hydra_unstable: 2023-08-23 -> 2023-10-20

Description of changes
Diff: https://github.com/NixOS/hydra/compare/00d30874da759eb0f44f446415b2469920ff41b5..6a5fb9efaea35ca29836371307f5083576f421ab
Only functional change is supporting new versions of C::P::Argon2.
Actually no, the length of displayed commit hashes also has changed.
Things done

Built on platform(s)

[x] x86_64-linux
[ ] aarch64-linux
[ ] x86_64-darwin
[ ] aarch64-darwin

[ ] Tested, as applicable:

NixOS test(s) (look inside nixos/tests)
and/or package tests
or, for functions and "core" functionality, tests in lib/tests or pkgs/test
made sure NixOS tests are linked to the relevant packages

[ ] Tested compilation of all packages that depend on this change using nix-shell -p nixpkgs-review --run "nixpkgs-review rev HEAD". Note: all changes have to be committed, also see nixpkgs-review usage
[ ] Tested basic functionality of all binary files (usually in ./result/bin/)
23.11 Release Notes (or backporting 23.05 Release notes)

[ ] (Package updates) Added a release notes entry if the change is major or breaking
[ ] (Module updates) Added a release notes entry if the change is significant
[ ] (Module addition) Added a release notes entry if adding a new NixOS module

[ ] Fits CONTRIBUTING.md.

Result of nixpkgs-review pr 267303 run on x86_64-linux 1

1 package built:

hydra_unstable

And nixos tests passed.

@ofborg build hydra_unstable


Spelling error in help page 4

Should read "display" not "disploy" :smile:

Thanks!
Fixed in fb13da1ecc3f5a9371e9c85dbef1d42f91014498


Subdomain wildcard CORS

Do you want to request a feature or report a bug?
Feature

Feature
What did you expect to see?
I would like to be able to define a wildcard subdomain for CORS:
apiVersion: traefik.containo.us/v1alpha1
kind: Middleware
metadata:
  name: testHeader
spec:
  headers:
    accessControlAllowMethods:
      - "GET"
      - "OPTIONS"
      - "PUT"
    accessControlAllowOriginList:
      - "https://*.bar.org"
    accessControlMaxAge: 100
    addVaryHeader: "true"

and then have it allow foo.bar.org as well as baz.bar.org for example.
We have a scenario where we are allowing vanity urls for certain clients, and they all hit the same API.  We either have to move CORS back into our api and out of traefik, do something hacky with forward auth, or (ideally) solve it in Traefik, but I don't want to work on the PR if it's unlikely to get merged in for whatever reason.
If it's a feature that (assuming the code was fine, of course) would be merged in I'm happy to do the work.

I think that this would be a welcome feature for people that have corporate domains that may serve hundreds of subdomains.
Manually keeping an up-to date list could be challenging.
Please feel free to open a PR.

I was considering similar report, but I would rather handle regular expressions than wildcards. There is a question how should the configuration look like, is it going to be a list of strings that headers middleware would treat as wildcards/regexps or there should be a way to provide a type of allowed origin matcher:
accessControlAllowMethods:
  - "http://plain.string.origin.com"
  - type: wildcard
    value: "http://*.wildcard.origin.com"
  - type: regexp
    value: "\Ahttps?://(subdomains|list)\.domain\.net\z"

@davedray @dtomcej I followed @barthez suggestion and created a PR to allow regular expressions to be used here: https://github.com/containous/traefik/pull/6881 Please let me know what you think there.

Is it possible that #6881 validated this ticket, which could be closed?
There is documentation about the feature, dubbed accessControlAllowOriginListRegex, in:

https://doc.traefik.io/traefik/middlewares/http/headers/#accesscontrolalloworiginlistregex

Hello @almereyda,
Thanks, you are right, we missed closing it when we merged #6881.
Closed by #6881


[Post 4.10.1] Fix suggested actions maxHeight

Fixes #3444

Changelog Entry

Fixes #3444. Make suggested actions container height styleOption flexible, by @corinagum in PR #XXX

Description
Suggested Actions height was set to static, causing issues if assigned height was different than stacked height of all buttons. This fixes the height style option to be assigned to maxHeight
Design

[x] I have added tests and executed them locally
[x] I have updated CHANGELOG.md
[x] I have updated documentation

Review Checklist

This section is for contributors to review your work.

[x] Accessibility reviewed (tab order, content readability, alt text, color contrast)
[x] Browser and platform compatibilities reviewed
[x] CSS styles reviewed (minimal rules, no z-index)
[x] Documents reviewed (docs, samples, live demo)
[x] Internationalization reviewed (strings, unit formatting)
[x] package.json and package-lock.json reviewed
[x] Security reviewed (no data URIs, check for nonce leak)
[x] Tests reviewed (coverage, legitimacy)

Please don't merge until after 4.10.1. 🙏🏻


Automated Package Upgrade

:tada: This PR is included in version 25.4.86 :tada:
The release is available on:

npm package (@latest dist-tag)
GitHub release

Your semantic-release bot :package::rocket:


SteamVR plugin causes crash of the highest calibre

Installed SteamVR plugin 2.0.1 into Unity 2018.2.10f1
No extra customization, just let SteamVR generate it's actions.json file and vrmanifest and so on
Enter playmode
Tracking seems to work fine as usual, although there's a lot of InvalidHandle errors and some null reference exceptions (see issue here)
Exit playmode
Enter playmode a second time
Unity hangs (just Unity, everything else is fine)
The SteamVR window says 'Ready (unresponsive) '
Unity can't be killed by task manager
Open Unity Hub - can't open project because its already open
Use Process Hacker  to attempt to destroy Unity and close the breach
'Unable to terminate Unity.exe: An attempt was made to access an exiting process'
Only way to proceed is to hard-reboot the computer. A normal shut down or restart simply waits on "Rebooting" or "Shutting down" indefinitely (I left it for an hour, definitely not going to close by itself).

The error is highly reproducible. My guess is that something deep within SteamVR doesn't close down properly after exiting playmode for the first time, causing Unity to meet some sort of horrific end when trying to enter for a second time.

Agreed!! WTF is going on with Valve? FIX THIS SHIT NOW, and at least respond to all the issues we're all experiencing.
I have also had multiple crashes!! all sorts of weird errors. TEST BEFORE RELEASE!!!!!!! Same setup as above

Strange, this was tested with 2018.2.7, I’ll try with .10 today.

I gave it a go with .10 and it worked on my side. Can you create a system report and attach that so we can better diagnose the problem?


Implement an option to compile with an increased (changed) maximum

field length (other than the 1024).
After ./configure, set parameter FBUF in the Makefile.

There is an off-topic change in the patch which forces use of bison. Is it necessary in the context of this issue?

There is an off-topic change in the patch which forces use of bison. Is it necessary in the context of this issue?

I just do not have yacc installed ... so I get an error ... therefore switched to bison.

There would need to be some kind of auto configure. It would not be hard to add it to the configure script. But this is unrelated to the actual issue and cannot be part of the patch. Also there are systems which don't use GNU software but e.g. byacc instead.
I suggest to remove this change from the patch and prepare an additional pull-request with a change to the configure script which test for yacc, byacc and bison and then sets YACC. (Unfortunately I had forget to do that in the past.)
The other changes look good to me but I have not tested them.

.

Now you you have closed the whole pull request. As said I had not tested it but if it works I would not have an issue with committing it (@dtkerns do you have objections?).

none

re-open


Malformed URL not allowing metadata download

As stated in the header, when the app attempts to download metadata from IndieGala, it fails with a malformed URL. I've attached an image. Playnite v10.14.
Thanks!

Same issue here.

I'm getting the same problem

https://github.com/Lacro59/playnite-indiegala-plugin/commit/c569a9b23d71cc00946c56b8a4aa64051bc9c321


Pausing video externally

How to pause youtube video externally like clicking on a button.

There's no prop to do this, but you can get to the internal YouTube player API using a React ref:
class MyComponent extends React.Component {
  pause() {
    const player = this.refs.youtube._internalPlayer;
    player.pauseVideo();
  }
  render() {
    return (
      <YouTube
        ref="youtube"
        {...this.props}
      />
    );
  }
}

However a paused prop could be a cool feature:
<YouTube videoId="_lj7vcmZLPE" paused />

I stored the event of the video in a state (in onPlay()) and with help of that event I paused video (event.target.pauseVideo())

@goto-bus-stop
Hi! I tried your recommendation but i got this when i fire 'pause()'.
"Uncaught TypeError: Cannot read property 'pauseVideo' of undefined"
What did I wrong?😭

@nameisys The internal property name has changed since then. A better way to do it is to store the player like HarshaVardhanPVK mentioned:
class MyComponent extends React.Component {
  // Store a reference to the internal player object when it's ready.
  onPlayerReady (event) {
    this.player = event.target
  }
  pause () {
    this.player.pauseVideo()
  }
  render () {
    return (
      <YouTube
        onReady={this.onPlayerReady.bind(this)}
        {...this.props}
      />
    )
  }
}

@goto-bus-stop
I got result what I want. :) Thanks for your help!


change background of past dates of current month

how to change background for past dates of the current month

Solved


How can I use f to search in Vim mode? e.g. "abc" fc

I have searched all the vim keywords on Karabiner, however, there is no f key.
Could you tell me how to solve this? It is useful to use f to move the cursor.
Thank you very much.

Karabiner does not extend the text area behavior.
Karabiner simulates vim behavior by sending shortcuts.
(eg. sending arrow keys by hjkl keys.)
The f key is one of the vim function which is difficult to imitate.

@tekezo Thank you for your reply. I understand now.
But if can simulates vim behavior by sending shortcuts, why it can not support 3e, 4w as it can use a loop to send shortcuts?

It's due to the limitation of Karabiner private.xml expression.
Karabiner does not provide counter at the moment for some reason.
Therefore, such repeat function will be very complex private.xml.
The vim emu settings provide strong functions, but the definition is huge.

OK， thank you very much!


Sign up Page - Changing Volunteer Agreement

Make it mandatory to sign docusign, and then checkbox or submit button will come up.

embedded iframe programmed in test environment; need to push live

Seems like this is done, though the iframe should probably be resized.
Close this?

Abhishek is back!!!!!!!!! Yo how was Colombia? Idk if you can throw pics in the comment section, but if you can, please do.

Ya we should close it.


Add substitute filter

In certain situations, it's not possible to correctly annotate strings for translation when these
strings are a value of an html element and contain a variable interpolation. For example:

This is where the substitute filter comes in handy. The above situation would then be resolved as:

i.e. [[ and ]] mark start and end of a variable to be substituted, the actual values would be
then substituted with the context of the substitute filter.
With the substitute filter, the string with interpolation contained in an element attribute can:

be properly substituted
be properly marked for translation

The pull request also fixes the above problem in couple of html files.

@AllenBW Yup, I'll also update the documentation, once we agree whether this is good approach, etc.

