Python 2.6 not supported

readme.md states the project's dependencies as "Python 2.6+" but importing stravalib in Python 2.6 gives an error.
from stravalib.client import Client
File "/usr/lib/python2.6/site-packages/stravalib/client.py", line 1071
return {i.type: i for i in streams}
                    ^
SyntaxError: invalid syntax

The following statement in client.py uses syntax new to Python 2.7:
# Pack streams into dictionary
return {i.type: i for i in streams}

The statement was introduced with revision 9f1385a2f50fd7111fb60374a47a1e036733ceea in Aug '14.
Can you please update stravalib's dependencies to Python 2.7+ or add Python 2.6 support?

Yeah, we will probability just drop 2.6 support at this point. Thanks for
noting!
On Wed, Jan 6, 2016, 10:37 rosscado<EMAIL_ADDRESS>wrote:

readmemd states the project's dependencies as "Python 26+" but importing
stravalib in Python 26 gives an error
from stravalibclient import Client
File "/usr/lib/python26/site-packages/stravalib/clientpy", line 1071
return {itype: i for i in streams}
^
SyntaxError: invalid syntax
The following statement in clientpy uses syntax new to Python 27:
Pack streams into dictionary
return {itype: i for i in streams}
The statement was introduced with revision 9f1385a
https://github.com/hozn/stravalib/commit/9f1385a2f50fd7111fb60374a47a1e036733ceea
in Aug '14
Can you please update stravalib's dependencies to Python 27+ or add Python
26 support?
—
Reply to this email directly or view it on GitHub
https://github.com/hozn/stravalib/issues/65.


Closing multi windows

Objective
Currently, if any window is closed, the app quits entirely. This goal of this PR is to create a configurable resource to control how the app reacts to a window being closed.
Fixes #3180.
Solution
Removed the exit_on_window_close_system from bevy_window and replaced its functionality with a function in bevy_winit. The reason for this was to allow the reading and writing to world resources without having to add the bevy_ecs dependency to bevy_window, and to drop the Window from the WinitWindows resource.
Using the WindowsConfig resource, we can specify an exit_method. I added the following methods to start:
pub enum WindowExitMethod {
    /// Exits the app when any window is closed
    AnyClosed,
    /// Exits the app when the primary window is closed
    PrimaryClosed,
    /// Exits the app when the last window is closed
    LastClosed,
    /// Exits the app when a specified window is closed
    WindowClosed(WindowId),
    /// Does not exit the app when windows are closed
    KeepOpen,
}

The WindowsConfig resource defaults with the WindowExitMethod::PrimaryClosed method.
I'm not sure if this is the best way to solve this or not, but it at least provides some functionality.
Issues
Removing the Window
One thing I was trying to do was also remove the window from the Windows resource, but I wasn't sure how to solve the following error though:
thread 'main' panicked at 'Window texture node refers to a non-existent window.', crates/bevy_render/src/render_graph/nodes/window_texture_node.rs:54:14

I imagine this is a system ordering or caching issue of some kind. Is there anyone who has an idea of what might be causing the problem?
Resetting the Primary Window
Currently, the primary window is defined as
pub fn primary() -> Self {
    WindowId(Uuid::from_u128(0))
}

But one question, I wanted to ask is, "Should we update the primary window if it's closed?" Personally, I think it's best to keep this as is, but I wanted to hear other thoughts as well.

The best way to fix the rendering issue is probably to wait until the old renderer is removed; the new renderer only requires small changes to make it not panic.
That being said, I think the solution in https://github.com/bevyengine/bevy/pull/2898 is much cleaner; it's a bit more code, but it composes much more nicely. Is there a reason you disregarded that approach?
Fwiw, I was intending to re-open #2898 (or re-create it into a new PR) once the old renderer was removed, although obviously I don't mind someone else driving it forwards.

That being said, I think the solution in #2898 is much cleaner; it's a bit more code, but it composes much more nicely. Is there a reason you disregarded that approach?

This was a huge misstep on my part. For some reason, I thought that #2898 was merged and that all the window-related code was from that PR as well.
I do agree that it's much cleaner, especially using standard systems to handle whether the app should be exited or not. I originally tried to do that, but the version of main I was based on had removed the bevy_ecs dependency in bevy_window.
Although, I think the configuration should be made into a resource as described in #3180 so it's easier to access/modify. And an enum like WindowExitMethod might be a good way to provide some default options.
But we can close this for now and wait for the old renderer to be removed, then open up #2898 again. Sorry for the mess! 😅


Podman from WSL not found

Is there an existing issue for this?

[X] I have searched the existing issues

Describe the bug
Environment setup:

.NET Aspire app code checked out in the default WSL distribution
Podman installed as a separate WSL distribution
~/.bash_aliases contains alias podman='podman-remote-static-linux_amd64'
In the WSL terminal, running podman images runs successfully

Error encountered: : Container runtime 'podman' could not be found. The error from the container runtime check was: exec: "podman": executable file not found in $PATH
Expected Behavior
No response
Steps To Reproduce
No response
Exceptions (if any)
No response
.NET Version info
No response
Anything else?
No response

Let's add this to the docs for now.

Also it would be nice if you could update the tasks for the Applied Skill https://learn.microsoft.com/en-us/credentials/applied-skills/build-distributed-apps-with-dotnet-aspire/ which requires podman


Update README.md

Suggestion to remove the location tag from here for now, to save confusion.

This is a good idea.


Add more friendly and clear message for 'Not found tests' case

At present, we show this message:
The specified glob pattern does not match any file or the default test directories are empty.

Sometimes customers cannot understand what is happen and what they do to fix it. I found only this question, but I remember that there are a few other questions.
https://stackoverflow.com/questions/58808416/the-specified-glob-pattern-does-not-match-any-file-or-the-default-test-directori
We can show more detailed message like following:
TestCafe searched the tests files in <specified_in_src_user_values | or default directory value> and cannot find the files with tests here. Make sure that you specify correct paths and these files/directories contain valid test files.

https://github.com/DevExpress/testcafe/issues/4930

TestCafe could not find the test files that match the following patterns:

[list of glob patterns]

The [current working directory] current working directory was used as the base path.

Ensure the file patterns are correct or change the current working directory. For more information on how to specify test files, see [URL].


#124 Fix inheritance from partially defined output tables

This fixes an issue where the sql decorator doesn't pass on credentials
for partially defined or undefined output tables.

cc: @mag3141592


JSONata compatibility mode enabled when not required

Current Behavior
I'm processing a message received from a mqtt broker and this message contains a property named 'msg'.
When I edit the jsonata expression and I reference that property, the compatibility mode is automatically turned on even it is referenced with 'payload.msg'.
Expected Behavior
The comaptibility mode should be enabled only if 'msg'  is in the root of the expression.
Steps To Reproduce
Use the attached flow:
Press the inject button and check the debug window.
The "payload" property should be equal to "expected" property.
Example flow
[
    {
        "id": "877be158a307d67d",
        "type": "tab",
        "label": "Flow Issue",
        "disabled": false,
        "info": "Press the inject button and check the log.\nThe \"payload\" property should be equal to \"expected\" property.",
        "env": []
    },
    {
        "id": "9557e626f11638a4",
        "type": "inject",
        "z": "877be158a307d67d",
        "name": "",
        "props": [
            {
                "p": "payload"
            },
            {
                "p": "expected",
                "v": "{\"t\":\"2021-11-29T10:02:19.510Z\",\"description\":\"This is a message received from remote\"}",
                "vt": "json"
            }
        ],
        "repeat": "",
        "crontab": "",
        "once": false,
        "onceDelay": 0.1,
        "topic": "",
        "payload": "{\"t\":1638180139510,\"msg\":\"This is a message received from remote\"}",
        "payloadType": "json",
        "x": 140,
        "y": 80,
        "wires": [
            [
                "084308725d7c40b9"
            ]
        ]
    },
    {
        "id": "8fe1c131068bc1c6",
        "type": "debug",
        "z": "877be158a307d67d",
        "name": "",
        "active": true,
        "tosidebar": true,
        "console": false,
        "tostatus": false,
        "complete": "true",
        "targetType": "full",
        "statusVal": "",
        "statusType": "auto",
        "x": 540,
        "y": 80,
        "wires": []
    },
    {
        "id": "084308725d7c40b9",
        "type": "change",
        "z": "877be158a307d67d",
        "name": "",
        "rules": [
            {
                "t": "set",
                "p": "payload",
                "pt": "msg",
                "to": "{\t\"t\":$fromMillis(payload.t),\t\"description\": payload.msg\t}",
                "tot": "jsonata"
            }
        ],
        "action": "",
        "property": "",
        "from": "",
        "to": "",
        "reg": false,
        "x": 320,
        "y": 80,
        "wires": [
            [
                "8fe1c131068bc1c6"
            ]
        ]
    }
]```

### Environment

- Node-RED version: 2.1.4
- Node.js version: 14.17.6
- npm version: 6.14.15
- Platform/OS: Windows
- Browser: Chrome 96.0.4664.45

The current regex for checking is pretty naive and works for most common scenarios.
Will need to figure out how to refine the regex to avoid false-positives in cases like the one you've identified.


Document how to handle fallible tokenizers

The preferred way to handle a fallible tokenizer is to pass the errors on to the parser, and then have the parser produce an error.

On further thought, this is kinda silly. Just because the first tokenizer we implemented was nearly infallible, doesn't mean that all tokenizers will be.


Hide password input on lockdown-cli

When entering passwords with the addkey function of lockdown-cli, the password is visible in the shell. Lots of command line tools I've used do not show characters as you're typing them for sensitive fields such as passwords, we should do the same thing

That is a bug - on other command lines, they are not shown (by design)

What shell environment and OS was this on?

Git Bash on Windows 10

Resolved for versions after 0.1.1


Cleanup "suggested by"

"suggested_by": "vpeschenkov"
this field should have a @
"suggested_by": "@vpeschenkov"

@vpeschenkov could u take a look when you have time, thx!

@dkhamsing fixed, thanks!


WIP: Instantiate padctrl and padring and rework top_earlgrey_* wrappers

Welcome to operation padctrl :)...
This is a first stab at instantiating the padctrl IP in top_earlgrey and wiring up the padring in the target specific top_earlgrey_* wrappers. Note that this required a couple of structural changes and some dedicated JTAG and USB muxing logic had to be moved:

the previous padctl contained muxing logic to reuse the SPI signals for JTAG. since the old padctl module is now being replaced by the padring module, these JTAG muxes have been moved out into a generic jtag_mux module that allows to overlay / tap out the JTAG signals at parameterizable indices in the MIO / DIO signal arrays.

the previous padctl held the differential input signals of the USB device constant while the corresponding differential OE was asserted. since the padctl is being removed, I have moved this functionality into the USB iomux. but we may have to change that again, depending on how this behaves in terms of timing and depending on how the differential pad wrapper for USB is going to look like.

