[Snyk] Security upgrade com.amazonaws:aws-java-sdk from 1.12.234 to 1.12.708

This PR was automatically created by Snyk using the credentials of a real user.Snyk has created this PR to fix one or more vulnerable packages in the `maven` dependencies of this project.
Changes included in this PR

Changes to the following files to upgrade the vulnerable dependencies to a fixed version:

api/pacman-api-auth/pom.xml

Vulnerabilities that will be fixed
With an upgrade:

Severity
Priority Score (*)
Issue
Upgrade
Breaking Change
Exploit Maturity
Reachability

475/1000  Why? Has a fix available, CVSS 6.5
Directory Traversal SNYK-JAVA-COMAMAZONAWS-2952700
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.708
No
No Known Exploit
No Path Found

563/1000  Why? Has a fix available, CVSS 8.1
Deserialization of Untrusted Data SNYK-JAVA-COMFASTERXMLJACKSONCORE-1009829
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.708
No
No Known Exploit
No Path Found

563/1000  Why? Has a fix available, CVSS 8.1
Deserialization of Untrusted Data SNYK-JAVA-COMFASTERXMLJACKSONCORE-1047324
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.708
No
No Known Exploit
No Path Found

560/1000  Why? Has a fix available, CVSS 8.2
XML External Entity (XXE) Injection SNYK-JAVA-COMFASTERXMLJACKSONCORE-1048302
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.708
No
No Known Exploit
No Path Found

555/1000  Why? Has a fix available, CVSS 8.1
Deserialization of Untrusted Data SNYK-JAVA-COMFASTERXMLJACKSONCORE-1052449
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.708
No
No Known Exploit
No Path Found

555/1000  Why? Has a fix available, CVSS 8.1
Deserialization of Untrusted Data SNYK-JAVA-COMFASTERXMLJACKSONCORE-1052450
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.708
No
No Known Exploit
No Path Found

630/1000  Why? Proof of Concept exploit, Has a fix available, CVSS 8.1
Deserialization of Untrusted Data SNYK-JAVA-COMFASTERXMLJACKSONCORE-1054588
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.708
No
Proof of Concept
No Path Found

563/1000  Why? Has a fix available, CVSS 8.1
Deserialization of Untrusted Data SNYK-JAVA-COMFASTERXMLJACKSONCORE-1056414
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.708
No
No Known Exploit
No Path Found

630/1000  Why? Proof of Concept exploit, Has a fix available, CVSS 8.1
Deserialization of Untrusted Data SNYK-JAVA-COMFASTERXMLJACKSONCORE-1056416
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.708
No
Proof of Concept
No Path Found

563/1000  Why? Has a fix available, CVSS 8.1
Deserialization of Untrusted Data SNYK-JAVA-COMFASTERXMLJACKSONCORE-1056417
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.708
No
No Known Exploit
No Path Found

630/1000  Why? Proof of Concept exploit, Has a fix available, CVSS 8.1
Deserialization of Untrusted Data SNYK-JAVA-COMFASTERXMLJACKSONCORE-1056418
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.708
No
Proof of Concept
No Path Found

563/1000  Why? Has a fix available, CVSS 8.1
Deserialization of Untrusted Data SNYK-JAVA-COMFASTERXMLJACKSONCORE-1056419
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.708
No
No Known Exploit
No Path Found

630/1000  Why? Proof of Concept exploit, Has a fix available, CVSS 8.1
Deserialization of Untrusted Data SNYK-JAVA-COMFASTERXMLJACKSONCORE-1056420
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.708
No
Proof of Concept
No Path Found

630/1000  Why? Proof of Concept exploit, Has a fix available, CVSS 8.1
Deserialization of Untrusted Data SNYK-JAVA-COMFASTERXMLJACKSONCORE-1056421
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.708
No
Proof of Concept
No Path Found

563/1000  Why? Has a fix available, CVSS 8.1
Deserialization of Untrusted Data SNYK-JAVA-COMFASTERXMLJACKSONCORE-1056424
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.708
No
No Known Exploit
No Path Found

563/1000  Why? Has a fix available, CVSS 8.1
Deserialization of Untrusted Data SNYK-JAVA-COMFASTERXMLJACKSONCORE-1056425
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.708
No
No Known Exploit
No Path Found

630/1000  Why? Proof of Concept exploit, Has a fix available, CVSS 8.1
Deserialization of Untrusted Data SNYK-JAVA-COMFASTERXMLJACKSONCORE-1056426
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.708
No
Proof of Concept
No Path Found

630/1000  Why? Proof of Concept exploit, Has a fix available, CVSS 8.1
Deserialization of Untrusted Data SNYK-JAVA-COMFASTERXMLJACKSONCORE-1056427
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.708
No
Proof of Concept
No Path Found

555/1000  Why? Has a fix available, CVSS 8.1
Deserialization of Untrusted Data SNYK-JAVA-COMFASTERXMLJACKSONCORE-1061931
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.708
No
No Known Exploit
No Path Found

630/1000  Why? Proof of Concept exploit, Has a fix available, CVSS 8.1
Deserialization of Untrusted Data SNYK-JAVA-COMFASTERXMLJACKSONCORE-174736
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.708
No
Proof of Concept
No Path Found

525/1000  Why? Has a fix available, CVSS 7.5
Denial of Service (DoS) SNYK-JAVA-COMFASTERXMLJACKSONCORE-2421244
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.708
No
No Known Exploit
No Path Found

520/1000  Why? Proof of Concept exploit, Has a fix available, CVSS 5.9
Denial of Service (DoS) SNYK-JAVA-COMFASTERXMLJACKSONCORE-3038424
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.708
No
Proof of Concept
No Path Found

670/1000  Why? Proof of Concept exploit, Is reachable, Has a fix available, CVSS 5.9
Denial of Service (DoS) SNYK-JAVA-COMFASTERXMLJACKSONCORE-3038426
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.708
No
Proof of Concept
Reachable

520/1000  Why? Proof of Concept exploit, Has a fix available, CVSS 5.9
Deserialization of Untrusted Data SNYK-JAVA-COMFASTERXMLJACKSONCORE-450207
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.708
No
Proof of Concept
No Path Found

705/1000  Why? Mature exploit, Has a fix available, CVSS 8.1
Deserialization of Untrusted Data SNYK-JAVA-COMFASTERXMLJACKSONCORE-450917
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.708
No
Mature
No Path Found

555/1000  Why? Has a fix available, CVSS 8.1
Deserialization of Untrusted Data SNYK-JAVA-COMFASTERXMLJACKSONCORE-455617
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.708
No
No Known Exploit
No Path Found

555/1000  Why? Has a fix available, CVSS 8.1
Deserialization of Untrusted Data SNYK-JAVA-COMFASTERXMLJACKSONCORE-467014
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.708
No
No Known Exploit
No Path Found

675/1000  Why? Mature exploit, Has a fix available, CVSS 8.1
Deserialization of Untrusted Data SNYK-JAVA-COMFASTERXMLJACKSONCORE-467015
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.708
No
Mature
No Path Found

563/1000  Why? Has a fix available, CVSS 8.1
Deserialization of Untrusted Data SNYK-JAVA-COMFASTERXMLJACKSONCORE-467016
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.708
No
No Known Exploit
No Path Found

555/1000  Why? Has a fix available, CVSS 8.1
Deserialization of Untrusted Data SNYK-JAVA-COMFASTERXMLJACKSONCORE-469674
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.708
No
No Known Exploit
No Path Found

555/1000  Why? Has a fix available, CVSS 8.1
Deserialization of Untrusted Data SNYK-JAVA-COMFASTERXMLJACKSONCORE-469676
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.708
No
No Known Exploit
No Path Found

555/1000  Why? Has a fix available, CVSS 8.1
Deserialization of Untrusted Data SNYK-JAVA-COMFASTERXMLJACKSONCORE-471943
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.708
No
No Known Exploit
No Path Found

555/1000  Why? Has a fix available, CVSS 8.1
Deserialization of Untrusted Data SNYK-JAVA-COMFASTERXMLJACKSONCORE-472980
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.708
No
No Known Exploit
No Path Found

555/1000  Why? Has a fix available, CVSS 8.1
Deserialization of Untrusted Data SNYK-JAVA-COMFASTERXMLJACKSONCORE-540500
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.708
No
No Known Exploit
No Path Found

630/1000  Why? Proof of Concept exploit, Has a fix available, CVSS 8.1
Deserialization of Untrusted Data SNYK-JAVA-COMFASTERXMLJACKSONCORE-548451
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.708
No
Proof of Concept
No Path Found

630/1000  Why? Proof of Concept exploit, Has a fix available, CVSS 8.1
Deserialization of Untrusted Data SNYK-JAVA-COMFASTERXMLJACKSONCORE-559094
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.708
No
Proof of Concept
No Path Found

630/1000  Why? Proof of Concept exploit, Has a fix available, CVSS 8.1
Deserialization of Untrusted Data SNYK-JAVA-COMFASTERXMLJACKSONCORE-559106
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.708
No
Proof of Concept
No Path Found

630/1000  Why? Proof of Concept exploit, Has a fix available, CVSS 8.1
Deserialization of Untrusted Data SNYK-JAVA-COMFASTERXMLJACKSONCORE-560762
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.708
No
Proof of Concept
No Path Found

563/1000  Why? Has a fix available, CVSS 8.1
Deserialization of Untrusted Data SNYK-JAVA-COMFASTERXMLJACKSONCORE-560766
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.708
No
No Known Exploit
No Path Found

563/1000  Why? Has a fix available, CVSS 8.1
Deserialization of Untrusted Data SNYK-JAVA-COMFASTERXMLJACKSONCORE-561362
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.708
No
No Known Exploit
No Path Found

563/1000  Why? Has a fix available, CVSS 8.1
Deserialization of Untrusted Data SNYK-JAVA-COMFASTERXMLJACKSONCORE-561373
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.708
No
No Known Exploit
No Path Found

630/1000  Why? Proof of Concept exploit, Has a fix available, CVSS 8.1
Deserialization of Untrusted Data SNYK-JAVA-COMFASTERXMLJACKSONCORE-561585
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.708
No
Proof of Concept
No Path Found

563/1000  Why? Has a fix available, CVSS 8.1
Deserialization of Untrusted Data SNYK-JAVA-COMFASTERXMLJACKSONCORE-561586
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.708
No
No Known Exploit
No Path Found

563/1000  Why? Has a fix available, CVSS 8.1
Deserialization of Untrusted Data SNYK-JAVA-COMFASTERXMLJACKSONCORE-561587
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.708
No
No Known Exploit
No Path Found

563/1000  Why? Has a fix available, CVSS 8.1
Deserialization of Untrusted Data SNYK-JAVA-COMFASTERXMLJACKSONCORE-564887
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.708
No
No Known Exploit
No Path Found

563/1000  Why? Has a fix available, CVSS 8.1
Deserialization of Untrusted Data SNYK-JAVA-COMFASTERXMLJACKSONCORE-564888
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.708
No
No Known Exploit
No Path Found

563/1000  Why? Has a fix available, CVSS 8.1
Deserialization of Untrusted Data SNYK-JAVA-COMFASTERXMLJACKSONCORE-570625
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.708
No
No Known Exploit
No Path Found

563/1000  Why? Has a fix available, CVSS 8.1
Deserialization of Untrusted Data SNYK-JAVA-COMFASTERXMLJACKSONCORE-572300
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.708
No
No Known Exploit
No Path Found

563/1000  Why? Has a fix available, CVSS 8.1
Deserialization of Untrusted Data SNYK-JAVA-COMFASTERXMLJACKSONCORE-572314
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.708
No
No Known Exploit
No Path Found

