Building Hello World Android apk using Buildozer on Mac got IOError: [Errno socket error] [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:726)

Versions

Python: 2.7.10
OS: MacOS 10.12.6
Kivy: 1.10.0
Kivy installation method: Using The Kivy.app

Description
Trying to compile a simple Hello World kivy code into an Android apk via Buildozer (v0.35dev) on my MacOS. main.py kivy app works fine on Kivy desktop and Kivy Launcher on Android. But Buildozer returned the following error when running "buildozer android debug" and couldn't produce the apk:
IOError: [Errno socket error] [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:726)
Code
import kivy
kivy.require('1.0.0')

from kivy.app import App
from kivy.uix.button import Button

class MyApp(App):
    def build(self):
        return Button(text='Hello World')

if __name__ in ('__android__', '__main__'):
    MyApp().run()

Logs
# Check configuration tokens
# Ensure build layout
# Check configuration tokens
# Preparing build
# Check requirements for android
# Search for Git (git)
#  -> found at /usr/bin/git
# Search for Cython (cython)
#  -> found at /Library/Frameworks/Python.framework/Versions/2.7/bin/cython
# Search for Java compiler (javac)
#  -> found at /System/Library/Frameworks/JavaVM.framework/Versions/A/Commands/javac
# Search for Java keytool (keytool)
#  -> found at /System/Library/Frameworks/JavaVM.framework/Versions/A/Commands/keytool
# Install platform
# Run 'pip install -q --user "appdirs" "colorama>=0.3.3" "sh>=1.10,<1.12.5" "jinja2" "six"'
# Cwd None
The directory '/Users/cck/Library/Caches/pip/http' or its parent directory is not owned by the current user and the cache has been disabled. Please check the permissions and owner of that directory. If executing pip with sudo, you may want sudo's -H flag.
The directory '/Users/cck/Library/Caches/pip' or its parent directory is not owned by the current user and caching wheels has been disabled. check the permissions and owner of that directory. If executing pip with sudo, you may want sudo's -H flag.
# Apache ANT found at /Users/cck/.buildozer/android/platform/apache-ant-1.9.4
# Android SDK found at /Users/cck/.buildozer/android/platform/android-sdk-20
# Android NDK found at /Users/cck/.buildozer/android/platform/android-ndk-r9c
# Check application requirements
# Check garden requirements
# Compile platform
# Run '/Library/Frameworks/Python.framework/Versions/2.7/Resources/Python.app/Contents/MacOS/Python -m pythonforandroid.toolchain create --dist_name=helloworld --bootstrap=sdl2 --requirements=kivy --arch armeabi-v7a --copy-libs --color=always --storage-dir=/Users/cck/OneDrive - act/Desk/kivy/hello world/.buildozer/android/platform/build'
# Cwd /Users/cck/OneDrive - act/Desk/kivy/hello world/.buildozer/android/platform/python-for-android-new-toolchain
[INFO]:    Will compile for the following archs: armeabi-v7a
[INFO]:    Found Android API target in $ANDROIDAPI
[INFO]:    Available Android APIs are (19)
[INFO]:    Requested API target 19 is available, continuing.
[INFO]:    Found NDK dir in $ANDROIDNDK
[INFO]:    Got NDK version from $ANDROIDNDKVER
[INFO]:    Using Google NDK r9c
[INFO]:    Found virtualenv at /Library/Frameworks/Python.framework/Versions/2.7/bin/virtualenv
[INFO]:    ccache is missing, the build will not be optimized in the future.
[INFO]:    Found the following toolchain versions: ['4.6', '4.8', 'clang3.3']
[INFO]:    Picking the latest gcc toolchain, here 4.8
[WARNING]: Missing executable: autoconf is not installed
[WARNING]: Missing executable: automake is not installed
[WARNING]: Missing executable: libtoolize is not installed
[INFO]:    No existing dists meet the given requirements!
[INFO]:    No dist exists that meets your requirements, so one will be built.
[INFO]:    Found multiple valid dependency orders:
[INFO]:        ['hostpython2', 'sdl2_image', 'sdl2_mixer', 'sdl2_ttf', 'python2', 'sdl2', 'six', 'pyjnius', u'kivy']
[INFO]:        ['hostpython3crystax', 'sdl2_image', 'sdl2_mixer', 'sdl2_ttf', 'python3crystax', 'sdl2', 'six', 'pyjnius', u'kivy']
[INFO]:        ['hostpython2', 'pygame_bootstrap_components', 'python2', 'sdl', 'six', 'pygame', 'pyjnius', u'kivy']
[INFO]:    Using the first of these: ['hostpython2', 'sdl2_image', 'sdl2_mixer', 'sdl2_ttf', 'python2', 'sdl2', 'six', 'pyjnius', u'kivy']
[INFO]:    The selected bootstrap is sdl2_gradle
[INFO]:    # Creating dist with sdl2_gradle bootstrap
[INFO]:    Dist will have name helloworld and recipes (kivy)
[INFO]:    Dist will also contain modules () installed from pip
[INFO]:    -> running cp -r /Users/cck/OneDr...(and 227 more)
[INFO]:    -> directory context /Users/cck/OneDrive/build/bootstrap_builds/sdl2_gradle-python2
[INFO]:    <- directory context /Users/cck/OneDrive - act/Desk/kivy/hello world/.buildozer/android/platform/python-for-android-new-toolchain
[INFO]:    Recipe build order is ['hostpython2', 'sdl2_image', 'sdl2_mixer', 'sdl2_ttf', 'python2', 'sdl2', 'six', 'pyjnius', u'kivy']
[INFO]:    # Downloading recipes
[INFO]:    Downloading hostpython2
[INFO]:    -> running mkdir -p /Users/cck/One...(and 26 more)
[INFO]:    -> directory context /Users/cck/OneDrive/packages/hostpython2
[INFO]:    -> running basename https://python.org/ftp...(and 34 more)
[INFO]:    -> running rm -f .mark-Python-2.7.2.tar.bz2
[INFO]:    Downloading hostpython2 from https://python.org/ftp/python/2.7.2/Python-2.7.2.tar.bz2
Traceback (most recent call last):
  File "/Library/Frameworks/Python.framework/Versions/2.7/lib/python2.7/runpy.py", line 174, in _run_module_as_main
    "__main__", fname, loader, pkg_name)
  File "/Library/Frameworks/Python.framework/Versions/2.7/lib/python2.7/runpy.py", line 72, in _run_code
    exec code in run_globals
  File "/Users/cck/OneDrive - act/Desk/kivy/hello world/.buildozer/android/platform/python-for-android-new-toolchain/pythonforandroid/toolchain.py", line 978, in <module>
    main()
  File "/Users/cck/OneDrive - act/Desk/kivy/hello world/.buildozer/android/platform/python-for-android-new-toolchain/pythonforandroid/toolchain.py", line 975, in main
    ToolchainCL()
  File "/Users/cck/OneDrive - act/Desk/kivy/hello world/.buildozer/android/platform/python-for-android-new-toolchain/pythonforandroid/toolchain.py", line 512, in __init__
    getattr(self, args.subparser_name.replace('-', '_'))(args)
  File "/Users/cck/OneDrive - act/Desk/kivy/hello world/.buildozer/android/platform/python-for-android-new-toolchain/pythonforandroid/toolchain.py", line 149, in wrapper_func
    build_dist_from_args(ctx, dist, args)
  File "/Users/cck/OneDrive - act/Desk/kivy/hello world/.buildozer/android/platform/python-for-android-new-toolchain/pythonforandroid/toolchain.py", line 193, in build_dist_from_args
    build_recipes(build_order, python_modules, ctx)
  File "pythonforandroid/build.py", line 551, in build_recipes
  File "pythonforandroid/recipe.py", line 307, in download_if_necessary
  File "pythonforandroid/recipe.py", line 353, in download
  File "pythonforandroid/recipe.py", line 151, in download_file
  File "/Library/Frameworks/Python.framework/Versions/2.7/lib/python2.7/urllib.py", line 245, in retrieve
    fp = self.open(url, data)
  File "/Library/Frameworks/Python.framework/Versions/2.7/lib/python2.7/urllib.py", line 213, in open
    return getattr(self, name)(url)
  File "/Library/Frameworks/Python.framework/Versions/2.7/lib/python2.7/urllib.py", line 443, in open_https
    h.endheaders(data)
  File "/Library/Frameworks/Python.framework/Versions/2.7/lib/python2.7/httplib.py", line 1038, in endheaders
    self._send_output(message_body)
  File "/Library/Frameworks/Python.framework/Versions/2.7/lib/python2.7/httplib.py", line 882, in _send_output
    self.send(msg)
  File "/Library/Frameworks/Python.framework/Versions/2.7/lib/python2.7/httplib.py", line 844, in send
    self.connect()
  File "/Library/Frameworks/Python.framework/Versions/2.7/lib/python2.7/httplib.py", line 1263, in connect
    server_hostname=server_hostname)
  File "/Library/Frameworks/Python.framework/Versions/2.7/lib/python2.7/ssl.py", line 369, in wrap_socket
    _context=self)
  File "/Library/Frameworks/Python.framework/Versions/2.7/lib/python2.7/ssl.py", line 617, in __init__
    self.do_handshake()
  File "/Library/Frameworks/Python.framework/Versions/2.7/lib/python2.7/ssl.py", line 846, in do_handshake
    self._sslobj.do_handshake()
IOError: [Errno socket error] [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:726)
# Command failed: /Library/Frameworks/Python.framework/Versions/2.7/Resources/Python.app/Contents/MacOS/Python -m pythonforandroid.toolchain create --dist_name=helloworld --bootstrap=sdl2 --requirements=kivy --arch armeabi-v7a --copy-libs --color=always --storage-dir=/Users/cck/OneDrive - act/Desk/kivy/hello world/.buildozer/android/platform/build
#
# Buildozer failed to execute the last command
# The error might be hidden in the log above this error
# Please read the full log, and search for it before
# raising an issue with buildozer itself.
# In case of a bug report, please add a full log with log_level = 2

++
have the same problem

It seems like this is caused by TLS1.x being unavailable. The Python 2 version (v2.7.10) that comes with the Kivy.app dmg on Mac OS is tied to an old openssl version (OpenSSL 0.9.8zh 14 Jan 2016). Is there any way to get Kivy to use another version of Python on my Mac OS which has a newer version of openssl (OpenSSL 1.0.2o  27 Mar 2018)?

Try latest Kivy app package.

OSX 10.11.6
Python 2.7.16
Kivy Kivy-1.10.1_osx10.13.5_builtin_python2_r1.dmg
Still a problem. Buildozer output level=2:
  File "pythonforandroid/build.py", line 540, in build_recipes
  File "pythonforandroid/recipe.py", line 293, in download_if_necessary
  File "pythonforandroid/recipe.py", line 339, in download
  File "pythonforandroid/recipe.py", line 154, in download_file
  File "/Library/Frameworks/Python.framework/Versions/2.7/lib/python2.7/urllib.py", line 245, in retrieve
    fp = self.open(url, data)
  File "/Library/Frameworks/Python.framework/Versions/2.7/lib/python2.7/urllib.py", line 213, in open
    return getattr(self, name)(url)
  File "/Library/Frameworks/Python.framework/Versions/2.7/lib/python2.7/urllib.py", line 443, in open_https
    h.endheaders(data)
  File "/Library/Frameworks/Python.framework/Versions/2.7/lib/python2.7/httplib.py", line 1038, in endheaders
    self._send_output(message_body)
  File "/Library/Frameworks/Python.framework/Versions/2.7/lib/python2.7/httplib.py", line 882, in _send_output
    self.send(msg)
  File "/Library/Frameworks/Python.framework/Versions/2.7/lib/python2.7/httplib.py", line 844, in send
    self.connect()
  File "/Library/Frameworks/Python.framework/Versions/2.7/lib/python2.7/httplib.py", line 1263, in connect
    server_hostname=server_hostname)
  File "/Library/Frameworks/Python.framework/Versions/2.7/lib/python2.7/ssl.py", line 369, in wrap_socket
    _context=self)
  File "/Library/Frameworks/Python.framework/Versions/2.7/lib/python2.7/ssl.py", line 599, in __init__
    self.do_handshake()
  File "/Library/Frameworks/Python.framework/Versions/2.7/lib/python2.7/ssl.py", line 828, in do_handshake
    self._sslobj.do_handshake()
IOError: [Errno socket error] [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:727)

Ugly workaround in "/Library/Frameworks/Python.framework/Versions/2.7/lib/python2.7/ssl.py" starting at line 590:
            # create the SSL object
            try:
                self._context.check_hostname = False
                self._context.verify_mode = CERT_NONE
                self._sslobj = self._context._wrap_socket(self._sock, server_side,
                                                          server_hostname, ssl_sock=self)
                if do_handshake_on_connect:

i.e. add these two lines:
                self._context.check_hostname = False
                self._context.verify_mode = CERT_NONE

Then buildozer continues past that failure.