Note that this PR is WIP and depends on the pinmux updates #1999. I will split out some commits into separate PRs once this has stabilized in order to reduce the size of this PR.
Also, I still need to verify that this maps correctly on FPGA.
I did not touch top_earlgrey_verilator since that is pretty different from the FPGA and ASIC top structure, and probably does not need a padring instance anyway.
@vogelpi I have added you for the change related to the USB iomux. Let me know if you think this is problematic.

Ok it looks like I finally got sims and CI lint checks working again. There are two fixes that were needed, one in the chip-level TB and one in a CI script. These fixes are included in this PR for now (first two commits) such that CI is happy. But I have split them out as separate PRs #2144 #2145,  and will do another rebase after these and the pinmux PR #1999 went in.

The xilinx prim's update has been split out into #2148, and will disappear after rebasing as well.

Ok the FPGA build and the top-level sims seem to work, but there is still something wrong with the FPGA bitstream... could be a lack of timing constraints on some of the new paths that have been introduced together with the pinmux/padctrl changes. Will continue digging tomorrow...

OK so I got the FPGA mapping working before that last rebase onto the recent clock manager changes in master. My machine in the office crashed again and I have no means to double check whether the FPGA mapping is still working after that rebase.
@eunchan @vogelpi @GregAC @imphil do you perchance have an FPGA board lying around where you could give this a spin (SPI hello world and OpenOCD connect examples: https://docs.opentitan.org/doc/ug/getting_started_fpga/)

i do have one around, but i think mine might be disconnected :(
On Mon, May 11, 2020 at 9:24 PM Michael Schaffner<EMAIL_ADDRESS>wrote:

OK so I got the FPGA mapping working before that last rebase onto the
recent clock manager changes in master. My machine in the office crashed
again and I have no means to double check whether the FPGA mapping is still
working after that rebase.
@eunchan https://github.com/eunchan @vogelpi
https://github.com/vogelpi @GregAC https://github.com/GregAC @imphil
https://github.com/imphil do you perchance have an FPGA board lying
around where you could give this a spin (SPI hello world and OpenOCD
connect examples: https://docs.opentitan.org/doc/ug/getting_started_fpga/)
—
You are receiving this because your review was requested.
Reply to this email directly, view it on GitHub
https://github.com/lowRISC/opentitan/pull/2114#issuecomment-627099939,
or unsubscribe
https://github.com/notifications/unsubscribe-auth/AAH2RSSPYNQW5HA7HSFCD4TRRDFRJANCNFSM4MXSDVKA
.

@eunchan, @sjgitty @tjaychen: If the FPGA mapping still works after this rebase, I think this PR is good to go for Bronze purposes. We just need to wait for #2145 and #2196 to make it in.

Good to know, thanks Michael
On Mon, May 11, 2020 at 9:29 PM Michael Schaffner<EMAIL_ADDRESS>wrote:

@eunchan https://github.com/eunchan, @sjgitty
https://github.com/sjgitty @tjaychen https://github.com/tjaychen: If
the FPGA mapping still works after this rebase, I think this PR is good to
go for Bronze purposes. We just need to wait for #2145
https://github.com/lowRISC/opentitan/pull/2145 and #2196
https://github.com/lowRISC/opentitan/pull/2196 to make it in.
—
You are receiving this because you were mentioned.
Reply to this email directly, view it on GitHub
https://github.com/lowRISC/opentitan/pull/2114#issuecomment-627100892,
or unsubscribe
https://github.com/notifications/unsubscribe-auth/AJZQKVLCC6OVY6XJOHRDAIDRRDGBHANCNFSM4MXSDVKA
.

I have a nexsys video to hand so I'll give it a go on the FPGA

FPGA looks good, tested running hello_world uploaded with spiflash and debugging with GDB via OpenOCD.

Thanks for checking @GregAC!
I amended the part that @vogelpi mentioned about the literal length and rebased the CI fix out #2145 out in that last push.
Now the only remaining thing is to get #2196 in and then I think we can try to get this PR landed.

Ok, I could finally test this on my FPGA board as well, and it seems to be working after the final rebase.

discussed with @eunchan, and we decided to pull this in since the public CI failure is unrelated to the changes here (one RISC-V compliance test did not pass).


DAL forward - ignoring read_only fields

Hi,
i today ran into an error, where i needed a read_only field as forwarded value in ModelSelect2 Widget. the
$.serializeArray()
in jQuery ignores disabled fields. I bypassed this issue with overriding the forward.js and checking if a field is disabled - enable it, serialize the field and re-disable it.
I wondered that nobody tried to do this before.
Is there a possibility to get this native in DAL?

@FreakyTea , Can you share your solution, enabling and disabling thing. I have the same issue.
Thanks.

Ok, I got this working.
If someone encounters this problem, please use below script temporary. This cost me 30 minute to figure this out.
        var strategy = getForwardStrategy(field);
        if ($(field).is(':disabled')) {
            $(field).removeAttr('disabled');
            var serializedField = $(field).serializeArray();
            $(field).attr('disabled', 'disabled');
        }
        else {
            var serializedField = $(field).serializeArray();
        }

Can you propose a patch to recognize readonly fields by default ?

Hi,
Sorry I should have included it right away :)
Got it this way:
if (serializedField == false) {             if ($(field).prop('disabled') == true) {                 $(field).prop('disabled', false);                 serializedField = $(field).serializeArray();                 $(field).prop('disabled', true);             }         }
The proper way to set properties is .prop :)


[zh] resync page rbac

This PR resyncs page rbac referring to #40527 and #40557.

diff --git a/content/en/docs/reference/access-authn-authz/rbac.md b/content/en/docs/reference/access-authn-authz/rbac.md
index 26440edfdb..06d84c8e06 100644
--- a/content/en/docs/reference/access-authn-authz/rbac.md
+++ b/content/en/docs/reference/access-authn-authz/rbac.md
@@ -214,14 +214,14 @@ a replacement.
 There are two reasons for this restriction:

 1. Making `roleRef` immutable allows granting someone `update` permission on an existing binding
-object, so that they can manage the list of subjects, without being able to change
-the role that is granted to those subjects.
+   object, so that they can manage the list of subjects, without being able to change
+   the role that is granted to those subjects.
 1. A binding to a different role is a fundamentally different binding.
-Requiring a binding to be deleted/recreated in order to change the `roleRef`
-ensures the full list of subjects in the binding is intended to be granted
-the new role (as opposed to enabling or accidentally modifying only the roleRef
-without verifying all of the existing subjects should be given the new role's
-permissions).
+   Requiring a binding to be deleted/recreated in order to change the `roleRef`
+   ensures the full list of subjects in the binding is intended to be granted
+   the new role (as opposed to enabling or accidentally modifying only the roleRef
+   without verifying all of the existing subjects should be given the new role's
+   permissions).