563/1000  Why? Has a fix available, CVSS 8.1
Deserialization of Untrusted Data SNYK-JAVA-COMFASTERXMLJACKSONCORE-572316
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.708
No
No Known Exploit
No Path Found

555/1000  Why? Has a fix available, CVSS 8.1
Deserialization of Untrusted Data SNYK-JAVA-COMFASTERXMLJACKSONCORE-6056407
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.708
No
No Known Exploit
No Path Found

780/1000  Why? Proof of Concept exploit, Is reachable, Has a fix available, CVSS 8.1
Deserialization of Untrusted Data SNYK-JAVA-COMFASTERXMLJACKSONCORE-608664
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.708
No
Proof of Concept
Reachable

563/1000  Why? Has a fix available, CVSS 8.1
Deserialization of Untrusted Data SNYK-JAVA-COMFASTERXMLJACKSONCORE-72448
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.708
No
No Known Exploit
No Path Found

563/1000  Why? Has a fix available, CVSS 8.1
Deserialization of Untrusted Data SNYK-JAVA-COMFASTERXMLJACKSONCORE-72449
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.708
No
No Known Exploit
No Path Found

563/1000  Why? Has a fix available, CVSS 8.1
Deserialization of Untrusted Data SNYK-JAVA-COMFASTERXMLJACKSONCORE-72450
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.708
No
No Known Exploit
No Path Found

563/1000  Why? Has a fix available, CVSS 8.1
Deserialization of Untrusted Data SNYK-JAVA-COMFASTERXMLJACKSONCORE-72451
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.708
No
No Known Exploit
No Path Found

563/1000  Why? Has a fix available, CVSS 8.1
Deserialization of Untrusted Data SNYK-JAVA-COMFASTERXMLJACKSONCORE-72882
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.708
No
No Known Exploit
No Path Found

563/1000  Why? Has a fix available, CVSS 8.1
Deserialization of Untrusted Data SNYK-JAVA-COMFASTERXMLJACKSONCORE-72883
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.708
No
No Known Exploit
No Path Found

563/1000  Why? Has a fix available, CVSS 8.1
Deserialization of Untrusted Data SNYK-JAVA-COMFASTERXMLJACKSONCORE-72884
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.708
No
No Known Exploit
No Path Found

525/1000  Why? Has a fix available, CVSS 7.5
Denial of Service (DoS) SNYK-JAVA-COMFASTERXMLJACKSONDATAFORMAT-1047329
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.708
No
No Known Exploit
No Path Found

415/1000  Why? Has a fix available, CVSS 5.3
Improper Input Validation SNYK-JAVA-ORGAPACHEHTTPCOMPONENTS-1048058
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.708
No
No Known Exploit
No Path Found

525/1000  Why? Has a fix available, CVSS 7.5
Allocation of Resources Without Limits or Throttling SNYK-JAVA-SOFTWAREAMAZONION-6153869
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.708
No
No Known Exploit
No Path Found

(*) Note that the real score may have changed since the PR was raised.
Check the changes in this PR to ensure they won't cause issues with your project.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.
For more information:
🧐 View latest project report
🛠 Adjust project settings
📚 Read more about Snyk's upgrade and patch logic

Learn how to fix vulnerabilities with free interactive lessons:
🦉 Directory Traversal
🦉 Deserialization of Untrusted Data
🦉 XML External Entity (XXE) Injection
🦉 More lessons are available in Snyk Learn

Checkmarx One – Scan Summary & Details – 85ecb5fd-a8b8-4187-831c-0ae24d82e14d
New Issues

Severity
Issue
Source File / Package
Checkmarx Insight

CVE-2023-34034
Maven-org.springframework.security:spring-security-web-5.0.7.RELEASE
Vulnerable Package

CVE-2023-34034
Maven-org.springframework.security:spring-security-config-5.0.7.RELEASE
Vulnerable Package

CVE-2023-52428
Maven-com.nimbusds:nimbus-jose-jwt-9.8.1
Vulnerable Package

CVE-2023-6481
Maven-ch.qos.logback:logback-core-1.3.5
Vulnerable Package

CVE-2023-6481
Maven-ch.qos.logback:logback-core-1.2.9
Vulnerable Package

CVE-2023-6481
Maven-ch.qos.logback:logback-core-1.2.3
Vulnerable Package

CVE-2023-6481
Maven-ch.qos.logback:logback-core-1.2.11
Vulnerable Package

CVE-2023-6481
Maven-ch.qos.logback:logback-core-1.1.11
Vulnerable Package

CVE-2024-22243
Maven-org.springframework:spring-web-5.0.8.RELEASE
Vulnerable Package

CVE-2024-22257
Maven-org.springframework.security:spring-security-core-5.0.7.RELEASE
Vulnerable Package

CVE-2024-22259
Maven-org.springframework:spring-web-5.0.8.RELEASE
Vulnerable Package

CVE-2024-22262
Maven-org.springframework:spring-web-5.0.8.RELEASE
Vulnerable Package

CVE-2024-23672
Maven-org.apache.tomcat.embed:tomcat-embed-core-8.5.32
Vulnerable Package

CVE-2024-23672
Maven-org.apache.tomcat.embed:tomcat-embed-websocket-8.5.32
Vulnerable Package

CVE-2024-24549
Maven-org.apache.tomcat.embed:tomcat-embed-core-8.5.32
Vulnerable Package

CVE-2024-29180
Npm-webpack-dev-middleware-5.3.0
Vulnerable Package

Missing User Instruction
/dockerfile: 1
A user should be specified in the dockerfile, otherwise the image will run as root

Missing User Instruction
/Dockerfile: 2
A user should be specified in the dockerfile, otherwise the image will run as root

Missing User Instruction
/dockerfile: 1
A user should be specified in the dockerfile, otherwise the image will run as root

Missing User Instruction
/dockerfile: 1
A user should be specified in the dockerfile, otherwise the image will run as root

Passwords And Secrets - Generic Password
/mysql-check.yaml: 10
Query to find passwords and secrets in infrastructure code.

Add Instead of Copy
/dockerfile: 10
Using ADD to load external installation scripts could lead to an evil web server leveraging this and loading a malicious script.

Add Instead of Copy
/Dockerfile: 10
Using ADD to load external installation scripts could lead to an evil web server leveraging this and loading a malicious script.

CVE-2023-33202
Maven-org.bouncycastle:bcprov-jdk15on-1.67
Vulnerable Package

CVE-2023-33202
Maven-org.bouncycastle:bcprov-jdk15on-1.56
Vulnerable Package

CVE-2024-29025
Maven-io.netty:netty-codec-http-4.1.79.Final
Vulnerable Package

CVE-2024-29025
Maven-io.netty:netty-codec-http-4.1.77.Final
Vulnerable Package

CVE-2024-29025
Maven-io.netty:netty-codec-http-4.1.27.Final
Vulnerable Package

CVE-2024-29025
Maven-io.netty:netty-codec-http-4.1.32.Final
Vulnerable Package

Image Version Not Explicit
/dockerfile: 1
Always tag the version of an image explicitly

Image Version Not Explicit
/Dockerfile: 2
Always tag the version of an image explicitly

Pip install Keeping Cached Packages
/dockerfile: 10
When installing packages with pip, the '--no-cache-dir' flag should be set to make Docker images smaller

Pip install Keeping Cached Packages
/Dockerfile: 4
When installing packages with pip, the '--no-cache-dir' flag should be set to make Docker images smaller

Pip install Keeping Cached Packages
/dockerfile: 4
When installing packages with pip, the '--no-cache-dir' flag should be set to make Docker images smaller

Pip install Keeping Cached Packages
/dockerfile: 3
When installing packages with pip, the '--no-cache-dir' flag should be set to make Docker images smaller

RUN Instruction Using 'cd' Instead of WORKDIR
/dockerfile: 4
When using RUN command 'cd' should only be used for full path. For relative path make use of WORKDIR command instead.

Unpinned Actions Full Length Commit SHA
/codeQl.yaml: 65
Pinning an action to a full length commit SHA is currently the only way to use an action as an immutable release. Pinning to a particular SHA helps...

Unpinned Actions Full Length Commit SHA
/codeQl.yaml: 84
Pinning an action to a full length commit SHA is currently the only way to use an action as an immutable release. Pinning to a particular SHA helps...

Unpinned Actions Full Length Commit SHA
/codeQl.yaml: 50
Pinning an action to a full length commit SHA is currently the only way to use an action as an immutable release. Pinning to a particular SHA helps...

Unpinned Package Version in Apk Add
/Dockerfile: 4
Package version pinning reduces the range of versions that can be installed, reducing the chances of failure due to unanticipated changes

Unpinned Package Version in Apk Add
/dockerfile: 1
Package version pinning reduces the range of versions that can be installed, reducing the chances of failure due to unanticipated changes

Unpinned Package Version in Apk Add
/dockerfile: 10
Package version pinning reduces the range of versions that can be installed, reducing the chances of failure due to unanticipated changes

Unpinned Package Version in Apk Add
/dockerfile: 3
Package version pinning reduces the range of versions that can be installed, reducing the chances of failure due to unanticipated changes

Unpinned Package Version in Pip Install
/dockerfile: 3
Package version pinning reduces the range of versions that can be installed, reducing the chances of failure due to unanticipated changes

Unpinned Package Version in Pip Install
/dockerfile: 10
Package version pinning reduces the range of versions that can be installed, reducing the chances of failure due to unanticipated changes

Unpinned Package Version in Pip Install
/dockerfile: 4
Package version pinning reduces the range of versions that can be installed, reducing the chances of failure due to unanticipated changes

Unpinned Package Version in Pip Install
/Dockerfile: 4
Package version pinning reduces the range of versions that can be installed, reducing the chances of failure due to unanticipated changes

Healthcheck Instruction Missing
/dockerfile: 1
Ensure that HEALTHCHECK is being used. The HEALTHCHECK instruction tells Docker how to test a container to check that it is still working

Healthcheck Instruction Missing
/dockerfile: 1
Ensure that HEALTHCHECK is being used. The HEALTHCHECK instruction tells Docker how to test a container to check that it is still working

Healthcheck Instruction Missing
/dockerfile: 1
Ensure that HEALTHCHECK is being used. The HEALTHCHECK instruction tells Docker how to test a container to check that it is still working

Healthcheck Instruction Missing
/Dockerfile: 2
Ensure that HEALTHCHECK is being used. The HEALTHCHECK instruction tells Docker how to test a container to check that it is still working

IAM Access Analyzer Not Enabled
/CloudFormation.yaml: 2
IAM Access Analyzer should be enabled and configured to continuously monitor resource permissions

MAINTAINER Instruction Being Used
/Dockerfile: 3
The MAINTAINER instruction sets the Author field of the generated images. The LABEL instruction is a much more flexible version of this and you sho...

MAINTAINER Instruction Being Used
/dockerfile: 2
The MAINTAINER instruction sets the Author field of the generated images. The LABEL instruction is a much more flexible version of this and you sho...

Multiple RUN, ADD, COPY, Instructions Listed
/dockerfile: 144
Multiple commands (RUN, COPY, ADD) should be grouped in order to reduce the number of layers.

Fixed Issues

Severity
Issue
Source File / Package

CVE-2022-38900
Npm-decode-uri-component-0.2.2


tdl tsugumi.sys results in bsod

Going step by step through this guide: https://github.com/hfiref0x/VBoxHardenedLoader/blob/master/Binary/install.md
Oracle 6.0.6 & Windows 10 x64
Everything was fine until step 4 which results in bsod.
Appreciate any help&advices.

