing com.android.build.gradle.internal.res.ResourceCompilerRunnable
Resource compilation failed. Check logs for details.

`

@Dalakoti07 can you share the library version.

version 1.0.4


How to consume a non-module package in go modules?

What version of Go are you using (go version)?

$ go version
go version go1.14 linux/amd64

Does this issue reproduce with the latest release?

I try to add this package as my dependency.
https://github.com/AgoraIO/Tools/blob/master/DynamicKey/AgoraDynamicKey/go/src/AccessToken/AccessToken.go
What did you expect to see?
I thought go modules could consume non-module package. Am I missing something here?
What did you see instead?
Go modules complains about go.mod not exist.
$ go mod tidy
go<EMAIL_ADDRESS>invalid version: missing github.com/AgoraIO/Tools/DynamicKey/AgoraDynamicKey/go/src/AccessToken/go.mod at revision f39dcc149cc1

Minimum reproduce code
main.go
package main

import (
	"fmt"

	"github.com/AgoraIO/Tools/DynamicKey/AgoraDynamicKey/go/src/AccessToken"
)

func main() {
	fmt.Println(accesstoken.getVersion())
}

go.mod
module golang

go 1.14

require github.com/AgoraIO/Tools/DynamicKey/AgoraDynamicKey/go/src/AccessToken v0.0.0-20190826130428-f39dcc149cc1

For asking questions about learning the language, see one of our forums: https://golang.org/wiki/Questions. We only use this issue tracker for tracking bugs. People in the forums can explain what is happening here.
In this case, your require statement should be the name of the repo:
require github.com/AgoraIO/Tools v0.0.0-20190826130428-f39dcc149cc1

Also note that getVersion() is not exported and is unusable in your package.


Some confusion?

1.As the paper show:
M-number of established connections
Mmax-maximun number of connections for each element per layer(except l0)
Mmax0-maximun number of connections for each element in l0
so the quantitaive relationship between them is what?
what I know is Mmax0=2*Mmax.   but then the relationship between Mmax and M is what?
2.How to export the id of neighbors of one vertex in the graph in python?

Hi @dongzhen123 ,

By default Mmax=M
There is no way to do that now, but, it should be quite easy to implement.

Hi @dongzhen123 ,

By default Mmax=M
There is no way to do that now, but, it should be quite easy to implement.

thanks for your reply.then
1.for l0 and other l,the M is same?the difference is that Mmax0=2*M and Mmax=M?
2.can you give a example to implement it?

@dongzhen123
Sorry for the delay.
Yes, I can guide through the process.

@dongzhen123
Sorry for the delay.
Yes, I can guide through the process.

I found some strange thing, and have a look in https://github.com/nmslib/hnswlib/issues/185 in detail.thank you~


[Train] Use valid and train data to train model

Why only use a data bank to train the model, it has always been better to use a data bank for training and another for validation to avoid the over-training of the model, why not use it here?

Hello @jsdussanc!
When you use a dataset, you normally have several 'splits': train, val and test.
Using them appropriately is the responsibility of the user. For example, you would use val for hyperparameter tuning. The lumi dataset tool can convert several splits to tfrecords for using with Luminoth.
Please let me know if my answer suffices or if I did not understand your question!

No, you have not understood me
It is true that many of the Luminoth tools support "split", but the training tool does not include this and you have to choose only one dataset for it.
See line 74 in luminoth/models/ssd/base_config.yml
dataset:
  type: tfrecord
  # From which directory to read the dataset
  dir: datasets/voc/tf
  # Which split of tfrecords to look for
  split: train

Only support one split to train
In my feew knowledge, the "train" dataset is used to perform the backpropagation and the "valid" dataset to perform the tuning hyperparameter tuning or set the fitness for epoch.
Please correct me if I'm wrong about something or if I'm not very clear

I am not sure I am following...
Are you mentioning that train should also support a val split for early stopping during training (with the train split)? Or are you talking about tuning parameters?

Why not talk about both?
How about the model is over-trained with features that are not representative that may be detectable if you add val.
The early stop may also be a good idea, but I had not thought about it at this time.
I reiterate I am not an expert, I only relate what I have seen in other implementations.

These are two different issues altogether.
Issue 1. Using val split during training and computing metrics (mAP, loss, etc) for early stopping. This cannot be done so far.
Issue 2. Training with train+val splits together, instead of just train. This can be done by creating a new split using the lumi dataset merge command.

it's OK

I do not know if I understand the point, use more examples to avoid over-training?

What I currently do is create a dataset from PASCAL using the train_val set, that includes the two dataset train + val of my own data, without using the marge command.
Using the marge command as you suggest, would it bring me different results?
My point is that I am using the val dataset to update the weights of the model, which is what in many places I have seen that it is not indicated.
I use it properly is to determine that the updating of the weights is directed by the best way (fitness).

You should use your training dataset when running the train command.

You should use your validation dataset when running the eval command. After this you usually check the results of the eval command and make decisions based on them.

Your training and validation data should not be merged during training, or else this whole separation of datasets to reduce overfitting is pointless.
Luminoth supports both these features.

Exactly, it's pointless.
At the moment I have not done the exercise of doing both at the same time (eval and train).
Everything I have stated above is a theoretical element.
I currently have a model with mAP: 0.925, trained with val+train with 422671 steps. I do not currently have a test dataset to contrast my model (see dataset in https://github.com/jsdussanc/dipstick), Any configuration suggestion is welcome.
Suppose
I have 3 datasets (train, val, test), in the training I use train together with the train tool, I use 3 different processes with the eval tool (only recive one split), I have the traceability of the contrast of the 3 datasets
In K steps, I observed that the model began to be over-trained in K-1000 steps.
What can I do?
I can't rollback at the moment
Don't get me wrong, I love what you have done here so far

There was an undocumented option for keeping more checkpoints around.
See commit https://github.com/tryolabs/luminoth/commit/73534c04a3cfe85808085912a3bb833ac7d4d63a, hope it's useful for your case :)

Thank you very much, in the future, maybe this change can save many people from recovering from a fall.
Now
Do you want me to create an issue talking about the possibility of creating an early-stop training functionality as you suggested?

It's really not necessary, it's something we have in the roadmap, but not trivial to implement :)

If I thought that, more when you support several forms of optimization.
Is there any way to see your roadmap?


Fix list headings on landing pages

Trello card
Trello-4625
Context
The heading structure in the list section used on some of our landing pages doesn’t make sense. We currently have a lot of h2s in a list with no content beneath them (see screenshot).
Changes proposed in this pull request
Change element from h2 to span
Guidance to review

Looks good to me - have tested using VoiceOver on iPhone as well
Happy for this to be merged tomorrow (Weds) - but one question first @plisovin - does adding bold to heading-m affect any other pages?

heading-m is used with <h2> which is bold anyway, so it's safe


Make Stock inheritable for variants

Description
Product variants already have the "inherit" Icon for inheriting the stock-value. But saving the variant won't work. I guess this is not yet implemented.
For some cases the variants depend on one base product (e.g. a table with different table legs), so this would be a nice feature: No matter which variant get's bought, the base-products stock decreases.

The server implementation for the stock inheritance is not implemented yet. I will create an Issue for this.
Thanks for your report :)

Hello,
thank you for creating this issue.
I have opened a ticket on our Issue Tracker for you. See the ticket link: https://issues.shopware.com/issues/NEXT-7122
Please use this ticket to track the state of your issue.

We were also assuming this was going to work as intended, since the inherit icon is available for variant products.
Is this issue somewhere on the roadmap yet? Since this ticket is open for over a year...

Hello,
Within our company roadmap and work capacity, we try to address each bug or improvement request but admit that not each one will be resolved. To continue our culture of honesty and openness, we are closing this issue to focus on our roadmap on behalf of all Shopware users.
If you feel like this issue is still impacting you, please create a new issue and let us know.
Thank you again for your valuable feedback.