 The `kubectl auth reconcile` command-line utility creates or updates a manifest file containing RBAC objects,
 and handles deleting and recreating binding objects if required to change the role they refer to.
@@ -261,7 +261,6 @@ When specified, requests can be restricted to individual instances of a resource
 Here is an example that restricts its subject to only `get` or `update` a
 {{< glossary_tooltip term_id="ConfigMap" >}} named `my-configmap`:

-
 ```yaml
 apiVersion: rbac.authorization.k8s.io/v1
 kind: Role
@@ -286,7 +285,7 @@ For example, `kubectl get configmaps --field-selector=metadata.name=my-configmap
 {{< /note >}}

 Rather than referring to individual `resources`、`apiGroups`, and `verbs`,
-you can use the wildcard `*` symbol to refer to all such objects.
+you can use the wildcard `*` symbol to refer to all such objects.
 For `nonResourceURLs`, you can use the wildcard `*` as a suffix glob match.
 For `resourceNames`, an empty set means that everything is allowed.
 Here is an example that allows access to perform any current and future action on
@@ -298,7 +297,7 @@ apiVersion: rbac.authorization.k8s.io/v1
 kind: Role
 metadata:
   namespace: default
-  name: example.com-superuser  # DO NOT USE THIS ROLE, IT IS JUST AN EXAMPLE
+  name: example.com-superuser # DO NOT USE THIS ROLE, IT IS JUST AN EXAMPLE
 rules:
 - apiGroups: ["example.com"]
   resources: ["*"]
@@ -306,12 +305,15 @@ rules:

{{< caution >}}
-Using wildcards in resource and verb entries could result in overly permissive access being granted to sensitive resources.
-For instance, if a new resource type is added, or a new subresource is added, or a new custom verb is checked, the wildcard entry automatically grants access, which may be undesirable.
-The principle of least privilege should be employed, using specific resources and verbs to ensure only the permissions required for the workload to function correctly are applied.
+Using wildcards in resource and verb entries could result in overly permissive access being granted
+to sensitive resources.
+For instance, if a new resource type is added, or a new subresource is added,
+or a new custom verb is checked, the wildcard entry automatically grants access, which may be undesirable.
+The principle of least privilege
+should be employed, using specific resources and verbs to ensure only the permissions required for the
+workload to function correctly are applied.
{{< /caution >}}

Aggregated ClusterRoles
You can aggregate several ClusterRoles into one combined ClusterRole.
@@ -493,7 +495,7 @@ Subjects can be groups, users or
Kubernetes represents usernames as strings.
These can be: plain names, such as "alice"; email-style names, like<EMAIL_ADDRESS>-or numeric user IDs represented as a string.  It is up to you as a cluster administrator
+or numeric user IDs represented as a string. It is up to you as a cluster administrator
to configure the authentication modules
so that authentication produces usernames in the format you want.
@@ -625,7 +627,10 @@ Auto-reconciliation is enabled by default if the RBAC authorizer is active.
API discovery roles {#discovery-roles}
-Default role bindings authorize unauthenticated and authenticated users to read API information that is deemed safe to be publicly accessible (including CustomResourceDefinitions). To disable anonymous unauthenticated access, add --anonymous-auth=false to the API server configuration.
+Default role bindings authorize unauthenticated and authenticated users to read API information
+that is deemed safe to be publicly accessible (including CustomResourceDefinitions).
+To disable anonymous unauthenticated access, add --anonymous-auth=false to
+the API server configuration.
To view the configuration of these roles via kubectl run:
@@ -900,16 +905,20 @@ Because this is enforced at the API level, it applies even when the RBAC authori
You can only create/update a role if at least one of the following things is true:

You already have all the permissions contained in the role, at the same scope as the object being modified
-(cluster-wide for a ClusterRole, within the same namespace or cluster-wide for a Role).
-2. You are granted explicit permission to perform the escalate verb on the roles or clusterroles resource in the rbac.authorization.k8s.io API group.

(cluster-wide for a ClusterRole, within the same namespace or cluster-wide for a Role).
+2. You are granted explicit permission to perform the escalate verb on the roles or
clusterroles resource in the rbac.authorization.k8s.io API group.

For example, if user-1 does not have the ability to list Secrets cluster-wide, they cannot create a ClusterRole
containing that permission. To allow a user to create/update roles:

Grant them a role that allows them to create/update Role or ClusterRole objects, as desired.
Grant them permission to include specific permissions in the roles they create/update:

implicitly, by giving them those permissions (if they attempt to create or modify a Role or ClusterRole with permissions they themselves have not been granted, the API request will be forbidden)

or explicitly allow specifying any permission in a Role or ClusterRole by giving them permission to perform the escalate verb on roles or clusterroles resources in the rbac.authorization.k8s.io API group

implicitly, by giving them those permissions (if they attempt to create or modify a Role or

ClusterRole with permissions they themselves have not been granted, the API request will be forbidden)

or explicitly allow specifying any permission in a Role or ClusterRole by giving them

permission to perform the `escalate` verb on `roles` or `clusterroles` resources in the

`rbac.authorization.k8s.io` API group

Restrictions on role binding creation or update
@@ -920,8 +929,8 @@ to a role that grants that permission. To allow a user to create/update role bin

Grant them a role that allows them to create/update RoleBinding or ClusterRoleBinding objects, as desired.
Grant them permissions needed to bind a particular role:

implicitly, by giving them the permissions contained in the role.

explicitly, by giving them permission to perform the bind verb on the particular Role (or ClusterRole).

implicitly, by giving them the permissions contained in the role.

explicitly, by giving them permission to perform the bind verb on the particular Role (or ClusterRole).

For example, this ClusterRole and RoleBinding would allow user-1 to grant other users the admin, edit, and view roles in the namespace user-1-namespace:
@@ -968,33 +977,33 @@ Creates a Role object defining permissions within a single namespace. Examples:

Create a Role named "pod-reader" that allows users to perform get, watch and list on pods:

kubectl create role pod-reader --verb=get --verb=list --verb=watch --resource=pods

kubectl create role pod-reader --verb=get --verb=list --verb=watch --resource=pods

Create a Role named "pod-reader" with resourceNames specified:

kubectl create role pod-reader --verb=get --resource=pods --resource-name=readablepod --resource-name=anotherpod

kubectl create role pod-reader --verb=get --resource=pods --resource-name=readablepod --resource-name=anotherpod

Create a Role named "foo" with apiGroups specified:

kubectl create role foo --verb=get,list,watch --resource=replicasets.apps

kubectl create role foo --verb=get,list,watch --resource=replicasets.apps

Create a Role named "foo" with subresource permissions:

kubectl create role foo --verb=get,list,watch --resource=pods,pods/status

kubectl create role foo --verb=get,list,watch --resource=pods,pods/status

Create a Role named "my-component-lease-holder" with permissions to get/update a resource with a specific name:

kubectl create role my-component-lease-holder --verb=get,list,watch,update --resource=lease --resource-name=my-component

kubectl create role my-component-lease-holder --verb=get,list,watch,update --resource=lease --resource-name=my-component

kubectl create clusterrole
@@ -1002,39 +1011,39 @@ Creates a ClusterRole. Examples:

Create a ClusterRole named "pod-reader" that allows user to perform get, watch and list on pods:

kubectl create clusterrole pod-reader --verb=get,list,watch --resource=pods

kubectl create clusterrole pod-reader --verb=get,list,watch --resource=pods

Create a ClusterRole named "pod-reader" with resourceNames specified:

kubectl create clusterrole pod-reader --verb=get --resource=pods --resource-name=readablepod --resource-name=anotherpod

kubectl create clusterrole pod-reader --verb=get --resource=pods --resource-name=readablepod --resource-name=anotherpod

Create a ClusterRole named "foo" with apiGroups specified:

kubectl create clusterrole foo --verb=get,list,watch --resource=replicasets.apps

kubectl create clusterrole foo --verb=get,list,watch --resource=replicasets.apps

Create a ClusterRole named "foo" with subresource permissions:

kubectl create clusterrole foo --verb=get,list,watch --resource=pods,pods/status

kubectl create clusterrole foo --verb=get,list,watch --resource=pods,pods/status

Create a ClusterRole named "foo" with nonResourceURL specified:

kubectl create clusterrole "foo" --verb=get --non-resource-url=/logs/*

kubectl create clusterrole "foo" --verb=get --non-resource-url=/logs/*

Create a ClusterRole named "monitoring" with an aggregationRule specified:

kubectl create clusterrole monitoring --aggregation-rule="rbac.example.com/aggregate-to-monitoring=true"

kubectl create clusterrole monitoring --aggregation-rule="rbac.example.com/aggregate-to-monitoring=true"

kubectl create rolebinding
@@ -1042,21 +1051,21 @@ Grants a Role or ClusterRole within a specific namespace. Examples:

Within the namespace "acme", grant the permissions in the "admin" ClusterRole to a user named "bob":

kubectl create rolebinding bob-admin-binding --clusterrole=admin --user=bob --namespace=acme

kubectl create rolebinding bob-admin-binding --clusterrole=admin --user=bob --namespace=acme

Within the namespace "acme", grant the permissions in the "view" ClusterRole to the service account in the namespace "acme" named "myapp":

kubectl create rolebinding myapp-view-binding --clusterrole=view --serviceaccount=acme:myapp --namespace=acme

kubectl create rolebinding myapp-view-binding --clusterrole=view --serviceaccount=acme:myapp --namespace=acme

Within the namespace "acme", grant the permissions in the "view" ClusterRole to a service account in the namespace "myappnamespace" named "myapp":

kubectl create rolebinding myappnamespace-myapp-view-binding --clusterrole=view --serviceaccount=myappnamespace:myapp --namespace=acme

kubectl create rolebinding myappnamespace-myapp-view-binding --clusterrole=view --serviceaccount=myappnamespace:myapp --namespace=acme

kubectl create clusterrolebinding
@@ -1064,21 +1073,21 @@ Grants a ClusterRole across the entire cluster (all namespaces). Examples:

Across the entire cluster, grant the permissions in the "cluster-admin" ClusterRole to a user named "root":

kubectl create clusterrolebinding root-cluster-admin-binding --clusterrole=cluster-admin --user=root

kubectl create clusterrolebinding root-cluster-admin-binding --clusterrole=cluster-admin --user=root

Across the entire cluster, grant the permissions in the "system:node-proxier" ClusterRole to a user named "system:kube-proxy":

kubectl create clusterrolebinding kube-proxy-binding --clusterrole=system:node-proxier --user=system:kube-proxy

kubectl create clusterrolebinding kube-proxy-binding --clusterrole=system:node-proxier --user=system:kube-proxy

Across the entire cluster, grant the permissions in the "view" ClusterRole to a service account named "myapp" in the namespace "acme":

kubectl create clusterrolebinding myapp-view-binding --clusterrole=view --serviceaccount=acme:myapp

kubectl create clusterrolebinding myapp-view-binding --clusterrole=view --serviceaccount=acme:myapp

kubectl auth reconcile {#kubectl-auth-reconcile}
@@ -1096,21 +1105,21 @@ Examples:

Test applying a manifest file of RBAC objects, displaying changes that would be made:

kubectl auth reconcile -f my-rbac-rules.yaml --dry-run=client

kubectl auth reconcile -f my-rbac-rules.yaml --dry-run=client

Apply a manifest file of RBAC objects, preserving any extra permissions (in roles) and any extra subjects (in bindings):

kubectl auth reconcile -f my-rbac-rules.yaml

kubectl auth reconcile -f my-rbac-rules.yaml

Apply a manifest file of RBAC objects, removing any extra permissions (in roles) and any extra subjects (in bindings):

kubectl auth reconcile -f my-rbac-rules.yaml --remove-extra-subjects --remove-extra-permissions

kubectl auth reconcile -f my-rbac-rules.yaml --remove-extra-subjects --remove-extra-permissions

ServiceAccount permissions {#service-account-permissions}
@@ -1127,93 +1136,93 @@ In order from most secure to least secure, the approaches are:

Grant a role to an application-specific service account (best practice)

This requires the application to specify a serviceAccountName in its pod spec,
and for the service account to be created (via the API, application manifest, kubectl create serviceaccount, etc.).

This requires the application to specify a serviceAccountName in its pod spec,