Python: 3.7.4
OS: MacOS 11.2
Kivy: 2.0
The same issue, and adding the two lines into ssl.py, as kcrossen mentioned, can work around the issue!


Is instance created by new MetricsBuilder().Build() threadsafe

I want to use AppMetrics in my ASP.Net Web API 2 by implementing a custom FilterAttribute to count number of requests which satisfy specific conditions. I wonder if instance created by new MetricsBuilder().Build() is threadsafe. Is there any problem if I use it as a static field in the custom FilterAttribute so that all requests will share the same IMetrics instance?

Yes, the same IMetrics instance should be shared by design.


Create API blue-script.

Develop base of main public functions.

I found openai-kotlin it work good for me.


GKE Workload Identity Service Account Failure

Pre-requisites

[X] I have double-checked my configuration
[X] I can confirm the issue exists when I tested with :latest
[X] I have searched existing issues and could not find a match for this bug
[X] I'd like to contribute the fix myself (see contributing guide)

What happened/what did you expect to happen?
When attempting to run a workflow as a service account that is configured for GKE Workload Identity, the Init container fails with the following error:
time="2024-03-11T10:36:37.831Z" level=info msg="Starting Workflow Executor" version=v3.5.5
panic: invalid configuration: no configuration has been provided, try setting KUBERNETES_MASTER environment variable

goroutine 1 [running]:
github.com/argoproj/argo-workflows/v3/cmd/argoexec/commands.checkErr({0x3574f80, 0xc00091c0d8})
        /go/src/github.com/argoproj/argo-workflows/cmd/argoexec/commands/root.go:147 +0x5f
github.com/argoproj/argo-workflows/v3/cmd/argoexec/commands.initExecutor()
        /go/src/github.com/argoproj/argo-workflows/cmd/argoexec/commands/root.go:82 +0x1a5
github.com/argoproj/argo-workflows/v3/cmd/argoexec/commands.loadArtifacts({0x35a2c38?, 0x4dc7e20})
        /go/src/github.com/argoproj/argo-workflows/cmd/argoexec/commands/init.go:27 +0x48
github.com/argoproj/argo-workflows/v3/cmd/argoexec/commands.NewRootCommand.NewInitCommand.func4(0xc000abd200?, {0x2d04f13?, 0x4?, 0x2d04ef7?})
        /go/src/github.com/argoproj/argo-workflows/cmd/argoexec/commands/init.go:17 +0x18
github.com/spf13/cobra.(*Command).execute(0xc000539200, {0xc000697e00, 0x8, 0x8})
        /go/pkg/mod/github.com/spf13/cobra@v1.7.0/command.go:944 +0x863
github.com/spf13/cobra.(*Command).ExecuteC(0xc000538300)
        /go/pkg/mod/github.com/spf13/cobra@v1.7.0/command.go:1068 +0x3a5
github.com/spf13/cobra.(*Command).Execute(...)
        /go/pkg/mod/github.com/spf13/cobra@v1.7.0/command.go:992
github.com/spf13/cobra.(*Command).ExecuteContext(0x35a2c38?, {0x35a2df8?, 0xc000b09f80?})
        /go/pkg/mod/github.com/spf13/cobra@v1.7.0/command.go:985 +0x47
main.main()
        /go/src/github.com/argoproj/argo-workflows/cmd/argoexec/main.go:21 +0x85

This error appears to be originating from client-go functionality. There is an issue raised against client-go that describes known problems when using the library with workload identity, and some potential work arounds.
Has anyone been able to use Argo Workflows and Workload Identity? Does anyone know of a workaround? Or, could someone suggest how best to go about incorporating some of the steps suggested in the client-go issue?
Version
v3.5.5
Paste a small workflow that reproduces the issue. We must be able to run the workflow; don't enter a workflows that uses private images.

Using Google Kubernetes Engine, create a service account configured to use Workload Identity (this involves a number of steps, but involves annotating the service account with something similar to iam.gke.io/gcp-service-account: service-account-name@gcpProject.iam.gserviceaccount.com).
Deploy a simple workload (I used https://github.com/argoproj/argo-workflows/blob/v3.5.5/examples/dag-diamond.yaml) updated to run as the service account above.

e.g.
# The following workflow executes a diamond workflow
#
#   A
#  / \
# B   C
#  \ /
#   D
apiVersion: argoproj.io/v1alpha1
kind: Workflow
metadata:
  generateName: dag-diamond-
spec:
  entrypoint: diamond
  serviceAccountName: test ## This is the modified line
  templates:
  - name: diamond
    dag:
      tasks:
      - name: A
        template: echo
        arguments:
          parameters: [{name: message, value: A}]
      - name: B
        depends: "A"
        template: echo
        arguments:
          parameters: [{name: message, value: B}]
      - name: C
        depends: "A"
        template: echo
        arguments:
          parameters: [{name: message, value: C}]
      - name: D
        depends: "B && C"
        template: echo
        arguments:
          parameters: [{name: message, value: D}]

  - name: echo
    inputs:
      parameters:
      - name: message
    container:
      image: alpine:3.7
      command: [echo, "{{inputs.parameters.message}}"]

Logs from the workflow controller
time="2024-03-11T10:36:36.724Z" level=info msg="Processing workflow" Phase= ResourceVersion=395612986 namespace=test workflow=dag-diamond-m5gjk
time="2024-03-11T10:36:36.730Z" level=info msg="Task-result reconciliation" namespace=test numObjs=0 workflow=dag-diamond-m5gjk
time="2024-03-11T10:36:36.730Z" level=info msg="Updated phase  -> Running" namespace=test workflow=dag-diamond-m5gjk
time="2024-03-11T10:36:36.730Z" level=warning msg="Node was nil, will be initialized as type Skipped" namespace=test workflow=dag-diamond-m5gjk
time="2024-03-11T10:36:36.730Z" level=info msg="was unable to obtain node for , letting display name to be nodeName" namespace=test workflow=dag-diamond-m5gjk
time="2024-03-11T10:36:36.730Z" level=info msg="DAG node dag-diamond-m5gjk initialized Running" namespace=test workflow=dag-diamond-m5gjk
time="2024-03-11T10:36:36.730Z" level=warning msg="was unable to obtain the node for dag-diamond-m5gjk-3691877333, taskName D"
time="2024-03-11T10:36:36.730Z" level=warning msg="was unable to obtain the node for dag-diamond-m5gjk-3591211619, taskName B"
time="2024-03-11T10:36:36.730Z" level=warning msg="was unable to obtain the node for dag-diamond-m5gjk-3607989238, taskName A"
time="2024-03-11T10:36:36.730Z" level=warning msg="was unable to obtain the node for dag-diamond-m5gjk-3607989238, taskName A"
time="2024-03-11T10:36:36.730Z" level=info msg="All of node dag-diamond-m5gjk.A dependencies [] completed" namespace=test workflow=dag-diamond-m5gjk
time="2024-03-11T10:36:36.730Z" level=warning msg="Node was nil, will be initialized as type Skipped" namespace=test workflow=dag-diamond-m5gjk
time="2024-03-11T10:36:36.731Z" level=info msg="Pod node dag-diamond-m5gjk-3607989238 initialized Pending" namespace=test workflow=dag-diamond-m5gjk
time="2024-03-11T10:36:36.750Z" level=info msg="Created pod: dag-diamond-m5gjk.A (dag-diamond-m5gjk-echo-3607989238)" namespace=test workflow=dag-diamond-m5gjk
time="2024-03-11T10:36:36.751Z" level=warning msg="was unable to obtain the node for dag-diamond-m5gjk-3591211619, taskName B"
time="2024-03-11T10:36:36.751Z" level=warning msg="was unable to obtain the node for dag-diamond-m5gjk-3574434000, taskName C"
time="2024-03-11T10:36:36.751Z" level=warning msg="was unable to obtain the node for dag-diamond-m5gjk-3574434000, taskName C"
time="2024-03-11T10:36:36.751Z" level=warning msg="was unable to obtain the node for dag-diamond-m5gjk-3675099714, taskName E"
time="2024-03-11T10:36:36.751Z" level=warning msg="was unable to obtain the node for dag-diamond-m5gjk-3675099714, taskName E"
time="2024-03-11T10:36:36.751Z" level=warning msg="was unable to obtain the node for dag-diamond-m5gjk-3691877333, taskName D"
time="2024-03-11T10:36:36.751Z" level=warning msg="was unable to obtain the node for dag-diamond-m5gjk-3591211619, taskName B"
time="2024-03-11T10:36:36.751Z" level=warning msg="was unable to obtain the node for dag-diamond-m5gjk-3691877333, taskName D"
time="2024-03-11T10:36:36.751Z" level=info msg="TaskSet Reconciliation" namespace=test workflow=dag-diamond-m5gjk
time="2024-03-11T10:36:36.751Z" level=info msg=reconcileAgentPod namespace=test workflow=dag-diamond-m5gjk
time="2024-03-11T10:36:36.761Z" level=info msg="Workflow update successful" namespace=test phase=Running resourceVersion=395612989 workflow=dag-diamond-m5gjk
time="2024-03-11T10:36:46.724Z" level=info msg="Processing workflow" Phase=Running ResourceVersion=395612989 namespace=test workflow=dag-diamond-m5gjk
time="2024-03-11T10:36:46.725Z" level=info msg="Task-result reconciliation" namespace=test numObjs=0 workflow=dag-diamond-m5gjk
time="2024-03-11T10:36:46.725Z" level=info msg="Pod failed: Error (exit code 2): invalid configuration: no configuration has been provided, try setting KUBERNETES_MASTER environment variable" displayName=A namespace=test pod=dag-diamond-m5gjk-echo-3607989238 templateName=echo workflow=dag-diamond-m5gjk
time="2024-03-11T10:36:46.725Z" level=info msg="marking node as failed since init container has non-zero exit code" namespace=test new.phase=Failed workflow=dag-diamond-m5gjk
time="2024-03-11T10:36:46.725Z" level=info msg="node changed" namespace=test new.message="Error (exit code 2): invalid configuration: no configuration has been provided, try setting KUBERNETES_MASTER environment variable" new.phase=Failed new.progress=0/1 nodeID=dag-diamond-m5gjk-3607989238 old.message= old.phase=Pending old.progress=0/1 workflow=dag-diamond-m5gjk
time="2024-03-11T10:36:46.726Z" level=warning msg="was unable to obtain the node for dag-diamond-m5gjk-3691877333, taskName D"
time="2024-03-11T10:36:46.726Z" level=warning msg="was unable to obtain the node for dag-diamond-m5gjk-3591211619, taskName B"
time="2024-03-11T10:36:46.726Z" level=warning msg="was unable to obtain the node for dag-diamond-m5gjk-3591211619, taskName B"
time="2024-03-11T10:36:46.726Z" level=info msg="Skipped node dag-diamond-m5gjk-3591211619 initialized Omitted (message: omitted: depends condition not met)" namespace=test workflow=dag-diamond-m5gjk
time="2024-03-11T10:36:46.726Z" level=warning msg="was unable to obtain the node for dag-diamond-m5gjk-3574434000, taskName C"
time="2024-03-11T10:36:46.726Z" level=warning msg="was unable to obtain the node for dag-diamond-m5gjk-3574434000, taskName C"
time="2024-03-11T10:36:46.726Z" level=info msg="Skipped node dag-diamond-m5gjk-3574434000 initialized Omitted (message: omitted: depends condition not met)" namespace=test workflow=dag-diamond-m5gjk
time="2024-03-11T10:36:46.726Z" level=warning msg="was unable to obtain the node for dag-diamond-m5gjk-3675099714, taskName E"
time="2024-03-11T10:36:46.726Z" level=warning msg="was unable to obtain the node for dag-diamond-m5gjk-3675099714, taskName E"
time="2024-03-11T10:36:46.727Z" level=info msg="Skipped node dag-diamond-m5gjk-3675099714 initialized Omitted (message: omitted: depends condition not met)" namespace=test workflow=dag-diamond-m5gjk
time="2024-03-11T10:36:46.727Z" level=warning msg="was unable to obtain the node for dag-diamond-m5gjk-3691877333, taskName D"
time="2024-03-11T10:36:46.727Z" level=info msg="Skipped node dag-diamond-m5gjk-3691877333 initialized Omitted (message: omitted: depends condition not met)" namespace=test workflow=dag-diamond-m5gjk
time="2024-03-11T10:36:46.727Z" level=info msg="Outbound nodes of dag-diamond-m5gjk set to [dag-diamond-m5gjk-3691877333]" namespace=test workflow=dag-diamond-m5gjk
time="2024-03-11T10:36:46.727Z" level=info msg="node dag-diamond-m5gjk phase Running -> Failed" namespace=test workflow=dag-diamond-m5gjk
time="2024-03-11T10:36:46.727Z" level=info msg="node dag-diamond-m5gjk finished: 2024-03-11 10:36:46.727351929 +0000 UTC" namespace=test workflow=dag-diamond-m5gjk
time="2024-03-11T10:36:46.727Z" level=info msg="TaskSet Reconciliation" namespace=test workflow=dag-diamond-m5gjk
time="2024-03-11T10:36:46.727Z" level=info msg=reconcileAgentPod namespace=test workflow=dag-diamond-m5gjk
time="2024-03-11T10:36:46.727Z" level=info msg="Updated phase Running -> Failed" namespace=test workflow=dag-diamond-m5gjk
time="2024-03-11T10:36:46.727Z" level=info msg="Marking workflow completed" namespace=test workflow=dag-diamond-m5gjk
time="2024-03-11T10:36:46.732Z" level=info msg="cleaning up pod" action=deletePod key=test/dag-diamond-m5gjk-1340600742-agent/deletePod
time="2024-03-11T10:36:46.736Z" level=info msg="Workflow update successful" namespace=test phase=Failed resourceVersion=395613091 workflow=dag-diamond-m5gjk
time="2024-03-11T10:36:46.745Z" level=info msg="cleaning up pod" action=labelPodCompleted key=test/dag-diamond-m5gjk-echo-3607989238/labelPodCompleted

