[Rus] RWD: CSS Grid Improved translation of add-rows-with-grid-templa…

…te-rows

[x ] I have read freeCodeCamp's contribution guidelines.
[ x] My pull request has a descriptive title (not a vague title like Update index.md)
[ x] My pull request targets the master branch of freeCodeCamp.
[x ] None of my changes are plagiarized from another source without proper attribution.
[x ] My article does not contain shortened URLs or affiliate links.

If your pull request closes a GitHub issue, replace the XXXXX below with the issue number.
Closes #XXXXX

LGTM
We would welcome future pull requests from you.
Thank you and happy coding.


feat: Allow for custom parse

Closes #13
Description
This PR allows for automatic response parsing to be disabled. This can be accomplished through passing { parse: false } into fetch options.
This PR also allows for custom parsing functions to be used. For example, JSON.parse can be used by passing { parse: JSON.parse } into fetch options.
Parsing still defaults to destr.

Thank you for the PR @chrstnfrrs
Do you mind adding test cases in https://github.com/unjs/ohmyfetch/blob/main/test/index.test.ts?

Codecov Report

Merging #16 (a31a0a9) into main (bb975a1) will decrease coverage by 1.43%.
The diff coverage is 85.71%.

@@            Coverage Diff             @@
##             main      #16      +/-   ##
==========================================
- Coverage   98.30%   96.87%   -1.44%
==========================================
  Files           4        4
  Lines          59       64       +5
  Branches       13       18       +5
==========================================
+ Hits           58       62       +4
- Misses          1        2       +1

Impacted Files
Coverage Δ

src/fetch.ts
95.12% <85.71%> (-2.11%)
:arrow_down:

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update bb975a1...a31a0a9. Read the comment docs.

@Atinux I added two tests. I'm not super satisfied with the current test for the { parse: false } option due to the assertion not being on the piece of code under test. I can try to improve this over the weekend, but feel free to merge as-is.


Environment scope

Release Playbook

[ ] Rebase against master
[ ] Code review
[ ] Merge into master
[ ] Verify changes at http://site-staging.convox.com
[ ] Promote release on site-production in the convox/production Rack

Worth mentioning that you can set environment variables at the process level in docker-compose.yml?

Good point; added that.


libiraty tuist errir

Description
We received an error that we couldn't handle:
- Localized description: The data couldn’t be read because it isn’t in the correct format.
- Error: dataCorrupted(Swift.DecodingError.Context(codingPath: [CodingKeys(stringValue: "targets", intValue: nil), _JSONKey(stringValue: "Index 2", intValue: 2), CodingKeys(stringValue: "type", intValue: nil)], debugDescription: "Cannot initialize TargetType from invalid String value macro", underlyingError: nil))
If you think it's a legit issue, please file an issue including the reproducible steps: https://github.com/tuist/tuist/issues/new/choose
Consider creating an issue using the following link: https://github.com/tuist/tuist/issues/new/choose
make: *** [fetch] Error 1
tuist fetch libiray error
.remote(url: "http://github.com/pointfreeco/swift-composable-architecture", requirement: .upToNextMajor(from: "1.3.0"))   how to fix
Checklist

[x] I have determined whether this bug is also reproducible in a vanilla SwiftUI project.
[X] If possible, I've reproduced the issue using the main branch of this package.
[X] This issue hasn't been addressed in an existing GitHub issue or discussion.

Expected behavior
No response
Actual behavior
No response
Steps to reproduce
No response
The Composable Architecture version information
No response
Destination operating system
No response
Xcode version information
No response
Swift Compiler version information
No response

Hi @Roy-wonji, this seems to be an issue with Tuist, not our library. Have you tried opening an issue with them?
Since it's not an issue with this library I am going to convert it to a discussion.


Audience, scope & purpose

From IETF chat: "Scope, audience and purpose claims all limit the transaction token but at different levels. I wonder if this can be simplified?"
Workload developers that validate transaction tokens currently would need to validate all 3 of these claims just for the sake of knowing if the transaction token is acceptable in their context. Authorization decisions based on azd and rctx then come on top of that.

I'm a little confused regarding the inclusion of scope as 'scope' is only an input parameter to the Transaction Token Service and that parameter name is used because of the profiling of the Token Exchange spec.
The transaction token itself only has aud and purp and the point of using a different name than 'scope' for purp is that the semantics are slightly different. A transaction token should have a very fine-grained purpose and most scope values are not fine-grained.
A workload should only need to validate the aud field to know that the transaction token is part of it's trust domain and secondly the purp claim to evaluate if the stated purpose is something that the workload participates in. Not also, that a workload is not required to process the purp claim from an authorization point of view. I can depend on what the request is and risk, etc.
The intended authorization model is that the Transaction Token Service acts as a primary PDP when issuing the transaction token and then each workload can run it's own policy (if desired) to further evaluate the validity of the request.

You are right @gffletch, scope is not part of the transaction token and just a parameter of token exchange that results in the aud claim.
My thinking during the talk was whether aud is truly necessary. Once the signature check has passed (either based on issuer claim + metatabase + JWKS or trust bundle) the trust domain is implicit IMO. Also, what if the signature check passed but the audience does not match with the signing keys? Are workloads expected to check and deny then?
Related, do we expect workloads to just accept transaction tokens of a single trust domain or do we see use cases where incoming transaction tokens are part of different trust domains than the workload itself?

So a couple of thoughts... I do think that aud is necessary as it's possible there could be multiple issuers that are all part of the single trust domain. For me, this makes the audience an easier way to determine the validity of the token to the workload.
As for transaction tokens that cross trust domain boundaries, I don't think we want to enable that. I'd prefer we leverage the cross domain OAuth work and the wimse token translation work to get a transaction token issued by the trust domain.
We may need to expand some thinking around authorization models and how they fit in with transaction tokens.

Note: Although scope may not be part of the TraT definition, we decided to include the scope value in our implementation. For us, this value should at least be validated by workloads if there isn't a more specific purpose given in the TraT.

@obfuscoder is there a reason you chose not to just set the purpose of the given TraT to the scope ? Semantic mismatch?

@gffletch We had already an implementation of transaction tokens in place before we became aware of the transaction token draft. Our implementation was a bit more aligned with Token Exchange where the scope is copied (or narrowed down) to the internally used transaction token. So most deployments rely on having the scope in the "scope" claim. There is also pretty good library support for the scope claim already.
That said, it might not be an issue of semantics, but rather of ownership. At least in our implementation, scope values are defined (and owned) by the services which enforce the scope (also in internal calls using transaction tokens) when the internal microservice interface is called. Purpose, on the other hand, is more bound to the use case which needs to be fulfilled and the definition of those use cases will rather be done by the external endpoints (BFFs) and thus also owned by them. The internal microservices will then need to be configured to support purposes defined by several external endpoints. So it might still be worth, having the microservice check the scope it defined to be present when calling its API on top of validating the purpose.

I've worked in environments earlier where the name "scope" in internal tokens caused enormous confusion with OAuth scopes from external systems.


Change expected type of listener-container attribute for message-drive-channel-adapter

Currently the expected type of the listener-container attribute of the message-driven-channel-adapter for the kafka-int schema is org.springframework.integration.kafka.core.ConnectionFactory instead of the true required type of org.springframework.integration.kafka.listener.KafkaMessageListenerContainer.  While not enforced at run time, this does report as a break in spring schema parsers, such as the one included with Intellij IDEA.
Regards,
Kevin

Thank you very much for the feedback and PR, too, @moonkev , but before review your (even such a simple) work, we should be sure that you have signed CLA: https://github.com/spring-projects/spring-integration/blob/master/CONTRIBUTING.md

I have signed and agree to the terms of the SpringSource Individual
Contributor License Agreement.

@moonkev , thank you for the confirmation.
Even if the fix is so simple and correct, we can't merge your commit because there is need separate branch, e.g. fixXSDType not master.
Please, refer to that Contribution Guideline one more time.
Of course, it is better to have a JIRA or GH issue for that, but I don't see reason for such a simple fix.
So, just create a new branch based on master and make a new PR.
This one must be closed after that, because it isn't valid by merging process rules.

Actually for such a trivial fix, there is no need to go through all that, but in future, please use the guidelines.
Thanks for your contribution, we look forward to more!

Yes, @garyrussell is right. So, nevermind and we go ahead to merge your fix.
Thank you one more time and don't hesitate to contribute more!

Merged as https://github.com/spring-projects/spring-integration-kafka/commit/aa753a372a064add7ab07dcc9359510a01baefcb

Thanks gents for the merge on this push request.  I will make sure to follow the guidelines for any future contributions.


Support Content Security Policy

The specification of Content Security Policy
describes as the following:

This document defines Content Security Policy, a mechanism web applications can use to mitigate a broad class of content injection vulnerabilities, such as cross-site scripting (XSS).

To apply Content Security Policy, we need to set a nonce to style element appended by react-virtualized. I have made a change for react-virtualized. (https://github.com/bvaughn/react-virtualized/pull/663)
emojione-picker is also required to be altered to correspond the change. I have also finished to create a change for emojione-picker fcb244dc2f0fe82a5136501171c828c7332c4b4b, but we may wait for a new version of react-virtualized including its Content Security Policy support.

It seems like this is tied to https://github.com/tommoor/emojione-picker/issues/67 - perhaps both changes could be made at the same time?

Yes, just by replacing the change of package.json  and yarn.lock in commit fcb244dc2f0fe82a5136501171c828c7332c4b4b. I will make a pull request soon.

closed in d13681972c7d2b10edd9e74b7766f22cbed7a090


Admin account recreation on restart

Hey,
I'm using nightly-alpine. With the last update, PiGallery2 adds admin/admin account which I deleted before.
After re-deleting admin account, warning notification won't go away and it says "To dismiss these notifications, restart the server. ". If I restart it with "docker-compose restart" admin/admin appears again.

Hi, I'll fix it.
In the meantime, you can set the enforced Users settings to empty array in
the config.json to prevent the recreation of the admin/admin user.
-- Sorry for being brief, sent from my phone.
headcrushedindoor @.***> ezt írta (időpont: 2022. jan.
18., K 9:48):

Hey,
I'm using nightly-alpine. With the last update, PiGallery2 adds
admin/admin account which I deleted before.
After re-deleting admin account warning notification won't go away and it
says "To dismiss these notifications, restart the server. ". If I restart
it with "docker-compose restart" admin/admin appears again.
—
Reply to this email directly, view it on GitHub
https://github.com/bpatrik/pigallery2/issues/408, or unsubscribe
https://github.com/notifications/unsubscribe-auth/ABZKA5XMIJ5TVRZYYWPTHBDUWUSM5ANCNFSM5MGRXVMQ
.
You are receiving this because you are subscribed to this thread.Message
ID: @.***>


Add notify endpoint

This PR adds an endpoint for notify post requests.
It just prints the response from the driver.

I have read the CLA Document and I hereby sign the CLA


No option to turn on Warm White LEDS

This app is great, but there is no option to turn on the separate Warm White LEDS in an RGBWW strip.