Possible but not expected behavior. Do not use Windows 10. No hacks for PatchGuard will be added.
To get rid of TDL which is the source of this behavior driver must be recompiled in ReleaseSigned configuration and code signing used. Then https://github.com/hfiref0x/VBoxHardenedLoader/blob/master/Binary/install_signed.md must be used.
Or optionally you can drop that part that needs driver. Edit vboxmanage scripts and comment/remove lines responsible for setting DsdtFilePath/SsdtFilePath. Then you can stop after step 3.

Possible but not expected behavior. Do not use Windows 10. No hacks for PatchGuard will be added.
To get rid of TDL which is the source of this behavior driver must be recompiled in ReleaseSigned configuration and code signing used. Then https://github.com/hfiref0x/VBoxHardenedLoader/blob/master/Binary/install_signed.md must be used.
Or optionally you can drop that part that needs driver. Edit vboxmanage scripts and comment/remove lines responsible for setting DsdtFilePath/SsdtFilePath. Then you can stop after step 3.

Thank you! Already installed win7, trying out!:)

Possible but not expected behavior. Do not use Windows 10. No hacks for PatchGuard will be added.

Well, I have followed step by step and it worked very well, thank you very much!
Is there any chance to get or find any solution that would hide virtual machine and work with 3d acceleration? I'm trying to find anything possible to run old unreal engine application, but it always fails either due to winlicense issue or lack of 3d acceleration :(

Have no idea. Initial purpose of this loader was make some malware work in VM. It never was about gaming or anything else above that.


missing prompt explanations like 2-3-1-2

Hello team, thanks for this inspiring work!
I find that some prompts are not explained in the paper, such as 2-3-1-2, 2-3-2-4 and 6-6-6-7 as shown in the line of code here. It seems that the numbering rules here are not consistent with the Appendix.D of the paper. Could you tell me what is the correct prompt rule for the code? Thank you!

Please feel free to check the all_graph_templates.py python file, which are all aligned. Thank you.


Visual Studio can not resolve the dependency library which i built on my own

I built a .net core library based on net45 and netstandard1.3, when I reference this library in my ASP.NET Core MVC site like this

The Visual Studio 2015 cannot resolve this packge as a dependency, when i call the methods which in library, vs display red font, intelli sense doesn't work well, but compiler succeed.

@v-zhidu can you upload your project to GitHub so we can take a look? Or create a simplified repro project that we can take a look at?
@pranavkm thoughts on what might be going on here?

Doesn't look like the dependency is restored. @v-zhidu can you expand the references node in your project - that should say if there are restore errors. Additionally, when specifying target: "project", the version node isn't required.

Looks like resharper. Update to the latest resharper and try again.


Improve encryption scheme & USD path saving

Leaving this as a tracking bug for later. We can improve our encryption scheme such that:

Texture maps etc. also get encrypted.
We don't do tricks around where files are loaded from (e.g. the USD path will actually be in the tmp dir)
We on-demand decrypt additional files using some sort of util library (e.g. need a new material? decrypted right when you need it)
We update our current code so that instead of absolute paths (which will no longer make sense), all USD paths contain relative references.

@cgokmen can we close this?

I think so


Listing blocks SSR slows down the page rendering

Describe the bug
I'm trying Volto 14 on a big website (yes, it's always the same) and i've found that with listing blocks' ssr enabled (getAsyncData) the ssr page took a lot of time to be rendered (~ 12 seconds instead of ~2 with listing blocks' ssr disabled).
The user have to wait for the ssr page and then the client-side rendering (that made the same requests) to have a working page.
Is there anything that we can do to avoid this double rendering/requests?
Ok, we could cache query responses with varnish somehow, but is there something that we can do on Volto?
Maybe enable the SSR only for robots or using a pre-populated store in the client (populated by the ssr) so we don't need to fetch all data from the backend twice.
Software (please complete the following information):

Volto Version 14

@cekk Is this with fullobjects or with the summarized listing?

With summarized

+1 for going with React hydration and preloaded state, like it's documented here:
https://redux.js.org/usage/server-rendering#the-client-side
In one of our projects it was also a game changer in Developer Experience!

@mtoepfl We already have hydration of React components and redux state with Volto.
The problem is like this:

One of the most popular Volto blocks is the "listing block", which works almost like a Collection from Plone, but can be greatly enhanced with additional "listing templates" and even per-listing-template editing options
Before Volto 14 the listing block was loaded async, which meant that on the initial Server-Side-Rendered HTML page, the content of that listing was not present. The absence of that information from the rendered page can create issues with search engines, for example
With Volto 14 we have a rather complex mechanism where, when rendering the SSR HTML, we're making the listing endpoint request but we're waiting for the return of that data, so that it can be included in the output html. This is based on our asyncConnect (based on redux-connect) and this bit of code that inspects the content for blocks that define a getAsyncData method

@cekk: You can override the listing block's getASyncData with a method that returns a simple empty promise. This would remove the serverside rendering of listing blocks. Some other options would be, for example, to make getAsyncData smarter, to look into the listing block data, so that the SSR can be enabled/disabled from the block.
But, as you suggest, the double request problem should be solved. I'm not 100% sure that the redux data is hydrated in a way that's compatible with the rest of the client-side code (matching URLs as @id, for ex, etc.

Thanks for clarification. Allow me another question to the getAsyncData mechanism:
In
https://github.com/plone/volto/blob/d604140d293fef52566a88de1f4906687269f604/src/components/manage/Blocks/Listing/getAsyncData.js#L5
redux-dispatch-function is called, so after SSR all requested data should be in window.__data and so in client-side initiale redux-store already, right? So why fetchContent is needed in client-side before first hydration?

So why fetchContent is needed on client-side before first hydration?

It's not needed, you are correct. The fix would be to make this smarter. The querystringsearch reducer would have to keep all the results per query params, so that they can be checked in the redux store and then a query can be triggered appropriately. It wouldn't be ideal and some other form of "invalidation" may be needed. Perhaps only trigger for the case when the start is 0, then immediately trigger an invalidation of that, or maybe mark the SSR result in a special way... either way, it gets more complex and in the end, it's just an optimization.
I'd be more interested in understanding why the catalog result takes so long to generate, I think it's a "healthier" thing to pursue.

@tiberiuichim yes, i've overrided getAsyncData right now and things get better.
For what i've seen, the problem isn't a single query to the catalog because if i try one single endpoint call, it's fast. The problem is that in my homepage i have several listing blocks and there are ~10/15 @querystring-search (plus other standard enpoint calls that trigger something in the catalog too) calls in parallel, and some of them took ~20/25 secs.
I have the same situation (homepage with several listing blocks) also in other (lighter) volto sites (with the same products installed), but there i don't have these numbers.
The main difference is the catalog dimension (some k of objects versus 300k).

@cekk Maybe optimize ZODB cache params so that the catalog fits in RAM? If catalog queries are that slow, it's a problem.

We hit that too, and had to disable it. It's not that the code is wrong. We need to come up with a solution of the paradigm of landing pages that could have a lot of listings, a lot of teasers, and blocks that might want to pull data from the database in multiple approaches.
/cc @tisto

@sneridagh I propose a "volatile" @component in restapi response that stashes data meant to be read by each block (in the frontend). And a subscriber-based block-transformer like mechanism for each block to write its own "volatile" data.
At some point I've proposed the _v_*  volatile block transformer, which could be used for the same purpose (I use them for slots). The downside is that there needs some code in Volto that goes through the current content data (in the form submission) and strips it, so that it doesn't get sent to the server. It feels dirtier.

Interesting approach!
@ericof proposed me a similar solution for dealing with vocabularies in brain restapi responses not long ago, and he's going to give it a try soon.


Make bots for all platforms run the same unit tests.

Currently, the various platform specific bots run different test targets in a mostly arbitrary order. Because of this, some platform bots report success even though targets on other platforms are failing (the target have to be cross platform).
For example, "engine unit tests" is cross platform but is not run on the Mac bots. Due to this, the Mac builder for this commit reported success but the linux variant did not. Also the order of the steps on the buildbot are all different.

I don't care about this anymore.


stringObjs support

Hello!
I need to convert CSV to key:value dictionary. Values need to be string-typed.
From the example, I realized that there are two options:

Parse to string arrays
Parse to key:value, but values are typed

// native format (fastest)
let stringArrs = parser.stringArrs(csvStr); // [ ['1','2','3'], ['4','5','6'] ]
// typed formats (internally converted from native)
let typedObjs  = parser.typedObjs(csvStr);  // [ {a: 1, b: 2, c: 3}, {a: 4, b: 5, c: 6} ]

There is no way to parse csv to objects where values are strings.

worth adding, i think

just realized the solution is to add one line to modify the parsed schema to set all columns to string type:
https://jsfiddle.net/zv89euo5/
const { inferSchema, initParser } = uDSV;

const csvStr = `
a,b
1,50000
10,5
`.trim();

const schema = inferSchema(csvStr);

// set all columns as strings
schema.cols.forEach(c => { c.type = 's' });

const parser = initParser(schema);

const data = parser.typedObjs(csvStr);

console.log(data);

This is obviously a very simple fix, thanks @leeoniya ! Though it definitely feels like the interface of the library should allow this more explicitly, or that at least it would be worth giving this as an example explicitly in the docs. I was initially confused and wondering if I was missing something in the docs about such a functionality, until I found this issue.
The main use case where this comes in handy is where I don't know the list of columns, but I know that all of the should be read as strings. But also, it's easiest for me to just get an array of objects from the parser. This feels like a very common case?
In terms of an interface, if parser.stringObjs() is not desirable for some reason, it would make most sense to have an option for inferSchema, something like:
inferSchema(csvText, { type: 's' })

added in 55686c5


bug:

Neovim version (nvim -v)
0.10.2
Neovim distribution
kickstart
Operating system
MacOS
Terminal emulator / GUI
WezTerm
Describe the bug
The following markdown isn't rendered correctly if it ends with a number
_works_

_does not work9_

Expected behavior
the second example should render as the first one

Healthcheck output
render-markdown: require("render-markdown.health").check()

render-markdown.nvim [version] ~
- OK plugin 7.6.2
- OK neovim >= 0.10

render-markdown.nvim [configuration] ~
- OK valid

render-markdown.nvim [nvim-treesitter] ~
- OK installed
- OK markdown: parser installed
- OK markdown: highlight enabled
- OK markdown_inline: parser installed
- OK markdown_inline: highlight enabled
- WARNING latex: parser not installed
  - ADVICE:
    - Disable LaTeX support to avoid this warning by setting { latex = { enabled = false } }

render-markdown.nvim [executables] ~
- WARNING latex2text: not installed
  - ADVICE:
    - Disable LaTeX support to avoid this warning by setting { latex = { enabled = false } }

render-markdown.nvim [conflicts] ~
- OK headlines: not installed
- OK obsidian: installed but should not conflict

Plugin configuration
{
    'MeanderingProgrammer/render-markdown.nvim',
    dependencies = { 'nvim-treesitter/nvim-treesitter', 'echasnovski/mini.nvim' },
  },

Plugin error log
2024-10-03 08:47:35 ERROR [fail 50] - no treesitter parser found
2024-10-04 11:22:03 ERROR [fail 40] - no treesitter parser found
2024-10-07 13:39:36 ERROR [fail 156] - no treesitter parser found
2024-10-09 09:16:17 ERROR [fail 17] - no treesitter parser found
2024-10-09 09:16:18 ERROR [fail 1] - no treesitter parser found
2024-10-17 13:14:12 ERROR [fail 127] - no treesitter parser found
2024-10-17 13:52:47 ERROR [fail 127] - no treesitter parser found

Confirmations

[X] I have updated this plugin to the latest version using my plugin manager
[X] I have provided the text contained in all screenshots as raw text in this issue. This means if there is a screenshot below it is the copy pasted contents of the file in the screenshot. I understand that my issue will be closed if I have not.