Best practice for deploying TimesFM on SageMaker

👋 What are the best practices for running TimesFM on Amazon SageMaker, considering the dynamic nature of horizon_len. Can  the model be loaded and initialized first, so I can specify the horizon_len parameter at inference/forecast time?

I think its best to set the horizon_len to the maximum of what you would need at init. This way it will be jitted and all subsequent forecasts would be very fast.


Windows crashed. Now I can't open the app, even after an uninstall and reinstall?

OS: Windows (10)
Issue Descriptions: I just get a popup saying "Javascript: Error on Main Thread."
Steps to Reproduce: Keeps happening every time I try to open the program now, and Player then just doesn't open.

Delete your settings file found at
%APPDATA%/Google Play Music Desktop Player/json_store

Can't find the directory... Found a packages.json and deleted it but no luck..?

Well, you probably shouldn't have deleted that. The Location above should exist, and it should contain a file called .settings.json. If you have to remove the entire %APPDATA%\Google Play Music Desktop Player directory and reinstall.

It's just in recycle bin, I'll restore and search that now, thanks.


feat: add resources conditionally

Closes  #313

Pull Request Test Coverage Report for Build<PHONE_NUMBER>

30 of 39 (76.92%)  changed or added relevant lines in 2 files are covered.
No unchanged relevant lines lost coverage.
Overall coverage increased (+0.02%) to 74.884%

Changes Missing Coverage
Covered Lines
Changed/Added Lines
%

core/provider/service.go
29
38
76.32%

Totals

Change from base Build<PHONE_NUMBER>:
0.02%

Covered Lines:
6127

Relevant Lines:
8182

💛  - Coveralls

let's add a validation on provider create&update for this new filter field. We can create a dummy resource and try to evaluate the expression onto that resource to see if the expression if valid and working or not

https://github.com/odpf/guardian/blob/filter_resource/core/provider/service_test.go#L323
I have verified this manually also

@rahmatrhd @mabdh @bsushmith please review changes and approve the pr so we can merge it

@rahmatrhd Please see if we can review and close this.


Update use-qr-code-download-outlook.md

Added an important note that the feature is on hold and does not work now. Identity team is working on it currently.
Fixes#https://github.com/MicrosoftDocs/microsoft-365-docs/issues/10838

@JohanFreelancer9
Please copy review

@JohanFreelancer9

@kwekuako Please merge this PR. Thanks


[Compute] az vm update: support cross tenant image

Description
Previously, if the VM is created from a cross tenant image, then az update command for this VM will fail.
This change is to add cross tenant support for az vm update command, just as az vmss update does.
Testing Guide
Please follow the test case in change files.
History Notes

[Component Name 1] BREAKING CHANGE: az command a: Make some customer-facing breaking change.
[Component Name 2] az command b: Add some customer-facing feature.

This checklist is used to make sure that common guidelines for a pull request are followed.

[ ] The PR title and description has followed the guideline in Submitting Pull Requests.

[ ] I adhere to the Command Guidelines.

Compute


CLAs require signatures

Hey guys,
I talked to my lawyer about CLAs for our project - if they are necessary, why and when we need them, etc. pp. He told me that CLAs overall are only valid with a signature - at least in Germany, Swiss, France and the major EU countries he is familar with due to clients in the past.
Is there an option available to have a signature field, like using HTML5 canvas for mobile phones or attaching a signature image file?

Can you ask your lawyer if a digital signature like signed on HTML 5 canvas would be acceptable?

Yes, it would be acceptable if the signature is on the same document.
Most companies use the digital signature service of Adobe (formerly EchoSign): https://acrobat.adobe.com/us/en/sign.html
The main reason people use that service is that you can sign a PDF with that service using your Touchpad or mobile device (using your fingers and canvas for the signature field). Another important reason is that the PDFs are digitally signed afterwards (by Adobe) - but that is optional as other documents are also legal. The digital signature part is just in case somebody denies having signed the PDF in the first place.

@toddw Is this project still maintained?
Otherwise I'd close this issue due to inactivity. Just reopen it if clabot is still an active project.

I'm volunteering, but I do not have access to reopen the issue

I have no idea about the clabot codebase, so I guess I can't help much. I'm also not so good in coffeescript, but I would love to help in other things like testing etc.

This repository is no longer maintained. Archiving the repository.


[9.x] Improve UUID and ULID support for Eloquent

Improves upon #44074 by:

Allowing to more easily use the trait to just be used on non-primary key columns
Adds a special ulid column on Blueprint that creates a char(26) behind the scenes
Automatically sets incrementing to false when a string type primary key is used
Adds more tests

I was doubting on checking to see if I could add support to use both traits at the same time (so you could both fill in UUID and ULID columns) but I guess that scenario isn't so common.

Why was the change to getKeyType not needed on HasUlids too?

@taylorotwell whoops, you're right. Pushed.
I first was thinking of doing it through a property but when you apply a trait with a property directly on a model you cannot overwrite it.

Good job! 👍

Maybe it's nice to add support for a binary column type for UUID? :smirk:

This update break jenssegers/laravel-mongodb
public function getIncrementing()
    {
        if ($this->getKeyType() === 'string') {
            return false;
        }

        return $this->incrementing;
    }

@The-Hasanov I replied on the related PR fix: https://github.com/jenssegers/laravel-mongodb/pull/2452


Update to include support for multiple Secure vHUBs in the same region

Multiple Secure vHUBs are supported in the same region

@nthewara : Thanks for your contribution! The author(s) have been notified to review your proposed change.

#label:"aq-pr-triaged"


Update binja unit test to target 4.1 and makre sure things do not break

Since we have released the stable 4.1 (https://binary.ninja/2024/07/17/4.1-elysium.html), we need to update the version check in the unit test and test if anything breaks

Yeah it seems already causing some issues as in https://github.com/mandiant/capa/actions/runs/9981445289/job/27586195834


Not able to setup site on the local system.

Hello, I am trying to set up the site on the local with the steps mentioned on GIT but getting errors after the npm run start. sometimes, it does not give any errors but keeps loading on the URL without any output.

Please check this.

Unfortunately this it related to webpack 4. It needs to be updated to v5
see https://github.com/swashata/wp-webpack-script/issues/1253


Avatar snapshot on HUD update not instant

Sometimes (if not always) I edit my avatar and save, and I can see my old customization on the top right corner of the HUD.

Please reopen this issue if this happens again.


No roles property for userSettings in Microsoft Dynamics 365 on-premise version 1612 (<IP_ADDRESS>)

In a Microsoft Dynamics 365 on-premise version 1612 (<IP_ADDRESS> and also <IP_ADDRESS>), user settings can be fetched by the below statement but do not have roles property that is mentioned on the content.

var userSettings = Xrm.Utility.getGlobalContext().userSettings

The below articles does not mention any fix about it.

Service Update 0.23 for Microsoft Dynamics 365 9.0
Service Update 0.24 for Microsoft Dynamics 365 9.0

Document Details
⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

ID: 999537e5-d7fd-6e16-207a-b7c7c31fdc9e
Version Independent ID: 48ac9b62-a8b5-3bab-11b5-c0bbc5fde88c
Content: getGlobalContext.userSettings (Client API reference) in model-driven apps - Power Apps
Content Source: powerapps-docs/developer/model-driven-apps/clientapi/reference/Xrm-Utility/getGlobalContext/userSettings.md
Service: powerapps
GitHub Login: @Nkrb
Microsoft Alias: nabuthuk

@anilTeke Thanks for contacting us. For on-premises environments we need to use Xrm.Utility.getGlobalContext().userSettings.securityRoles method. We are in process of updating the client API docs for both on-premises and online versions. Closing the issue. IF you need further help, please reopen or create a new issue.

@anilTeke Thanks for contacting us. For on-premises environments we need to use Xrm.Utility.getGlobalContext().userSettings.securityRoles method. We are in process of updating the client API docs for both on-premises and online versions. Closing the issue. IF you need further help, please reopen or create a new issue.


Feat/rocko/hardware id etc

Passes oe-selftest.