Logs from in your workflow's wait container
N/A - wait container is not yet running. See init container logs above.

Our workflows (using v3.5.5) work well on GKE with workload identity federation.
Could you show what your workflow-controller-configmap and your service accounts look like?

Hi @partomatl - thanks for confirming that GKE and workload identity is running OK for you.
Digging a little deeper, I realised that I had automountServiceAccountToken: false set on the service account I was attempting to use. This was stopping the SA access token being mounted within the container resulting in the error above. Removing this and all works fine.


set_cookie()

hi.i think there is a bug in codeigniter3.1.8 in system/core/input.php , set_cookie function, in line 408, where i think $prefix.$name should be $name in setcookie function.

You are wrong. Look carefully at where the value of $prefix comes from and you will see it will be one of the following;

The value passed to set_cookie
The config.php item 'cookie_prefix' value
An empty string


Add implicitComponents option. Fixes #24

Added support for the implicitComponents option as detailed here:
https://github.com/postcss/postcss-bem-linter#define-components-and-utilities-implicitly-based-on-their-filename

Failing tests seem unrelated to my change - it appears to be the use of null instead of undefined in the last test. Let me know if you'd like me to change that as I don't really know much about Stylelint.

@jrwebdev: Are you interested in taking over maintenance of this plugin? I do not use it currently, so it would be better off in the hands of an active user.

implicitComponents doesn't have to be an array, it can be just a string too.

@davidtheclark I'm probably not the best person to pick this up as I'm not too familiar with Stylelint and I was just evaluating it for my company for now. But if we do pick it up I could maybe take it on.
@jackwilsdon this perhaps highlights the above point of me not knowing it too well - I assumed that the array would validate one of _.isBoolean, _.isString` or the function for testing for an array of strings. Seemed to work fine when I manually tested it but I'll take another look.

Oops, I missed the bit where you passed _.isString! Sorry! 😆 😜

@jrwebdev: This PR looks fine to me. Can you please try merging in the latest version of master? I'm hoping that will fix this test failure you're seeing.

Hi gents, this pull request looks ready to go. I'd be keen to see it merged :)

Published in 1.1.0. Thanks @jackwilsdon!

Awesome guys, thanks!


Exchange volumeMax with forcedVolume

Is your feature request related to a problem? Please describe.
While the volumeMax-property is very useful, it's not very satisfying as a customer using the app, because it is extremely loud.
And setting volumeMax to false may comes with the risk of having the volume set at zero and therefore no alarm ringing.
Describe the solution you'd like
Change the volumeMax property to a forcedVolume? property, where the programmer can specify a number from 0.0 (silent) to 1.0 (maximum volume). This way, the volume can be forced to e.g. 0.7, which is loud enough to get notified.
Ideally, make the forcedVolume nullable, so when null, the device-volume is used.

Hi @maxx-st
Thanks for your interest in the package.
Yes this would be very useful. I was thinking adding this feature very soon. I'll let you know when it's available.

Great to hear!
While we are at it: Could you add an additional attribute for showSystemUI, so the volume-controller can be hidden from the user?

Hi @maxx-st
Thanks for you feedback. I'm going to start developing these changes now but they might be released later for version 3.0.0 because it will involve breaking changes.
I'll keep you updated in this issue.


React App that search and display Github Users

@Kritika30032002  I want to work on this issue #6 can you assign this to me.

@maida12  r u working ?

Yes, It is completed.

Done


Pipe output from gulp-mustache in as webpack entry point

The code of the Webpack entry point of my JavaScript app varies for different Gulp tasks, so I am putting it through a Mustache template before piping it to Webpack (using gulp-mustache and gulp-webpack):
gulp.task('webpack', function() {
  return gulp.src('./index.js.mustache')
    .pipe(mustache({
      suffix: '.min.js'
    }))
   .pipe(webpack(config))
   .pipe(gulp.dest('dist/js'));
});

Unfortunately this doesn't work as expected. gulp-webpack seems to use the original filename (index.js.mustache) rather than the new contents of the file, so the changes made by the Mustache template are ignored.
In order to get it to work I have to say:
gulp.task('webpack', function() {
  return gulp.src('./index.js.mustache')
    .pipe(mustache({
      suffix: '.min.js'
    }))
   .pipe(rename('index.js'))
   .pipe(gulp.dest('.'))
   .pipe(webpack(config))
   .pipe(gulp.dest('dist/js'));
});

It seems wrong to me that I have to use an intermediate file though. Is there some way to get gulp-webpack to use the stream properly?

You can modify the name of the entry point using https://github.com/shama/vinyl-named
Or use a mustache webpack loader and handle the compilation there.


set pytest option --import-mode=importlib

Failing CI here, but not in the feature branch I created the PR with: https://github.com/RossBencina/prapti/actions/runs/5567559541
Strange.


Flattening noDeploy arrays from external files

serverless-python-requirements enables packaging large python libraries in layers and specifying them in noDeploy so as to avoid redeploying these large libraries along with the functions as shown here.
I have a file containing the layer arn and noDeploy for such libraries in a file and I would like to make every other lambda function refer to that file.
Example of such a file - python_req.yml -
pandas:
    arn: <---->
    noDeploy:
      - numpy
      - pandas
      - python-dateutil
      - pytz
      - six
requests:
    arn: <---->
    noDeploy:
      - certifi
      - chardet
      - idna
      - requests
      - urllib3

Assuming python_req.yml exists a level above a folder named my-sample with a function hello to which I have added the following layers
layers:
  - ${file(../python-req.yml):pandas.arn}
  - ${file(../python-req.yml):requests.arn}

I would like to also combine the noDeploy list of pandas and requests
custom:
  pythonRequirements:
    dockerizePip: non-linux
    noDeploy:
      - ${file(../python-req.yml):pandas.noDeploy}
      - ${file(../python-req.yml):requests.noDeploy}

doing this makes custom.pythonRequirements.noDeploy an array of arrays
[['numpy', 'pandas', 'python-dateutil', 'pytz', 'six'], ['certifi', 'chardet', 'idna', 'requests', 'urllib3']]
and serverless-python-requirements expects noDeploy to be an array and packages all these dependencies along with the function instead of ignoring them
Is there a way flatten arrays referenced from external file in serverless.yml or a way to make serverless-python-requirements parse array of arrays for noDeploy.

Figured out I can use serverless.js with lodash. Closing this


fix kubebuilder CRD code generation

This PR addresses the current broken kubebuilder state which will aid us in adding additional resource types for the operator to be able to manage in the future.
WIP

For reference, currently kubebuilder cannot handle the package root being anything but the actual project root. Thus we must have our main.go there - we can make it more modular but the file must be there. Looks like Kubebuilder issue #932 represents functionality we'd need to point it elsewhere.


Keys for Play Store release and Github Releases APK

Hey there! I'm noticing that when I update the app via the Github Releases APK, it also shows up as updated on the Play Store (or Aurora Store, more specifically). Does the Play Store version and the version on Github use the same signing keys (which I assume would be your keys instead of Play app signing)?
In that case, what about the two versions in every release? there seems to be the release and foss-release APKs. Are those signed with the same keys? Are there any functional differences between the two?

Hey there! I'm noticing that when I update the app via the Github Releases APK, it also shows up as updated on the Play Store (or Aurora Store, more specifically). Does the Play Store version and the version on Github use the same signing keys (which I assume would be your keys instead of Play app signing)?
In that case, what about the two versions in every release? there seems to be the release and foss-release APKs. Are those signed with the same keys? Are there any functional differences between the two?

All versions have the same applicationId, which is the UID that the Play Store uses to determine uniqueness.
Functionally, there are no differences between FOSS/regular versions. The regular version includes an In-App-Update feature, which is currently unused.


"Hide Authentication and provide your own pre-generated api-key" feature is not working

Using a pre generated auth key as detailed in the example https://github.com/mrin9/RapiDoc/blob/master/docs/examples/example8.html doesn't seem to work!
After setting the key and hitting the TRY button, the Authentication still shows as No API key applied and there is no api-key passed in the headers as shown in the screenshot below.

Here is the curl request showing no api-key in header:
curl -X PUT "https://petstore.swagger.io/v2/pet" \
 -H "Content-Type: application/json" \
 -d '{"id":0,"category":{"id":0,"name":"string"},"name":"doggie","photoUrls":["string"],"tags":[{"id":0,"name":"string"}],"status":"available"}' \

Let me know if there is any setting that I'm missing?

thanks for bringing it up.
Pickup the latest build from dist folder to test it.
Also make sure that you are providing all the 3 attributes

api-key-location
api-key-name
api-key-value (default it to hyphen(-) if you want to provide it later using JavaScript)

checkout this example for usage
https://mrin9.github.io/RapiDoc/examples/api-key.html


ng-model initially set and currency-symbol attribute - initially currency symbol doesn't refresh to valid.

Hello this is my first post to github. I found a bug. When i set ng-model to value in app controller and use ng-currency with currency symbol in input box, currency symbol initially is not set.
It works after clicking on input, so touch event is called.
I tried changing sequence in html input attribute, so ng-currency-symbol=" " went before ng-model.
I see the solution in my app by forcing click on input after page loads. Quite, it seems unellegant and doesn't solve problem for other users.
How can i repair this? I would like to have my first contribution to github by adding a patch to this code fixing this, but i don't know how to do this( forks, pull requests, commits). Is there any faq to this?