Euwe Backport details:
$ git log
commit 532501b81512a9e1687a1068340708caf1af68fb
Author: Chris Kacerguis<EMAIL_ADDRESS>Date:   Mon Sep 26 13:01:10 2016 -0500

    Merge pull request #185 from mzazrivec/add_substitute_filter

    Add substitute filter
    (cherry picked from commit 889706d25e9267365f81e22b7938f3c38aafb644)

FYI, the documentation / guides PR for the filter: https://github.com/ManageIQ/guides/pull/156


System.IndexOutOfRangeException thrown when executing BackwardDeleteWord via a binding

I'm new to both Powershell and the PSReadLine libary but I encountered a System.IndexOutOfRangeException while customizing my bindings. Please let me know if I can provide any other information. I searched open issues and was not able to find this particular bug.
Environment data
PS version: 5.1.16299.98
PSReadline version: 1.2
os: 10.0.16299.15 (WinBuild.160101.0800)
PS file version: 10.0.16299.15 (WinBuild.160101.0800)
Steps to reproduce

Enter text at prompt (e.g. foo bar bing)
Execute the BackwardDeleteWord function via a binding (in my case Alt+Backspace)

Exception report
PS C:\> foo bar bing
Oops, something went wrong.  Please report this bug with the details below.
Report on GitHub: https://github.com/lzybkr/PSReadLine/issues/new
-----------------------------------------------------------------------
Last 13 Keys:
 f o o Spacebar b a r Spacebar b i n g Alt+Backspace

Exception:
System.IndexOutOfRangeException: Index was outside the bounds of the array.
   at System.Text.StringBuilder.get_Chars(Int32 index)
   at Microsoft.PowerShell.PSConsoleReadLine.ViFindPreviousWordPoint(Int32 i, String wordDelimiters)
   at Microsoft.PowerShell.PSConsoleReadLine.BackwardDeleteWord(Nullable`1 key, Object arg)
   at Microsoft.PowerShell.PSConsoleReadLine.ProcessOneKey(ConsoleKeyInfo key, Dictionary`2 dispatchTable, Boolean ignoreIfNoAction, Object arg)
   at Microsoft.PowerShell.PSConsoleReadLine.InputLoop()
   at Microsoft.PowerShell.PSConsoleReadLine.ReadLine(Runspace runspace, EngineIntrinsics engineIntrinsics)

Duplicate of #536 and fixed in 2.0.0-beta2.

Thank you @lzybkr! I should have searched closed issues as well.


Adds document- and schema-error trees to Validator

This allows error-querying nodes through a container-interface.
And some smaller cleanup.
docs are still missing

this is fully functional now.
the most challenging part was actually to find a reasonable extent for the tests and user-documentation.
but, this also revealed two flaws (#169 and JSON doesn't know non-string keys in mappings). i will provide fixes for these and then rebase. shall i add them to this PR?
oh, and the tests are also failing on travis because list's order are not predictable. i will fix this too and tend to do this by changing error lists to be sorted (objections? thoughts on sorting criteria?).
anyway, a review of the rest is appreciated.

from my perspective it's mergable.


Issue in Enums.NET V4.0.0

There's a bug which may cause infinite loops in Enums.NET V4.0.0. The bug was fixed in V4.0.1.
Even though I'm not sure whether this bug will affect code in NPOI, in some projects it will be difficult to consume NPOI package V2.6.0 with CI complaining that a vulnerability exists in the referenced Enums.NET V4.0.0.
Do we have any plan to upgrade the Enums.NET package to V4.0.1?

Thank you for reporting this. I'll look into it.


add option to wrap lines in custom code mirror

Description

Many of the zookeeper nodes contain quite long metadata, and it's challenging to scroll horizontally to read them.

Adds a toggle to wrap lines for the CustomCodeMirror
uses it in the zk browser

Note: i had to test with material-ui: 4.12.3 becuase the zookeeper browser is refusing to load locally due to some makeStyles issue
Edit table looks the same

but zk browser now can wrap lines

Upgrade Notes
Does this PR prevent a zero down-time upgrade? (Assume upgrade order: Controller, Broker, Server, Minion)

[ ] Yes (Please label as backward-incompat, and complete the section below on Release Notes)

Does this PR fix a zero-downtime upgrade introduced earlier?

[ ] Yes (Please label this as backward-incompat, and complete the section below on Release Notes)

Does this PR otherwise need attention when creating release notes? Things to consider:

New configuration options
Deprecation of configurations
Signature changes to public methods/interfaces
New plugins added or old plugins removed

[ ] Yes (Please label this PR as release-notes and complete the section on Release Notes)

Release Notes

Documentation

Codecov Report

Merging #7857 (ff5c759) into master (47e49ec) will decrease coverage by 33.15%.
The diff coverage is n/a.

@@              Coverage Diff              @@
##             master    #7857       +/-   ##
=============================================
- Coverage     71.63%   38.47%   -33.16%
+ Complexity     4088       80     -4008
=============================================
  Files          1580     1580
  Lines         81100    81099        -1
  Branches      12068    12068
=============================================
- Hits          58093    31200    -26893
- Misses        19092    47529    +28437
+ Partials       3915     2370     -1545

Flag
Coverage Δ

integration1
29.39% <ø> (-0.01%)
:arrow_down:

integration2
27.90% <ø> (+<0.01%)
:arrow_up:

unittests1
?

unittests2
14.53% <ø> (-0.03%)
:arrow_down:

Flags with carried forward coverage won't be shown. Click here to find out more.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update 47e49ec...ff5c759. Read the comment docs.

@shahsank3t Can you please help take a look at this?

Thank you @jadami10 for this enhancement.
+1, Changes look good to me.
Just one nitpick: should we move the Wrap lines toggle on the right-hand side instead of the left? IMO, it's an action and I think it will be better on left. What do you think?
cc: @Jackie-Jiang

I liked it better on the left since that puts it closer to the start of the lines. so if i wrap, i can immediately move the mouse down and copy/paste.
that said, it's not a strong opinion. maybe @Jackie-Jiang can be the tie breaker.

@shahsank3t Thanks for the review. I kind of like the way @jadami10 puts it on the left since it requires less mouse movement.


feat: E2EE support for channels

Implementation for https://github.com/raaymax/quack/issues/153
Todo:

[x] encrypt/decrypt messages in the channel using channel key
[x] generate encryption keys for each user
[x] store encrypted channel key for each user
[ ] encrypt user keys
[ ] guarantee session persistence
[ ] provide seamless abstraction to hide encryption process

Add tests for messages pagination


Protential feature request: Weex

Hi Greg,
I recently came across Weex, which is supposed to support VueJS for writing native mobile apps.  https://weex.incubator.apache.org/
I tried it out but couldn't get npm/yarn run dev to work. It looks promising though, it would be amazing if we could have it integrated in electron-vue project, so it can cross all platforms.
It still seems to need a bit more time to mature, but I thought i'd mention it to you as it may worth watching. :)
Cheers,
Amy

An update, i had to use yarn install --ignore-engines to get it to install, and then run yarn/npm start. Some guys were saying npm install with npm3.10.10 works, but npm install doesn't work for me with npm 5.3.0.
With --ignore-engines, the app shows in the local web preview all good, but I got network errors when I tried to view it on my mobile through Weex Playground Android. Possibly because of ignore-engines.

@swan488
Thanks for the suggestion, but the idea of mixing together a browser application with a native application just isn't feasible. It might be possible if the mobile output was made with cordova, but to provide a truly native UI like weex just won't work. There are too many differences between both environments to magically build for both.

It still seems to need a bit more time to mature

This is can heavily agree on. It's fantastic to see that it was taken in by Apache Incubator, but there still hasn't really been any major documentation updates to help explain everything more thoroughly. In my opinion, nativescript-vue is going to win the native race.

Thanks Greg, that makes sense! I haven't come across nativescript-vue yet, will check it out!


Add lazy import

The docs for this PR live here. All of your documentation changes will be reflected on that endpoint.


Add basic usage demo. Implement a search icons mechanism.

Fixes #46

This change is

This is of course a nice first step, but the search that we had in the previous vaadin.com/icons page was not just searching from the icon names – it used the metadata (categories and keywords/aliases) from the assets/vaadin-font-icons.json file.
Before we implement anything, this should be designed properly. Also, the marketing team is possibly doing something for this already, so we should sync with them: https://gitlab.vaadin.com/vaadincom/webpage/issues/1765

That said, I think we should merge this as a solid improvement, and create new issues to address the better search and usage of the other icon formats.

Reviewed 2 of 3 files at r1, 7 of 7 files at r2.
Review status: all files reviewed at latest revision, all discussions resolved.

Comments from Reviewable


fix: typo in Cargo.toml repository URL

Hi @jerusdp. Thanks for this library, it makes creating SQS processing Lambdas a breeze!
The repository URL has a hyphen rather than an underscore. This leads to a broken repository link showing on https://crates.io/crates/lambda_sqs and https://docs.rs/lambda_sqs/0.2.0/lambda_sqs/.

Hi @sdd,
Thanks for the feedback and the fix!


colorized search text to make it easier to read

Problem
Its hard to read the text returned from yotta search
Solution
Made the 3 sections of the returned search text colorized. Module name is green, Module version is blue, module description is white.

Thanks! Not convinced by the colour scheme though. How about using dim for the version, and normal text for the rest (or maybe also dim for the description)? (more consistent with the output of yotta ls)

eh, go ahead and reject it, theres been a more interesting pull request here https://github.com/ARMmbed/yotta/pull/346 , will add to this once accepted.


Button Alignment in navbar

Move about button after course as course is the main focus of the project plus in home page if you scroll down after home course will come not about.
I want to work on this one for gssoc2023

"Hi there! I'm excited to contribute to this project'GSSOC;'23 I've taken a look at the codebase and I believe I can make some valuable improvements. I'll start working on it right away. If you have any specific requirements or suggestions, please let me know. Looking forward to collaborating with you all on this!

Move about button after course as course is the main focus of the project plus in home page if you scroll down after home course will come not about.
i want to work on this one for gssoc2023

I want to work on this issue

sure!

I'm a contributor for GSSoC '23, I want to work on this issue. Please assign me.

One thing! This if first come first serve. please understand. @UditSharma9999 and @SamridhiNancy I will hopefully create some issues please comment on that and I'll assign you!


Updates to allow verify plugin tests to run without install

Add option to skip verify tests
Add preinit flag option to -C command to run the command before TS fully initializes

Cherry-picked to v10.0.x


Gems marked as require: false are being loaded

Input

Start a new project with the following Gemfile:

source 'https://rubygems.org'

gem 'sorbet'
gem 'ulid', '1.3.0', 'require' => false # A random gem I picked from my project that doesn't have any dependencies

Run bundle exec srb init

Observed output
sorbet/rbi/gems contains ulid.rbi
Expected behavior
sorbet/rbi/gems should not contain ulid.rbi

I believe https://github.com/sorbet/sorbet/pull/2637 caused this regression - require is not passed into Gemfile.lock, so parsing the lockfile instead of the Gemfile makes srb think every gem is requred.

Yeah that looks like the right PR. I have no real preference, because Stripe doesn't use this code. @connorshea maybe you want to chime in?
I'm defaulting to reverting that PR, because it seems worse to require things that explicitly should not be required than it does to not require enough things (because you can ~easily hand write RBIs if something wasn't required aggressively enough).
Also @jflinter you may want to consider using https://github.com/Shopify/tapoica. People who use Sorbet outside of Stripe have reported that it works better in a lot of cases.

I use tapioca so I don't think this change would effect me anyway, but the intent was to load all gems because you need type signatures for all gems. Most of the time when you have a gem set to require: false, you still use that gem it's just that it gets required manually when the gem is needed. And IIRC Sorbet got/gets confused by that.
So I'm not going to block such a change, but I do think it might be a bad idea to revert the change.