@EpicNuts Two new objects? What do you mean? Hopefully that you built and pushed two images...

@EpicNuts Two new objects? What do you mean? Hopefully that you built and pushed two images...

@patrickvacek I said images! :D
Also got the oe-selftests to pass

Ah, okay, cool, thanks!


linux_zen: 5.8.1 -> 5.8.5

Motivation for this change
Upstream update
Things done

[ ] Tested using sandboxing (nix.useSandbox on NixOS, or option sandbox in nix.conf on non-NixOS linux)
Built on platform(s)

[x] NixOS
[ ] macOS
[ ] other Linux distributions

[ ] Tested via one or more NixOS test(s) if existing and applicable for the change (look inside nixos/tests)
[ ] Tested compilation of all pkgs that depend on this change using nix-shell -p nixpkgs-review --run "nixpkgs-review wip"
[x] Tested execution of all binary files (usually in ./result/bin/)
[ ] Determined the impact on package closure size (by running nix path-info -S before and after)
[ ] Ensured that relevant documentation is up to date
[x] Fits CONTRIBUTING.md.

5.8.6 just released https://github.com/zen-kernel/zen-kernel/releases/tag/v5.8.6-zen1


WMctrl is not a needed dependency

WMctrl doesn't seem like a dependency, I don't have it and it seems fine, not sure why that would be a dependency, can you enlighten me on why you'd need that?

Seems like a dependency of an old commit, but I can't see it being in the current code

It will be a dependency as soon as i finish a function that requires it.

It will be a dependency as soon as i finish a function that requires it.

ag, sorry


Add: postgres.user, postgres.database

Early rough draft:
@operation
def postgresql_user(state, host, name, superuser=False):
   # Warning: this fails if the user already exists
   if superuser:
       yield 'su postgres -c "createuser --superuser {}"'.format(name)
   else:
       yield 'su postgres -c "createuser {}"'.format(name)

@operation
def postgresql_database(state, host, name, user=None):
   user = user or 'postgres'
   yield 'su {} -c "createdb {}"'.format(user, name)

In order to check if a user already exists, the recommended method on StackOverflow is to run the following, but I have quote issues running it inside server.shell:
psql postgres -tAc "SELECT 1 FROM pg_roles WHERE rolname='USR_NAME'"


Sysex Librarian: multiport interface display

I think this is a regression from pre-BigSur versions. My multiport MIDI interface is displayed properly in the menu when it's open, but only the interface name is displayed when the menu is closed. I've run into this issue before with other software -- the interface name contains a \0 character, which is legal in NSStrings, but causes trouble when names are concatenated. Not sure if that's what's happening here, but it's my suspicion.

That's odd!  I don't know why it would have changed in Big Sur, or the release I did for Big Sur support.
Do you know where exactly the \0 is in the interface name? And how do you know it's there, when it isn't generally visible?

If you check out my Audio-MIDI Setup config (attached), you can see the /0s registered by the device, but it's visible in the debugger, as well. It requires some extra love when performing NSString concatenation. This is a pretty old interface and I've never seen this problem with other devices, but it's a device.
I have some code lying around to do "safe" concatenation for cases like this, happy to pass it along, but I'm sure it's nothing surprising or novel to you.
Standard.mcfg.zip

Thank you! Will check that out when I can.  I vaguely recall NS/CFString having issues with embedded \0s, but I'm sure I can search for more details if needed.

Looks like Apple introduced a bug in NSPopUpButton. It worked correctly in 10.9 (Mavericks) and 10.11 (El Capitan), but is broken in 10.15.7 (Catalina) and apparently 11.0 (Big Sur) too. (Not sure exactly when it broke -- sometime in that span.)
Worked around it by stripping \0 characters from the item title.

Thanks!


varLib.iup_delta_optimize can produces different outputs when using cython

Still digging into this, but feels worth opening an issue at this point:
The following python program produces different output depending on whether or not varLib is using cython:
from fontTools.varLib import iup_delta_optimize

def main():
    deltas = [
        (40, 0),
        (24, -104),
        (15, -104),
        (3, -104),
        (-19, -92),
        (-32, -68),
        (0, 0),
        (0, 0),
        (0, 0),
        (0, 0),
    ]
    orig = [
        (206, 0),
        (174, 458),
        (152, 458),
        (124, 458),
        (74, 486),
        (42, 541),
        (0, 0),
        (0, 0),
        (0, 0),
        (0, 0),
    ]

    result = iup_delta_optimize(deltas, orig, [5], 0.5)
    print(result)

if __name__ == "__main__":
    main()

with cython:
[(40, 0), (24, -104), None, (3, -104), (-19, -92), (-32, -68), None, None, None, None]

without cython:
[(40, 0), (24, -104), None, None, (-19, -92), (-32, -68), None, None, None, None]

I suspect this has something to do with how the cython code is handling the tolerance param; a very good clue is that the output is identical if I change the tolerance from 0.5 to 0.50001.
edit: right, this strongly echoes #3282

Ugh. Not again!

It sounds like eg. a fused mul/sum or some other result-changing optimization in the Cython compiled code...

edit: right, this strongly echoes #3282

Yeah I was just looking for that...

edit: right, this strongly echoes #3282

Yeah I was just looking for that...

Despite the similarity, I think this is just a float-precision issue.

"fixed" in #3704


gc does not clean up IP masquerading rules

I believe this is a regression but now even after rkt gc --grace-period=0:
$ sudo iptables -L -n -t nat
Chain PREROUTING (policy ACCEPT)
target     prot opt source               destination

Chain INPUT (policy ACCEPT)
target     prot opt source               destination

Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination

Chain POSTROUTING (policy ACCEPT)
target     prot opt source               destination
CNI-default-97b09902728b6d15  all  --  <IP_ADDRESS>/31       <IP_ADDRESS>/0

Chain CNI-default-97b09902728b6d15 (1 references)
target     prot opt source               destination
ACCEPT     all  --  <IP_ADDRESS>/0            <IP_ADDRESS>/31
MASQUERADE  all  --  <IP_ADDRESS>/0           !<IP_ADDRESS>/4

Any updates on this?

I haven't tested if it's needed or looked at the code so it's just a question: is a conntrack table entry cleanup needed like in docker/docker#8795 ?

Fixed by #1183

We will probably need to do something with conn tracking but that's a separate issue


How can we get bindgen output with wrap_static_fns() ?

So for example I want to include esp32/incude/hal/i2s_ll.h and all the static inlines inside it, but by default all the static inlines are not generated in the bindings. How can I include wrap_static_fns() so that I get the inline utility APIs inside i2s_ll.h ? From my project's build.rs can I pass in something to the embuild flags or anything of that sort to achieve this ?

wrap_static_fns is a brand new, experimental feature of bindgen and as such it is not supported out of the box in esp-idf-sys. Moreover, it is not just about "passing the flag to bindgen", as in that case bindgen would generate a C file too, that you need to compile with clang (or gcc would do as well?) and then you need to use cargo build cmds to pass down the compiled output to the linker.
Not a rocket science, but would require some changes to esp-idf-sys - in the native as well as in the pio code paths, (as long as it can even be supported in the latter).
Might also require a small change to embuild so that it's bindgen dependency is updated to a version which supports bindgen 0.65, if that's not the case already.
All in all it would require a PR. Are you willing to work on that?

@ivmarkov yes ill take a stab at it

PR here https://github.com/esp-rs/esp-idf-sys/pull/202

We now use bindgen 0.69 both in embuild and this crate. I think they made additional changes how to handle inline functions across FFI layer,  but it seams that it would still need a lot of handholding on our part.


Documentation links are broken

Cross-reference links in the documentation are pointing to .rst pages, where they should be pointing to .html.
See for example page https://lona-web.org/end-user-documentation/frontends.html. It has a link to
More information: Basic Concept
Defined in:
https://github.com/lona-web-org/lona/blame/master/doc/content/end-user-documentation/frontends.rst#L12
Either documentation has to switch from .rst to .html in links, or building of the documentation has be fixed.
if someone can advice which approach should be taken, I can have a closer look.