I have no capabilities to test warm white LEDs. If you own warm white LED strip you could do a pull request.


update Dotty version and fix errors

there's one error outstanding
[error] -- [E007] Type Mismatch Error: /home/giacomo/projects/zio/jczuchnowski.zio-sql/core/jvm/src/main/scala/Sql.scala:885:85
[error] 885 |    def in[B1 >: B <: SelectionSet[_]](set: Read[B1]): Expr[F, A, Boolean] = Expr.In(self, set)
[error]     |                                                                                ^^^^
[error]     |Found:    (Expr.this : Sql.this.Expr[F, A, B] & Sql.this.Expr[F, A, B])
[error]     |Required: Sql.this.Expr[F, A, Sql.this.SelectionSet[?]]

For now you could insert asInstanceOf in there to make it work.

This ready for merging?

No, not yet. Fixing this one problem uncovered couple more. Still working on it.

@jczuchnowski ???

I did some more work on ti. The core module seems to compile, but had to use couple of workarounds using instanceOf.
Unfortunately it uncovered a ton of other problems in descendant modules. In particular with how the DSL is used. So I'm leaving it as is for now as it take a lot of cycles to get through all of it.
I think this PR can be merged as is and we can pick up on this taks some other time.
Some examples:
[error] -- [E045] Cyclic Error: /home/giacomo/projects/zio/jczuchnowski.zio-sql/examples/src/main/scala/ShopSchema.scala:28:4
[error] 28 |    val fkProductId :*: effective :*: price :*: _ = productPrices.columns
[error]    |    ^
[error]    |    Recursive value $5$ needs type
[error] Explanation
[error] ===========
[error] The definition of value $5$ is recursive and you need to specify its type.

or
[error] -- [E008] Not Found Error: /home/giacomo/projects/zio/jczuchnowski.zio-sql/examples/src/main/scala/ShopSchema.scala:9:72
[error] 9 |    val users = (uuid("id") ++ localDate("dob") ++ string("first_name") ++ string("last_name")).table("users")
[error]   |                 ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
[error]   |value ++ is not a member of ShopSchema.this.ColumnSet.Singleton[java.util.UUID]#Append[
[error]   |  ShopSchema.this.ColumnSet.Singleton[java.time.LocalDate]
[error]   |]#Append[ShopSchema.this.ColumnSet.Singleton[String]], but could be made available as an extension method.
[error]   |
[error]   |One of the following imports might make progress towards fixing the problem:
[error]   |
[error]   |  import ShopSchema.this.Expr.literal
[error]   |  import zio.sql.Examples.Expr.literal

or
[warn] -- Warning: /home/giacomo/projects/zio/jczuchnowski.zio-sql/jdbc/src/main/scala/zio/sql/jdbc.scala:305:51
[warn] 305 |      ZStream.unwrap(ZIO.access[ReadExecutor](_.get.execute(read) { resultType =>
[warn]     |                                                   ^
[warn]     |Scala 2 macro cannot be used in Dotty, this call will crash at runtime. See https://dotty.epfl.ch/docs/reference/dropped-features/macros.html

Thank you! It's progress, anyway.


SB Changes, Mobs Part 2 and Easter Things

Added Cosmetics
Added Mobs
Changed Mobs to Bestiary
Changed SC's Info
Changed "everything" from the last SB Update
Added Dante Things
Big Pr poggers

bruh

Iron have fun :)

Ahhhh, so much reading, it looks good but I am going to test in-game just to double check

Ahhhh, so much reading, it looks good but I am going to test in-game just to double check

yea sure, tested it on 2 different pc's and it works fine

Ahhhh, so much reading, it looks good but I am going to test in-game just to double check

yea sure, tested it on 2 different pc's and it works fine

I don't need moul yelling at me

Ahhhh, so much reading, it looks good but I am going to test in-game just to double check

yea sure, tested it on 2 different pc's and it works fine

I don't need moul yelling at me

xd


Improvement: Set the owner on an extension

Before getting all the available method names.
This enhances the extensions to enable certain features like adding wrapper methods on construct instead of having to have them on the object itself.

Can you show me an example of user code that would benefit from this change? I think I need to see it in context before I can make a judgement call on this.

Tests stalled, restarted. :D

It's used in the encryption module, to set custom handling of getting the database values. To make a getter return the unencrypted value here:
https://github.com/madmatt/silverstripe-encrypt-at-rest/blob/master/code/extensions/EncryptDataObjectFieldsExtension.php
(Do note, this module is a very crude/cruel v0.0.1, so don't judge it too hard)
The specific use case here, is to be able to hook into the owner at construct. Otherwise, we are unable to check which fields are encrypted.
Other usecases would be, to setup custom functionality on core classes like member and file etc.

No I see, that's very useful.
I think you should squash this an try again to get the tests passing... travis is having a sulk today.

Yeah, I also need to add a slight fix.
Now, I'm checking if the method exists. But it should actually check, if the extension is of type Extension, so it won't accidentally call setOwner on a wrong type of class.
A case here, is for example using setOwner/getOwner on a user having items.
I'll fix and squash later this afternoon. It's lunchtime first ;)

Yeah that's a good idea; That would be a lot more robust. ;D

There we go. Green tests.
Does this feature require a test? I might be looking wrong, but I can't find an ExtensionTest.

I think so. :D
There is DataExtensionTest

Yes, I'm blind.
Now to think of a way on how to test it.

Maybe your extension adds a method that returns the name of the class that was set as the original object, and then you call that method and test that object string is returned?

Since it's specifically the call for allMethodsName, I've added the test to see if at that point of calling, the owner is known, by checking if the wrapperfunction name contains the name of the DataObject it's extending.
Created as a separate commit, seemed like the cleaner thing to do.

Ow, by the way, would it be useful to add a comment there?
And what's with the behat tests failing? :-1:

Hrm yeah, the travis-setup.php script seems to be failing, some repository can't be cloned?
@tractorcow This is merging into the 3 branch, has something changed/broken there maybe?

Problem is nothing to do with 3 branch; It's github rate limiting us.

@Firesphere do you have time this week to do any of the code cleanup suggestions? I don't think there's anything blocking merge, unless you are keen. :D
If you make any changes, it wouldn't hurt to squash at the same time. Ping me if you are ready.

Updated to use instanceof, squashed all into single commit.


Route53 dns rules?

I would like that all my load-balancer on all host are atomically registered with specific urls.
e.g.
domain1.mywebsite.com
domain2.mywebsite.com
domain3.mywebsite.com
etc... is this possible with the external-dns/route 53 catalog?

The route53 service creates entries for <service>.<stack>.<environment>.<hosted zone>.  You can CNAME these to other names.  You can also have a single balancer service that has routing rules for each of those subdomains.

This is what I'm doing right now:
I manually map Route53 to my load balancer:
domain1.mywebsite.com -> LB -> domain1 stack
domain2.mywebsite.com -> LB -> domain2 stack
domain3.mywebsite.com -> LB -> domain3 stack
and then my LB forwards to the corresponding service
The problem I have with how I do things now is that i manually have to add the hosts to route53.
Can the Route53 Rancher package solve this?
The  <service>.<stack>.<environment>.<hosted zone> doesn't make much sense to me or how I should use that... I end up with
loadbalancer.loadbalancer.default.mywebsite.com entries...

related related: https://github.com/rancher/rancher/issues/3440

Create a single CNAME entry for *.mywebsite.com (most providers support star) to loadbalancer.loadbalancer.default.mywebsite.com.  Anylabel.yourwebsite.com will resolve to the IPs of the load balancer service, which can do service routing based on the requestsHost header.


browser should not cutoff panes when opening + open scaled by font if possible

[ ] When opening browser, make sure all panes fit.
[ ] Open browsers based on font size changed in the Pharo Settings Browser.

JadeiteBrowser>>#initializeWindow: currently opens browsers at a default initialExtent: of 1600@1000. If that extent is changed to 1200@1000, the resulting browser has the method pane cutoff as in the picture.

Ideally, a browser's size wouldn't be initially fixed but would instead open based on the font size selected in Pharo. Pharo's browsers open this way.
Extra information:

SystemWindow>>initialize may hold some clues to how scaling and sizing are done. Not sure if some of these api's are available in Spec2 from which JfP windows are built.

Scale factor may also be a factor. Not sure quite what it does.

Pharo settings browser font selection & scale factor:

I didn't know about scale factor ... a scale factor of 0.7 gives me a usable project browser without having to resort to full screen mode ... and it (bosch/linux) compares favorably with a windows image (rebus/windows) that is not scaled:

in fact I have more usable screen real estate inside the bosch pharo window ...
I have yet to spend hours working in (bosch/linux) like I have in (rebus/windows) ...
I agree that that the JfP windows should scale with font size and the scroll bars should not cut off ... since that appears to be the way other pharo windows behave ...
I am still annoyed that even with scaling 1/5 of the window height  is dedicated to the header and footer ... if the shortcut buttons (including the autocommit button at the bottom) could be put on the same line as the menus and the empty gray space between the code pane and the autocommit button was eliminate we'd get a pretty good chunk of the "wasted real estate" back ...
Now that I'm using the scaling "workaround(?)" I don't feel that this is a super high priority item ...

Reduced wasted space on browser.

Per checkin, method pane no longer cutoff and browser scaled to font pointSize when opened.
I don't think it's possible to not display the tab of a notebook presenter when only one tab is shown. If it's really needed, let's open a new issue.

I made a short video on how JfP responds to Pharo font size changes.  I haven't tested with any other appearance tools in Pharo.
https://github.com/user-attachments/assets/a335d45f-2862-4372-8c99-cce411b7c649


Change type of threadDictionary objects to Any

On macOS the threadDictionary is an NSMutableDictionary, so the objects are of type Any. For consistency, it seems this should also use Any instead of AnyObject.
I stumbled upon this when looking at making this Regex library work on Linux. This particular line along with this one fails because MatchResult is a struct so it cannot be converted to AnyObject.

@swift-ci please test and merge


Add links to resources, use past tense

Updating the just finished LCI workshop event

Adding Link to the presentation, walkthrough and YouTube video
Putting the text into past tense

cc @joshmoore
built at https://snoopycrimecop.github.io/www.openmicroscopy.org/events/workshops-lci-karolinska-february-2023.html

"Updating the just finished LCI workshop event" :+1:
Adding Link to the presentation, walkthrough" :+1:
...and YouTube video :100:
"Putting the text into past tense" :+1:

I'll note that I used the events page to show the "interested parties" where you had been. I realized that it might could be easier to find (i.e. linked from multiple locations) but that's for another time. Thanks, @pwalczysko


[AVM Question/Feedback]: webdeploy_publish_basic_authentication_enabled  set to disabled if FTP state is set  to "FTPS only"

Check for previous/existing GitHub issues

[X] I have checked for previous/existing GitHub issues

Description
https://github.com/Azure/terraform-azurerm-avm-res-web-site/blob/f046263fd9685272d6853c87d8fe133d79164792/main.function_app.tf#L28C3-L28C155
webdeploy_publish_basic_authentication_enabled = var.site_config.ftps_state == "AllAllowed" ? var.webdeploy_publish_basic_authentication_enabled : false
I have site_config ftps_state set to "FtpsOnly" and I have set both
webdeploy_publish_basic_authentication_enabled = true
ftp_publish_basic_authentication_enabled = true
but it appears that code above sets webdeploy_publish_basic_authentication_enabled  to true only if ftps_state is set to "AllAllowed"
In Azure portal I can set FTP state to "FTPS only" and set both Basic auth publishing credential as well as "FTP basic auth"  to "On"
How can I then do this via the module?
I want to set
both Basic auth publishing credential as well as "FTP basic auth"  to "On" as well as FTP state to "FTPS only"
Thanks.