Additional information
No response

Issue in the underlying tree-sitter parser, more details here: https://github.com/tree-sitter-grammars/tree-sitter-markdown/issues/8


fix(Dependencies): Pin all deps on minor version

This PR pins all dependencies and devDependencies on minor versions. I also consolidated all commonly used dependencies to most recent (supported) versions. Namely:

<EMAIL_ADDRESS>(we're upgrading to 2.x with #954)
<EMAIL_ADDRESS><EMAIL_ADDRESS>
Fixes #967

@simondel you can merge this if you're happy.

There was a rather interesting loophole here by which we still got @types for node@latest (even though we really want to make sure we support node 6, so pinned that version down). Fixed with latest commit.

Some more shenanigans with the jest integration tests... @JoshuaKGoldberg you weren't kidding

It's impossible to exactly follow semver, as even additions to an existing API can be breaking changes

Nice job!


Proposal: helm lint --detect-unused-values

tl;dr
I would like to run helm lint with --detect-unused-values option, which will raise an error if any of keys defined in values is not used in the helm package.
Why?
Short answer: to catch typos in helm values. Also, to make upgrading to new version easier (from time to time some values.yaml keys are getting deprecated and if devs don't pay close attention, they'll live with the feeling that those values are still doing their job.
Last but not least, to eliminate dead code from your values.yaml easily.
Possible solution
Load all keys from values to array before linting, and then remove them from it once they're used. If array is not empty after linting is done, raise error that remaining values are not used.
However, I haven't dive deeply into lint code, so maybe there's easier way to do it.
Thoughts? ;)
PS. I'm happy to implement it!

Hey @hidalgopl! This sounds like a great idea! I think I'd want to bring this up after the holidays in the Helm dev call to discuss. As for implementing it, I can make an educated guess that I think the other maintainers are also going to be fine with this. But if you want to wait until we've discussed it some more, that is fine as well
As for your implementation idea, nested values may be a little difficult with it, but it definitely would be a start.

SGTM

Hi @hidalgopl ,
I looked briefly into how to implement this. Since Helm uses text/template, specifically ExecuteTemplate, to render templates, I would first extend that package to return the list of used variables. Otherwise, Helm would need to reimplement a lot of the logic of walking the template Tree. So I would proceed as follows:

Add to state a map of used variables: https://golang.org/src/text/template/exec.go#L34
Add to evalVariableNode code to update the map of used variables: https://golang.org/src/text/template/exec.go#L541
Let ExecuteTemplate return said map in addition to the error. Alternatively, consider adding a new function: https://golang.org/src/text/template/exec.go#L221
Add code to the Helm engine to return the map of used values from text/template: https://github.com/helm/helm/blob/master/pkg/engine/engine.go#L227
Add code to Helm lint to compare the map of values used during rendering with the map of values provided for rendering: https://github.com/helm/helm/blob/master/pkg/lint/rules/template.go#L76) to the [map of provided values.
Finally, add a unusedvalue test chart: https://github.com/helm/helm/tree/master/pkg/lint/rules/testdata, and make sure it gets tested: https://github.com/helm/helm/blob/master/pkg/lint/lint_test.go#L32.

I started with step 6 here: https://github.com/cristiklein/helm/tree/feat/detect-unused
My 2 cents,
Cristian

Thanks for useful tips @cristiklein ! Gonna start working on #1

Note that when implementing this for lint, we do not want any changes that will degrade performance for non-lint runs (e.g. helm install or helm template). So this solution needs to be largely confined to the linter package.

Hi, @hidalgopl - there have been some changes in helm lint, so if you're working on this, you may want to make sure you're working from the most recent codebase. If you have a suggestion for the linter, we now have a defined process so that if you'd like, you can submit a Helm Improvement Proposal so as to work in the community to make these ideas a reality: https://github.com/helm/community/blob/master/hips/hip-0001.md - meanwhile, I will close this issue. Thanks!


Changing Working days and hour

🚨 Looks like you arrived from the internal review site
🚨 Do not enter Microsoft confidential information here
It seems like there isn't way to change default working days and hours as documented here.
https://learn.microsoft.com/en-us/viva/insights/advanced/reference/glossary
Your admin can change the default working days and hours in
Analyst settings > System defaults

Document Details
⚠ Do not edit this section. It is required for learn.microsoft.com ➟ GitHub issue linking.

ID: 8504630e-00b3-e533-2046-d25cc22f34c4
Version Independent ID: 8504630e-00b3-e533-2046-d25cc22f34c4
Content: Viva Insights advanced insights glossary
Content Source: Viva/insights/advanced/reference/glossary.md
Service: viva
Sub-service: viva-insights
GitHub Login: @lilyolason
Microsoft Alias: v-lilyolason

The documentation team confirms that the glossary has been updated to reflect that "working hours" reflects concurrency with user Outlook settings.
Closing this issue.
cc: @get-itips @scanum


Expanded CrateDB keyword list

Extracted the keywords from https://crate.io/docs/reference/sql/sql.html and from https://crate.io/docs/reference/sql/reference/lexical_structure.html#key-words-and-identifiers

Coverage remained the same at 81.226% when pulling e00bbefee749e590f0a905ee317d9c97b5e059c0 on mika/expandedKeywords into 980778ca11ac4b999c2f232edae65961e994856f on master.

Codecov Report

Merging #176 into master will not change coverage.
The diff coverage is n/a.

@@           Coverage Diff           @@
##           master     #176   +/-   ##
=======================================
  Coverage   81.11%   81.11%
=======================================
  Files          16       16
  Lines        1859     1859
=======================================
  Hits         1508     1508
  Misses        351      351

Impacted Files
Coverage Δ

src/crate/crash/repl.py
51.56% <ø> (ø)
:white_check_mark:

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update 980778c...e00bbef. Read the comment docs.

Coverage remained the same at 81.287% when pulling b5e18691823c3707c83ef773efc4ff2dcfcaa092 on mika/expandedKeywords into fd4334c22e134f888c2e5c9038beee08327851e8 on master.


AI - Better shade cover

Changed the conditions of when the AI should remain in shade (doesn't fix the mushroom issue). Specifically, made the zombies light-sane even when idle and not chasing player.
The change is pretty trivial, it is very unlikely to break anything.

Merge?


fix(material/paginator): match visual and reading order

Fix accessibility issue in MatPaginator component. When screen is narrow, maintain the visual order with the DOM order.
Current behavior is swappign visual order of "Items Per Page" and "1 of 4" on narrow screens. With this commit applied, no longer swap the order.

Googlers: internal tests have passed.


Updated screenshots,commas,formatting

Updated screenshots, added commas in sentences where necessary and missing. Format changes.
cc @kepta @jinalfoflia @geohacker

Thanks @manoharuss


Transcribe the Compiler Lecture Cranelift

Video: https://www.youtube.com/watch?v=9OIA7DTFQWU

This issue has been assigned to @togiberlin via this comment.

My notes are here: https://paper.dropbox.com/published/Cranelift-IR--AnSbfKJj2zL3oDb2qrCSqlZyBg-lL4893iTbm9kQtJ0r46T39X

Current status: transforming notes to text


Having trouble updating to new version

I've been trying to get help on this but I've barely gotten any answers so I figured I should probably raise them here. I used this program a lot when it was on around v1.52 and since Smash is done with big updates I've been trying to update to the new version. However, when I try to drop my old mods into the new program, I get the error "There was a general exception during init. Object reference not set to an instance of an object".
I tried to take out each of the files I have inside the mod folder, and after that it seemed like the metadata_mod.json file is what is stopping it from opening. However, I have no clue what's wrong with it and haven't been able to find any information on how to fix the issue.

Can you send me your metadata_mod.json file?

Can you send me your metadata_mod.json file?

Closing as there's been no answer. If you believe you can send me the files/info to reproduce please reopen


open source client implementation ?

As there is a RFC and a Golang server implementation of the test protocol, is there any hope that Apple or community will release a FOSS alternative to networkQuality on macOS ?
Context : target usage is to incorporate the test in our organisation monitoring (25000 users with the corresponding WLAN / LAN)

A partial answer: check out https://github.com/network-quality/goresponsiveness that contains a Go implementation of the client, as well as a Dockerfile

As there is a RFC and a Golang server implementation of the test protocol, is there any hope that Apple or community will release a FOSS alternative to networkQuality on macOS ?
Context : target usage is to incorporate the test in our organisation monitoring (25000 users with the corresponding WLAN / LAN)

@aglossa Were you able to find the go implementation that is now hosted in this organization?

I first tried the client with Apple public servers. As the results were not comparable with Apple networkQuality cli, I paused my experimentations and followed the dev. As I understand them, there is progress to understand the Apple metrics and I will return to my tests in the next month.
Kind regards.

Great!! I am working actively on the open-source client, so please keep me
posted! If you have bug reports I will absolutely act on them quickly!
On Sat, May 21, 2022 at 5:03 AM aglossa @.***> wrote:

I first tried the client with Apple public servers. As the results were
not comparable with Apple networkQuality cli, I paused my experimentations
and followed the dev. As I understand them, there is progress to understand
the Apple metrics and I will return to my tests in the next month.
Kind regards.
—
Reply to this email directly, view it on GitHub
https://github.com/network-quality/server/issues/7#issuecomment-1133583945,
or unsubscribe
https://github.com/notifications/unsubscribe-auth/ACCP2CRUV2ZEOWHYIHRPWZTVLCRFJANCNFSM5M3NEUGQ
.
You are receiving this because you commented.Message ID:
@.***>

@aglossa If you still seeing issues with the Apple public servers, using the Apple networkQuality client, please open an issue via https://support.apple.com/guide/feedback-assistant/get-started-fbab81460adb/mac
iI you are experiencing issues with the Apple public servers using goresponsiveness, please file an issue @ https://github.com/network-quality/goresponsiveness
Thank you!


Camera stream only loading after reloading the integration

Describe the bug
After each update, or reloading the Tuya integration, the stream of my Tuya camera (Qnect QN-IPC02) works perfectly.
However only for a limited amount of time. After that it's always a 404 error. Probably due to link changed or token expiration.
Expected behavior
Camera stream opens all the time with a working URL.
Home Assistant Version

e.g. 2021.11.5

Device info (please complete the following information, which can be found in log):
2021-11-22 08:41:51 ERROR (stream_worker) [homeassistant.components.stream.worker] Error opening stream rtsps://:@aws-wework8.tuyaeu.com:443/v1/bfbc9d798b4ce409ebxjwh/c6dk2vecmgr9h51uh0fgDoM48uE3fhHd?signInfo=PLncrg6f%2FF3%2BG87EhWPLwlRR%2F8T%2BmMc8gA%2BMpp8Mu%2FA0fI8C0P5JaVyIXraM%2Ff9kjJliWzKJBw4omGCGyc2mtQT7Qy2sGZtrvniz4Twq7dB1mG57lQokGNosQ3JSrqMckp3XM99jWVYuGgGjMuiFX9DPLDGmzewKhj1e0bXBBtA%3D

same issue here

Same here

same issue here. I see that there is no update unfortunately


Corrected incorrect assertion message.

Super trivial change to correct an assertion message that was copy/pasted incorrectly.

Thanks! Looks good to me, I'll merge in a bit.