Thanks for reporting!
Links in rst Syntax
`link text <link-target.htm>`_

have to link to .html files, links in Flamingo  Syntax
{{ link('link text', 'link-target.rst') }}

have to link to .rst files.


Allow changing write function of stdout

It is required for working console output redirect.
Should fix #300.

Yes, it looks like an obvious solution.
But, I don't like too much function calls. For a single character of printf there's a chain of calls and now it's getting even longer:
printf->_write_r->sdk_os_putc->default_putc->uart_putc(0)
Currently this chain is two calls shorter:
printf->_write_r->uart_putc(0)
I agree that the fix is needed by there must be a better way to handle this.

Found another issue with original commit - it failed when using spiffs.
New version redirects on block level, and spiffs does not need to know about stdin/stdout handling.
Sdk_os_putc is not used for block level stdout redirection, not sure if it is used anywhere else...
May be worth removing it to avoid confusion.

Fixed missing "return" when calling to _read_filesystem_r, reading from SPIFFS now works.

Thank you for the initial review @sheinz.
Last version fixes the long chain issue - it redirects block instead of single character:
_write_r -> _current_stdout_write_r (pointer-to-function)
It does not break when linked with SPIFFS:
_write_r -> _write_filesystem_r (weak symbol, esp_spiffs.c overrides) -> SPIFFS_write
Could you please review it ?

@sheinz Can this PR be merged? It looks good to me.

@UncleRus Yes, I think so. Looks good for me too.


Issue #335 -- Selected Total "Randomly" stops working

There are certain times where YNAB will overwrite the header which gets rid of our Selected Total container. This will recall init if the container is missing when we expect it to be present.
i also reordered the functions to be in a more logical order.

Thank you!


Detect "face" in picture and crop it

Hi ,
Can you make an example of this script to detect the face from an image and then crop it in a new canvas?
Or please give me some hints.. i am struggling.... :)
Thanks for your time.

I know this was a minute ago, but I think a solid way of approaching this would be to use simple Haar Face Detection and then ROI (Region of interest). It seems to me using this face tracking is overkill for simply cropping a face out of an image. That said it would here is how I would do it using this face tracker. I would use p5.js as it will make the code simpler. Here is a piece of starter code using p5 and the clm tracker. Here are the steps I would follow:

Iterate through the points to find the rough bounding box. As you go through the points keep track of the left most, right most, highest, and lowest positions to create the bounding box.
Use the p5 copy function to crop out this bounding box.
render this roi to an offscreen buffer using the p5 createGraphics function.
save the image using save frame if that is what you are trying to do.


Component Lifecycle Hook for replaced values

What problem does this solve or what need does it fill?

Relevant Discord Discussion

There are currently three component lifecycle hooks: on_add, on_insert and on_remove. Of these, only on_insert runs when a component is replaced with a new value, e.g. with EntityCommands::insert(), and only the new value is accessible to the hook. This means there is no easy way to run cleanup code for the old value in this scenario, as on_remove by design is not ran for this operation.
What solution would you like?
I propose a new component lifecycle hook that runs in all cases that on_remove runs, as well as the above scenario. It can be thought of as a counterpart to on_remove in the same way that on_insert is a counterpart to on_add, in that they are mostly the same except for also running for replace operations. This new hook would run before the replace actually occurs, allowing it to access and perform cleanup for the old value, which is not possible with on_insert. The name can of course be bikeshed, but I think it should be called on_drop, as the intention is for it to run in any scenario that would result in the component value being dropped. If there are other ways a component value can be dropped that on_remove does not trigger for, this new hook should trigger for all those as well.
What alternative(s) have you considered?
One workaround that is currently possible is to create a wrapper component type that has hooks to handle adding/replacing/removing the 'actual' component type, but this adds a lot of complexity and requires unavoidably cloning the component value.

Great: I like the conceptual clarity of this. I think this should be done; just make sure to add the corresponding observer too.
I think on_replace is the name here.


How to set connect timeout for socket channel

Can somebody tell me how to set connect timeout for netty 4.x when NioSocketChannel is used? I would also like to know how to get callback from a handler for such exception.

参数		值	说明
ConnectTimeout 	 CONNECT_TIMEOUT
WriteSpinCount	WRITE_SPIN_COUNT
WriteBufferHighWaterMark	WRITE_BUFFER_HIGH_WATER_MARK
WriteBufferLowWaterMark	WRITE_BUFFER_LOW_WATER_MARK
AllowHalfClosure	ALLOW_HALF_CLOSURE
AutoRead	AUTO_READ
SoBroadcast	SO_BROADCAST
SoKeepalive	SO_KEEPALIVE
SoSndbuf	SO_SNDBUF
SoRcvbuf	SO_RCVBUF
SoReuseaddr	SO_REUSEADDR
SoReuseport	SO_REUSEPORT
SoLinger	SO_LINGER
SoBacklog	SO_BACKLOG
SoTimeout	SO_TIMEOUT
IpTos 	IP_TOS
IpMulticastAddr	IP_MULTICAST_ADDR
IpMulticastIf	IP_MULTICAST_IF
IpMulticastTtl	IP_MULTICAST_TTL
IpMulticastLoopDisabled	IP_MULTICAST_LOOP_DISABLED
TcpNodelay	TCP_NODELAY


Help with module dependencies?

Hello!
Every module I create goes into a separate repository, which is probably a common scenario, from what I could see in AsgardCMS.
What I'm having difficulty with, is when I push changes to multiple modules, and then a co-worker needs to pull those changes on their side, OR when we have to deploy the application to the test server.
We're using composer update for that, but the issue is that it takes too long, reducing our productivity. We're also having conflicts with the composer.lock file because of this.
I noticed that if I use composer update on my machine, and push the composer lock file, my co-workers can use the composer.lock to run a composer install, which is much faster.
I'm probably doing something wrong here. Can someone enlighten me?
Regards!

The "composer merge plugin" might be something for you to look into. It merges mutliple composer files.

Thank you for your reply @nWidart !
I tested the merge-plugin, but it didn't pull module changes. It looks like it only merges the composer dependencies from the modules. Since my modules do not declare composer dependencies, it only printed "Nothing to update"...
Regards!

Hm ok, I misunderstood the question then.
I'm not sure what the issue is.

Hm, I see.
Thanks again for your reply. I'll look for ways to improve that performance then; Plugins, maybe switch to vmware which has a better shared folder performance; Try to make use of deployment pipelines etc.
Regards!


Update dependency and docs: jwt_verify_lib (add HS256 support)

Signed-off-by: Ryan A. Chapman<EMAIL_ADDRESS>Description: update jwt_verify_lib to support HS256 tokens, also update documentation to show that Envoy now supports HS256 as well as RS384 and RS512 (see #8212)
Risk Level: low
Testing: upstream unit tests
Docs Changes: none
Release Notes: none (should there be some?)

Can you update the doc at https://github.com/envoyproxy/envoy/blob/master/docs/root/configuration/http/http_filters/jwt_authn_filter.rst ?

@lizan I did that as well in this PR.
Only ES256, HS256, RS256, RS384, and RS512 are supported for the JWT alg.

If you like to see more than that, please let me know.

Ah sorry I missed that, thought you didn't change doc from PR description.

/AzurePipelines run


[TBDGen] Ensure symbols listed include maccatalyst when library is built zippered

This also introduces a dependency on new testing tool llvm-tapi-diff. This allows for a structural difference check on tbd files.
Resolves: rdar://107368040

@swift-ci please test

@swift-ci please test


[ENG-2378] Fix moderator permissions

Purpose

Ensure that Provider Admins are also treated as Moderators
Update Registration permissions to give Moderators read access once the registration is pending

Changes
To accomplish (1), I replaced the generic checks to see if the user was in the 'moderator' group with permissions checks on the provider (which are granted to both Moderators and Admins)
To accomplish (2), I extended the can_view function on the registration to check if the Registration is in a moderator-visible state and, if so, if the user has view_submissions permissions on the provider.
Wrote tests to confirm that the expected API paths are now get-able from moderator-visible states but not from the INITIAL state and to confirm that Provider admins can accept/reject moderated sanctions.
Also cleaned up some of the existing reviews tests and added new tests to confirm that RegistrationActions are written during the moderation flow as a target of opportunity.
QA Notes
Documentation

Side Effects

Ticket
https://openscience.atlassian.net/browse/ENG-2378

With the new tests for RegistrationActions in test_review_flows, I feel like the tests for writing actions in test_registrations can be removed. Anybody else have thoughts?