Hello @vaiddas - will be taking a look into this. Just to make you aware, there may be some provider issue in which you will have to manually toggle the FTP basic auth on in the portal, even with the logical fix to code.

addressed in v0.6.0 release

Hi @donovm4 - sorry to ask again but is this fixed or do I still need to toggle the basic auth in the portal?
I tried with v.0.6.0 and I am seeing
 + webdeploy_publish_basic_authentication_enabled = false
and I think it's because of
webdeploy_publish_basic_authentication_enabled = var.site_config.ftps_state == "AllAllowed" ? var.webdeploy_publish_basic_authentication_enabled : false
and I have set ftps_state to "FtpsOnly".

@vaiddas - no worries, the goal is to work out the bugs :)
I will double check - I believe I made the fix for the azurerm_linux_function_app, missed to update it for the azurerm_windows_function_app, azurerm_linux_web_app, and azurerm_windows_web_app after testing the fix.

NOTE: I will double-check in my testing, but there may indeed be a provider issue from what I remember that may require you to toggle through portal still. Let me make the rest of the updates and let's see if it ends up working for you (if you are willing to provide feedback)

Hi @donovm4 - sure. I will let you know but I am using azurerm_linux_function_app only and still see  webdeploy_publish_basic_authentication_enabled set to false if I set ftps_state to "Ftpsonly"

This is the logic that should work below. If ftps is disabled (which it is by default), set the basic auth to false, but if "AllAllowed" or "FtpsOnly", then evaluate boolean.
webdeploy_publish_basic_authentication_enabled = var.site_config.ftps_state == "Disabled" ? false : var.webdeploy_publish_basic_authentication_enabled

This is some of the module call below in main.tf. Ensure that the value is "FtpsOnly" as it has to be that exactly, to be evaluated correctly.
...
# This is the module call
module "test" {
  source = "../../"

  # source             = "Azure/avm-res-web-site/azurerm"
  # version = "0.6.1"

  enable_telemetry = false

  name                = "${module.naming.app_service.name_unique}-linux"
  resource_group_name = azurerm_resource_group.example.name
  location            = azurerm_resource_group.example.location

  kind    = "webapp"
  os_type = azurerm_service_plan.example.os_type

  service_plan_resource_id = azurerm_service_plan.example.id

  site_config = {
    ftps_state = "FtpsOnly"
  }
}

This is copy & pasted from my terminal while testing, just cleaned up a bit:
Terraform will perform the following actions:

  # azurerm_resource_group.example will be created
  + resource "azurerm_resource_group" "example" {
      ...
    }

  # azurerm_service_plan.example will be created
  + resource "azurerm_service_plan" "example" {
      ...
    }

  # random_integer.region_index will be created
  + resource "random_integer" "region_index" {
      ...
    }

  # module.naming.random_string.first_letter will be created
  + resource "random_string" "first_letter" {
      ...
    }

  # module.naming.random_string.main will be created
  + resource "random_string" "main" {
      ...
    }

  # module.test.azurerm_application_insights.this[0] will be created
  + resource "azurerm_application_insights" "this" {
      ...
    }

  # module.test.azurerm_linux_web_app.this[0] will be created
  + resource "azurerm_linux_web_app" "this" {
      ...
      + ftp_publish_basic_authentication_enabled       = true
      ...
      + webdeploy_publish_basic_authentication_enabled = true
      ...

      + site_config {
          ...
          + ftps_state                              = "FtpsOnly"
          ...
        }
    }

Plan: 7 to add, 0 to change, 0 to destroy.

Changes to Outputs:
  + name         = (known after apply)
  + resource     = (sensitive value)
  + resource_uri = (known after apply)

I believe the logic works. This plan was on a linux web app, but this is the logic currently on the v0.6.0 for linux function app.
In my investigation, I discovered that I may have a policy inherited from security side that audits and prevents all App Services from using basic authentication and local authentication. I can attempt to test on a different tenant, but would you be able to check if you have such policies active?

@vaiddas - apologies if this is confusing, but I think I have found our issue. When you set ftps_state to "AllAllowed", you can then set the ftp basic auth to on as desired, but if you set ftps_state to "FtpsOnly" it disables FTP authentication (as it resolves in Azure). That is probably why I initially coded the conditional that way.
FTP for plain text and FTPS for secure connections

Yes, I was about to update.
In my case I have set
webdeploy_publish_basic_authentication_enabled = true
ftp_publish_basic_authentication_enabled = true

and
set
ftps_state = "FtpsOnly"
but I still see
  + webdeploy_publish_basic_authentication_enabled = false

@vaiddas - I have been able to test this configuration with v0.6.0 in a tenant with no policies configured:
terraform {
  required_version = ">= 1.3.0"
  required_providers {
    azurerm = {
      source  = "hashicorp/azurerm"
      version = ">= 3.7.0, < 4.0.0"
    }
    random = {
      source  = "hashicorp/random"
      version = ">= 3.5.0, < 4.0.0"
    }
  }
}

# tflint-ignore: terraform_module_provider_declaration, terraform_output_separate, terraform_variable_separate
provider "azurerm" {
  features {
    resource_group {
      prevent_deletion_if_contains_resources = false
    }
  }
}

## Section to provide a random Azure region for the resource group
# This allows us to randomize the region for the resource group.
module "regions" {
  source  = "Azure/regions/azurerm"
  version = ">= 0.3.0"
}

# This allows us to randomize the region for the resource group.
resource "random_integer" "region_index" {
  max = length(local.azure_regions) - 1
  min = 0
}
## End of section to provide a random Azure region for the resource group

# This ensures we have unique CAF compliant names for our resources.
module "naming" {
  source  = "Azure/naming/azurerm"
  version = ">= 0.3.0"
}

# This is required for resource modules
resource "azurerm_resource_group" "example" {
  location = local.azure_regions[random_integer.region_index.result]
  name     = module.naming.resource_group.name_unique
}

# This is the module call
module "test" {

  source             = "Azure/avm-res-web-site/azurerm"
  version = "0.6.0"

  enable_telemetry = false

  name                = "${module.naming.app_service.name_unique}-linux"
  resource_group_name = azurerm_resource_group.example.name
  location            = azurerm_resource_group.example.location

  kind    = "functionapp"
  os_type = "Linux"

  site_config = {
    ftps_state = "FtpsOnly"
  }

  create_service_plan = true
  new_service_plan = {
    sku_name = "S1"
  }

  function_app_create_storage_account = true
  function_app_storage_account = {
    name                = module.naming.storage_account.name_unique
    resource_group_name = azurerm_resource_group.example.name
  }
}

terraform apply and terraform plan (post-deployment) return smoothly with no issues / changes, and both SCM and FTP basic authentication settings stay toggled to on.
I will push another version with the updates to the logic for all app services for basic auth toggles, as well as an example deployment for basic auth with ftps_state configured to "FtpsOnly"
Would you be able to check to ensure there are no conflicting policies on your tenant. If there are policies that you cannot bypass, I would recommend not using FTP (plain-text) if possible, if recommended by security best practices.

Also ensure that you run a terraform init -upgrade for the newest version after referencing a new version

@donovm4 - I have no other policy configured.
Btw, I am using "webapp" and not "functionapp" but looks like code is same ( although different TF files )
I actually hardcoded all values and tested but still see

webdeploy_publish_basic_authentication_enabled = false

module "test" {
  source  = "Azure/avm-res-web-site/azurerm"
  version = "0.6.0"

  enable_telemetry = false
  webdeploy_publish_basic_authentication_enabled = true

  name                = "xxxxxxx"
  resource_group_name = "xxxxxxx"
  location            = "australiaeast"

  kind    = "webapp"
  os_type = "Linux"

  service_plan_resource_id = "xxxxxxxx"

     site_config = {
      ftps_state = "FtpsOnly"
    }
 }

Understood - as mentioned earlier, the fix was made for linux function app for 0.6.0 initial for testing, so the logic would only work for linux function apps.
I am about to publish a new version that will allow for all of the app services

addressed in v0.6.1 release

@donovm4  - Thanks works now.


Schematic for Bare ESP8266 Module (ESP-12F) - Review Needed

Hello, I am working on building a schematic for a bare ESP8266 chip, and would like a review of what I have so far. I am trying to figure out if I have the correct resistors in the right places for pull up or pull down usage where needed, as well as the button correctly wired for  shorting to ground in order to program the ESP module when needed. Once I have the connections to the ESP module squared away, I will then work on the power portion. Please take a look and let me know what you think:

I am having trouble finding exactly what bootstrap resistors are actually required. The NodeMCU dev board schematic https://github.com/nodemcu/nodemcu-devkit-v1.0/blob/master/NODEMCU_DEVKIT_V1.0.PDF has pull up resistors on RST, EN, GPIO 0, GPIO 2; and pull down resistor on GPIO 15.

The ESP8266 Dev Kit schematic from Esspresif also has those resistors:

Note they also have capacitors to keep the RST/EN high.
So, I think some of those resistors could be omitted and rely on the internal resistors, but I think all the dev boards just include the external resistors to be sure.
Here's the power portion from NodeMCU:

And from Esspresif:

Here's the switches from NodeMCU:

And the switches from Esspressif:

Thank you so much! This is immensely helpful. I think most people use external resistors because the internal ones are a bit "weak" and it's incredibly cheap to add that extra layer of protection. I was originally thinking of using an AMS1117 for power, but I was looking at the spec sheet, and I don't think it will drop from 12v to 3.3v. Looks like most people use another converter to go from 12v to 5v, and then the AMS1117 to go from 5v to 3.3v. I was also thinking of using an XL1509 regulator to do a direct conversion, but that involves a ton of components. I have all those components (from a recent build of a number of OpenSprinklers), but I don't know if that's the best choice for others to use...

Thank you so much! This is immensely helpful. I think most people use external resistors because the internal ones are a bit "weak" and it's incredibly cheap to add that extra layer of protection. I was originally thinking of using an AMS1117 for power, but I was looking at the spec sheet, and I don't think it will drop from 12v to 3.3v. Looks like most people use another converter to go from 12v to 5v, and then the AMS1117 to go from 5v to 3.3v. I was also thinking of using an XL1509 regulator to do a direct conversion, but that involves a ton of components. I have all those components (from a recent build of a number of OpenSprinklers), but I don't know if that's the best choice for others to use...

On my other project I have which uses an Arduino Nano Every, if I switch to using raw ATmega microcontrollers I'll be designing a PCB which uses an MPM3610 single-chip voltage regulator.  Basically, there are parts out there we can use which consolidate everything into a nice tiny package, and are designed to work in noisy environments.