Ignore empty error bodies

I'm not sure what the JSON-RPC spec says about how error information should be sent from the RPC server back to the requester but I have run into this issue using the bitcoind RPC server. That particular server will send back an error key in the response body but it will have a value of null which causes this response processor to fail.

Thanks!

Pushed to pypi in version 2.5.2.


Adding Prompting libraries & tools

Add Prompting libraries & tools section to Readme

Thanks for this comprehensive list!


Hexdocs page not found

Going to https://hexdocs.pm/guardian produces a PAGE NOT FOUND error. https://hexdocs.pm/guardian/Guardian.html does work, however.

@chrisalley I've opened a PR to resolve this 👍


Issue new version on crates.io

Since I added nor-flash API support there is still no new release on crates.io.
Please, publish one.

True there wasn't a release for a while. Will do a release early this week

see https://crates.io/crates/esp-storage/0.3.0


The app doesn't open

The app just doesn't open. I've enabled the storage permission but still won't open.
Device: Redmi Note 4 (Miui 11 - Android 7.0)
App version: 1.3.1 (F-Droid & Play Store versions have been tested)

Hi, I see some crashes in the google play console that occurs at app opening. Strangely it happens to a very small amount of people.  I will work on this bug today. Thanks for reporting the issue !

@lolo-io I don't have the Google Play Services on my phone, maybe that's causing the crash. Btw, thank you.

I don't have Google Play Services on my phone and the app works perfectly fine, but i installed from f-droid, not play store, but both apps should be identical.


Group channel opening failed: version missing

Hi，
I'm trying to learn the prisoners' dilemma example using JATOS version 3.7.1,
and this version missing error poped out in the console
It doesn't interfere with the game, but i guess someting went wrong in the new version
Thanks~

Thanks for pointing this out. I'll fix the prisoners' dilemma example study.


Jenkins version example gives error "TypeError: string indices must be integers"

When running the sync Jenkins version example (https://github.com/pbelskiy/ujenkins#usage) I get the following errror. What am i doing wrong?
Traceback (most recent call last):
  File "/root/test.py", line 8, in <module>
    example()
  File "/root/test.py", line 5, in example
    version = client.system.get_version()
  File "/usr/local/lib/python3.9/dist-packages/ujenkins/endpoints/system.py", line 40, in get_version
    return self.jenkins._request('GET', '/', callback=callback)
  File "/usr/local/lib/python3.9/dist-packages/ujenkins/adapters/sync.py", line 173, in _request
    self.crumb = self._get_crumb()
  File "/usr/local/lib/python3.9/dist-packages/ujenkins/adapters/sync.py", line 152, in _get_crumb
    self.crumb = {response['crumbRequestField']: response['crumb']}
TypeError: string indices must be integers

Hello! Thanks for bugreport, which version of Jenkins and package are you using?

Jenkins 2.332.3 and ujenkins 0.3.0

@manox I've installed same versions using docker, but all is okay. Could you please add print to 152 line of
/usr/local/lib/python3.9/dist-packages/ujenkins/adapters/sync.py and write here output?
response = self._http_request('GET', CRUMB_ISSUER_URL)
print(response)

First of all, thanks for the help. The Jenkins server is local on the network and I access it via a local IP. Here is the output with the prints.
{'Date': 'Wed, 08 Jun 2022 09:37:41 GMT', 'Server': 'Apache', 'Location': 'https://<IP_ADDRESS>/crumbIssuer/api/json', 'Content-Length': '251', 'Keep-Alive': 'timeout=5, max=100', 'Connection': 'Keep-Alive', 'Content-Type': 'text/html; charset=iso-8859-1'}
<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">

<title>301 Moved Permanently</title>

Moved Permanently

The document has moved <a href="https://<IP_ADDRESS>/crumbIssuer/api/json">here.

Traceback (most recent call last):
  File "/root/test.py", line 8, in <module>
    example()
  File "/root/test.py", line 5, in example
    version = client.system.get_version()
  File "/usr/local/lib/python3.9/dist-packages/ujenkins/endpoints/system.py", line 40, in get_version
    return self.jenkins._request('GET', '/', callback=callback)
  File "/usr/local/lib/python3.9/dist-packages/ujenkins/adapters/sync.py", line 174, in _request
    self.crumb = self._get_crumb()
  File "/usr/local/lib/python3.9/dist-packages/ujenkins/adapters/sync.py", line 153, in _get_crumb
    self.crumb = {response['crumbRequestField']: response['crumb']}
TypeError: string indices must be integers

@manox anyway there is bug in package, it's because of redirect is not processed, could you shared please your reverse proxy config in apache?

OK, sure.
root@jenkins ~# cat /etc/apache2/sites-enabled/jenkins.conf
ServerName localhost

<VirtualHost *:80>
    UseCanonicalName Off
    RewriteEngine on
    RewriteRule ^ https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301,QSA]
</VirtualHost>

<VirtualHost *:443>
    SSLEngine on
    UseCanonicalName Off
    ProxyRequests Off
    ProxyPreserveHost On
    AllowEncodedSlashes NoDecode
    <Proxy *>
        Order deny,allow
        Allow from all
    </Proxy>
    ProxyPass / http://localhost:8080/ nocanon
    ProxyPassReverse / http://localhost:8080/
    RequestHeader set X-Forwarded-Proto "https"
    RequestHeader set X-Forwarded-Port "443"
</VirtualHost>

@manox fixed in https://github.com/pbelskiy/ujenkins/releases/tag/v0.3.3 please check it

At first it was not possible to install the package from the sources. I had to add the encoding in ujenkins/setup.py in line 18.
with open('README.rst', encoding='utf-8') as readme_file:

Now when I try to reach the server without specifying the port the following happens. Since it is only a local  test setup I have not installed an SSl certificate.
Traceback (most recent call last):
  File "C:\Users\marka\jenkins_agent_manager\.venv\lib\site-packages\urllib3\connectionpool.py", line 703, in urlopen
    httplib_response = self._make_request(
  File "C:\Users\marka\jenkins_agent_manager\.venv\lib\site-packages\urllib3\connectionpool.py", line 386, in _make_request
    self._validate_conn(conn)
  File "C:\Users\marka\jenkins_agent_manager\.venv\lib\site-packages\urllib3\connectionpool.py", line 1040, in _validate_conn
    conn.connect()
  File "C:\Users\marka\jenkins_agent_manager\.venv\lib\site-packages\urllib3\connection.py", line 414, in connect
    self.sock = ssl_wrap_socket(
  File "C:\Users\marka\jenkins_agent_manager\.venv\lib\site-packages\urllib3\util\ssl_.py", line 453, in ssl_wrap_socket
    ssl_sock = _ssl_wrap_socket_impl(sock, context, tls_in_tls)
  File "C:\Users\marka\jenkins_agent_manager\.venv\lib\site-packages\urllib3\util\ssl_.py", line 495, in _ssl_wrap_socket_impl
    return ssl_context.wrap_socket(sock)
  File "C:\Users\marka\AppData\Local\Programs\Python\Python310\lib\ssl.py", line 513, in wrap_socket
    return self.sslsocket_class._create(
  File "C:\Users\marka\AppData\Local\Programs\Python\Python310\lib\ssl.py", line 1071, in _create
    self.do_handshake()
  File "C:\Users\marka\AppData\Local\Programs\Python\Python310\lib\ssl.py", line 1342, in do_handshake
    self._sslobj.do_handshake()
ssl.SSLCertVerificationError: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: self signed certificate (_ssl.c:997)

During handling of the above exception, another exception occurred:

Traceback (most recent call last):
  File "C:\Users\marka\jenkins_agent_manager\.venv\lib\site-packages\requests\adapters.py", line 440, in send
    resp = conn.urlopen(
  File "C:\Users\marka\jenkins_agent_manager\.venv\lib\site-packages\urllib3\connectionpool.py", line 785, in urlopen
    retries = retries.increment(
  File "C:\Users\marka\jenkins_agent_manager\.venv\lib\site-packages\urllib3\util\retry.py", line 592, in increment
    raise MaxRetryError(_pool, url, error or ResponseError(cause))
urllib3.exceptions.MaxRetryError: HTTPSConnectionPool(host='<IP_ADDRESS>', port=443): Max retries exceeded with url: /crumbIssuer/api/json (Caused by SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: self signed certificate (_ssl.c:997)')))

During handling of the above exception, another exception occurred:

Traceback (most recent call last):
  File "c:\Users\marka\jenkins_agent_manager\manager.py", line 14, in <module>
    connect()
  File "c:\Users\marka\jenkins_agent_manager\manager.py", line 5, in connect
    version = client.system.get_version()
  File "C:\Users\marka\jenkins_agent_manager\.venv\lib\site-packages\ujenkins\endpoints\system.py", line 40, in get_version
    return self.jenkins._request('GET', '/', callback=callback)
  File "C:\Users\marka\jenkins_agent_manager\.venv\lib\site-packages\ujenkins\adapters\sync.py", line 172, in _request
    self.crumb = self._get_crumb()
  File "C:\Users\marka\jenkins_agent_manager\.venv\lib\site-packages\ujenkins\adapters\sync.py", line 150, in _get_crumb
    response = self._http_request('GET', CRUMB_ISSUER_URL)
  File "C:\Users\marka\jenkins_agent_manager\.venv\lib\site-packages\ujenkins\adapters\sync.py", line 134, in _http_request
    response = self.session.request(
  File "C:\Users\marka\jenkins_agent_manager\.venv\lib\site-packages\requests\sessions.py", line 529, in request
    resp = self.send(prep, **send_kwargs)
  File "C:\Users\marka\jenkins_agent_manager\.venv\lib\site-packages\requests\sessions.py", line 667, in send
    history = [resp for resp in gen]
  File "C:\Users\marka\jenkins_agent_manager\.venv\lib\site-packages\requests\sessions.py", line 667, in <listcomp>
    history = [resp for resp in gen]
  File "C:\Users\marka\jenkins_agent_manager\.venv\lib\site-packages\requests\sessions.py", line 237, in resolve_redirects
    resp = self.send(
  File "C:\Users\marka\jenkins_agent_manager\.venv\lib\site-packages\requests\sessions.py", line 645, in send
    r = adapter.send(request, **kwargs)
  File "C:\Users\marka\jenkins_agent_manager\.venv\lib\site-packages\requests\adapters.py", line 517, in send
    raise SSLError(e, request=request)
requests.exceptions.SSLError: HTTPSConnectionPool(host='<IP_ADDRESS>', port=443): Max retries exceeded with url: /crumbIssuer/api/json (Caused by SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: self signed certificate (_ssl.c:997)')))

Thanks for another issue. About your problem, you can disable ssl check using Jenkins(..., verify=False)


Imports in an attributed block have an extraneous newline at the end

Before:
private
{
    import std.process;
    import std.c.windows.windows;
}

After:
private
{
    import std.algorithm;
    import std.array;

}

Although the example is with a private block, it seems to be any attribute that causes this.

This probably happens with any block.