Hi @pacior!
Welcome to github collaboration! :) Could you send me some relevant code so I can check it? If you need to submit a patch you should fork the project, clone it in your pc, do modifications, commit and push to your repository, then go to github and do a "PR" or "Push Request", here you have more information: https://help.github.com/articles/using-pull-requests/
Thanks!

I have ng-repeat that is updated in another ng-repeat, so i have table with rows and adding row to a table creates a form in which you can add subrows of parent row. And in this row there are fields with ng-currency directives. First i'll paste some chunk of codes so it should stay clear:

I am running function after adding row, to init $scope.params.podtowar[tIndex].Qty field which is 1 usually.
$scope.params.podtowar[tIndex].Qty = $scope.towaryEntries[tIndex].Qty;
The subform generated on each row, column with Quantity looks like:
<input width="55" style="width: 55px" id="ilosc{{$index}}" name="ilosc{{$index}}" placeholder="Quantity" ng-currency currency-symbol=" " max="9999999999" ng-model="params.podtowar[$index].Qty" ng-pattern="PricePattern">

The problem is that initially it is 1.00 zł and should be 1.00.
1.00 appears when i click on input and then click somewhere else.

Yes, I can reproduce it at: http://plnkr.co/edit/nF7KWjuvub3UtY4YdCCP?p=preview
I'm checking it! Thanks!

Please, update to ng-currency v0.8.9.
Main problem was angular parameter, if you do currency-symbol=" ", angular take it as empty, so currency symbol was undefined inside directive, please use: currency-symbol="{{' '}}" to get it right.
Feel free to use http://plnkr.co/edit/nF7KWjuvub3UtY4YdCCP?p=preview as sandbox ;)
If you need further assistance about this issue, please reopen it.


Use ngpackagr potentially for packaging

Create angular package using https://github.com/ng-packagr/ng-packagr

angular libraries don't support dynamic imports which is heavily used in altair, making this impossible for now.


Project status?

Hi!
Thank you for creating this, it's exactly what I was looking for :pray:
But looking at the repo, your last commit is 4 years old and you say it's WIP and not recommended for production ^^
So I guess it's probably not working with the current Nest version...
What is the current status?
Looking at the code, there's not so much, so maybe I could adapt it or just get some inspiration and build this in my own project.
What do you think? Any advice?

Yep, haven't really worked on this in a long time.
You could definitely incorporate this into your application—as you said there's not much code required to make that week.
There may be some other approaches or better packages today.

Found https://github.com/pmb0/express-tsx-views, but not sure how it's maintained as well.
Will continue to investigate, thanks for your answer.


demo of getTransaction wrong

gagliardetto/solana-go/rpc/examples/getTransaction/getTransaction.go
panic: not found

There is no SLA on transaction history for testnet..
Folder with examples just show how to use SDK


#[allow(where_clauses_object_safety)] in src/lib.rs

Issue: #150
Resolution for allow until lint is either turned error, or lint is resolved

Thanks for this, @andrewpollack! It looks good; is there a reason you closed it?

Thanks for this, @andrewpollack! It looks good; is there a reason you closed it?

Thanks for this, @andrewpollack! It looks good; is there a reason you closed it?

@joshlf introducing the allow wasn't successfully resolving the warning. The allow seemingly needs to be placed where the trait object is created, even though the lint is firing on the trait definition (i.e. where the crate is being used, as opposed to the source itself). I closed the PR since I wasn't successful in repressing the warning
https://github.com/rust-lang/rust/issues/102546 captures this as well

That said, if there's another way I can approach to resolve this, I'd be happy to do so! For the time being, we're holding off on changes in our codebase firing from this lint until upstream discussions settle down (see comment threads on https://github.com/rust-lang/rust/issues/106247 )

Ah got it, thanks for the clarification! I likely won't have time to work on this for the next few weeks, but I've marked your issue as a release blocker for 0.7.0, so it'll get resolved before that release.

Awesome, thank you @joshlf!

np!


Improved page title

Improved page title to reduce ambiguity. Fixes #7941
Summary
Describe your changes here.
Fixes #Issue_Number (if available)

How about adding a note under the section Prerequisites with Visual Studio 2017, which states something like?:

Visual studio is a preferred development environment for .Net and is not required for running .net based applications.

Let me think on this one. I don't think we should say that Visual Studio is preferred.

@mairaw I agree. Saying Visual Studio is preferred is saying that others are not, which is untrue.

Thanks for trying to tackling that issue @rparakhiya. I've made some changes in PR #9419  to update for 2.2 while at the same time trying to fix this issue. Please take a look.
For that reason, I'm closing this PR.


MAINT: Don't need contextlib2 in our py3 envs

(Technically, I think we'd need it in python 3.3. Oh well. 🤷 )

Coverage decreased (-0.0007%) to 88.249% when pulling 4ceaf7c0fe6f01796f34c1fdcaa12a432e0f34d8 on contextlib-compat into ff0b09db2fd9b18fe7dbef9057507f272dd3778f on master.


chore: Update audioplayers constraint

Description

This PR updates the audioplayers version for flame_audio.

Checklist

[x] I have followed the Contributor Guide when preparing my PR.
[ ] I have updated/added tests for ALL new/updated/fixed functionality.
[ ] I have updated/added relevant documentation in docs and added dartdoc comments with ///.
[ ] I have updated/added relevant examples in examples or docs.

Breaking Change?

[ ] Yes, this PR is a breaking change.
[x] No, this PR is not a breaking change.

Related Issues

Closes #3151 and #3157

I thought there were some breaking changes we had to adhere to, but seemingly not? 🤔

I thought there were some breaking changes we had to adhere to, but seemingly not? 🤔

I didn't notice any breaking change in flame_audio, but I am getting some conflicts with multiple definitions of the Split class.

I thought there were some breaking changes we had to adhere to, but seemingly not? 🤔

I didn't notice any breaking change in flame_audio, but I am getting some conflicts with multiple definitions of the Split class.

Aaah right, that is due to the devtools extension, I'll migrate that when I get home from Google I/O (the name changed in the new version).

Aaah right, that is due to the devtools extension, I'll migrate that when I get home from Google I/O (the name changed in the new version).

Okay, I'll leave it up to you then. I tried hiding the other definition but now it fails analyze saying Split is not exported.

Okay, I'll move that change into a separate PR tomorrow

Moved the dart sdk bump to #3160


CSS and JS changed to CDN's and removed files from theme folder to lighten it more ;)

I will be creating a material design theme for this as well at some point so if you want a pul req for it to let me no ;)

Thanks for the contribution.  Will review it in depth and hopefully get it merged soon.
As for the Material Design theme, I'd be more than happy to add it to the project.  Directory Lister could really use a few additional themes for users to choose from.  I look forward to that PR.


allow verification skipping

skip verification if VERIFYING_KEY is not set

Issue #596

Can you check test cases?

Hi @2ykwang , failing tests are related to the latest releases of DRF and Django and are not related to this PR (are import errors that need to be fixed in DRF).

thanks!


Updated_Testbench_Template

Have modified the sky130hvl.spice file as per the updated file provided by Pranav with Vref analog block schematic updated
Testbench template has been modified. Have made the relevant comments throughout the code.

@ayushman22git Can you please fix the pre-commit.

@ayushman22git You need to run pre-commit run --all-files before git add command. This will fix the pre-commit issue


Where is the actual project content?

I have got the training material from oreilly. In the description usually there would be a link to the course content either as a github link or direct download but for this there is none.
Could you plz guide how to get the full training content for download/fork?

https://github.com/packtpublishing/the-complete-react-developer-course-with-hooks-and-redux-

https://github.com/packtpublishing/the-complete-react-developer-course-with-hooks-and-redux-


Is there any way to change the persistState  key based on the route

Is there any way we can pass the key dynamically, i am working on an app where same component are used in multiple tabs and need to store the user selections of this component for each tab with different key.
Right now i see the we are doing persistState as below with hard-coded key
persistState('counter', { key: 'ng2-redux/examples/counter' })
I need to change the key based on the tab (implemented based on routes).
Let me know if i can do this with ng2-redux?

Hi @chinra02
persistState is actually provided by redux-localstorage 3rd-party library, and is configurable with a range of options.  Essentially the 'key' you see there is just a namespace prefix for your data in local storage; what actually gets persisted is the contents of your redux store.
You can have it persist the full store, or just parts of it as you wish: see their documentation for details: https://www.npmjs.com/package/redux-localstorage
So in your case I would save the settings for each tab in different parts of the store and let redux-localstorage persist the relevant portion of the store.

Thanks for your reply. good idea !!!


Replace maven plugins validation with project keeper validation.

We want to remove validation of some maven plugins from here and check that project keeper plugin exists in the pom file instead.

version > 0.5.0


installer: remove tarball option

This feature will no longer be supported with the deprecation of the Python agent and seemed to be broken.
Closes https://github.com/keylime/keylime/issues/1108
Closes https://github.com/keylime/keylime/issues/689

Codecov Report

Merging #1134 (571cbe1) into master (f969d39) will not change coverage.
The diff coverage is n/a.

:exclamation: Current head 571cbe1 differs from pull request most recent head dee4e61. Consider uploading reports for the commit dee4e61 to get more accurate results

Additional details and impacted files

Flag
Coverage Δ

packit-e2e
72.41% <ø> (ø)

testsuite
54.13% <ø> (ø)

unittests
14.61% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.


Can not find addon in HACS

Hello,
I can not install this addon with HACS. I use the newest version of HA and HACS.

Please read https://github.com/RomRider/apexcharts-card/issues/28 :)


Add a test case for not having more

good thing it was already working 🙃

Warnings

:warning:
The README has not been updated. Please update the README.

Messages

:book:
Could not find any browser results.

  Generated by :no_entry_sign: dangerJS against 41bc0ba179cdd40e7ac8af014a5557974fccafda


Did anyone experience a chopping rendering of video image like this?

Further checking, I found this has nothing to do with jsmpeg. It's ffmpeg transcoding issue.


Add random seed info to dont_upgrade_without_switch_block test

This PR adds an output of CL_TEST_SEED to the dont_upgrade_without_switch_block which occasionally gets stuck, as can be seen here: https://drone-auto-casper-network.casperlabs.io/casper-network/casper-node/7995/1/3.
The suspicion is that it happens due to the particular randomizer seed.
Unfortunately, the test don't fail per-se, instead it is killed by drone after a timeout, hence the CL_TEST_SEED is not displayed through the TestRng::drop().
This PR should be reverted after the problematic seed is detected and the test is fixed.

bors r+


Camera - Pixel Imgui Slider

Allow to specify, through an option, the total number of pixels for the largest side of the screen (default: 200, range: 100-600).

Camera is now considered as a configurable object and pixel is a camera option

Removing CLI option in favor of a dedicated Imgui widget


Upgrading Blazor project requires downloading dotnet hosting 6 for IIS Express too

After upgrading Blazor Webassembly project to .net 6, just hitting debug with IIS Express results blank page. In the IIS Express console is seen error message: HTTP Error 500.31 - Failed to load ASP.NET Core runtime
The upgrade page should mention that it is needed to also download .NET 6 hosting package (dotnet-hosting-6.0.2-win.exe for example)

Document Details
⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

ID: 5bec61f9-7298-170d-5e12-abb27cde584e
Version Independent ID: 27a43e3f-149d-9058-f937-0eda1d6dd4f2
Content: Migrate from ASP.NET Core 5.0 to 6.0
Content Source: aspnetcore/migration/50-to-60.md
Product: aspnet-core
Technology: aspnetcore-migration
GitHub Login: @Rick-Anderson
Microsoft Alias: riande

Ok, the PU issue is open.
@neemevool ... You might want to add a comment there stating some additional details:

What version of the ANCM did you have prior to migrating the app? I.e., Which ANCM version was failing?
Confirm that you were migrating from 5 to 6.

About ANCM

I have empty %windir%\System32\inetsrv

I have empty Program Files\IIS

So, IIS as a feature is NOT installed, I used only IIS Express in the VS 2019 to run Blazor WASM apps and I use Kestrel directly with dotnet run ... to run ASP.NET core projects

C:\Program Files\IIS Express\Asp.Net Core Module\V2 contains NOW (cant check before) the folder 16.0.21322 folder created 22.01.2022 - so when I installed dotnet hosting 6.

