When running As Administrator write to some files fails with access is denied error

Windows Terminal version
1.11.3471.0
Windows build number
10.0.18362.0
Other Software
No response
Steps to reproduce

Log In to Windows using account wich is a member of the built in Administrators group

Start Windows Terminal As Administrator
Window Terminal default shell is PowerShell 7 (version 7.1.0)

Run command
"`r`n# xxx" | Out-File "C:\windows\System32\drivers\etc\hosts" -Append

Expected Behavior
A new line will be added to hosts file withot any error
Actual Behavior
Command returns error
Out-File: Access to the path 'C:\windows\System32\drivers\etc\hosts' is denied.
Note:
If I run the same command but in pwsh without Windows Terminal it completes successfully.

It doesn`t work for me in Windows Terminal.

@yudindm there is no security shield displayed in your terminal when running as admin. Usually there's an icon in upper left corner indicating this is an elevated session. Did you disable it? Couldn't replicate your issue on my system:

There's no UAC shield if UAC is disabled by setting "EnableLUA" to 0 in  "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System", but in that case an admin should have full access to the "hosts" file.
@yudindm, check the available and enabled groups via whoami.exe /groups to ensure that the administrators group (S-1-5-32-544) is present and enabled for granting access. It should be, else PowerShell shouldn't be displaying "Administrator: " in the session title.

There's no UAC shield if UAC is disabled by setting "EnableLUA" to 0

This is not quite true. Elevated rights with the help of third-party utilities can be obtained for one tab, while the terminal itself remains as before and remains without a shield, but the title of an elevated tab has "Administrator: " prefix.

This is not quite true. Elevated rights with the help of third-party utilities can be obtained for one tab, while the terminal itself remains as before and remains without the shield icon, but the title of an elevated tab has "Administrator: " prefix.

Maybe you read too much into my statement. Your point doesn't make what I said "not quite true". I didn't say that disabling UAC was the only way that the UAC shield might be missing even though the terminal or a tab has administrator access. Your point is generally interesting, but it isn't relevant here because the issue states "Start Windows Terminal As Administrator".

because the issue states "Start Windows Terminal As Administrator"

Ok

Also, the shield icon was only added in 1.12, so it's totally reasonable that it's not present for OP on a 1.11 build.

If I run the same command but in pwsh without Windows Terminal it completes successfully.

That's the bit that confuses me here - the only thing that would be different about these scenarios is the Terminal running with package identity, in addition to being elevated. But that shouldn't affect the ability to write that file... especially since it Works On My Machinetm.

@eryksun

There's no UAC shield if UAC is disabled by setting "EnableLUA" to 0 in "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System", but in that case an admin should have full access to the "hosts" file.

PS C:\Users\yudindm> (Get-ItemProperty HKLM:SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System).EnableLUA
1

check the available and enabled groups via whoami.exe /groups to ensure that the administrators group (S-1-5-32-544) is present and enabled for granting access

I'm using Russian Windows edition and to prevent localized output here I'm using commands that don't have localized output
PS C:\Users\yudindm> ([Security.Principal.WindowsIdentity]::GetCurrent()).Claims | ?{ $_.Value -eq 'S-1-5-32-544' }

Issuer         : AD AUTHORITY
OriginalIssuer : AD AUTHORITY
Properties     : {[http://schemas.microsoft.com/ws/2008/06/identity/claims/windowssubauthority, NTAuthority]}
Subject        : System.Security.Principal.WindowsIdentity
Type           : http://schemas.microsoft.com/ws/2008/06/identity/claims/groupsid
Value          : S-1-5-32-544
ValueType      : http://www.w3.org/2001/XMLSchema#string

PS C:\Users\yudindm> $currentPrincipal = New-Object Security.Principal.WindowsPrincipal([Security.Principal.WindowsIdentity]::GetCurrent())
PS C:\Users\yudindm> $currentPrincipal.IsInRole([Security.Principal.WindowsBuiltInRole]::Administrator)
True

@zadjii-msft

the only thing that would be different about these scenarios is the Terminal running with package identity, in addition to being elevated But that shouldn't affect the ability to write that file... especially since it Works On My Machinetm.

It shurely worked on My Machine also some time ago.
Since then I probaby installed a Windows update or a Windows Terminal update wich broke expected behavior.

The administrators group is enabled in the current access token. That should be enough. By default, the "hosts" file doesn't have a mandatory label that restricts write access to high integrity level. To be extra certain, check to make sure the current security context has the high mandatory level group "S-1-16-12288" using whoami.exe /groups or Sysinternals Process Explorer. UAC shouldn't create a token with the administrators group enabled that's not elevated, but weird things happen. (The opposite is possible, i.e. high integrity level without administrator access.) Also check the discretionary and mandatory security of the "hosts" file via icacls.exe "%SystemRoot%\System32\drivers\etc\hosts". The latter includes the mandatory label and policy, if any. I don't know how to inspect the mandatory label in PowerShell.

@eryksun

high mandatory level group "S-1-16-12288"

Yes. It's present.

Also check the discretionary and mandatory security of the "hosts" file

Because all group names in the output are in Russian below I translated them in English:
NT AUTHORITY\SYSTEM:(I)(F)
BUILTIN\Administrators:(I)(F)
BUILTIN\Users:(I)(RX)
APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES:(I)(RX)
APPLICATION PACKAGE AUTHORITY\ALL RESTRICTED APPLICATION PACKAGES:(I)(RX)

Everything looks normal. Maybe some entry is a conditional access control entry, which icacls doesn't dupport. SDDL does. Try (get-acl "$env:SystemRoot\System32\drivers\etc\hosts").Sddl.
If you have access to a debugger, such as the WinDbg store app, attach to the affected PowerShell instance and run !token to display the contents of the process access token.

@eryksun

Try (get-acl "$env:SystemRoot\System32\drivers\etc\hosts").Sddl.

PS C:\Users\yudindm> (get-acl "$env:SystemRoot\System32\drivers\etc\hosts").Sddl
O:SYG:SYD:AI(A;ID;FA;;;SY)(A;ID;FA;;;BA)(A;ID;0x1200a9;;;BU)(A;ID;0x1200a9;;;AC)(A;ID;0x1200a9;;;S-1-15-2-2)

attach to the affected PowerShell instance and run !token to display the contents of the process access token.

0:021> !token
Thread is not impersonating. Using process token...
TS Session ID: 0x2
User: S-1-5-21-596323086-39334571-915851860-1198
User Groups:
 00 S-1-5-21-596323086-39334571-915851860-513
    Attributes - Mandatory Default Enabled
 01 S-1-1-0
    Attributes - Mandatory Default Enabled
 02 S-1-5-21-1209789062-3569530313-330599132-1006
    Attributes - Mandatory Default Enabled
 03 S-1-5-21-1209789062-3569530313-330599132-1008
    Attributes - Mandatory Default Enabled
 04 S-1-5-32-544
    Attributes - Mandatory Default Enabled Owner
 05 S-1-5-32-559
    Attributes - Mandatory Default Enabled
 06 S-1-5-32-545
    Attributes - Mandatory Default Enabled
 07 S-1-5-14
    Attributes - Mandatory Default Enabled
 08 S-1-5-4
    Attributes - Mandatory Default Enabled
 09 S-1-5-11
    Attributes - Mandatory Default Enabled
 10 S-1-5-15
    Attributes - Mandatory Default Enabled
 11 S-1-5-5-0-2388438
    Attributes - Mandatory Default Enabled LogonId
 12 S-1-2-0
    Attributes - Mandatory Default Enabled
 13 S-1-5-21-596323086-39334571-915851860-4543
    Attributes - Mandatory Default Enabled
 14 S-1-5-21-596323086-39334571-915851860-3204
    Attributes - Mandatory Default Enabled
 15 S-1-18-1
    Attributes - Mandatory Default Enabled
 16 S-1-5-21-596323086-39334571-915851860-4602
    Attributes - Mandatory Default Enabled GroupResource
 17 S-1-5-21-596323086-39334571-915851860-5113
    Attributes - Mandatory Default Enabled GroupResource
 18 S-1-5-21-596323086-39334571-915851860-4190
    Attributes - Mandatory Default Enabled GroupResource
 19 S-1-5-21-596323086-39334571-915851860-5105
    Attributes - Mandatory Default Enabled GroupResource
 20 S-1-5-21-596323086-39334571-915851860-1399
    Attributes - Mandatory Default Enabled GroupResource
 21 S-1-5-21-596323086-39334571-915851860-3210
    Attributes - Mandatory Default Enabled GroupResource
 22 S-1-5-21-596323086-39334571-915851860-2841
    Attributes - Mandatory Default Enabled GroupResource
 23 S-1-5-21-596323086-39334571-915851860-2843
    Attributes - Mandatory Default Enabled GroupResource
 24 S-1-5-21-596323086-39334571-915851860-3213
    Attributes - Mandatory Default Enabled GroupResource
 25 S-1-5-21-596323086-39334571-915851860-3179
    Attributes - Mandatory Default Enabled GroupResource
 26 S-1-5-21-596323086-39334571-915851860-3219
    Attributes - Mandatory Default Enabled GroupResource
 27 S-1-5-21-596323086-39334571-915851860-4379
    Attributes - Mandatory Default Enabled GroupResource
 28 S-1-5-21-596323086-39334571-915851860-4561
    Attributes - Mandatory Default Enabled GroupResource
 29 S-1-5-21-596323086-39334571-915851860-1396
    Attributes - Mandatory Default Enabled GroupResource
 30 S-1-5-21-596323086-39334571-915851860-5146
    Attributes - Mandatory Default Enabled GroupResource
 31 S-1-5-21-596323086-39334571-915851860-4196
    Attributes - Mandatory Default Enabled GroupResource
 32 S-1-5-21-596323086-39334571-915851860-4220
    Attributes - Mandatory Default Enabled GroupResource
 33 S-1-5-21-596323086-39334571-915851860-4130
    Attributes - Mandatory Default Enabled GroupResource
 34 S-1-5-21-596323086-39334571-915851860-4549
    Attributes - Mandatory Default Enabled GroupResource
 35 S-1-5-21-596323086-39334571-915851860-3310
    Attributes - Mandatory Default Enabled GroupResource
 36 S-1-5-21-596323086-39334571-915851860-4565
    Attributes - Mandatory Default Enabled GroupResource
 37 S-1-16-12288
    Attributes - GroupIntegrity GroupIntegrityEnabled
Primary Group: S-1-5-21-596323086-39334571-915851860-513
Privs:
 00 0x000000005 SeIncreaseQuotaPrivilege          Attributes -
 01 0x000000008 SeSecurityPrivilege               Attributes -
 02 0x000000009 SeTakeOwnershipPrivilege          Attributes -
 03 0x00000000a SeLoadDriverPrivilege             Attributes -
 04 0x00000000b SeSystemProfilePrivilege          Attributes -
 05 0x00000000c SeSystemtimePrivilege             Attributes -
 06 0x00000000d SeProfileSingleProcessPrivilege   Attributes -
 07 0x00000000e SeIncreaseBasePriorityPrivilege   Attributes -
 08 0x00000000f SeCreatePagefilePrivilege         Attributes -
 09 0x000000011 SeBackupPrivilege                 Attributes -
 10 0x000000012 SeRestorePrivilege                Attributes -
 11 0x000000013 SeShutdownPrivilege               Attributes -
 12 0x000000014 SeDebugPrivilege                  Attributes - Enabled
 13 0x000000016 SeSystemEnvironmentPrivilege      Attributes -
 14 0x000000017 SeChangeNotifyPrivilege           Attributes - Enabled Default
 15 0x000000018 SeRemoteShutdownPrivilege         Attributes -
 16 0x000000019 SeUndockPrivilege                 Attributes -
 17 0x00000001c SeManageVolumePrivilege           Attributes -
 18 0x00000001d SeImpersonatePrivilege            Attributes - Enabled Default
 19 0x00000001e SeCreateGlobalPrivilege           Attributes - Enabled Default
 20 0x000000021 SeIncreaseWorkingSetPrivilege     Attributes -
 21 0x000000022 SeTimeZonePrivilege               Attributes -
 22 0x000000023 SeCreateSymbolicLinkPrivilege     Attributes -
 23 0x000000024 SeDelegateSessionUserImpersonatePrivilege  Attributes -
Auth ID: 0:247237
Impersonation Level: Anonymous
TokenType: Primary
Is restricted token: no.
SandBoxInert: 0
Elevation Type: 2 (Full)
Mandatory Policy: TOKEN_MANDATORY_POLICY_NO_WRITE_UP
Integrity Level: S-1-16-12288
    Attributes - GroupIntegrity GroupIntegrityEnabled
Process Trust Level:   LocalDumpSid failed to dump Sid at addr 00000083aaa7aa68, 0xC0000078; try own SID dump.
s-1-0
    Attributes -
Token Virtualized: Disabled
UIAccess: 0
IsAppContainer: 0
Security Attributes Information:
 00 Attribute Name: TSA://ProcUnique
    Value Type	: TOKEN_SECURITY_ATTRIBUTE_TYPE_UINT64
    Value[0]	: 806
    Value[1]	: 116736319
Device Groups:

I don't have any clue for what could have happend but now it works as expected again.