and for the service account to be created (via the API, application manifest, kubectl create serviceaccount, etc.).

For example, grant read-only permission within "my-namespace" to the "my-sa" service account:

For example, grant read-only permission within "my-namespace" to the "my-sa" service account:

kubectl create rolebinding my-sa-view \

 --clusterrole=view \

 --serviceaccount=my-namespace:my-sa \

 --namespace=my-namespace

kubectl create rolebinding my-sa-view \

--clusterrole=view \

--serviceaccount=my-namespace:my-sa \

--namespace=my-namespace

Grant a role to the "default" service account in a namespace

If an application does not specify a serviceAccountName, it uses the "default" service account.

If an application does not specify a serviceAccountName, it uses the "default" service account.

{{< note >}}
Permissions given to the "default" service account are available to any pod
in the namespace that does not specify a serviceAccountName.
{{< /note >}}

{{< note >}}
Permissions given to the "default" service account are available to any pod
in the namespace that does not specify a serviceAccountName.
{{< /note >}}

For example, grant read-only permission within "my-namespace" to the "default" service account:

For example, grant read-only permission within "my-namespace" to the "default" service account:

kubectl create rolebinding default-view \

 --clusterrole=view \

 --serviceaccount=my-namespace:default \

 --namespace=my-namespace

kubectl create rolebinding default-view \

--clusterrole=view \

--serviceaccount=my-namespace:default \

--namespace=my-namespace

Many add-ons run as the
"default" service account in the kube-system namespace.
To allow those add-ons to run with super-user access, grant cluster-admin
permissions to the "default" service account in the kube-system namespace.

Many add-ons run as the
"default" service account in the kube-system namespace.
To allow those add-ons to run with super-user access, grant cluster-admin
permissions to the "default" service account in the kube-system namespace.

{{< caution >}}
Enabling this means the kube-system namespace contains Secrets
that grant super-user access to your cluster's API.
{{< /caution >}}

{{< caution >}}
Enabling this means the kube-system namespace contains Secrets
that grant super-user access to your cluster's API.
{{< /caution >}}

kubectl create clusterrolebinding add-on-cluster-admin \

 --clusterrole=cluster-admin \

 --serviceaccount=kube-system:default

kubectl create clusterrolebinding add-on-cluster-admin \

--clusterrole=cluster-admin \

--serviceaccount=kube-system:default

Grant a role to all service accounts in a namespace

If you want all applications in a namespace to have a role, no matter what service account they use,
you can grant a role to the service account group for that namespace.

If you want all applications in a namespace to have a role, no matter what service account they use,
you can grant a role to the service account group for that namespace.

For example, grant read-only permission within "my-namespace" to all service accounts in that namespace:

For example, grant read-only permission within "my-namespace" to all service accounts in that namespace:

kubectl create rolebinding serviceaccounts-view \

 --clusterrole=view \

 --group=system:serviceaccounts:my-namespace \

 --namespace=my-namespace

kubectl create rolebinding serviceaccounts-view \

--clusterrole=view \

--group=system:serviceaccounts:my-namespace \

--namespace=my-namespace

Grant a limited role to all service accounts cluster-wide (discouraged)

If you don't want to manage permissions per-namespace, you can grant a cluster-wide role to all service accounts.

If you don't want to manage permissions per-namespace, you can grant a cluster-wide role to all service accounts.

For example, grant read-only permission across all namespaces to all service accounts in the cluster:

For example, grant read-only permission across all namespaces to all service accounts in the cluster:

kubectl create clusterrolebinding serviceaccounts-view \

 --clusterrole=view \

--group=system:serviceaccounts

kubectl create clusterrolebinding serviceaccounts-view \

--clusterrole=view \

--group=system:serviceaccounts

Grant super-user access to all service accounts cluster-wide (strongly discouraged)

If you don't care about partitioning permissions at all, you can grant super-user access to all service accounts.

If you don't care about partitioning permissions at all, you can grant super-user access to all service accounts.

{{< warning >}}
This allows any application full access to your cluster, and also grants
any user with read access to Secrets (or the ability to create any pod)
full access to your cluster.
{{< /warning >}}

{{< warning >}}
This allows any application full access to your cluster, and also grants
any user with read access to Secrets (or the ability to create any pod)
full access to your cluster.
{{< /warning >}}

kubectl create clusterrolebinding serviceaccounts-cluster-admin \

 --clusterrole=cluster-admin \

 --group=system:serviceaccounts

kubectl create clusterrolebinding serviceaccounts-cluster-admin \

--clusterrole=cluster-admin \

--group=system:serviceaccounts

Write access for EndpointSlices and Endpoints {#write-access-for-endpoints}
@@ -1251,7 +1260,7 @@ Here are two approaches for managing this transition:
Run both the RBAC and ABAC authorizers, and specify a policy file that contains
the legacy ABAC policy:
- +shell
--authorization-mode=...,RBAC,ABAC --authorization-policy-file=mypolicy.json


Google API

How would I utilize my Google custom search API here?  Still learning and have come a long way, but I don't want to mess anything up that isn't currently broken, so I'm hoping for some good advice to lead me in the right direction.
Could use Google's Custom Search API here, limit of 100 queries per day
# result = service.cse().list(q=question, cx=CSE_ID, num=num_results).execute()

return result["items"]
Hope you've been doing well!! Best regards!

Yep, that should still work.

Thanks ☺  where would I place my Google api?

StackOverflow is your friend here. Check out https://stackoverflow.com/questions/37083058/programmatically-searching-google-in-python-using-custom-search.

Thanks! You're the best! 😎🤘🤘🤘

@MadddAmAdam How did you get passed this error:

async with session.get(url, timeout=timeout) as response:
File "/Library/Frameworks/Python.framework/Versions/3.6/lib/python3.6/site-packages/aiohttp/client.py", line 843, in aenter
self._resp = await self._coro
File "/Library/Frameworks/Python.framework/Versions/3.6/lib/python3.6/site-packages/aiohttp/client.py", line 273, in _request
url = URL(url)
File "/Library/Frameworks/Python.framework/Versions/3.6/lib/python3.6/site-packages/yarl/init.py", line 157, in new
raise TypeError("Constructor parameter should be str")
TypeError: Constructor parameter should be

Sorry for the late reply, just noticed this! I'm not sure, I'm still learning myself and never got the Google API section correct.  I haven't really tried since then lol. Hope you've figured it out by now 😊


Webhook notifications are accepted when they should not be accepted

If a webhook notification sent by Adyen cannot be authenticated due to incorrect Basic of HMAC authentication then the adyen/error.isml template is rendered (here), but since this response uses a successful HTTP status code Adyen will consider this notification as accepted.
Also if another issue occurs when string the webhook notification then the notifyError.isml template is rendered (here), but again with a successful HTTP status code so Adyen will also consider this notification as accepted.
See also https://www.adyen.com/knowledge-hub/webhooks-accept-2xx
Considering these notifications as accepted by Salesforce Commerce Cloud means that merchants will not be properly informed that notifications are in fact not configured correctly, and can lead to orders not being placed.

Hello @wouterwp
We are already looking into this.
Kind Regards,
Aleksandar
Adyen


read_liberty extensions

What are the reasons/motivation for this change?
This addresses a few things:

read_liberty -wb can only read some cells (not those with busses), but combing it with a separate read_liberty -lib call as fallback doesn't always work well because of how the command handles re-definitions, see commit 2f2726d with a fix
related to above, new -ignore_busses option
area and capacitance attributes for e.g. user inspection or to find the smallest gate implementing a particular function

Also I checked in some real-world Liberty data to use in tests, and have written tests using those (incl. for the existing -unit_delay option)

I want to get rid of the last commit 5e2b37ffec6 checking in unfiltered data but that is blocked by #4681

Beware that the foundry files raw and filtered add up to over 2MB

The raw files are supposed to be dropped from the PR once we fix #4681

[ ] Check before merge that there are no commits with big files even if removed in subsequent commit to save .git directory size growth (I think that's how that works?)


'powerplatform_data_loss_prevention_policy' produced an unexpected new value:  .business_connectors

Describe the bug
When applying powerplatform_data_loss_prevention_policy with action_rules and endpoint_rules, terraform produces unexpected error and fails.
terraform plan doesn't produce error and terraform is able to do the changes to action_rules and endpoint_rules.
To Reproduce
Steps to reproduce the behavior:

Using modified version of the example code (code below)

terraform plan goes through without error and shows the changes even nothing should change.

# powerplatform_data_loss_prevention_policy.my_policy will be updated in-place
  ~ resource "powerplatform_data_loss_prevention_policy" "my_policy" {
      ~ business_connectors               = [
          - {
              - action_rules                 = [
                  - {
                      - action_id = "DeleteItem_V2" -> null
                      - behavior  = "Block" -> null
                    },
                  - {
                      - action_id = "ExecutePassThroughNativeQuery_V2" -> null
                      - behavior  = "Block" -> null
                    },
                ] -> null
              - default_action_rule_behavior = "Allow" -> null
              - endpoint_rules               = [
                  - {
                      - behavior = "Allow" -> null
                      - endpoint = "contoso.com" -> null
                      - order    = 1 -> null
                    },
                  - {
                      - behavior = "Deny" -> null
                      - endpoint = "*" -> null
                      - order    = 2 -> null
                    },
                ] -> null
              - id                           = "/providers/Microsoft.PowerApps/apis/shared_sql" -> null
            },
          + {
              + action_rules                 = [
                  + {
                      + action_id = "DeleteItem_V2"
                      + behavior  = "Block"
                    },
                  + {
                      + action_id = "ExecutePassThroughNativeQuery_V2"
                      + behavior  = "Block"
                    },
                ]
              + endpoint_rules               = [
                  + {
                      + behavior = "Allow"
                      + endpoint = "contoso.com"
                      + order    = 1
                    },
                  + {
                      + behavior = "Deny"
                      + endpoint = "*"
                      + order    = 2
                    },
                ]
              + id                           = "/providers/Microsoft.PowerApps/apis/shared_sql"
                # (1 unchanged attribute hidden)
            },
            # (5 unchanged elements hidden)
        ]
        id                                = "0c54b7ac-99f5-4da6-9959-d3dc6db1655a"
      ~ last_modified_by                  = "Jere Vekka" -> (known after apply)
      ~ last_modified_time                = "2024-07-02T06:27:58.9992651Z" -> (known after apply)
        # (9 unchanged attributes hidden)
    }

Plan: 0 to add, 1 to change, 0 to destroy.

terraform apply goes almost through the whole process, but in the end, it produces following error

powerplatform_data_loss_prevention_policy.my_policy: Still modifying... [id=0c54b7ac-99f5-4da6-9959-d3dc6db1655a, 40s elapsed]
╷
│ Error: Provider produced inconsistent result after apply
│
│ When applying changes to powerplatform_data_loss_prevention_policy.my_policy, provider "provider[\"registry.terraform.io/microsoft/power-platform\"]" produced an unexpected new value:
│ .business_connectors: planned set element
│ cty.ObjectVal(map[string]cty.Value{"action_rules":cty.ListVal([]cty.Value{cty.ObjectVal(map[string]cty.Value{"action_id":cty.StringVal("DeleteItem_V2"),
│ "behavior":cty.StringVal("Block")}), cty.ObjectVal(map[string]cty.Value{"action_id":cty.StringVal("ExecutePassThroughNativeQuery_V2"), "behavior":cty.StringVal("Block")})}),
│ "default_action_rule_behavior":cty.StringVal(""), "endpoint_rules":cty.ListVal([]cty.Value{cty.ObjectVal(map[string]cty.Value{"behavior":cty.StringVal("Allow"),