Looks good to me! As far as I can tell, the tests you've written in test_review_flows.py makes the writing action ones in osf_tests/test_registrations.py redundant so they can be removed.

Yep, removed them


Ingress Gateway returns 404 and STOP letting in external traffic and doesn't route to Virtual Services

(NOTE: This is used to report product bugs:
To report a security vulnerability, please visit https://istio.io/about/security-vulnerabilities/
To ask questions about how to use Istio, please visit https://discuss.istio.io
)
Bug description

The same gateway, virtualservice configurations used to work but suddenly stop working.
Routes not seen in proxy-config despite correct Gateway and VirtualService configs
I have deleted istio-system namespace and re-installed istio from scratch, then re-injected sidecar by kubectl rollout restart deployment --namespace staging. But no luck.
Connectivity within mesh works. Just external traffic through ingress gateway doesn't work with gateway and virtual service.

Using EKS v1.6
Versions
$ istioctl version
client version: 1.6.7
privateingressgateway version:
pilot version: 1.6.7
data plane version: 1.6.7 (6 proxies)

$ kubectl version
Client Version: version.Info{Major:"1", Minor:"15+", GitVersion:"v1.15.10-eks-bac369", GitCommit:"bac3690554985327ae4d13e42169e8b1c2f37226", GitTreeState:"clean", BuildDate:"2020-02-21T23:37:18Z", GoVersion:"go1.12.12", Compiler:"gc", Platform:"darwin/amd64"}
Server Version: version.Info{Major:"1", Minor:"16+", GitVersion:"v1.16.13-eks-2ba888", GitCommit:"2ba888155c7f8093a1bc06e3336333fbdb27b3da", GitTreeState:"clean", BuildDate:"2020-07-17T18:48:53Z", GoVersion:"go1.13.9", Compiler:"gc", Platform:"linux/amd64"}

Installed istio
istioctl install -f overrides.yaml

Where overrides.yaml is below
apiVersion: install.istio.io/v1alpha1
kind: IstioOperator
spec:
  profile: demo
  values:
    gateways:
      istio-ingressgateway:
        sds:
          enabled: true
  components: # ref: https://istio.io/latest/docs/reference/config/istio.operator.v1alpha1/#IstioOperatorSpec
    # sidecarInjector:
    #   enabled: true
    ingressGateways:
    - enabled: true
      name: istio-ingressgateway
      k8s:
        resources:
          requests:
            cpu: 10m
            memory: 40Mi
        service:
          ports:
          - name: status-port
            port: 15020
            targetPort: 15020
          - name: http2
            port: 80
            targetPort: 8080
          - name: https
            port: 443
            targetPort: 8443
          - name: tcp
            port: 31400
            targetPort: 31400
          - name: tls
            port: 15443
            targetPort: 15443
        serviceAnnotations:
          # enable ELB access log
          # ref: https://www.giantswarm.io/blog/load-balancer-service-use-cases-on-aws
          service.beta.kubernetes.io/aws-load-balancer-access-log-enabled: "true"
          # The interval for publishing the access logs (can be 5 or 60 minutes).
          service.beta.kubernetes.io/aws-load-balancer-access-log-emit-interval: "5"
          service.beta.kubernetes.io/aws-load-balancer-access-log-s3-bucket-name: "xxx"
          service.beta.kubernetes.io/aws-load-balancer-access-log-s3-bucket-prefix: "public-elb"
          # enable TLS termination at AWS ELB level
          service.beta.kubernetes.io/aws-load-balancer-ssl-cert: "arn:aws:acm:us-east-1:xxx:certificate/xxx"
          service.beta.kubernetes.io/aws-load-balancer-backend-protocol: http
          service.beta.kubernetes.io/aws-load-balancer-ssl-ports: "443"
    - enabled: true
      name: istio-private-ingressgateway
      label:
        istio: privateingressgateway # this will be needed as gateway will look for this selector
        app: istio-private-ingressgateway
      k8s:
        resources:
          requests:
            cpu: 10m
            memory: 40Mi
        service:
          ports:
          - name: status-port
            port: 15020
            targetPort: 15020
          - name: http2
            port: 80
            targetPort: 8080
          - name: https
            port: 443
            targetPort: 8443
          - name: tcp
            port: 31400
            targetPort: 31400
          - name: tls
            port: 15443
            targetPort: 15443
        serviceAnnotations:
          # ref: https://medium.com/swlh/public-and-private-istio-ingress-gateways-on-aws-f968783d62fe
          service.beta.kubernetes.io/aws-load-balancer-internal: "true" # make this CLB private. Refs for service annotations for AWS ELB: https://kubernetes.io/docs/concepts/cluster-administration/cloud-providers/#aws, https://docs.aws.amazon.com/eks/latest/userguide/load-balancing.html
          # enable ELB access log
          # ref: https://www.giantswarm.io/blog/load-balancer-service-use-cases-on-aws
          service.beta.kubernetes.io/aws-load-balancer-access-log-enabled: "true"
          # The interval for publishing the access logs (can be 5 or 60 minutes).
          service.beta.kubernetes.io/aws-load-balancer-access-log-emit-interval: "60"
          service.beta.kubernetes.io/aws-load-balancer-access-log-s3-bucket-name: "xxxx"
          service.beta.kubernetes.io/aws-load-balancer-access-log-s3-bucket-prefix: "internal-elb"
          # enable TLS termination at AWS ELB level
          # service.beta.kubernetes.io/aws-load-balancer-ssl-cert: "arn:aws:acm:us-east-1:xxx:certificate/xxx"
          # service.beta.kubernetes.io/aws-load-balancer-backend-protocol: http
          # service.beta.kubernetes.io/aws-load-balancer-ssl-ports: "443"
  values:
    gateways: # configure gateways: https://istio.io/latest/docs/setup/install/istioctl/#configure-gateways
      istio-ingressgateway: # for internal ELB
        applicationPorts: ""
        autoscaleEnabled: false
        debug: info
        domain: ""
        env: {}
        meshExpansionPorts:
        - name: tcp-pilot-grpc-tls
          port: 15011
          targetPort: 15011
        - name: tcp-istiod
          port: 15012
          targetPort: 15012
        - name: tcp-citadel-grpc-tls
          port: 8060
          targetPort: 8060
        - name: tcp-dns-tls
          port: 853
          targetPort: 8853
        name: istio-private-ingressgateway
        secretVolumes:
        - mountPath: /etc/istio/ingressgateway-certs
          name: ingressgateway-certs
          secretName: istio-ingressgateway-certs
        - mountPath: /etc/istio/ingressgateway-ca-certs
          name: ingressgateway-ca-certs
          secretName: istio-ingressgateway-ca-certs
        type: LoadBalancer

gateway.yaml
apiVersion: networking.istio.io/v1alpha3
kind: Gateway
metadata:
  name: example-gateway
  namespace: staging
spec:
  selector:
    istio: ingressgateway # use istio default controller
  servers: # defines L7 host, port, and protocol
  - port:
      number: 80
      name: http
      protocol: HTTP
    hosts: # all other external requests will be rejected with a 404 response.
    - "example.co"
    - "*.example.co"
    # tls:
    #   httpsRedirect: true # sends 301 redirect for http requests