I'm glad you are doing this.  I was going to, as it would have been cheaper to get the entire thing built.  I was impatient and just bought the D1 Minis.  With this, it will be very easy for anyone to just order whatever number of boards they want.

I have taken a stab at this and just submitted a PR for the bare 8266 version. I opted to just shove a buck converter on the board for voltage regulation, as it already had the circuit laid out, and was cheaper than the MPM3610. I am going to get this board sent to JLCPCB and give it a shot in a couple weeks. :)

I should have my boards from JLXPCB with the D1 mini on the 24th.

I have taken a stab at this and just submitted a PR for the bare 8266 version. I opted to just shove a buck converter on the board for voltage regulation, as it already had the circuit laid out, and was cheaper than the MPM3610. I am going to get this board sent to JLCPCB and give it a shot in a couple weeks. :)

So, funny story....PCBWay want to sponsor some free boards for mentioning them in the project.

Also, as I put out a schematic for the bare ESP8266, I will close this issue.

Curious why you didn't go with a usb port?  that would have made it super easy to flash with ESP-Home.

Curious why you didn't go with a usb port? that would have made it super easy to flash with ESP-Home.

I don't know... I have a USB to TTL adaptor, so I figured I would put the header on and be done with it. I'm very amateur in my ability to design PCB boards, so that probably added to the decision. ;) A USB port would be easy to add to the design, though.

Plus, wouldn't I need to add a USB driver chip (like the CH340) to the design?

yes it would


Full text search problems

Hi.
We are experiencing some full text search problems, or maybe we are using it the wrong way.
We have index as
...
"user.address.city" : {type : "text", analyzer : "german"},
...

And we are using filter and query option to search for all records that match the name or partially match the name, meaning they contain substring of the searched string.
We have used wildcard, contains, prefix, you name it but the search is weird. We have for example Indianer-Dorf and if we type i we get nothing then in again nothing then all up to india then we see this record and if we continue typing ner we are not getting any records back. Also if we just type re, we have examples that are starting with re or have re somewhere in the string and so on but we are not getting all the matches.
We are using Cassandra version 2.2.4 and plugin version <IP_ADDRESS>.

@daniyel are you sure this issue is related to this library/plugin? As there is no <IP_ADDRESS> version and don't seems to get the link between a full text search and a datepicker
Can you provide some more info?

@acrobat i found what was the issue, i think there is somewhere else one ticket with same problem, we set the type "text" instead of "string" now it is working as expected with the search, just did not realize how the text and analyzer work in the first place.
Thank you for your help. I will put the link to the issue, where I found solution.


Support installation on OpenShift/OKD >= 4.14 without DeploymentConfig

DeploymentConfig is deprecated starting with OpenShift/OKD 4.14 and should no longer be used.
Is your feature request related to a problem? Please describe.
Trying to install the Argo CD operator on such a cluster without DeploymentConfig enabled results in argocd-operator-controller-manager crashlooping with:
ERROR setup problem running manager {"error": "failed to wait for argocd caches to sync: timed out waiting for cache to be synced for Kind *v1.DeploymentConfig"}

Describe the solution you'd like
Ensure the operator works on OCP/OKD clusters that don't have the DeploymentConfig capability enabled. Normal Kubernetes Deployment manifests can be used instead.
Describe alternatives you've considered
None, since the resource is already deprecated and will be removed from OpenShift/OKD soon.

Thank you @psy-q for creating the issue. We have some on-going efforts to address this in https://github.com/argoproj-labs/argocd-operator/pull/1329.

Hi all
Sorry to bump this, but we ran into this on a new cluster as well.
From what I can tell the "fixing" Pull Request was merged and "released" as part of 0.11.0, however, that versions seems to be not available, from neither the OperatorHub nor the community operators.
Since there is no documentation regarding the release process, I was wondering if the release is still being staged or if something else is missing?
Thank you for any insights you could provide!

Hi @ti8m-dah,
Sorry for the confusion. We have cut a GitHub release for 0.11.0, however, the operator is not yet available on OperatorHub or the community operators. The current release process for the operator is manual, which sometimes leads to delays. We are in the process of streamlining our release pipeline to automate it for quicker releases and better visibility for users.
As for 0.11.0 release, it should be available on OperatorHub in next few weeks. I will communicate here once it's released.

Hi @svghadi
Thank you for your response and resolving the confusion!
I know the pain too well for not automated release workflows, sadly I have no experience with releasing OperatorSDK projects, otherwise I would have been happy to support with GitHub Action know-how.

Hi @ti8m-dah,
The 0.11.0 version of the operator is now available on OpenShift Community Operators. However, due to a backend issue on the OperatorHub side, the latest version is not yet available for Kubernetes users. We are following up with the OperatorHub team on this.

Hi @svghadi
Thank you very much for the update and best of luck with the fix for the OperatorHub!


improve in the plus operator

improve in the plus operator.
BP to: https://github.com/JavaMoney/jsr354-ri/pull/97

Hi, did you see this:
[ERROR] /home/travis/build/JavaMoney/jsr354-ri-bp/src/main/java/org/javamoney/moneta/internal/convert/AbstractECBRateProvider.java:[29,24] package java.util.stream does not exist
Seems you had some SE 8 code that must be fixed/ported for BP;-)

@werner Loking it now.

I forget an import of Java 8.
Removed


Teleport: Update Rules

This PR updates the Gravitational Teleport rule set.

The documentation links for existing rules needed some updating to new locations
Added the name of the Teleport cluster into some of titles (useful for multi-cluster organizations)
Added a Rule to detect local user logins without using multi-factor auth
Added a Rule to detect the creation of Teleport Locks (used to pre-emptively disable previously-issued certificates)
Added a Rule to detect the creation of abnormally long-lived certificates
Added a Rule to detect when Roles are created
Added a Rule to detect logins as root
Added a Rule to detect the creation of SAML connectors

@arielkr256 -- good call on the .deep_get() access style; way more readable. Added your suggestions.


Add new MacCloud v2 IPs and move them to a separate file

We've been provided with the new IP list yet it's really huge so it's better to keep it in a separate file.

@andymckay could you please review and merge this PR?

I think you'll need to update setup.py so that when we build an sdist bundle it includes the ".txt" file, otherwise I believe it gets ignored:
 ~/c/actions-ips   add-more-maccloud-v2-ips ●  python3 setup.py sdist
running sdist
running egg_info
creating actions_ips.egg-info
writing actions_ips.egg-info/PKG-INFO
writing dependency_links to actions_ips.egg-info/dependency_links.txt
writing requirements to actions_ips.egg-info/requires.txt
writing top-level names to actions_ips.egg-info/top_level.txt
writing manifest file 'actions_ips.egg-info/SOURCES.txt'
reading manifest file 'actions_ips.egg-info/SOURCES.txt'
writing manifest file 'actions_ips.egg-info/SOURCES.txt'
running check
creating actions-ips-0.2
creating actions-ips-0.2/actions_ips.egg-info
copying files to actions-ips-0.2...
copying README.md -> actions-ips-0.2
copying setup.py -> actions-ips-0.2
copying actions_ips.egg-info/PKG-INFO -> actions-ips-0.2/actions_ips.egg-info
copying actions_ips.egg-info/SOURCES.txt -> actions-ips-0.2/actions_ips.egg-info
copying actions_ips.egg-info/dependency_links.txt -> actions-ips-0.2/actions_ips.egg-info
copying actions_ips.egg-info/requires.txt -> actions-ips-0.2/actions_ips.egg-info
copying actions_ips.egg-info/top_level.txt -> actions-ips-0.2/actions_ips.egg-info
copying actions_ips.egg-info/zip-safe -> actions-ips-0.2/actions_ips.egg-info
Writing actions-ips-0.2/setup.cfg
creating dist
Creating tar archive
removing 'actions-ips-0.2' (and everything under it)

That would cause pip install of this repo to file because it wouldn't be able to find it. I think that's the case anyway.

@andymckay add it as an additional data file, looks good now
thebestmbpever:fork-actions-ips mikhail.timofeev$ python3 setup.py sdist
running sdist
running egg_info
writing actions_ips.egg-info/PKG-INFO
writing dependency_links to actions_ips.egg-info/dependency_links.txt
writing requirements to actions_ips.egg-info/requires.txt
writing top-level names to actions_ips.egg-info/top_level.txt
writing manifest file 'actions_ips.egg-info/SOURCES.txt'
adding license file 'LICENSE' (matched pattern 'LICEN[CS]E*')
reading manifest file 'actions_ips.egg-info/SOURCES.txt'
writing manifest file 'actions_ips.egg-info/SOURCES.txt'
running check
creating actions-ips-0.2
creating actions-ips-0.2/actions_ips.egg-info
copying files to actions-ips-0.2...
copying LICENSE -> actions-ips-0.2
copying README.md -> actions-ips-0.2
copying macips.txt -> actions-ips-0.2
copying setup.py -> actions-ips-0.2
copying actions_ips.egg-info/PKG-INFO -> actions-ips-0.2/actions_ips.egg-info
copying actions_ips.egg-info/SOURCES.txt -> actions-ips-0.2/actions_ips.egg-info
copying actions_ips.egg-info/dependency_links.txt -> actions-ips-0.2/actions_ips.egg-info
copying actions_ips.egg-info/requires.txt -> actions-ips-0.2/actions_ips.egg-info
copying actions_ips.egg-info/top_level.txt -> actions-ips-0.2/actions_ips.egg-info
copying actions_ips.egg-info/zip-safe -> actions-ips-0.2/actions_ips.egg-info
Writing actions-ips-0.2/setup.cfg
Creating tar archive
removing 'actions-ips-0.2' (and everything under it)

BTW, should I bump the version in the setup.py from 0.2 to 0.3?

Great, thanks @miketimofeev, yep let's bump the version to 0.3 as well.

@andymckay bumped, thanks!

Thanks @miketimofeev!


Paper Discussion 15a: Chaos: a System for Criticality-Aware, Multi-core Coordination

paper link
Have fun :)

Reviewer Name: Pat Cody
Review Type: Critical
Problem Being Solved
Keeping mixed-criticality systems secure when running on a single multicore device is challenging due to the complexities of inter-core coordination. A frequent problem is interference, when lower assurance code generates too many interrupts and impacts the performance of the high-assurance code. However, running each assurance level as a VM has high overhead costs and makes it impractical.
Main Contributions
CHAOS provides a separate runtime environment with the bare necessities (simple bear necessities) to devirtualize high-assurance/high-criticality code, such that it is not tied to the execution of the lower-assurance code. Instead, the two runtimes communicate via proxies. If the code running in ChaosRT (the high-assurance code) needs data available from the low-assurance code, it can make a request using the proxies. Chaos was implemented within NASA's Core Flight System (cFS), and it relies on a handful of key features provided by the Composite OS.
Questions

It seems like this system requires dedicating a core to the high-assurance code. What are the tradeoffs of this?
Could this scale to multiple assurance levels (does it even make sense to)?