So I assume the latter was not there before.
And yes, I migrated from .NET 5 project to .NET 6 project after installing Visual Studio 2022
Saatja: Luke Latham @.>
Saatmisaeg: teisipäev, 15. veebruar 2022 17:38
Adressaat: dotnet/AspNetCore.Docs @.>
Koopia: neemevool @.>; Mention @.>
Teema: Re: [dotnet/AspNetCore.Docs] Upgrading Blazor project requires downloading dotnet hosting 6 for IIS Express too (Issue #24974)
Ok, the PU issue is open.
@neemevool https://github.com/neemevool  ... You might want to add a comment there stating some additional details:

What version of the ANCM did you have prior to migrating the app? I.e., Which ANCM version was failing?
Confirm that you were migrating from 5 to 6.

—
Reply to this email directly, view it on GitHub https://github.com/dotnet/AspNetCore.Docs/issues/24974#issuecomment-1040422619 , or unsubscribe https://github.com/notifications/unsubscribe-auth/AJRAIU3ZXHTNBM7IDWCLEA3U3JXMDANCNFSM5OGEWC6A .
Triage notifications on the go with GitHub Mobile for iOS https://apps.apple.com/app/apple-store/id1477376905?ct=notification-email&mt=8&pt=524675  or Android https://play.google.com/store/apps/details?id=com.github.android&referrer=utm_campaign%3Dnotification-email%26utm_medium%3Demail%26utm_source%3Dgithub .
You are receiving this because you were mentioned.Message ID: @.***>


Disable Banned/Inactive login (Old 300)

In gitlab by @A-Lawrence on Aug 31, 2015, 01:07
Disable user's who are banned/inactive from logging in via SSO.
Links with issue #299.

In gitlab by @A-Lawrence on Aug 31, 2015, 01:16
mentioned in issue #230

In gitlab by @A-Lawrence on Aug 31, 2015, 01:17
mentioned in issue #266


WireMock @Rules in JUnit 4.11

Hi,
I took a quick look at upgrading the WireMock codebase to use JUnit 4.11 earlier, but didn't get any further than coming up with some questions, so I figured I'd get them down before I forget.
It looks like JUnit 4.11 requires @ClassRules to be static, but requires @Rules to be non-static. Unfortunately, this conflicts with the advice on the WireMock site (and the way of doing things in the WireMockJUnitRuleTest acceptance test) to have something like:
@ClassRule
@Rule
public static WireMockClassRule wireMockRule = new WireMockClassRule()

From my limited understanding of the code, it looks like the idea here is that the rule gets run as a both ClassRule, starting & stopping the server at the start & end of the class's tests, and as a Rule, resetting the server between tests (and determining which action to take by seeing if the server is running or not).
If that's correct, I don't see any way of achieving the same behaviour in JUnit 4.11: I was initially hopeful that you might be able to tell if you were executing the first or last test when called as a @Rule (perhaps by inspecting the Description), but I don't think that's possible, sadly. Of course, if anyone can point out something I've missed, that would be excellent news.
One alternative to the current scheme would be to have WireMockRule continue to be responsible for starting and stopping the server, either as a @Rule or a @ClassRule (as it currently is), but then provide an additional @Rule to call WireMock.reset() after each test if running WireMockRule as a @ClassRule (and deprecate WireMockClassRule).
Note also that if someone's digging around with the WireMock Rules, it may be worthwhile to make them extend ExternalResource: it might just make them a tiny bit cleaner to read.
As a slight aside, I also wonder whether it'd be worth your while having some different modules that include different versions of JUnit in order to test the behaviour of the rules in whichever versions you wish to support.
Thanks,
Rowan

junit 4.12 is already release. Could you document that? Thx

This doesn't quite work in JUnit 4.12 because there is a condition in the JUnit rule validator that disallows this for MethodRule's and the existing WireMock JUnit Rule classes all implement MethodRule.
Below is the validator rule from JUnit 4.12:
`    /**
* Requires the validated member to be non-static
*/
private static final class MemberMustBeNonStaticOrAlsoClassRule implements RuleValidator {
public void validate(FrameworkMember<?> member, Class<? extends Annotation> annotation, List errors) {
boolean isMethodRuleMember = isMethodRule(member);
boolean isClassRuleAnnotated = (member.getAnnotation(ClassRule.class) != null);
        // We disallow:
        //  - static MethodRule members
        //  - static @Rule annotated members
        //    - UNLESS they're also @ClassRule annotated
        // Note that MethodRule cannot be annotated with @ClassRule
        if (member.isStatic() && (isMethodRuleMember || !isClassRuleAnnotated)) {
            String message;
            if (isMethodRule(member)) {
                message = "must not be static.";
            } else {
                message = "must not be static or it must be annotated with @ClassRule.";
            }
            errors.add(new ValidationError(member, annotation, message));
        }
    }
}`

Yeah, unfortunately, that's right. With WireMock as it currently stands, you have to declare the member rule and class rule separately, e.g.:
    @ClassRule
    public static WireMockClassRule wireMockClassRule = new WireMockClassRule(8080);
    @Rule
    public WireMockClassRule wireMockRule = wireMockClassRule;

MethodRule (from JUnit 4.7) predates TestRule/ClassRule (from JUnit 4.9); I suspect the intent in WireMock is to support old versions of JUnit (i.e. 4.7 & 4.8). The cost of that is not being able to mark a single field as both rule and class rule.
@tomakehurst Perhaps this is another candidate for change in 2.x? I.e. remove the MethodRule interface from WireMockRule and WireMockClassRule?

I think that's probably a good idea. I've been meaning to take another look at JUnit integration, so perhaps I'll try and get that into the next 2.x release.


RKE2 Worker Node won't deploy

Rancher Server Setup

Rancher version: 2.6.0
Installation option (Docker install/Helm Chart): Docker install
Proxy/Cert Details: N/A

Information about the Cluster

Kubernetes version: 1.21.4
Cluster Type (Local/Downstream): Downstream

If downstream, what type of cluster? (Custom/Imported or specify provider for Hosted/Infrastructure Provider): RKE2 via Rancher

Describe the bug
When creating a new cluster, it seems I can deploy the first node fine (either as etcd+control plane only, or as etcd+control plane+worker). However, attempting to add a second node to the cluster which has only a worker node results in an error during the RKE2 deployment. Logs included at the bottom.
This process will loop infinitely.
There is one hardware difference between the nodes:
The controlplane/master has two interfaces (<IP_ADDRESS>/12 and <IP_ADDRESS>/16) whereas the proposed worker node has three (a public IP, and then the same two subnets the master has - but obviously with different IP's within those ranges).
Both nodes have outgoing internet access and interconnectivity with each other.
To Reproduce

Create a new cluster in Rancher
Select RKE2 as the deployment type, and "Custom"
Select either etcd+controlplane, or etcd+controlplane+worker and run on the first node. This will deploy within ~5 minutes.
Select only "worker" and attempt to deploy at a second node.

Result
The worker node never deploys properly, but retries with the same log output.
Expected Result
The worker should deploy.
Additional context
Oct 12 00:08:39 uk01-k8s-worker01 rancher-system-agent[2872]: time="2021-10-12T00:08:39Z" level=error msg="error while staging: stream error: stream ID 1; PROTOCOL_ERROR"
Oct 12 00:08:39 uk01-k8s-worker01 rancher-system-agent[2872]: time="2021-10-12T00:08:39Z" level=debug msg="[K8s] Plan with checksum (e283185f1c704aac8a856c782874a68fc412f517bb541436b71c495dad6ab22f) failed during application"
Oct 12 00:08:39 uk01-k8s-worker01 rancher-system-agent[2872]: time="2021-10-12T00:08:39Z" level=debug msg="[K8s] updating lastAppliedResourceVersion to 38218"
Oct 12 00:08:39 uk01-k8s-worker01 rancher-system-agent[2872]: time="2021-10-12T00:08:39Z" level=error msg="error syncing 'fleet-default/custom-a603680fd859-machine-plan': handler secret-watch: error executing instruction 0: stream error: stream ID 1; PROTOCOL_ERROR, requeuing"
Oct 12 00:08:39 uk01-k8s-worker01 rancher-system-agent[2872]: time="2021-10-12T00:08:39Z" level=debug msg="[K8s] Processing secret custom-a603680fd859-machine-plan in namespace fleet-default at generation 0 with resource version 38218"
Oct 12 00:08:39 uk01-k8s-worker01 rancher-system-agent[2872]: time="2021-10-12T00:08:39Z" level=debug msg="[K8s] Calculated checksum to be e283185f1c704aac8a856c782874a68fc412f517bb541436b71c495dad6ab22f"
Oct 12 00:08:39 uk01-k8s-worker01 rancher-system-agent[2872]: time="2021-10-12T00:08:39Z" level=debug msg="[K8s] Plan appears to have failed before, failure count was 1"
Oct 12 00:08:39 uk01-k8s-worker01 rancher-system-agent[2872]: time="2021-10-12T00:08:39Z" level=debug msg="[K8s] Calling Applyinator to apply the plan."
Oct 12 00:08:39 uk01-k8s-worker01 rancher-system-agent[2872]: time="2021-10-12T00:08:39Z" level=info msg="Applying plan with checksum e283185f1c704aac8a856c782874a68fc412f517bb541436b71c495dad6ab22f"
Oct 12 00:08:39 uk01-k8s-worker01 rancher-system-agent[2872]: time="2021-10-12T00:08:39Z" level=debug msg="Writing applied calculated plan contents to historical plan directory /var/lib/rancher/agent/applied"
Oct 12 00:08:39 uk01-k8s-worker01 rancher-system-agent[2872]: time="2021-10-12T00:08:39Z" level=debug msg="reconciling file permissions for /var/lib/rancher/agent/applied/20211012-000839 to 0:0 384"
Oct 12 00:08:39 uk01-k8s-worker01 rancher-system-agent[2872]: time="2021-10-12T00:08:39Z" level=debug msg="Writing file /etc/rancher/agent/registries.yaml"
Oct 12 00:08:39 uk01-k8s-worker01 rancher-system-agent[2872]: time="2021-10-12T00:08:39Z" level=debug msg="requested file permission for /etc/rancher/agent/registries.yaml was , defaulting to 384"
Oct 12 00:08:39 uk01-k8s-worker01 rancher-system-agent[2872]: time="2021-10-12T00:08:39Z" level=debug msg="file /etc/rancher/agent/registries.yaml does not need to be written"
Oct 12 00:08:39 uk01-k8s-worker01 rancher-system-agent[2872]: time="2021-10-12T00:08:39Z" level=debug msg="reconciling file permissions for /etc/rancher/agent/registries.yaml to 0:0 384"
Oct 12 00:08:39 uk01-k8s-worker01 rancher-system-agent[2872]: time="2021-10-12T00:08:39Z" level=debug msg="Writing file /etc/rancher/rke2/registries.yaml"
Oct 12 00:08:39 uk01-k8s-worker01 rancher-system-agent[2872]: time="2021-10-12T00:08:39Z" level=debug msg="requested file permission for /etc/rancher/rke2/registries.yaml was , defaulting to 384"
Oct 12 00:08:39 uk01-k8s-worker01 rancher-system-agent[2872]: time="2021-10-12T00:08:39Z" level=debug msg="file /etc/rancher/rke2/registries.yaml does not need to be written"
Oct 12 00:08:39 uk01-k8s-worker01 rancher-system-agent[2872]: time="2021-10-12T00:08:39Z" level=debug msg="reconciling file permissions for /etc/rancher/rke2/registries.yaml to 0:0 384"
Oct 12 00:08:39 uk01-k8s-worker01 rancher-system-agent[2872]: time="2021-10-12T00:08:39Z" level=debug msg="Writing file /etc/rancher/rke2/config.yaml.d/50-rancher.yaml"
Oct 12 00:08:39 uk01-k8s-worker01 rancher-system-agent[2872]: time="2021-10-12T00:08:39Z" level=debug msg="requested file permission for /etc/rancher/rke2/config.yaml.d/50-rancher.yaml was , defaulting to 384"
Oct 12 00:08:39 uk01-k8s-worker01 rancher-system-agent[2872]: time="2021-10-12T00:08:39Z" level=debug msg="file /etc/rancher/rke2/config.yaml.d/50-rancher.yaml does not need to be written"
Oct 12 00:08:39 uk01-k8s-worker01 rancher-system-agent[2872]: time="2021-10-12T00:08:39Z" level=debug msg="reconciling file permissions for /etc/rancher/rke2/config.yaml.d/50-rancher.yaml to 0:0 384"
Oct 12 00:08:39 uk01-k8s-worker01 rancher-system-agent[2872]: time="2021-10-12T00:08:39Z" level=debug msg="Cleaning working directory before applying /var/lib/rancher/agent/work"
Oct 12 00:08:39 uk01-k8s-worker01 rancher-system-agent[2872]: time="2021-10-12T00:08:39Z" level=debug msg="Executing instruction 0 for plan e283185f1c704aac8a856c782874a68fc412f517bb541436b71c495dad6ab22f"
Oct 12 00:08:39 uk01-k8s-worker01 rancher-system-agent[2872]: time="2021-10-12T00:08:39Z" level=info msg="Extracting image rancher/system-agent-installer-rke2:v1.21.4-rke2r2 to directory /var/lib/rancher/agent/work/20211012-000839-applied.plan/e283185f1c704aac8a856c782874a68fc412f517bb541436b71c495dad6ab22f_0"
Oct 12 00:08:39 uk01-k8s-worker01 rancher-system-agent[2872]: time="2021-10-12T00:08:39Z" level=info msg="Using private registry config file at /etc/rancher/agent/registries.yaml"
Oct 12 00:08:39 uk01-k8s-worker01 rancher-system-agent[2872]: time="2021-10-12T00:08:39Z" level=info msg="Pulling image index.docker.io/rancher/system-agent-installer-rke2:v1.21.4-rke2r2"
Oct 12 00:08:40 uk01-k8s-worker01 rancher-system-agent[2872]: time="2021-10-12T00:08:40Z" level=info msg="Extracting file installer.sh to /var/lib/rancher/agent/work/20211012-000839-applied.plan/e283185f1c704aac8a856c782874a68fc412f517bb541436b71c495dad6ab22f_0/installer.sh"
Oct 12 00:08:40 uk01-k8s-worker01 rancher-system-agent[2872]: time="2021-10-12T00:08:40Z" level=info msg="Extracting file rke2.linux-amd64.tar.gz to /var/lib/rancher/agent/work/20211012-000839-applied.plan/e283185f1c704aac8a856c782874a68fc412f517bb541436b71c495dad6ab22f_0/rke2.linux-amd64.tar.gz"