I'm using tapioca already to generate .rbi for my gems, but still depend on srb rbi hidden-definitions to pick up other hidden methods in our codebase. That command is going to call require_everything anyway though, so in practice I just get a ton of unneeded gem sigs in my hidden.rbi (that's what got me poking around here).
I agree that sigs should be generated for required gems and their dependencies, but per the original discussion in https://github.com/sorbet/sorbet/issues/1104 there also does need to be a way to indicate to sorbet that a gem should be ignored, and require: false seems like the right way to do that.
https://github.com/sorbet/sorbet/pull/4815 is my stab at fixing this, although I'm having trouble writing a test case for it because I can't seem to get the test suite running locally...

I'd like to chime in and point out that I find it odd to have .rbis for transitive dependencies at all. If your project foo depends on gem_a which transitively depends on gem_b, then call sites in foo (i.e. the only things that Sorbet is useful for) should only reference gem_a, even if gem_b does get loaded at runtime, so you should only need .rbis for gem_a. If code in foo also references gem_b, then gem_b would no longer just be a transitive dependency -- it would be an explicit dependency of foo, meaning you should add it to Gemfile.
An exception for this argument is perhaps if sigs in gem_a reference constants from gem_b, but in the context of the hidden-definitions tool this exception is irrelevant because it only cares about arity anyway.

I agree in theory, but in practice I feel like it's pretty common (for better or for worse) to reference a gem's explicit dependencies - the main example coming to mind being rails, where you would typically have gem rails in your Gemfile but work directly with ActiveRecord or ActiveSupport or whatever in your codebase. ¯_(ツ)_/¯

I'd like to chime in and point out that I find it odd to have .rbis for transitive dependencies at all. If your project foo depends on gem_a which transitively depends on gem_b, then call sites in foo (i.e. the only things that Sorbet is useful for) should only reference gem_a, even if gem_b does get loaded at runtime, so you should only need .rbis for gem_a. If code in foo also references gem_b, then gem_b would no longer just be a transitive dependency -- it would be an explicit dependency of foo, meaning you should add it to Gemfile.
An exception for this argument is perhaps if sigs in gem_a reference constants from gem_b, but in the context of the hidden-definitions tool this exception is irrelevant because it only cares about arity anyway.

This argument is not exactly correct, since you are just thinking about method calls. What usually ends up happening is that the fact that a gem is loaded has a way more global effect that you could imagine.
Suppose that this is your scenario:
app
- foo
  - json
- bar

Now, your app does not have a direct dependency on json, but foo does. When foo requires the json gem, lots of core Ruby classes will have modules mixed into them to add the to_json methods. The application could end up depending on this behaviour since it has no idea if that is being added by foo or json, it just works. So, if you don't generate the RBI file for json then you would not be representing the types in your application properly.

I understand a gem being required can have global effects at runtime. What I'm arguing is that the mere fact that gems can have such global effects does not automatically mean that Sorbet necessarily has to generate RBIs for any gem that happens to get required at runtime. It is not the case the Sorbet has to know about 100% of method calls that can possibly happen at runtime, nor should it -- it is a design choice.
In the scenario you've outlined, yes, I know that requiring json monkeypatches to_json on Object. However, in this case, just because you happen to depend on to_json in app does not mean that Sorbet would somehow be wrong if it were to not accommodate this use case. My opinion is that in this case your Gemfile is wrong because it didn't explicitly declare a dependency that it has.
I also concede that this argument doesn't work for meta-gems whose sole job is to pull in other gems, but the solution still applies: just add those transitive dependencies directly to your Gemfile, which is both semantically correct and not a particularly heavy burden. On the other hand, consider the opposite problem:

my app has an explicit dependency on gem foo
foo declares bar as a dependency
require 'bar' has require-time side-effects that monkeypatches Object
foo only ever does require 'bar/util' which does not have require-time side-effects
my app has nothing to do with gem bar

In this scenario, Sorbet automatically generating RBIs for bar is undesirable (due to the monkeypatch), and opting out currently requires me to add bar to my Gemfile with require: false when my app has nothing to do with bar at all! (This, by the way, is not a hypothetical scenario. The sinatra gem behaves like this -- require 'sinatra' monkeypatches Object while require 'sinatra/base' does not.)


webhook remote error: tls: bad certificate

Environment: Openshift 4.12.3
I simply installed external-secrets by running:
helm install external-secrets
external-secrets/external-secrets
-n external-secrets
--create-namespace
Tried to sync a Secret from AWS Secret Manager, works ok.
However, I see that the external-secrets-webhook is constantly throwing this error:
2023/04/28 18:31:37 http: TLS handshake error from <IP_ADDRESS>:54888: remote error: tls: bad certificate
Where <IP_ADDRESS> in this case is kube-apiserver-operator, which at the same time is throwing:
E0428 18:36:38.059056 1 degraded_webhook.go:128] x509: certificate signed by unknown authority
I have reviewed other issues (already closed) related to the webhook error "bad certificate" (for example this), but those don't seem to be related to this one. In this case, this is a new Openshift cluster with no workloads running and ExternalSecret was just installed with latest version and the error comes up immediately.
EDIT: I just noticed that helm install throwed these warnings, not sure if this could be related to the problem:
W0428 15:28:12.580724     651 warnings.go:70] would violate PodSecurity "restricted:v1.24": allowPrivilegeEscalation != false (container "webhook" must set securityContext.allowPrivilegeEscalation=false), unrestricted capabilities (container "webhook" must set securityContext.capabilities.drop=["ALL"]), runAsNonRoot != true (pod or container "webhook" must set securityContext.runAsNonRoot=true), seccompProfile (pod or container "webhook" must set securityContext.seccompProfile.type to "RuntimeDefault" or "Localhost")

W0428 15:28:12.580725     651 warnings.go:70] would violate PodSecurity "restricted:v1.24": allowPrivilegeEscalation != false (container "external-secrets" must set securityContext.allowPrivilegeEscalation=false), unrestricted capabilities (container "external-secrets" must set securityContext.capabilities.drop=["ALL"]), runAsNonRoot != true (pod or container "external-secrets" must set securityContext.runAsNonRoot=true), seccompProfile (pod or container "external-secrets" must set securityContext.seccompProfile.type to "RuntimeDefault" or "Localhost")

W0428 15:28:12.583534     651 warnings.go:70] would violate PodSecurity "restricted:v1.24": allowPrivilegeEscalation != false (container "cert-controller" must set securityContext.allowPrivilegeEscalation=false), unrestricted capabilities (container "cert-controller" must set securityContext.capabilities.drop=["ALL"]), runAsNonRoot != true (pod or container "cert-controller" must set securityContext.runAsNonRoot=true), seccompProfile (pod or container "cert-controller" must set securityContext.seccompProfile.type to "RuntimeDefault" or "Localhost")

Any ideas on how to fix these certificate errors?
Thanks!

Hi @andresm53 ! Did you try to install with the community operators package? I believe in openshift you need to provide extra configuration/ permissions that you can’t with the default helm install.
to troubleshoot the issue, a secret called external-secrets-Webhook should be created with a certificate configuration. Also, the CRDs should have been patched to have that CA in place.
You want to look at webhook and certController pods

Hi @gusfcarvalho
Thanks. You were right. Instead of installing external-secrets directly through helm, I tried this:

Went to the Openshift console > OperatorHub and installed external-secrets from there.
Then I created an Operator Config (sample).
And now it worked ok (no more certificate errors).
Thanks for you help.


Hi, my next issue seems to be similar to some previous bugs with getting stuck at Comanage after going through CILogon. I attempted some of the fixes that others have tried, but the basic gist of the issue is that upon logging in through the RSP cloud site, I am met with a redirect to Comanage with the signup track showing:

After clicking begin, I'm met with:

I figured some other login bugs had a similar issue, and after looking at one of the other fixed issues, I tried to recreate the steps that were laid out in an attempt to fix it. First, logging out of my account on the Comanage page:

Then, I went back out and into the Rubin Platform login page:

Interestingly, after doing the login once, it showed me the page once again. I tried clicking login, passed through...

...and ended up back where I started.
It's baffling that another issue has come up on my side, but any help would be much appreciated!

Hi @mochaait, I'm sorry you continue to encounter issues. As far as I can tell in the system, your account has been activated just fine. From the above, it seems like when you go to data.lsst.cloud and click log in, it is directing you to id.lsst.cloud.
Let's try this first. Make sure you're completely logged out of data.lsst.cloud and id.lsst.cloud, clear your cache, and restart your browser. Then go to data.lsst.cloud and instead of logging in, attempt to enter the Portal or Notebook aspects by clicking on one of the central panels (but not the API panel). This should (as I understand it) prompt a log in that then takes you onwards into the RSP aspect you selected, and not to id.lsst.cloud.

Hi @MelissaGraham, thanks for the responses.
So I tried as you suggested, clearing my cache again and restarting the browser. I then went through both the portal and notebook aspects to log in. Interestingly, both came up with the id.lsst.cloud redirect instead.
Even more interestingly, is that when I redirected myself to data.lsst.cloud, I was not actually logged in on the site, despite having been logged in on the Comanage:

This is an interesting point I thought might be part of the issue.

OK thanks for trying that @mochaait  -- we've reach the end of what I know about the system so I'll refer this to our RSP developers to get this login issue solved.

It looks like the user does not have a username selected. This could be, for example,  because the javascript was not allowed to run to completion during the sign-up process (or was prevented from running due to a browser setting). Given sign-up was never completed my recommendation is @MelissaGraham expunge the user and they try again, preferably with any browser plugins disabled or a different browse. If there are still problems after that let me know and we can try and record this process on a zoom call to see if we can spot why this is happening

@frossie This could be the case-- as I had my Adblock plugin on when I did the initial signup. I'm down to try again with Adblock disabled.

@mochaait  When I saw your Forum post I assumed you had gained RSP access. We should not expunge if you're using your account.
Confirm if you'd like your current account expunged so you can start over?

@MelissaGraham Hi, yeah I'd like my account expunged. The data in that forum post was gathered with help from some collaborators.

@mochaait thank you for confirming, your account has been expunged. Apologies for the inconvenience here, and do let us know how the next attempt goes.

Alright, perfect-- awaiting verification. I'll let you know if there are issues from there @MelissaGraham

Yup, it seems to be working fine!

Wonderful news @mochaait, thank you for confirming! Closing this ticket as we've reached a successful resolution. Thanks too @frossie.


How to set this up for Service Fabric Stateless ASP.Net Core API

Could you please provide an example how  App Configuration can be use in Service Fabric Stateless ASP.net Core API?

Document Details
⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

ID: 2984100d-7d78-2115-40f4-4b9478a5a5bc
Version Independent ID: 24ac6adc-6779-b847-ce81-c9d36e4b067b
Content: Quickstart for Azure App Configuration with ASP.NET Core
Content Source: articles/azure-app-configuration/quickstart-aspnet-core-app.md
Service: azure-app-configuration
GitHub Login: @yegu-ms
Microsoft Alias: yegu

@tkumark
Thanks for your feedback! We will investigate and update as appropriate.

@tkumark I have assigned the issue to the content author to evaluate and update as appropriate.

@tkumark, thanks for your feedback! I've added a tracking item for this for our backlog.