VirtualService
apiVersion: networking.istio.io/v1alpha3
kind: VirtualService
metadata:
  name: example-api-virtualservice
  namespace: staging
spec:
  hosts:
  - "example.co"
  - "*.example.co"
  - example-api # for internal request among apps within Istio mesh
  gateways: # names of gateways and sidecars that should apply these routes
  - example-gateway.staging.svc.cluster.local
  # - mesh  # applies to all the sidecars in the mesh. The reserved word mesh is used to imply all the sidecars in the mesh. When gateway field is omitted, the default gateway (mesh) will be used, which would apply the rule to all sidecars in the mesh. If a list of gateway names is provided, the rules will apply only to the gateways. To apply the rules to both gateways and sidecars, specify mesh as one of the gateway names. Ref: https://istio.io/latest/docs/reference/config/networking/virtual-service/#VirtualService
  http:
  - route: # default route
    - destination:
        host: example-api.staging.svc.cluster.local # specify service name
        port:
          number: 9999

Public ingress gateway's route config
istioctl proxy-config routes istio-ingressgateway-59d7487bd6-55x58  -n istio-system -o json
[
    {
        "name": "http.80",
        "virtualHosts": [
            {
                "name": "blackhole:80",
                "domains": [
                    "*"
                ],
                "routes": [
                    {
                        "name": "default",
                        "match": {
                            "prefix": "/"
                        },
                        "directResponse": {
                            "status": 404
                        }
                    }
                ]
            }
        ],
        "validateClusters": false
    },
    {
        "virtualHosts": [
            {
                "name": "backend",
                "domains": [
                    "*"
                ],
                "routes": [
                    {
                        "match": {
                            "prefix": "/healthz/ready"
                        },
                        "route": {
                            "cluster": "agent"
                        }
                    }
                ]
            }
        ]
    },
    {
        "virtualHosts": [
            {
                "name": "backend",
                "domains": [
                    "*"
                ],
                "routes": [
                    {
                        "match": {
                            "prefix": "/stats/prometheus"
                        },
                        "route": {
                            "cluster": "prometheus_stats"
                        }
                    }
                ]
            }
        ]
    }
]

When I curl, I get 404
curl example.com/status.html -v
*   Trying xx.xx.xx.xx...
* TCP_NODELAY set
* Connected to example.com (xx.xx.xx.xx) port 80 (#0)
> GET /status.html HTTP/1.1
> Host: example.com
> User-Agent: curl/7.54.0
> Accept: */*
>
< HTTP/1.1 404 Not Found
< date: Fri, 04 Sep 2020 19:44:02 GMT
< server: istio-envoy
< Content-Length: 0
< Connection: keep-alive
<
* Connection #0 to host example.com left intact

Istio-proxy log shows request is reaching envoy in ingressgateway pod, but not sending it to virtual service
2020-09-04T19:44:12.323089827Z [2020-09-04T19:44:03.154Z] "GET /status.html HTTP/1.1" 404 - "-" "-" 0 0 0 - "<IP_ADDRESS>,<IP_ADDRESS>" "curl/7.54.0" "73a3b7d3-b2d1-9fe9-aaf5-c558bd2f4901" "stagingapi.peerwell.co" "-" - - <IP_ADDRESS>:8080 <IP_ADDRESS>:6402 - default

I can connect to this backend pod through service or directly from another curl pod from within the cluster
What baffles me the most is gateway and virtual service configs haven't changed.
DNS is okay, it's resolving to AWS ELB's IP
$ host example.com
xx.xx.xx.xx

I don't know why route configs are not seen in proxy-config, this seems to be the cause, although I see gateway and virtualservice yamls on Kiali dashboard without any errors.
$ kubectl get gw,vs -n staging
NAME                                           AGE
gateway.networking.istio.io/example-gateway   57m

NAME                                                             GATEWAYS                                       HOSTS                                               AGE
virtualservice.networking.istio.io/example-api-virtualservice   [example-gateway.staging.svc.cluster.local]   [stagingapi.example.co example.co example-api]   57m

istioctl proxy-config routes istio-ingressgateway-59d7487bd6-55x58  -n istio-system -o json
[
    {
        "name": "http.80",
        "virtualHosts": [
            {
                "name": "blackhole:80",
                "domains": [
                    "*"
                ],
                "routes": [
                    {
                        "name": "default",
                        "match": {
                            "prefix": "/"
                        },
                        "directResponse": {
                            "status": 404
                        }
                    }
                ]
            }
        ],
        "validateClusters": false
    },

Affected product area (please put an X in all that apply)
[ ] Docs
[ ] Installation
[x ] Networking
[ ] Performance and Scalability
[ ] Extensions and Telemetry
[ ] Security
[ ] Test and Release
[x ] User Experience
[ ] Developer Infrastructure
Affected features (please put an X in all that apply)
[ ] Multi Cluster
[ ] Virtual Machine
[ ] Multi Control Plane
Expected behavior
Steps to reproduce the bug
Version (include the output of istioctl version --remote and kubectl version and helm version if you used Helm)
How was Istio installed?
Environment where bug was observed (cloud vendor, OS, etc)
Additionally, please consider attaching a cluster state archive by attaching
the dump file to this issue.

pretty sure this is fixed by https://github.com/istio/istio/commit/22a3816ee10047fd8fe7699f1af6ee0bfc66dea2.
You can wait for 1.6.9, upgrade to 1.7, or switch the gateways field to staging/example-gateway

pretty sure this is fixed by 22a3816.
You can wait for 1.6.9, upgrade to 1.7, or switch the gateways field to staging/example-gateway

What exactly you think is the root cause to which your commit link you think would fix this?

this behavior of gw not being able to get route config no matter if I did rollout of deployment or deleting istio-system namespace and reinstalling istio, or deleting and re deploying the app
this weird state happened after reinstalling istio without upgrade but accidently using "install" which created new gateway, while the app and sidecar proxy remained the same. Initially I noticed mesh connectivity was down and needed to redeploy the app to replace old sidecar proxy with new one, however, external connectivity never comes back as you see in proxy-config out that there's no route config applied no matter what I tried
namespace/gateway format gave me validation error using 1.6.8

So at this point, I also noticed bookinfo in default namespace can be exposed through gw and vs, so I tried to delete staging namespace and recreated it with injection enabled, because I thought somehow maybe only this namespace is in a messed up state. No luck.

the format of the gateway name reference doesn't work in 1.6.8. I am fairly confident that is at least part of the problem. In your previous comment you mentioned a bunch of things such as mesh connectivity which I am not sure about since the original comment was just about the gateway

So I did remember I also upgraded istio to 1.6.8 from 1.6.5 or something.
Between these versions, namespace/gateway.svc.cluster.local stop working? Is that what you think is the cause and the fix in the commit?
And should gateway.svc.cluster.local work if yamal specifies namespace as staging in my case, even if with 1.6.8? I read the doc that explicit way is to prepend staging/, but if not, it'll fall back on yaml namespace, so why would my yaml have any issues regardless of your commit?

Change
  gateways:
  - example-gateway.staging.svc.cluster.local

to
  gateways:
  - staging/example-gateway

The former syntax is the undocumented legacy format which was accidentally broken in 1.6.8. The latter is the recommended syntax. The legacy syntax will work in pretty much any version except 1.6.7/1.6.8, included the future 1.6.9.

Ok sounds like a promising fix to this issue, I'll give it a try when back at home.
This was extremely difficult to debug. Was this git repo the only place I was supposed to be able to get help from, aside from istio discussion forum? I didn't find any tech support or whatnot from the website.