I have exactly the same issue:
Dec  9 16:29:03 drrancherclv301 rancher-system-agent: time="2021-12-09T16:29:03Z" level=info msg="Extracting file installer.sh to /var/lib/rancher/agent/work/20211209-162849-applied.plan/88aec338eb544deb76efa1c433b3cbe9359710d66dc2f6f5b3007d3e8e01e6dd_0/installer.sh"
Dec  9 16:29:03 drrancherclv301 rancher-system-agent: time="2021-12-09T16:29:03Z" level=info msg="Extracting file rke2.linux-amd64.tar.gz to /var/lib/rancher/agent/work/20211209-162849-applied.plan/88aec338eb544deb76efa1c433b3cbe9359710d66dc2f6f5b3007d3e8e01e6dd_0/rke2.linux-amd64.tar.gz"
Dec  9 16:30:01 drrancherclv301 systemd: Started Session 172 of user root.
How do we get around this issue, as it seems it just goes into an infinite loop???


Disable extension notifications / popups

Before submitting your bug report

[X] I believe this is a bug. I'll try to join the Continue Discord for questions
[X] I'm not able to find an open issue that reports the same bug
[X] I've seen the troubleshooting guide on the Continue Docs

Relevant environment info
- OS: macOS
- Continue: v0.9.213 (pre-release)
- IDE: vscode
- Model:
- config.json:

Description
For many reasons this extensions triggers popups in vscode and it does not respect our notifications preference so they keep appearing without consent.
This is especially distracting for notifications such as this:
Warning: qwen2.5-coder:1.5b-instruct-q8_0 is not trained for tab-autocomplete, and will result in low-quality suggestions. See the docs to learn more about why: https://docs.continue.dev/features/tab-autocomplete#i-want-better-completions-should-i-use-gpt-4

it's okay to show this warning once but not every single time, specially since this is a false positive, the model works fine.
To reproduce

check "turn off all notifications from Continue..."
still get notifications from continue

Log output
No response

Hi @evertjr , thanks for the heads up here. Could you share where you have configured notifications to be disabled? I'm not seeing much in the VS Code docs around how to check this setting so that we can then respect it.

e believe it's from the native Notification Center, this notification shows up even if I enable do not disturb.

Hi @evertjr,
Would agree that it should not be throwing an error; we can change this to a warning message, since error messages will be shown regardless of the info/warning settings to make sure real errors aren't silent. Any other specific errors notifications that have been showing incessantly?
Notifications playground: clone and debug this repo: Sample notifications extension

note to self, error messages are shown by:

uncaught error in core, ide, or gui
ide.showToast("error" | "warning" | "info", ...) from core

Quick scan through the ~200 Error throws and show, all look like valid error events except this one and one other. Will open PR

PR opened
https://github.com/continuedev/continue/pull/2619

btw, the error being triggered is in itself is a problem.
Qwen 2.5 has been trained for FIM. It would be nice to remove this warning altogether.

@AnnoyingTechnology yes, but that is the fine-tuned instruct model which is not trained for FIM.


Update how-to-mitigate-latency.md

Added a missing period.

@qingflin : Thanks for your contribution! The author(s) have been notified to review your proposed change.

Looks good; thanks.


Add readme

[ ] Add output from CLI (use tool to keep up to date) https://til.simonwillison.net/python/cog-to-update-help-in-readme
[ ] Add background

I added a readme, closing this, will open other issues for more


Update s3, sdk-core, sqs to 2.17.131

Updates

software.amazon.awssdk:s3
software.amazon.awssdk:sdk-core
software.amazon.awssdk:sqs

from 2.17.121 to 2.17.131.
I'll automatically update this PR to resolve conflicts as long as you don't change it yourself.
If you'd like to skip this version, you can just close this PR. If you have any feedback, just mention me in the comments below.
Configure Scala Steward for your repository with a .scala-steward.conf file.
Have a fantastic day writing Scala!

Ignore future updates
Add this to your .scala-steward.conf file to ignore future updates of this dependency:
updates.ignore = [ { groupId = "software.amazon.awssdk" } ]

labels: library-update, early-semver-patch, semver-spec-patch, commit-count:1

Superseded by #428.


Switch core version

@rultor  release, tag is 0.2.21

@kniazkov OK, I will release it now. Please check the progress here

@rultor  release, tag is 0.2.21

@kniazkov Done! FYI, the full log is here (took me 15min)


Made user bootstrapping more configurable

Added option for bootstrap_user for user creation. This means you can
use non-root users to bootstrap other users (in e.g. cloud environments)

noped. Adding it manually to master.


Programming error while comparing grants

Hi,
I'm trying to use this library to manage grants. It works nicely for schemas and roles, but I get an error for grants.
I am basically following the example, where I eventually have in env.py (this is for use with Alembic):
from sqlalchemy.orm import as_declarative
from sqlalchemy_declarative_extensions import declarative_database, Grants, register_alembic_events
from sqlalchemy_declarative_extensions.dialects.postgresql import DefaultGrant

@declarative_database
@as_declarative()
class Base:
    grants = Grants().are(
        DefaultGrant.on_tables_in_schema("public", "example").grant("select", to="read")
    )

register_alembic_events(schemas=False, roles=False, grants=True, rows=False, views=False)

When I try to autogenerate migrations, this sql query runs (with parameter substitution done for ease of trying it out):
SELECT
pg_namespace.nspname AS schema,
 pg_class.relname AS name,
 pg_class.relkind AS relkind,
 pg_roles.rolname AS owner,
 CAST(pg_class.relacl AS VARCHAR[]) AS acl
FROM pg_class
JOIN pg_namespace ON pg_class.relnamespace = pg_namespace.oid
JOIN pg_roles ON pg_class.relowner = pg_roles.oid
WHERE pg_class.relkind IN (
    'r'::VARCHAR,
    'S'::VARCHAR,
    'f'::VARCHAR,
    'n'::VARCHAR,
    'T'::VARCHAR,
    'v'::VARCHAR
)
AND pg_class.relname NOT LIKE 'pg_%'::VARCHAR
AND pg_namespace.nspname != 'information_schema'::VARCHAR
AND pg_namespace.nspname NOT LIKE 'pg_%'::VARCHAR

UNION

SELECT null AS schema,
 pg_namespace.nspname AS name,
 'n'::VARCHAR AS relkind, -- <-- if I remove the casting here, all is fine
 pg_roles.rolname AS owner,
 CAST(pg_namespace.nspacl AS VARCHAR[]) AS nspacl
FROM pg_namespace
JOIN pg_roles ON pg_namespace.nspowner = pg_roles.oid
WHERE pg_namespace.nspname != 'information_schema'::VARCHAR
AND pg_namespace.nspname NOT LIKE 'pg_%'::VARCHAR
AND pg_namespace.nspname != 'public'::VARCHAR;

which fails with:

sqlalchemy.exc.ProgrammingError: (psycopg.errors.CannotCoerce) UNION could not convert type character varying to "char"
LINE 3: ...LECT $10 AS schema, pg_namespace.nspname AS name, $11::VARCH...

The place of the error (and workaround) is indicated in the query. The same query run directly in PG gives the same error.
The traceback is:

Traceback (most recent call last):
File "/home/gui/.conda/envs/pow/lib/python3.9/site-packages/sqlalchemy/engine/base.py", line 1964, in _exec_single_context
self.dialect.do_execute(
File "/home/gui/.conda/envs/pow/lib/python3.9/site-packages/sqlalchemy/engine/default.py", line 747, in do_execute
cursor.execute(statement, parameters)
File "/home/gui/.conda/envs/pow/lib/python3.9/site-packages/psycopg/cursor.py", line 723, in execute
raise ex.with_traceback(None)
psycopg.errors.CannotCoerce: UNION could not convert type character varying to "char"
LINE 3: ...LECT $10 AS schema, pg_namespace.nspname AS name, $11::VARCH...
^

This happens at least with postgres 13 (and postgis 3, apline) from docker and on postgres 15 (postgis 3, normal version): https://registry.hub.docker.com/r/postgis/postgis/tags?page=1&name=15-3.3
I am using sqlachemy 2.
I tried to look deeper, but that is not something it looks like I could fix.

What i find weird is that I can't reproduce this error running the library's test suite, which should definitely cover default grant comparison, and i can confirm that the pasted query fails in even postgres 11, which is what i'm testing with.
Your specific change, i think doesn't work because SQLAlchemy then complains about something else. I suspect literal("n").cast(CHAR).label("relkind"), should work, but i'd really like to see it fail in the test-suite

Aha. So the buried lede here was that you're using psycopg (i.e. psycopg3) rather than psycopg2 or asyncpg. This seems to emit a bunch of additional casts which aren't apparent when using the other options.
The fix should be relatively simple, I'm mostly trying to figure out CI to ensure general compatibility

Indeed, I am using psycopg! And your next PR looks much cleaner than mine, thanks!
psycopg has another unfortunate (but workable around) side effect.
I have roles with an infinity validuntil (default RDS grants, I cannot change them). With psycopg2, infinity is cast to datetime.max. With psycopg this raises an error when analysing the current roles: https://github.com/DanCardin/sqlalchemy-declarative-extensions/blob/main/src/sqlalchemy_declarative_extensions/dialects/postgresql/schema.py#L64
I wondered about submitting a PR which would reduce infinity to a PG date which would fit into python datetime (this should have no side effect because this query is only used internally by
sqlalchemy-declarative-extensions), but as there is a recipe in the psycopg doc to overload the dateloader, it might not be needed, although I am now doing a global override, which might be overkill.
Anyway, this is not relevant to this PR :)

This comment ^, actually seems to have revealed a latent "bug" where we were not removing valid until if set. Seems like "the way" to do this is by setting it to infinity. Setting it to (or leaving it at) None in python implies infinity/unsetness.
So our fix is going to be to coerce infinity to None, and treat them as the same except for unsetting.
Should be released in v0.4.4 in a few mins

Awesome, thanks for all your help!

feel free to create a new issue, if this didn't solve all the your problems, closing for now.