│ "endpoint":cty.StringVal("contoso.com"), "order":cty.NumberIntVal(1)}), cty.ObjectVal(map[string]cty.Value{"behavior":cty.StringVal("Deny"), "endpoint":cty.StringVal("*"),
│ "order":cty.NumberIntVal(2)})}), "id":cty.StringVal("/providers/Microsoft.PowerApps/apis/shared_sql")}) does not correlate with any element in actual.
│
│ This is a bug in the provider, which should be reported in the provider's own issue tracker.
╵

Changes are still applied and visible in portal.

Sample Terraform Code
If applicable, add terraform code to help explain your problem.
REMINDER: REMOVE SENSITIVE DATA SUCH AS SECRETS, USER NAMES, EMAILS, TENANT INFORMATION, ETC.

variable "list_default_business_connectors" {
  description = "List of allowed business connectors"
  type = map(object({
    name                         = string
    id                           = string
    default_action_rule_behavior = optional(string, "")
    action_rules                 = optional(list(map(string)), [])
    endpoint_rules               = optional(list(map(string)), [])
  }))
  default = {
    "shared_zohocalendar" = {
      "name" = "shared_zohocalendar"
      "id"   = "/providers/Microsoft.PowerApps/apis/shared_zohocalendar"
    },
    "shared_yarado" = {
      "name" = "shared_yarado"
      "id"   = "/providers/Microsoft.PowerApps/apis/shared_yarado"
    }
  }
}

variable "list_dedicated_business_connectors" {
  description = "List of allowed business connectors"
  type = map(object({
    name                         = string
    id                           = string
    default_action_rule_behavior = optional(string, "")
    action_rules                 = optional(list(map(string)), [])
    endpoint_rules               = optional(list(map(string)), [])
  }))
  default = {
    "shared_sql" = {
      "name" = "shared_sql"
      "id"   = "/providers/Microsoft.PowerApps/apis/shared_sql"
      "action_rules" = [
        {
          "action_id" = "DeleteItem_V2"
          "behavior"  = "Block"
        },
        {
          "action_id" = "ExecutePassThroughNativeQuery_V2"
          "behavior"  = "Block"
        },
      ]
      "endpoint_rules" = [
        {
          "behavior" = "Allow"
          "endpoint" = "contoso.com"
          "order"    = 1
        },
        {
          "behavior" = "Deny"
          "endpoint" = "*"
          "order"    = 2
        },
      ]
    },
    "shared_approvals" = {
      "name" = "shared_approvals"
      "id"   = "/providers/Microsoft.PowerApps/apis/shared_approvals"
    },
    "shared_cloudappsecurity" = {
      "name" = "shared_cloudappsecurity"
      "id"   = "/providers/Microsoft.PowerApps/apis/shared_cloudappsecurity"
    },
    "shared_zohosign" = {
      "name" = "shared_zohosign"
      "id"   = "/providers/Microsoft.PowerApps/apis/shared_zohosign"
    }
  }
}

locals {
  default_business_connectors = toset([for f in var.list_default_business_connectors :
    {
      id                           = f.id
      default_action_rule_behavior = f.default_action_rule_behavior
      action_rules                 = f.action_rules
      endpoint_rules               = f.endpoint_rules
    }
  ])
  dedicated_business_connectors = toset([for f in var.list_dedicated_business_connectors :
    {
      id                           = f.id
      default_action_rule_behavior = f.default_action_rule_behavior
      action_rules                 = f.action_rules
      endpoint_rules               = f.endpoint_rules
    }
  ])

  business_connectors = setunion(local.default_business_connectors, local.dedicated_business_connectors)

  non_business_connectors = toset([for conn
    in data.powerplatform_connectors.all_connectors.connectors :
    {
      id                           = conn.id
      name                         = conn.name
      default_action_rule_behavior = ""
      action_rules                 = [],
      endpoint_rules               = []
    }
    if conn.unblockable == true && !contains([for bus_conn in local.business_connectors : bus_conn.id], conn.id)
  ])

  blocked_connectors = toset([for conn
    in data.powerplatform_connectors.all_connectors.connectors :
    {
      id                           = conn.id
      default_action_rule_behavior = ""
      action_rules                 = [],
      endpoint_rules               = []
    }
  if conn.unblockable == false && !contains([for bus_conn in local.business_connectors : bus_conn.id], conn.id)])
}

output "business_connectors" {
  value = local.business_connectors
}

resource "powerplatform_data_loss_prevention_policy" "my_policy" {
  display_name                      = "Block All Policy"
  default_connectors_classification = "Blocked"
  environment_type                  = "OnlyEnvironments"
  environments                      = [powerplatform_environment.development.id]

  business_connectors     = local.business_connectors
  non_business_connectors = local.non_business_connectors
  blocked_connectors      = local.blocked_connectors

  custom_connectors_patterns = toset([
    {
      order            = 1
      host_url_pattern = "https://*.contoso.com"
      data_group       = "Blocked"
    },
    {
      order            = 2
      host_url_pattern = "*"
      data_group       = "Ignore"
    }
  ])
}

resource "powerplatform_environment" "development" {
  display_name     = "example_environment"
  location         = "europe"
  azure_region     = "northeurope"
  environment_type = "Production"
  dataverse = {
    language_code     = "1033"
    currency_code     = "EUR"
    domain            = "mydomain"
    security_group_id = "00000000-0000-0000-0000-000000000000"
  }
}

resource "powerplatform_managed_environment" "managed_development" {
  environment_id             = powerplatform_environment.development.id
  is_usage_insights_disabled = true
  is_group_sharing_disabled  = true
  limit_sharing_mode         = "ExcludeSharingToSecurityGroups"
  max_limit_user_sharing     = 10
  solution_checker_mode      = "None"
  suppress_validation_emails = true
  maker_onboarding_markdown  = "this is example markdown v2"
  maker_onboarding_url       = "https://www.microsoft.com"
}

Expected behavior
Apply the code without producing error.
System Information

Terraform v1.8.4
on windows_amd64

provider registry.terraform.io/hashicorp/azuread v2.51.0
provider registry.terraform.io/hashicorp/azurerm v3.109.0
provider registry.terraform.io/hashicorp/random v3.6.2
provider registry.terraform.io/microsoft/power-platform v2.3.1-preview

Additional context
The example code worked like a charm so the issue might be my code, but as the plan goes through without issues, I can't really figure the issue by myself.
Contribution
Contribution
Do you plan to raise a PR to address this issue?  YES / NO?

Thanks for rising a bug @Jvekka. The backend api that returns action_rules and endpoint_rules has changed. We should get an update in the provider pretty quickly.
As a workaround for now, you would have to keep action_rules and endpoint_rules empty in your configuration in order for it to work.

Hi @Jvekka
After debugging the code I have to retract from my first comment, the provider is working correctly but terraform has issues with tracking dynamic and lists correctly. Your policy is working correctly when set like in our example
Here is similar issue reported for azurerm provider: https://github.com/hashicorp/terraform-provider-azurerm/issues/6254


Drop hide-markdown-diff feature

URL: https://github.com/sindresorhus/refined-github/edit/main/readme.md
Seems like GitHub implemented their own solution for this:

But maybe our feature can be extended to files other than .md ones? (Don't really see how that would be useful though)

Let's drop it for now and  #4244 can restore it later


Update dns-packet to 5.2.2

Description
Uses a resolution to update dns-packet to 5.2.2. This is in response to the following security advisory: https://www.npmjs.com/advisories/1745 . This is a short term fix while this issue is still open: https://github.com/facebook/create-react-app/issues/11007.
Code Review Verification Steps

[ ] If the change is risky, it has been tested in experimental before merging.
[ ] Code follows the guidelines for Logging
[ ] The requirements listed in Querying the Database Safely have been satisfied.
Any new migrations/schema changes:

[ ] Follow our guidelines for zero-downtime deploys (see Zero-Downtime Deploys)
[ ] Have been communicated to #g-database
[ ] Secure migrations have been tested following the instructions in our docs

[ ] There are no aXe warnings for UI.
[ ] This works in Supported Browsers and their phone views (Chrome, Firefox, IE, Edge).
[ ] Tested in the Experimental environment (for changes to containers, app startup, or connection to data stores)
[ ] User facing changes have been reviewed by design.
[ ] Request review from a member of a different team.
[ ] Have the Jira acceptance criteria been met for this change?

Warnings

:warning:
Please add the JIRA issue key to the PR title (e.g. MB-123)

  Generated by :no_entry_sign: dangerJS against df6da9299c7b1defced73ac233a6f772fb1611a9

@Ryan-Koch Any reason not to update the rest of the libraries? There are a lot of moderate severity check fails at the moment.

@Ryan-Koch Any reason not to update the rest of the libraries? There are a lot of moderate severity check fails at the moment.

No reason not to go for it! I had done this small one because dangerjs was giving me an angry warning about it so I figured it was worth the quick fix in case others were getting it on PRs also.


Multiple simultaneous credentials

If I visit http://<IP_ADDRESS>/latest/meta-data/iam/security-credentials/, I see hologram-access in there with the usual credentials in it.
Note that although Amazon does not currently support multiple simultaneous roles, the URL scheme was clearly set up to allow for it.
I'm wondering (assuming that it doesn't break aws-cli, boto, and other major tools) if we could possibly allow a particular hologram agent to serve up multiple credential sets simultaneously, for APIs that are aware of it. In practice, this would just lead to there being multiple entries under security-credentials. If it does end up breaking existing APIs, we could also add a custom "revision" to the top level.
My use case is writing handy developer tools that know about Hologram and wants simultaneous access to multiple AWS accounts/roles. For example, I would like a simple cost-monitoring widget in my menubar that can talk to a particular Amazon account/role regardless of my current Hologram role.

https://github.com/boto/boto/blob/bbbf9d248856db997080f51805575f0634da4090/boto/provider.py#L379 details how at least that works, and most things are based off of how boto does it. Looks like your idea should be fine, although I'll be interested in how the CLI and other tools interact with having multiple Hologram roles active. :+1:

Yeah. It might still be good hygiene to use a new top-level revision for other implementations that aren't so graceful when they find unexpected information.

#61 could also allow for this on linux


[feature request] connect.close()

like in Mongoose, it would be useful to have the tear down function for testing

@zhenyulin What exactly would this do? A PR would be awesome 😃

Closing this due to no recent activity. If this is still a problem or you have questions please feel free to comment again and we can try to help further.


Allow disabling X-Frame-Options headers by passing None.

Since the frame-ancestors directive in CSP 2 allows basically the same thing and setting the X-Frame-Options header with allow-from isn't supported by Chrome and Safari anyway, we might as well allow disabling it completely.

Coverage remained the same at ?% when pulling 1af308ef05cf646eeeaf58539159c80fcf7ab1df on jezdez:disable-frame_options into<PHONE_NUMBER>06694ada454ec53377de8ecbbc8bcf on GoogleCloudPlatform:master.

@theacodes Please let me know if I should remove the commit with the unittest2 assert method changes 😀

LGTM, but can you resolve the conflicts?
Thank you for doing all this!

@theacodes Done, and no problem! 👋

Thank you 😁


Release testing: Celsius-Kafka README updates

Small thing, but it would be useful for the README from the celsius-kafka application to mention switching directories in the Shell 3 step.

Specifically, something like:

Shell 3: Celsius-kafka
Change to the application directory with: cd /src/wallaroo/examples/python/celsius
Run machida with --application-module celsius:

instead of only:

Shell 3: Celsius-kafka
Run machida with --application-module celsius:

With Shell 2: The sentence, "Set up a listener to monitor the Kafka topic to which you would the application to publish results." should be rephrased.

For me, both this time and last release, running the ./cluster up 1 didn't start up local_kafka_1_1. Re-running the command worked. Perhaps mention this could happen?

#2359

@rachelblasucci Re: bullet 1, the Running Celsius Kafka (https://github.com/WallarooLabs/wallaroo/tree/release-0.5.2/examples/python/celsius-kafka#running-celsius-kafka) instructs folks that all shells should be opened and then they should change to the examples/python/celsius-kafka directory. Do you think the additional note regarding changing the directory for shell 3 is also necessary?