Upgraded to v1.7.0 and worked.
By the way, are connections between gateway and backend pods secured by HTTPS by default? In other words, does default permissive mutual TLS in mesh include 1) connections among pods only, or also 2) connections between gateway and pod?
I came across an article with this diagram. Is this (#1, only connections among pods are HTTPS) the default state?

mTLS is automatically used by default: https://istio.io/latest/docs/concepts/security/#authentication-architecture. This includes gateway <-> pods running a sidecar. It does not include requests sent to pods without a sidecar since they do not understand istio mtls

Ok, in that case, if TLS termination is configured at let's say AWS ELB using ingress gateway service yaml's annotation, then only HTTP connection would be between AWS ELB and istio gateway?
Client -> HTTPS -> AWS ELB (TLS termination using ACM cert) -> HTTP? -> istio gateway -> mTLS -> pod -> mTLS -> pod

Yes, unless you configure ELB to send HTTPs to istio. That is outside of Istio scope and is an AWS concern

If the above is the case, are there any ways to use AWS ACM cert in istio gateway yaml? Gateway tls config accepts k8s secret, but ACM cert can't be downloaded to store in k8s secret.

No, only k8s secrets or file mounts
On Wed, Sep 9, 2020 at 8:23 AM Hisashi Asakura<EMAIL_ADDRESS>wrote:

If the above is the case, are there any ways to use AWS ACM cert in istio
gateway yaml? Gateway tls config accepts k8s secret, but ACM cert can't be
downloaded to store in k8s secret.
—
You are receiving this because you commented.
Reply to this email directly, view it on GitHub
https://github.com/istio/istio/issues/27080#issuecomment-689635231, or
unsubscribe
https://github.com/notifications/unsubscribe-auth/AAEYGXP4BTXYQSCUVA7A2L3SE6MY3ANCNFSM4QZILINQ
.

Right, so as I asked, how to enable HTTPS between cloud-ELB (be it AWS or GCP) and istio gateway without doing TLS termination at pod and using passthrough for ELB and gateway?

I don't know - this is not really an Istio concern. Its an AWS/ELB setup issue, we (or at least I) am not an AWS expert. I would recommend you consult AWS docs or support on how to configure that. From Istio's POV we receive either plaintext or HTTPS and can terminate or passthrough. How the traffic gets to the pod is AWS concern.

I am facing the same issue on Istio 1.7, have a similar installation. I see you added a label istio: privateingressgateway. isn't different app label is enough? Could that be related?
My config is here:
https://github.com/istio/istio/issues/27205

If it helps anyone, for me on v1.7.6, if I delete the VirtualService on the receiving side and re-create it, the ingress seems to recognize the route entry and the 404 went away.  I was using Helm to install all the different istio resources and once everything is up, I was always getting a 404 when going from one cluster to another.

Change
  gateways:
  - example-gateway.staging.svc.cluster.local

to
  gateways:
  - staging/example-gateway

The former syntax is the undocumented legacy format which was accidentally broken in 1.6.8. The latter is the recommended syntax. The legacy syntax will work in pretty much any version except 1.6.7/1.6.8, included the future 1.6.9.

same i istio 1.11.3, gateway should be   nsName/gatewayName rather than just gatewayName, though in the same namespace with the vs.


Remove Disabling of TLS Certificates

Short description of what this resolves:
This removes disabling of TLS certificate validation, which side effects into any other process running within VS Code.
This closes #776
If any users report SSL trust issues, they need to fix the issue with VS Code in general, and it should not be handled by an extension. More information on how to properly trust certificates can be found here: https://code.visualstudio.com/docs/setup/network#_ssl-certificates
Edit: Worst case, the user with the issue can turn it off in VS Code if they wish with --ignore-certificate-errors, but it should not be the default for everyone.

Thank you, Will be released in next version.


evonet network is down

The evonet network is down.  Is there any other network that i could use for development??
Expected Behavior
Evonet network connected without error
Current Behavior
Error when creating wallet (1) : Failed to perform standard injections with reason: Plugin ChainPlugin of type Standard onStart failed: getaddrinfo ENOTFOUND seed-5.evonet.networks.dash.org
Possible Solution

Steps to Reproduce (for bugs)

client.getWalletAccount()

Context
Your Environment

Hello! We shout down evonet in favor of testnet in January.

How could i connect to the testnet?? May i know the seed address??
I could only find the evonet config from dapi-client. Could you send me the address for testnet??
@dashevo/dapi-client/lib/networkConfigs.js
module.exports = {
evonet: {
seeds: [
'seed-1.evonet.networks.dash.org',
'seed-2.evonet.networks.dash.org',
'seed-3.evonet.networks.dash.org',
'seed-4.evonet.networks.dash.org',
'seed-5.evonet.networks.dash.org',
],
network: 'evonet',
},
local: {
dapiAddresses: ['<IP_ADDRESS>'],
network: 'regtest',
},
};

@denniswong34 The seeds are built in - you don't need to anything. The current version automatically connects to testnet. Please check out the tutorials here for some examples: https://dashplatform.readme.io/docs/tutorials-introduction


Cannot read property 'tick' of undefined

I got a "Cannot read property 'tick' of undefined" js error, when i was run "samples/benchmark/" in "teavm-wasm.html".That meaning，Export function ‘tick’ from class WasmBenchmarkStarter failed.How can i fix this.Thanks for you help.
Error detail:
teavm-wasm.js:95 Uncaught TypeError: Cannot read property 'tick' of undefined
at Benchmark.tick (teavm-wasm.js:95)

The version is 0.7.0. I just clone the master from this repository.


docker-compose.yml variant to deploy HA

https://github.com/rancher/k3s/pull/693 is necessary to make this work

Thanks!


No module named 'nibabel'

In the new version of bl2bids, nibabel is needed to read the affine from the .nii images. Where should we install it? Can we use a docker container to run bl2bids?

Yes, we need to run it via singularity now that we are using nibabel.
I just renamed bl2bids to bl2bids.py and made bl2bids a shell script that execute bl2bids.py with singularity.

Yes, we need to run it via singularity now that we are using nibabel.
I just renamed bl2bids to bl2bids.py and made bl2bids a shell script that execute bl2bids.py with singularity.

great thanks! I got this error however: FATAL:  stat /geode2/home/u010/brlife/Carbonate/abcd-spec/hooks/bl2bids.py: no such file or directory

great thanks! I got this error however: FATAL:  stat /geode2/home/u010/brlife/Carbonate/abcd-spec/hooks/bl2bids.py: no such file or directory

it should be on the latest master.

https://github.com/brainlife/abcd-spec/blob/master/hooks/bl2bids.py
did you do git pull?

On Thu, Jan 7, 2021 at 12:50 PM Giulia Bertò<EMAIL_ADDRESS>wrote:

great thanks! I got this error however: FATAL: stat
/geode2/home/u010/brlife/Carbonate/abcd-spec/hooks/bl2bids.py: no such file
or directory
—
You are receiving this because you modified the open/close state.
Reply to this email directly, view it on GitHub
https://github.com/brainlife/abcd-spec/issues/5#issuecomment-756273882,
or unsubscribe
https://github.com/notifications/unsubscribe-auth/AAHBR6DFEDU6ZSCIZEQABQTSYXX4RANCNFSM4VU545MQ
.

it should be on the latest master.

https://github.com/brainlife/abcd-spec/blob/master/hooks/bl2bids.py
did you do git pull?

On Thu, Jan 7, 2021 at 12:50 PM Giulia Bertò<EMAIL_ADDRESS>wrote:

great thanks! I got this error however: FATAL: stat
/geode2/home/u010/brlife/Carbonate/abcd-spec/hooks/bl2bids.py: no such file
or directory
—
You are receiving this because you modified the open/close state.
Reply to this email directly, view it on GitHub
https://github.com/brainlife/abcd-spec/issues/5#issuecomment-756273882,
or unsubscribe
https://github.com/notifications/unsubscribe-auth/AAHBR6DFEDU6ZSCIZEQABQTSYXX4RANCNFSM4VU545MQ
.

sorry, it was running the fmriprep app: https://brainlife.io/project/5a78c177340591004da75e6f/process/5fecbf75f2246d34238b99fd#5ff7477d0df8ff74bf3eee2e

sorry, it was running the fmriprep app: https://brainlife.io/project/5a78c177340591004da75e6f/process/5fecbf75f2246d34238b99fd#5ff7477d0df8ff74bf3eee2e

I believe I've fixed this. Can you try again?