#please-close

@yegu-ms This issue is actually closed but I couldn`t still find the steps to setup Azure App Configuration for Service fabric ASP.Net Core API. Can you point me to the right documentation please?


Can addresses be watched during IBD sync?

Hello
syncing up a pruned node scans the wallet after IBD has completed and prune is applied at that moment.
It would be better UX, to scan as the data comes in, maybe periodically.
Reason for my suggestion today: I just did a pruned sync on a laptop which is limited to 256 gig on the drive and has only about 100 gigs free. I set prune to 4 gigs and missed the wallet creation date with the prune setting, so the wallet got pruned of and now I have to re-sync holding more data, which I am trying now to use 95% of free storage on the device to make sure to catch the wallet. Will prune it down later.
If sparrow syncronized  repeatedly as data comes into bitcoind, that behaviour would be improved .

This is unfortunately how Bitcoin Core works - it's not possible to change Sparrow to make this happen. When connected to Bitcoin Core, Sparrow relies on it to track the transactions in a wallet, so is dependent on how that tracking is performed.


sip: added headers to SIP inbound and output create requests

Please don't forget to add the changeset.

thanks for the reminder, I have now added it!


Parse an image for src and alt

This is the first PR I've tried for this project. Having a little trouble with the testing.

Looking good, just a couple more tests to be updated to pass:

testHyperlinkedImageNameAndPhotoProperties
testMultipleImpliedHCards

Pinging @gRegorLove as your previous comments re testing should all be addressed now :)


Issue : In footer Dark Mode text is not visible

https://github.com/user-attachments/assets/6ef5f1f2-8447-46ee-9231-f04644dfd36d

I have already solved the problem


Better handling when not able to create output folder

The current behavior or issue
If running a transformer without parameters, an exception is thrown instead of exiting gracefully
The steps taken to reproduce the behavior or issue, or specify a location where the steps were recorded
Run a transformer, such as soilmask-ratio, with no parameters
Expected behavior
The app doesn't crash but exists gracefully
Screenshots
N/A
Add other supporting information that may be useful
N/A
Completion criteria
The exception is handled gracefully
Developer info
Line causing issue is: https://github.com/AgPipeline/agpypeline/blob/881be402cf87ef46d4cb7174891c340d682e87f3/agpypeline/entrypoint.py#L401
If not able to create the folder, the exception should be logged and an error returned

https://github.com/AgPipeline/agpypeline/pull/33


how do i actually  get it onto my calculator?

ipt just tells me:
a token in blocks is invalid, so we are not able to open it.
and
sorry, it appears that clibs is broken

You need to first download clibs from here(like it says in the README instructions, you should have read them) and copy them on as well as prgmBLOCKS.

You need to first download clibs from here(like it says in the README instructions, you should have read them) and copy them on as well as prgmBLOCKS.

Hello @Skulcrusherr? Did it work? If so, close the issue.

@Skulcrusherrr???? Close the issue if it worked!

Thank you.


Disconnect all / disconnect from notification or connections list not working.

I had what I believe is the same issue as  #570, this patch fixes it by posting to a new handler on the UI thread instead of the parent view. I do not know why posting to the TerminalView did not work (as far as I can tell it works, but not when on the UI thread already).

Coverage increased (+0.007%) to 33.777% when pulling 5256fdf0ca311a417dc29a41cf85620cdd55b1e0 on netman69:master into 3bbf91a08c5dd8234c442df8c5e1a0319276794a on connectbot:master.

Apparently I still have to learn using pull requests, only the first commit is relevant to my explanation here. The other commit might be useful also though, it prevents the prompts from being drawn over the virtual keys thing.

 Thank you for your submission, we really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.You have signed the CLA already but the status is still pending? Let us recheck it.


testing hub

Thanks for trying out hub! In the future, I suggest you do testing in your own private repo to avoid triggering notifications in this project. 🙇

Whoops, sorry! I was actually trying to use my own private repo, but I guess I messed up :(.


DOC: "These are not universal functions" difficult to understand for newcomers

Is your feature request related to a problem? Please describe.
The docs of special include the sentence "These are not universal functions" to point out that a function only accepts scalar arguments and not arrays. I suggest to change the formulation to something a novice numpy user will understand as the concept of "universal function" is a NumPy thing. I guess that even many regular NumPy users do not know the term although they use ufuncs every day.
Describe the solution you'd like.
Alternative formulation that appeals to newbies and veterans:
"These functions only accept scalar arguments but not arrays. They are not universal functions."
Describe alternatives you've considered.
No response
Additional context (e.g. screenshots, GIFs)
No response

I agree here. Either we leave it like this and point to the NumPy definition of ufunc or we rephrase-which I prefer.

+1 from me.  Ufuncs are an implementation detail mostly.

@dschmitz89 would you be willing to submit a PR for this?

@melissawm : yep :)


Make our issue templates less scary :-p

There are reports that our issue templates are intimidating

It's probably worth de-emphasizing the Cranelift template, which is particularly scary.
For the environment question, it would help to have a command (or commands) to run that I could copy/paste. I tried to guess at some commands in #2662.


Pin set_direction errors right after export

Hi, I'm using the Pin method for CS1 and CS2, also for 3 leds.
Here is how I'm using it:
        let cs_2 = Pin::new(16);
        cs_2.export().expect("Error: Error during CS2 export");
        cs_2.set_direction(Direction::High)
            .expect("Error: Setting CS2 pin as output");

So, when I do a first run, it fails:
System is Linux on armv7l hardware
OS Release is 5.10.33-v7l+
OS Version is #1415 SMP Fri Apr 30 15:50:57 BST 2021
Iniciating navigator module.
thread '<unnamed>' panicked at 'Error: Setting CS2 pin as output: Io(Os { code: 13, kind: PermissionDenied, message: "Permission denied" })', /home/raultrombin/.cargo/git/checkouts/navigator-rs-2872844b08e6ceff/cfe571b/src/lib.rs:131:14
stack backtrace:
   0: 0xb6f56e80 - std::backtrace_rs::backtrace::libunwind::trace::hd3840244c887d756
                       at /rustc/f0411ffcebcd7f75ac02ed45feb53ffd07b75398/library/std/src/../../backtrace/src/backtrace/libunwind.rs:93:5
   1: 0xb6f56e80 - std::backtrace_rs::backtrace::trace_unsynchronized::hfa9aa3f288e7ea4d
                       at /rustc/f0411ffcebcd7f75ac02ed45feb53ffd07b75398/library/std/src/../../backtrace/src/backtrace/mod.rs:66:5
   2: 0xb6f56e80 - std::sys_common::backtrace::_print_fmt::ha5dd1213f42cd24c
                       at /rustc/f0411ffcebcd7f75ac02ed45feb53ffd07b75398/library/std/src/sys_common/backtrace.rs:65:5
   3: 0xb6f56e80 - <std::sys_common::backtrace::_print::DisplayBacktrace as core::fmt::Display>::fmt::h10e27ff4dc06f70d
                       at /rustc/f0411ffcebcd7f75ac02ed45feb53ffd07b75398/library/std/src/sys_common/backtrace.rs:44:22
   4: 0xb6f72874 - core::fmt::rt::Argument::fmt::h6ca71d35b3cbe820
                       at /rustc/f0411ffcebcd7f75ac02ed45feb53ffd07b75398/library/core/src/fmt/rt.rs:138:9
   5: 0xb6f72874 - core::fmt::write::h0dd162dfc1d20034
                       at /rustc/f0411ffcebcd7f75ac02ed45feb53ffd07b75398/library/core/src/fmt/mod.rs:1094:21
   6: 0xb6f54ea8 - std::io::Write::write_fmt::h5e7c8c388c0530bc
                       at /rustc/f0411ffcebcd7f75ac02ed45feb53ffd07b75398/library/std/src/io/mod.rs:1713:15
   7: 0xb6f56cb0 - std::sys_common::backtrace::_print::h85d5586bf00d40ec
                       at /rustc/f0411ffcebcd7f75ac02ed45feb53ffd07b75398/library/std/src/sys_common/backtrace.rs:47:5
   8: 0xb6f56cb0 - std::sys_common::backtrace::print::h4e6afe6a16138b69
                       at /rustc/f0411ffcebcd7f75ac02ed45feb53ffd07b75398/library/std/src/sys_common/backtrace.rs:34:9
   9: 0xb6f57f7c - std::panicking::default_hook::{{closure}}::h8cfdb93069a88529
                       at /rustc/f0411ffcebcd7f75ac02ed45feb53ffd07b75398/library/std/src/panicking.rs:269:22
  10: 0xb6f57cc8 - std::panicking::default_hook::h686642dd8d4b0259
                       at /rustc/f0411ffcebcd7f75ac02ed45feb53ffd07b75398/library/std/src/panicking.rs:288:9
  11: 0xb6f58678 - std::panicking::rust_panic_with_hook::h984f6dcc57afc0f1
                       at /rustc/f0411ffcebcd7f75ac02ed45feb53ffd07b75398/library/std/src/panicking.rs:705:13
  12: 0xb6f5839c - std::panicking::begin_panic_handler::{{closure}}::hff00024b15d9e6b2
                       at /rustc/f0411ffcebcd7f75ac02ed45feb53ffd07b75398/library/std/src/panicking.rs:597:13
  13: 0xb6f57314 - std::sys_common::backtrace::__rust_end_short_backtrace::hed49dc7f027d4b45
                       at /rustc/f0411ffcebcd7f75ac02ed45feb53ffd07b75398/library/std/src/sys_common/backtrace.rs:151:18
  14: 0xb6f58154 - rust_begin_unwind
                       at /rustc/f0411ffcebcd7f75ac02ed45feb53ffd07b75398/library/std/src/panicking.rs:593:5
  15: 0xb6f35b38 - core::panicking::panic_fmt::h79c5dd6da1f47f23
                       at /rustc/f0411ffcebcd7f75ac02ed45feb53ffd07b75398/library/core/src/panicking.rs:67:14
  16: 0xb6f35eb4 - core::result::unwrap_failed::hc7b5d8b3e1351f6b
                       at /rustc/f0411ffcebcd7f75ac02ed45feb53ffd07b75398/library/core/src/result.rs:1651:5
  17: 0xb6f37510 - navigator_rs::Navigator::new::hcc0def6f7439095e
  18: 0xb6f3622c - navigator::NavigationManager::get_instance::he00dd8700ca85460
  19: 0xb6f36350 - init
  20:    0x10d78 - main
                       at /home/blueos/deploy/examples/cpp/main.cpp:26:7
  21: 0xb6c6d740 - __libc_start_main
                       at ./csu/libc-start.c:308:16
fatal runtime error: failed to initiate panic, error 9
Aborted

But during the next run it works, basically i have to run it 5 times before to have it working (the 5 first erros for each pin), on each boot of the OS.
Running it as sudo works at the fresh first time.

I discovered that there should be a minimum delay of 20 milliseconds between exporting and setting directions.
In the case of port 16, it requires a 30-millisecond delay, although the reason for this is unclear.
            pin.export().expect("Error: Error during led pins export");
            Delay {}.delay_ms(30 as u16);
            pin.set_direction(Direction::High)
                .expect("Error: Setting led pins as output");

In conclusion, if you run the program with sudo, the delay is not necessary. However, if you run it as a regular user, this delay is required.I guess it's related to the kernel.