Font-based icons didn't show

Hi, font-based icons work in the generated PDF and HTML files, but not for EPUB files.
For example, in my asciidoc files, there are:
icon:commenting[size=2x]
This "commenting" icon is displayed correctly in the generated PDF and HTML file, but not in the EPUB file.
Looking into the content of EPUB file, I see the following tags in HTML:
<style scoped="scoped">
.i-commenting::before { content: ""; }
</style>

So I extract the HTML file and manually changed the empty value of content property, as below:
<style scoped="scoped">
.i-commenting::before { content: "\f27a"; }
</style>

Then I repack the EPUB file, and the icon displayed correctly now.
Am I missing something, or is this an known issue/design?

So I'm seeing a different problem, which is that with Kindle (using KDP publishing of the .mobi file) it looks like the font-based icons got dropped.  They just render as squares, sort of like missing glyphs.
I'd like to be able to use images (SVGs) instead, because I think this will lead to a more uniform result across readers (not subject to users or readers choosing different font families) ... but I don't see an easy way to make that work with the -epub variant ... it looks like its kind of font-icons or nothing at all.

it looks like its kind of font-icons or nothing at all.

At the moment yes.

I'd like to be able to use images (SVGs) instead

Are we assuming Kindle supports SVGs? I can't remember the results of my research.

which is that with Kindle (using KDP publishing of the .mobi file) it looks like the font-based icons got dropped.

My understanding is that if you use KDP, the font-based icons are preserved as I documented in the README. However, given Amazon can rewrite the rules at anytime, I can't be 100% sure that my assumption is stable.
If you can figure out how to get SVG icons to work for admonitions, I'd be all for it. It's too much work for me to do right now.

Some readers are not showing the icon at all, but highlighting the box in color, while others are just showing brackets instead of the icon. Haven't tested it with Kindle yet. Is this normal?

@mklueh would you mind creating a new issue? Preferrably, with an example document and info in what reader it doesn't work so others can reproduce (and, hopefully, fix) it?


[$500] Web - tasks - Only half of the screen shows loading animation when creating tasks offline

If you haven’t already, check out our contributing guidelines for onboarding and email<EMAIL_ADDRESS>to request to join our Slack channel!

Version Number: v1.4.18-2
Reproducible in staging?: y
Reproducible in production?: y
If this was caught during regression testing, add the test name, ID and link from TestRail:
Email or phone of affected tester (no customers):
Logs: https://stackoverflow.com/c/expensify/questions/4856
Expensify/Expensify Issue URL:
Issue reported by: Applause - Internal Team
Slack conversation:
Action Performed:

Sign in ND
Disconnect device from the internet
Open a chat which you have not opened yet
While the loading screen is being shown click on + icon inside the composer and click on assign task
Input title and create the task
Observe the loading animation

Expected Result:
The loading animation should cover the available space above the task created
Actual Result:
The loading animation only covers half of the screen and half of the screen stays blank
Workaround:
Unknown
Platforms:

Which of our officially supported platforms is this issue occurring on?

[ ] Android: Native
[ ] Android: mWeb Chrome
[ ] iOS: Native
[ ] iOS: mWeb Safari
[x] MacOS: Chrome / Safari
[ ] MacOS: Desktop

Screenshots/Videos
Add any screenshot/video evidence
https://github.com/Expensify/App/assets/93399543/0b2cd121-6679-4321-91f7-5647e4d79e3b
View all open jobs on GitHub
Upwork Automation - Do Not Edit

Upwork Job URL: https://www.upwork.com/jobs/~01c332001739a50ea1
Upwork Job ID:<PHONE_NUMBER>271926272
Last Price Increase: 2023-12-27

This is intentional. The short skeleton is shown when there is at least one action in the report (which is the new optimistically created task).
Reference: https://github.com/Expensify/App/pull/31492#issuecomment-1828508389, https://github.com/Expensify/App/pull/31492#issuecomment-1832403589

@Expensify/design can you confirm if the behaviors is intentional?

Proposal
Please re-state the problem that we are trying to solve in this issue.
When adding an optimistic report action, the long skeleton gets replaced with a short one.
What is the root cause of that problem?
This happens when we add a new optimistic ReportAction.
Because of this new action, isLoadingInitialReportActions becomes false here:
https://github.com/Expensify/App/blob/5c5c862a10b75214899da32333a7f3a694e38be3/src/pages/home/ReportScreen.js#L186
As a result, we don't show the full-height skeleton here:
https://github.com/Expensify/App/blob/5c5c862a10b75214899da32333a7f3a694e38be3/src/pages/home/ReportScreen.js#L498
Instead, we show one from here, which has possibleVisibleContentItems explicitly set to 3:
https://github.com/Expensify/App/blob/5c5c862a10b75214899da32333a7f3a694e38be3/src/pages/home/report/ListBoundaryLoader/ListBoundaryLoader.js#L51-L53
What changes do you think we should make in order to solve the problem?
If this is an unwanted behavior, we should show the full-height skeleton in the ListBoundaryLoader when isLoadingInitialReportActions as well:
if (type === CONST.LIST_COMPONENTS.FOOTER) {
        if (isLoadingOlderReportActions) {
            return <ReportActionsSkeletonView />;
        }

        const isReportLoadedTillBeginning = lastReportActionName === CONST.REPORT.ACTIONS.TYPE.CREATED;

        // Make sure the report chat is not loaded till the beginning. This is so we do not show the
        // skeleton view above the "created" action in a newly generated optimistic chat or one with not
        // that many comments.
        if (!isReportLoadedTillBeginning && isLoadingInitialReportActions) {
            return <ReportActionsSkeletonView />;
        }

        // If we are offline and the report is not yet loaded till the beginning, we assume there are more actions to load,
        // therefore show the skeleton view even though the actions are not loading.
        if (!isReportLoadedTillBeginning && isOffline) {
            return <ReportActionsSkeletonView possibleVisibleContentItems={3} />;
        }
}

What alternative solutions did you explore? (Optional)

@Expensify/design can you confirm if the behaviors is intentional?

I believe we added a bunch more skeleton comment loaders a bit back, but I could be wrong. Either way it seems a bit weird that some convos have many and some have few. I'd prefer for it to be more consistent and have similar amounts.
@shawnborton and @dannymcclain might have more context and thoughts though

Agree, would love to make this consistent everywhere and increase the amount of loader rows so it feels like the entire conversation is filled up.

so it feels like the entire conversation is filled up

Thanks for the clarification. In that case, my proposal remains relevant

Agree with Jon and Shawn!

Proposal
Please re-state the problem that we are trying to solve in this issue.
When adding an optimistic report action, the long skeleton gets replaced with a one of 3 items
What is the root cause of that problem?
We are setting 3 items to be loaded here:
https://github.com/Expensify/App/blob/5c5c862a10b75214899da32333a7f3a694e38be3/src/pages/home/report/ListBoundaryLoader/ListBoundaryLoader.js#L52
What changes do you think we should make in order to solve the problem?
Remove the possibleVisibleContentItems={3}, the function  ReportActionsSkeletonView is able to detect the space for possible items to be displayed
https://github.com/Expensify/App/blob/5c5c862a10b75214899da32333a7f3a694e38be3/src/components/ReportActionsSkeletonView/index.tsx#L15
Math.ceil(Dimensions.get('window').height  /  CONST.CHAT_SKELETON_VIEW.AVERAGE_ROW_HEIGHT

Just confirming @shawnborton @dubielzyk-expensify. We want it to be the filled even for the offline mode? or retain the existing limit of 3 rows?
Considering the existing behavior, and that @paultsimura had the first RCA along with the proposal, I think @paultsimura's proposal is good here.
🎀 👀 🎀 C+ reviewed

We want it to be the filled even for the offline mode? or retain the existing limit of 3 rows?

I kinda think we'd just fill it up more regardless of offline or not. cc @Expensify/design for thoughts.

I kinda think we'd just fill it up more regardless of offline or not.

Same.

Agree with that

@mananjadhav my proposal goes with the team thoughts. Fill the space regardless of offline or not.

@dragnoir as Manan mentioned, my proposal was the first to give the correct RCA along with a potential fix. The 3-lines matter was still in discussion, and it's a tiny implementation detail that's usually handled during the PR discussion.

@paultsimura pls check how a tiny implementation details is handlel here: https://github.com/Expensify/App/issues/33709

That's a different situation: in your case, the other proposal was an addition to yours, not just "the team should decide which height to use".
Anyway, I think we'll come back to the 3-lines skeleton discussion once more during the PR development. I'll provide more reasoning as to why it might be still useful because here the discussion was a bit obscured by using "offline/online" terminology instead of the actual use-case for this skeleton.

Thanks. The PR is ready for review: https://github.com/Expensify/App/pull/34114

This could be treated as a change request as the skeleton view was intended to be 3 lines when added. I also don't think we need a regression test for this one.
@sonialiap Would need the payout summary on 01/22. Thanks in advance.

@mananjadhav $500 - please request through NewDot
@paultsimura $500 - paid ✔

$500 approved for @mananjadhav based on summary above.


General E2E testing improvement

This EPIC includes tasks for making smoke tests :

more reliable, less false positive failure
faster
more customizable, ability to run on different networks, etc...

### Tasks
- [ ] https://github.com/zeta-chain/node/issues/1408
- [ ] https://github.com/zeta-chain/node/issues/1398
- [ ] https://github.com/zeta-chain/node/issues/1227
- [ ] https://github.com/zeta-chain/node/issues/1208
- [ ] https://github.com/zeta-chain/node/issues/1482
- [ ] https://github.com/zeta-chain/node/issues/1483
- [ ] https://github.com/zeta-chain/node/issues/1492
- [ ] https://github.com/zeta-chain/node/issues/1470
- [ ] https://github.com/zeta-chain/node/issues/1462
- [ ] https://github.com/zeta-chain/node/issues/1461
- [ ] https://github.com/zeta-chain/node/issues/1460
- [ ] https://github.com/zeta-chain/node/issues/1459
- [ ] https://github.com/zeta-chain/node/issues/1649

Closing in favor of https://github.com/zeta-chain/node/issues/1720


added blacklist support for IP loggers, booters and url shorteners

waiting for emzi to push or PR.

This will be moved to the database.

what

These settings can be moved to per-guild setting storage.

This... got real messy.