It does not happen with this block:
private
{
    int n;
    float f;
    bool b;
}

Oh, I see what you mean. Yes, I believe so.
Before:
private
{
	struct Test
	{
		import std.algorithm;
		import std.file;
	}
	import std.algorithm;
	import std.file;
}

After:
private
{
    struct Test
    {
        import std.algorithm;
        import std.file;

    }

    import std.algorithm;
    import std.file;

}


Wireless Speed & duplex in Host AP mode

Let me start out with some system info:
OPNsense 17.1.b-amd64
FreeBSD 11.0-RELEASE-p5
OpenSSL 1.0.2j 26 Sep 2016

ath0: <Qualcomm Atheros AR9565>
em0: <Intel(R) PRO/1000 Network Connection 7.6.1-k>

I have ath0_wlan1 up and running in HostAP mode. I am able to connect to the wireless network, and browse botht he local network and the internets.
I wasn't able to test any of this in 16.7, since hostap didn't seem to work properly with ATH0. It could be that this is an existing issue, it could be that it is not an issue at all.
In the WIFI interface (what I named ath0_wlan1), I have the standard set to 802.11ng. However, based on what I am seeing from wavemon (on the client), it looks as if it is connecting using 802.11b.
When I investigate further, I see the following on the dashboard:
WIFI		autoselect mode 11b <hostap>	<IP_ADDRESS>

So it looks as if the interface is automatically determining that the wireless should be using 802.11b. I went into the interface settings for WIFI, and I attempted to adjust the Speed and Duplex value to anything other than default. After clicking save and apply, the setting always reverts back to default, and the AP always comes back up with 802.11b.
The hint in the Speed and Duplex setting makes perfect sense to me for a wired interface; but it seems as if the same logic might be being applied to the wireless interface as well. Since there is no switchport on the other side, there is nothing for me to negotiate with.
Or I am misunderstanding something.
Is there a way that I can force the AP to only use 802.11n or 802.11ng?
For the sake of thoroughness, here is the output from ifconfig ath0_wlan1
ath0_wlan1: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu 1500
ether ac:b5:7d:72:bb:57
inet6 fe80::aeb5:7dff:fe72:bb57%ath0_wlan1 prefixlen 64 scopeid 0x6
inet <IP_ADDRESS> netmask 0xffffff00 broadcast <IP_ADDRESS>
nd6 options=21<PERFORMNUD,AUTO_LINKLOCAL>
media: IEEE 802.11 Wireless Ethernet autoselect mode 11b <hostap>
status: running
ssid BloomTestWifi channel 1 (2412 MHz 11b) bssid ac:b5:7d:72:bb:57
regdomain 106 indoor ecm authmode WPA1+WPA2/802.11i privacy MIXED
deftxkey 3 TKIP 2:128-bit TKIP 3:128-bit txpower 20 scanvalid 60 burst
-apbridge dtimperiod 1 -dfs
groups: wlan

Also, here is /var/etc/hostapd.conf
# cat /var/etc/hostapd_ath0_wlan1.conf
interface=ath0_wlan1
driver=bsd
logger_syslog=-1
logger_syslog_level=0
logger_stdout=-1
logger_stdout_level=0
dump_file=/tmp/hostapd_ath0_wlan1.dump
ctrl_interface=/var/run/hostapd
ctrl_interface_group=wheel
#accept_mac_file=/tmp/hostapd_ath0_wlan1.accept
#deny_mac_file=/tmp/hostapd_ath0_wlan1.deny
#macaddr_acl=
ssid=TestWifi
debug=
auth_algs=1
wpa=3
wpa_key_mgmt=WPA-PSK
wpa_pairwise=CCMP TKIP
wpa_group_rekey=60
wpa_gmk_rekey=3600
wpa_strict_rekey=
wpa_passphrase=supersecret

Please let me know if you require any additional information.

timeout due to inactivity


"mix test" is failing :(

ielixir-plugin-install-log.txt
hi,
i just installed a ubuntu 14.04 on my virtual box.
i did apt-get update and apt-get upgrade ,followed by esl-erlang, elixir, anaconda installation
i cloned this repo and ran mix test. it failed miserably.  i checked the log
it is trying to use /bin/uname -X and other commands which are not supported on ubuntu.
also my ubuntu does not have c++ (though it has /lib/cpp)
please help to review my log and advise if i have to supply any additional packages.
thanks

Solved the above problem after I installed zeromq
Now new problem
"enif_send: called from non-scheduler thread on non-SMP VMAborted"

test doc at IElixir.Sandbox.execute_code/1 (6) (SandboxTest)
test/sandbox_test.exs:5
Doctest failed
code: IElixir.Sandbox.execute_code(%{"code" => ""a" + 5"}) === {:error, "ArithmeticError", ["** %ArithmeticError{}"]}
lhs:  {:error, "ArithmeticError",
["** %ArithmeticError{message: "bad argument in arithmetic expression"}"]}
stacktrace:
lib/ielixir/sandbox.ex:102: IElixir.Sandbox (module)

2016-09-23 12:29:20.635 [debug] State: %{binding: [a: 10, b: 25], env: %Macro.Env{aliases: [], context: nil, context_modules: [], export_vars: nil, file: "nofile", function: nil, functions: [{IEx.Helpers, [c: 1, c: 2, cd: 1, clear: 0, flush: 0, h: 0, i: 1, l: 1, ls: 0, ls: 1, nl: 1, nl: 2, pid: 1, pid: 3, pwd: 0, r: 1, recompile: 0, respawn: 0, v: 0, v: 1]}, {Kernel, [!=: 2, !==: 2, *: 2, +: 1, +: 2, ++: 2, -: 1, -: 2, --: 2, /: 2, <: 2, <=: 2, ==: 2, ===: 2, =~: 2, >: 2, >=: 2, abs: 1, apply: 2, apply: 3, binary_part: 3, bit_size: 1, byte_size: 1, div: 2, elem: 2, exit: 1, function_exported?: 3, get_and_update_in: 3, get_in: 2, hd: 1, inspect: 1, inspect: 2, is_atom: 1, is_binary: 1, is_bitstring: 1, is_boolean: 1, is_float: 1, is_function: 1, is_function: 2, ...]}], lexical_tracker: nil, line: 1, macro_aliases: [], macros: [{IEx.Helpers, [b: 1, h: 1, import_file: 1, import_file: 2, import_file_if_available: 1, import_if_available: 1, import_if_available: 2, s: 1, t: 1]}, {Kernel, [!: 1, &&: 2, ..: 2, <>: 2, @: 1, alias!: 1, and: 2, binding: 0, binding: 1, def: 1, def: 2, defdelegate: 2, defexception: 1, defimpl: 2, defimpl: 3, defmacro: 1, defmacro: 2, defmacrop: 1, defmacrop: 2, defmodule: 2, defoverridable: 1, defp: 1, defp: 2, defprotocol: 2, defstruct: 1, destructure: 2, get_and_update_in: 2, if: 2, in: 2, is_nil: 1, match?: 2, or: 2, pop_in: 1, put_in: 2, raise: 1, ...]}], module: nil, requires: [IEx.Helpers, Kernel, Kernel.Typespec], vars: [a: nil, b: nil]}, execution_count: 4, scope: {:elixir_scope, nil, nil, false, false, nil, nil, %{{:a, nil} => {:@0, 0, true}, {:b, nil} => {:@1, 0, true}}, nil, nil, nil, nil, %{: 2}, "nofile"}}
2016-09-23 12:29:20.635 [debug] Executing request: %{"code" => "a+b"}
2016-09-23 12:29:20.637 [debug] State: %{binding: [a: 10, b: 25], env: %Macro.Env{aliases: [], context: nil, context_modules: [], export_vars: nil, file: "nofile", function: nil, functions: [{IEx.Helpers, [c: 1, c: 2, cd: 1, clear: 0, flush: 0, h: 0, i: 1, l: 1, ls: 0, ls: 1, nl: 1, nl: 2, pid: 1, pid: 3, pwd: 0, r: 1, recompile: 0, respawn: 0, v: 0, v: 1]}, {Kernel, [!=: 2, !==: 2, *: 2, +: 1, +: 2, ++: 2, -: 1, -: 2, --: 2, /: 2, <: 2, <=: 2, ==: 2, ===: 2, =~: 2, >: 2, >=: 2, abs: 1, apply: 2, apply: 3, binary_part: 3, bit_size: 1, byte_size: 1, div: 2, elem: 2, exit: 1, function_exported?: 3, get_and_update_in: 3, get_in: 2, hd: 1, inspect: 1, inspect: 2, is_atom: 1, is_binary: 1, is_bitstring: 1, is_boolean: 1, is_float: 1, is_function: 1, is_function: 2, ...]}], lexical_tracker: nil, line: 1, macro_aliases: [], macros: [{IEx.Helpers, [b: 1, h: 1, import_file: 1, import_file: 2, import_file_if_available: 1, import_if_available: 1, import_if_available: 2, s: 1, t: 1]}, {Kernel, [!: 1, &&: 2, ..: 2, <>: 2, @: 1, alias!: 1, and: 2, binding: 0, binding: 1, def: 1, def: 2, defdelegate: 2, defexception: 1, defimpl: 2, defimpl: 3, defmacro: 1, defmacro: 2, defmacrop: 1, defmacrop: 2, defmodule: 2, defoverridable: 1, defp: 1, defp: 2, defprotocol: 2, defstruct: 1, destructure: 2, get_and_update_in: 2, if: 2, in: 2, is_nil: 1, match?: 2, or: 2, pop_in: 1, put_in: 2, raise: 1, ...]}], module: nil, requires: [IEx.Helpers, Kernel, Kernel.Typespec], vars: [a: nil, b: nil]}, execution_count: 5, scope: {:elixir_scope, nil, nil, false, false, nil, nil, %{{:a, nil} => {:@0, 0, true}, {:b, nil} => {:@1, 0, true}}, nil, nil, nil, nil, %{: 2}, "nofile"}}
...2016-09-23 12:29:20.641 [debug] Executing request: %{"allow_stdin" => true, "code" => "h()", "silent" => false, "stop_on_error" => true, "store_history" => true, "user_expressions" => %{}}
2016-09-23 12:29:20.654 [debug] State: %{binding: [], env: %Macro.Env{aliases: [], context: nil, context_modules: [], export_vars: nil, file: "nofile", function: nil, functions: [{IEx.Helpers, [c: 1, c: 2, cd: 1, clear: 0, flush: 0, h: 0, i: 1, l: 1, ls: 0, ls: 1, nl: 1, nl: 2, pid: 1, pid: 3, pwd: 0, r: 1, recompile: 0, respawn: 0, v: 0, v: 1]}, {Kernel, [!=: 2, !==: 2, *: 2, +: 1, +: 2, ++: 2, -: 1, -: 2, --: 2, /: 2, <: 2, <=: 2, ==: 2, ===: 2, =~: 2, >: 2, >=: 2, abs: 1, apply: 2, apply: 3, binary_part: 3, bit_size: 1, byte_size: 1, div: 2, elem: 2, exit: 1, function_exported?: 3, get_and_update_in: 3, get_in: 2, hd: 1, inspect: 1, inspect: 2, is_atom: 1, is_binary: 1, is_bitstring: 1, is_boolean: 1, is_float: 1, is_function: 1, is_function: 2, ...]}], lexical_tracker: nil, line: 1, macro_aliases: [], macros: [{IEx.Helpers, [b: 1, h: 1, import_file: 1, import_file: 2, import_file_if_available: 1, import_if_available: 1, import_if_available: 2, s: 1, t: 1]}, {Kernel, [!: 1, &&: 2, ..: 2, <>: 2, @: 1, alias!: 1, and: 2, binding: 0, binding: 1, def: 1, def: 2, defdelegate: 2, defexception: 1, defimpl: 2, defimpl: 3, defmacro: 1, defmacro: 2, defmacrop: 1, defmacrop: 2, defmodule: 2, defoverridable: 1, defp: 1, defp: 2, defprotocol: 2, defstruct: 1, destructure: 2, get_and_update_in: 2, if: 2, in: 2, is_nil: 1, match?: 2, or: 2, pop_in: 1, put_in: 2, raise: 1, ...]}], module: nil, requires: [IEx.Helpers, Kernel, Kernel.Typespec], vars: []}, execution_count: 2, scope: {:elixir_scope, nil, nil, false, false, nil, nil, %{}, nil, nil, nil, nil, %{_: 0}, "nofile"}}
..enif_send: called from non-scheduler thread on non-SMP VMAborted (core dumped)

Could you please tell me which version of elixir and otp do you use? I've tried to support many configurations but that's the point when something can crush. In fact, this failed test isn't as much important as it may looks like. I should add some kind of wildcard inside this test to cover different message descriptions.
Thanks for feedback!