I believe I've fixed this. Can you try again?

I still have it, but only if it runs on my personal carbonate account
FATAL:   stat /geode2/home/u010/brlife/Carbonate/abcd-spec/hooks/bl2bids.py: no such file or directory
Signal 15 (TERM) caught by ps (procps-ng version 3.3.10).
ps:display.c:66: please report this bug

I still have it, but only if it runs on my personal carbonate account
FATAL:   stat /geode2/home/u010/brlife/Carbonate/abcd-spec/hooks/bl2bids.py: no such file or directory
Signal 15 (TERM) caught by ps (procps-ng version 3.3.10).
ps:display.c:66: please report this bug

Working now, thanks!

Working now, thanks!


Validate color from System.Drawing.ColorTranslator.FromHtml

This:
System.Drawing.ColorTranslator.FromHtml("wrong color");

Will be marked as an Error. Category is Usage.
Diagnostic id is CC0053
How to implement it is being discussed below, we still have to find an optimal way to do it, as we cannot call ColorTranslator from the Code Cracker project and see if it throws, as CC is a PCL, and System.Drawing is not available.
@dgmachado is working on it.

Ok, it's my first PR in this project. I'll try do this. Could you assign it to me?

@dgmachado It is yours. I have invited you to the collaborators team, when you accept I will be able to assign it you. You can already start.

@dgmachado BTW, there was a lot being dicussed in this thread. Please read the whole thing and if you have any questions let us know.

My idea would be don't show any code fixes for the analyzer. We simply validate the color and offer no code fix just a message error if there is a error on parsing.
Scenario 1 -  Valid data types input:
Obs: Analyzer does not create diagnostic
namespace ConsoleApplication
            {
                class TypeName
                {
                    public int Foo()
                    {
                        ColorTranslator.FromHtml("");
                        ColorTranslator.FromHtml("#FFFFFF");
                        ColorTranslator.FromHtml("Red");
                        ColorTranslator.FromHtml("200");
                        ColorTranslator.FromHtml("200;100;50");
                        ColorTranslator.FromHtml("200;100;50;60");
                    }
                }
            };

Scenario 2 -  Invalid data types input:
Obs: Analyzer creates diagnostic
namespace ConsoleApplication
            {
                class TypeName
                {
                    public int Foo()
                    {
                        ColorTranslator.FromHtml("#FFFZZZ");
                        ColorTranslator.FromHtml("bluee");
                        ColorTranslator.FromHtml("200;100");
                        ColorTranslator.FromHtml("200;JJ;50;60");
                        ColorTranslator.FromHtml("200;100;50;100;60");
                    }
                }
            };

Scenario 3 - Ignore validation for not literal expression syntax:
Obs: Analyzer does not create diagnostic
namespace ConsoleApplication
            {
                class TypeName
                {
                    public int Foo()
                    {
                        var htmlColor = "#FFFFFF";
                        ColorTranslator.FromHtml(htmlColor);
                    }
                }
            };

What do you think about all this?

Only to justify why I don't think that we should include include a code fix for suggest substitute the parameter "#FFF" to Color.White like some opinions above. We have so many valid data types input, why choose just this one? And if we decide to do it I think that would be a new one analyzer marked as an warning and category style. What do you think?

This analyzer will not have a corresponding fix. It is just like the Uri analyzer, and the regex analyzer.

And I am fine with the test cases you created. They seem correct.

Closed on #446.

Some of the tests for this analyzer are failing on a system with French as the current culture. A color like "200, 200, 200" is valid in English, but not in French, because the list separator in French is ;, no ,. The analyzer can't rely on the CurrentCulture as it currently does, because it doesn't know which culture will be in use when the code runs.
Actually, the ColorTranslator class from System.Drawing has the same issue. So I don't think it's possible to make a reliable analysis for this color syntax. You can't ensure that ColorTranslator.FromHtml will succeed, because it depends on the runtime culture (also, the method doesn't have an overload that takes a CultureInfo, so there is no way to force the invariant culture).
IMO the best course is to not attempt to actually validate colors with this syntax, but instead warn that it is culture dependent, and suggest using ColorConverter instead (which does accept a CultureInfo).

@thomaslevesque We have a way to make this work, we can use the ChangeCulture class to help with that. Can you try to add this to these tests that are breaking? I cannot do it, because my environment is all en-us.

@giggio, this will fix the test, but not the underlying problem, which is that code like ColorTranslator.FromHtml("200, 200, 200") is never safe, since it will only work in some cultures. So in this case the analyzer should always emit a diagnostic, even if the color string is valid in the current culture.
(color strings like "#C8C8C8", on the other hand, are always safe)

@thomaslevesque Ok, 2 things, then:

Can you submit a PR with the ChangeCulture points where that is currently failing for you, so it does not fail anymore?
Should we create an analyzer and code fix that changes from one API to another?

Can you submit a PR with the ChangeCulture points where that is currently failing for you, so it does not fail anymore?

Actually, ChangeCulture is already used in that test. But it only changes the culture for the current thread, and since the code is asynchronous, it doesn't stay on the same thread... When it gets to the point where the color is parsed, the culture is back to the system default.
According to this, the current culture is now part of the async operation context for apps that target .NET 4.6. But I tried to retarget the tests projects to 4.6, and it doesn't change anything.
Still looking into it...

Should we create an analyzer and code fix that changes from one API to another?

I was thinking of just updating the current analyzer, if possible

I think the problem is that even though the unit test project targets 4.6, the executable that runs the test doesn't, so the new behavior is not used...

I was able to make it work (see #584).
Anyway, this fixes the tests, but not the underlying problem...


Jenkins Global Configuration

Hi is there a way to configure Jenkins using this plugin? for example is it possible to modify the settings in the "Configure System" page [":8080/configure"] such as JDK, Git, Artifactory. Jira etc.
I know that these settings are stored in xml files by Jenkins so automating the creation of these Jenkins files via puppet is very doable but I didn't want to do something that is already implemented e.g., In the wiki it is mentioned that we can specify the "number of executor threads". So I thought maybe there is already an (partial) implementation that I can build on.

@asadpiz Jenkins' on disk "configuration" is serialized java objects.  As of yet, no one has come up with a way to configure arbitrary jenkins settings (which may store values in multiple files).
The path I've been working on is setting values via jenkins' internal API by passing in groovy snippets.  It should be reasonably easy to build on the existing types and providers work to manage new values.  See:
https://github.com/jenkinsci/puppet-jenkins/blob/master/NATIVE_TYPES_AND_PROVIDERS.md

Thanks I also explored using API but for plugins that have global configuration (i.e,. artifactory etc) the API didn't seem to have corresponding elements.
So I am thinking about creating templates for the XML files in " /var/lib/jenkins" and then populating these files using these " .erb" templates [Idea from here: https://wiki.jenkins-ci.org/display/JENKINS/Administering+Jenkins].


[RFE] Create LinkedCollection type in a library package

What is the problem you're trying to solve
The linked collections are processed solely in the cli package with some help from the ocimanifest package. This solution demonstrates functionality from the user perspective, but there is no library-defined way to create and process linked collections.
Describe the solution you'd like
Develop a LinkedCollection type in the library with required utilizes to create and process linked collections. This will likely result in a major change in the traversal package for consistent collection traversal and loading. A possible solution is to utilize the method containerd uses for traversal similar to the oras-go graph package.
Additional context

The high-level workflow on the attached PR effectively provides this capability.


zephyr:boards nrf52840_pca10056 rename to nrf52840dk_nrf52840

Board was renamed here:
https://github.com/zephyrproject-rtos/zephyr/pull/23524/
Patch aligns the name in MCUBoot and decouples one of nrf52840 dedicated
overlay from exact board name.
Signed-off-by: Andrzej Puzdrowski<EMAIL_ADDRESS>

@anangl please review


Add files via upload

Per request from Jonathan Petitcolas this is a modification of webpack.config.js in the example to support webpack 2.2.1 (and likely other versions)

Thanks! :)