Critiques

Dense: I'd love to know the JpS (Jargon per Sentence) count on this, there was a lot to understand. Some terms were also introduced without proper explanation (e.g. the words multicore system gradually were replaced by MCS, but there was no explicit definition of what an MCS is).
Given how deeply technical this topic is, maybe a higher-level example or walkthrough would have helped explain some of the benefits/use-cases.

Reviewer: Sam Frey
Review Type: Skim
Problem
To reduce size and power consumption, many embedded systems requiring multiple execution streams have transitioned away from multiple single-core processors in favor of a single multi-core processor. Having a multi-core processor adds complexity for systems that run software with differing levels of criticality. Interrupts from low criticality software can interfere with high criticality software.
Contributions
Chaos lowers interference by removing high criticality software from the primary subsystem and allowing it to run in a minimal ChaosRT environment without interruption. Chaos improved processing latency by a factor of 2.7 compared to a standard Linux real-time environment while also improving isolation of critical code.

Reviewer: Jacob Cannizzaro
Type: Comprehend/Skim
Problem:
With the trend of switching from single core processors to single multicore processors, there can be a lot of interference from less critical tasks taking up processing time as well as introduces more contention for shared resources. This adds a lot of overhead when trying to run all of this code, no matter the assurance level, in one place.
Main Contributions:
This paper uses Chaos to devirtualize some tasks. By taking tasks that are highly critical, and running them in a minimal ChaosRT environment, VM's don't have to have as much overhead, and communication can be dealt with with proxies. Communication now flows from lower priority tasks to higher functionality VM using the help of proxies that are abl to bound interference and latency. This reduces the worst case latency of a system by 3.5 that of the Linux equivalent.

Reviewer: Andrew Nguyen
Review Type: Skim
Problem
There is a need to minimize size and power of embedded systems. Many systems move to a single stream processor in order to achieve this making it difficult to coordinate high & low criticality tasks. The paper introduces Chaos that devirtualizes to obtain high criticality tasks.
Contributions
Chaos reduces interference through its devirtualization process like previously mentioned. Tasks are isolated and moved to the ChaosRt environment that enables high-assurance & high-criticality tasks. These are also done in rate-limiting servers. The paper then looks into the design, the scenarios of interference, synchronic communications, and the implementations of it.

Reviewer: Henry Jaensch
Review Type: Skim
Problem Being Solved
Embedded systems are moving toward using one chip for all of the tasks on the system. This paper proposes a way to maintain criticality and high resource efficiency when mixing many components and functions on the same processor. The priority here is to maintain efficient feature rich user applications while also providing isolation guarantees for high criticality processes.
Main Contributions
The paper introduces CHAOS a system for de-virtualizing high-criticality systems so that deadlines can be met without interference from other applications with lower-criticality. This is achieved by providing CHAOS RT which is a bare bones runtime that allows predictable execution of tasks. In order to support communication between mixed criticality tasks proxies are used to maintain feature richness.
Question

What's the difference between bounded asynchronous communication and synchronous communication?

Why was Linux one of the choices for comparison here? Mixed assurance and criticality yes, but Linux doesn't make any real-time guarantees.

Reviewer: Marcus Young
Review Type: Skim
Problem
Modern embedded systems are increasingly using single multi-core processors that are asked to process extremely complex tasks with different criticality levels. Since these systems are using a single multi-core processor instead of multiple single-core processors, there is a need to extract high criticality tasks to run them in a minimal runtime environment in order to improve human or equipment safety.
Contributions
Chaos removes high criticality software from the primary subsystem and puts it in a ChaosRT minimal runtime environment. Chaos improved processing latency for a sensor/actuation loop in satellite software experiencing inter-core interference by a factor of 2.7 while reducing worst-case by a factor of 3.5 over a real-time Linux variant.

Reviewer: Rachell Kim
Review Type: Skim
Problem Being Solved:
Embedded systems using multi-core processors to support mixed-criticality and multi-assurance levels often face difficulty in enforcing strict isolation between subsystems. Because shared abstractions between cores may trigger interference, it is important to protect high-criticality tasks from faults caused by subsystems of low-assurance and low-criticality. Moreover, systems must also maintain high-confidence in correctness while supporting feature-rich software, and this condition is considered to be difficult to maintain with current technology.
Main Contributions:
The authors of this paper propose a system called Chaos, which aims to remove interference caused by inter-core coordination in multi-core systems via devirtualization of high-criticality tasks. High-criticality tasks are moved into an execution environment called ChaosRT, thereby allowing predictable execution with minimal interference from shared subsystems. This paper also outlines example situations in which shared memory and inter-core coordination may impact the execution of high-criticality code.
Questions:

Could the proxies and ChaosRT environment provide more points of failure in place of removing IPI overhead?

Reviewer Name: Becky Shanley
Review Type: Critical
Problem Being Solved
Embedded systems struggle to manage the balance between minimizing SWaP (Size, Weight, and Power) and providing time guarantees and resources to the highest priority processes. In embedded systems, this problem is much more severe because high priority tasks usually include detrimental impacts on the physical world and the safety of humans. It's a difficult problem to solve because of the requirement that the high priority tasks work with the lower priority tasks to provide many real-time functionalities that cannot afford to be completely separated.
Main Contributions
CHAOS is a devirtualization system that is used to guarantee that the high priority tasks have access to the resources and low-latency requirements they need. It achieves this by extracting high priority tasks into CHAOSrt, a real-time environment that is separated from the interference of potentially low assurance level tasks. In all, this paper contributes to the problem domain by:

evaluating the impact low assurance tasks can have on the high priority tasks in the same runtime
introducing the devirtualization runtime CHAOS
the technique that utilizes InterProcess Interrupts rate-limiting to bound interference from this communication method and bounds latency
An evaluation of CHAOS to reliability-focused systems

Questions

Why is there an evaluation of CHAOS on Linux at all? Since most embedded devices aren't running Linux, how meaningful is the comparison of CHAOS on a real-time OS versus CHAOS on Linux?
Since IPI and Shared Memory both have their pros and cons, why was it decided to go with IPI? Rate-limiting reads like a complex process and I'm curious to know if it was ever explored to try to solve the problems of shared memory in the same way that it was explored to solve the problems with IPI.

Critiques

As mentioned before, this paper is dense. It was dense to the point of being extremely difficult to get anything meaningful out of in the first skim. It got to a point where I was checking references and googling words at least once in a paragraph.
The use of the world "devirtualization"-- it's explained in a footnote, and after a deep read I get why it's called this, but it also feels unnecessarily confusing. As a person who tends to google everything I don't understand, in my first skim I was very confused because I missed the footnote and was trying to apply compiler devirtualization to this paper, which, is not helpful.

Reviewer: Sean McBride
Review Type: Simple Skim
Problem Being Solved:
How can one consolidate mixed criticality workloads onto shared multi-core systems? Also, how can one leverage the more differentiated QOS attributes of a modern RTOS to provide better assurance guarantees to industry-standard software systems that run mixed criticality subsystems on a shared POSIX backend?
Main Contributions

Modifies composite, an existing RTOS, to provide Chaos RT, a minimal sandbox that can run high assurance code and transparently communicate with a low assurance sandbox via software proxies.
Uses devirtualization to extract high criticality sections from legacy systems running on nonspecialized operating systems that combine mixed-criticality workloads into Chaos RT.
Applies a rate limiting technique to preemptive messages passed via inter process interrupts from rump software in a low-criticality sandboxes to the sandbox running high-criticality devirtualized work to limit interference.
Uses TCaps (delegration of time) to coordinate different user-level schedulers in the different sandboxes
Demonstrates that application of this technique to the cFS software stack used in NASA missions (which depends on a POSIX backend) using a NetBSD rumpkernel.

Reviewer Name: Eric Wendt
Review Type: Critical
Problem Being Solved:
Some of the fundamental problems that need addressing are size, weight, and power for IoT devices. Finding a good balance for these requirements is exceedingly difficult, combining techniques from both hardware and software. This paper dives into software solutions focusing on cutting down interference between highly-critical tasks and lower tasks.
Main Contributions
Fortunately, many of the main contributions are laid out in a distinct sub-header in the paper.

Outlining how low-criticality tasks can interfere with high-criticality tasks. Useful graphs are including to demonstrate impact.
Detail of a technique called devirtualization which will cut down on interference between high and low tasks without compromising on dependency between the two.
IPI rate limiting technique which allows CHAOS to bound IPI latency.
Evaluation of CHAOS on multiple operating systems.

Questions:

This paper mentions that Composite uses wait-free operations based on raw atomic instructions. What does this mean? How is this different from Linux?
What is thread migration?

Critiques:

There are a lot of terms in this paper I am not familiar with. I assume someone more knowledgeable would have an easier time with this, but from an outsider it's a little bit of a headache.
Performance metrics and charts at the end were done very well.
A coverage of security would lend itself nicely here.

Sorry for the late post, lost power for a few hours.

Reviewer: Ryan Fisk
Review Type: Critical
Problem Being Solved
Embedded systems are increasingly required to run many different processes at varying degrees of criticality. High-criticality systems need to run at a high priority to protect human or equipment safety, whereas lower-criticality systems are nice to have, but not as important. Due to resource constraints on IoT devices, these processes have to be scheduled by the same processor, and the underlying hardware overhead for deciding which processes run can cause interference with high priority tasks.
Contributions
The paper introduces ChaosRT, a minimal runtime environment that removes high-criticality tasks from the management system of the VM it normally would run on and thus minimizes or eliminates interference from lower priority tasks. Tasks that are removed from the VM can still communicate with the higher-priority tasks using proxies that handle communication between the devirtualized, higher criticality tasks and the rest of the system.
Questions

If a devirtualized system required sensor readings or some other data that was gathered in a lower priority task, wouldn't it still have to wait for that task to complete and for the proxy to get the information?

Why does devirtualization work so well for this? I'm confused as to how this reduces interference from other tasks.

What happens if there is more IPI interference than allowed messages for a certain task?

Critiques

The example of the NASA cFS system they used to explain the problems with virtualization was really helpful, I would've liked to see an example using ChaosRT when they talked about the implementation.

What security concerns are there with the proxy? Can it be spoofed to send bad data to a safety critical system?

Reviewer:  Huachuan Wang
Review Type: Skim
Problem being solved
Embedded systems are increasingly required to provide both complicated feature-sets, and high-confidence in the correctness of mission-critical computations. Functionalities traditionally performed are consolidated onto less expensive and more capable multi-core, commodity processors are very complicated. Supporting feature-rich, general computation and high-confidence physical control is difficult.
Contributions
This paper presented Chaos which could effectively use the increased throughput of multi-core machines and ensuring the necessary isolation between tasks of different criticalities and assurance-levels. Chaos also devirtualizes high criticality tasks to remove the overhead.

Devirtualization to extract high-criticality subsystems from lower-assurance legacy systems while maintaining functional dependencies and predictable inter-core message passing mechanisms.
IPI rate-limiting technique enables Chaos to bound the IPI interference and latency of notifications for inter-core coordination.