Merged PR #1255 changes lost in framework v5

Creating this issue to raise some  attention on this.
Not sure if only this PR is affected or if maybe other merged changes also got lost for v5:
Sadly, somehow the (merged) PR #1255 never made it to framework v5, see #1196.
So running with "long and wide" sqlite tables is still broken (I'd rather consider that issue a bug than an enhancement) on frictionless 5.x. You quickly run into it on RHEL7 systems due to its default SQLite config but it's easily reproducible on other systems, too.
Since my PR was merged in Oct. 2022 after the last v4 release, it looks like there's now no released version that contains the fix.
Let me know if I can help...
Best, Holger
Originally posted by @hjoukl in https://github.com/frictionlessdata/framework/issues/1196#issuecomment-1396769909

Thanks @hjoukl for reporting!

Thanks @hjoukl ! I'll handle it ASAP

Hi @shashigharti, I could provide a new PR for this, unless you're on it, anyway.
Nothing fancy (since I've no clue how I could properly rebase the original PR to the v5 line), I'd just simply package the #1255 changes as a brand new PR.
Please let me know if this would help,
H.

Hi @hjoukl, Thanks I have started working on it, I will use cherry pick and keep the original author and date as before. what do you think?

@shashigharti Thanks! Please take into account that currently there is duplicated code in expwrimental resource.index

Hi @hjoukl, Thanks I have started working on it, I will use cherry pick and keep the original author and date as before. what do you think?

Great! Whatever works best for you guys. If there's something I could help with from my side, just let me know.

@roll I tried changing and found that changing from
self.connection.execute(table.insert().values(buffer))
to
self.connection.execute(table.insert(), buffer)

requires dict to be passed as param(Based on the sqlalchemy documentation ). So we have to make changes to mapper.write_row(row) to return dict. If not changed, many tests fail with following error:
TypeError: '<' not supported between instances of 'bool' and 'str'
To double check, I tested following code:
It works
result = connection.execute(
               t.insert(),
               [
                       {"x": 7, "y": "jack"},
                       {"x": 8, "y": "ed"},
               ]
           )

It doesn't
result = connection.execute(
                t.insert(),
                [
                        [8, "jack"],
                        [8, "ed"],
                ]
            )

What do you suggest?

Thanks a lot @shashigharti -- I will investigate

Hi @hjoukl,
Thanks a lot for your input. I'm releasing<EMAIL_ADDRESS>with all the changes incorporated. Also, it's, in general, better to use conn.execute(insert, params) for performance so your contribution was really valuable :smile:

Hi @hjoukl,
Thanks a lot for your input. I'm releasing<EMAIL_ADDRESS>with all the changes incorporated.

Great! Looking forward to it.

Also in general, it's better to use conn.execute(insert, params) for performance so your contribution was really valuable

Well, yes - that's what I already investigated before my PR: https://github.com/hjoukl/bench-sqlalchemy-executemany :-)
(see also here: https://github.com/frictionlessdata/framework/issues/1196#issuecomment-1248638184)
To quote myself:
"The gist of it is that executemany is superior to the previous approach performance-wise, sometimes vastly (especially with SQLite). I've run the sample benchmark for the DB engines tested in your CI (SQlite, PostgreSQL, MySQL)."
Best, Holger

Thanks!


constify many functions in x509_vfy.h etc.

Due to a little const incident in #10502 I've tentatively constified most of x509_vfy.h and friends.
As far as folks are fine with these changes I'll update the respective doc files accordingly.
I had to introduce type casts from const X509_NAME* to non-const X509_NAME at five places where name parameter pointers are stored in a local structure, but these should be harmless because the structure contents are used only for lookup and are not modified.

[ ] documentation is added or updated

Why not make the name attribute in those local structs const?

Why not make the name attribute in those local structs const?

Can this be done for situations like this in x509_lu.c?
    X509 x509_s;
...

        x509_s.cert_info.subject = (X509_NAME *)name;

BTW, I find the programming pattern in x509_object_idx_cnt(), as well as in the places where I had to apply the de-constification type cast, pretty awkward:
whole - pretty fat - X509 and X509_CRL structures are allocated on the stack as auto variables and get very sparsely initialized, just to serve as reference objects for cert/CRL comparison.
Directly providing one or two reference values (e.g., subject name or issuer name and serial) to a generalized comparison function would be sufficient.

Looking for a solution that avoids the type casts to non-const,
I first experimented with using a direct initializer expression like
    X509_CRL crl_s = { NULL, { 0, }, name, };

but this did not work for two reasons: the compiler cannot handle non-static initialization (with the name parameter), and even if it could, it (naturally) reports the same const conflict.
What would work is to copy the name:
    x509_s.cert_info.subject =X509_NAME_dup(name);

and later free it, but this would be inefficient.

Then I realized that it would be much better to replace the X509_NAME * types of the subject and issuer fields of X509, X509_REQ, X509_CRL, and PKCS7_ISSUER_AND_SERIAL structures by const X509_NAME * (and consequently also for the directoryName field of GENERAL_NAME etc.).
This allows for much more constification of function parameters and is also pretty natural because it resembles const char *.
Doing so I had to introduce just one type cast to non-const in
    X509_NAME_free((X509_NAME *)*xn);

of X509_NAME_set(), which I had to fully constify as
int X509_NAME_set(const X509_NAME **xn, const X509_NAME *name)

I added the following comment there for justification:
/*
 * The use of 'const' for, e.g., the subject and issuer fields of X509 and
 * X509_CRL structures etc. pointed to by *xn, as well as the cast to
 * non-const 'X509_NAME *' in the below call of X509_NAME_free(), should be okay
 * because due to the modification of the pointer value of the field
 * the original pointer value has been invalidated anyway, such that any aliases
 * are not usable any more, neither for reading nor for writing name contents.
 */

I also had to improve a couple of fishy code sections, e.g., in apps/.
Due to the new constifications I was able to remove again the five casts to non-const that I had introduced yesterday. I also found some new opportunities for little code simplifications, which I did.
I also found and eliminated some casts to non-const that were no longer needed for instance due to my earlier constification of ASN.1 *_dup() functions.

For backwards compatibility, you need to be careful with everything in the public headers. Some const changes will require the applications to also change it to const, which is not something we want to force them to do (at this time.)

@kroeckx, I understand the point regarding backward compatibility.
Yet is there then a chance at all to correct such issues where const would make much sense?
If I revert my improvements regarding const getter responses (and const X509_NAME * fields in structures) then most of the last commit would need to be reverted.

I actually felt the incompatibilities of constifying X509_NAME * getter results.
These materialize in particular in ssl/ and apps/.
Yet having a look at these it turns out that the changes needed are bearable, and actually contribute to code cleanliness.

OpenSSL 3.0 is supposed to remain as compatible as possible, we
expect most applications to just need to rebuild and not make any
changes. Anything that requires them to make changes needs to wait
until at least 4.0.
I think there are 3 types that I complained about:

Changing the return type to const
Changing a "TYPE **" parameter to a "const TYPE **"
Chaning a public member of a struct to const.

They all require the users to also change their variable to const.

I see - thanks for the clarification!

@kroeckx, finally I've found the time to execute all requested changes.
Hope everything is fine/compatible now.

I've just did a quick look at this, and currently don't have any objections. Didn't have time to do a full review.

Thanks nevertheless for your quick scan & response!

This PR contributes to the long-standing issue #3742 ("more const").

I've just did a quick look at this, and currently don't have any objections. Didn't have time to do a full review.

@kroeckx, when do you think you'll be able to do a full review?

I've just picked up this stalled PR, rebasing and simplifying it.
@kroeckx, can you resume reviewing this soon, or who else?

I have no idea when I'll find the time to review this

I have no idea when I'll find the time to review this

I see. Anyone willing to fill in?
Actually after my recent simplifications the PR consists basically just of a large number of straightforward additions of const (plus some re-formatting where needed).
Where API compatibility (with pre-v.3.0 versions) is an issue it adds const only for function arguments, where it should be harmless.
I've also added a couple of comments why certain constifications cannot be done (at least as long as compatibility is an issue).
Since meanwhile I'm confident that the set of changes done in this PR has stabilized I've updated the documentation accordingly.

Please rebase

Thanks @t8m for taking over the review of this (simplified) PR!
I've rebased it and handled all open issues.

The Travis failure is just a timeout.

24 hours has passed since 'approval: done' was set, but this PR has failing CI tests.  Once the tests pass it will get moved to 'approval: ready to merge' automatically, alternatively please review and set the label manually.

Please squash the commits and add some descriptive commit message when merging.

Merged, squashing and adding cumulative commit message.
Thanks @kroeckx and @t8m!


None of the demos work

Hmm, maybe yjs server has changed something?

It's working, but you have to open both clients in a separate tab. The client that is embedded in the Sandbox won't work because it's not a real browser tab.

For what it's worth - I do still get the errors shown in the devtools, but I'm just learning how to use yjs so I can't help you there.

Oh strange. I definitely opened one tab to https://ox3iy.csb.app/ in a normal window and another in a private window, and it didn't work, but maybe it was an extension somehow interfering because when I opened both in private windows it worked. 😬 My bad! Sorry for the alarm and thanks @waynebloss

It's likely that the websocket server is not working at all, and what you're seeing is cross-tab communication (which is provided out-of-the-box by y-websocket).
It could be a CORS setting or something else with the server that changed. It's worth noting that the YJS ProseMirror demo is connecting to the server and working between normal and private tabs. But for demo purposes, the cross-tab functionality is arguably sufficient.

what you're seeing is cross-tab communication (which is provided out-of-the-box by y-websocket)

Oh, interesting. Either way, the CodeSandbox demo doesn't seem to work very well out of the box so maybe I'll reopen this unless the author decides it isn't important (in which case feel free to close, I have my implementation of valtio-yjs working great on my project already 😄).

Can anyone fork the codesandbox links and fix it?

@dai-shi Do you mind if I use y-sweet instead of y-websocket for the reason @raineorshine mentioned above?
Users would need to login to https://app.y-sweet.cloud/ to get a connection string and test the demos like<EMAIL_ADDRESS>npm run dev, or we could use a shared public one if we added a bad word filter.
Let me know what you think and I'll make a little demo.

So, doesn't it work with codesandbox?
Anyway, having new demos is fine. Please feel free to try.

Using https://github.com/yjs/y-webrtc worked on codesandbox 👍🏻
https://github.com/valtiojs/valtio-yjs/assets/31152321/59932066-7ac9-4db3-b039-0c0943e140e8
https://codesandbox.io/p/devbox/valtio-yjs-demo-8vyktr?file=%2Fsrc%2FApp.jsx%3A9%2C7


Admin Role suggestion

Hey Jeff,
First things first: This Project is extremely helpful and saves a lot of time - thank you for that!
I wanted to ask, why it is needed to save the admin role in a separate collection, since you can restrict access to specific fields of a document e.g.:
allow update: if (!request.resource.data.diff(resource.data).affectedKeys()
.hasAny(['role', 'other_field']));
I'm not an expert so correct me If a am worng but I think this would reduce load/traffic and save miniscule time.

You could probably do it that way if you want. Basically I followed the recommendations from this article https://medium.com/firebase-developers/patterns-for-security-with-firebase-group-based-permissions-for-cloud-firestore-72859cdec8f6


adds guard around empty splintered.

adds guard around empty splintered since it will throw and error when reducing.
fixes #41

@dylanb I moved the splintered empty array guard up.

@dylanb have you had a chance to review this pull request. I am working on a project and would love to remove my fork. Thanks

Thanks for the contribution.