Ah, yes, good point. I was running with Docker in this case.. So, I might consider clarifying the comment, somehow, as part of the previous statement:

NOTE: If running in Docker, the kafkfa cluster and kafkacat should be run from your host and not within the Docker container.

Or maybe just stating where it's really necessary to be in the correct folder?

item 2 is resolved by https://github.com/WallarooLabs/wallaroo/issues/2368
item 1 is not going to be part of 0.5.2 as there's no quick/easy way to make the README clear for both wallaroo in docker and wallaroo outside of docker users. This will have to be addressed separately after the release.

@enilsen16 @SeanTAllen Is this/Can the rest of this be addressed as part of the book changes coming up?

No. book changes would be purely organization, no content changes.


fix/missing-status-pending-returns-db

Please review before merging.

:tada: This PR is included in version 2.1.0 :tada:
The release is available on:

GitHub release
v2.1.0

Your semantic-release bot :package::rocket:


Error:Could not find property 'manifest' on source set 'main'.

Hi,
"Error:Could not find property 'manifest' on source set 'main'" comes to console when I use following build.gradle
Note:experimental gradle plugin with version 0.6.0-beta5
build.gradle:
sourceSets {
main {
manifest.source {
include 'AndroidManifest.xml'
How include AndroidManifest with Gradle Experimental Plugin?

If you put androidManifest.xml into ${project-dir}/app/src/main  [then it will be included automatically], it should work

Hope you get your project compiled and run smoothly! I will close this one for now, feel free to re-open and/or adding additional notes at any time.  cheers


Optimise calculation of distances matrix

We may need a lot of RAM during metrics calculation since we need to compute distances matrix:
https://github.com/OML-Team/open-metric-learning/blob/main/oml/functional/metrics.py#L201
For example, we need more than 20 GB for Stanford Online Products dataset.
We cannot do anything with the size of the matrix itself, but probably we may find a way to reduce the memory footprint needed for the intermediate calculation.

One possible solution is to evaluate the distance matrix row by row (or batch-of-rows by batch-of-rows), and update metrics, that support such regime. For instance, cmc, percision, map could work in such way, fnmr@fmr can't. But if accumulate histograms of positive and negative distances, then fnmr@fmr could be approximated.

It's a valid point. I don't know whether functionality like this is available from the box or with minimal effort using some 3d party solutions

duplicate: https://github.com/OML-Team/open-metric-learning/issues/283


updated elm-test dependencies to the current version range

Carsten did this in response to my conversation on elmlang.slack.com about a dependency problem I came across. I wanted to use elm-test in my project, but it conflicted with the elm-test dependency published by elm-dialog. I wonder if the test directory could have its own elm-package.json with the elm-test dependency, and then the elm-test dependency could be removed from the main elm-package.json entirely.

the elm-test situation is a bit strange right now but as far as I can see elm-test tests\StateTest.elm succeeds locally but I have no clue if it correctly did setup the makefile (Travis CI is really busy with downloading elm-make dependencies right now)

oh well
/home/travis/.nvm/v0.10.36/lib/node_modules/elm-test/node_modules/firstline/firstline.js:6
  return new Promise(function (resolve, reject) {
             ^
ReferenceError: Promise is not defined

I have no clue how to fix this - I hope someone can help.
Sorry

npm

Thanks for this. I'm holding off on updating my projects to the latest elm-test until this bug is fixed:
https://github.com/elm-community/elm-test/issues/68
In the meantime, the solution to the version range problem is to split the project into using two elm-package.json files - one for the library, and a separate one for the test suite.
I've just done that - 2d0d25449341b4bc41b95dda9d333ada71a5d461 - and published it as version 4.0.1. If you update your elm-dialog dependency to that version, the conflict should go away.
(Thanks for the code anyway @CarstenKoenig - I'll revisit it when it's time to make the leap to elm-test 2. 👍 )

no problem - thanks for the answer

btw: as you can see the changes are minor - thankfully there was only one test ;)

I've changed my elm-dialog dependency to 4.0.1 and all is well. I'm back up and running. Thank you Kris and Carsten for helping me.


IPV4 port is changing after startup

Hey there, I hope its okay to ask here too. Thanks for the great work! However, for whatever reason the port gets changed (I use the docker compose in the repo).
[2022-09-11 08:07:17] [2022-09-11 08:07:17:890 INFO] IPv4 supported, port: 19132
[2022-09-11 08:07:17] [2022-09-11 08:07:17:890 INFO] IPv6 not supported
[2022-09-11 08:07:17] [2022-09-11 08:07:17:558 INFO] Server started.                                                                                [2022-09-11 08:07:18] [2022-09-11 08:07:18:614 INFO] ================ TELEMETRY MESSAGE ===================
[2022-09-11 08:07:18] [2022-09-11 08:07:18:614 INFO] Server Telemetry is currently not enabled.                                                                                [2022-09-11 08:07:18] [2022-09-11 08:07:18:615 INFO] Enabling this telemetry helps us improve the game.                                                                          [2022-09-11 08:07:18] [2022-09-11 08:07:18:615 INFO]
[2022-09-11 08:07:18] [2022-09-11 08:07:18:615 INFO] To enable this feature, add the line 'emit-server-telemetry=true'
[2022-09-11 08:07:18] [2022-09-11 08:07:18:616 INFO] to the server.properties file in the handheld/src-server directory
[2022-09-11 08:07:18] [2022-09-11 08:07:18:616 INFO] ======================================================
[2022-09-11 08:07:18] [2022-09-11 08:07:18:653 INFO] IPv4 supported, port: 36462
[2022-09-11 08:07:18] [2022-09-11 08:07:18:653 INFO] IPv6 not supported

This are basically the logs, and the ipv4 port changes every time (After every restart). Idk why ipv6 isnt working too but that isnt my main problem rn.

Hey shruuub,
That is a 3-4 year old bug with the Bedrock ports.  It will always do this basically.  The second set of ports will be random.  You don't have IPV6 enabled on your Docker instance but if you did there would be a second random port for IPV6.
This is a bug in all Bedrock servers and is in the Bedrock server itself.  See the following here (this is a very, very old bug, maybe the oldest one I know of):
https://www.reddit.com/r/MCPE/comments/icjkiw/minecraft_dedicated_bedrock_server_showing/
https://bugs.mojang.com/browse/BDS-1094?page=com.atlassian.jira.plugin.system.issuetabpanels%3Acomment-tabpanel&showAll=true
https://bugs.mojang.com/browse/BDS-3989
I really doubt they will ever fix this bug.  It also doesn't do anything.  That port won't work if you try to use it and it does nothing.  It's purely a visual artifact and you can safely ignore it.  Hopefully that helps!

Alright, I see! However, the connection isnt working still. Is there anything else to test other than nmap to see if the port is open? Since nmap only returns open | filtered as usual

Is this running on a free VM like Oracle?  Is it running on a Hyper-V VM?  It's actually incredibly common.
It's most likely your VM's configuration needs the correct ports open and security groups assigned.  It's purely configuration on your OS and VM though to open these up.  There's nothing else that needs to be done basically.  If your ports were open you'd be able to connect at this point.
Can you tell me which provider / platform you are using?  I've seen them all.  It just needs to be configured and I can link you to other people who figured out how to configure your platform if you let me know what it is here!

It is in fact an oracle cloud vm. I used ufw allow and allowed all udp traffic in the oracle firewall.
Might need to manually open that specifc port, will look into that later.

Indeed.  The Oracle VM is the absolute worst VM in the entire world to configure.  There's several steps.  Everyone who has Oracle goes through this and there have been many.
Check out these threads here:
https://jamesachambers.com/official-minecraft-bedrock-dedicated-server-on-raspberry-pi/comment-page-8/#comment-13946
https://jamesachambers.com/minecraft-bedrock-edition-ubuntu-dedicated-server-guide/comment-page-53/#comment-13936
https://jamesachambers.com/minecraft-bedrock-edition-ubuntu-dedicated-server-guide/comment-page-49/#comment-13377
Here is one that is for this exact container:
https://jamesachambers.com/legendary-minecraft-bedrock-container/comment-page-2/#comment-13706
Just in case it isn’t clear to anyone, you have to set the ingress ports (TCP/UDP) in the Virtual Cloud Network (VCN) security list [as described in the oracle blog] *and* set the ingress ports in a Network Security Group assigned to your instance.
I stuck with a non-standard port number based on others experience, but if you do the above, it might still work for 19132 (but I haven’t tested it).

Oracle do seem to give you a pretty decent VM for free, so it’s definitely worth considering! They also have free instances in a lot of places around the world – this was one of my reasons for moving from google cloud where the free instances are US only – I could have a UK instance on Oracle.

Do not feel bad for not seeing these (that isn't what I'm saying).  They are scattered all over.  It is 100% your platform though.  The fix is exactly the same no matter how you are running the server.
I didn't see an issue for the container regarding this at all so I'm happy to link and document this.  We've even considered adding documentation specifically for Oracle because so many people try to follow that free Minecraft server tutorial (which doesn't have the steps necessary for it to work, I know exactly which tutorial is it people are following as they've linked me before).

Yup. The conf is really making me wanting to switch sometimes, but having this much ram (especially for minecraft) is just great. Thanks for all the advice :)

No problem at all!  Thanks for giving me an opportunity to write this issue up for the container.  Let me know if you run into anything stranger but I think you're all set to get over the "hump" for the initial configuration.
I noted in one of my other replies I linked to that I haven't ever heard of anyone getting the Oracle configuration right on the first try.  That is still true for sure.  I wouldn't have got it on the first try because all of my other VM providers I've used don't really have any equivalent options to some of the security and ingress groups that Oracle uses.
Take care and enjoy, let me know if I can help further for sure!

uhm, I just wondered, is the network security group necessary? because I have forwarded ports without one, and I dont have one right now.

Supposedly.  I don't use Oracle and never have.  My understanding is that you need you need to create a network security group and attach it to your instance.
Yes, opening the ports should be enough.  That is a one click operation on Amazon.  If you can't connect still it isn't.  You're right.  It's just opening ports.  What it will take for Oracle to do that I'm not completely sure but others said you need all of it to be able to even connect.


Use go value format for handleDCEP error

Previously it used the string specifier which did
not work well for a struct type.

@edaniels feel free to merge w/e you are happy!
You have the rights to push a tag w/e you want git tag v.... && git push --tags
After that pion/webrtc will open a dependency bump PR which you can merge yourself :)


DOC: visualize vector components of B-matrix

Small investigation of the $B$-matrix for $\Lambda_c^+ \to p K^- \pi^+$, defined as:
$B_{\tau,\rho} = \sum_{\nu,\nu',\lambda',\lambda} A^*{\nu',\lambda'} \sigma{\nu',\nu}^\tau A_{\nu,\lambda} \sigma_{\lambda',\lambda}^\rho$

Hi Remco,
It looks great!
I check it later. Today I have a long trip to Warsaw.
Best,
Varvara
On Fri, 9 Jun 2023, 10:31 Remco de Boer, @.***> wrote:

@vbatozsk https://github.com/vbatozsk have a look!
You can try it out yourself as follows:
git clone https://github.com/ComPWA/polarimetrycd polarimetry# conda env create  # optionally instead of pip install
python3 -m pip install -e .[dev]
jupyter lab research/index.ipynb
More info here
https://compwa-org.readthedocs.io/develop.html#local-set-up
—
Reply to this email directly, view it on GitHub
https://github.com/ComPWA/polarimetry/pull/304#issuecomment-1584182616,
or unsubscribe
https://github.com/notifications/unsubscribe-auth/ADKYRPREAAFVXESC7FMLCMTXKLNNDANCNFSM6AAAAAAZAKE5OA
.
You are receiving this because you were mentioned.Message ID:
@.***>


adding projects requires site refresh

adding projects requires site refresh to appear in projects listing, should appear automatically