Connector status wording

What issues does this PR close?
Closes #270
### Checklist
- [x] The PR title is short and expressive.
- [x] I have updated the CHANGELOG.md. See [changelog_update.md](https://github.com/sovity/authority-portal/tree/main/docs/dev/changelog_updates.md) for more information.
- [x] I have performed a **self-review**

there're a few other places like fake backend in frontend where these statuses should be fixed, especially "dead"


feat: replacing audit view tests part 4

Summary of changes

replace more int by E2E tests
fix yarn test:changed script (do not run E2E tests with jest)
remove unnecessary NumberBox from AuditingSubPanel: this number box was only shown in the case when the input was disabled anyways thus defeating its purpose

Context and reason for change
Closes #2253.
How can the changes be tested
Run locally and see CI/CD.

Looks good to me (just one nitpicking comment from my side) and thanks for the explanatory comments concerning the changes not directly related to the replacement. As discussed I think there is one test missing about adding a merged signal, would be good if you could add this one as well.

Thanks for catching that. I've added assertions to ensure that a merged signal which multiple comments, when converted to an attribution, no longer contains any comments.


ReactTable/MobX: data update not reflected in table

What version of React-Table are you using?
6.8.0
What bug are you experiencing, or what feature are you proposing?
Table is not updating custom cell contents when data changes. I'm not sure if this is an issue with ReactTable or my code. Please help
Use https://codesandbox.io/s/X6npLXPRW (by clicking the "Fork" button) to reproduce the issue.
https://codesandbox.io/s/jp882l3m2w
What are the steps to reproduce the issue?

Edit text areas in the table Price column.
You'll see in the console that the onChange() handler is being triggered and the store items are updated.
Table cells are not updated

This is a very basic MobX example with ReactTable.  It does not have an editable field in it but the buttons at the Add a record and Update with a random string.
Maybe that will help.  I don't have anything more complex as I don't use MobX.
https://codesandbox.io/s/kkmxl8moq5

Thank you @gary-menzel . I see that there's an issue with ReactTable not playing well with ObservableArray so I modified my example above to resemble you example as much as possible (cloning the observable array data and extracting the custom cell into it's own observable) but the results are the same and the change is again not picked up by the table. I'm really baffled as to why this is not working.

I also modified your example to add an update column with a text editor cell. The result is the same. Here https://codesandbox.io/s/p98vqqyy27

It's working now.....
https://codesandbox.io/s/z2v7m0kvml
You were adding a member called newTask to the object rather than changing the task member.  I found it by enabling the console.log that prints out the state at the top of the render before ReactTable.  It was changing but the value was not changing the text field.

Thank you @gary-menzel . So in my case it all comes down to the difference between reassigning a new object this.todos[index] = { ...this.todos[index], task } than modifying the existing one this.todos[index].price = newPrice. The former works and latter doesn't. Pretty interesting :thinking:

This is pretty common in tools like Redux and MobX - even though I don't use them, I have adopted the habit of updating in that way in normal Javascript (and I really don't think about it now).  The idea is you don't change an object you create a new one.  That gives you immutability even without using immutable.js. However, it means you have to commit to using it everywhere.
Glad it is working now.

it doesn't work for expand mode, use subrows field


Error loading wikihow dataset

Describe the bug
When attempting to load wikihow into a dataset with
from datasets import load_dataset
dataset = load_dataset('wikihow', data_dir='./wikihow')

I get the message:
AttributeError: 'BuilderConfig' object has no attribute 'filename'

at the end of a full stack trace.
Steps to reproduce the bug
I have followed the instructions for creating a wikihow dataset. The wikihow dataset site says to use
from datasets import load_dataset
dataset = load_dataset('wikihow')

to load the dataset. I do so and I get the message
AssertionError: The dataset wikihow with config all requires manual data.
 Please follow the manual download instructions:   You need to manually download two wikihow files. An overview of which files to download can be seen at https://github.com/mahnazkoupaee/WikiHow-Dataset.
  You need to download the following two files manually:
    1) https://ucsb.app.box.com/s/ap23l8gafpezf4tq3wapr6u8241zz358 and save the file under <path/to/folder>/wikihowAll.csv
    2) https://ucsb.app.box.com/s/7yq601ijl1lzvlfu4rjdbbxforzd2oag and save the file under <path/to/folder>/wikihowSep.csv

  The <path/to/folder> can e.g. be "~/manual_wikihow_data".

  Wikihow can then be loaded using the following command `datasets.load_dataset("wikihow", data_dir="<path/to/folder>")`.
  .
 Manual data can be loaded with `datasets.load_dataset(wikihow, data_dir='<path/to/manual/data>')

So I create a directory ./wikihow and download wikihowAll.csv and wikihowSep.csv into the new directory.
Then I run
from datasets import load_dataset
dataset = load_dataset('wikihow', data_dir='./wikihow')

that's when I get the stack trace
Expected results
I expected it to load the downloaded files into a dataset.
Actual results
Using custom data configuration default-data_dir=.%2Fwikihow
Downloading and preparing dataset wikihow/default (download: Unknown size, generated: Unknown size, post-processed: Unknown size, total: Unknown size) to /home/azureuser/.cache/huggingface/datasets/wikihow/default-data_dir=.%2Fwikihow/0.0.0/58f42f8f0e4d459811a0f69aaab35870093830ccd58006769e7e1eb3e0e686c2...                                                    ---------------------------------------------------------------------------
AttributeError
Traceback (most recent call last)
<ipython-input-9-5e4d40142f30> in <module>
----> 1 dataset = load_dataset('wikihow',data_dir='./wikihow')
~/.local/lib/python3.6/site-packages/datasets/load.py in load_dataset(path, name, data_dir, data_files, split, cache_dir, features, download_config, download_mode, ignore_verifications, keep_in_memory, save_infos, script_version, use_auth_token, **config_kwargs)
745         try_from_hf_gcs=try_from_hf_gcs,
746         base_path=base_path,-->
747         use_auth_token=use_auth_token,
748     )
749
~/.local/lib/python3.6/site-packages/datasets/builder.py in download_and_prepare(self, download_config, download_mode, ignore_verifications, try_from_hf_gcs, dl_manager, base_path, use_auth_token, **download_and_prepare_kwargs)
577                     if not downloaded_from_gcs:
578                         self._download_and_prepare(                                                             -->
579                             dl_manager=dl_manager, verify_infos=verify_infos, **download_and_prepare_kwargs
580                         )
581                     # Sync info
~/.local/lib/python3.6/site-packages/datasets/builder.py in _download_and_prepare(self, dl_manager, verify_infos, **prepare_split_kwargs)
632         split_dict = SplitDict(dataset_name=self.name)
633         split_generators_kwargs = self._make_split_generators_kwargs(prepare_split_kwargs)                      -->
634         split_generators = self._split_generators(dl_manager, **split_generators_kwargs)
635
636         # Checksums verification
~/.cache/huggingface/modules/datasets_modules/datasets/wikihow/58f42f8f0e4d459811a0f69aaab35870093830ccd58006769e7e1eb3e0e686c2/wikihow.py in _split_generators(self, dl_manager)
132
133         path_to_manual_file = os.path.join(
--> 134             os.path.abspath(os.path.expanduser(dl_manager.manual_dir)), self.config.filename
135         )
136
AttributeError: 'BuilderConfig' object has no attribute 'filename'

Versions
Paste the output of the following code:
import datasets
import sys
import platform

print(f"""
- Datasets: {datasets.__version__}
- Python: {sys.version}
- Platform: {platform.platform()}
""")

- Datasets: 1.5.0
- Python: 3.6.9 (default, Jan 26 2021, 15:33:00)                                      [GCC 8.4.0]
- Platform: Linux-5.4.0-1046-azure-x86_64-with-Ubuntu-18.04-bionic

Hi @odellus, thanks for reporting.
The wikihow dataset has 2 versions:

all: Consisting of the concatenation of all paragraphs as the articles and the bold lines as the reference summaries.
sep: Consisting of each paragraph and its summary.

Therefore, in order to load it, you have to specify which version you would like, for example:
dataset = load_dataset('wikihow', 'all')

Please, tell me if this solves your problem.

Good call out. I did try that and that's when it told me to download the
dataset. Don't believe I have tried it with local files. Will try first
thing in the morning and get back to you.
On Mon, Apr 19, 2021, 11:17 PM Albert Villanova del Moral <
@.***> wrote:

Hi @odellus https://github.com/odellus, thanks for reporting.
The wikihow dataset has 2 versions:

all: Consisting of the concatenation of all paragraphs as the
articles and the bold lines as the reference summaries.
sep: Consisting of each paragraph and its summary.

Therefore, in order to load it, you have to specify which version you
would like, for example:
dataset = load_dataset('wikihow', 'all')
Please, tell me if this solves your problem.
—
You are receiving this because you were mentioned.
Reply to this email directly, view it on GitHub
https://github.com/huggingface/datasets/issues/2239#issuecomment-823004146,
or unsubscribe
https://github.com/notifications/unsubscribe-auth/ABDYI3HVRTBI2QT3BOG262DTJUL57ANCNFSM43GV5BZQ
.

Hi @odellus, yes you are right.
Due to the server where the wikihow dataset is hosted, the dataset can't be downloaded automatically by huggingface and you have to download it manually as you did.
Nevertheless, you have to specify which dataset version you would like to load anyway:
dataset = load_dataset('wikihow', 'all', data_dir='./wikihow')

or
dataset = load_dataset('wikihow', 'sep', data_dir='./wikihow')

I find that the instructions given by huggingface are not clear enough: I am going to fix this.
Please tell me if this eventually works for you.

That was it. Thank you Albert!


Autoconfiguration's sensible default for connection pool needs better override hook

Right now after deploying spring boot application on CF, it just assigns 4 connection pools, see below links. If we have to override we have to extend AbstractCloudConfig which disables rest of the auto configuration. If we have alternative please provide that solution.
(https://discuss.pivotal.io/hc/en-us/articles/221898227-Connection-pool-warning-message-maxIdle-is-larger-than-maxActive-setting-maxIdle-to-4-seen-in-PCF-deployed-Spring-app)
https://github.com/spring-cloud/spring-cloud-connectors/blob/master/spring-cloud-spring-service-connector/src/main/java/org/springframework/cloud/service/relational/DbcpLikePooledDataSourceCreator.java
http://stackoverflow.com/questions/42545645/cloud-foundry-spring-boot-data-source-pool-configuration

There isn't currently an alternative. If you need to override the default pool settings, you'll need to provide all service configuration.


itest: add new testCustomChannelsHtlcSuccess itest

Pushed up a rebase.

itests are racy right now due to sweeper/block timing, experimenting with either using BumpFee to trigger an immediate sweep or, be more lax w.r.t asserting which block mines the target txn.

Pushed up a rebase to reference the latest version of https://github.com/lightninglabs/taproot-assets/pull/1154.

Updated to ref the latest tapd+lnd.

Pushed up a new version!
Ran this for 30 minutes on my laptop and didn't get a flake. If it flakes on CI, I should be able to address it easily, given all the quality time spent with this test.
I also added a final assertion to make sure both Alice and Bob can send all the swept funds to a 3rd party.