Any tips on how to investigate this further? Could it be something related to method export?

@RaulTrombin What SOC are you targeting?

Actually, thinking about this a bit more I strongly suspect that this is a udev-related race condition on export.  The kernel exports the device but it is async for udev to change the permissions.  If your code gets to it first, then the perms won't be updated yet.
The cdev API wouldn't have this same problem.

@posborne it's the arm7 for raspberry pi 4, cdev  is another crate/feature?

@RaulTrombin The GPIO sysfs interface is deprecated.  The linux-embedded-hal crate provides both as part of features.  To interact with the kernel via the cdev interface you'd use https://docs.rs/linux-embedded-hal/latest/linux_embedded_hal/struct.CdevPin.html (and then the embedded-hal interface once you have a pin).


doc: recommend make electron-develop to clean dependency tree

Because of NPM shrinkwrap, we recommend having a clean dependency tree
in CONTRIBUTING.md before upgrading a dependency. We currently
recommend maually wiping out node_modules, but since the
electron-develop make target already does that, is more user friendly
to recommend that instead.
Signed-off-by: Juan Cruz Viotti<EMAIL_ADDRESS>

Hmm, is this really the best advice?? electron-develop does a lot more than just delete node_modules (it's always quite a slow process for me).
Maybe it'd be better to recommend make distclean ( #971 ) instead?

@lurch The documentation was currently inaccurate (I just detected that), since you actually need to re-install the dependencies before moving to the next step (which make electron-develop) does.

Aha, cool :)


I have asp.net core based microservices project. In this project I am implementing API Gateway using Ocelot nuget package. This project is hosted in linux based docker container in my local development environment.  On testing the microservice url via the api gateway I am getting error 400 not found.

My configuration file:
{
"ReRoutes": [
{
"DownstreamPathTemplate": "/api/{everything}",
"DownstreamScheme": "http",
"DownstreamHostAndPorts": [
{
"Host": "authoradmin.command.api",
"Port": 80
}
],
"UpstreamPathTemplate": "/api/ad/{everything}",
"UpstreamHttpMethod": [ "POST", "PUT", "GET" ]
}
],
"GlobalConfiguration": {
"RequestIdKey": null,
"AdministrationPath": null
}
}
my Docker file is follows:
	authoradmin.command.api:
			image: ${DOCKER_REGISTRY-}authoradmincommandapi
			build:
  			context: .
  			dockerfile: CommandStack/AuthorAdmin.Command.API/Dockerfile
			depends_on:
  				- rabbitmq
			links:
  				- rabbitmq

docker override is as follows:
		authoradmin.command.gateway:
			environment:
  				- ASPNETCORE_ENVIRONMENT=Development
  				- IdentityUrl=http://identity.api
			ports:
  				- "50106:80"
			volumes:
  				- ./CommandStack/AuthorAdmin.Command.API:/app/configuration

Hello!
Sorry to say, but this repository is related to documentation and it is not the right place to ask that question. I think you will have a better chance of getting your question answered if you post it on a forum such as StackOverflow or Reddit.
I'm going to close the issue.
Thanks.


Bumps version to 3.8.2

Checklist

[x] Used a fork of the feedstock to propose changes
[ ] Bumped the build number (if the version is unchanged)
[x] Reset the build number to 0 (if the version changed)
[x] Re-rendered with the latest conda-smithy (Use the phrase @conda-forge-admin, please rerender in a comment in this PR for automated rerendering)
[ ] Ensured the license file is being packaged.

Hi! This is the friendly automated conda-forge-linting service.
I just wanted to let you know that I linted all conda-recipes in your PR (recipe) and found it was in an excellent condition.

@conda-forge-admin, please rerender

I am messing around with the .ci_support yaml files, which I now read that I am not supposed to. Nevertheless, I wanted to test if moving the version back to their original values would build QGIS.

If we are facing conflicts, what should we do to force the recipe to use old versions of the dependencies? instead of changing the ci_suport files? add version numbers to the recipe?

So, ignoring the changes that conda-smithy made in terms of dependencies versions, The build runs (check linux linux_python3.6). @ocefpaf @gillins should I just revert those changes for all dependencies, allow the build to success and merge it, so we can have 3.8.2 packages, and then create a PR with a re-rendered version for someone to tackle the conflicts? Unfortunately, I don't know how.

Probably needs https://github.com/conda-forge/gdal-feedstock/pull/333

So, @ocefpaf instead of changing the .ci_support files to pin the versions of some packages, should I change the conda_build_config.yaml? Will the smithy honor that and change the .ci_support files accordingly?

@gillins any idea of what may be wrong here with Windows?

Error comes from running pyrcc5.bat. It has the pyqt build path to Python hardcoded in it... Is this a known problem?
I think on older pyqt we called an .exe directly (I remember we had a patch)
@C:\bld\pyqt_1564799178857\_h_env\python.exe -m PyQt5.pyrcc_main %1 %2 %3 %4 %5 %6 %7 %8 %9

I think on older pyqt we called an .exe directly (I remember we had a patch)

Patch here for qgis or in pyqt? I can try to refresh it.

There is no .exe with the new qt... I think we have to fix the pyqt recipe so the .bat file doesn't have the path in it, but not sure how to do this.

There is no .exe with the new qt... I think we have to fix the pyqt recipe so the .bat file doesn't have the path in it, but not sure how to do this.

Looking into it...

Closing and re-opening to toggle the CIs.

OK my bad - latest build of pyqt still has the pyqt build environment embedded in it. Anyone have an idea why conda-build isn't detecting this and replacing like it does on Unix??
$ cat Library/bin/pyrcc5.bat
@ C:\bld\pyqt_1567694244485\_h_env\python.exe -m PyQt5.pyrcc_main %1 %2 %3 %4 %5 %6 %7 %8 %9


[zh]bugfix: fix title level

close: https://github.com/kubernetes/website/issues/31819

Thanks.
/lgtm
/approve


maximum session duration exceeded immediately after login

When compiling the module from source, on certain platforms, with certain compilers and certain webserver environments - i.e. Centos 6.4 64 bit with Oracle HTTP Server 12c (12.1.3) with Oracle specific modules installed - the conversion of timestamps to strings using APR time formatting routines may not work which would result in session timeouts being set to 0 and sessions being expired right away.
The following message showing immediately after first login would indicate this:
oidc_check_max_session_duration: maximum session duration exceeded for user: <username>
It seems due to a conversion issue with APR_TIME_T_FMT as in:
https://github.com/pingidentity/mod_auth_openidc/blob/v2.1.0/src/mod_auth_openidc.c#L889
`

more details on the environment with probems:
[root]$ yum list installed|grep apr
apr.x86_64                            1.3.9-5.el6_2
apr-devel.x86_64                      1.3.9-5.el6_2
apr-util.x86_64                       1.3.9-3.el6_0.1
apr-util-devel.x86_64                 1.3.9-3.el6_0.1
apr-util-ldap.x86_64                  1.3.9-3.el6_0.1

[root]$ yum list installed | grep -i gcc
gcc.x86_64                            4.4.7-4.el6
gcc-c++.x86_64                        4.4.7-4.el6
libgcc.i686                           4.4.7-4.el6
libgcc.x86_64                         4.4.7-4.el6

I am not able to reproduce this anywhere so I blame it on an anomaly in the compilation environment.

this was fixed in https://github.com/zmartzone/mod_auth_openidc/commit/99ccd3ca64eb1ea69054c011a95dac16ff16d6cc and included in <IP_ADDRESS> and upwards


Add common recorders/exporters to facade modules in main crate?

It's a bit cumbersome to have to important the exporters/recorders i.e. use metrics_exporter_log::LogExporter when they could do something like use metrics::exporters::LogExporter which is way more normal.
We could probably feature flag it for people who don't want the code bloat but I think this is probably what most people would prefer.

Fixed in #8.
We now have the pattern in place for the existing exporters/recorders.


07ef3c80-6ab0-45bd-b1ea-3e38b8e25fc3

this is for automated testing

512fc965-c726-4694-a2f0-1cf7fc622bfc


add hotkey support to start recording / finish recording

Keyboard shorts are planned, they might even make it into the next release! Thanks for submitting an issue and let us know if there's anything else you'd like to see in the app!

https://github.com/wulkano/kap/pull/96 adds hotkey support.  @nikitavoloboev Here's the process:

Cmd + Shift + 5 : Bring cropperWindow to front / prepare for recording
Enter or Spacebar : Start recording
Cmd + Shift + 5 : Stop recording

Just tried it now, and cmd + shift + 5 didn't do anything.

On latest master @nikitavoloboev?

Also would be nice to have a way to customise the hotkey since command + shift + 5 is used in quite a few apps for other things thus can't really keep this hotkey be global for me at least.

Well I got the release from here just now :

@nikitavoloboev it's not in the release yet. To get it to work, you'll have to clone and build the version in master. And yes, the team has talked about adding user customizable hotkey in the future.

@nikitavoloboev We're aiming for a new release very soon. 😄

Well I just I got a huge error trying to run yarn install to get all the dependencies :(

Guess I will wait for a release then.

@nikitavoloboev I'm not sure if we fully support yarn yet, try npm install instead?

It doesn't allow me to :

@nikitavoloboev https://github.com/nikitavoloboev/dotfiles/blob/07a08770b30f79f5c3fa48f0fb291d0246494023/zsh/functions/zfunctions#L51

oh my bad, forgot about this one, thank you

Documenting these keyboard shortcuts somewhere in the app, or on the website, would be very useful.


Adds command teams user app upgrade

Closes #5705
When looking at teams user app add for inspiration, I noticed that the try catch was not around the full command and the verbose log had removing in it while it is an add command. I have added that in this PR, but if wanted, I can raise a separate issue for this and include it in that.

Thank you @MathijsVerbeeck!

ready to merge 🚀

Merged manually 👍
Awesome work 👏👏
You Rock 🤩


VxLAN bridge ip address

I have 2 node cluster on digital ocean, and network traffic cannot be send to other cluster from a node that is not a gate way node. I was investigating problem a little, and I noticed that gateway node has followin bridge fdb entry :

Which is from VPC network. and points to both nodes.
However other node, has this bridge ip set to public address of gateway node:

I have 2 questions:

Shouldn't ip on second node come from vpc network ip range?
Is it possible to somehow change that bridge setting manually? ( I tried bridge fdb replace with RTNETLINK answers: operation not supported)

@Update
I was able to change bridge ip, I figured out it is taken from edpoint crd from private_ip node, so I just edited this field :
  **private_ip: <IP_ADDRESS>**
  public_ip: <IP_ADDRESS>

Now it shows this in bridge fdb :

However I get message Host is Unreachable if I try to use netcat or tracepath to pods from other clusters connected with submariner, whats interesting connection in other direction works

Did you open port 4800/UDP between your worker nodes?, that's the port vx-submariner will use?
If that doesn't do the trick, ping me on our slack channel [1] and let's look at it.
[1] https://kubernetes.slack.com/archives/C010RJV694M

The endpoint is automatically created and maintained by the submariner-gateway.
So according to your message may be there's a bug in detecting the gw interface for vxlan (which , as you said, it may be the internal address).
@sridhargaddam  ^

@mangelajo looks I am need invitation for that slack channel.  Anyway I checked firewalls as first thing yesterday. It looks submariner creates iptables correctly allowing all craffic on 4800 ports on both nodes. I will try to create clean firewall rules on digital ocean and give an update here (Y).