Timeout failure installing golang during Windows build

Saw a batch of Windows build failures with what appears to be due to a transient failure install golang:
This error log signature is in the logs:
T:\src\github\grpc>powershell -File src\csharp\install_dotnet_sdk.ps1
Downloading install script: https://dot.net/v1/dotnet-install.ps1 => T:\tmp\dotnet-install.ps1
dotnet-install: Downloading link: https://dotnetcli.azureedge.net/dotnet/Sdk/2.1.504/dotnet-sdk-2.1.504-win-x64.zip
dotnet-install: Extracting zip from https://dotnetcli.azureedge.net/dotnet/Sdk/2.1.504/dotnet-sdk-2.1.504-win-x64.zip
dotnet-install: Adding to current process PATH: "C:\Users\builder\AppData\Local\Microsoft\dotnet\". Note: This change will not be visible if PowerShell was run as a child process.
dotnet-install: Installation finished

T:\src\github\grpc>set PATH=C:\Users\builder\AppData\Local\Microsoft\dotnet;C:\tools\msys64\usr\bin;C:\Python27;C:\cygwin64\bin;C:\tools\ruby23\bin;C:\ProgramData\Oracle\Java\javapath;C:\Program Files\NVIDIA GPU Computing Toolkit\CUDA\v8.0\bin;C:\Program Files\NVIDIA GPU Computing Toolkit\CUDA\v8.0\libnvvp;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0;C:\cygwin64\bin;C:\program files\winrar;C:\program files\7-zip;C:\Windows\System32\WindowsPowerShell\v1.0;C:\Program Files\Microsoft DNX\Dnvm;C:\Program Files (x86)\GtkSharp\2.12\bin;C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\TShell\TShell;C:\Program Files (x86)\Windows Kits\10\Windows Performance Toolkit;C:\Program Files\ProtoC;C:\ProgramData\chocolatey\bin;C:\Program Files\Java\jdk-9.0.1\bin;C:\Program Files\Microsoft DNX\Dnvm;C:\Program Files\Microsoft SQL Server\130\Tools\Binn;C:\tools\msys64\usr\bin;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files\CMake\bin;C:\Program Files\Microsoft DNX\Dnvm;C:\Program Files\Microsoft SQL Server\120\Tools\Binn;C:\php5;C:\Program Files\dotnet;C:\Program Files (x86)\dotnet;C:\android-ndk-r14b;C:\Program Files (x86)\Google\Cloud SDK\google-cloud-sdk\bin;C:\swig;C:\Program Files\Microsoft SQL Server\110\Tools\Binn;C:\Program Files (x86)\Microsoft SDKs\TypeScript\1.0;C:\nuget;C:\gradle-3.5\bin;C:\Program Files (x86)\Xoreax\IncrediBuild;C:\Windows\System32\WindowsPowerShell\v1.0;C:\Program Files (x86)\nodejs;C:\Program Files\Git\cmd;C:\Go\bin

T:\src\github\grpc>choco install golang -y --version 1.13.1 --limit-output
Installing the following packages:
golang
By installing you accept licenses for the packages.
golang not installed. An error occurred during installation:
 The operation has timed out
golang package files install completed. Performing other installation steps.
The install of golang was NOT successful.
golang not installed. An error occurred during installation:
 The operation has timed out

Chocolatey installed 0/1 packages. 1 packages failed.
 See the log for details (C:\ProgramData\chocolatey\logs\chocolatey.log).

Failures
 - golang (exited 1) - golang not installed.
The system cannot find the file specified.
Failed!

Seen in PR: https://github.com/grpc/grpc/pull/21229
Example full logs in https://source.cloud.google.com/results/invocations/08f0c42e-b504-4e0e-ae11-e83fdc95bb0c/targets and https://source.cloud.google.com/results/invocations/090b62e0-9d9b-47ff-bc72-c3fe079bd129/targets
Seen in PR: https://github.com/grpc/grpc/pull/21229

I don't know anything about this.  Is there a more appropriate owner?

Esun, do you have any idea about the boringssl error?

  The second error while compiling boringssl appears to be a result of the first.

Jan, can you take a look at this since it's related with boringssl?

The go installation step was removed here: https://github.com/grpc/grpc/pull/21833/files#diff-b705a7f1fabb59410eeec1ae7f0c1920L40


Trigger and Block Node stops blocking after a while - Node-RED

Current Behavior
I have a flow here, that simply reads some particulate matter sensors and sends out notifications when the value is above a certain threshold it sends out a warning, then when the value is below the threshold, it sends out another notification that it is safe.

Problem is, when the value is above the threshold, it sends out the warning the first time, but when the sensor updates (every 10 minutes) its constantly sending the notifications. Its like trigger and block node is not blocking subsequent values anymore. Restarting Node-Red, fixes the problem for while (i.e. it properly blocks subsequent values that are above the threshold), but then after a while, it goes back to not blocking anymore.
That fact that it works sometimes and does not at other times, has me a little confused about this, and perhaps some bug here?
json flow data is below
Expected Behavior
block subsequent values above set threshold, until value is below set threshold
Steps To Reproduce
start the flow, wait for value to be above set threshold, will work for a day, then stops working
Example flow
[{"id":"409a05f427fb05b3","type":"switch","z":"aaeb4e984950aca8","name":"32 and Over","property":"PM25EOut_reading","propertyType":"msg","rules":[{"t":"gte","v":"32","vt":"num"}],"checkall":"false","repair":false,"outputs":1,"x":670,"y":3100,"wires":[["b1f6816d12fa3c8b"]]},{"id":"fe1cd54f05747d9c","type":"api-current-state","z":"aaeb4e984950aca8","name":"PM25 < 32","server":"f11241dc.5364d","version":3,"outputs":2,"halt_if":"32","halt_if_type":"num","halt_if_compare":"lt","entity_id":"{{data.entity_id}}","state_type":"str","blockInputOverrides":false,"outputProperties":[{"property":"PM25EOut_reading","propertyType":"msg","value":"","valueType":"entityState"},{"property":"data","propertyType":"msg","value":"","valueType":"entity"}],"for":0,"forType":"num","forUnits":"minutes","x":1130,"y":3100,"wires":[["b95a86e160c10f40","8aef9d8ff899578f"],["0b7b4915d500b267"]]},{"id":"0b7b4915d500b267","type":"delay","z":"aaeb4e984950aca8","name":"","pauseType":"delay","timeout":"10","timeoutUnits":"minutes","rate":"1","nbRateUnits":"30","rateUnits":"minute","randomFirst":"1","randomLast":"5","randomUnits":"seconds","drop":true,"allowrate":false,"outputs":1,"x":1150,"y":3180,"wires":[["fe1cd54f05747d9c"]]},{"id":"b1f6816d12fa3c8b","type":"trigger","z":"aaeb4e984950aca8","name":"","op1":"","op2":"0","op1type":"pay","op2type":"str","duration":"0","extend":true,"overrideDelay":false,"units":"ms","reset":"","bytopic":"topic","topic":"topic","outputs":1,"x":880,"y":3100,"wires":[["fe1cd54f05747d9c","788554ed6485ef09"]]},{"id":"b95a86e160c10f40","type":"change","z":"aaeb4e984950aca8","name":"Reset","rules":[{"t":"set","p":"reset","pt":"msg","to":"yes","tot":"str"}],"action":"","property":"","from":"","to":"","reg":false,"x":1110,"y":3020,"wires":[["b1f6816d12fa3c8b"]]},{"id":"a1ae6501dfd9904e","type":"server-state-changed","z":"aaeb4e984950aca8","name":"Outdoor PM 2.5 Levels","server":"f11241dc.5364d","version":4,"exposeToHomeAssistant":false,"haConfig":[{"property":"name","value":""},{"property":"icon","value":""}],"entityidfilter":"sensor.pm25_ch1","entityidfiltertype":"exact","outputinitially":false,"state_type":"str","haltifstate":"","halt_if_type":"str","halt_if_compare":"is","outputs":1,"output_only_on_state_change":true,"for":"0","forType":"num","forUnits":"minutes","ignorePrevStateNull":false,"ignorePrevStateUnknown":false,"ignorePrevStateUnavailable":false,"ignoreCurrentStateUnknown":false,"ignoreCurrentStateUnavailable":false,"outputProperties":[{"property":"payload","propertyType":"msg","value":"","valueType":"entityState"},{"property":"data","propertyType":"msg","value":"","valueType":"eventData"},{"property":"topic","propertyType":"msg","value":"","valueType":"triggerId"}],"x":200,"y":3100,"wires":[["1cdf2ed7f9bee415"]]},{"id":"1cdf2ed7f9bee415","type":"change","z":"aaeb4e984950aca8","name":"Set PM2.5 and topic","rules":[{"t":"set","p":"PM25EOut_reading","pt":"msg","to":"payload","tot":"msg"},{"t":"set","p":"topic","pt":"msg","to":"Outdoor PM25","tot":"str"}],"action":"","property":"","from":"","to":"","reg":false,"x":460,"y":3100,"wires":[["409a05f427fb05b3"]]},{"id":"788554ed6485ef09","type":"function","z":"aaeb4e984950aca8","name":"","func":"msg.payload = \"Warning! \" + msg.topic + \" Particulate Matter levels are at \" + msg.PM25EOut_reading + \" ug/m3!\";\nreturn msg;","outputs":1,"noerr":0,"initialize":"","finalize":"","libs":[],"x":1140,"y":3240,"wires":[["ada67a356463ed4f","f749597b7cd9f94c","5c8bcf55b740f23d"]]},{"id":"8aef9d8ff899578f","type":"function","z":"aaeb4e984950aca8","name":"","func":"msg.payload = msg.topic + \" Particulate Matter levels are now safe.\";\nreturn msg;","outputs":1,"noerr":0,"initialize":"","finalize":"","libs":[],"x":1400,"y":3100,"wires":[["30c7b1749d787c68","b6e3891b10bb6b45","28e71049cc02e8a7"]]},{"id":"30c7b1749d787c68","type":"debug","z":"aaeb4e984950aca8","name":"Safe Message","active":true,"tosidebar":true,"console":false,"tostatus":false,"complete":"payload","targetType":"msg","statusVal":"","statusType":"auto","x":1620,"y":3100,"wires":[]},{"id":"ada67a356463ed4f","type":"debug","z":"aaeb4e984950aca8","name":"Danger Message","active":true,"tosidebar":true,"console":false,"tostatus":false,"complete":"payload","targetType":"msg","statusVal":"","statusType":"auto","x":1630,"y":3380,"wires":[]},{"id":"51eeabcbcb880fe0","type":"google-notify","z":"aaeb4e984950aca8","server":"d17211f08fb61d4c","label":"Family Room Display Broadcast","playVolumeLevel":"60","language":"config","speakSlow":"false","mediaUrl":"","mediaType":"mp3","x":1670,"y":3420,"wires":[[]]},{"id":"2c8f2d4df8c0d177","type":"google-notify","z":"aaeb4e984950aca8","server":"d17211f08fb61d4c","label":"Family Room Display Broadcast","playVolumeLevel":"60","language":"config","speakSlow":"false","mediaUrl":"","mediaType":"mp3","x":1710,"y":3140,"wires":[[]]},{"id":"67e6c93034dd2604","type":"google-notify","z":"aaeb4e984950aca8","server":"a2c3303bcc4c7823","label":"Kitchen Display Broadcast","playVolumeLevel":"60","language":"config","speakSlow":"false","mediaUrl":"","mediaType":"mp3","x":1690,"y":3200,"wires":[[]]},{"id":"2a350ec717e5868c","type":"google-notify","z":"aaeb4e984950aca8","server":"a2c3303bcc4c7823","label":"Kitchen Display Broadcast","playVolumeLevel":"60","language":"config","speakSlow":"false","mediaUrl":"","mediaType":"mp3","x":1650,"y":3480,"wires":[[]]},{"id":"737df71186f06803","type":"google-notify","z":"aaeb4e984950aca8","server":"c9aa2a2bc10df8f4","label":"Main Floor Bathroom Broadcast","playVolumeLevel":"60","language":"config","speakSlow":"false","mediaUrl":"","mediaType":"mp3","x":1710,"y":3260,"wires":[[]]},{"id":"26dbb04dd2138c7c","type":"google-notify","z":"aaeb4e984950aca8","server":"c9aa2a2bc10df8f4","label":"Main Floor Bathroom Broadcast","playVolumeLevel":"60","language":"config","speakSlow":"false","mediaUrl":"","mediaType":"mp3","x":1670,"y":3540,"wires":[[]]},{"id":"f749597b7cd9f94c","type":"time-range-switch","z":"aaeb4e984950aca8","name":"Time Range","lat":"53.42167","lon":"-113.63615","startTime":"7:00","endTime":"20:00","startOffset":0,"endOffset":0,"x":1230,"y":3440,"wires":[["51eeabcbcb880fe0","2a350ec717e5868c","26dbb04dd2138c7c","e2110250aab5d7b2"],[]]},{"id":"e2110250aab5d7b2","type":"google-notify","z":"aaeb4e984950aca8","server":"68f59c430bfc900e","label":"Basement Family Room Display Broadcast","playVolumeLevel":"60","language":"config","speakSlow":"false","mediaUrl":"","mediaType":"mp3","x":1710,"y":3600,"wires":[[]]},{"id":"b6e3891b10bb6b45","type":"time-range-switch","z":"aaeb4e984950aca8","name":"Time Range","lat":"53.42167","lon":"-113.63615","startTime":"7:00","endTime":"20:00","startOffset":0,"endOffset":0,"x":1430,"y":3220,"wires":[["2c8f2d4df8c0d177","67e6c93034dd2604","737df71186f06803"],[]]},{"id":"5c8bcf55b740f23d","type":"api-call-service","z":"aaeb4e984950aca8","name":"Notify Me Sony Xperia Phone","server":"f11241dc.5364d","version":5,"debugenabled":false,"domain":"notify","service":"mobile_app_sony_xperia_zx1","areaId":[],"deviceId":[],"entityId":[],"data":"{\"message\":\"{{payload}}\"}","dataType":"json","mergeContext":"","mustacheAltTags":false,"outputProperties":[],"queue":"none","x":1670,"y":3320,"wires":[[]]},{"id":"28e71049cc02e8a7","type":"api-call-service","z":"aaeb4e984950aca8","name":"Notify Me Sony Xperia Phone","server":"f11241dc.5364d","version":5,"debugenabled":false,"domain":"notify","service":"mobile_app_sony_xperia_zx1","areaId":[],"deviceId":[],"entityId":[],"data":"{\"message\":\"{{payload}}\"}","dataType":"json","mergeContext":"","mustacheAltTags":false,"outputProperties":[],"queue":"none","x":1660,"y":3040,"wires":[[]]},{"id":"f11241dc.5364d","type":"server","name":"Home Assistant","version":4,"addon":true,"rejectUnauthorizedCerts":true,"ha_boolean":"y|yes|true|on|home|open","connectionDelay":true,"cacheJson":true,"heartbeat":false,"heartbeatInterval":30,"areaSelector":"friendlyName","deviceSelector":"friendlyName","entitySelector":"friendlyName","statusSeparator":"at: ","statusYear":"hidden","statusMonth":"short","statusDay":"numeric","statusHourCycle":"h23","statusTimeFormat":"h:m"},{"id":"d17211f08fb61d4c","type":"google-notify-config","ipaddress":"<IP_ADDRESS>","name":"Family Room Display","language":"en","playVolumeLevel":"20","speakSlow":true,"mediaServerUrl":"","mediaServerPort":"8098","cacheFolder":"/tmp"},{"id":"a2c3303bcc4c7823","type":"google-notify-config","ipaddress":"<IP_ADDRESS>","name":"Kitchen Display","language":"en","playVolumeLevel":"20","speakSlow":true,"mediaServerUrl":"","mediaServerPort":"8098","cacheFolder":"/tmp"},{"id":"c9aa2a2bc10df8f4","type":"google-notify-config","ipaddress":"<IP_ADDRESS>","name":"Main Floor Bathroom","language":"en","playVolumeLevel":"20","speakSlow":true,"mediaServerUrl":"","mediaServerPort":"8098","cacheFolder":"/tmp"},{"id":"68f59c430bfc900e","type":"google-notify-config","ipaddress":"<IP_ADDRESS>","name":"Basement Family Room Display","language":"en","playVolumeLevel":"20","speakSlow":true,"mediaServerUrl":"","mediaServerPort":"8098","cacheFolder":"/tmp"}]