discovered during demo prep

Will be fixed with https://github.com/projectjellyfish/api/issues/487


Issue in running secure example

With latest 1.5, i am seeing below errors on running secure examples-
./SecureHelloWorldExample publisher
Starting
[SECURITY Error] Error validating the local participant -> Function init
[PARTICIPANT Error] Problem creating associated Writer -> Function createPublisher
Compile is OK with SECURITY=ON.
Am i missing something here?

Are you using OpenSSL 1.1.0?

Commit a1c2a09153cf06292a94c3887e3e831b9fc1d054 changes the certificate files of the example. This new ones also work with OpenSSL 1.1.0.

yes, i am using v 1.1.0
New update fixes the issues.
Now i see there is data loss. After running SecureHelloworld example, i see sometimes just 7 or 4 packets received out of 10.

@Apoorv-Goyal Performance and security have been improved on 1.6.0
Could you test again and tell us if your issue has been solved ?

@Apoorv-Goyal Closing this now. Feel free to reopen it if still an issue


[Go Live][Dec 01]

Push to live

Learn Build status updates of commit 9fa8bf4:
:x: Validation status: errors
Please follow instructions here which may help to resolve issue.

File
Status
Preview URL
Details

:x:Error

Details

[Error: CannotMergeCommit] Cannot merge commit 9fa8bf4d1d6a15e78d33fe5e44dba97af69c07ab in branch main of repository https://github.com/MicrosoftDocs/msteams-docs into branch live (commit 9c854464fb5c5f61ab4fd49612b190c0ae5d71cb). Please follow this documentation: https://help.github.com/articles/resolving-a-merge-conflict-using-the-command-line/ to use git.exe to resolve you content conflicts locally and then push to remote.

For more details, please refer to the build report.
If you see build warnings/errors with permission issues, it might be due to single sign-on (SSO) enabled on Microsoft's GitHub organizations. Please follow instructions here to re-authorize your GitHub account to Learn Build.
Note: Broken links written as relative paths are included in the above build report. For broken links written as absolute paths or external URLs, see the broken link report.
Note: Your PR may contain errors or warnings or suggestions unrelated to the files you changed. This happens when external dependencies like GitHub alias, Microsoft alias, cross repo links are updated. Please use these instructions to resolve them.
For any questions, please:Try searching the learn.microsoft.com contributor guidesPost your question in the Learn support channel

Learn Build status updates of commit 6ce7913:
:white_check_mark: Validation status: passed

File
Status
Preview URL
Details

msteams-platform/apps-in-teams-meetings/meeting-apps-apis.md
:white_check_mark:Succeeded
View

msteams-platform/bots/bot-features.md
:white_check_mark:Succeeded
View

msteams-platform/bots/how-to/conversations/channel-and-group-conversations.md
:white_check_mark:Succeeded
View

msteams-platform/bots/how-to/conversations/channel-messages-with-rsc.md
:white_check_mark:Succeeded
View

msteams-platform/bots/how-to/conversations/conversation-messages.md
:white_check_mark:Succeeded
View

msteams-platform/bots/how-to/conversations/send-proactive-messages.md
:white_check_mark:Succeeded
View

msteams-platform/bots/how-to/conversations/subscribe-to-conversation-events.md
:white_check_mark:Succeeded
View

msteams-platform/bots/how-to/create-a-bot-commands-menu.md
:white_check_mark:Succeeded
View

msteams-platform/bots/how-to/get-teams-context.md
:white_check_mark:Succeeded
View

msteams-platform/bots/how-to/update-and-delete-bot-messages.md
:white_check_mark:Succeeded
View

msteams-platform/graph-api/proactive-bots-and-messages/graph-proactive-bots-and-messages.md
:white_check_mark:Succeeded
View

msteams-platform/messaging-extensions/how-to/search-commands/respond-to-search.md
:white_check_mark:Succeeded
View

msteams-platform/messaging-extensions/what-are-messaging-extensions.md
:white_check_mark:Succeeded
View

msteams-platform/resources/messaging-extension-v3/create-extensions.md
:white_check_mark:Succeeded
View

msteams-platform/tabs/how-to/authentication/tab-sso-graph-api.md
:white_check_mark:Succeeded
View

For more details, please refer to the build report.
Note: Broken links written as relative paths are included in the above build report. For broken links written as absolute paths or external URLs, see the broken link report.
For any questions, please:Try searching the learn.microsoft.com contributor guidesPost your question in the Learn support channel


Unable to load database dump in in /docker-entrypoint-initdb.d

When I try to load a SQL dump at init I am getting an error that the database does not exist, however it seems to be included the double quotes in the name (See Unknown database '"my_database"' in the logs). Switching the image to mariadb:10.4 with no other changes populates the database as expected.
docker-compose.yml
version: '3.3'

services:
  app_db:
    image: bianjp/mariadb-alpine
    restart: "no"
    volumes:
      - ./initdb.d:/docker-entrypoint-initdb.d
    environment:
      MYSQL_ROOT_PASSWORD: root
      MYSQL_DATABASE: my_database
      MYSQL_USER: my_user
      MYSQL_PASSWORD: my_password

Container logs
app_db_1  | Database initialized
app_db_1  | MySQL init process in progress...
app_db_1  |
app_db_1  | /usr/local/bin/docker-entrypoint.sh: running /docker-entrypoint-initdb.d/my_database.sql
app_db_1  | ERROR 1049 (42000): Unknown database '"my_database"'

Using the mariadb images, I get these logs with the same config/volumes (some lines omitted)
app_db_1  | Database initialized
app_db_1  | MySQL init process in progress...
app_db_1  |
app_db_1  | /usr/local/bin/docker-entrypoint.sh: running /docker-entrypoint-initdb.d/my_database.sql
app_db_1  |
app_db_1  | MySQL init process done. Ready for start up.
app_db_1  | 2019-10-30  1:47:02 0 [Note] mysqld: ready for connections.
app_db_1  | Version: '10.4.8-MariaDB-1:10.4.8+maria~bionic'  socket: '/var/run/mysqld/mysqld.sock'  port: 3306  mariadb.org binary distribution

Same issue here. Since you've reported it long ago and no word was said yet, it seems that this project has been abandoned.

Same issue here. Since you've reported it long ago and no word was said yet, it seems that this project has been abandoned.

Hi @edgardmota - I made a Docker image for MariaDB on Alpine Linux that loads the docker-entrypoint-initdb.d files correctly. It's based on the latest MariaDB base image files with a few tweaks for Alpine.
https://github.com/doublesharp/docker-mariadb-alpine

Sorry, but I didn't use this image anymore and have no interest in maintaining it. I'll archive this repository soon.


WSL2 WSLRegisterDistribution Error 0x80071772

Your Windows build number:  Microsoft Windows 10 Pro Version 10.0.19041.207 (Type ver at a Windows Command Prompt)

What you're doing and what's happening: Download Ubuntu 20.04 LTS from Microsoft Store, Go to windows start menu and start Ubuntu 20.04 LTS (Or go to command line and type ubuntu2004) (Copy&paste the full set of specific command-line steps necessary to reproduce the behavior, and their output. Include screen shots if that helps demonstrate the problem.)

What's wrong / what should be happening instead: I get the following error

Ubuntu2004
Installing, this may take a few minutes...
WslRegisterDistribution failed with error: 0x80071772
Error: 0x80071772 The specified file is encrypted and the user does not have the ability to decrypt it.

After a reboot and a reinstall this issue fixed its self.

Can this be reopened? I have this on Windows 11. This happens when I try to install Ubuntu on a non-system drive. @NickITGuy probably managed to get it working because after a restart and reinstall, MS Store installs the distro back on C: (instead of D: for some reason). This is a consistent behavior that I have replicated on my machine a few times.

I have the same issue

Thanks! reinstalling solved my problem.

Writing this to reopen the issue for @PeterWang-dev @ezhupa99 and @VishalSubramanyam  :)

I had this same error and finally fixed it after hours of trying to figure out which directory was encrypted or why my admin acct didn't have the right permissions. Hopefully this saves some one some time.
Uninstalling wsl via 'Add or remove programs' and then running Ubuntu again without reinstalling wsl worked for me. It appears I had 2 versions of wsl installed somehow. I kept the one with 'Upgrade' at the end. My guess is upgrading wsl didn't remove the old version, which was causing some conflicts. ymmv

I am still having this issue.  Is there a solution yet?  I only have one WSL installed.  It is the latest version on Windows 11.  I used the Windows Store to install Ubuntu 24.01, then, using the Apps form, moved the location to D:.  Always get the 80071772 error.  I tried the restart options, still the same.
If wsl cannot run the distributions from a drive other than c:, why offer the Move option?  And forcing us to run in on C: is very poor, as many people are limited on space on C: but usually have spare space on other drives.

I used this: https://craigloewen-msft.github.io/WSLTipsAndTricks/tip/install-different-drive.html
After export I unregistrer the original instance for reuse the name and free the space (I hope it does). Attention the export instruction is wrong, please look at the wsl command help.
Here the fixed:
wsl --export <DistroName><filename>
wsl --unregister <DistroName>
wsl --import <DistroName> <InstallLocation> <FileName>

Since my install was already going to another drive other than "C:", I used the "move" command in the "Apps > Installed Apps" for Ubuntu to repoint it to "C:", then retried "wsl --install" and experienced joy at last.
Honestly, what's with the "C drive" fetish that Microsoft has...lazy coding leftover from the 1980s?


DOCS-#3064: Improve Component view part in docs

Signed-off-by: Igoshev, Yaroslav<EMAIL_ADDRESS>
What do these changes do?

[x] commit message follows format outlined here
[x] passes flake8 modin/ asv_bench/benchmarks scripts/doc_checker.py
[x] passes black --check modin/ asv_bench/benchmarks scripts/doc_checker.py
[x] signed commit with git commit -s
[x] Resolves #3064
[x] tests and passing
[x] module layout described at docs/developer/architecture.rst is up-to-date

Updated Component view part - https://modin--3640.org.readthedocs.build/en/3640/developer/architecture.html#component-view.

@modin-project/modin-core , reminder to review

@YarShev could you please provide a link to readthedocs with this rendered?

@RehanSD , the comments have been addressed.

@dchigarev , thanks for resolving conflicts. @RehanSD, just a friendly reminder to review.

Conflicts have been resolved.


Modernized code

The main idea of this pull request is to bring the code up to modern Objective-C standards.
Refactored code

instancetype replaced the return type id in init methods.
The property qualifier strong was removed because all properties are strong by default
The  property qualifier assign was removed because it no longer has purpose
The  property qualifier unsafe_unretained was replaced with weak
Used dot-syntax wherever possible
Added method prototypes to aid the static analyzer
Removed un-implemented delegate methods

I turned on all warnings for XCode and enabled "treat warnings like errors" and compiled the project successfully.
Changed coding style

Changed the coding style to reflect the NYT Objective-C style guide.

Originally, I was not going to submit a pull request so I went ahead and changed the coding style.

Hi @jkereako,
Thanks for taking the time and effort to do a Pull Request.
I'll be looking into this when time permits; however, a couple thoughts in the meantime:

I see the value in following a published Obj-C style guide, such as the one you mentioned.
I'm not sure how this will fit in with the 2.0 development branch that's currently open.

@sibljon :
Thanks for the reply. As for your concern:

I'm not sure how this will fit in with the 2.0 development branch that's currently open.

I had this in mind before I submitted the pull request:

The intention of this 2.0 release is to right the course, making this library both quicker to understand and easier to use... such as bug fixes, updates to support new iOS SDKs, and refactoring

The changes I made are in line with the NYT Objective-C style guide and the document Adopting Modern Objective-C.
Both documents encourage brevity and clarity, (i.e. omitting @synthesize for readwrite properties and always use brackets in if statements, even one-liners).

Closing!
I submitted this pull request over 1 year ago and there has not been any movement on this or the project in general.
Since I created this pull request, I learned Swift ported this library to Swift. Check out AutocompleteTextField.

:+1:


Multiple surface blocks

It would be very useful to be able to specify multiple block types to be used for the surface in a biome. For example, I'm trying to make a biome where the ground is a mix of coarse dirt and grass and it seems the only way to do so is to use ores. Fine-grained control over the composition of the surface would be a much better solution.