@Tarjei400 We use the Kubernetes Slack instance. You can request an invite here: https://slack.k8s.io/

Just in case, made firewall wide spread open:

Although its hard for me to say where exactly traffic gets stuck

I have 2 node cluster on digital ocean, and network traffic cannot be send to other cluster from a node that is not a gate way node. I was investigating problem a little, and I noticed that gateway node has followin bridge fdb entry :

Which is from VPC network. and points to both nodes.
However other node, has this bridge ip set to public address of gateway node:

I have 2 questions:

Shouldn't ip on second node come from vpc network ip range?

Submariner only configures the FDB entries on the Gateway nodes and NOT on the worker nodes.
On worker nodes, when the vx-submariner tunnel interface is created, the remote group will be configured to point to the Gateway node IP from VPC network range. I'm not sure who is creating the FDB entry on the worker nodes, please check.

Is it possible to somehow change that bridge setting manually? ( I tried bridge fdb replace with RTNETLINK answers: operation not supported)

Submariner does a period sync (30 secs) to ensure that vx-submariner and associated routes are as per the configuration. If you try to modify the vx-submariner outside of submariner, it will be overridden with the submariner values. So the right way IMO is to understand the issue and fix it properly (in Submariner itself if its submariner issue).

@update
I was able to change bridge ip, I figured out it is taken from edpoint crd from private_ip node, so I just edited this field :

Actually its taken from the defaultHostInterface, please see this...
https://github.com/submariner-io/submariner/blob/3af209d79094c4ed820d17b2d5229cbe9004e291/pkg/routeagent/controllers/route/route.go#L388

  **private_ip: <IP_ADDRESS>**
  public_ip: <IP_ADDRESS>

Now it shows this in bridge fdb :

However I get message Host is Unreachable if I try to use netcat or tracepath to pods from other clusters connected with submariner, whats interesting connection in other direction works

After some chat it turned out that most probably root couse of network traffic being lost somewhere is that on digital ocean, managed cluster has cilium deployed as network provider. When deployed cluster from rancher with Flannel as network provider issue seems to be gone. Thank you for help. I think ticket can be closed

Thanks for the update @Tarjei400. As discussed over slack, currently we do not support Cilium CNI. Good to know that you now have a Submariner deployment.


🔥  Ignite Flame 🔥

This is a complete overhaul of Ignite and a re-integration of Ignite Bowser into the main repo.
It's marked WIP because I'm still in-progress. However, it's complete enough to start showing people.
Thus, here we go.
Wait, I'm supposed to review ... how many changes?
No, no, no.
This PR won't be something that you'll be able to review change-by-change.
This is a complete re-write. In fact, it's three things: Ignite CLI, Ignite Bowser, and a large amount of completely new code.
I'll walk y'all through it when I'm ready. Feel free to poke around in the meantime.

Should be ready to merge shortly. cc @bryanstearns @fvonhoven

:tada: This PR is included in version 4.0.0 :tada:
The release is available on:

npm package (@latest dist-tag)
GitHub release

Your semantic-release bot :package::rocket:


odo link, add envvar for service type

[kind/Enhancement]
Which functionality do you think we should update/improve?
When linking to a service, an envvar should be added that identifies the service type.
Why is this needed?
An application may support multiple types of database backends. Having a variable that identifies the service type (e.g. postgresql, mariadb, ...) makes it possible for the application to know what backend is used and use the corresponding envvars.

I just noticed the uri envvar for the PostgreSQL service is postgres://xxxx.
Do other services also expose a uri that includes their type?

I just noticed the uri envvar for the PostgreSQL service is postgres://xxxx.
Do other services also expose a uri that includes their type?

As far as I know, this depends on the Service Broker implementation.

@tmds could you provide a use case where this could be useful?

@girishramnani I put the use-case under 'Why is this needed?': an app can support multiple db backends (postgresql, mariadb, ...). This enabled figuring out which is provided. Without, the user must do additional envars to pass the type himself.


Customization for XML code documentation

Is it possible to use something different, even blank, instead of "Looks up a localized string similar to"?
At the moment the default code documentation is
        '''
        '''  Looks up a localized string similar to Division by zero.
        '''

but I'd like to have just the (language) string
        '''
        '''  Division by zero.
        '''

or
        '''
        '''  English: Division by zero.
        '''

You can switch to text-template code generation, then you can tweak the output as you like:

I am using VS2017 with the latest patches installed (v15.8.2).

All 3 options are disabled and can't be selected.
The projects where it's not working are VB.NET WPF/XAML.
I also have a Win Forms C# project, here the options are enabled.

This feature is not available for VB yet.
Maybe someone can provide a ported template for VB, then I can add this feature.


Create 'Organization over quota' email

When a multiuser organization is over MB quota, we need to send an email to the ORG admin

Do we have copy for this?

cc @brittanymicek just an email to Organization owners if the entire org goes over quota

got it!
On Wed, Aug 12, 2015 at 1:42 PM, Andrew W. Hill<EMAIL_ADDRESS>wrote:

cc @brittanymicek https://github.com/brittanymicek just an email to
Organization owners if the entire org goes over quota
—
Reply to this email directly or view it on GitHub
https://github.com/CartoDB/cartodb/issues/5001#issuecomment-130386842.

--
Brittany Micek
Content Writer
CartoDB—Map Your World's Data
143 Roebling St 2A, New York, 11211, USA
T: + <%2B34695497365>19174633232
W: www.cartodb.com
Live sessions to learn CartoDB http://cartodb.com/webinars/

Hey there,
It looks like your team is growing fast and you’ve run out of space.
This is a friendly reminder that your organization is over quota. You can upgrade your account and/or purchase more space to continue working at the capacity you need.

In the meantime, take a look at some of the amazing things we’ve been up to at cartodb.com.
Thanks and Happy Mapping,
XXXXX
xxxxxxxxxxxxx
Hey,
You’ve been busy and that’s great but your team has run out of space!
Your organization is over its quota. It's time to upgrade your account and get more space. Upgrading is really simple:

Login to your CartoDB account and upgrade your settings OR;
Contact one of our account specialists - we’d be more than happy to help.

For now, check out amazing maps over at cartodb.com.
Happy Mapping,
Xxxxx Xxxxxx
Xxxxxxxxxxxxxxx

I'm not sure if it's an individual user email but:

Not sure about the user @saleiva. Also I'd add a bit of space between 1.
And 2.
On Aug 13, 2015 7:10 PM, "josecruz"<EMAIL_ADDRESS>wrote:

I'm not sure if it's an individual user email but:
[image: org]
https://cloud.githubusercontent.com/assets/596509/9256251/6343a46e-41e6-11e5-83d3-4eda200f9b1d.png
—
Reply to this email directly or view it on GitHub
https://github.com/CartoDB/cartodb/issues/5001#issuecomment-130763752.

Updated:

I would show the username that runned out of MB's on the title.

Then not the username, just the org name although I also think is not
needed since you just can have an org
On Aug 13, 2015 7:33 PM, "josecruz"<EMAIL_ADDRESS>wrote:

Updated:
[image: org]
https://cloud.githubusercontent.com/assets/596509/9256800/a965b65a-41e9-11e5-8fa8-1c887b84c282.png
I would show the username that runned out of MB's on the title.
—
Reply to this email directly or view it on GitHub
https://github.com/CartoDB/cartodb/issues/5001#issuecomment-130772334.

Also, Not whe numbered list looks too much separated :)

Better?

I'd remove the quotes, and for me is ok

Done!

Related suggestions:
About features:

We should also warn if organization runs out of seats. What do you think, @andrewxhill, @saleiva?

About text (@brittanymicek, @csobier?):

Subject and title should be "Your organization<EMAIL_ADDRESS>is over its quota"
Current text doesn't say the actual problem: "No more users will be able to sign up until you get more space."

@andrewxhill @saleiva just realized a more relevant detail: if you're an organization owner you can't upgrade on your own, so email text should not say anything about login but just contact (an email link), isn't it? So, suggestion:
Hey,
You’ve been busy and that’s great but your team has run out of space!
Your organization is over its quota. It's time to upgrade your account and get more space. Upgrading is really simple: contact one of our account specialists - we’d be more than happy to help.
For now, check out amazing maps over at cartodb.com.
Happy Mapping,

Please wordsmith to Brittanys' suggestion above, I would also not use "over its quota".  Typically, the terminology is that you have reached your quota.  I'm sure she can help with the final copy when you the dialogs are ready.

@csobier I copied the wrong part of @brittanymicek comment. I've updated my previous comment with the right text, and my doubt about the need for login is done. I will continue with that and wait for the subject until my final submission.
Seat question is still open but I can open a new issue later.


Dataverse download buttons are part of a "button group" when they should not be

Reported by @jlcohoon on the 0.24 Trello board
The blue download buttons, as well as the grey upload button, for Dataverse have the "btn-group" class applied to them. This makes their right side not have rounded corners.

This class should be removed for all instances except for the upload/release study buttons for "draft" dataverses.

@caner?

Yes I'm on it.


Update Node.js version in '.nvmrc'

Since "engines" in now.json specifies Node.js >=10, we could alternately consider using lts/* in .nvmrc.

I'm down with lts/* as well, but this works for now. Thank you!

Since you’re fine with lts/*, let’s use that. Node.js v12 will become the active LTS next month. By switching to lts/* now, we avoid the work of changing this again then. Updated in https://github.com/primer/components/pull/541/commits/85bec0ea6b97abddce21539c447202de6422d673.


EventHubTokenCredential is not publicly exported from lib

EventHubTokenCredential is not accessible due to the module containing it not being publicly exported from the library.
It is public here: https://github.com/minghuaw/azure-sdk-for-rust/blob/de21c92e74c99d7b4cb4afbde6d1703a3f4aeb46/sdk/messaging_eventhubs/src/authorization/event_hub_token_credential.rs#L7C6-L7C6
But it is not reexported in lib.rs
The variants of the enum also should be exported so they can be used by a consumer.

I will probably change the version number to follow that of azure_core starting with this fix

@jackgerrits I have something (not published on crates.io yet) that already works with AzureNamedKeyCredential and technically should work with managed identity from azure_identity crate. However, I've run a quick test on an azure VM which simply tries to get the managed identity and try to get token (see below), and somehow it just fails to get any credential.
use azure_identity::DefaultAzureCredential;
use azure_core::auth::TokenCredential;

const DEFAULT_SCOPE: &str = "https://eventhubs.azure.net/.default";

#[tokio::main]
async fn main() {
    println!("Hello, world!");

    let credential = DefaultAzureCredential::default();
    let token = credential.get_token(DEFAULT_SCOPE).await.unwrap();

}

Then I tried the same thing but with dotnet sdk (the code snippet can be found below), and everything just works fine.
using Azure.Core;
using Azure.Identity;

var credential = new DefaultAzureCredential();
var context = new TokenRequestContext(new[] {"https://eventhubs.azure.net/.default"});
var accessToken = credential.GetToken(context);
String accessTokenString = accessToken.Token.ToString();

Console.WriteLine(accessTokenString);

This could very likely be my fault as I am not super familiar with managed identity on azure, but I wonder if there's bug with azure_identity.