Pushed up a rebase.


Provide wget in gcr.io/buildpacks/builder

I built a container image registry service that fetches source from GitHub and builds and serves images just-in-time, at pull-time: https://kontain.me/
One of the ways it builds is using buildpacks:
docker pull buildpack.kontain.me/buildpack/sample-java-app:25b3fcb

Currently it's hard-coded to use packs/samples:v3alpha2 and I was looking into switching it to gcr.io/buildpacks/builder instead.
Unfortunately, the way the service works, it relies on wget being installed in the builder image, which happens to be the case for packs/samples:v3alpha2, but isn't the case for this builder.
Is there any way I can convince you to install wget, so this service can port over?

I was looking into switching it to gcr.io/buildpacks/builder instead.

That'd be amazing!

Is there any way I can convince you to install wget, so this service can port over?

I have a counter proposal, since we already have curl installed, could that line be switched to curl -fsSL % | ... instead? I think that should be functionally equivalent.

@lukasberger Perfect! I've got it detecting and building now, but /lifecycle/exporter now fails because creds aren't being found, even though the Cloud Run app should be authorizing as the service account.
failed to export: failed to write image to the following tags: [gcr.io/kontainme/built-9790736: GET https://gcr.io/v2/token?scope=repository%3Akontainme%2Fbuilt-9790736%3Apush%2Cpull&service=gcr.io: UNAUTHORIZED: You don't have the needed permissions to perform this operation, and you may have invalid credentials. To authenticate your request, follow the steps in: https://cloud.google.com/container-registry/docs/advanced-authentication]
...
ERROR: Running "/lifecycle/exporter -layers=/tmp/598153606 -app=/tmp/390773763/sample-go -image=packs/run:v3alpha2 -group=/tmp/598153606/group.toml gcr.io/kontainme/built-9790736": exit status 1

Is the gcr cred helper available and configured in the image? This worked without any special work with packs/samples:v3alpha2, where /lifecycle/exporter accepted a -helpers=true flag. Is there any flag like that for this builder's /lifecycle/exporter?

Ah, it looks like it was removed in buildpacks/lifecycle#121 (RFC). I think you mind need to add the GCR credential helper to .docker/config.json manually.

Looks like it's not included in the image?
failed to get previous image: error getting credentials - err: exec: "docker-credential-gcr": executable file not found in $PATH, out: ``

Should that be in the image or on the machine running the image? pack for example seems to use the host's credentials helper.

Should that be in the image or on the machine running the image? pack for example seems to use the host's credentials helper.

In this case, I'm expecting it to be in the builder image. The way buildpack.kontain.me works is that it's a Cloud Run app, running a container image that is effectively FROM gcr.io/buildpacks/builder, with a little Go server in front of it that serves the Docker registry API. When it comes time to build, it calls the /lifecycle/detect, etc., binaries present in the image. When it goes to push, it expected to find the GCR cred helper to help it do that, and that worked when it was FROM pack/samples:v3alpha2.
I got it working though, by just generating a ~/.docker/config.json with an access token directly, which has the benefit of not needing any cred helpers to work.


Store files on disk/cloud

We're storing screenshots and HTML data in the DB; that was great for development but is causing problems in production. Let's refactor the app to store the files on disk or S3.

Resolved in 365d957d45fdf5f494d634847ebddd215ae35e9d


Version Numbering

After using the MSI to install the Powershell cmdlets, the Control Panel shows the same version number <IP_ADDRESS> as the previously installed version. It would helpful if the version numbers would change so that we could ensure what we have installed.

Fixed in the new releases. Thx for submitting and reporting.


C++23 Has Fixed The reinterpret_cast Problem

https://www.open-std.org/jtc1/sc22/wg21/docs/papers/2022/p2590r2.pdf
start_lifetime_as

I just wish it were constexpr.


A suggested PR for issue #1214: fixed a bug in score_prefix for grouped instance scores

A suggested PR for issue #1214: fixed a bug in score_prefix for grouped instance scores

Hi @ellarabi , could you please check your case (from Issue # 1214) on this branch?
It is suggested to use a score_prefix that ends with _ (e.g., main_ , so that it does not glue to the following score_name.

thanks @dafnapension! the fix works for me


create question and add new none Chinese tag, the tag page 404 not found

version: 1.0.6

test question page: test add tag - DevWiki Q&A
https://qa.devwiki.net/questions/10010000000000035

the Chinese tag page: '中文标签测试' 问题 - DevWiki Q&A
https://qa.devwiki.net/tags/中文标签测试

the none Chinese tag: '中文标签测试' 问题 - DevWiki Q&A
https://qa.devwiki.net/tags/NewTag

the tag list page: https://qa.devwiki.net/tags

必现步骤:
创建新问题增加非中文标签, 必然404.  中文标签正常.

@LinkinStars

1.0.7 仍然存在此问题

I can fix it. But I need to talk about it.

We will fix this in the next release, as well as make some changes to the tag function

We will fix this in the next release, as well as make some changes to the tag function

I want to join the community and contribute to the project

We will fix this in the next release, as well as make some changes to the tag function

1.0.8 1.0.9 仍有此问题


Add Your Music not working

**OS:**Windows 10 64 bit
Issue Descriptions: Menu Icon disappearing and Add music from Library doesn't work

Steps to Reproduce: I do not have a subscription to GPM yet, so I cannot confirm if that is why somethings are not showing, but clicking on add music from library no options pop up to allow for music to be added. Additionally, the menu bars icon disappears from the top left.

It's not supposed to at the moment.  The only reason you can get to the button is because your google play music is a blank slate (I have never tested from a clean account)
Implementing file upload requires spoofing the chrome:// URI scheme and faking an awful lot of file access API's that are part of chrome, but not part of chromium.  We would have to fake those through the main processes fs access
TLDR: Big task, buts its on a TODO list somewhere nearby :+1:

Unfortunately this means you will have to use the official ways (the music manager or the web version) to upload your music for know

OK! That seems pretty difficult thanks for the answer!!
On Tue, Mar 8, 2016 at 5:17 PM, Samuel Attard<EMAIL_ADDRESS>wrote:

Unfortunately this means you will have to use the official ways (the music
manager or the web version) to upload your music for know
—
Reply to this email directly or view it on GitHub
https://github.com/MarshallOfSound/Google-Play-Music-Desktop-Player-UNOFFICIAL-/issues/377#issuecomment-193844987
.


Improper spacing between icons and text in social buttons

1 - Describe the bug : I found out that there was an improper spacing between the text and login icon in the social button's block menu.
2 - Expected behavior of what should have happened (if applicable): Proper spacing as provided in the basic menu / round menu is expected as shown below.

3 - Screenshots (if applicable): The icon here appears very close to the text.
Here i have shown only few buttons, other buttons like these are also facing the same issue.

4 - Additional notes: Increasing the padding might solve the issue.

I'm not really seeing this problem on my end. Can you provide more info on this (screen width, device and browser, etc...). Please also make sure that this is not due to the cache (by hard refreshing it) as I think we had this problem before and we resolved it. Thank you!

Yes you are right , it seems that there is a problem with my browser (Google Chrome) , i saw it on Firefox  and it's all right firefox.
Thank You for your guidance.

@hmankodiya is it a cache issue or something else that needs to be worked on?

It seems to be not working while using   Google Chrome or even Microsoft Edge but works fine on Firefox, i even  tried browsing it out on chrome of different PCs  but still the same issue prevails.
As for cache issue, i cleared the browsing history and the cache but it doesn't seem to work .

Can you provide me with the screen width?

yes the screen width of my laptop is 15.6 in with a screen resolution of 1920 x 1080

I'm still not seeing this @hmankodiya on my side but will leave this up in case anyone can reproduce this. You can also submit a PR for this if you have a fix.


Carousel not working on iPhone

Hi
I have been using this carousel for dev work but have noticed it is not working on iPhone 6. There is just a blank space where the carousel should be.
Anyone else had this issue and know any way to rectify?
thanks
Joe

I was having the same problem and found this 2834. Had to do some tweaks because of my specific needs but it worked!


Conventions

Reviewer checklist

[ ] Read the contributing guide
[ ] PR should be motivated, i.e. what does it fix, why, and if relevant, how
[ ] Ensure relevant issues are linked (description should include text like "Fixes #")
[ ] Ensure any appropriate documentation has been added or amended

Coverage: 97.79%. Remained the same when pulling db5fc26a9c5cd6bc15f21971d1c86f9bc88c4965 on conventions into 288bd6b41d88d65488c0ab14c062212bd69e11c3 on main.


Read Password should not enter a newline

Hi, thanks for your nice handy library!
I have a minor issue: readpassword.read("Prompt:") should not introduce a newline, as System.console().readPassword("Prompt:") does.
Also readpassword.read has side effects (it's doing IO) and thus should have braces, e.g. read().  But this would be API breaking.
If you want I can also file a PR.

Hi @nob13 :wave:
Thanks for the report! No worries about the breaking change, I will publish a new minor version after this.
I will apply your suggestions today.
By the way, PRs are always welcome :blush:

@nob13
Here's the new version containing your suggestions:
https://github.com/hnaderi/scala-readpass/releases/tag/v0.2.0
It's being published and going to be available on maven central soon.

Ah cool, thanks alot!! :-)


Submission to Julia General Registry

@JuliaRegistrator register()

Error while trying to register: "Pre-release version not allowed"


feat: add iraq country

Add Iraq country to list

Thanks for the contribution, @jamalmohamad! I've merged it in my fork (see the commit referenced above) and the changes are live.


py_appengine.bzl:211:48:  name 'FileType' is not defined

I am running to build and deploy GnG Web app but I am getting issue in py_appengine.bzl
name 'File Type' is not defined. Below is my terminal commands and result:
PS C:\GitHub\loaner\loaner> bash deployments/deploy.sh web prod
INFO: Checking for gcloud on PATH and version...
Updates are available for some Cloud SDK components.  To install them,
please run:
$ gcloud components updateSUCCESS: gcloud was found on PATH and is at or above the minimum version.
INFO: Checking for bazel on PATH and version...
SUCCESS: bazel was found on PATH and is at or above the minimum version.
INFO: Checking for npm on PATH and version...
SUCCESS: npm was found on PATH and is at or above the minimum version.
INFO: Checking gcloud authentication...
INFO: Going to the loaner directory...
INFO: Initiating the build of the python deployment script...
ERROR: /root/.cache/bazel/_bazel_root/1f2ddb62dcbcd7f4a2e5e5a23f2dced6/external/io_bazel_rules_appengine/appengine/py_appengine.bzl:211:48:
name 'FileType' is not defined
ERROR: error loading package '': Extension 'appengine/py_appengine.bzl' has errors
ERROR: error loading package '': Extension 'appengine/py_appengine.bzl' has errors
INFO: Elapsed time: 0.286s
INFO: 0 processes.
FAILED: Build did NOT complete successfully (0 packages loaded)
PS C:\GitHub\loaner\loaner>
Please anyone help me why am I getting this issue ?

We needed to downgrade our version of Bazel to one that still had the FileType definition - 0.19.2 I think worked for us.