See the SurfaceAndGroundControl setting, it should be able to do this.

I've tried configuring SurfaceAndGroundControl and the only result I've been able to get is smooth paths of material, not a random noise pattern. Am I missing something?


Carousel v4 - Event binding

Using the carousel component in a project, I ran into several issues.
My main issue here is that I can't use carousel indicators outside carousel container.

Unlike BS4, BSN is binding events directly on the indicators elements within the carousel scope, you can't place your navigation outside the carousel container.
Unlike BS4, BSN is using the carousel indicators class to bind the click events whereas it should target the [data-slide] and [data-slide-to] attributes.

I managed to make it work binding the events myself but had to implement back the direction logic that's repeated in every handler (indicators / controls / keyboard). slideDirection not being public property, I had to make it public by modifying core BSN files.
Same goes for carousel controls (next/prev).

This use case is a very specific one and a way to handle events that is outside the scope of the library. Basically with jQuery you can easily delegate events to the global scope at the expense of performance, we don't do that and many others here, I personally dislike this practice.
So you basically did what you had to do: fork, change to your need, case closed.

Thanks for your feedback. I thought this library was meant to provide the same features (and API) that jQuery BS. Sorry.
I'm ok handling stuffs that's not in your scope but could you at least provide convenient ways to achieve this without having to rewrite BSN code?
For example, you have no control over slide direction when using slideTo. I don't think this belongs to a specific case. Or the API you provided is useless (because slideDirection have been set in a private method), it will always slide to right.
Providing next and prev would also be nice.
Could you consider this?

@nlemoine I'm not the only one using and developing here, I am currently busy trying to improve Collapse and Tab and other issues are on the list.
Feel free to play with the code, and commit your changes once it's super stable, this is an open source project after all.

I'll try as soon as I have some spare time.

For example, you have no control over slide direction when using slideTo. I don't think this belongs to a specific case. Or the API you provided is useless (because slideDirection have been set in a private method), it will always slide to right.

For these cases you don't really need to have access to slideDirection, as this one is strictly internally used to add proper classes required for the transitions. You can basically create your own methods of control outside the Carousel prototype and scope, based on the internal event handlers.
For instance you may want to create something like myCarousel.next() and myCarousel.prev() by invoking myCarousel.slideTo(index) method to do the hard work. For one use case, we don't need these incorporated into the component without a very strong argument.

For these cases you don't really need to have access to slideDirection, as this one is strictly internally used to add proper classes required for the transitions.

You don't need to access to slideDirection if the slideTo takes care of setting it for you but slideTo only goes forward, no matter the index you're passing to it. Because the library doesn't internally check the current index against the index passed in slideTo to determine the appropriate direction (this is done before in the event handlers).
See this use case for example.

For one use case, we don't need these to be incorporated into the component without a very strong argument or high community demand.

This goes further IMHO. This is a wrong API design. The example above should just work as it is.
BTW, just found out official BS seems to move away from jQuery : https://github.com/twbs/bootstrap/pull/23586
I thought it was something to know before the people maintaining this project spend to much time on it.

@nlemoine thanks for the info on the soon Bootstrap without jQuery.
BSN is a personal turned community driven project, if you have a good idea on how to improve things, instead of criticizing people, make sure to explore, explain context and/or commit you code suggestions, as all the others who contributed.
I'm going to go forward maintaining the project regardless, I don't want to be influenced by the BS project, I think my code will still be lighter and have it's own good stuff.

You don't need to access to slideDirection if the slideTo takes care of setting it for you but slideTo only goes forward, no matter the index you're passing to it.

You're right, I'm gonna try and improve this in the future update.

if you have a good idea on how to improve things, instead of criticizing people, make sure to explore, explain context and/or commit you code suggestions, as all the others who contributed.

I sincerely apologize if you took that way. I'm not criticizing anyone here.
Before posting an issue, I always explore and try to provide as much details as possible. Read the thread again, I think I was pretty specific in the description of the problem with links pointing to code with specific line numbers, I submitted a use case. I think I'm pretty far from the "It doesn't work" issue. I usually won't spend time submitting a PR before making sure that the author agrees and is ready to fix the problem (and obviously, you don't seem to see there's a problem here).
If you think slideTo only going forward in a carousel component is ok, no problem. I still think this a wrong behavior. There's nothing personnal in that.

I'm going to go forward maintaining the project regardless, I don't want to be influenced by the BS project, I think my code will still be lighter and have it's own good stuff.

Sure it has! BSN is still a great library.

@nlemoine no offence taken, I just suggested a constructive course of action IMO.
I have a quick update for you: I found I can optimize the size of the Carousel by deciding the slideDirection inside the slideTo() method, how would you like the following custom code you can use without altering the future version of the component?
Carousel.prorotype.next = function(){
  var activeIndex = this.getActiveIndex();
  this.slideTo(activeIndex++)
}
Carousel.prorotype.prev = function(){
  var activeIndex = this.getActiveIndex();
  this.slideTo(activeIndex--)
}

The future version will take care of the rest.

Please test latest master and check https://github.com/thednp/bootstrap.native/commit/39d3868805acb99b4c88da268113576cab31999c

@nlemoine ?

Thanks for this nice addition.
There's a last issue. Everything works great if you're not pushing too hard on the prev/next buttons. See the screen record:

I think the problem comes from isSliding that's not checked within slideTo.

OH let me check that.

This is how BS deals with this: https://github.com/twbs/bootstrap/blob/v4-dev/js/src/carousel.js#L190-L193

OK now, check that again.

👍  Great! This fixes the issue. Thanks a lot for considering this request.

Alright, we are ready for 2.0.16 you think?

Sounds good to me.


add support to JMS Message Selectors

We are looking for a JMS Spout supporting JMS Message Selectors.
More info about JMS Message Selectors here

Any new about this PR? It will be merged?


[Fix bug] When the host agent installation progress reaches 75%, the timeout period is changed to 1 minute, and a friendly prompt is displayed to view the agent logs

[Fix bug] When the host agent installation progress reaches 75%, the timeout period is changed to 1 minute, and a friendly prompt is displayed to view the agent logs

[Bug]: When the installation progress of the server agent reaches 75%, the timeout is changed to 1 minute, and a friendly prompt is given to view the agent side log #106


Authentication resets after container restarts

Running locally via IDE requires authentication only one time, other application restarts restores information, no more qr auth needed. But when running in docker container any previous auth data clears, should I mount some volume?. Image from DockerHub: openjdk:17
Ps: I meant seems like application stores some data after authentication, but could not find any information about locations on Linux and Windows OS

Running locally via IDE requires authentication only one time, other application restarts restores information, no more qr auth needed. But when running in docker container any previous auth data clears, should I mount some volume?. Image from DockerHub: openjdk:17
Ps: I meant seems like application stores some data after authentication, but could not find any information about locations on Linux and Windows OS

The data is saved to the preferences. According to stack overflow, for Windows the location is HKEY_CURRENT_USER\Software\JavaSoft\Prefs

Seem like this one, thanks!

Can you please share link? What is about linux system?


Scalar mapping does not work for 2 fields of a same object with the same type

Bug description
Scalar mapping does not work for 2 fields of a same object with the same type.
Here is my config:
 scalar_mapping:
            - graphql_type: graphQLIntBetween0And2000Inc
              dart_type: int

Here is my generated file:

It worked for the second (numbernMin), but not for the first (numberWished).
Thanks!
Specs
Artemis version: 6.0.6-beta.1

Sorry, this is not the source of my error. I will open a new issue when I will find out.


[backport] [FLINK-5057] [task] Pick cancellation timeout from task manager config

Backport of #2793 with no major changes. This should be merged for 1.1.4 (requiring a new RC).

Merging this...


How to make it scroll infinitely?

Hello!
I want to know how to scroll infinitely using DLSlideView?
Can you give me a solution?
Thanks!

Currently not supported. You may write one base on my code.


UPnP support

Is your feature request related to a problem? Please describe.
Manually setting up port forwarding is not something that non-technical users are easily going to be able to do. Adding support for Universal Plug and Play (UPnP) will allow the setup experience to be a lot smoother.
Describe what the feature is that you'd like
See above.
Describe alternatives you've considered
N.A. Either UPnP support will be added or it won't be.
Additional context
N.A

Hey @Pandapip1,
We're looking into implementing UPnP and UDP punching.


Error in chapter1 of eola

Hi, whenever I try to do a scene from chapter1, it throws this error (or something like it).
TypeError: init() takes 1 positional argument but 4 were given
The 4 can be any random number depending on the scene. If anyone knows how to deal with this it would be great.

In general, one can't expect code from old videos to work.  I make some attempt to keep things backwards compatible, but sometimes it just doesn't make sense to go through the backlog of old videos.
In this case, if you want it to run, go through and replace the relevant calls to VMobject or Mobect with VGroup or Group, respectively.  Even then, there are no guarantees.
More generally, if you want it to run the way it did at the time of creating the video, go back to the commit corresponding to that publication.


How to format config to output sprite at root folder?

gul-svg-sprite 1.2.19
I'm having a lot of trouble with the config object that is passed to gulp-svg-sprite to determine the destination of the file created. I have read the doc section on output destination and read through this StackOverflow board on the matter.
Here is the gulp task
gulp.task('build-icons',function(){
    return gulp.src(assetsDev+'icons/*.svg')
        .pipe(svgSprite({
            mode: {defs:true, dest:'.'},
        }))
        .pipe(gulp.dest('icons'));
});

This is what I'm hoping to get
icons/
---sprite.defs.svg
This is what I get instead
icons/
---defs/
------svg/
---------sprite.defs.svg
I've tried changing the value of mode.dest, or adding a dest setting as a sibling to mode but it makes no difference. Basically, no matter what I write, the file is always saved in the same location. I think my setting is just ignored. For instance if I add the option sprite:"mysprite.svg" within the mode settings, the file is still saved as "sprite.defs.svg" in the same location as above.
What am I missing?  I bet it's really obvious.

Hey @RoxKilly,
you're simply using an insufficient configuration. Your config object should look like this:
var config = {
    'mode': {
        'defs': {
            'dest': '.',
            'sprite': 'sprite.devs.svg'
        }
    }
};

So your whole task could look like this:
gulp.task('build-icons', function () {
    return gulp.src(assetsDev + 'icons/*.svg')
        .pipe(svgSprite({
            'mode': {
                'defs': {
                    'dest': '.',
                    'sprite': 'sprite.devs.svg'
                }
            }
        }))
        .pipe(gulp.dest('icons'));
});

You should end up with icons/sprite.defs.svg then.
Cheers, Joschi

Thanks!!


Erasmus incorrectly tells you to buy missing spells from Zara’s shop

Auto-generated by EgoBot.

Fixed in v1.2.2