Environment

Node-RED version: : 13.4.0
Node.js version:
npm version:
Platform/OS: Home Assistant OS
Browser: Chrome/Home Assistant

Please use the general Node-RED discourse forum for general HowTo type debug questions. This flow does uses Home Assistant nodes that are not used or maintained by the core developers so we will not be able to help in any meaningful way, unless you can provide a failing example that does not use them.

Unfortunately we cannot test your flow to see if this is a node-red problem or a user flow programming problem because we do not have access to your data or HA system
If you can minimise this flow to a simple working flow (without any HA nodes - i.e. use inject and change nodes to simulate data) please re-open this issue.


Can not install on win32 platform

I'm trying to install on 32 bit windows 2-in-1 tablet, but
released alpha installers fail with complaining that "this binary (Terminus.exe) is not for this platform".
I guess windows installer is meant for 64 bit only, doesn't it?
I'm glad if it detects the platform or you add another one dedicated for win32 platform.

Altough Terminus can be built for 32-bit Windows, I'm not making 32-bit builds.
For those interested, it can be bulit by setting up the environment (https://github.com/Eugeny/terminus/blob/master/HACKING.md) and running node scripts\build-windows.js


Set-MailboxAutoReplyConfiguration cmdlet is not audited at this moment.

Hi Team,
Can we please update the document like Set-MailboxAutoReplyConfiguration operations are not audited at this moment in admin/unified/mailbox audit logs.
Thanks,
Pramod

@PramodShedbal, which topic(s) need the updates?

Hi Chris,
If admin runs this command to change the auto-reply settings for any
mailboxes, the activity is not logged in admin or unified audit logs so can
we update this information in our public article?
Regards,
Pramod
On Thu, Feb 16, 2023 at 10:50 PM Chris Davis @.***>
wrote:

@PramodShedbal https://github.com/PramodShedbal, which topic(s) need
the updates?
—
Reply to this email directly, view it on GitHub
https://github.com/MicrosoftDocs/office-docs-powershell/issues/10465#issuecomment-1433442917,
or unsubscribe
https://github.com/notifications/unsubscribe-auth/A4PVH6WMYREWAWSUC7QYCVLWXZOXHANCNFSM6AAAAAAU56FMRM
.
You are receiving this because you were mentioned.Message ID:
@.***>

@PramodShedbal We appreciate any feedback that improves the content in the Microsoft docs but we haven't had any response from you. Please indicate which document you are referring to. Thanks

Hi Yogesh & Chris,
I'm referring to this article
https://learn.microsoft.com/en-us/powershell/module/exchange/set-mailboxautoreplyconfiguration?view=exchange-ps
If any admin runs the cmd Set-MailboxAutoReplyConfiguration , this
operation is not audited. Can we add a Note in the above article that this
cmdlet is not audited.
We have a DCR for this but there is no update or ETA.
Regards,
Pramod
On Thu, Feb 23, 2023 at 8:13 PM Yogesh Kumar @.***>
wrote:

@PramodShedbal https://github.com/PramodShedbal We appreciate any
feedback that improves the content in the Microsoft docs but we haven't had
any response from you. Please indicate which document you are referring to.
Thanks
—
Reply to this email directly, view it on GitHub
https://github.com/MicrosoftDocs/office-docs-powershell/issues/10465#issuecomment-1441911699,
or unsubscribe
https://github.com/notifications/unsubscribe-auth/A4PVH6V5USK7D5Z3XOQ4TNTWY5ZRJANCNFSM6AAAAAAU56FMRM
.
You are receiving this because you were mentioned.Message ID:
@.***>

@PramodShedbal, did you see the email message I sent you about this last week? Let's continue the discussion in email.

@PramodShedbal Hope you ae communicating through email and following up with Chris. We proceed here to close it. Thanks for taking out some time to open the issue. Appreciate and encourage you to do the same in future also.


Not Bound key for Sky GUIs conflict with volume control

Minecraft version
1.20.1
Sky GUIs version
1.20.1-3.0.11
Skyblock Builder version
1.20.1-5.1.16
LibX version
1.20.1-5.0.12
Forge version
47.2.20
The latest.log file
N/A
Issue description
If "Open main screen" is not bound to any key, it seems to conflict with any kind of volume control. Attempting to adjust volume will then also open the Sky GUIs main screen.
Steps to reproduce

Go to options, controls, key binds
Remove key bind from "Open main screen" in category Sky GUIs
Exit menu and return to game
Attempt to adjust volume with peripheral volume control.

Other information
This behavior has been seen from both keyboard and headset volume control on the same computer (both brand Logitech), and on a separate computer (brand of peripheral unknown). It has also been seen in multiple modpacks (All the Mods 9 - To the Sky and Seaopolis Submerged), and a custom modpack with only Sky GUIs and dependencies added.

That's really funny. Thanks :D

I had a very incredulous but good laugh when I discovered it I'll admit. Happy to help!


Two SPI device control errors with one cs-gpio pin.

To Reproduce
Zephyr Version: 3.4
Board: STM32L433
SPI Device: MAX31865 (1, 2)
Steps to reproduce the behavior:

west build -b "stm32l433"
west flash

Describe the bug
I'm trying to use two spi devices in reverse mode using one chip select pin.

device tree

When configured like this and spi_read() on device 1 and device 2,
Action is performed only with CS_ACTIVE_LOW.

This causes problems with the return values of the two devices being the same.
I want CS_ACTIVE_LOW and CS_ACTIVE_HIGH to alternate.
There is no problem when configuring and using the devices one by one.

CS_ACTIVE_LOW

CS_ACTIVE_HIGH

Please give me a solution or advice on this issue.

That's a bit of an odd use case, I think  you may make it work by writing a driver implementing the GPIO API handling the two chip select as if they were two different GPIOs and then driving a single GPIO as an output with whatever logic you need. Prob not worth upstreaming though, it's a bit of an odd use case, not sure we want to encourage that.

Would not call this a bug though.

That's a bit of an odd use case, I think you may make it work by writing a driver implementing the GPIO API handling the two chip select as if they were two different GPIOs and then driving a single GPIO as an output with whatever logic you need. Prob not worth upstreaming though, it's a bit of an odd use case, not sure we want to encourage that.

First of all, thank you very much for answering.
I have a few additional questions.
We already used this method in Zephyr version 2.4, it was no problem.
Has anything changed since the version was upgraded?

It shares our circuit using two MAX31865 sensors.

These two share the same SPI Line.

Question

Are there any differences between versions 2.4 and 3.4?
Is there any way to control it using one CS gpio?
Is adding a new CS Pin the best option?

1. Are there any differences between versions 2.4 and 3.4?

Yeah one or two things:
$ git diff --shortstat v2.4.0..v3.4.0
 27599 files changed, 2294837 insertions(+), 671014 deletions(-)

2. Is there any way to control it using one CS gpio?

If it used to work you could try and bisect, see if you can find what broke it, maybe something to do with SPI_STM32_USE_HW_SS?

3. Is adding a new CS Pin the best option?

If you have pins available it's certainly the more conventional option and less likely to cause issues, plus it's usually not a great idea to keep an SPI device selected all the time.

Sounds like an STM32 issue to me (pehaps a gpio one, though unlikely)

Sounds like an STM32 issue to me (pehaps a gpio one, though unlikely)

Do you have any experience testing with boards other than STM32?

@2songh can you please check when the DTS has no spi2_nss declared in the  but
--> set either the CS by spi pin NSS or GPIO control (not both)


cherry-pick: Introduce a Shuffle for FastRandomContext and use it in wallet

Backport part of bitcoin#14624
Cherry pick of #17

Merging now because CI passes and already ACK since cherry-picked from #17.