I will make a preview release on crates.io so that you can give it a try

Hi @jackgerrits I have made a preview release ("0.14.0-alpha") on crates.io. I want to make sure that EventHubTokenCredential works properly with azure managed identity before making it "0.14.0"

There seems to be a long queue on docs.rs. I will just list some example showcasing how to work with credentials in this preview release.

Working with AzureNamedKeyCredential or AzureSasCredential

// You can turn `AzureNamedKeyCredential` or `AzureSasCredential` into
// `EventHubTokenCredential` and then use
// `EventHubConnection::from_namespace_and_credential`

let named_key_credential = AzureNamedKeyCredential::new(key_name, key);
// `AzureSasCredential` doesn't need the signature authorization resource
let resource = build_connection_signature_authorization_resource(transport_type, &fully_qualified_namespace, &event_hub_name).unwrap();
let shared_access_credential = SharedAccessCredential::try_from_named_key_credential(credential, resource).unwrap();
let connection = EventHubConnection::from_namespace_and_credential(
    fully_qualified_namespace,
    event_hub_name,
    shared_access_credential,
    EventHubConnectionOptions::default(),
).await.unwrap();

// Or you can use the convenience function
let named_key_credential = AzureNamedKeyCredential::new(key_name, key);
let connection = EventHubConnection::from_namespace_and_named_key_credential(
    fully_qualified_namespace,
    event_hub_name,
    named_key_credential,
    options,
).await.unwrap();

Working with other credential types that implements azure_core::TokenCredential (ie. credential types provided in azure_identity)

// `azure_identity::DefaultAzureCredential` implements `azure_core::TokenCredential`
let credential = azure_identity::DefaultAzureCredential::default();
let connection = EventHubConnection::from_namespace_and_credential(
    fully_qualified_namespace,
    event_hub_name,
    credential,
    EventHubConnectionOptions::default(),
).await.unwrap();

Thanks! I will try it out.

I was able to get a token using the DefaultAzureCredentail (CLI) by changing the scope to (removing .default):
const DEFAULT_SCOPE: &str = "https://eventhubs.azure.net/";

This seems to be documented here: https://learn.microsoft.com/en-us/azure/event-hubs/authenticate-application
However, I am a bit confused because the scope you originally used also seems to be used often if you search for it on GitHub.

It seems like "https://eventhubs.azure.net/" is used in the legacy Event Hubs SDK (https://github.com/Azure/azure-sdk-for-net/blob/fbd50bd3d03e6483a85b3f75ed194ded4c29a1e5/sdk/eventhub/Microsoft.Azure.EventHubs/src/Primitives/ManagedIdentityTokenProvider.cs#L39)

It looks like the resource is https://eventhubs.azure.net/ and the scope would be https://eventhubs.azure.net/.default. (see here, however resource is audience here?)
Looking at the insides of the identity module for CLI credentials it is passing the parameter that is passed through to --resource parameter of az cli. See here
This would indicate that the resource and not scope should be used.
$ az account get-access-token --help

Command
    az account get-access-token : Get a token for utilities to access Azure.
        The token will be valid for at least 5 minutes with the maximum at 60 minutes. If the
        subscription argument isn't specified, the current account is used.

Arguments
    --name --subscription -n -s : Name or ID of subscription.
    --resource                  : Azure resource endpoints in AAD v1.0.
    --resource-type             : Type of well-known resource.  Allowed values: aad-graph, arm,
                                  batch, data-lake, media, ms-graph, oss-rdbms.
    --scope                     : Space-separated AAD scopes in AAD v2.0. Default to Azure Resource
                                  Manager.
    --tenant -t                 : Tenant ID for which the token is acquired. Only available for user
                                  and service principal account, not for MSI or Cloud Shell account.

It seems like it is using AAD 1.0, and hence the reason why the .default needs to be omitted. This matches up with this:
https://learn.microsoft.com/en-us/azure/active-directory/develop/msal-v1-app-scopes

I think I figured out why it didn't work. https://github.com/Azure/azure-sdk-for-rust/blob/c0d938c7ae0f5fef878956617ff73245e94026a9/sdk/identity/src/token_credentials/client_secret_credentials.rs#L144 azure_identity is appending ".default" internally.

Ah that makes sense, great!

@jackgerrits The problem with azure_identity credentials has been fixed (tested on an azure VM and added a new example). I have released version "0.14.0" on crates.io.

Thank you!

I will leave this issue open for now. Feel free to close it if the new version works as expected for you :)

Hi @jackgerrits , I opened another issue #11 which discusses whether methods like EventHubConnection::from_connection_string() should be changed to EventHubConnection::try_from_connection_string() (or something else), and I was wondering if you could provide some input on this?

It looks like the default credential is working well now, thank you! (I replied to that in the other issue)


Implements  booleanOverlap and line_overlap function

@armantorkzaban we should finish this in the next weeks. This is another "low hanging fruit", which can be finished easily

Okay, I need to take a closer look. Some tests fail, and it appears that the implementation is incomplete.
I picked out this ./test/examples/booleans/overlap/true/simple-lines.geojson example, where two lines partially overlap. Unfortunately, our current implementation failed to detect this overlap, whereas turf.js correctly identifies it.

@jsiedentop this is high priiority
see this project: https://github.com/opendata-nuernberg/soil_unsealing_potential/tree/main/polygon_analyzer

I am closing this because the functions were implemented with #174


Taxonomy: Fix History Regression

Context
Noticed with the existing setup for taxonomy, the hierarchical taxonomy implementation added a regression for story history, so we disabled the test. This is part of the work to address those issues.

Summary
This fixes the history regression caused by taxonomy and re-enables the history karma tests that it initially broke.

Relevant Technical Choices
Moved terms to be a separate entity than the story, and combined it with the story for relevant functionality, but excluded the term updates from the story for history entries.

To-do
NA

User-facing changes
Should not be prompted with unsaved changes when first loading a story and not having changed anything.

Testing Instructions
npm run test:karma:edit-story

[ ] This is a non-user-facing change and requires no QA

This PR can be tested by following these steps:

Reviews
Does this PR have a security-related impact?

Does this PR change what data or activity we track or use?

Does this PR have a legal-related impact?

Checklist

[x] This PR addresses an existing issue and I have linked this PR to it in ZenHub
[x] I have tested this code to the best of my abilities
[x] I have verified accessibility to the best of my abilities (docs)
[x] I have verified i18n and l10n (translation, right-to-left layout) to the best of my abilities
[x] This code is covered by automated tests (unit, integration, and/or e2e) to verify it works as intended (docs)
[x] I have added documentation where necessary
[x] I have added a matching Type: XYZ label to the PR

Partially addresses #9073

Closing this in favor of just fixing the history and re-enabling in this PR here:
https://github.com/google/web-stories-wp/pull/9147


multiple TLS certs are not correctly handled by GCE

I have setup and ingress for 3 microservices under 3 subdomains, each having their own cert.
When I startup the ingree I see this in the l7-lb-controller log:
W0712 10:01:30.733403       1 tls.go:58] Ignoring 2 certs and taking the first for ingress default/tls-termination
IMHO that cannot work and indeed I get a single cert applied to all 3 subdomains and as expected e.g browsers complain about the mismatch. I would expect the Host header to be used to select the appropriate cert.
This is how the config looks like for 2 hosts, example.com is just used for illustration
apiVersion: extensions/v1beta1
kind: Ingress
metadata:
  name: tls-termination
  annotations:
    kubernetes.io/ingress.class: "gce"
    kubernetes.io/ingress.allow-http: "false"
spec:
  tls:
  - hosts:
    - api.example.com
    secretName: api-tls
  - hosts:
    - www.example.com
    secretName: www-tls
  rules:
  - host: api.example.com
    http:
      paths:
      - path: /
        backend:
          serviceName: api
          servicePort: 80
  - host: www.example.com
    http:
      paths:
      - path: /
        backend:
          serviceName: www
          servicePort: 80

Using a single cert covering all subdomains is maybe doable, but would not be nice, since the services should not need to know about each other.

Erm, the docs (https://github.com/kubernetes/ingress/blob/master/controllers/gce/README.md#frontend-https) say "This controller does not support SNI, so it will ignore all but the first cert in the TLS configuration section." - are you planning to fix this?

GCP's HTTP(S) LB does not support SNI.

Would it make sense to mention this here: https://github.com/kubernetes/ingress/blob/master/controllers/gce/BETA_LIMITATIONS.md ?

It looks like GCE now does in fact support SNI https://issuetracker.google.com/issues/35904767#comment47
:tada:

It looks like the code in question that'll need changing mostly resides here: https://github.com/kubernetes/ingress/blob/master/controllers/gce/loadbalancers/loadbalancers.go (search for TLS)

Looks like adding the extra certificate to the load balancer on GCE works fine, but k8s can't set it up properly atm.

This issue was moved to kubernetes/ingress-gce#46


Fix 429 response

For issue
This route broke all versions of the library when you log in not through a session

@hinesqui thanks!


Navigation treeview is above the page content in the mobile view

Currently the treeview appears above the actual page content in a smaller screen. Is this an intended change ? @ststimac
It could be an issue in the rule pages since the expanded panel can stretch pretty long before a user can see the page content:

Ah, yes. I made an update after reviewing one of David Storey's accessibility concerns. This was appearing after the content which would make it hard for a user to navigate around.
For now I will switch it back to the way it was and open a new issue to explore a better solution on mobile.


HELM-17: Show ticket operations according to ticketer config/ticket state

JIRA: https://issues.opennms.org/browse/HELM-17

Depends on https://github.com/OpenNMS/opennms/pull/1631 and https://github.com/OpenNMS/opennms-js/pull/13

I'll wait on https://github.com/OpenNMS/opennms/pull/1631 before merging this.


Text selection on mobile devices (IOS / Android) broken

When you try to select text on a mobile device the selectionmarkers will disappear after a few characters.
Tested on a LG G5 (Android 6) and a iPad Air 2 on IOS 10 with touch and a hardware keyboard.

I'm also hitting this issue. After looking into it more, the issue seems to be with codemirror. In particular there is a function updateLineText (in codemirror/src/display/update_line.js) which replaces the current line with formatted html which contains a the current selection wrapped in a span so it can apply a css class for a selected text style. It does this by replacing the current node with a new node with the span applied.
Since the existing node may just be a text node, it can't just slice it up so is forced to do the replaceChild call. This is what then resets the selection so it is lost on a mobile device.
I've been looking at how feasible it would be to change codemirror so on a mobile device it didn't replace the node but it has quite a lot of knock on effects so I've not made much progress at the moment, but hopefully this will give a starting point for others that may be interested.

After looking further, the fix is as simple as passing styleSelectedText: false as one of the options when initialising SimpleMDE

@stephenoakman Would you mind submitting a PR with this fix and a demonstration of the before/after?

@stephenoakman thanks for your investigation, works perfekt for me on iOS and Android.


The following build commands failed: CompileSwift normal arm64

I am currently having this error in the xcode-archive stage,
** ARCHIVE FAILED **
The following build commands failed:
	CompileSwift normal arm64
	CompileSwiftSources normal arm64 com.apple.xcode.tools.swift.compiler

This is the location of my build logs build logs
I have tried curbing the internet for the possible cause of this, but I could not get to the root cause as I am new to IOS development. Please let me know if I can provide any more files to help solve this

Hi @zombieleet,
Can you please enable support access in your project's settings so we can access your builds?