Thanks for the response.
Below are the version details. And my host is ubuntu 14.0 trusty 64 bit build
manas@elixirdev:~/IElixir$ iex --version
Erlang/OTP 19 [erts-8.0.2] [source-753b9b9] [64-bit] [async-threads:10] [hipe] [kernel-poll:false]
IEx 1.3.2
manas@elixirdev:~/IElixir$ elixir --version
Erlang/OTP 19 [erts-8.0.2] [source-753b9b9] [64-bit] [async-threads:10] [hipe] [kernel-poll:false]
Elixir 1.3.2

And my zeromq is the latest version 4.1.5

Hi,
May I request you  to see if you can spare some time to advise me on how to fix this issue
thanks

I've reproduced this issue and it's hard for me to fix this in few hours. I'll try to do it but it's really time consuming as there are many dependencies which have also dependencies on different packages which require something.
Right now stable version are listed in .travis.yml file which are:
elixir:
  - 1.1.0
  - 1.2.3
otp_release:
  - 17.5
  - 18.1
  - 18.2

in every combination.

thank you very much. For now, I will revert my installation to one of the stable versions you mentioned..

Yep, having the same issue as @pikeview.  I assume it is because 1.3.2 is not currently supported.  Will wait for the update.

@pikeview @jwogrady new elixir versions are supported now. I was handling erlzmq compiling problem for long time for newer versions, now it should work fine.


I don't get the difference of the network structure between FCN_Resnet50_32s and AtrousFCN_Resnet50_16s

Hi,
after analysing the code and comparing the model image, I don't find the difference of the network structure between FCN_Resnet50_32s and AtrousFCN_Resnet50_16s. The only difference is that  AtrousFCN_Resnet50_16s used atrous_identity_block  instead of the original in the last two identity blocks. But I don't get essential difference between atrous_identity_block  and the original one either. As far as I know, the main difference between xxxx_32s and xxx_16s is a skip connection from the 16s downsampling layer to the 32s one. Am I right? Thanks.

sounds about right. Atrous convolution changes the output dimension, it is a pretty simple difference.


Support complicated expression in format command

We have something like
    Foo      2 * (100 USD) @ (1/1.23 CHF)

This needs to be supported

Merged in #53


Question:  unclear procedure in  method

I found a strange condition in bv.LongsRank0OnlySussinctBitVector.java#select0  Line 189
    @Override
    public int select0(int count) {
        for (int i = 0; i < longs.length; i++) {
            if (i * BITS_IN_BLOCK >= size) return -1;
            long v = longs[i];
            int c = BITS_IN_BLOCK - Long.bitCount(v);
            if (count <= c) {
                for (int j = 0; j < BITS_IN_BLOCK; j++) {
                    if (i * BITS_IN_BLOCK + j >= size) return -1;
                    if ((v & 0x8000000000000000L) != 1) {
                        count--;
                        if (count == 0) {
                            return i * BITS_IN_BLOCK + j;
                        }
                    }
                    v <<= 1;
                }
                return -1;
            }
            count -= c;
        }
        return -1;
    }

A if condition  if ((v & 0x8000000000000000L) != 1) always true so a for loop will run until j * BIT_IN_BLOCK exceed size or exhausted count to 0. Is this intended?
I think it may be    if ((v & 0x8000000000000000L) == 0).
Similar thing is also in org.trie4j.bv.LongsRank1OnlySuccinctBitVector.select0 line 189.

Thanks @miurahr !
I fixed this issue on the commit above.

I've confirmed the fix. thanks.


Crash on button push

CMM 1.3
OpenEye 0.6
Forge 1291
When I make a wrapped button for OpenEye, it shows on my main menu just fine. However, I ctd the instant I push the button with the following crash report.
crash log here:  http://pastebin.com/Pt7JN4qY
json code here: http://pastebin.com/EyU8rFjr

The Open Eye button only appears when there is something to report on right?


Remove DataEntity Base Class

To avoid type coupling, base class DataEntity must be removed.

Fixed and this will be a part of the next release (greater than v1.2.0)


Jetstream Isbsvc Replicas

Summary
What change needs making?
I've noticed in the documentation and in the source code that if the number of replicas of the jetsream isbsvc is <3, it will still create 3 pods and replicas.  I would like like to have a single isbsvc pod with no extra replicas.  Are there any fundamental limitations that would prevent this?
Use Cases
When would you use this?
I am running on an embedded device and trying to cut down on overhead as much as possible.  The device is frequently powered on and off as well.  On startup, we sometimes have issues with the isbsvc pods struggling to communicate with each other (e.g. establish a raft leader - Some of these issues have been addressed in recent jetstream releases, but we still have issues sometimes).  I think that life would be a lot easier if we just had a single pod for the buffer rather than 3.  Since we are running on an embedded device, I don't see any advantage to having 3 replicas and we are paying extra costs for it.

Message from the maintainers:
If you wish to see this enhancement implemented please add a 👍 reaction to this issue! We often sort issues this way to know what to prioritize.

@jsallay - we could make it possible to only run 1 replica, but we don't recommend to do it for production setup due to potential availability problem, please be aware of it.

For sure, happy to see PR coming!

I think in my embedded environment, it is worthwhile to reduce. Perhaps, instead of
if replicas < 3 {
   replicas = 3
}

in jetstream.go, it could just print a warning. If that's the only change that is needed, I'd be happy to submit a PR for it.

For sure, happy to see PR coming!

I think in my embedded environment, it is worthwhile to reduce. Perhaps, instead of
if replicas < 3 {
   replicas = 3
}

in jetstream.go, it could just print a warning. If that's the only change that is needed, I'd be happy to submit a PR for it.

Please make sure the default is still 3.

I'll work on getting this implemented based on what I did in Argo Events for the same feature request


provider.ami: no suitable version installed

please check this error.

Please share your tf file
If you haven't created a file first create and write a provider as tf download plugins based on provider

please upload tf file

terra.txt
please find the tf file.

helloworld is your directory na, execute with the bellow command
terraform init .

did the same still not working

please  execute this command " terrafrom init ." [.] means current directory

Yes you should definitely give path in your case "." Is fine

there current directory is not the issue i think once check your ami with that region or not.

1)change your resource type to <<aws_instance>>
2)there is no security_group in terraform as a resource
change that <<security_group>> to <<security_groups>> and check once your <>
any how, security group is not mandatory

please verify provider part once
and remove tfsate , and redo things

my security groups are blocked


Filter markdown file to show User Story only

Hi,
I am using the Generate Release Notes Build Task (Poweshell) to generate Release Notes from our pipeline. This works fine and I get the release notes page added to our git based Wiki. The only issue with using the below template for the markdown is that it loops through all the Work Items and adds them to the release note:
# Release notes for Version $(date).$($build.buildnumber).0
**Build Number**  : $($build.buildnumber)
**Build Configuration** :  $($build.parameters | ConvertFrom-Json | select -ExpandProperty BuildConfiguration )
**Build started** : $("{0:dd/MM/yy HH:mm:ss}" -f [datetime]$build.startTime)
**Source Branch** $($build.sourceBranch)

## Associated work items
@@WILOOP@@
* #$($widetail.id)
@@WILOOP@@

Is there a way or is it possible to filter this down somehow to get User Story work items only? We don't want to see other work items that are linked to the build other than the User Stories and Bugs? Would appreciate if anyone knows a way or another workaround to achieve this.
Many thanks,
Jay

You can enter a filter into the loop, something like. The value after the WorkItemType= should match the value of the $($widetail.fields.'System.WorkItemType') when you list out all the WI
# All the Bugs
@@WILOOP[ALL]:System.WorkItemType=Bug@@
* #$($widetail.id)
@@WILOOP@@

# All the UserStories
@@WILOOP[ALL]:System.WorkItemType=UserStory@@
* #$($widetail.id)
@@WILOOP@@

As a side note, I see you are using my PowerShell based release Notes tools.  As the release notes state

IMPORTANT NOTE
This PowerShell based task was the first Release Notes Extension I built. It was designed to run only on Windows based Agents and in Builds, as this was all there was at the time. It has since been enhanced, with my own logic to work out associated work items and changesets/commits, to work within releases.
Since creating this extension I have also built a Node based Release Notes Generator that can run on any agent platform and uses standard Microsoft API calls to work out the associated work items and commits/changeset. Since December 2019 this newer extension supports both Releases and Builds
I STRONGLY RECOMMEND that if you are starting now that you should consider using my newer Node based Release Notes over this extension. This is because of

cross platform support
use of the same means to find the associated items as the Microsoft UI
enhanced workitem filtering

Note: I have no plans to further enhance this extension, and plan to deprecate it at some point in the future to focus on the Node based Release Notes extension, which is more flexible and feature rich.

So, incase you choose to swap to the Node version, the filter you require is something like
# All the WI
{{#forEach workItems}}
*  **{{this.id}}**  {{lookup this.fields 'System.Title'}}
  - **WIT** {{lookup this.fields 'System.WorkItemType'}}
  - **Tags** {{lookup this.fields 'System.Tags'}}
  - **Assigned** {{#with (lookup this.fields 'System.AssignedTo')}} {{displayName}} {{/with}}
{{/forEach}}

# Just the bugs
{{#forEach workItems}}
{{#if (eq (lookup this.fields 'System.WorkItemType') 'Bug')}}
*  **{{this.id}}**  {{lookup this.fields 'System.Title'}}
  - **WIT** {{lookup this.fields 'System.WorkItemType'}}
  - **Tags** {{lookup this.fields 'System.Tags'}}
  - **Assigned** {{#with (lookup this.fields 'System.AssignedTo')}} {{displayName}} {{/with}}
{{/if}}
{{/forEach}}

Thank you @rfennell for getting back to me so quickly. I tired that method however the Wiki doesn't seem to display the Work Items Correctly:

I've just seen your other comment about Node based so I will try that and get back you.

@rfennell Just wanted to say Thank You for the Note Based tool; that has done the trick and I am now getting Release Notes generated and filtered for Stories and Bugs

Another quick question sorry, how can I get the build start and finish time using Handlebars? I tried few things but couldn't get the template to work. And I assume whatever you provide will also be the same for the release pipeline?

For any question like this the first step is to see what data you have available. You have a number of of options to help here

Inside a template use  {{json builddetails}} (or any other object name) to dump the contents of the object
Set the task parameter dumpPayloadToConsole=false - the payload is logged out to the build log - but this can make the UI slow to respond, so I don't use this much
Set the task parameters umpPayloadToFile=true and dumpPayloadFileName=payload.json - remember you do need to include in a folder path in the filename  to a location you have access to, maybe make the dump part of the build artefacts?