Expected hits in groups aren't appearing

Given the following query:
{
    "ranking": {
        "profile": "top_news"
    },
    "hits": 0,
    "select": "all(group(group_doc_id) max(15) order(-avg(relevance())) each(output(count()) max(3) each(output(summary()))))",
    "firstpubtime": "1615122508",
    "yql": "select * from sources newsarticle WHERE firstpubtime > @firstpubtime and group_doc_id matches \"^id\";"
}

This is giving a result as follows:
 "children": [
                            {
                                "id": "group:string:id:newsarticle:newsarticle::3cc6ff10bd9fc1d47ab54fc30ccecb983bfa0e0bb531c543983447d479ed699a",
                                "relevance": 1,
                                "value": "id:newsarticle:newsarticle::3cc6ff10bd9fc1d47ab54fc30ccecb983bfa0e0bb531c543983447d479ed699a",
                                "fields": {
                                    "count()": 1
                                },
                                "children": [
                                    {
                                        "id": "hitlist:hits",
                                        "relevance": 1,
                                        "label": "hits",
                                        "children": [
                                            {
                                                "id": "id:newsarticle:newsarticle::bb97333cf8dd4c4a9940758176688f5a876519958d8712d2e7b415ea512cd2a2",
                                                "relevance": 35.54693287037036,
                                                "source": "newsarticle",
                                                "fields": {
                                                    "sddocname": "newsarticle",
-- rest of single hit in group ---

On a kubernetes deployment with 2 content nodes (one is also the config & admin server), I am seeing a count() of 1 or 2 and no continuationswhere I would expect to see the max, 3. For example, here are two documents that I think should be shown in the group results, where only the first one is. I've removed some irrelevant fields with [snip] for brevity:
        {
            "id": "id:newsarticle:newsarticle::bb97333cf8dd4c4a9940758176688f5a876519958d8712d2e7b415ea512cd2a2",
            "relevance": 42.17184,
            "source": "newsarticle",
            "fields": {
                "sddocname": "newsarticle",
                "bodytext": "[snip]",
                "documentid": "id:newsarticle:newsarticle::bb97333cf8dd4c4a9940758176688f5a876519958d8712d2e7b415ea512cd2a2",
                "headline": "Burger King deletes 'tone deaf' International Women's Day campaign tweet",
                "url": "https://www.abc.net.au/news/2021-03-09/burger-king-says-women-belong-in-the-kitchen-on-iwd/13229022",
                "keywords": [
                    [snip]
                ],
                "firstpubtime":<PHONE_NUMBER>,
                "modtime":<PHONE_NUMBER>,
                "sentiment": 0.11060606,
                "wordcount": 448,
                "abstract": "[snip]",
                "bylines": [
                    "ABC News"
                ],
                "source": "ABC News",
                "twitter_retweet_count": 19,
                "twitter_favourite_count": 93,
                "twitter_link": "https://twitter.com/abcnews/status/1369051839082110976",
                "group_doc_id": "id:newsarticle:newsarticle::3cc6ff10bd9fc1d47ab54fc30ccecb983bfa0e0bb531c543983447d479ed699a",
                "summaryfeatures": {
                    "freshness(firstpubtime)": 0.4534606481481481,
                    "vespa.summaryFeatures.cached": 0
                },
                "group_doc_id_relevance": 0.15066065
            }
        },
        {
            "id": "id:newsarticle:newsarticle::3cc6ff10bd9fc1d47ab54fc30ccecb983bfa0e0bb531c543983447d479ed699a",
            "relevance": 1.1572223,
            "source": "newsarticle",
            "fields": {
                "sddocname": "newsarticle",
                "bodytext": "[snip]",
                "documentid": "id:newsarticle:newsarticle::3cc6ff10bd9fc1d47ab54fc30ccecb983bfa0e0bb531c543983447d479ed699a",
                "headline": "Burger King slammed over sexist tweet on International Women’s Day",
                "url": "https://www.news.com.au/finance/business/retail/burger-king-slammed-over-sexist-tweet-on-international-womens-day/news-story/9fd6f9b99871cd96bf099842a7c06c6f",
                "keywords": [
 [snip]
                ],
                "firstpubtime":<PHONE_NUMBER>,
                "modtime":<PHONE_NUMBER>,
                "sentiment": 0.06629633,
                "wordcount": 414,
                "abstract": "An international marketing campaign by Burger King – Hungry Jacks in Australia – has gone viral for the wrong reasons.",
                "bylines": [
                    "Kathy Skantzos"
                ],
                "source": "news.com.au",
                "twitter_retweet_count": 0,
                "twitter_favourite_count": 2,
                "twitter_link": "https://twitter.com/newscomauHQ/status/1369135858755002372",
                "group_doc_id": "id:newsarticle:newsarticle::3cc6ff10bd9fc1d47ab54fc30ccecb983bfa0e0bb531c543983447d479ed699a",
                "summaryfeatures": {
                    "freshness(firstpubtime)": 0.5786111111111112,
                    "vespa.summaryFeatures.cached": 0
                },
                "group_doc_id_relevance": 0.15066065
            }
        }

These results are using the same query profile ("top_news"), so the relevance should be the same as calculated for the groups - I don't think it should be low enough to disappear.
When I dump all the documents and feed into vespa running on docker on my local machine, the results appear as I would expect. Both had about 30,000 documents, and only approx 200 documents match the where clause (have a doc_group_id starting with "id:" and firstpubtime in the last ~day). Here's some metadata from the results:
        "fields": {
            "totalCount": 260
        },
        "coverage": {
            "coverage": 100,
            "documents": 29884,
            "full": true,
            "nodes": 2,
            "results": 1,
            "resultsFull": 1
        },

services.xml: https://gist.github.com/wabzqem/98faf22c21019bf781eba457d2a1f402
hosts.xml: https://gist.github.com/wabzqem/10b5e9661f2d11af499db6cc0d1de3f1
# vespa-model-inspect service searchnode
searchnode @ vespa-0.vespa-internal.default.svc.cluster.local : search
newsarticle/search/cluster.newsarticle/0
    tcp/vespa-0.vespa-internal.default.svc.cluster.local:19106 (STATUS ADMIN RTC RPC)
    tcp/vespa-0.vespa-internal.default.svc.cluster.local:19107 (UNUSED)
    tcp/vespa-0.vespa-internal.default.svc.cluster.local:19108 (UNUSED)
    tcp/vespa-0.vespa-internal.default.svc.cluster.local:19109 (UNUSED)
    tcp/vespa-0.vespa-internal.default.svc.cluster.local:19110 (STATE HEALTH JSON HTTP)
searchnode @ vespa-content-0.vespa-internal.default.svc.cluster.local : search
newsarticle/search/cluster.newsarticle/1
    tcp/vespa-content-0.vespa-internal.default.svc.cluster.local:19103 (STATUS ADMIN RTC RPC)
    tcp/vespa-content-0.vespa-internal.default.svc.cluster.local:19104 (UNUSED)
    tcp/vespa-content-0.vespa-internal.default.svc.cluster.local:19105 (UNUSED)
    tcp/vespa-content-0.vespa-internal.default.svc.cluster.local:19106 (UNUSED)
    tcp/vespa-content-0.vespa-internal.default.svc.cluster.local:19107 (STATE HEALTH JSON HTTP)

Please let me know what other information I can provide here. All the source for this is public at https://github.com/ausnews/ausnews-search/ .

I deployed my application to vespa cloud (source: https://github.com/ausnews/ausnews-search/tree/vespa-cloud/search-engine-app) after removing the document processor, and fed it all the data from my production vespa install (json data can be found here, approx ~30k docs, can be fed directly with vespa-http-client-jar-with-dependencies.jar): http://www.whatsbeef.net/wabz/data.tar.gz).
curl --cert ./data-plane-public-cert.pem --key ./data-plane-private-key.pem -s "https://text-search.wabzqem.ausnews.ausnews.aws-us-east-1c.dev.public.vespa.oath.cloud/search/?ranking.profile=top_news&hits=0&firstpubtime=1615360444&select=all(group(group_doc_id)+max(15)+order(-avg(relevance()))+each(output(count())+max(3)+each(output(summary()))))&yql=select+*+from+sources+newsarticle+WHERE+firstpubtime+%3E+%40firstpubtime+and+group_doc_id+matches+%22%5Eid%22%3B" | jq '.' | less

The groups here have results as expected (as with docker), I don't see the dropped group hits that I'm seeing from my vespa install.
I might just try blowing it all away and starting with a fresh cluster and feeding it up to date data to see if that fixes it, but it would be nice to understand what I might have done here to make things go awry. Could low memory cause this?

In your private instance, could you increase the timeout and see if you reproduce? &timeout=5s

Thanks - I've just tried with the timeout parameter, it still reproduces. With presentation.timing=true, searchTime is about twice as fast as my docker instance, and the same as what I see on vespa cloud ("searchtime": 0.015).

Bizarrely, if I remove the firstpubtime > @firstpubtime from the WHERE clause, I get all the hits in each group that I'd expect. This actually works out okay, because the rank profile has a very low freshness.maxAge which pretty much does the same thing. I'd love to understand what is going on here, it's been doing my head in 🤯 :) The hits that are removed definitely do have a firstpubtime attribute value greater than the query parameter given.

Sorry, another update. The above definitely improved things, but I then still found instances of groups which didn't have as many hits as I expected. However, I think I have found that having more than a single content node causes this - I'm able to reproduce on vespa cloud. I've fed the same dataset to a dev (single content node) and prod (2 content nodes) instance, and I get different group count()s on the same query. Ordering is slightly different too, as ranking is affected:
export QUERY="presentation.timing=true&ranking.profile=top_news&hits=0&select=all(group(group_doc_id)+max(15)+order(-avg(relevance()))+each(output(count())+max(3)+each(output(summary()))))&yql=select+headline+from+sources+newsarticle+WHERE+group_doc_id+matches+%22%5Eid%22+AND+firstpubtime+%3E+1615591675%3B"

rnelson@wabz vespa-cloud % curl --cert ./data-plane-public-cert.pem --key ./data-plane-private-key.pem -s "https://text-search.ausnews.ausnews.aws-us-east-1c.public.vespa.oath.cloud/search/?$QUERY" | jq '.root.children[].children[].children[].fields["count()"]'
2
2
2
2
1
2
11
3
3
2
3
2
1
1
2
rnelson@wabz vespa-cloud % curl --cert ./data-plane-public-cert.pem --key ./data-plane-private-key.pem -s "https://text-search.wabzqem.ausnews.ausnews.aws-us-east-1c.dev.public.vespa.oath.cloud/search/?$QUERY" | jq '.root.children[].children[].children[].fields["count()"]'
2
2
3
2
4
3
2
2
5
2
1
28
2
20
2

Then, I stopped services on one of my kubernetes content nodes (I now have redundancy=2), waited a bit for indexing, and I got the results that I expect. The single content node appears to give more, and accurate group hit counts.
Is this expected behaviour?

No, this is not expected behaviour. I suspect this has to do with avg in relation with relevancy. When using relevancy in the order clause it will trigger an optimisation. However I suspect that this optimisation can not be done when using anything but min or max aggregator. I will verify that when I get back to work tomorrow and get back to you. Thanks a lot for investigating this.

Any update on this one? Right now I'm just running on one content node so as to get accurate results. Are there any other potential workarounds? Thanks!

It seems I dropped this one on the floor. Will pick it up again now.

Hello, appreciate this ranking issue may not be high in the priority order. But I'm left wondering if I should think of a different approach here or if there might be a fix at some point?
Again, thank you for open sourcing vespa, it's clearly an amazing piece of work.

I am starting with this one now. While I investigate the group merging code could you try to see what happens if you add precision(2-5 x of what you set for max()). See https://docs.vespa.ai/en/grouping.html#ordering-and-limiting-groups

Initial pass of the code did not confirm my suspicion that we incorrectly allowed an optimisation. I will continue to make a system test to reproduce.
You should also try adding  'hint(singlepass)' to you grouping expression.
Like "all(group(group_doc_id) hint(singlepass) max(5) order(-avg(relevance())).....".
The latter is undocumented.