I have fixed this already. Thanks :)

Awesome, that's great to hear! Do you mind sharing what you did so future passerbyers can fix their issue?

@non-binary I had to remove cordova-plugin-firebase-analytics it was conflicting with capacitor-firebase-analytics


SRS-Wrapper: Dynamic name for results (use id in some way)

closed with https://github.com/equinor/data-modelling-tool/commit/2184d4ee984be894cec88f33feddf7541d0d5092


[Suggestion] Display avatars on speclist

Maybe add feature like offscreen enemies but in speclist? Would be very nice

yea, i was thinking on that

ez.

ez.

make a pr then lmao

ez.

make a pr then lmao

ru dumb? why i have to release it when i paid for it? tf. get a brain


remove neuralcompression.layers.gdn

replaced by neuralcompression.layers.GeneralizedDivisiveNormalization

We could keep the old code and add neuralcompression==0.1.0 to requirements.txt if you want to remove the layer. We should probably have fixed versions in projects anyway.

@mmuckley I am open to a variety of my ideas. My intent here is to provide one, and only one implementation. But I do agree that it's an issue for reproducing neuralcompression.models.DVC results. I'll keep this open and we can discuss next time we talk. Does that work for you?

@mmuckley I suppose one option might be moving neuralcompression.layers.gdn into projects/deep_video_compression.

@0x00b1 your proposal works for me!
Not necessary for this PR but I think in the long run you will want to tag projects to one version of neuralcompression just because research software changes a lot and breaks backwards compatibility all the time.


Fix problems with timeouts in graphql_transport_ws

This fixes an issue mentioned in #2702

Description
After merging uniform websocket tests for Starlite extension, sporadic deadlocks were observed.
It turned out that  the timeout trigger, part of the graphql_transport_ws protocol, could trigger too early,
when the initial websockets handshake was still being done.  This caused the whole websocket connection
attempt to be rejected and this triggered a deadlock in Starlite, which still appears a bit un-robust.
This PR does a few things

provides an API to start the timeout, after the integration specific handler has completed the Websockets handshake.
Add initial synchronization (connection_timed_out:bool) to ensure that there is never a race between a timeout and accepting a connection.
Robustly terminate the timeout task when it is done, or no longer needed.
Add error handing around the timeout task.
Add a Task error handling hook, to report unhandled errors in Tasks.  This is not yet in use, need to consult on which log handler to use, perhaps "strawberry.task"
Provide a shutdown() api to the integrations, rather than the former, rather unwieldly, boilerplate code.

Types of Changes

[x] Core
[x] Bugfix
[ ] New feature
[ ] Enhancement/optimization
[ ] Documentation

Issues Fixed or Closed by This PR

#2702

Checklist

[x] My code follows the code style of this project.
[ ] My change requires a change to the documentation.
[ ] I have updated the documentation accordingly.
[x] I have read the CONTRIBUTING document.
[ ] I have added tests to cover my changes.
[x] I have tested the changes and verified that they work and don't break anything (as well as I can manage).

Note that I am not exactly sure why the deadlock occurs, it could be a result of the Strawberry integration.  I was uncsuccessful in reproducing it in the plain Starlite repo, and indeed, it contains unittests for websocket rejection using 'close' before an 'accept' message is sent.
But Strawberry always accepts a websocket connection.  The protocols for GraphQL instead provide for a rejection to be done as a result of the sub-protocol handshake.

One question:
I added a skeleton error handler for background tasks.  The only sensible thing to do is to log them.  but I didn't implement that for this PR.  I could do that now, if we agree on a log channel to use.  I suggested strawberry.task, maybe that is ok?
These are the only tasks created by strawberry, all other top level task logging is done by the web framework in question.

One question: I added a skeleton error handler for background tasks. The only sensible thing to do is to log them. but I didn't implement that for this PR. I could do that now, if we agree on a log channel to use. I suggested strawberry.task, maybe that is ok? These are the only tasks created by strawberry, all other top level task logging is done by the web framework in question.

when are these errors happening?

when are these errors happening?

Never, hopefully.  But whenever you create a background task, it is prudent to install a top-level error handler to catch and log it.  If you don't, Python will create a warning about an task with an exception not being "awaited" but that warning may end up anywhere.  In case of the timeout thread, there really aren't many things which can go wrong. But for the subscription thread, all kinds of errors can occur and it is best to handle them in-task by a top level error handler.
The alternative is to have the main task "await" all background tasks and catch and log any errors which occur there.


Kubernetes deployment launcher process hanging

System Info
Using ghcr.io/huggingface/text-generation-inference:latest, but same issue with 0.9, and 1.02.
Trying to deploy with model_id "tiiuae/falcon-7b-instruct"
Information

[X] Docker
[ ] The CLI directly

Tasks

[X] An officially supported command
[ ] My own modifications

Reproduction
My kubernetes deployment and pvc config:
apiVersion: apps/v1
kind: Deployment
metadata:
  name: tgi-falcon-7b-instruct-deployment
  labels:
    app: tgi-falcon-7b-instruct
spec:
  replicas: 1
  selector:
    matchLabels:
      app: tgi-falcon-7b-instruct
  template:
    metadata:
      labels:
        app: tgi-falcon-7b-instruct
    spec:
      volumes:
        - name: tgi-falcon-7b-instruct-data
          persistentVolumeClaim:
            claimName: tgi-falcon-7b-instruct-pvc
      containers:
      - name: tgi-falcon-7b-instruct
        image: ghcr.io/huggingface/text-generation-inference:latest
        args: [ "--model-id",  "tiiuae/falcon-7b-instruct", "--num-shard",  "1" ]
        volumeMounts:
          - mountPath: /data
            name: tgi-falcon-7b-instruct-data
---
apiVersion: v1
kind: PersistentVolumeClaim
metadata:
  name: tgi-falcon-7b-instruct-pvc
spec:
  accessModes:
    - ReadWriteOnce
  resources:
    requests:
      storage: 50Gi

After applying this the only logs I get from the container are these:
2023-09-04T08:55:39.932658Z  INFO text_generation_launcher: Args { model_id: "tiiuae/falcon-7b-instruct", revision: None, validation_workers: 2, sharded: None, num_shard: Some(1), quantize: None, dtype: None, trust_remote_code: false, max_concurrent_requests: 128, max_best_of: 2, max_stop_sequences: 4, max_top_n_tokens: 5, max_input_length: 1024, max_total_tokens: 2048, waiting_served_ratio: 1.2, max_batch_prefill_tokens: 4096, max_batch_total_tokens: None, max_waiting_tokens: 20, hostname: "tgi-falcon-7b-instruct-deployment-58d4486974-cdvnz", port: 80, shard_uds_path: "/tmp/text-generation-server", master_addr: "localhost", master_port: 29500, huggingface_hub_cache: Some("/data"), weights_cache_override: None, disable_custom_kernels: false, cuda_memory_fraction: 1.0, rope_scaling: None, rope_factor: None, json_output: false, otlp_endpoint: None, cors_allow_origin: [], watermark_gamma: None, watermark_delta: None, ngrok: false, ngrok_authtoken: None, ngrok_edge: None, env: false }
2023-09-04T08:55:39.932793Z  INFO download: text_generation_launcher: Starting download process.
2023-09-04T08:55:44.934529Z  WARN text_generation_launcher: No safetensors weights found for model tiiuae/falcon-7b-instruct at revision None. Downloading PyTorch weights.

2023-09-04T08:55:45.077346Z  INFO text_generation_launcher: Download file: pytorch_model-00001-of-00002.bin

The container does download some tmpxxxx file with the same size as the model file but there it just stops. The process is still running though:
root@tgi-falcon-7b-instruct-deployment-58d4486974-cdvnz:/data# ps -ef
UID        PID  PPID  C STIME TTY          TIME CMD
root         1     0  0 08:55 ?        00:00:00 text-generation-launcher --model-id tiiuae/falcon-7b-instruct --num-shard 1
root         7     1  2 08:55 ?        00:01:20 /opt/conda/bin/python3.9 /opt/conda/bin/text-generation-server download-weights tiiuae/falcon-7b-instruct --extension .safetensors --logger-level INFO --json-outp

Expected behavior
I expect the container to download the model and serve it.

It downloads it and convert it to safetensors. Depending on your disk speed this can take a while (and RAM + swap).
safetensors is required for sharding, and to ease the maintenance it's done by default.
If you're using some cache, this steps onkly happens once though.
And you should have some logs about what is happening.
You could try -e HF_HUB_ENABLE_HF_TRANSFER=0 to disable the fast download and see what's happening during the download.

I waited over the weekend, the pod was online for 3 days. I cannot imagine it would take that long.

What are the IO throughputs of the disk associated with your PVC storageclass?


merge master into develop

A common workflow for updating master is to merge master into develop, then merge develop back into master. This is an effort to keep master "clean."

https://github.com/opendifferentialprivacy/smartnoise-core/tree/324_merge_master_to_develop


[Question]: error: Could not find: io.github.jan-tennert.supabase/postgrest-kt-iossimulatorarm64

General info

[X] I checked the troubleshooting page for similar problems

What is your question?
Adding the dependency io.github.jan-tennert.supabase:postgrest-kt:VERSION is crashing on ios saying "error: Could not find: io.github.jan-tennert.supabase/postgrest-kt-iossimulatorarm64/1.3.0-rc-2"
Is there any way to fix this ?

What do you mean crashing? On import or when running the app? Also how is your project structured? The dependency is not missing on maven central. Can you share your build file?

No, ios is supported. There is no ios target in the demos because I cant run ios apps for testing. Is this the full error?

I've just fixed the issue, the version 1.2.0 wasn't compatible with kotlin 1.8.21

Okay great! Do you need any further help?

Right now I'm trying to use gotrue for auth,
apiClient.gotrue.signUpWith(Email) {
  email =<EMAIL_ADDRESS>  password = "pass"
}

But I'm getting this error "(POST) failed with message: Failed to connect to localhost/<IP_ADDRESS>:443", there's any particular reason for that ?

Did you add the internet intent?

I do also have an error on iOS, I've the internet permission on Android
NSErrorFailingURLStringKey=https://localhost/auth/v1/token?grant_type=password&redirect_to=https%3A%2F%2Fbe-served.com, NSErrorFailingURLKey=https://localhost/auth/v1/token?grant_type=password&redirect_to=https%3A%2F%2Fbe-served.com, _kCFStreamErrorDomainKey=1}

Okay, I assume you have your correct supabase url in the supabase client? Which Ktor engines are you using?

Yeah

I've just double check, the supabase url is correct https://.supabase.co

Is there anykind of config I need to do in order to make it work
createSupabaseClient(
  supabaseKey = BuildConfig.SUPABASE_TEST_API_KEY,
  supabaseUrl = BuildConfig.SUPABASE_TEST_URL,
  builder = {
    install(Postgrest)
    install(GraphQL)
    install(GoTrue)
  }
)

No that seems right. Localhost is fallback url for internet problems, did you test this on an emulated device?
(Closing issue as this is off-topic)

@eric-ampire Do you use the CIO ktor engine? Maybe that's doing some trouble, I also had a similar problem when I used this engine

Yeah I've used that engine

Try OkHttp for Android and Darwin for IOS, maybe that will help