@mattford63
I have installed Build label: 0.29.1. How can I downgared this ? or Uninstall it.

I used:
rm -fr ~/.bazel ~/.bazelrc
rm -rf ~/.cache/bazel
David Aulick
Promevo | Customer Engineer
<EMAIL_ADDRESS>| promevo.com
On Fri, Oct 11, 2019 at 12:11 AM Ashraf Talib<EMAIL_ADDRESS>wrote:

@mattford63 https://github.com/mattford63
I have installed Build label: 0.29.1. How can I downgared this ? or
Uninstall it.
—
You are receiving this because you are subscribed to this thread.
Reply to this email directly, view it on GitHub
https://github.com/google/loaner/issues/76?email_source=notifications&email_token=ALGD54TTV5SCV75HX2T5V43QN74FXA5CNFSM4I7IAM3KYY3PNVWWK3TUL52HS4DFVREXG43VMVBW63LNMVXHJKTDN5WW2ZLOORPWSZGOEA6WGCY#issuecomment-540893963,
or unsubscribe
https://github.com/notifications/unsubscribe-auth/ALGD54RQTU4CELIJR2LHCRLQN74FXANCNFSM4I7IAM3A
.

If you're on Debian/Ubuntu, it's pretty straightforward if you download the .deb package from the Bazel repository and then install it. It looks like you are on Windows, so you should just need to download and install this exe from Bazel.
https://github.com/bazelbuild/bazel/releases/download/0.23.0/bazel-0.23.0-windows-x86_64.exe
https://github.com/bazelbuild/bazel/releases/tag/0.23.0

We needed to downgrade our version of Bazel to one that still had the FileType definition - 0.19.2 I think worked for us.

This also worked for us. Although I had to uninstall the current version of bazel


Feature/database newable

Tests are failing on this one. I guess updating the branch should fix the issue

Let's wait for https://github.com/mesg-foundation/core/pull/478 to be merged first


Npm Script Explorer tries to execute the labels of a task instead of the script

VSCode Version: 1.36.0, 1.36.1
OS Version: Windows 10 Pro 1809 (build 17763.437)

Steps to Reproduce:

Setup any task in the package.json.
Create a task of type NPM with any label different form the script name.
Try to run that task via NPM SCRIPTS
It seems like VSCode is trying to execute the label instead of the script.
BTW: Executing the task in the command panel works fine:

I've also recorded the issue see video in the zip file:
video_vscode_npm_scipt_bug.zip

Does this issue occur when all extensions are disabled?: Yes

Just installed the new release.
Issue still available in 1.36.1.

(Experimental duplicate detection)
Thanks for submitting this issue. Please also check if it is already covered by an existing one, like:

Stop script in NPM Script Explorer (#49738)
Newly created npm scripts are not picked up by the explorer (#48544)
Pin task in the npm script explorer (#73786)
Can't execute task inside VS Code after VS Code update (#73817)

These are no duplicates of this problem.

Does no one have the same problem or do I something wrong?
Is it maybe not intended to use task.json together with package.json (npm scripts)?

@daniel-schulz not clear what your exact scenario is, but if you just want to run a script from the package.json, then you do not need to define tasks. Can you just delete your 'tasks.json' file and try to run the scripts from the NPM Script Explorer directly.
If this doesn't do what you want, then please provide a package.json and tasks.json file so that we can easily reproduce the problem.

@egamma Thank you for the reply. I want to use the tasks.json to provide readable labels for my NPM scripts from the package.json.
I've attached a simple workspace with example package.json and  tasks.json files.
npm-scripts-issue.zip

Thanks for the repro, the issue is confirmed.
The code had a check that the script name exists in the package.json, which doesn't work when the task is defined in the tasks.json. I've removed guard.

Thank you very much @egamma.


Sometimes IPython widget fails to display

First, View creation failed Backbone.Model.extend.constructor, then Exception in Comm callback TypeError: Cannot read property '$el' of null TypeError: Cannot read property '$el' of null

intermittent, I can't replicate!
IPython version 2.3.1, Python 2.7.6

I was just using the widgets in IPython 3 today and I didn't see this come up. I'll keep an eye out though.

Old GraphWidget has been replaced by FigureWidget in version 3.


I keep getting this crash and I think it's caused by mekanism...

http://pastebin.com/QtLSsVLR
Mekanism V8.1.2

Update forge. 8.1.2 uses a newer forge version than 1291. My server uses 1374 iirc.

1291 has forge handling fluids whereas forge made a change at 1348 if memory serves me to have the mods do fluid management.

Oh okay thanks
On Sat, May 16, 2015 at 8:21 PM, RAWRwins254<EMAIL_ADDRESS>wrote:

1291 has forge handling fluids whereas forge made a change at 1348 if
memory serves me to have the mods do fluid management.
—
Reply to this email directly or view it on GitHub
https://github.com/aidancbrady/Mekanism/issues/2668#issuecomment-102719730
.

Just to get it right, it was changed in 1355


Fix up issue with legacy matcher formatting.

Prior matchers would format "organization/" rather than a standard glob
formatting like "organziations/**".  This fixes legacy support for
"organziation/" for old-style constraints.

Added unit test.


Incompatible with Next.js 15 canary

Hey All, we at Payload are extremely excited about getting this to work with our platform. People are asking about running Payload on Cloudflare quite often, and there is a lot of potential here.
Payload's version 3 is now built on Next.js but is still in beta and thus requires Next.js v15.0.0-canary.173 or higher.
We followed the getting started docs here, then attempted to upgrade to the latest Next.js + React versions and received the following errors:
/Users/elliot/dev/sandbox/my-next-app/node_modules/.pnpm/wrangler@3.80.0_@cloudflare+workers-types@4.20241004.0/node_modules/wrangler/wrangler-dist/cli.js:29768
            throw a;
            ^
{
  type: 'error',
  reason: 'Failed to construct initial bundle',
  cause: UserError: Failed to build
      at bundleWorker (/Users/elliot/dev/sandbox/my-next-app/node_modules/.pnpm/wrangler@3.80.0_@cloudflare+workers-types@4.20241004.0/node_modules/wrangler/wrangler-dist/cli.js:165378:15)
      at process.processTicksAndRejections (node:internal/process/task_queues:95:5)
      at async build (/Users/elliot/dev/sandbox/my-next-app/node_modules/.pnpm/wrangler@3.80.0_@cloudflare+workers-types@4.20241004.0/node_modules/wrangler/wrangler-dist/cli.js:175368:59),
  source: 'BundlerController',
  data: undefined
}

We realize we're on the cutting edge here, but we're very excited to try this out. We'd like to know when we should try again.

Supporting v15 is definitely on our radar but not before the official release.
Our priority for now is to converge with Open Next/SST. It will enable moving faster in the future.

I am also trying to deploy the Payload 3.0 app which uses Next 15. I am able to build the app using wrangler successfully, just that when running the local server it throws errors.
Here are the error logs:
--- 2024-10-09T05:11:35.740Z debug
[InspectorProxyWorker] RUNTIME INCOMING MESSAGE {
  method: 'Runtime.consoleAPICalled',
  params: {
    type: 'error',
    args: [ [Object], [Object] ],
    executionContextId: 283096929,
    timestamp:<PHONE_NUMBER>732,
    stackTrace: { callFrames: [Array] }
  }
}
---

--- 2024-10-09T05:11:42.559Z error
✘ [ERROR] Failed to prepare server Error: An error occurred while loading the instrumentation hook

Next.js v15 is now out!
https://github.com/vercel/next.js/releases/tag/v15.0.0

Is there an update or ETA for Next.js 15 support?

Probably second half of November

Hi.. Any update on this?

@denolfe, Opennext is compatible with Next.js 15. You can test it using the following prerelease package:
pnpm add https://pkg.pr.new/@opennextjs/cloudflare@184

☝ when trying https://pkg.pr.new/@opennextjs/cloudflare@184 be aware that it is on the experimental branch and the config has to be updated.
See https://github.com/opennextjs/opennextjs-cloudflare?tab=readme-ov-file#preleases and https://github.com/opennextjs/opennextjs-cloudflare/blob/experimental/packages/cloudflare/README.md

This should have been fixed in main / release 0.3.0.
Feel free to re-open if you still have issues.


Shadows: Fix shadow light frustum calculation

Please make sure to label your PR with "bug", "new feature" or "breaking change" label(s).
To prevent this PR from going to the changelog marked it with the "skip changelog" label.

Snapshot stored with reference name:
refs/pull/14206/merge
Test environment:
https://babylonsnapshots.z22.web.core.windows.net/refs/pull/14206/merge/index.html
To test a playground add it to the URL, for example:
https://babylonsnapshots.z22.web.core.windows.net/refs/pull/14206/merge/index.html#WGZLGJ#4600
Links to test babylon tools with this snapshot:
https://playground.babylonjs.com/?snapshot=refs/pull/14206/merge
https://sandbox.babylonjs.com/?snapshot=refs/pull/14206/merge
https://gui.babylonjs.com/?snapshot=refs/pull/14206/merge
https://nme.babylonjs.com/?snapshot=refs/pull/14206/merge
To test the snapshot in the playground with a playground ID add it after the snapshot query string:
https://playground.babylonjs.com/?snapshot=refs/pull/14206/merge#BCU1XR#0


Please add Laravel 7 support

@Dalamar what am I missing? We released Laravel 7 support 8 days ago (at the time of this comment).
https://github.com/getsentry/sentry-laravel/releases/tag/1.7.0
Maybe you have your dependency set to a lower version still?

Terribly sorry!
My bad.
I checked the compatibility at packagist.org in illuminate/support section and apparently I was confused by the line break after ^6.0 as I din't notice ^7.0 in next line :)

Ahh no problem, you gave me a quick scare there 😉
If you do run into an issue please do open up a new issue!


Add minimap2 to wdl

This builds on top of the previous pull request, and adds minimap2 to the non-host alignment wdl but hides it behind a flag.

@morsecodist I think this is ready to look at.


feat: [TOL-1405] Replace throttling with debounce in field editors

Replacing throttling logic with debounce to prevent laggy updates of state inside of input fields.

LGTM 🎉
One question does this introduce any strange behaviour for dropdown for example? Basically editors which do not have very fast changes anyways

It shouldn't as currently throttling is turned off for dropdowns, lists, etc. We do the same with debouncing.


feat: add field create_aws_s3_bucket_public_access_block to variable runner_worker_cache

Description
Some organizations may disallow configuring block public access settings on individual S3 buckets. For example, the organization may use account level configuration to block public access on all buckets.
To support this, we add the field create_aws_s3_bucket_public_access_block to the runner_worker_cache variable.
We add count to the aws_s3_bucket_public_access_block resource to control its creation and use the moved keyword to ensure that existing instances of this resource are not recreated due to this change.
Migrations required
No. Migrations are automatically handled by moved keyword.
Verification
Applied this module with the create_aws_s3_bucket_public_access_block field set to false. The aws_s3_bucket_public_access_block resource was not created. All other resources were created as expected.

Did some quick tests in my environment. Looks good to me.