I’ve made this change: https://github.com/ausnews/ausnews-search/commit/dd50405d3a8fdc3f505c440bad5778eedbbfd729 to add precision, and ran vespa-start-services on the content node I had previously stopped. I’m getting the same good results now as prior to this (where I had only one content node)

Hi @baldersheim, were you able to reproduce this in the end? All my code is open-source so I should be able to provide a simple app & data to reproduce.
Unfortunately, the above didn't fix it. I ran vespa-services-start on the other content node, but didn't realise that distribution to it wasn't working, so it still wasn't being used. I've since fixed that, and group hits have gone bad again. I've tried both hint(singplepass) and precision(15), but they don't help sadly.
Please let me know if there's anything further here I can assist with.

@wabzqem
We discovered after further debugging that this behaviour is actually not a bug, but instead an expected side-effect of a performance optimization in the grouping engine. It's briefly documented in https://docs.vespa.ai/en/grouping.html#ordering-and-limiting-groups.
You may no longer get the globally best groups when restricting the maximum number of groups and using a non-default ordering expression. This can be somewhat compensated by specifying the precision operator - see link above for details. There is also a single pass optimization that causes some groups to miss documents when using non-default group ordering.
As a side note; using avg in the group ordering expression is not recommended. It will only produce correct result for content clusters were all nodes have the full corpus (e.g single node setup). See @baldersheim comment in https://github.com/vespa-engine/vespa/issues/16861#issuecomment-798957938.
The default group ordering - max(relevance()) - will produce correct result in all situations and might suffice for your use-case.

Summary: To evaluate this expression perfectly accurately, all the node partitions need to see all the data. The framework decides against that and does it's best in a faster way.
Somewhat unexpected as a default perhaps, but the realistic alternative is timeout.
I think we could improve this by some more work with data sketches, but I'm not sure increase precision with average is important enough to prioritize.

I agree that average might not be important enough, as it will either be too costly to solve correctly, or not be accurate.
However we do have a similar issue for other aggregators like max/min/count when used in order clause.
We could estimate precision in a similar way as we estimate number of hits needed from each node. I think that the rule of large numbers, many partitions and random distribution would make that good enough.
Note that this case was also extreme, as all hits had zero relevance giving no order at all. But most use cases estimating precision should be fine.

Thanks for all of this info. I've managed to improve things greatly by using -max(relevance()) along with precision(100), and get very good grouped results. Without precision, I'd still get missing hits, with 2 content nodes and redundancy 2. Happy for this ticket to be closed.


corrected In-Memory -> In-Memory OLTP, and added context to the top o…

…f the page

Hi @jodebrui, I'm your friendly neighborhood Azure Pull Request Bot (You can call me AZPRBOT). Thanks for your contribution!

It looks like you're working at Microsoft (jodebrui). If you're full-time, we DON'T require a contribution license agreement.

If you are a vendor, DO please sign the electronic contribution license agreement. It will take 2 minutes and there's no faxing! https://cla.azure.com.

TTYL, AZPRBOT;

@jodebrui
I'll merge this PR, but because you're a Microsoft employee and we need to validate your content, in the future please use the private repo (guidance below). Thanks.
Install/set-up tools https://github.com/Azure/azure-content/blob/master/contributor-guide/tools-and-setup.md
Submit a pull request https://github.com/Azure/azure-content/blob/master/contributor-guide/git-commands-for-master.md


Fix ear dropping script

The "multiple actions" feature added to the ear dropping script broke its original functionality. This PR fixes things. Multiple actions will only be stored if multiple actions are provided by the user.

We're in the process of deprecating this repository in favor of separate repositories per script over in https://github.com/github/hubot-scripts/issues/1641 . I can merge this now to get functionality out there, but it'd be better if this was extracted and released as a separate repository.
cc @inhumantsar as a prior contributor to this script

Released in 2.16.2, thanks! cc https://github.com/github/hubot-scripts/pull/1660


01 Feb 2024 - A11y Theme Builder Meeting Minutes

Date
2024-02-01 - 09:15am EST
Zoom info

Meeting link: https://zoom.us/j/91013899295?pwd=Qnh5UVN1aUZ4ak9tODgvMVNLNUg5Zz09
Meeting id: 910 1389 9295
Password: 123225
Call-in: +1<PHONE_NUMBER> US (New York) (Check calendar for more options)

Untracked attendees

Fullname, Affiliation, (optional) GitHub username
...

Meeting notices

FINOS Project leads are responsible for observing the FINOS guidelines for running project meetings. Project maintainers can find additional resources in the FINOS Maintainers Cheatsheet.

All participants in FINOS project meetings are subject to the LF Antitrust Policy, the FINOS Community Code of Conduct and all other FINOS policies.

FINOS meetings involve participation by industry competitors, and it is the intention of FINOS and the Linux Foundation to conduct all of its activities in accordance with applicable antitrust and competition laws. It is therefore extremely important that attendees adhere to meeting agendas, and be aware of, and not participate in, any activities that are prohibited under applicable US state, federal or foreign antitrust and competition laws. Please contact<EMAIL_ADDRESS>with any questions.

FINOS project meetings may be recorded for use solely by the FINOS team for administration purposes. In very limited instances, and with explicit approval, recordings may be made more widely available.

Agenda

[ ] Convene & roll call (5mins)
[ ] Display FINOS Antitrust Policy summary slide
[ ] Review Meeting Notices (see above)
[ ] Approve past meeting minutes
[ ] Community WG update (@PaulaPaul)
[ ] Docker vulnerabilities update (@aaronreed708 - https://github.com/finos/a11y-theme-builder/issues/742)
[ ] FINOS Hosted Platforms page update (@aaronreed708 - [REQUEST] Provide information about Theme Builder to FINOS)
[ ] ...
[ ] AOB, Q&A & Adjourn (5mins)

Minutes

Decisions Made

[ ] Decision 1
[ ] Decision 2
[ ] ...

Action Items

[ ] Action 1
[ ] Action 2
[ ] ...

Cody Zuschlag - Nearform

Evan K - DFS

Aaron Reed - DFS
Lise Noble - DFS

Minutes approved in today's call.


trouble installing on Mac

I had trouble installing on my Mac, but here's what I did to get it to work.
git clone https://github.com/cumulo-autumn/StreamDiffusion.git
cd StreamDiffusion
pip install .
git patch apply ignore_cuda_for_mac.patch

For me, it's just: git apply ignore_cuda_for_mac.patch. Thanks for the tip!

I've created a gist to help guide the setup and running the demos. Let me know if this works for you.
https://gist.github.com/fbarretto/e61dbf5bb25fd5e98975a42fc7dd5295


[Bug] Notifications not mirrored to Apple Watch

When you get a high/low glucose notification, it is not mirrored to the Watch, but instead vibrates the phone. This is not consistent with how notifications are handled in other apps, e.g. Messages or Reminders.
Mirroring is controlled in the Watch app itself, so it shouldn't have to be a setting within the app itself.

Hello,
thank you very much for your message.
I cannot influence where the notifications are delivered (Apple Watch or iPhone).
Here is an article from on the subject:
https://support.apple.com/en-us/HT204791
Many greetings
Reimar


Body parser running endless on (read body) cause of invalid content-length

Hello,
please could u advise why the read body in body parser running endless on invalid content-length instead of throwing and expected invalid content length error?
Thanks
Tb

The content-length header is part of the http message framing. When the content-length value is set larger than the actual length, the server cannot tell that the content length is wrong or just the client has not completed sending the data. The error that would occur in this condition is a timeout for waiting for the body data to arrive. This behavior is part of the Node.js http server itself. You can adjust the timeout as your needs are using https://nodejs.org/dist/latest-v16.x/docs/api/http.html#http_server_requesttimeout

Thank you for your answer. I am using express.js and couldt not find any place to put valid timeout value, so no endless open connection...

Express.js is simply a routing layer on top of the Node.js htto server. If you use app.listen yo create your server, it's return value is the Node.js server instance http://expressjs.com/en/4x/api.html#app.listen

Thanks again dougwilson.


Add the equivalent of Center() for the remaining alignments

Typing Align alignment, Alignment over and over is pretty annoying after a while.
It would be nice if the core had the equivalent of center for all the alignments:
import 'package:flutter/material.dart';

Widget _build(Alignment value, Widget child) => Align(alignment: value, child: child);

/// TOPS
class TopLeft extends StatelessWidget {
  const TopLeft({Key key, this.child}) : super(key: key);
  final Widget child;

  @override
  Widget build(BuildContext context) => _build(Alignment.topLeft, child);
}

class TopRight extends StatelessWidget {
  const TopRight({Key key, this.child}) : super(key: key);
  final Widget child;

  @override
  Widget build(BuildContext context) => _build(Alignment.topRight, child);
}

class TopCenter extends StatelessWidget {
  const TopCenter({Key key, this.child}) : super(key: key);
  final Widget child;

  @override
  Widget build(BuildContext context) => _build(Alignment.topCenter, child);
}

/// CENTERS
class CenterLeft extends StatelessWidget {
  const CenterLeft({Key key, this.child}) : super(key: key);
  final Widget child;

  @override
  Widget build(BuildContext context) => _build(Alignment.centerLeft, child);
}

class CenterRight extends StatelessWidget {
  const CenterRight({Key key, this.child}) : super(key: key);
  final Widget child;

  @override
  Widget build(BuildContext context) => _build(Alignment.centerRight, child);
}

/// BOTTOMS
class BottomLeft extends StatelessWidget {
  const BottomLeft({Key key, this.child}) : super(key: key);
  final Widget child;

  @override
  Widget build(BuildContext context) => _build(Alignment.bottomLeft, child);
}

class BottomRight extends StatelessWidget {
  const BottomRight({Key key, this.child}) : super(key: key);
  final Widget child;

  @override
  Widget build(BuildContext context) => _build(Alignment.bottomRight, child);
}

class BottomCenter extends StatelessWidget {
  const BottomCenter({Key key, this.child}) : super(key: key);
  final Widget child;

  @override
  Widget build(BuildContext context) => _build(Alignment.bottomCenter, child);
}