[BUG]: Upgrading to V2 made my Svelteapp crash

Description of the bug
Hey there. Thanks for creating this useful little module.
I've upgraded from V1 and spent quite some time troubleshooting why my app crashes with a "500 Internal server error", while there were no errors shown in the console.
The reason for the crash was that I referenced an icon ArrowNarrowDown that is no longer present in
svelte-heros-v2. Possibly this is less a problem of this library but one of Vite or Sveltekit. Maybe you have an idea how I could dedect such a problem in the future.
Thanks a lot. Have a nice day! :)
Michael
Steps To Reproduce

Create a new Sveltekit app (latest Sveltekit version)
import { ArrowNarrowDown } from 'svelte-heros-v2';

Additional Information
No response

Heroicons v1 and v2 changed naming so it was inevitable.
You can see the icon list to reference names.


Speed up `setting up /etc...'

Hello! Sorry, it's me again! 😅
Is there any way to speed up setting up /etc..., or is it unavoidable with a lot of files and directories to bind-mount?
Thank you kindly for the information!

Hi! That prompt isn't specific to impermanence. It's still possible that setting up bind mounts and symlinks is what's causing a slowdown when you're activating a new generation, but this would have to be profiled somehow. I don't see any easy way to improve that either - the scripts aren't doing anything that fancy or superfluous. The create-directories script checks the hierarchy of all added directories and files' parent directories, but I don't see any obvious way around that which wouldn't increase complexity immensely.

Hmm... This might actually tie into my other issue here, whereupon adding /etc/ssh to the persistent directories prevents sshd_config from being generated; is it possible that that might be causing this immense slowdown?

Also, if no subdirectories are mounted in /persist, such as directories = [ "/directory" "/directory/subdirectory" ];, would it not be possible to parallelize the command, such as using async, since there would be no race conditions?
Sorry if I'm misunderstanding something here!


Refactor kernel selection/switching in order to support remote kernel remembering

For #12828
Started implementing this and realized

You can't pick a remote kernel without running a cell
KernelSelection/KernelSwitcher had some layer dependency problems

This refactor is the first step in supporting #12828
And don't panic, 50 of the file changes are from changing 'Data Science' in some tests to match 'DataScience' in the rest of them.

Codecov Report

Merging #13083 into master will decrease coverage by 0.17%.
The diff coverage is 25.78%.

@@            Coverage Diff             @@
##           master   #13083      +/-   ##
==========================================
- Coverage   59.84%   59.67%   -0.18%
==========================================
  Files         671      671
  Lines       36653    36687      +34
  Branches     5153     5159       +6
==========================================
- Hits        21936    21892      -44
- Misses      13625    13702      +77
- Partials     1092     1093       +1

Impacted Files
Coverage Δ

.../datascience/interactive-common/interactiveBase.ts
5.51% <0.00%> (-0.15%)
:arrow_down:

...ient/datascience/interactive-ipynb/nativeEditor.ts
8.44% <ø> (ø)

...atascience/interactive-window/interactiveWindow.ts
9.25% <ø> (ø)

src/client/datascience/jupyter/jupyterExecution.ts
48.44% <ø> (ø)

...client/datascience/raw-kernel/rawJupyterSession.ts
16.16% <0.00%> (-0.17%)
:arrow_down:

src/client/datascience/types.ts
100.00% <ø> (ø)

...lient/datascience/jupyter/jupyterSessionManager.ts
9.03% <14.28%> (+0.28%)
:arrow_up:

...atascience/jupyter/jupyterSessionManagerFactory.ts
29.62% <16.66%> (-12.48%)
:arrow_down:

...rc/client/datascience/commands/notebookCommands.ts
18.42% <18.42%> (ø)

...datascience/interactive-common/notebookProvider.ts
53.01% <20.00%> (-2.12%)
:arrow_down:

... and 15 more

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update 986980a...39ad210. Read the comment docs.


[Refactoring] Print @escaping For Closures In Generated Memberwise Initializer

Augment the "generate memberwise initializer" refactoring action to
automatically print @escaping in parameter position. Closures as stored
properties always escape.
rdar://62202381

@swift-ci smoke test


[terraform] Add 1.6, update 1.4 eol

https://github.com/hashicorp/terraform/blob/v1.6.0/CHANGELOG.md

Amazing, thanks a lot guys :pray:


[PPP-4391] Remove c3p0 dependency; was never really used except as a

connection pool for hibernate, and tomcat handles that.

 Note:

Frogbot also supports Contextual Analysis, Secret Detection, IaC and SAST Vulnerabilities Scanning. This features are included as part of the JFrog Advanced Security package, which isn't enabled on your system.

🐸 JFrog Frogbot

:white_check_mark: Build finished in 28m 10s
Build command:
mvn clean verify -B -e -Daudit -Djs.no.sandbox -pl engine

:ok_hand: All tests passed!
Tests run: 2325, Failures: 0, Skipped: 13    Test Results

:information_source:  This is an automatic message


Have the character page save your last character selection and tab position when returning to it.

There are many times during a setup or build of a character you want to quickly dip back to the artifact page or settings page but when you do you must navigate throught the character selection and tab to pickup where you left off.

Tagging onto this - Currently when you F5 / Refresh the build tab it sends you back to the character tab.
It would be nice if it was possible for this to also save your last position.


Perplexity numbers for masking rates reported in Table 3.

Hi,
Thanks for the wonderful work. I was wondering, if you have the PPL for all the masking rates reported in Table 3?
Thanks
@CodeCreator @gaotianyu1350 @danqi @a3616001

Hi,
We didn't test all those models for PPL. However, you can download all of them from our GitHub repo and evaluate them.


Update emulationstation2.po

Ajusting all the missing translations
Fixing some mispellings

Thank you Marcelo !

Thanks a lot.
I've some enchancements to suggest :

can you remove the fuzzy strings please after having confirmed it's correct.

update the header of the file : language and last translator

you mistranslated the plural forms. Please check https://github.com/recalbox/recalbox-os/wiki/Translation-(EN).

the 2 first lines are the english singular and plural.
the 2 following are the one for your language according to the rule of your language.
Your language has the following formula which is different from english (0 games is plural in english, not in your language)
"Plural-Forms: nplurals=2; plural=n>1;\n"
French example :
msgid "%i GAME AVAILABLE"
msgid_plural "%i GAMES AVAILABLE"
msgstr[0] "%i JEU DISPONIBLE"
msgstr[1] "%i JEUX DISPONIBLES"
incorrect PT translation :
msgid "%i GAME AVAILABLE"
msgid_plural "%i JOGOS DISPONÍVEIS"
msgstr[0] ""
msgstr[1] ""

Nicolas,
I will fix it, thank you!!!!
On Sun, Feb 14, 2016 at 6:36 AM, Nicolas Adenis-Lamarre <
<EMAIL_ADDRESS>wrote:

Thanks a lot.
I've some enchancements to suggest :

can you remove the fuzzy strings please after having confirmed it's
correct.

update the header of the file : language and last translator

you mistranslated the plural forms. Please check
https://github.com/recalbox/recalbox-os/wiki/Translation-(EN).

the 2 first lines are the english singular and plural.
the 2 following are the one for your language according to the rule of
your language.
Your language has the following formula which is different from english (0
games is plural in english, not in your language)
"Plural-Forms: nplurals=2; plural=n>1;\n"
French example :
msgid "%i GAME AVAILABLE"
msgid_plural "%i GAMES AVAILABLE"
msgstr[0] "%i JEU DISPONIBLE"
msgstr[1] "%i JEUX DISPONIBLES"
incorrect PT translation :
msgid "%i GAME AVAILABLE"
msgid_plural "%i JOGOS DISPONÍVEIS"
msgstr[0] ""
msgstr[1] ""
—
Reply to this email directly or view it on GitHub
https://github.com/recalbox/recalbox-emulationstation/pull/85#issuecomment-183849029
.


Add missing RBAC permission claim

What type of PR is this?

/kind chore
What this PR does / why we need it:
As I mentioned in the title. And we should not give too open permission to ks-devops. So, the next step is to change the cluster-role of this file.
Which issue(s) this PR fixes:

Fixes #
Special notes for reviewers:

Please check the following list before waiting reviewers:

[ ] Already committed the CRD files to the Helm Chart if you created some new CRDs
[ ] Already added the permission for the new API
[ ] Already added the RBAC markers for the new controllers

Does this PR introduce a user-facing change??

None

/hold

/unhold


Update the import paths for Caddy

This pull request makes caddy-builder compatible with Caddy v1.0.1+ (see epicagency/caddy-expires#6 for reference) by updating the import paths for Caddy.

@shuxs Could you please have a look at this PR?

Closed due to inactivity.


Requesting Code reference for metrics calculation

Team, I was wondering if you haven't included code reference for evaluation metrics such as CSIG,CBAK, COVL, SSNR etc.. ? Do you have any plans for this please ?

The code is already here: https://github.com/Audio-AGI/AudioSep/blob/main/utils.py
I'll release the evaluation benchmark soon!

Thanks for the revert. Am sorry, but i couldn't see evaluation code for the these metrics specifically CSIG,CBAK,COVL,SSNR.

Thanks for the reminder, Will update it ASAP.

For speech enhancement metrics, I use from pesq import pesq
import pysepm


possibility of silent AddrMsg processing

Currently, nodes receiving an AddrMsg unconditionally broadcast AddrMsg to their neighbors. This seems unnecessary in the case where the received AddrMsg made no difference to the state of the node. It also means that executions of Toychain always have infinite back-and-forth of AddrMsg between nodes, even when the network is fixed. Here, I just introduce a simple check whether there was a change of state or not, and if not, there is no messaging. Let me know if you have any issues with this, otherwise I will merge it in the near future.

Yes, this is sensible. Feel free to merge.


Check .trash

Check if there is anything you want included that is not in the docs that is in the .trash folder.

checked

K thanks :)


[ Question ] Is there any impact of Spring4Shell on HAproxy on BOSH release

It's been a long time since the Day0 exploit has been raised and various questions are arising regarding different environments. My question over here is "Does the HAproxy bosh release and HAproxy CF release got impacted by the vulnerability ?".
If "Yes". Are there any mitigation plans available....??

This vulnerability is part of the Spring Framework. We do not use the Spring Framework in the HAProxy boshrelease and are therefore not vulnerable.


Adds Go vulnerability check to workflow and addresses existing vulnerable dependency

Signed-off-by: Bernd Verst<EMAIL_ADDRESS>Adds Go vulnerability check to workflow and addresses existing vulnerable dependency (fasthttp).

Should we enable CodeQL too? https://github.com/ItalyPaleAle/dapr-ci-test/blob/master/.github/workflows/codeql-analysis.yaml


Fix build for MSVC 2013

MSVC doesn't support default move constructors. Only declare default move constructors for supported compilers.

Fixes following compiler errors with MSVC 2013 Update 4
 error C2610: 'sqlite3pp::noncopyable::noncopyable(sqlite3pp::noncopyable &&)' : is not a special member function which can be defaulted
 error C2610: 'sqlite3pp::noncopyable &sqlite3pp::noncopyable::operator =(sqlite3pp::noncopyable &&)' : is not a special member function which can be defaulted

Sorry for your inconvenience, but I'm trying to keep this macro-free code so far. Please fork repo and fix in it.


Upgrade transformers to 4.27.2

This upgrade enables the fast OPT tokenizer. Should not make a big difference at training time, but will at dataset generation time.
Leaving as a draft for now, will wait until Composer' next release closes some bugs related to 4.27+

Closing in favor of #313


Blue shell can't go on right slopes

Collision accuracy-related issue. Should be addressed with a slope rewrite instead of individually.


Feature request: Display bind propagation and read only option on volumes

Portainer hides bind propagation or the read only option on volumes / mounts.
Additional information can be found in the Docker guide here

Sorry is this a compose v2 standalone stack or a v3 swarm stack?

Compose v2 standalone stack.

Right.
We have an open “roll up issue” to replace libcompose (which we currently rely on) in an upcoming version; this will resolve dozens of open issues, including yours.
Suggest keeping an eye on updates over the next 3-6 months.

Closing as this will be addressed by #3750