Once you have the object contents you can look for fields that contain what you need, ones of interest in this case are probably

buildDetails.queueTime
buildDetails.startTime
buildDetails.finishTime

Awesome - thank you for this. I will now close this issue. Thanks again for creating this great tool :D


Raise when setting defined on already configured class

Also removed inheritance of config, this is weird:
class Test
  extend Dry::Configurable

  setting :name
end

Test.configure do |config|
  config.name = 'blah'
end

class Test2 < Test; end

Test2.config.name
# => "blah"

@AMHOL removing the inheritance of the configuration applied on the superclass would break a lot of established conventions in dry-web apps. For example, we use this a lot in dry-view classes, e.g.
module MyApp
  class ViewController < Dry::View::Controller
    configure do |config|
      config.layout = "application"
    end
  end

  module Views
    class Home < MyApp::ViewController
      # Inherits "application" layout config from superclass
      configure do |config|
        config.template = "home"
      end
    end
  end
end

What's your thinking for removing that behaviour? It's pretty useful for things like this example.

Ahh OK, I guess I just never thought about it before and when I did it seemed like weird behaviour to me.


[Tracking issue] removing unsafe implementations copied from core

[ ] maybe_uninit_slice https://github.com/rust-lang/rust/issues/63569
[ ] maybe_uninit_uninit_array (no tracking issue)
[ ] maybe_uninit_array_assume_init https://github.com/rust-lang/rust/issues/80908

https://github.com/rust-lang/rust/issues/80908 is closed now


non consistent output names

Not an issue per se.
I noticed that the commands 'build' and 'merge' seem to systematically add a '.skf' extension to the output name file while the command 'weed' does not.
For instance, the command 'ska build -o name_file.skf' generates a file 'name_file.skf.skf' while the command 'ska weed -o name_file.skf' generates a file 'name_file.skf'.

Good spot, I will improve this in the next release – I think the weed behaviour is better (checking for .skf and not adding if already there)


Open Roberta does not load, if cookies are disabled in the browser

Describe the bug

If you deactivate cookies in your browser, the browser will throw an error while still loading initially and the lab will not load.
As a direct response to that, the Open Roberta Lab will try to log that error to the server. This will be prohibited by the new session check, which allows only those calls from a client, that have previously sent a initial request to the server. Yet, because the lab does not load the initial request was never sent and the error log request is rejected. This is shown to the user via an "Your browser tab is invalid" error promt.

To Reproduce
Steps to reproduce the behavior:

Open your browser settings and go to the cookies tab. Deactivate cookies
Open a new tab and open the developer console in it (to see the error message later)
Open the Open Roberta Lab in that tab
See error

Expected behavior

The Open Roberta Lab should either load normally, even if cookies are disabled, and should simply hide all cookie related functionalities (This happens currently with the Interet Explorer)
Or the user should be prompted a helpful error message, that indicates the problem and helps him change his cookie settings in the browser

Screenshots

Device information

Desktop
Windows 10
FireFox 52.9.0, FireFox 60.9.0, Chrome 77.0.3865.90, Opera 63.0.3368.94, Edge 40.15063.674.0

Additional context

This Bug is NOT present with: Internet Explorer 11.1928.15063.0

Should be solved with #38.

still the same issue

We use the sessionid to identify sessions, this is impossible if the user does not allow cookies at all. For this special case it is hard to find a workaround, because we cannot allow with every request a new session. Maybe we could use the url instead of cookies to store the sessionid, but this might be more work and cannot be solved till the next release.
Therefore we should now simply extend the message with a hint that enabling cookies for this site will solve the problem.

together with this 9a5af389df3c3c7b458bf7f9e3f064cd071f8737, thanks to @rbudde seems to be resolved


SSL Authentication For windows built-in VPN Client

We are working on our proxy server and we are planning to make it cloud based solution which will have multi-tenant software architecture, we are now planning to use SofthEther to connect to proxy server using windows built-in VPN SSTP as client.
Proxy configuration will differ from user to user and organization to organization
However, for this to work we require users to be successfully authenticated.
Using password based authentication is not logical in our setup as we cannot provision users in VPN server because we are clueless about the user that will be using our proxy server, but it will not be an open proxy server.
We want user to be created and authenticated using SSL certificate which will have details of users and organization they below to.
Using SSL certificate for authentication will result in a secure proxy connection and user will be create as users are logged in.
We want to know if there is any configuration for SSL certificate based authentication for windows built-in VPN client? or can this feature be added to SoftEther

Already supported. SSTP clients can authenticate by certificate just like SoftEther clients.

We have tried using SSL certificate for authentication in windows using SSTP and during the connection process in Softhether logs it says "(The client denied to accept both the "PAP" (Password Authentication Protocol, a clear-text password authentication protocol) and MS-CHAP v2 Protocol. Enable either PAP or MS-CHAP v2 on the client-side and retry.)"
We need to authentication using SSL certificate in windows built-in vpn client.
Authentication using SSL certificate in Softhether VPN client was successful.

Please build from the trunk and try again.

can you provide me the link for the trunk?

It's this repository, master branch.

Thank You, I will try and let you know

We build the Softether VPN server from the master branch, but we are still unable to connect using SSL certificate.
I have provided the screenshot of the error we got from the Windows VPN client and our configuration file.

vpn_server.txt

Is there anything I can do to achieve SSL certificated-based authentication in windows built-in VPN client, or can you add this feature in Softhether?

I can't reproduce the issue. Please provide the error log.

@HighBrowInTown , please provide repro steps.  But any other SSL interception might break it easily.
In theory SSTP should work in cascade mode if SSL is carefully implemented on each party involved.

Okay, so today I tried to replicate the error which I was getting when I tried last time.
I did fresh install of Softhether again and generated new root certificates and client/user certificates, when I connected to VPN server I was authenticated successfully and connected to the VPN server without any errors.

We now want users to be created based on the client certificate they provide which will be signed by the root certificate of  VPN server.
We have no idea how many users will be accessing our proxy server and we cannot have user provisioning in VPN server, with the logging facility where in only username, IP address assigned by VPN server and connected/disconnected  status will be written in the log file.

CentOS7版视频安装教程：https://youtu.be/fWGw6Qdh1pY
Windows版视频安装教程：https://youtu.be/lXb7FxxEcE0

Can you provide detailed information on how to use signed certificate authentication settings.
I want users to be authenticated based on the client certificate they have which will be signed by VPN root CA and the users will not be explicitly mentioned in the VPN server.

Users have to be created first.

You can create a common username for all users. They can use individual certificates issued by a common parent.
If you definitely need dynamic user creation, you might need to look into the code and do it yourself.

Are you guys planning to release this feature some time ahead?

I don't think this feature makes sense because it will expose vpn server configuration to users.
When a new certificate is issued, a new user should be created and bound to that. Giving users the ability to self enroll is dangerous.

User will not have the ability to self enroll but they will be provided certificate signed by the root CA certificate which users which not have access to.

I don't understand. Why not create a new user when a certificate is signed?

Because this users will be provided the certificates by their organization's root CA  and the organization's  root CA certificate will be exported to VPN's trusted root CA.
Because we don't the number of users in each organization it will not be an option to provision users in VPN server.

Externalizing certificate issuance while exposing user creation does not sound like a good design to me.
But you are free to do anything as it's a free project. That's all I can say.

Thank you and everyone for your support. Appreciated.

What about Radius?

Is Radius + certificates supported?


[darknet/yolo] new port

We finished a big rework of darknet to make it more easily buildable on windows. It is possible now to built it with vcpkg without any big effort.
The port is still very much untested, but we can iterate quickly on it also from the repository point of view, not just on this portfile.
Any suggestion is really appreciated and any issue will be taken into consideration

Hi @cenit
Thanks for the port!
I see failures on UWP and ARM because pthreads fails to build on those platforms.
The current pthreads port is using a no longer mantained library pthreads-w32, but I haven't got around updating it to pthreads4w. Aside from the discussion of whether the package should be findable by find_package(pthreads4w) instead of just find_package(pthreads)....
If you're OK with no support for UWP and ARM, please add a validation with an explicit failure message "darknet doesn't support UWP/ARM".
Another thing, I got file conflicts with stb when installing locally:
Building package darknet[core,weights]:x64-windows... done
Installing package darknet[core,weights]:x64-windows...
The following files are already installed in D:/github/vcpkg/installed/x64-windows and are in conflict with darknet:x64-windows
    include/stb_image.h
    include/stb_image_write.h

PS D:\github\vcpkg> ./vcpkg owns stb_image.h
stb:x64-windows: x64-windows/include/stb_image.h

Hi @vicroms
Thanks for the quick feedback. I will add an explicit failure message for uwp/arm and I will also try to use stb from vcpkg in the port. It should be almost fully compatible, I think it’s the best option gli go forward.
Next step will also be an update to pthread, but in another PR.

I forgot to add an explicit failure message for uwp/arm


[Llamaindex] Cassandra KVStore

This should be straightforward. A key-value store backed by Cassandra in the kvstore implementations in langchain.

https://gpt-index.readthedocs.io/en/stable/core_modules/data_modules/storage/kv_stores.html


fix compile error

Close due to age. Please consider open a PR when there is a better solution. Thanks.


kamel install with sample

Run 'kamel install --example' for automatic execute deploy/cr.yaml on install
@nicolaferraro what do you think about this?

Yes, sounds good!
It is also useful to check with a single command if everything is in place.
I've seen the CR is using a package declaration that is not supported.. maybe I should reopen issue #41.

Fixed in #87


[bug] Support placeholder resolution in resource params

We currently support placeholder (${metadata.foo} or ${resources.x.y}) in the container.variables and container.volumes.source field.
As we bring over proper resource provisioning support, we need to enable substitutions in the resource params field. For example a common usecase is:
resources:
  my-route:
    type: route
    params:
      host: ${resources.dns.host}

This would fail currently, since ${resources.dns.host} would be kept as is, and not be resolved in a constructive way. This will only be a problem when we actually support real resource provisioners! (which I'm currently working on).
The solution here will need to be a acyclic graph detection:

for all resources, find any whose substitution params can be satisfied
if there are none, but many resources exist, there's a cycle - throw an error
provision these resources
with the remaining resources, go to 1

While ensuring that each resource is only "provisioned" once per generate command.

I'm working on this now. Doing a topological sort of the resources before provisioning.


SMP should measure CPU and memory usage of mesh resources

Current Behavior
Current SMP metrics are focused primarily on network performance: latency, RPS, etc.
Desired Behavior
CPU and memory performance should be measured in addition to network performance.

Alternatives / Additional Context
Network performance is a very important aspect of a service mesh, but CPU and memory usage are important as well. Users will be able to use this information when determining how large their cluster needs to be.

At this stage, what SMP can measure depends on the output of load-generators(ngihthawk, wrk2, fortio), and they are not good at measuring CPU and memory.
We can extend our meshery-perf functions to get CPU, memory and other useful metrics from Prometheus API and return. Any comments? @leecalcote @navendu-pottekkat
@sunkuranganath FYI. I know you're an expert in this.

Meshery does facilitate this to some extent that users can use Meshery to deploy Prometheus and collect metrics they want and display it on a Grafana dashboard while running performance benchmarks. But these are not captured in the spec and not in Meshery's test results.
Expanding the spec as this issue requests is a first step towards that. The spec does not need to limit itself to what Meshery can handle right now in my opinion.
Going forward with the implementation of Nighthawk and its adaptive load control capabilities in Meshery, we look towards building pluggable interfaces for users to bring in their own metrics monitoring tool (like Prometheus).
So yes, updating the spec and a pluggable interface where users can bring in their own metrics plugin where Meshery will collect metrics like CPU and Memory use from it and add it to the test results, will be good to implement.

@navendu-pottekkat Can't agree anymore, SMP shouldn't be limited with Meshery capability. I'll work on it, thanks!

@jbyers19 @navendu-pottekkat I raised a PR to add CPU, Memory and Swap usage information in performance test result. I'm not sure if it meets real needs, can you have a review and  leave comments?