@esDotDev
what's the desirability or the advantage compared to
Align(
  alignment: Alignment.topRight,
  child: Foo(),
);
dart
Align(
  alignment: Alignment.topRight,
  child: Foo(),
);
```
wouldn't just add volume, and complexity to the framework?

Thanks for the response.

If there's a better way to implement that's great, this is just a quick implementation I made in a few minutes.
That's an arbitrary assumption that I don't think is very meaningful. I can align anything anywhere, and the object itself very well might have it's own internal padding or animation. In any case, for completeness sake, if you are to implent some of them, you should implement them all imo.
I addressed this in the op, as a Flutter dev I find myself constantly writing the lines Align alignment, Alignment over and over again. It's really quite annoying, and since we have Center, why wouldn't we have the others?

If the main concern is Widget pollution, Align.topLeft, etc could be a nice middle ground?
Cheers,

Whats funny about this, is that I find myself more and more in Flutter, limited by the speed I can actually write widget trees.
Which is a testament to how fast things are to make in Flutter, but also seems to be some issue with overall verbosity.
Getting rid of this endless Alignment/Container usage just to position things in Stacks would be a small but very concrete win.
I'd love to see the Flutter team focus more on these low level syntactic sugar things to reduce overall verbosity. These are low effort, bug reward things for the team and flutter devs respectively. Another one we use a lot is PositionedAll which is a tweak on Positioned.fill(). Another one is spacing, there should be some small wrapper on SizedBox(width: 10) so we can just do HSpace(10).
The 2 main arguments to have these in core, are

It gives all developers a common vernacular and foundation, makes it much easier to pull together multiple devs and get to work. No training in custom Widgets needed.

It also allows everyone to write more succinct code examples. While it's easy for us to make all these helper widgets in our own libs (and we do), we always use vanilla Flutter for blog posts and snippets, this means we're all stuck conversing in whatever level of verbosity is in the core, which often doesn't read well out of the box. So tutorials are longer than they should be, docs are more confusing than they should be, etc

fwiw, I created these in a package here: https://pub.dev/packages/extra_alignments


MQTT disconnect when the screen is locked

I have given the mqtt client a unique clientId, and the client connect to my sever successfully.After setting up the messageHandler, I can receive message from others..However, when I lock the screen, the client disconnect. And the messageHandler is invalid, so I can't received the offline message.. I have noticed that the MQTT Client have a property keepAlive, but it doesn't work for me..Any idea?

I guess this could be because of a non-granted continued background execution.
https://developer.apple.com/library/ios/documentation/iPhone/Conceptual/iPhoneOSProgrammingGuide/BackgroundExecution/BackgroundExecution.html


Created a simple CPU usage check for linux

Just a simple, configurable check for CPU usage on Linux servers

Looks good thanks!


Update install help

To indicate name is requires for which locations (e.g. http).
https://github.com/typings/typings/issues/216#issuecomment-204897507

Or improve the error message:
Unable to install dependency from "https://github.com/Reactive-Extensions/RxJS/blob/master/ts/rx.all.es6.d.ts" without a name

Only required when installing a definition without a name. If it's using typings.json with a name, it'd work, but yes - this can be improved.


app update/edit via api should not expect projectID

What kind of request is this (question/bug/enhancement/feature request):
bug
Steps to reproduce (least amount of steps as possible):
updating an app via the api has changed between 2.2.x and 2.3.x. previously passing in a projectID was not required, and probably still shouldnt be required since the app already has the projectID within the object.

One could argue that projectID should not be required on a create as the information is available via the URL. Does create in the web ui hiding adding the projectID info? It is not requested/available as an input.

Couldn't reproduce. My steps:
* Edit
  * Create project via UI
  * Edit project via API with empty projectId field and have changes go through succesfully
---
* Create
  * Attempt to create project via curl with projectID missing (example below) and it works.

body:
curl --request POST \
  --url CLUSTER_URL/v3/project/local:p-d6gkk/apps \
  --header 'authorization: Bearer token-TOKEN \
  --header 'content-type: application/json' \
  --data '{
"answers": {
"AntiAffinity": "hard",
"defaultImage": "true",
"metrics.enabled": "false",
"replicaCount": "2",
"showMemcachedOptions": "false"
},
"description": "asdf",
"externalId": "catalog://?catalog=library&template=memcached&version=2.9.0",
"multiClusterAppId": "",
"name": "memcached-asdf",
"targetNamespace": "memcached-sqsjn",
"timeout": 300,
"wait": false
}'

Response: 201 created

tested this out myself on 2.3.5, seems to be working as expected.

tested in master-head 2e6041d75 and I can deploy an app without passing a project id via the API

This doesn't happen for global catalogs, happens for project scoped catalogs

The following is observed on v2.3.5:
Using cluster/project level catalog

If the app is deployed using a project level catalog, editing it via API with projectId = "" will fails with the following error message

Using a global level catalog

if the app is deployed using a global level catalog, editing it via API without setting the projectId, the response of the api call contains no data

and the app is gone from the UI although its workloads still exist

a further investigation indicates that the field spec.projectName is empty on the App (project.cattle.io/v3) object in Rancher. Reset it to the proper project id will bring the app back in UI

The bug was reproduced when:

An app is launched using a project-level catalog
And a curl command is used to update it without passing the projectId key
Something like

curl -u "token-xxxx" \
-X PUT \
-H 'Accept: application/json' \
-H 'Content-Type: application/json' \
-d '{"annotations":{"lifecycle.cattle.io/create.helm-controller_local":"true"},
"answers":{
"cluster.enabled":"true", "cluster.slaveCount":"7",
....},
"appRevisionId":"apprevision-lfj5k",
"externalId":"catalog://?catalog=p-fhk77/p1&type=projectCatalog&template=redis&version=3.0.2",
"name":"redis",
"namespaceId":null,
"targetNamespace":"redis",
"timeout":300}' \
'https://rancher/v3/project/local:p-fhk77/apps/p-fhk77:redis'

The bug is validated on rancher:v2.4-head ba190e961
Now we can deploy/edit an app using either project or cluster catalog via command line without passing the projectId key
via command line means first getting the curl command by tracking the network in Rancher UI then running the command with modified value in a terminal
without passing the projectId key means removing the projectId item from the request's data section


std.format: Add description of flags, width, precision, separator and positional arguments.

I kept the description of the flags rather brief. They will be given in more detail in the followup PR, which will feature a large table of types and format chars, which will give special meanings of the flags in more detail.

A couple of suggestions for future PRs, if I may:

I'll try. :-)

try to not repeat the same expression in one paragraph, but rather use synonyms.

That's not easy for me. I'm often happy when I manage to find one way to express what I want to say. Sometimes I find synonyms in the dictionary, but I'm unsure if they really express, what I want to say. For example, I wanted to write here again "I'll try", like above. The dictionary suggest "I'll struggle", but I've got the feeling, that this is something else. Same with "I'll bother". Maybe "I'll make an effort" might be good?
Or turning it the other way round: I'm quite thankful, that you are helping me here... :-)

Or turning it the other way round: I'm quite thankful, that you are helping me here... :-)

Don't worry about it, it's my pleasure.

Looks good! Thanks! Might need a rebase though if buildkite keeps failing.

_D3std6format8internal6floats__T11printFloatFVbi1TdTaZQwFNaNfNkAadSQCnQCm4spec__T10FormatSpecTaZQpEQDtQDsQDoQDi12RoundingModeAyaimbZQCr: error: undefined reference to '_D3std4math4ceilFNaNbNiNeeZe'

Obviously not related to this PR (which simply adds documentation)

_D3std6format8internal6floats__T11printFloatFVbi1TdTaZQwFNaNfNkAadSQCnQCm4spec__T10FormatSpecTaZQpEQDtQDsQDoQDi12RoundingModeAyaimbZQCr: error: undefined reference to '_D3std4math4ceilFNaNbNiNeeZe'

IMHO this is a bug in the testers. They mix different versions of Phobos whenever the branch is not based on the HEAD. Sometimes this leads to such messages. We had several of them in the past, when we split std.format. So this is probably due to the merging of PR #7956 between creating this PR and now. I'll rebase and it will vanish.


Tupha/background color image uwp

Added support for image background color in 2 styles

Normal style: Created a Border element with background color to wrap around Image
Person style: Created a Grid element to contain 2 ellipses, one filled with the SolidColorBrush, the other filled with ImageBrush

Added a new card payload to with its test results

You also need to add the check for .NET not running the tests for your change as the tests are failing


Article for the phishing campaign

Status
Ready
Related Issues
Fixes: https://github.com/demisto/etc/issues/38663
Related to: https://github.com/demisto/etc/issues/33810
Description
Wrote an an article for the phishing campaign additions to phishing.

@yaron-libman is it possible for us to predict what the URL for the article will be so we can already link to it from the pack readme?


CSS

CSS
User Story
As a boot camp student
I want the prework notes to be structed on a webpage
So that I can easily find and read the Information
Acceptance Criteria
GIVEN a Prework Study Guide website
WHEN I view the study guide
THEN I see a dark blue header and footer, and four boxes with a shadow

i would like to work on this issue


Tree mapping - transform YAML from one format to another

As a Devops I often need to convert between CI config formats. For example, AppVeyor below to GitHub Actions.
version: "{build}"

install:
- cmd: python -m pip install tox

build_script:
- cmd: python -m tox

Or it could be GitHub Actions to GitLab Pipelines.
Describe the solution you'd like
Well, a set of comby filters/rules that allow to match and convert parts of the tree one at a time. It is also important to visualize non-converted parts of the tree and preserve them between filters/rules. That's needed to ensure that conversion is complete and correct.
Just an idea.

Thanks for expressing a desire for YAML, you're not the first! I need to add support for parsing indentation to identify blocks. I'd be grateful if you could give me a concrete example of

convert parts of the tree one at a time

for your use case, which I could use to test the additions once I implement them.

Thanks for expressing a desire for YAML, you're not the first! I need to add support for parsing indentation to identify blocks. I'd be grateful if you could give me a concrete example of

convert parts of the tree one at a time

for your use case, which I could use to test the additions once I implement them.

In that particular case above I was not able to map version: {build}, because it is not needed for the epp. Two other lines translated into this script.
on:
  push:
    branches: [ master ]
  pull_request:
    branches: [ master ]

jobs:
  build:
    runs-on: windows-latest
    steps:
    - uses: actions/checkout@v2
    - name: install
      run: python -m pip install tox
    - name: build_script
      run: python -m tox

on is the required key. The values are to mimic the behaviour of AppVeyor.

In that particular case above I was not able to map version: {build}, because it is not needed for the epp. Two other lines translated into this script.
on:
  push:
    branches: [ master ]
  pull_request:
    branches: [ master ]

jobs:
  build:
    runs-on: windows-latest
    steps:
    - uses: actions/checkout@v2
    - name: install
      run: python -m pip install tox
    - name: build_script
      run: python -m tox

on is the required key. The values are to mimic the behaviour of AppVeyor.

Converting parts of the tree one at a time.

Map default behaviour of initial platform (AppVeyor) into empty template for target platform
If behaviour is modified from default, change values for target platform template accordingly (there are only no strings matched, so no modifications are applied)
Add necessary wrappers for the content that is available to be mapped in the next step.
Map the content (command line commands in this case)

After every step there is an incomplete unusable file, which becomes usable only after the last step is over.
I even imagine the interface that allows to go from one step to another (like horizontal pager) and see which data is passed from one side to another, where the context comes from, and it is transformed.

Converting parts of the tree one at a time.

Map default behaviour of initial platform (AppVeyor) into empty template for target platform
If behaviour is modified from default, change values for target platform template accordingly (there are only no strings matched, so no modifications are applied)
Add necessary wrappers for the content that is available to be mapped in the next step.
Map the content (command line commands in this case)

After every step there is an incomplete unusable file, which becomes usable only after the last step is over.
I even imagine the interface that allows to go from one step to another (like horizontal pager) and see which data is passed from one side to another, where the context comes from, and it is transformed.

Got it, thanks!

Got it, thanks!


Attribution for MIT License?

Hi, I’m looking to use the new CSS logo in my project, and I saw the README file mentioned that the design is licensed under the MIT license. However, I didn’t see a copy of the MIT license in the repository.
How should I attribute the logo (i.e. the “Copyright (c) [year] [fullname]” line from the MIT license) in my project?

Hi thanks for point this out, we just added a license as you can see here


Update README.md

Added the Ask Steve Chrome Extension, which enables you to connect Ollama: https://www.asksteve.to/docs/local-models#how-do-i-use-ollama-with-ask-steve

thank you for contributing and supporting Ollama! I really appreciate this.
I'm trying to keep this as community projects for now.


Is there a way to use url ( video stream ) such as rtsp link with mlkit

I have tried mlkit and it works great with the camera and image path. But I would like to know if there is any method for using stream URL to do detections.

i have same issue


how is best way to integrate in HA

Version of home_assistant
Home Assistant 2021.12.10
Version of the custom_component
1.2.17 (latest)
Describe the bug
I receive all values and forecast for next days, as expected.
Have enabled (for now) all sensors so that can see in sensor attributes any hourly forecast and other provided attributes.
But - how can I display the hourly forecast?
Even with the https://github.com/bramkragten/weather-card I cannot receive hourly values, because in main entity are only the daily values inside (with weather.home / weather.home_hourly it is working)
Other question - could it be possible to configure the forecast? So that could be visible the wind speed instead of other value?
(yes, can make it in code, but then never can update more ;) )
(if yes - will be make a feature request, but at first would like to get it work here,... ;) )
Debug log

2022-01-28 17:09:41 WARNING (SyncWorker_1) [homeassistant.loader] We found a custom integration dwd_weather which has not been tested by Home Assistant. This component might cause stability problems, be sure to disable it if you experience issues with Home Assistant

THANKS!

added feature request


ResizeObserver is not defined

Nuxt 项目提示 ResizeObserver is not defined

npm i resize-observer-polyfill
import 'resize-observer-polyfill/dist/ResizeObserver.global';


Will AMD Radeon Pro 5500M be supported?

Since I didn't find AMD Radeon Pro 5500M, which is used by the latest Macbook Pro 16-inch in the hardware support list of ROCm, would it be supported in the near future?

Hi @cyyeh , can you post your question on ROCm github main repo instead?
https://github.com/RadeonOpenCompute/ROCm
Please note we only take tensorflow-rocm specific issues in this forum, thank you for your understanding.


[CT-3411] [Regression] env_var file enforcement not correct for projects with subpackages that contain env_vars

Is this a regression in a recent version of dbt-core?

[X] I believe this is a regression in dbt-core functionality
[X] I have searched the existing issues, and I could not find an existing issue for this regression

Current Behavior
I have a project, that imports private repos in packages.yml, that in turn import more private repos. We manage this with an env_var. We now encounter this error:
Secret env vars are allowed only in profiles.yml or packages.yml. Found <REDACTED> referenced elsewhere.
Expected/Previous Behavior
Dependencies to install without issue.
Steps To Reproduce

have a project with packages.yml that imports a private repo, which also imports a private repo
run dbt deps

Relevant log output
No response
Environment
- OS: linux/amd64
- Python: 3.11
- dbt (working version): 1.6.9
- dbt (regression version): 1.7.2 (1.7.1 also, didn't check 1.7.0)

Which database adapter are you using with dbt?
snowflake, bigquery
Additional Context
No response

@nachimehta I just tried reproducing this, and I wasn't able to.
Here's what I did:

Added packages.yml to private_repo_A

Includes a git dependency containing a "secret" env var (DBT_ENV_SECRET_GIT_CREDENTIAL) pointing to private_repo_B

In another project, I added packages.yml with a git dependency on private_repo_A

I run:
$ DBT_ENV_SECRET_GIT_CREDENTIAL=<mytoken> dbt deps

And everything proceeds as expected. I don't see this error:
Secret env vars are allowed only in profiles.yml or packages.yml. Found <REDACTED> referenced elsewhere.


[-wATCH-] Tiktok Subhashree Sahu Video Original Video Link Imsha Rehman Video ʟᴇᴀᴋᴇᴅ Viral On Social Media X Trending Now

[-wATCH-] Tiktok Subhashree Sahu Video Original Video Link Imsha Rehman Video ʟᴇᴀᴋᴇᴅ Viral On Social Media X Trending Now
.
.
.
.
The recent surge of interest surrounding Ms sethi latest video showcases the massive impact that viral moments can have on a digital creator’s reach. As a rising figure in Original media, her innovative approach and unique content—most notably her recent Spiderman-themed video—are driving vibrant discussions and enthusiasm on platforms like Instagram, X (formerly Twitter), and Discord. This viral wave highlights how quickly content can elevate creators to new levels of visibility, fostering strong connections between them and their audiences. Social media continues to be a powerful tool, propelling creators into the spotlight and keeping fans eagerly anticipating their next moves.


[docs] Add page for CSS variables support in @mui/material

Preview: https://deploy-preview-32050--material-ui.netlify.app/experimental-api/css-variables/
I've also moved the "ClassName Generator" page to this new Experimental APIs section in the sidebar

What would be a good hiearachy for the content under Usage? I feel like we could a bit different like it is right now, maybe:

Customizing the components
Customizing the theme
Toggle between light and dark
Server-side rendering
Next.js
Gatsby

Updated! I removed some references about color schemes to make it simplest as much as possible. I think we can add more explanation about the color schemes in a separate PR because of the time constraint.

I think we can add more explanation about the color schemes in a separate PR.

Makes sense.


Evaluate the possibility to make PersistenceTimer running in multi threads

I am reviewing the core of OAP recently, one side to evaluate the requirements for the BanyanDB, and find the chance to improve the performance. #6411 is the first, this is the second one.
PersistenceTimer takes the core responsibility to assemble the requests and execute them to the storage. I noticed, the stage of assembly and execution is one-thread model. I remember these 2 stage causes many resources and latency. Considering the payload of OAP is usually not high, we could increase the number of thread to improve this.
@EvanLjp Could you share some stats data of self observability about these two?
FYI @apache/skywalking-committers

@EvanLjp Back to you, have you tried to change PersistenceTimer#extractDataAndSave's execution stage into the concurrency mode, such as using 2-4 threads to compare the performance? The 20s seem a little long.

let me have a try.

I want to konw, why metrics need to persist synchronously, can we just persist like record

@wu-sheng I want to konw, why metrics need to persist synchronously, can we just persist like record

Simple answer is, NO, they need to be in the sync way.. And we can't afford the load to explain how the source codes work.

@wu-sheng @xuanyu66 @EvanLjp I have also encountered the problem of es holding a lot of objects. in addition to multi-threaded writing, I also made an optimization here. I rewritten the buildBatchRequests method in MetricsPersistentWorker and added a parameter for batch writing. , Is to avoid frequent updates of hourly and day indicators. In addition, I made a time window to write one minute of data asynchronously (window period). If the current one minute has passed, then use synchronous writing. We have observed that the effect is good. hope some suggestions.

I am not following the codes. Could you submit a real design with a test benchmark?
This is a part of core, if we want to change this, it should be evaluted and reviewed carefully.


Cannot build image due to domain resolving issue

Background
When trying to build the image on Docker build, the domain github.com is not resolved and I obtain an error. As a result, I cannot build the image.
Environment

lnd v0.11.1-beta
MacOS Catalina 10.15.7. Darwin BTSWSTRMD6R.local 19.6.0 Darwin Kernel Version 19.6.0: Mon Aug 31 22:12:52 PDT 2020; root:xnu-6153.141.2~1/RELEASE_X86_64 x86_64
Docker version 19.03.13, build 4484c46d9d

Steps to reproduce
1/ Download the repository
2/ Execute docker build --tag=mrlouzao/lnd --build-arg checkout=v0.11.1-beta .
Actual behaviour
The build process starts and fails when reaching the clone from github statement.
...
#6 3.497 (37/37) Installing alpine-sdk (1.0-r0)
#6 3.503 Executing busybox-1.32.1-r2.trigger
#6 3.511 OK: 210 MiB in 52 packages
#6 3.572 Cloning into '/go/src/github.com/lightningnetwork/lnd'...
#6 3.631 fatal: unable to access 'https://github.com/lightningnetwork/lnd/': Could not resolve host: github.com
------
failed to solve with frontend dockerfile.v0: failed to build LLB: executor failed running [/bin/sh -c apk add --no-cache --update alpine-sdk     git     make     gcc &&  git clone https://github.com/lightningnetwork/lnd /go/src/github.com/lightningnetwork/lnd &&  cd /go/src/github.com/lightningnetwork/lnd &&  git checkout $checkout &&  make release-install]: runc did not terminate sucessfully

Another Notes
It seems like there is a problem with the base docker image. I've created my own image of Docker with base image openjdk:8-jdk-alpine and when invoking RUN ping google.com and RUN ping github.com it works perfectly.
However when I do the same with golang:1.15.7-alpine, for RUN ping google.com works, but for RUN ping github.com it doesn't.
So I conclude that there is a problem with the domain resolution of github.com for this image, but not for other domains.

This seems to be a common problem on MacOS for some reason. I'm not sure if the alpine base image could be the problem: https://github.com/gliderlabs/docker-alpine/issues/539
We've found that adding some DNS servers to your daemon.json (either /etc/docker/daemon.json or ~/.docker/daemon.json depending on your system) fixes the issue:
{
    "dns": ["<IP_ADDRESS>", "<IP_ADDRESS>"]
}

The release-install method didn't exist in v0.11.1-beta yet. Try docker build --tag=mrlouzao/lnd --build-arg checkout=v0.12.0-beta .
I'm closing the issue since the DNS resolution problem isn't anything that should be fixed in our repo. Feel free to comment again if you run into further problems though.


fix: do not transform internally imported files

Summary
Any internal module should never be transformed at runtime, so let's just bail early rather than having ScriptTransformer skip them (or not, which is super wasteful).

Test plan
Green CI

Hah, OOM on circus 🙈

Does this OOM due to the cache thing? Probably... I can skip it

Codecov Report

Merging #9900 into master will increase coverage by 0.02%.
The diff coverage is 80.00%.

@@            Coverage Diff             @@
##           master    #9900      +/-   ##
==========================================
+ Coverage   64.41%   64.43%   +0.02%
==========================================
  Files         291      291
  Lines       12410    12417       +7
  Branches     3059     3062       +3
==========================================
+ Hits         7994     8001       +7
  Misses       3770     3770
  Partials      646      646

Impacted Files
Coverage Δ

packages/jest-runtime/src/index.ts
58.62% <80.00%> (+0.51%)
:arrow_up:

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update 5db005f...5cb78d8. Read the comment docs.


WIP: Add gitlab documentation from example project

Adapted parts of the documentation to match an easier to follow getting started guide.
Changes

docs

Checklist

[x] Read the contribution guide and accept the code of conduct
[x] Readme (updated or not needed)
[x] Tests (added, updated or not needed)

Bash syntax highlighting doesn't seem to work well. Sadly, gitlab example uses bash commands a lot compared to github actions guide.

Syntax highlighting added in https://github.com/Unity-CI/Website/pull/33

@GabLeRoux FYI, please retarget to main

reopened at #48


Allow both opening of tabs right of the current and at the end of the list

It'd be great to be able to decide whether to open a tab right to the current or at the end of the list of tabs of the current window (default behaviour). This could be realized by making the "New Tab" menu item in the file menu a menu with two menu items doing the former and the latter. This transformation should be configurable.
In order to handle the opening of tabs with Ctrl+t it be great to be able to configure whether

a tab should be opened always right to the current or at the end of the list,
a dialog should be displayed asking for what to do

An option to configure the keyboard shortcut to open a tab at the two locations could be added to a settings dialog (override the meaning of Ctrl+t and define a second shortcut for the counterpart action).

That's not that simple and I am not actually interested in adding menus. I could settle for exposing a method to quickly enable/disable opening next to current whose shortcut you can configure with https://addons.mozilla.org/en-US/firefox/addon/customizable-shortcuts/

I think making open new tab next to the current an alternative shortcut (f.e. Ctrl+Alt+T) which could be customized using the other extension mentioned would be great.

I am currently working on adding a few options including this. Will be released soonish. https://github.com/sblask/firefox-open-tabs-next-to-current/pull/4

New version has been released.


Suggestion - self.file alongside self.template that serves a single static file to a given URL.

It's really a synonym for self.template, it just explicitly doesn't do any preprocessing to the text. No real speed improvements, just clarity, being able to say that route X is completely static, no preprocessing.
--- cut here ---
submethod BUILD(|) {
my $rootdir = $?FILE.IO.parent.parent;
self.get: '/' => sub {
self.file: 'index.html'; # <--- There.
};
}
--- cut here ---

IMHO this should automatically set the content-type as well.
Question: should this be restricted to the directory of the application to avoid accidentally service other files?  If so, should there be an override for that safety?

I'd suggest adding an optional MIME-type variable on the call. Testing a file's magic can be unreliable and slow. Think for example of a 1MB UTF-8 with the only non-ASCII character being a copyright symbol at the end. This way the user can either override bad magic detection or set it for performance purposes.

I'd say by default it should use the same algorithm as the static file serving, (is that based on extension?) but the user can override it with an optional parameter as @drforr suggests.

This makes sense :)

Right. I wasn't suggesting avoiding the MIME-type check altogether, I was just suggesting a way to override the behavior. Usually checking magic is fast so it's not a problem, but I've worked with documents where it's unreliable, or sometimes you simply want to, say, upgrade text/ASCII to text/UTF-8 because it's the right thing to do.